White House Memo Details Alleged Chinese AI Model Distillation Campaigns
The White House has accused foreign entities, primarily based in China, of conducting coordinated campaigns to copy frontier AI models from US companies using thousands of surrogate accounts. The accusations involve distillation techniques that extract capabilities from American AI systems. The Trump administration plans to share information with US firms and develop defenses against these activit
news.google.comForeign entities primarily based in China have conducted industrial-scale campaigns to copy frontier AI models from US companies, according to a memo issued by the White House director of the office of science and technology policy. The director issued the memo on Thursday, stating that these campaigns entail using tens of thousands of surrogate accounts to go undetected.
The efforts involve complex tools to expose proprietary information.
These coordinated campaigns systematically extract capabilities from American AI models, exploiting American expertise and innovation, the director wrote. The White House stated that China is engaged in deliberate, industrial-scale campaigns to distill US frontier AI systems.
The government has learned that Chinese entities are leveraging thousands of proxy accounts. The accusations center on a process called distillation, a technique used to transfer knowledge from a large AI model to a smaller one that can run more cheaply. Distillation is widely used for training AI models.
Companies like Anthropic and OpenAI have previously claimed the distillation process has been used to unfairly mimic their models’ capabilities. DeepSeek, a Chinese AI startup, rattled Wall Street last year. DeepSeek has been at the center of accusations of using distillation on US models.
OpenAI warned lawmakers in February that DeepSeek has been attempting to replicate the performance of OpenAI’s models and those of other US frontier labs through distillation. Anthropic identified industrial-scale campaigns by DeepSeek along with two other AI labs to illicitly extract capabilities to improve their own models. Anthropic stated this identification occurred in February.
DeepSeek did not immediately respond to CNN’s request for comment. Distilled AI models can raise security concerns since they lack the safeguards of the models they were trained on, Anthropic wrote in a February blog post. These distillation campaigns allow actors to deliberately strip security protocols from the resulting models and undo mechanisms that ensure those AI models are ideologically neutral and truth-seeking, according to the director.
CNN has reached out to the Chinese embassy in Washington for comment. The Trump administration plans to share information with US AI companies about attempts to conduct unauthorized, industrial-scale distillation. The Trump administration plans to improve coordination between private companies in response to the campaigns.
The Trump administration plans to work with the private sector to develop best practices for finding and defending against industrial-scale distillation activities. Tech giants like Nvidia have been caught in the middle of US-China AI trade tensions.
The government has previously accused China of targeting American AI technology and intellectual property. The US has accused China of industrial-scale theft of AI.
Cementing the US as a leader in the AI race has been a cornerstone of Trump’s second term.
Trump has pushed for federal AI regulation rather than state-level rules. Trump’s push for federal AI regulation aims to expedite innovation. Trump has exerted controls over sales of AI chips to China.
Key Facts
Story Timeline
7 events- Apr 23, 5:04 PM ET
1 new source added: The American Conservative
1 sourceThe American Conservative - 2026-04-23 (Thursday)
Michael Kratsios issued a memo accusing foreign entities primarily based in China of industrial-scale campaigns to copy US AI models.
4 sourcesCNN · The Hill · @KobeissiLetter · Michael Kratsios - February 2026
OpenAI warned lawmakers that DeepSeek has been attempting to replicate US AI models through distillation.
1 sourceOpenAI - February 2026
Anthropic identified industrial-scale campaigns by DeepSeek and two other AI labs to extract Claude’s capabilities.
1 sourceAnthropic - February 2026
Anthropic wrote a blog post about security concerns from distilled AI models.
1 sourceAnthropic - 2025
DeepSeek rattled Wall Street.
1 sourceCNN - January 2025
Trump inaugurated as current U.S. President, beginning second term with focus on AI leadership.
1 sourceCNN
Potential Impact
- 01
Increased coordination between US AI companies to defend against distillation campaigns.
- 02
Development of new best practices for detecting and preventing unauthorized AI model extraction.
- 03
Potential escalation in US-China trade tensions over AI technology and intellectual property.
- 04
Enhanced federal AI regulations to expedite US innovation leadership.
- 05
Security risks from distilled models lacking original safeguards in global AI deployment.
Multi-source corroboration verifies facts, not framing. This panel scores the Substrate rewrite you just read (top score) and the raw source bundle it came from. A positive delta means the rewrite stripped framing from the sources; a negative or zero delta means our neutralizer let some through.
US AI firms are sharing distillation techniques openly, enabling global innovation that China adapts efficiently without direct theft.
- Lede misdirectionnotable“TITLE: White House Memo Details Alleged Chinese Campaigns...”Lede foregrounds memo issuance over core event of AI copying campaignsThe headline leads with who shared, posted, or reacted to the event rather than the substantive event itself — burying the actual news behind the messenger.
- Valence skewnotable“'exploiting American expertise and innovation'; 'industrial-scale theft'”Systematically negative adjectives target Chinese entities while praising USAdjectives and adverbs systematically slant toward one interpretation even though the underlying facts are neutral.
- Loaded metaphorminor“'rattled Wall Street'; 'illicitly extract'; 'strip security protocols'”Loaded verbs frame actions as theft and disruption across narrativeSources share the same narrative framing verbs (“sow doubt”, “spark backlash”) — a sign of a shared template, not independent reporting.
- Selective sourcingminor“Quotes only from Kratsios, OpenAI, Anthropic; no Chinese response”One-sided US company perspectives without counter-viewEvery quoted expert shares one viewpoint; no counter-expert is given meaningful space.
Transparency Panel
Related Stories
US Treasury Secretary Announces No Renewal of Iranian and Russian Oil Waivers
US Treasury Secretary Scott Bessent stated that the United States will not renew waivers for purchasing Iranian and Russian oil products at sea. This decision comes amid the US-Israeli war in Iran and the closure of the Strait of Hormuz, impacting global energy markets. Bessent c…
algemeiner.comIran Denies Seeking U.S. Talks as Mediators Report Potential Meetings
Iran has denied requesting direct talks with the United States, stating that U.S. officials are pushing for negotiations through Pakistani intermediaries. A Pakistani official reported that delegations from both countries are set to meet with mediators, with a possible direct mee…
Trump Administration Considers Defense Production Act for Spirit Airlines Bailout
The Trump administration is exploring the use of the Defense Production Act to provide a $500 million loan to Spirit Airlines amid its second bankruptcy in two years. Rising jet fuel costs from the Iran war have strained the airline, prompting discussions of federal intervention…