FCC Bans New Foreign Routers: Security Move or Manufacturing Play?

FCC Bans New Foreign Routers: Security Move or Manufacturing Play?

On March 23, 2026, the Federal Communications Commission updated its Covered List to include all consumer-grade routers produced in foreign countries. The practical effect: no new foreign-made router model can receive FCC equipment authorization, which means it cannot legally be imported, marketed, or sold in the United States. The move affects virtually every major router brand on the planet.

The ruling is framed as a national security measure. But dig into the details, and a second story emerges: this may be as much about industrial policy and domestic manufacturing as it is about cybersecurity. We think consumers and businesses deserve both sides.

You can read the official FCC announcement at fcc.gov, review the full FAQ at fcc.gov/faqs, and download the official Fact Sheet PDF at docs.fcc.gov.

What the FCC Did

The FCC updated its Covered List, a catalog of communications equipment deemed to pose unacceptable national security risks. Under the Secure and Trusted Communications Networks Act, the FCC cannot add equipment to this list on its own. It must implement a formal determination made by national security authorities. In this case, a White House-convened Executive Branch interagency body made that call, concluding that routers produced in any foreign country pose unacceptable risks to national security and to the safety of US persons.

The determination cited two specific concerns: that foreign-produced routers introduce a supply chain vulnerability capable of disrupting the US economy, critical infrastructure, and national defense, and that they pose a severe cybersecurity risk that could be leveraged to immediately and severely disrupt US critical infrastructure. The FCC pointed to the Volt, Flax, and Salt Typhoon cyberattacks as concrete examples of foreign-made routers being weaponized against American networks and infrastructure.

FCC Chairman Brendan Carr issued this statement: “I welcome this Executive Branch national security determination, and I am pleased that the FCC has now added foreign-produced routers, which were found to pose an unacceptable national security risk, to the FCC’s Covered List.”

The Security Case Is Real But Incomplete

The cyberattacks cited in the ruling were not hypothetical. Volt Typhoon, Flax Typhoon, and Salt Typhoon were real, large-scale, state-sponsored intrusion campaigns that exploited vulnerabilities in small and home office routers to gain footholds in American networks. The security threat from poorly maintained, cheaply built foreign networking hardware is documented and serious.

But a forward-only import ban on new models is a strange remedy for an existing problem. Millions of foreign-made routers are already operating in American homes and businesses right now. Those devices are completely untouched by this ruling. If the primary goal were to reduce actual cybersecurity risk on US networks today, the FCC would be implementing mandatory firmware audit requirements, annual reauthorization processes, or patching attestation standards for all devices currently installed. This ruling does none of that.

It bans future new models while leaving today’s risk entirely in place.

The Conditional Approval pathway, which is the only route for manufacturers to bring new models to market, requires companies to submit a plan for shifting at least some of their manufacturing to the United States. That is not a security requirement. That is an industrial policy requirement wrapped in security language, and it mirrors exactly the structure used in the December 2025 drone ban, where every exemption granted so far has gone to a non-Chinese manufacturer.

Who Gets Hurt

The scope of this ruling is sweeping. China controls an estimated 60 percent of the US home router market. But this ban is not limited to Chinese companies. The FCC’s own FAQ page is explicit: the nationality of the producer is irrelevant. Any router produced in a foreign country is covered, regardless of where the company making it is headquartered.

That means US-based companies are caught in this net too. Netgear, Amazon Eero, and Google Nest Wifi all manufacture their products in Asia, much of it in Taiwan and countries that are not geopolitical adversaries of the United States. Brands including TP-Link, D-Link, Asus, and Linksys build their hardware across Taiwan, Thailand, and Vietnam. No major consumer router brand currently manufactures in the United States at any meaningful scale.

Until manufacturers either obtain Conditional Approval or establish domestic production, do not expect to see any new router models on US store shelves.

What Is Not Affected

To be clear about what the ruling does not do:

Existing routers already in use are completely unaffected. Consumers can continue using any router they have lawfully purchased or acquired. Retailers can continue to import and sell existing models that already carry an FCC ID. Additionally, covered devices can continue to receive software and firmware updates through at least March 1, 2027, with the possibility of that deadline being extended.

For enterprise and cellular router customers, equipment from Peplink, Cradlepoint, Semtech Digi, Teltonika, and similar vendors that already holds valid FCC equipment authorization is not affected by today’s action. Those devices can continue to be imported, deployed, and supported as before.

The Conditional Approval Path

The FCC did leave an exit ramp. Manufacturers can apply to the Department of War or the Department of Homeland Security for Conditional Approval. An approved applicant would then be permitted to proceed with FCC authorization for those specific products.

However, the Conditional Approval guidance requires companies to disclose their full management structure, detail their supply chain, and lay out a concrete plan for onshoring manufacturing to the US. It is a significant hurdle with no established timeline and no guaranteed outcome. Looking at the drone ban’s track record since December 2025, exactly four drone systems have received Conditional Approval, all from non-Chinese manufacturers, while market leaders DJI and Autel remain fully blocked. The router market should expect a similar pattern.

Applications can be submitted to conditional-approvals@fcc.gov.

Several major manufacturers operate US-incorporated subsidiaries and will almost certainly challenge the scope of this ruling. TP-Link Systems, which was spun off from its Chinese parent, has already been sued by the Texas Attorney General over data security allegations, and has consistently maintained that the Chinese government has no ownership or control over its products or user data. The FCC’s position that country of production, not corporate nationality, is the controlling factor will face serious legal scrutiny, particularly for companies manufacturing in Taiwan and other allied or partner nations.

Representative John Moolenaar, Republican chair of the House Select Committee on China, praised the ruling, saying routers are “key to keeping us all connected and we cannot allow Chinese technology to be at the center of that.” The Chinese Embassy had not commented as of publication.

5Gstore Take

This ruling is significant and worth monitoring closely, but it does not require panic. Here is our honest read for 5Gstore customers and anyone shopping for networking gear right now.

If you are running Peplink, Cradlepoint, Semtech, Digi, or Teltonika cellular hardware, your equipment is unaffected. Devices with existing FCC authorization can continue to be imported, sold, and supported. Your current fleet is fine, and procurement for those platforms continues as normal.

If you are a home or small business user who has been considering a router upgrade, now is a reasonable time to act on it. Existing authorized models are still available, retailers can still sell current inventory, and buying a currently approved model locks in both availability and pricing before the market tightens. Once authorized inventory runs thin and new models cannot enter the market, selection will shrink and prices may rise.

That said, we think it is worth being honest about the dual nature of this ruling. The security concerns cited are real. Volt Typhoon, Salt Typhoon, and related campaigns exploited foreign-made routers at scale, and that is not a manufactured threat. But a rule that bans new foreign router models while leaving millions of existing foreign-made devices completely untouched does not make US networks measurably more secure today. What it does do is create strong pressure to move manufacturing to the United States, which is an industrial policy goal.

Whether the resulting supply disruption, potential price increases, and reduced consumer choice are worth that outcome is a fair question, and one the courts may ultimately weigh in on. In the meantime, if you have questions about how this affects your networking hardware decisions, our team is ready to help. Contact 5Gstore and we will walk you through what is currently available and what makes sense for your setup.


FAQ

Does this mean I need to replace my router? 

No. If your router is already in your home or office and carries an FCC ID, you can keep using it indefinitely. This ruling only prevents new foreign-made router models from receiving FCC authorization going forward.

Which brands are affected for new models?

Essentially all of them. TP-Link, Asus, Netgear, D-Link, Linksys, Eero, Google Nest Wifi, and others manufacture overseas and cannot bring new models to market without Conditional Approval. This applies regardless of whether the company is Chinese, American, Taiwanese, or any other nationality.

Can manufacturers get an exemption? 

Yes, through a Conditional Approval from the Department of War or the Department of Homeland Security. Applicants must submit to conditional-approvals@fcc.gov and provide a plan to shift at least some manufacturing to the United States. There is no established processing timeline.

Will my current router still get security updates? 

Covered devices can continue to receive software updates through at least March 1, 2027, with potential for extension beyond that date.

Does this affect Peplink, Cradlepoint, Semtech, Teltonika or Digi cellular routers? 

Not for existing models. Devices that already carry an FCC ID and valid equipment authorization can continue to be imported, sold, and supported. New models from those vendors produced overseas would need to navigate the same Conditional Approval process for future releases.

Could this lead to higher router prices?

Quite possibly, over time. As current authorized inventory depletes and new models cannot enter the market without Conditional Approval, supply constraints could push prices higher, particularly in the consumer segment where the product pipeline will freeze first.