U.S. Tech Firms Must Stop Enabling China’s AI Theft
The White House Office of Science and Technology Policy (OSTP) on Wednesday accused foreign entities — principally based in China — of waging “industrial-scale” campaigns to distill American frontier AI models, using tens of thousands of proxy accounts and jailbreaking techniques to extract proprietary capabilities. In a memorandum to executive departments and agencies (NSTM-4), OSTP Director Michael Kratsios announced that the Trump Administration will share threat intelligence with U.S. AI companies, help industry coordinate defenses, and explore measures to hold foreign actors accountable. The memo follows reports from OpenAI and Anthropic documenting distillation attacks by Chinese labs including DeepSeek, Moonshot, and MiniMax, and a House Select Committee on China investigation finding that Chinese AI labs are using fraudulent accounts and unauthorized API access to train on U.S. models.
Tech Integrity Project Policy Director Geoffrey Cain offered the following statement:
“The White House is right to sound the alarm on China’s industrial-scale theft of American AI. But if Washington is serious about stopping distillation, it cannot ignore the role that U.S. tech giants themselves are playing in handing China the keys.
“Microsoft runs an AI research lab inside China that has trained a generation of the country’s top AI talent — including multiple engineers who went on to help build DeepSeek. Microsoft provides Chinese companies, including state-owned enterprises, access to OpenAI’s advanced models through its Azure joint venture, even as OpenAI claims to have banned China from using its products. And Amazon, Oracle, Microsoft, and other U.S. cloud providers have been selling remote access to restricted U.S. chips and frontier AI models to Chinese state-linked entities—a loophole in current export controls.
“You cannot credibly fight Chinese AI theft while your own business model depends on enabling it. As part of this welcome effort, the Administration should scrutinize U.S. companies’ China dealings that may be facilitating the distillation it aims to prevent. American AI leadership does not mean handing our crown jewels to Beijing in the pursuit of short-term profits.”
Background
Azure China: A Backdoor Around OpenAI’s China Ban
OpenAI officially bars Chinese users from accessing its services, but its models remain available to Chinese businesses through Microsoft’s Azure China joint venture with local partner 21Vianet. Chinese customers have confirmed using OpenAI’s API via Azure to train competing Chinese AI models — including feeding ChatGPT responses into those models. The day after OpenAI announced its July 2024 crackdown on Chinese access, Microsoft China’s official WeChat account urged developers to “migrate to Azure OpenAI.” Azure customers have included SinoAge, a subsidiary of Chinese state-owned enterprise INESA Intelligent Technology, and Beyondsoft, a company central to China’s online censorship regime. Under its agreement with Microsoft, OpenAI itself receives roughly 20% of revenue from these sales.
Microsoft Research Asia and the DeepSeek Talent Pipeline
At least four DeepSeek employees — including the head of its AI “alignment team,” who spent 10 years at Microsoft Research Asia working on large-scale language AI model training — previously worked at Microsoft’s labs in Beijing and Shanghai. Two were listed as “core contributors” on the DeepSeek R1 paper that triggered an approximately $1 trillion U.S. tech stock selloff. Microsoft security researchers discovered as early as fall 2024 that DeepSeek-linked individuals were extracting large volumes of OpenAI data.
The Cloud Loophole: Remote Access to Restricted Chips and Models
A Reuters review of more than 50 public tender documents found that at least 11 Chinese entities have used U.S. cloud services to access restricted U.S. technology.









