# Bessent: US Could Sanction Chinese AI Models Over IP Theft

Treasury Secretary Bessent said the US could sanction Chinese open-source AI models over IP theft, escalating the chip war into a model war. But open weights can't be recalled, making enforcement asymmetric.

By Neomanex. Updated 2026-10-07.

The US-China AI conflict crossed a new threshold on July 21: Treasury Secretary Scott Bessent told Fox Business the US has "the ability to sanction" Chinese AI models if intellectual-property theft is established, while Axios separately reported the Trump administration is weighing a wholesale ban on Chinese open-source models — a claim others have disputed ([TechCrunch](https://techcrunch.com/2026/07/21/us-threatens-sanctions-against-chinese-ai-models-over-ip-theft/), 2026). This is no longer a chip war — it's a model war.

## What happened

Bessent's threat targets the models themselves, not the hardware they run on. "This administration supports open source models, but what we do not support is IP theft," he said. "If we see, especially, that overseas models are stealing from our great companies, we have the ability to sanction them because of this theft" ([CNBC](https://www.cnbc.com/2026/07/21/bessent-china-ai-sanctions.html), 2026).

The logic is straightforward: if Chinese labs trained their models on outputs distilled from US frontier models — Anthropic's [Claude Fable 5](/directory/models/fable-5) or OpenAI's GPT-5.6 family — those models are tainted goods subject to sanction.

**What triggered it.** The immediate spark is [Kimi K3](/directory/models/kimi-k3), Moonshot AI's 2.8 trillion-parameter open-weight model that launched July 16 and immediately topped Arena's WebDev coding leaderboard at $3/$15 per 1M tokens — a fraction of Claude Fable 5's $10/$50. It follows [GLM-5.2](/directory/models/glm-5-2) (June 13, MIT-licensed, $1.40/$4.40 per 1M) and Tencent's [Hy3](/directory/models/hy3) (July 6, Apache 2.0, $0.20/$0.80 per 1M). DeepSeek V4 (confirmed GA July 19) and Alibaba's Qwen series are also reportedly on deck. The open-weight flood from Chinese labs is eroding the US closed-model moat faster than Washington expected.

**The counterargument.** Hugging Face CEO Clem Delangue pushed back, telling TechCrunch that distillation is "a very small factor" and China "has really, really good research teams."

| Chinese open-weight model | Release | Pricing (per 1M tokens) | License | Directory verdict |
|---|---|---|---|---|
| [Kimi K3](/directory/models/kimi-k3) | Jul 16 | $3 / $15 | Open-weight (weights Jul 27) | Conditional |
| [GLM-5.2](/directory/models/glm-5-2) | Jun 13 | $1.40 / $4.40 | MIT | Conditional |
| [Hy3](/directory/models/hy3) | Jul 6 | $0.20 / $0.80 | Apache 2.0 | Conditional |

## Why it matters

**For US enterprises,** sanctions would cut off access to the cheapest frontier-class AI. GLM-5.2 and Hy3 run on consumer-grade hardware at pricing that undercuts US models by an order of magnitude or more. Blocking them would raise costs for every team using open-weight models.

**For the open-weight ecosystem,** a US ban would fragment the global AI commons into US-approved and Chinese-supplied tracks — exactly what the Claude Fable 5 export-ban cycle previewed with the Mythos 5 restricted-access regime ([Axios](https://www.axios.com/2026/07/20/ai-us-china-open-source-kimi), 2026).

**For enforcement,** open weights can't be recalled. Once weights are on Hugging Face, they're everywhere. A ban would be structurally asymmetric — US companies would lose access to models their global competitors use freely.

## What changes for you

No immediate action required — this is a threat, not policy. But the trajectory is clear: model provenance is the next frontier of AI regulation.

- **Teams using Chinese open-weight models:** document your model supply chain now. If sanctions arrive, you'll need to demonstrate compliance quickly.
- **Teams evaluating open-weight options:** factor potential US government action into your model-selection timeline. A model that's available today may face restrictions within months.
- **Everyone else:** watch for the Commerce Department's formal rule-making process. Bessent's statement is a political signal, but formal sanctions require a legal framework that doesn't yet exist.

## FAQ

**Can the US actually enforce sanctions on open-weight models?**

Technically, yes — through financial sanctions on the companies behind them and export controls on the weights themselves. Practically, once weights are released under open licenses, they're downloaded, mirrored, and impossible to recall. Enforcement would be leaky at best.

**Which Chinese models would be affected?**

Any model trained using outputs from US frontier models could theoretically be targeted. The immediate focus is on open-weight releases from Moonshot AI (Kimi K3), Z.ai (GLM-5.2), Tencent (Hy3), and upcoming models from DeepSeek and Qwen. Closed-API Chinese models face less risk since their weights aren't publicly distributed.

**Is distillation actually IP theft?**

This is the core unresolved question. Microsoft CEO Satya Nadella recently criticized large labs for imposing restrictive distillation terms while themselves training on public data. Hugging Face's Delangue argues distillation is a minor factor and China's progress reflects genuine research talent. There is no legal consensus — which is precisely what makes sanctions a blunt instrument.

Canonical: https://neomanex.com/news/us-treasury-threatens-chinese-ai-model-sanctions