The FCC is about to retroactively ban DJI front companies, and that changes the rules for every imported gadget

The FCC is ready to swing a new hammer. For the first time, the agency plans to retroactively ban gadgets that already received its approval to be imported and sold in the United States, specifically, products from eight companies it suspects are front operations for Chinese drone maker DJI.

Two weeks ago, the FCC proposed a $25,000 fine on those companies, including the ones behind Skyrover drones and Xtra cameras. Now it wants more than a fine: a full ban on importing, distributing, marketing, and selling those existing products on US soil. The approach mirrors how federal agencies have started using AI-driven vulnerability discovery to escalate enforcement, as seen in the broader shift toward automated security actions.

The ban would not apply to gadgets already bought by consumers. And it won't happen immediately; the FCC is taking public comments for 30 days first. But the agency's track record suggests those comments may not change much. It largely ignored public feedback on net neutrality and later lied about a cyberattack, according to reporting by The Verge. The US government has never released specific public evidence that foreign drones pose a national security threat, or explained why products like cameras should be caught up in the ban. This pattern of opaque enforcement is reminiscent of how other regulatory bodies have struggled with transparency in high-stakes cybersecurity actions.

The targeted companies include Cogito Tech, Fixaxo Technology, Lyno Dynamics, Skyhigh Tech, Spatial Hover, SZ Knowact and WaveGo Tech (both behind Skyrover), and Xtra Technology. None responded to the FCC's requests for information. Agricultural drone brand XAG, also on the list, replied once but not with what the FCC asked for. The FCC's ability to identify these connections parallels how security researchers now use automated tools to trace threat actors, similar to VulnClaw's automated pentesting pipeline.

All except XAG were flagged by security researcher Konrad Iturbe, who traced the companies back to DJI through FCC filings last year. The FCC also cited earlier reporting by The Verge on the issue.

One concrete example: Xtra's version of the DJI Osmo Pocket 3, a product that got FCC approval before the drone ban existed and is still sold on Amazon with next-day shipping. If the retroactive ban goes through, that camera disappears from major retailers and Xtra's own website. The company may even have to write off inventory sitting in US warehouses. Such supply chain disruptions have precedent in how CISA's exploited vulnerability list forces rapid patching across federal systems.

The FCC also announced it is severing ties with Chinese test lab SGS-CSTC Shenzhen, which helped some of those products get approved. SGS-CSTC argued it is not controlled by the Chinese government, claiming CSTC, a China-owned entity, holds only 15 percent of the lab. But US law considers an entity to have control at 10 percent or more ownership, at least for radio authorization purposes. This re-evaluation of trust in testing infrastructure echoes concerns raised in the Hugging Face breach, where trusted platforms were exploited.

The FCC has temporarily deferred the grantee codes of these companies, a phrase so unusual that a former FCC official told The Verge he has never heard it before. It is unclear whether that means these companies cannot get future gadgets authorized for import and sale. The agency is effectively testing its retroactive powers on a small set of targets first, and the outcome could set a precedent for how it handles future national security concerns in imported electronics.

The FCC gave the eight companies until July 20 to respond. None did. The agency said on July 10 it might take further action if they stayed silent. Now we are watching to see what comes next. The broader implications of this enforcement strategy align with the tectonic shifts in global tech regulation and market assumptions.