The US has banned new foreign-made consumer internet routers over national security concerns.
In an update on Monday to a list of equipment seen as not secure enough for use, the Federal Communications Commission (FCC) added all consumer-grade routers made outside the US.
This places routers—widely used in homes and businesses for internet connectivity—on par with foreign-made drones, which were banned at the end of last year.
Malicious actors have exploited security gaps in foreign-made routers to attack American households, disrupt networks, enable espionage, and facilitate intellectual property theft, the FCC stated.
While people will still be able to use foreign-made routers they already own, the ban applies to all new device models.
The ban stems from growing concerns over the last year that routers were a point of easy-access for malicious actors.
Notably, TP-Link, a router brand made in China that is best-selling on Amazon, became an object of US political scrutiny last year following a series of cyberattacks.
Any new router made outside the US will now require FCC approval before it can be imported, marketed, or sold in the country.
To gain such approval, companies manufacturing routers outside the US must disclose their foreign investors' influence and provide a plan for bringing production to the US.
Certain routers could be exempted if the Department of Defense or Department of Homeland Security deems them acceptable; however, no exceptions have yet been established.
This FCC ban follows a recent determination by government agencies stating that foreign-made internet routers pose unacceptable risks to the US, which could impact the American supply chain and increase vulnerability to cybersecurity attacks targeting critical infrastructure.
The FCC emphasized the involvement of compromised routers in multiple cyberattacks against US infrastructure, notably incidents termed Volt, Flax, and Salt Typhoon, linked to actors connected with the Chinese government.
As the majority of internet routers are assembled or manufactured in countries like Taiwan or China, the FCC ban notably includes any routers designed in the US but built abroad.
Popular brands such as Netgear manufacture their products abroad, raising concerns about potential future compliance with FCC provisions. The only significant exception appears to be the Starlink WiFi router, produced by SpaceX, which claims to manufacture its products in Texas.
