The United States has moved to block new consumer-grade internet routers made outside the country, citing national security concerns. The Federal Communications Commission (FCC) announced on Monday, March 23 that all foreign-made routers are now on its “Covered List,” a designation for equipment deemed too risky for use in American homes and businesses.
The decision follows a review by White House-led national security agencies, which concluded that foreign-produced routers create vulnerabilities that could be exploited to disrupt critical infrastructure, steal intellectual property, or target American households with cyberattacks. The FCC pointed to three major incidents, known as Volt, Flax, and Salt Typhoon, which between 2024 and 2025 targeted US infrastructure, reportedly involving actors linked to foreign governments.
“Following the Executive Branch’s guidance, the FCC is taking steps to ensure communications equipment used in homes and businesses does not threaten national security,” said FCC Chairman Brendan Carr. The ruling affects new devices only. Consumers can continue using any router they already own, and retailers may sell models previously approved by the FCC.
Most consumer routers in the US are produced abroad, including popular brands such as TP-Link and Netgear. Even routers designed in the United States but manufactured overseas fall under the ban. The only widely available exception is the Starlink WiFi router, made in Texas by Elon Musk’s SpaceX.
Companies that wish to continue importing foreign-made devices can apply for conditional approval through the Department of Defense or Department of Homeland Security, demonstrating that their products do not pose unacceptable risks.
The FCC’s move places consumer routers in the same category as foreign-made drones and other sensitive equipment that have been prohibited in recent years, highlighting growing concern over supply chain vulnerabilities and cybersecurity threats.
Officials say the update is aimed at protecting Americans and the nation’s critical infrastructure from potential attacks or interference originating from foreign hardware.
