FCC Update: March 2026

The FCC router shift makes firmware provenance a buying question.

Airfy scopes the supported hardware path, firmware provenance, and evidence pack before a regulated deployment is sold. Hardware swap depends on the reviewed device and jurisdiction.

What happened.

On March 23, 2026, the FCC stopped granting new certifications for consumer routers manufactured outside the USA. This affects most major consumer brands.

The decision followed state-sponsored cyber campaigns, Volt Typhoon and Salt Typhoon, linked to router compromise across US critical infrastructure. These were not ordinary bugs. Router provenance became part of the security conversation.

Existing certified routers remain legal to sell and use. The ban applies to new FCC certifications going forward. Firmware updates and supply-chain evidence still need to be reviewed per fleet.

How Airfy helps.

Firmware provenance

Airfy documents the firmware path and source-availability posture per released component.

Hardware review

Boards and routers are reviewed against the target jurisdiction before the deployment is sold.

Supported models

Existing routers can stay only where the specific model and firmware path are supported.

Evidence pack

Procurement and compliance claims are tied to the reviewed hardware, firmware, hosting, and support model.

Timeline.

2022 to 2024
Volt Typhoon and Salt Typhoon: state-sponsored cyber campaigns are linked to consumer-router compromise across US critical infrastructure
March 23, 2026
FCC bans new certifications for foreign-produced consumer routers
Ongoing
Existing certified models remain legal to sell and use
Under review
Foreign manufacturers may apply for conditional approval with onshoring plans. Approval status must be checked before quoting.

Ready to go compliant?

US-developed firmware on California-assembled boards, or on your existing fleet. Two ways in: cloud-managed for busy teams, open core for builders.