US bans new foreign-made internet routers

The United States has moved to tighten control over internet infrastructure by banning new foreign-made consumer routers, citing growing cybersecurity and national security risks.

The Federal Communications Commission (FCC) announced the decision as part of an update to its list of equipment deemed insecure for use in the country. Under the new policy, routers manufactured outside the US will no longer be allowed for sale unless they pass strict regulatory approval.

Routers, essential devices that connect homes and businesses to the internet are now being treated as potential security vulnerabilities, similar to foreign-made drones that were previously restricted.

According to the FCC, malicious actors have increasingly targeted routers as entry points for cyberattacks, enabling espionage, network disruption, and intellectual property theft. Investigations into several major cyber incidents between 2024 and 2025 including operations referred to as Volt, Flax, and Salt Typhoon, found that compromised routers played a role in attacks on US infrastructure.

The new rule does not affect routers already in use. However, all new models manufactured abroad must undergo a certification process before they can be imported, marketed, or sold in the US.

To gain approval, manufacturers will need to disclose details about foreign ownership or influence and outline plans to shift production to the United States. Some devices may still qualify for exemptions if cleared by agencies such as the Department of Defense or the Department of Homeland Security.

Routers that fail to meet these requirements will effectively be banned from entering the US market. The move is expected to impact widely used brands that manufacture overseas, including Chinese-made routers such as those from TP-Link, which have faced increased scrutiny amid security concerns.

Despite the sweeping restriction, there are exceptions. Routers manufactured within the United States such as those used in SpaceX’s Starlink system, are not covered by the ban and can continue to be sold without the same level of restriction.

The policy highlights a broader shift in how governments view everyday consumer hardware, treating devices like routers as critical infrastructure that must be secured against evolving cyber threats.