Nvidia's China Loophole: How an Empty Office Became a Chip Export Gateway

Nvidia is selling its most capable AI chips to Chinese firms connected to US-blacklisted entities, with the Trump administration collecting a 15% cut of every sale and the Commerce Department approving buyers that, in at least one case, do not appear to exist.

The arrangement exposes a structural flaw at the intersection of export control policy and commercial incentive. The New York Times reported that New Matrix, a company incorporated 17 months ago, appears on the Commerce Department's approved buyer list for Nvidia's H200 AI chips. When Times reporters visited the address New Matrix lists as its registered office, they found an empty building described as "a hollow gray shell with wires dangling from the ceiling where lights should be." A company directory at the address contains no listing for New Matrix. Property management staff at the nearby industrial park stated they had no record of the firm .

The owners of New Matrix have documented ties to a Chinese private equity firm that has been subject to US government blacklisting since 2024. The Times characterized the New Matrix situation not as an isolated compliance failure, but as part of a broader pattern of entities connected to nationally restricted parties obtaining clearance to purchase Nvidia chips .

The arrangement under which Nvidia resumed China sales is specific. The Trump administration lifted Biden-era chip export restrictions after Nvidia agreed to pay the US government 15% of all sales made under the revised framework. Nvidia CEO Jensen Huang led a lobbying effort to secure the policy reversal. Separately, Huang was reportedly targeted by China's Ministry of State Security in an intelligence operation .

The 15% Revenue Share: Who Benefits and Who Bears the Risk

The royalty structure negotiated between Nvidia and the Trump administration transfers a portion of chip sale revenue to the federal government in exchange for market access. The commercial logic for Nvidia is straightforward: China represents one of the largest addressable markets for high-performance AI compute, and years of export restrictions had locked the company out.

15%: the government's negotiated cut of Nvidia China chip sales, a revenue-sharing arrangement with no disclosed precedent in US semiconductor export control history.

What the structure does not resolve is liability. The Commerce Department retains responsibility for vetting approved buyers. If approved buyers are shells, fronts, or entities connected to blacklisted firms, the revenue flows to both Nvidia and the federal government while the national security risk accrues to US interests. The incentive structure, by design, rewards approvals and creates no financial penalty for inadequate vetting.

The implication for institutional investors: Nvidia's China revenue is now partially encumbered by a government revenue share and exposed to retroactive enforcement risk if approved buyers are later found to be in violation. .

Geopolitical Compression: Macao, Beijing, and the Enforcement Signal

The same week the Nvidia-China chip story surfaced, a Macao court sentenced former pro-democracy lawmaker Au Kam San to 12½ years in prison in the territory's first national security case since its 2009 security law was enacted. Au, 69, was convicted of subverting state power, breaching confidentiality, and establishing contact with external organizations for purposes the court deemed a threat to national security .

The timing matters for investors pricing China political risk. Beijing's willingness to prosecute a 69-year-old first-time offender under national security statutes in a jurisdiction historically regarded as lower-profile than Hong Kong signals that the enforcement perimeter around dissent and information is widening. Portuguese lawyer Jorge Menezes, who practices in Macao, stated that the case carries a message beyond Au himself, describing Macao as "a sort of laboratory" for how similar enforcement frameworks may be applied in Hong Kong .

Michael Polak, Au's international counsel, called on Portugal and the European Union to intervene, noting that "a sentence like that for someone of that age is a sentence for life" .

For institutional capital with China exposure, the convergence of a tightening political enforcement environment and a permeable chip export control regime creates compounding risk. The question is not whether individual transactions are profitable. It is whether the regulatory and geopolitical ground beneath those transactions is stable.

Export Controls as a Policy Tool: What the Pattern Signals

The New Matrix episode is not primarily a story about one empty office. It is a data point in a pattern that the Times identified as systemic. If companies with ties to blacklisted entities can obtain Commerce Department approval for H200 chip purchases, the control regime is producing the appearance of enforcement rather than the substance.

Source: The New York Times as reported by The Verge

This matters beyond semiconductors. The H200 is Nvidia's current-generation AI training chip. Access to it accelerates large model development. If the approved buyer list contains firms that do not operationally exist or that route purchases to blacklisted entities, the export control framework is functioning as documentation rather than deterrence.

Our view: the 15% revenue share structure creates a fiscal dependency that complicates enforcement. Any administration collecting revenue from Nvidia China sales has a material interest in those sales continuing. That interest is not aligned with rigorous vetting.

Cold Chain, Critical Infrastructure, and the Broader Threat Surface

Concurrent with the chip access story, Health-ISAC issued a security bulletin warning healthcare sector members about a wave of cyberattacks targeting refrigeration control systems. One attack compromised the French Blood Establishment, a major French blood bank, by manipulating a vendor's cold storage system to raise defrost and temperature thresholds to dangerous levels. The French Blood Establishment detected the activity in time to protect blood samples .

The Cybersecurity and Infrastructure Security Agency, the FBI, the Department of Health and Human Services, and the US Department of Agriculture released a joint fact sheet on threats to industrial refrigeration and cold chain monitoring systems. Brett Leatherman, director of FBI Cyber Branch Operations, stated the bureau is tracking actors targeting these systems "across critical infrastructure sectors globally, putting inventory and equipment at risk" .

Errol Weiss, chief security officer at Health-ISAC, stated in a written communication: "When threat actors manipulate operational technology like cold-chain storage and refrigeration units holding donor blood, plasma, or critical therapies, they aren't merely stealing data or locking down administrative files, they are directly endangering the physical resources required to sustain human life" .

Iran has been linked to at least one refrigeration attack in Israel. Pro-Russian groups NoName057(16) and Z-Pentest Alliance claimed responsibility for European incidents via Telegram posts. Investigators examining disruptions at US military bases are also examining Iran as a potential actor .

The connection to the Nvidia story is not incidental. Both cases demonstrate the same underlying condition: adversaries are probing the gaps between commercial systems and national security infrastructure, and finding them permeable.

The Plocamium View

The Nvidia-China chip arrangement is not primarily a trade story. It is a preview of how governments will attempt to monetize national security decisions rather than enforce them.

The 15% revenue share framework establishes a template. If the administration can extract a royalty from Nvidia in exchange for China market access, the same logic applies to other sectors where US export controls have created commercial pressure: advanced semiconductor equipment, quantum computing components, synthetic biology tools. Each restriction becomes a negotiating position rather than a hard limit.

For PE and institutional investors, this creates a specific risk category: regulatory arbitrage that is explicitly government-sanctioned but structurally unstable. Nvidia's China sales are permitted today under a framework that could be reversed, renegotiated, or invalidated if Congress acts, if a future administration changes course, or if the Commerce Department faces legal challenge over its vetting failures. Any of those outcomes reprices Nvidia's China revenue overnight.

The second-order effect runs through the entire AI supply chain. If H200 chips are reaching entities connected to blacklisted buyers, the compute advantage the US has sought to preserve through export controls is eroding in real time. That erosion has pricing implications for US AI infrastructure names whose valuations are partially premised on a durable US compute lead.

The Macao prosecution adds a political volatility premium. As Beijing demonstrates it will use national security statutes in lower-profile jurisdictions, the risk calculus for any business reliant on stable rule-of-law conditions in greater China shifts.

The cold chain attacks are the third leg. They demonstrate that adversaries are no longer limiting operations to data theft or ransomware. They are targeting physical infrastructure with direct human consequences. Healthcare, food supply, and logistics assets in institutional portfolios carry an operational technology risk that standard cybersecurity frameworks were not built to price.

The Bottom Line

The Nvidia China chip story is a compliance failure with fiscal incentives built into the failure. The government collects 15% of sales it is simultaneously responsible for restricting. That conflict of interest will not resolve itself. Congressional oversight or a legal challenge to the Commerce Department's approval process is the most likely forcing function. When that pressure arrives, Nvidia's China revenue exposure becomes a liability event, not just a headline risk.

Institutional capital should treat the approved buyer list as a material disclosure item, not a background administrative detail. The existence of approved buyers with no verifiable operations and ties to blacklisted entities is not an edge case. The Times identified it as a pattern. Patterns, in export control enforcement, have a way of becoming prosecutorial theories.