FCC Bans Foreign-Made Routers - Cybersecurity Risks Identified

What Happened

On March 25, 2026, the U.S. Federal Communications Commission (FCC) announced a ban on the import of new, foreign-made consumer routers. This decision stems from concerns over unacceptable risks to both cyber and national security. FCC Chairman Brendan Carr emphasized that this action is crucial to safeguard American citizens and the communications networks they rely on. The ban means that foreign-produced routers will no longer be eligible for sale or marketing in the U.S. unless they receive Conditional Approval from the Department of War (DoW) or the Department of Homeland Security (DHS).

The FCC's determination follows a national security assessment that highlighted how foreign routers could introduce vulnerabilities into the supply chain. These vulnerabilities could disrupt critical infrastructure and pose severe cybersecurity risks. The agency has added all consumer-grade routers manufactured outside the U.S. to a Covered List, barring their importation unless they meet specific security criteria.

Who's Affected

The ban affects consumers and businesses that rely on routers for internet connectivity. While existing routers already in use are unaffected, new models from foreign manufacturers cannot be imported or sold. This policy primarily targets routers that could be exploited by state-sponsored and non-state actors. The FCC's decision aims to prevent potential cyber espionage, intellectual property theft, and other malicious activities that could arise from compromised devices.

Notably, some devices, like Starlink Wi-Fi routers made in Texas, are exempt from this ban. However, producers of consumer-grade routers can apply for Conditional Approval, ensuring that their products do not pose risks to national security.

What Data Was Exposed

The FCC's announcement reveals that foreign-made routers have been linked to numerous cyber attacks. These devices can be exploited to gain unauthorized access to networks, facilitating cyber espionage and data theft. The Executive Branch determination cited that compromised routers could be used to conduct network surveillance and deliver malware, making them attractive targets for cyber criminals.

Furthermore, the FCC highlighted the involvement of foreign adversaries, particularly from China, in leveraging botnets composed of compromised routers. These botnets have been used to orchestrate attacks on U.S. critical infrastructure, including communications, energy, and transportation systems. The risks posed by these devices are deemed unacceptable by the U.S. government, prompting the regulatory action.

What You Should Do

For consumers, it's essential to be aware of the implications of this ban. If you currently own a foreign-made router, it remains functional, but it's crucial to ensure it is secured against potential vulnerabilities. Regularly updating firmware and changing default passwords can help mitigate risks.

Businesses should evaluate their network infrastructure and consider replacing foreign-made routers with approved alternatives. Staying informed about the evolving cybersecurity landscape is vital for protecting sensitive data and maintaining operational integrity. As the FCC continues to monitor these risks, consumers and businesses alike should prioritize security in their internet connectivity solutions.