US accuses China of AI 'distillation' attacks

What's happened

The White House has issued a memo saying foreign actors, principally based in China, have been running industrial-scale campaigns to "distil" US frontier AI systems by using proxy accounts and jailbreaking techniques to extract capabilities. The administration has said it will share intelligence with US AI firms and explore measures to punish offenders ahead of a planned US–China summit.

What's behind the headline?

What the memo is doing

• The White House has framed distillation as an active, coordinated threat: leveraging "tens of thousands of proxy accounts" and jailbreaking to systematically extract capabilities from US models. That language is making the issue a national-security problem rather than a purely commercial dispute.

Why this is happening now

• The memo is arriving weeks before a high-profile US–China presidential meeting and is therefore raising the stakes of tech ties. It is also following public accusations from US labs that Chinese models have been trained using outputs from leading US systems.

Who benefits and who loses

• US cloud and AI firms will benefit from government intelligence sharing and potential legal or trade tools that raise the cost of extraction. Chinese AI labs and some open-source projects will lose credibility and face higher scrutiny, even where legitimate transfer of models or cooperative work is occurring.

Practical enforcement challenges

• Distinguishing illicit distillation from legitimate API usage is technically hard. Researchers and think-tank experts are warning that identifying bad actors will be like "looking for needles in an enormous haystack"; this will force US firms to tighten monitoring and rate limits and to share more telemetry with government partners.

Geopolitical consequences

• This will increase diplomatic friction ahead of the summit. The Chinese embassy has rejected the allegations, and Washington's move will pressure decisions on exports such as Nvidia chips and on bilateral cooperation on AI standards.

What will happen next

• The administration will work with US AI companies to build defenses and will explore punitive measures. Congress has already backed a bipartisan process to identify foreign actors and impose sanctions. Expect faster deployment of anti-extraction telemetry, contractual limits on API use, and narrower export approvals for advanced compute where risk is flagged.

Reader impact

• For most readers, the effects will be indirect: this will increase regulation and corporate security around AI products, raise enterprise costs, and slow the public release cadence of some models. For businesses using AI, expect stricter API terms and increased vendor scrutiny.

How we got here

US officials have raised concerns about Chinese-aligned labs producing competitive models quickly. Firms such as OpenAI and Anthropic have alleged distillation-style extraction before, and Congress is advancing a bill to identify and punish actors that extract technical features from closed-source US models.

Our analysis

The White House memo has been quoted directly by AP News and The Independent, which reported Michael Kratsios saying the US government "has information indicating that foreign entities, principally based in China, are engaged in deliberate, industrial-scale campaigns to distil US frontier AI systems." The AP noted the memo's claim that actors are "leveraging tens of thousands of proxy accounts to evade detection and using jailbreaking techniques to expose proprietary information," and it reported that the administration will "work with American AI companies to identify such activities, build defenses and find ways to punish offenders." The Independent added that China’s embassy in Washington called the claims "baseless allegations," quoting a spokesperson who said China "attaches great importance to the protection of intellectual property rights." Business Insider UK provides an internal-industry perspective that complicates the debate: Peking University researcher Zhang Chi says Chinese models are still "far behind" US systems, arguing Chinese teams are "benchmaxxing" and lack the infrastructure and data to match US iteration speed. That view contrasts with claims from some US executives—cited in other outlets though not in this packet—that China is closing the gap. Reuters and The Japan Times coverage of the upcoming US–China summit shows the memo is landing in a broader diplomatic context: Beijing is preparing for a mid‑May meeting and has been active diplomatically in other theatres, which will make these allegations politically sensitive. Taken together: the government memo is presenting a concrete, technical allegation and promising coordinated countermeasures; Chinese officials are denying wrongdoing; and some researchers inside China are simultaneously arguing Chinese models still lag, underscoring that the accusation is as much about process and methods as it is about raw model performance. Readers should consult the AP and Independent pieces for the memo text and the Business Insider UK inte

Go deeper

• How does "distillation" technically work and how will companies detect it?
• What specific measures will the US explore to punish alleged offenders?
• How will this affect API access, pricing, and enterprise contracts for AI services?

More on these topics

• Donald Trump - 45th and 47th U.S. President

  Donald John Trump is an American politician, media personality, and businessman who is the 47th president of the United States. A member of the Republican Party, he served as the 45th president from 2017 to 2021.

• Michael Kratsios - Deputy U.S. Chief Technology Officer

  Michael John Kotsakas Kratsios (born November 7, 1986) is an American business executive and government official, who has served as the 13th director of the White House Office of Science and Technology Policy and the science advisor to the president since

• Xi Jinping - General Secretary of the Chinese Communist Party

  Xi Jinping is a Chinese politician serving as the general secretary of the Communist Party of China, president of the People's Republic of China, and chairman of the Central Military Commission.

• People's Republic of China - Country in East Asia

  China, officially the People's Republic of China, is a country in East Asia. It is the world's most populous country, with a population of around 1.4 billion in 2019.

• White House - Official residence and office of the President of the United States

  The White House is the official residence and workplace of the president of the United States. Located at 1600 Pennsylvania Avenue NW in Washington, D.C., it has served as the residence of every U.S. president since John Adams in 1800 when the national...

• Iran - Country in the Middle East

  Iran, also called Persia, and officially the Islamic Republic of Iran, is a country in Western Asia. It is bordered to the northwest by Armenia and Azerbaijan, to the north by the Caspian Sea, to the northeast by Turkmenistan, to the east by Afghanistan a

• Nvidia - Computer game company

  Nvidia Corporation is an American multinational technology company incorporated in Delaware and based in Santa Clara, California.

• OpenAI - Artificial intelligence company

  OpenAI is an artificial intelligence research laboratory consisting of the for-profit corporation OpenAI LP and its parent company, the non-profit OpenAI Inc.

• Anthropic - Artificial intelligence company

  Anthropic PBC is a U.S.-based artificial intelligence startup public-benefit company, founded in 2021. It researches and develops AI to "study their safety properties at the technological frontier" and use this research to deploy safe, reliable models for