Southeast Asian countries are caught in a geopolitical squeeze, forced to balance economic growth against the risk of US sanctions if they fail to stop illegal chip diversion schemes. In May 2026, US authorities publicly flagged a Bangkok-based firm tied to Thailand's national artificial intelligence (AI) push for allegedly helping divert billions of dollars' worth of Nvidia-powered servers to Chinese companies, including Alibaba. The incident crystallizes a deeper problem: the region has become a critical battleground in the US-China AI chip war, where the stakes are both economic opportunity and national security.

The core tension is straightforward but intractable. Southeast Asian governments want data center and AI infrastructure investments to fuel their digital economies. Global semiconductor sales are projected to exceed $1 trillion by 2030, and Asian manufacturers are expected to significantly increase equipment spending as they shift to more advanced chip technologies. Yet Washington has made clear that it will not tolerate Chinese companies using local facilities to circumvent export controls on advanced graphics processing units (GPUs), the specialized chips essential for training large AI models.

What Changed in US Export Control Strategy?

The Trump administration's approach to AI chip exports has evolved dramatically. The US AI Diffusion Rule, introduced in January 2025, proved short-lived. By July 2025, data center investments were surging across the region, prompting Washington to shift tactics. Rather than imposing broad restrictions, the administration began preparing licensing requirements for advanced AI chip exports to Malaysia and Thailand.

The most significant change came through updated guidance from the Bureau of Industry and Security (BIS). Previously, US export rules focused on the buyer's location. The new guidance shifts the focus to ultimate ownership: any company whose parent is headquartered in China is now treated the same as one based in China, regardless of where its subsidiary operates in Southeast Asia. This seemingly technical change has enormous practical consequences for the region.

Why Is Verifying Ownership So Difficult?

The enforcement challenge lies in corporate opacity. Many Chinese technology firms use complex corporate structures involving multiple layers of holding companies, often registered in jurisdictions with limited transparency such as the British Virgin Islands, Cayman Islands, or Hong Kong. These structures frequently change through mergers, acquisitions, or internal reorganization. Data center operators and local regulators in Southeast Asia often lack access to reliable and up-to-date ownership information.

Determining whether a company is ultimately controlled by a Chinese parent requires extensive due diligence well beyond standard know-your-customer checks. This imposes a heavy compliance burden on Southeast Asian governments and operators, which must now verify full corporate ownership chains rather than just server location. For regulators seeking to manage rapid data center growth, this is a demanding task.

How Are Southeast Asian Countries Responding Differently?

The region's countries have adopted divergent strategies based on their exposure and regulatory capacity. Malaysia acted quickest, introducing in July 2025 a mandatory Strategic Trade Permit for the export, transshipment, and transit of high-performance US-origin AI chips. This signaled that Kuala Lumpur preferred tightening controls over risking its reputation as a weak link in Washington's enforcement efforts.

Thailand faces greater exposure. As part of national AI ambitions, data center investments have expanded rapidly, yet the May reports tying a Bangkok firm connected to sovereign AI efforts to alleged diversion schemes have created political and reputational pressure. Singapore operates from a significantly stronger position. The country already maintains robust export control and compliance systems, and its more mature data center sector gives it greater room to manage competing demands. Still, any perception that Chinese-owned entities are routing restricted chips through Singapore could damage its reputation as a well-regulated hub.

Steps for Southeast Asian Governments to Navigate the Dilemma

• Treat infrastructure as strategy: Governments need to treat data center and AI infrastructure decisions as matters of national economic and security strategy, not purely commercial ones. This requires deliberate choices about the kinds of investment that their countries want to attract and the compliance standards they are prepared to maintain.
• Strengthen verification systems: Southeast Asian governments should invest in building their own technical and institutional capacity to verify corporate ownership and end-use, rather than relying heavily on external guidance or pressure from Washington.
• Coordinate regionally: Officials should communicate clearly and consistently with both the US and China about their red lines and constraints. Governments would also benefit from greater regional coordination on export controls to avoid being played off against each other by external powers.

The real constraint for many governments in the region is not political will but institutional capacity. Effectively tracing complex corporate ownership structures and monitoring end-use across rapidly expanding data centers requires technical expertise and resources that several Southeast Asian regulators still lack.

The consequences of failure are severe. If a country is found enabling chip diversion, it risks US secondary sanctions that can sever access to advanced US technology and supply chains, undermining its own AI development plans and deterring other foreign investors concerned about similar restrictions. Conversely, leaning too aggressively toward US compliance risks alienating Beijing and losing a major source of digital infrastructure capital.

As US enforcement grows more sophisticated and regional demand for advanced computing capacity continues to rise, the dilemma for Southeast Asian countries is unlikely to recede. Managing this tension requires more than ad hoc responses. The region's leaders must walk a geopolitical tightrope to capture digital opportunities while maintaining credibility with both superpowers. The stakes are not just economic; they are about which technological ecosystem Southeast Asia will ultimately depend on for its digital future.