The FCC's marketplace rule takes effect October 13. Drone listings on Amazon and eBay will have to carry a real FCC ID.
A Third Report and Order published September 11 closes a component loophole for producers named on the Covered List, makes online marketplaces answerable for marketing unauthorized devices, and requires an FCC ID at the online point of sale, with compliance dates of March 1 and June 1, 2027.
By Joel Kelly

Decision brief
For a drone buyer the operative change is the FCC ID at checkout, which turns the lookup this site's ban checker already asks you to do into something the listing has to carry. The component ban is narrower than the headlines: it reaches components from producers named on the Covered List, and the FCC says it does not reach the December 2025 foreign-produced-drone entry unless the producer is independently listed. Nothing here touches a drone you already own, and the firmware-change waivers for already-authorized foreign drones still run through January 1, 2029.
- Effective
- Oct. 13, 2026
- FCC ID at checkout
- Mar. 1 / Jun. 1, 2027
- Component ban scope
- Named producers
91 FR 57798, ET Docket 21-232, FCC 26-50
Marketplace-fulfilled listings first, third-party listings second
Not production-location entries such as foreign-produced UAS, per the FCC
What the order does
A component loophole closed for named producers, effective October 13.
The Federal Communications Commission published its Third Report and Order in ET Docket 21-232, FCC 26-50, in the Federal Register on September 11 at 91 FR 57798. The order was adopted July 22 and released July 23. It takes effect October 13, 2026, thirty days after publication, with later compliance dates for the marketplace provisions. A Third Further Notice of Proposed Rulemaking accompanies it. The FCC's own PDF of the full order is not readable by this desk's tools, so this report relies on the Federal Register text of the rule and its summary.
The first change prohibits equipment authorization for any device that incorporates a logic-bearing hardware component produced by an entity on the Covered List, where the device would itself be barred had that entity produced the whole thing. The FCC's reasoning is that a compromised component can enable interception, disruption, sabotage, or unauthorized access regardless of who assembles or brands the finished device. A logic-bearing component is defined by the agency's existing digital-device test: anything that generates timing signals above 9,000 cycles per second using digital techniques, or that uses radio frequency energy for data processing. Housings, fasteners, resistors, wiring, and plain battery cells are excluded, and so, for now, are software and firmware. The prohibition applies only to authorization applications filed on or after October 13. Previously authorized equipment is unaffected, and applications already pending are exempt unless amended to add or change such a component.
The drone-specific limits
Production-location entries are carved out, and the 2029 firmware waiver stands.
The limit that matters for drones sits in the same section. The FCC states that the prohibition applies to producer-based Covered List entries, the named companies, and that it does not apply to production-location entries, giving as its own example UAS, UAS critical components, or routers produced in a foreign country, unless the producing entity is independently identified on the Covered List. The December 22, 2025 drone action was a production-location entry. On its face, then, the component rule is aimed at named producers such as Huawei, ZTE, Hikvision, Dahua, and Hytera rather than at every foreign-made flight controller. This desk's earlier reports described the December action as adding DJI to the Covered List through that categorical entry. Whether the FCC regards DJI as independently identified, which would extend the component rule to DJI-made parts inside other makers' products, is not resolved by the Federal Register text, and this report will be updated when the full order can be read.
Second, any Covered List entity that wants a permissive change to equipment, covered or not, must apply for full recertification instead, and no Covered List entity may use the Supplier's Declaration of Conformity route for any modification. The FCC says this requirement also does not apply to production-location entries, and that the limited waivers allowing Class I and Class II permissive changes for Covered List drone equipment and covered routers through January 1, 2029 remain in effect on their terms. That is the waiver that lets already-authorized foreign drones keep receiving firmware updates.
Marketplaces, and what to do
An FCC ID on every new drone listing, and liability without a knowledge element.
Third, the marketing rules now name online marketplaces. Listing regulated equipment on a marketplace together with consignment, warehousing, order processing, labeling, packaging, billing, or fulfillment services counts as distribution for the purpose of selling, even when a third-party seller makes the sale. Marketplaces that market unauthorized devices face enforcement on the same basis as any other person, without a willfulness or knowledge element. And under a new paragraph in section 2.803(c), a marketplace that sells its own devices, or that has physical access to or title over a seller's device, must display a valid and accurate FCC ID at the online point of sale, with compliance required by March 1, 2027. A marketplace hosting third-party listings without touching the device must display an FCC ID it has verified against the FCC's database and require the seller to certify its accuracy, by June 1, 2027. Exempt are listings published before October 13 and never amended, sellers below the INFORM Consumers Act's high-volume threshold, and used devices. The FCC declined for now to require FCC IDs on packaging and estimated one-time industry costs of no more than $300 million, mostly marketplace listing systems, with recurring costs under $40 million a year.
For a buyer, this codifies the check the desk has recommended since the HoverAir Versa episode, when a listed FCC ID turned out to be a grant the agency later set aside: read the FCC ID on the listing and look it up before paying. From next spring the ID will be on the page. Whether it is valid is still your lookup, and a listing that shows none after the compliance dates is telling you something. For anyone selling drones through Amazon or eBay in volume, June 2027 is the date to plan for, and the liability language applies from October 13. Nothing in the order changes the status of a drone already in your hands. The 26-189 import proposal is a separate proceeding still awaiting an FCC decision, and the September 3 tariffs are a separate cost on top.
Source file
Verify the reporting
- Federal Register: Protecting Against National Security Threats to the Communications Supply Chain Through the Equipment Authorization Program, final rule, 91 FR 57798 (September 11, 2026)
- GovInfo: official PDF of FR Doc. 2026-18535
- FCC: Third Report and Order and Third Further Notice, FCC 26-50 (full text; the FCC's servers block automated readers, so this desk has not read it directly)
Continue on Drone Authority
Put the report to work
Continue this beat
More market reporting

Gear market · August 24, 2026
The FCC yanked the HOVERAir Versa's certification three days after launch. A listed FCC ID is no longer proof enough.

Gear market · June 18, 2026
FCC opens a narrow import lane for Chinese 'toy' drones, but not the DJI Neo

Rule watch · September 7, 2026