Federal Regulatory
FCC Restricts Foreign Routers in US Market
March 24, 2026
The Federal Communications Commission (FCC) has updated its Covered List to include all foreign-produced consumer-grade routers, effectively prohibiting new FCC equipment authorizations for these devices entering the U.S. market without federal clearance. This action, driven by national security concerns over supply-chain vulnerabilities and cyber threats linked to foreign routers—particularly those associated with Chinese cyber campaigns—allows existing authorizations to remain valid but restricts modifications except for critical software updates under a blanket waiver. Entities seeking to continue operations with these routers may apply for Conditional Approval exemptions through the Department of Homeland Security or Department of War. This regulatory change reflects a significant tightening of supply-chain controls impacting procurement and deployment of consumer networking equipment in federal and commercial sectors.
- Why this matters: Procurement professionals must account for the new FCC restrictions when sourcing consumer-grade routers, ensuring compliance with the Covered List and authorization requirements.
- Organizations supplying or integrating foreign-made routers should evaluate the need for Conditional Approval exemptions to maintain operations.
- This indicates increased scrutiny on supply-chain security, emphasizing the importance of vetted domestic or approved equipment in federal contracts.
- Contractors and vendors should anticipate potential impacts on product availability, certification timelines, and contract compliance related to networking hardware acquisitions.
Recently, malicious state and non-state sponsored cyber attackers have increasingly leveraged the vulnerabilities in small and home office routers produced abroad to carry out direct attacks against American civilians in their homes.
— White House-convened interagency body
Compromised routers can enable in-depth network surveillance data exfiltration, botnet attacks, and unauthorized access to U.S. government or American businesses’ networks.
— FCC National Security Determination
The White House convened an Executive Branch interagency body with national security expertise pursuant to the Secure Networks Act.
— FCC Public Notice
Agencies
Federal Communications Commission, Department of Homeland Security, Department of War, National Institute of Science and Technology, Department of Justice
Vendors
TP-Link
Locations
Sources
- US FCC Targets Foreign Routers in Supply-Chain Crackdown · BankInfoSecurity · Mar 24
- US FCC Targets Foreign Routers in Supply-Chain Crackdown · InfoRiskToday · Mar 24
- FCC Adds Foreign-Produced Consumer-Grade Routers to Covered List: Wiley · Wiley Rein · Mar 24