The Bureau of Industry and Security’s Fiscal Year 2025 Annual Report to Congress is not a routine bureaucratic filing. It reads more like a mission statement, and the numbers inside it back up the rhetoric. Export control enforcement has escalated dramatically over the past year, and companies operating in semiconductors, aerospace, defense, dual-use technology, and cross-border trade more broadly need to understand exactly how much the enforcement landscape has shifted.

The Headline Number: An 18-Fold Increase in Penalties

BIS imposed approximately $324 million in civil and criminal penalties in calendar year 2025, compared to roughly $16 million in 2024. That is an eighteen-fold increase in a single year. Breaking the figure down further sharpens the picture: administrative penalties alone jumped from $10 million in 2024 to $108 million in 2025, and criminal fines, forfeitures, and restitution rose from $6 million to $216 million over the same period. Indictments climbed from 112 to 162. This is not incremental growth. It is a structural change in how aggressively the agency is pursuing export control violations, and companies that built their compliance risk tolerance around the enforcement environment of the past several years need to recalibrate.

Landmark Cases Setting the Tone

Several individual enforcement actions illustrate just how large penalties have become. BIS imposed a $95 million administrative penalty on Cadence Design Systems for exporting Electronic Design Automation software and hardware to Entity List parties in China, including a company the agency directly tied to China’s nuclear weapons modernization efforts. Shortly after the fiscal year closed, BIS announced a $252 million penalty against Applied Materials for exporting semiconductor manufacturing equipment to an Entity List party, a statutory maximum penalty and the second-largest standalone penalty BIS has ever imposed.

On the criminal side, the report highlights the indictment of three former Super Micro executives, including a company co-founder and board member, in what BIS describes as the largest semiconductor smuggling case ever brought, involving an alleged $2.5 billion in servers routed to China through cut-out companies in Southeast Asia. If convicted, the defendants face up to 20 years in prison. Cases at this scale, both in dollar terms and in the seniority of the individuals charged, signal that BIS is willing to pursue enforcement all the way up an organization’s leadership chain.

A Sharp Reversal on Entity List Licensing

One of the more striking data points in the report concerns how BIS is now handling license applications for parties on the Entity List. The prior administration approved more than 2,100 licenses for Entity List companies, the large majority for SMIC and Huawei. Under the current approach, BIS granted only 16 new licenses to Entity List companies across the second through fourth quarters of 2025, reserved for narrow situations such as winding down operations in sanctioned countries. That is a dramatic policy reversal, and it means companies that had grown accustomed to licensing pathways for restricted Chinese counterparties should not assume those pathways remain available.

The agency also added 142 entities to the Entity List during the year, spanning parties tied to high-performance computing and quantum technology development, hypersonic weapons programs, and Iranian drone procurement. It closed what the report calls a “Biden-era loophole” that had allowed semiconductor manufacturing equipment and consumables to flow to Korean- and Taiwanese-owned fabrication facilities in China without a license; those exports now require licensing, with controls tied to the capacity and technology level of the fabs involved. BIS also restricted export of Nvidia’s H20 chip and equivalent products, reversing the prior unlicensed treatment of those chips.

Enforcement Infrastructure Beyond Individual Cases

The volume of preventive and investigative enforcement activity in the report is worth noting on its own. BIS issued 455 warning letters, conducted 705 detentions and 232 seizures, and issued 29 denial orders against parties following criminal convictions. It completed 1,840 end-use checks across 73 countries, the large majority post-shipment verifications used to confirm export transactions were completed as authorized, with about 88 percent of these checks conducted by BIS Export Control Officers stationed at U.S. embassies and consulates worldwide. On the criminal side, BIS investigations led to 65 criminal convictions of individuals and companies in FY25, producing nearly $84 million in criminal fines, over $81 million in forfeitures, more than $5 million in restitution, and a combined 2,668 months of imprisonment.

The appendices listing individual criminal convictions and administrative settlements read as a virtual atlas of export control risk categories: firearms and ammunition smuggled to Mexico, the Dominican Republic, and Haiti; aircraft parts and electronic components diverted to Russia; UAV and guided missile components sent to sanctioned Russian entities; petrochemical and industrial equipment routed to Iran; and a temporary denial order matter involving a documented scheme to instruct Russian and Turkish parties on how to circumvent U.S. export controls through falsified shipping documentation and offshore freight forwarders. Notably, the report also documents a steady drumbeat of temporary denial orders against Russian airlines, including repeated renewals against carriers such as Aeroflot, UTair, Ural Airlines, and others found to be operating U.S.-origin aircraft into Russia without authorization, underscoring that aviation-sector enforcement against Russia sanctions evasion remains a sustained, active priority rather than a one-time action.

Licensing Speed Held Steady Despite a Government Shutdown

Amid all of this enforcement activity, BIS reports it still processed roughly 30,500 license applications in calendar year 2025 with an average processing time of 62 days, comfortably inside the 90-day statutory benchmark and roughly consistent with 2024’s 60-day average, despite a 43-day government shutdown in the fourth quarter that slowed review across Commerce and partner agencies. For compliance officers, this is a useful data point: the licensing system itself has not become meaningfully slower even as enforcement scrutiny has intensified, which means companies cannot use processing delays as a reason to bypass licensing requirements on borderline transactions.

Deregulatory Moves Alongside Tougher Enforcement

The report is careful to frame BIS’s approach as balanced rather than purely restrictive. The agency repealed a rule that had prohibited U.S. firearms exports to 36 countries, and announced non-enforcement and a rescission plan for the Biden-era AI Diffusion Rule, which the report characterizes as overly broad regulation that risked alienating international partners. BIS also concluded technology partnership agreements with the United Arab Emirates and Saudi Arabia intended to allow investment in advanced U.S. semiconductors under defined security conditions, and it is implementing the Connected Vehicles Rule beginning with model year 2027 vehicles to keep foreign adversary technology out of connected vehicle systems on American roads.

Antiboycott Enforcement and Compliance Assistance

Antiboycott enforcement remained active but modest in scale relative to export control cases: BIS’s Office of Antiboycott Compliance settled one case during FY25, a $44,750 penalty against General Dynamics Ordnance and Tactical Systems for furnishing information about business relationships with boycotted countries and failing to report a boycott request. Separately, the report shows BIS fielding a substantial volume of compliance assistance requests, 35,516 phone and email inquiries handled by the Office of Exporter Services, an increase of nearly 4,800 over the prior year, indicating that exporters, including small and medium-sized businesses, are actively seeking guidance as the regulatory environment shifts.

What This Means for Compliance Programs

A few practical implications follow directly from this report.

The days of counting on a license exception or a favorable licensing posture toward Entity List counterparties in China are effectively over. Companies with any China-related supply chain exposure touching semiconductor equipment, advanced computing, or dual-use electronics need to assume licensing will be required and difficult to obtain, not a formality.

Enforcement risk now extends meaningfully up the corporate ladder. The Super Micro-related indictment of a company co-founder and board member is a clear signal that BIS is prepared to pursue senior executives personally when evidence supports it, not just the corporate entity.

Penalty exposure has grown to a scale that changes the calculus on internal reporting and remediation. With administrative penalties climbing into the hundreds of millions of dollars for the largest cases, the cost-benefit analysis around voluntary self-disclosure, internal investigation rigor, and proactive compliance investment has shifted meaningfully compared to prior years.

Country-specific enforcement patterns are worth building directly into risk assessments. Russia-related aviation and dual-use diversion, China-related advanced computing and semiconductor equipment, and firearms trafficking to Mexico and the Caribbean each show up repeatedly across this report’s case list, and compliance programs should ensure their monitoring and training reflect these recurring fact patterns rather than treating export risk as a generic, undifferentiated category.

Finally, the sheer breadth of this report, spanning technology controls, criminal prosecutions, temporary denial orders, antiboycott enforcement, and industrial base assessments, is itself a signal. BIS is operating as a considerably more resourced and more assertive agency than it was even eighteen months ago, and companies subject to the Export Administration Regulations should treat this report as a direct preview of where scrutiny is headed, not a historical summary to file away.