The Bureau of Industry and Security just dropped its FY2025 annual report, and the numbers are staggering: $324 million in penalties, 65 criminal convictions, and 2,668 months of combined prison time. If you think export enforcement doesn't affect your import operation, you're about to find out why that assumption could cost you everything.
In July 2025, Cadence Design Systems — a San Jose company that makes the software chip designers use every day — agreed to pay $140 million in combined penalties for selling electronic design automation tools to a Chinese military university tied to nuclear weapons simulation. Seven months earlier, Applied Materials wrote a $252 million check to the Commerce Department for routing semiconductor manufacturing equipment through its Korean subsidiary to dodge restrictions on shipments to SMIC, China's largest chipmaker.
These aren't outliers. They're the new normal.
The Bureau of Industry and Security's FY2025 annual report, released in July 2026, reveals an enforcement machine that has fundamentally changed speed. Total penalties jumped from approximately $16 million in 2024 to $324 million in 2025. That's not a percentage increase you can wave away — it's an 18-fold surge in a single year. And if you're a customs broker or importer thinking "that's an export problem, not my problem," keep reading. The same enforcement mentality reshaping export controls is coming for every corner of trade compliance.
The Numbers Behind the Surge
Let's break down what BIS actually collected and imposed in FY2025, because the headline figure only tells part of the story.
| Enforcement Metric | FY2025 | FY2024 | Change |
|---|---|---|---|
| Total monetary penalties | $324 million | ~$16 million | +1,925% |
| Criminal convictions | 65 | Not disclosed | — |
| Criminal fines | $84 million | ~$6 million (combined criminal) | +1,300% |
| Criminal forfeitures | $81.5 million | — | — |
| Administrative penalties | $108 million | ~$10 million | +980% |
| Indictments | 162 | 112 | +45% |
| Warning letters | 455 | — | — |
| Detentions | 705 | — | — |
| Seizures | 232 | — | — |
| Denial orders | 29 | — | — |
| End-use checks | 1,840 across 73 countries | — | — |
The combined prison sentences — 2,668 months, or roughly 222 years — make this personal. BIS isn't just fining companies anymore. Individual employees and executives are going to prison.
The Three Cases That Rewrote the Playbook
Three landmark cases define this enforcement era, and each one carries a lesson that extends well beyond export controls.
Applied Materials: The $252 Million "Dual-Build" Disaster
In February 2026, Applied Materials agreed to pay $252 million — the statutory maximum, calculated at twice the $126 million transaction value — for 56 unlawful reexports of semiconductor manufacturing equipment to SMIC.
Here's how it happened: After SMIC landed on the Entity List in late 2020, Applied Materials couldn't ship directly from the U.S. Instead, the company partially built equipment domestically, exported it to its subsidiary in South Korea for final assembly, and then shipped finished products to SMIC from Korea. Applied Materials believed the Korean assembly changed the jurisdictional calculus.
BIS disagreed. The equipment contained more than 25% controlled U.S.-origin content, keeping it squarely under Export Administration Regulations (EAR) jurisdiction. The penalty was the second-largest in BIS history, and the settlement required multiple compliance audits with results reported directly to BIS. The employees responsible for the scheme are no longer with the company.
Cadence Design Systems: $140 Million for Selling to a Military University
In July 2025, Cadence pleaded guilty to criminal export violations and paid a combined $140 million ($95 million to BIS, $45 million in DOJ forfeitures) for selling Electronic Design Automation (EDA) software and semiconductor design technology to the National University of Defense Technology (NUDT), a Chinese institution under the Central Military Commission.
The facts are damning: Cadence maintained a sales relationship with NUDT for years after NUDT's placement on the Entity List, routing transactions through an alias — the "Central South CAD Center." BIS documented 56 violations between September 2015 and September 2020, involving $45.3 million in controlled technology. NUDT used the tools for supercomputers believed to support nuclear explosive and military simulation.
Seagate: The $300 Million Record-Setter
The largest standalone BIS penalty in history remains the $300 million settlement Seagate paid in April 2023 for shipping over 7.4 million hard disk drives worth $1.1 billion to Huawei after the Foreign Direct Product (FDP) Rule made those shipments illegal in 2020.
What made the Seagate case especially damaging was that the company's competitors stopped selling to Huawei when the rules changed. Seagate didn't — and actually increased its sales. BIS noted this explicitly in the settlement, and it clearly influenced the penalty amount.
Why Importers Should Care About Export Enforcement
If you're a customs broker or importer reading this and thinking it's someone else's problem, consider three realities.
First, most companies that import also export. If you're bringing in components from overseas and incorporating them into products that ship internationally, you have export control obligations. The EAR applies to items based on their technical characteristics, not just their direction of travel. A component you import under HTS Chapter 85 (electrical machinery) might be classified under an Export Control Classification Number (ECCN) that requires a license for certain destinations.
Second, the enforcement posture is systemic. The same political and institutional forces driving BIS's 18-fold penalty increase are driving CBP's enforcement expansion on the import side. CBP's new Advance Notice of Proposed Rulemaking on supply chain visibility, its expansion of the Enforce and Protect Act (EAPA) investigations, and the broader push under Executive Order 14411 all reflect a federal government that has decided trade enforcement is a national security priority — on both sides of the border.
Third, restricted party screening isn't just for exporters. The Entity List that tripped up Applied Materials and Cadence? It matters for importers too. If you're sourcing from, transacting with, or facilitating shipments involving Entity List parties, you may have reporting obligations or face penalties under multiple regulatory frameworks. The Uyghur Forced Labor Prevention Act (UFLPA), for example, has its own entity list that applies squarely to imports.
The Expanding Enforcement Toolkit
BIS didn't just increase penalties in FY2025 — it expanded its reach in ways that affect the broader trade ecosystem.
Entity List additions accelerated. BIS added 142 entities to the Entity List in 2025, including expanding restrictions on semiconductor manufacturing equipment and consumables shipped to Korean- and Taiwanese-owned facilities in China. Every addition creates new screening obligations for both exporters and importers.
End-use checks went global. BIS completed 1,840 end-use checks across 73 countries, with roughly 88% conducted by Export Control Officers stationed at U.S. embassies and consulates. These checks verify that exported goods ended up where they were supposed to — and the findings feed back into enforcement targeting on the import side.
The Disruptive Technology Strike Force expanded. This joint DOJ-BIS task force has made semiconductor and AI technology its top enforcement priority, and its investigations frequently uncover transshipment schemes that involve customs fraud on the import side. When BIS investigators trace a shipment routed through Turkey, the UAE, or Armenia to evade China restrictions, CBP gets that intelligence too.
What a $324 Million Enforcement Year Means for Your Compliance Program
The jump from $16 million to $324 million isn't incremental growth. As one law firm analysis put it, "this is a structural change in how aggressively the agency is pursuing export control violations." Companies that calibrated their compliance risk tolerance to the enforcement environment of 2023 or 2024 need to recalibrate immediately.
Here's what the penalty math looks like under current statute:
| Penalty Type | Maximum per Violation |
|---|---|
| Civil (administrative) | Greater of $364,992 or 2x transaction value |
| Criminal fine | $1,000,000 per violation |
| Criminal imprisonment | Up to 20 years per violation |
| Denial order | Complete loss of export privileges |
Applied Materials' penalty was calculated at the statutory maximum — twice the transaction value. That formula means the penalty scales with the size of your business. A $10 million shipment that violates the EAR could generate a $20 million fine for a single transaction.
Five Steps to Take Before Year-End
Whether you're primarily an importer, exporter, or both, here's what the FY2025 enforcement data demands:
-
Audit your restricted party screening — Review your screening processes against the Entity List, UFLPA Entity List, Specially Designated Nationals (SDN) list, and Denied Persons List. If you're only screening one list, you're exposed. BIS's cases show that aliases and subsidiaries of listed parties are a primary enforcement trigger.
-
Map your product classifications on both sides — If you're importing under HTS codes in Chapters 84, 85, or 90 (machinery, electronics, optical instruments), check whether those same products carry ECCNs that create export obligations. The crosswalk between HTS and ECCN is imperfect, but ignoring it entirely is how companies stumble into violations.
-
Review your supply chain for transshipment risk — BIS is aggressively pursuing companies that use intermediate countries to circumvent restrictions. If your supply chain routes through known transshipment hubs — the UAE, Turkey, Armenia, Malaysia, Thailand — document the legitimate business purpose and ensure your compliance records can withstand scrutiny.
-
Evaluate your voluntary self-disclosure posture — BIS's updated penalty guidelines tie penalties more closely to transaction value and reward timely, complete voluntary self-disclosures (VSDs). Cadence's cooperation was explicitly cited as a mitigating factor. If you discover a potential violation, the clock starts immediately — waiting makes it worse.
-
Brief your leadership on personal liability — The 2,668 months of prison time in FY2025 weren't served by corporations. They were served by individuals. Make sure your C-suite and compliance officers understand that export violations can result in personal criminal liability, and that "I didn't know" is not a defense when the company had reason to know.
What's Coming in 2026 and Beyond
The enforcement trajectory is clear, and several developments on the horizon will intensify pressure:
- The Applied Materials compliance audits are ongoing, and BIS will use the findings to refine its enforcement targeting across the semiconductor supply chain. Expect the methodology to become a template for future settlements.
- BIS is pursuing additional 2026 settlements against Robert Bosch (~$36 million, Huawei-related), Teledyne FLIR, Solventum Corporation, and others. The pipeline is full.
- The convergence of import and export enforcement is accelerating. CBP's proposed supply chain visibility rules would require importers to disclose foreign export filing data — explicitly bridging the gap between import and export compliance for the first time.
- AI and advanced computing controls remain BIS's top priority. Any company importing or exporting items in these categories should expect heightened scrutiny through at least 2028.
The Bottom Line
The days of treating import compliance and export compliance as separate disciplines are over. BIS's $324 million enforcement year — 18 times higher than the year before — isn't an anomaly. It's the new baseline. The same enforcement infrastructure, intelligence sharing, and political will that produced those numbers is flowing into CBP's import enforcement programs.
The companies that got caught — Applied Materials, Cadence, Seagate — weren't fly-by-night operations. They were sophisticated, well-resourced companies with compliance programs that failed to keep pace with a regulatory environment that changed faster than their internal processes. The lesson isn't that compliance is impossible. It's that yesterday's compliance program isn't good enough for today's enforcement reality.
TariffLens helps trade teams stay ahead of classification and duty changes across both import and export frameworks — because in 2026, you can't afford to manage one side without watching the other.
This article is for informational purposes only and does not constitute legal, tax, or customs advice. Consult a licensed customs broker or trade attorney for guidance specific to your situation.