Technology News

FCC Bans Import of Foreign-Made Consumer Routers

A consumer Wi-Fi router on a desk following the FCC import ban announcement.

March 24, 2026 — The Federal Communications Commission (FCC) has issued a sweeping ban on the import of new consumer-grade routers manufactured overseas, citing significant cybersecurity threats to U.S. national security. The order, published this week, targets all such devices produced in foreign countries but does not affect routers already in use or in the supply chain.

National Security Justification

The FCC stated that foreign-made routers “pose unacceptable risks” to American infrastructure. The agency specifically referenced threats from China-backed hacking collectives known as Volt Typhoon, Salt Typhoon, and Flax Typhoon. These groups have been accused of exploiting router vulnerabilities to attack U.S. households, disrupt networks, and enable cybercrime and surveillance operations.

Routers are a prime target for both state-sponsored hackers and cybercriminals because they serve as gateways to home and business networks. Compromised devices can be hijacked to launch distributed denial-of-service (DDoS) attacks, which overwhelm servers with junk traffic.

Scope of the Ban and Exceptions

The import prohibition applies to all new consumer routers made outside the United States. According to the FCC order, the ban “will include all consumer-grade routers produced in foreign countries.” The directive explicitly carves out existing devices, meaning current imports and routers already in use are not affected.

New devices may receive an import exception only if approved by the U.S. Departments of Defense or Homeland Security. The FCC did not provide comparative evidence showing that U.S.-manufactured routers are inherently more secure than their foreign-made counterparts. An agency spokesperson did not immediately respond to a request for comment on this point.

Market Impact and Historical Context

China reportedly commands approximately 60% of the global consumer router market. The FCC’s move could significantly disrupt supply chains and consumer choice. FCC Chairman Brendan Carr said in prepared remarks that the agency will “continue to do our part in making sure that U.S. cyberspace, critical infrastructure, and supply chains are safe and secure.”

Historical incidents underscore the stated concerns. The Salt Typhoon espionage group, linked to China, has previously exploited vulnerabilities in routers made by American networking giant Cisco to hack phone and internet companies globally. Similarly, U.S. authorities have accused the Flax Typhoon group of using a massive botnet of hijacked devices, targeting both U.S.-made and foreign-made routers to compromise at least 126,000 devices in the United States.

Regulatory Background

The FCC’s latest action contrasts with some of its prior decisions on cybersecurity rules. In November, Chairman Carr was among two commissioners who voted to scrap regulations that required telecom operators to secure their lawful intercept systems from unauthorized intrusions. That move drew criticism from some security advocates who argued it weakened defenses.

The new import ban represents a more aggressive regulatory posture toward supply chain security. It follows years of escalating warnings from U.S. intelligence and cybersecurity agencies about threats embedded in consumer hardware and software originating from certain foreign jurisdictions.

What Happens Next

The immediate effect will be a halt to new shipments of affected routers at U.S. ports. Retailers and manufacturers must now navigate the exception process through the Defense or Homeland Security departments. Industry groups are likely to scrutinize the order’s implementation and potential economic impact. The policy shift also raises broader questions about the global fragmentation of technology standards and supply chains in the name of national security.

For further details on the official order, you can review the FCC’s public notice on equipment authorization. Context on the cited threat groups is available from the Cybersecurity and Infrastructure Security Agency (CISA).

This article was produced with AI assistance and reviewed by our editorial team for accuracy and quality.

To Top