On 1 October 2026 the US Justice Department announced the arrest of Greg Lui, owner of Earthmade Computer Inc., a City of Industry, California company. A grand jury indictment returned on 29 September charges him with conspiracy to violate the Export Control Reform Act and Export Administration Regulations, outbound smuggling, and conspiracy to commit money laundering. Prosecutors allege more than $300 million in servers containing US-made GPUs reached China between 2023 and 2024. These are allegations; Lui is presumed innocent.
The case has been framed as a test of Malaysia's July 2025 Strategic Trade Permit requirement for US-origin AI chips. The record so far suggests something narrower and more useful: it shows why a transit-hub rule is only as good as the enforcement behind it.
What prosecutors allege
According to the Justice Department's release, the servers were shipped to Malaysia and Singapore, where no licence was required, and then reshipped to China without the licences Commerce requires. Earthmade allegedly received more than $176 million from two Malaysia-based freight-forwarding companies between January and October 2024.
The release gives a concrete example. In January 2024, Lui allegedly bought 27 servers for about $7.6 million and had them shipped from Los Angeles to Kuala Lumpur. In March 2024, a co-conspirator reportedly told a Malaysian official that the servers had been transshipped to a China-based buyer. The maximum penalties are 20 years on the conspiracy count, 20 on money laundering and 10 on smuggling. Commerce's Bureau of Industry and Security, the Defense Criminal Investigative Service and the FBI investigated.
The strongest case for tighter rules
The argument for stringent controls is serious. If advanced accelerators are a strategic input to military and surveillance capability, a licence requirement that stops at the US border is porous by design. Any intermediate country that asks no questions becomes a laundering step. On this view, Malaysia's rule is overdue, and the allegations are the proof.
Why the case does not yet test Malaysia's rule
The timeline matters. MITI announced the permit requirement on 14 July 2025, effective immediately. Every shipment detailed in the DOJ release, and the payment window of January to October 2024, predates it. The shipments the DOJ describes were not subject to the permit rule, so this case cannot show whether the rule works.
The rule itself is an interim measure. Bernama's report on the announcement says it rests on the catch-all provision in Section 12 of the Strategic Trade Act 2010. That provision requires notification at least 30 days before exporting, transshipping or transiting an item not on the Strategic Items List where there is knowledge or reasonable suspicion of misuse. MITI described the step as closing regulatory gaps while it reviews adding US-origin high-performance AI chips to the list, and said violators face strict legal action.
The design has a real strength. It targets movement out of Malaysia, not the chips that stay. MIDF Research told Bernama that importing US chips for domestic servers is outside the directive unless operators plan to move them abroad. That keeps Malaysia's data-centre build-out largely untouched, which is what a proportionate rule should do.
The weakness: a permit is a document, not a control
The DOJ's account of false paperwork given to US manufacturers about end users is the pattern to worry about. A permit regime asks exporters to describe the destination and end use. Someone willing to lie to a US supplier can lie on a Malaysian form too. The 30-day notice period only helps if someone checks the answers against shipment records, ownership and payment flows.
MITI's own FAQ on the Strategic Trade Act says applications require an End-Use Statement and technical specifications, and that records must be kept for at least six years. Those are the right tools. The test is whether Malaysian authorities use them, cooperate with US investigators, and prosecute at home. The DOJ's reference to a Malaysian official being informed of a transshipment shows that official awareness is not the same as scrutiny.
What proportionate policy looks like
A pro-innovation stance does not mean ignoring diversion. Smuggling is a crime, and Malaysia has a direct interest in not becoming a conduit. It is trying to build a credible data-centre and semiconductor industry, and a reputation as a leaky transit point invites blunter measures from Washington that would hurt legitimate buyers.
Three principles follow.
- Target the conduit, not the customer. Licensing re-exports, as Malaysia now does, is better than restricting domestic chip imports, which would punish the data centres the country wants.
- Enforce on evidence. Prosecutions of forwarders who falsify end-use claims deter more than a longer form. Success should be measured in cases and cooperation, not permit counts.
- Keep the rule narrow and transparent. Interim catch-all powers should give way to a defined list with published criteria, so legitimate exporters know what they face.
The Earthmade indictment, if proved, shows a scheme that exploited the gap before Malaysia's rule existed. Whether the rule closes that gap will be shown by the first Malaysian enforcement action against a transshipper, not by the next US indictment.