US Threatens to Blacklist China’s Moonshot Over Distillation

The Trump administration sharply escalated its campaign against Chinese open models on Wednesday, July 22, 2026, threatening to hit a named Chinese developer with US sanctions and a place on the export blacklist after the White House accused it of stealing from Anthropic’s most advanced system. Treasury Secretary Scott Bessent wrote that “open source is not open season on American IP,” warning that sanctions and Entity List designations would be on the table for Chinese firms running covert, industrial-scale distillation against US models. Turning either tool on a Chinese model-maker would be a first, extending a control regime built for chips into the software layer.

The target is Moonshot AI, the Beijing startup whose open-weight Kimi K3 has unsettled the business case for America’s frontier labs: a model that performs near the top of the field but costs a fraction to run undercuts the pricing and the capital math of firms that have spent billions chasing the frontier. In the same post, Bessent said he was weighing both a trade blacklist and sanctions against the company. He had first raised the prospect a day earlier, citing digital watermarks of US models that officials say they found inside many Chinese systems.

The accusation

The escalation followed a detailed public charge from the administration’s top science and technology adviser, Michael Kratsios, who directs the White House Office of Science and Technology Policy. He said the government had information that Moonshot had distilled Anthropic’s Fable model to build K3, running a sophisticated internal platform that rotated between access methods to avoid detection. Distillation trains a smaller model on the outputs of a larger one; it is routine in the industry, but US officials say Chinese firms have used it at scale to copy proprietary American systems.

Kratsios went beyond the software claim. He alleged Moonshot had acquired servers built around Nvidia’s GB300 (part of the Blackwell line that US rules bar from sale to China) and had tapped GB300s in Thailand to train its models. That opens a second legal front: the distillation charge is an intellectual-property dispute, while the chip allegation, if substantiated, points to a breach of export controls, the lever Washington has leaned on hardest against Beijing. He did not say how the government concluded K3 came from Fable, drawing a line only between legitimate distillation and what he called covert industrial theft.

A threat, not yet an order

No sanction or blacklist has been issued. Both tools remain threats: Treasury sanctions would cut a company off from the US financial system, and an Entity List designation, the Commerce Department blacklist, would bar American suppliers from selling to it without a license. The administration had signaled the shift in the spring, when the White House science office declared that foreign entities, principally in China, were running industrial-scale campaigns to distill US models, though it stopped short then of imposing sanctions or export controls.

The core claim is also contested. Moonshot released Kimi K3 on July 16, 2026 as a 2.8-trillion-parameter open-weight model, and Anthropic’s Fable has been public only since July 1, 2026, a gap skeptics say is far too short to distill a rival and train a model at K3’s scale. Moonshot’s own materials rank K3 behind Fable and OpenAI’s top system while ahead of other models tested, and the company plans to publish the full weights on July 27, 2026. Users have also found K3 sometimes identifying itself as Claude, though that does not establish how it was trained. Hugging Face chief executive Clem Delangue has argued distillation is a minor factor in building strong models and a practice US labs rely on too.

The suspicion predates K3. In a February 2026 report, Anthropic said Moonshot was one of three Chinese labs that used thousands of fraudulent accounts to pull capabilities from Claude, attributing the traffic to metadata that matched senior Moonshot staff. Moonshot has not publicly answered the latest accusation, though China’s embassy in Washington called it unfounded and said Beijing respects intellectual-property protection.

Ahead of the September talks

The timing is deliberate. Bessent is due to lead the US side at the first bilateral AI talks with Beijing in September, and a sanctions threat against a marquee Chinese startup stiffens Washington’s hand going in. It also lands as the administration weighs a broader step long urged by US labs, a reported plan to restrict or ban cutting-edge Chinese open-weight models inside US borders, which open-source advocates and some investors have resisted. Beijing, which has its own grievances over US limits on the most capable American models, is expected to push back.

For Beijing, the pressure cuts both ways. China is weighing its own curbs on exporting its best AI and chip designs, and President Xi Jinping used a recent Shanghai summit to call for open AI cooperation even as his government tightens controls at home. Whether US enforcement would slow Chinese labs is far from settled; earlier chip restrictions accelerated China’s drive for homegrown alternatives rather than stopping it.

For now the administration has a named target, two enforcement tools, and an unproven central claim. Moonshot is preparing to release K3’s weights next week and pursuing a Hong Kong listing that reporting has valued at as much as $50 billion, moves that will test how far a distillation charge reaches without an order behind it.