The spy you brought home and didn't even know about
Last month, the US imposed severe restrictions on the import of robotic vacuums, citing national security risks. What are the Americans so afraid of, and what is the connection between an innocent robotic vacuum and secret intelligence operations?
They vacuum the house, keep the milk cold, and beep when something burns in the kitchen — but while you are sure that your electrical appliances are working for you, it turns out they are mostly listening. Millions of vacuum cleaners, refrigerators, and smoke detectors that we all keep in our living rooms are currently equipped with cameras and microphones that are too small for you to notice, but powerful enough to collect sensitive information about you remotely. The American administration's fight against Chinese tech giants has already escalated, and the fear is clear: has the innocent device you bought on sale become your personal spy?
At the end of last month, the US Federal Communications Commission (FCC) decided to restrict the import of "advanced robotic devices of foreign manufacture." This broad phrasing covers not only humanoid robots but also the device we all know: robotic vacuum cleaners. In practice, new models from well-known companies like Roborock, Ecovacs, Dreame, Xiaomi, and Narwal will no longer be able to enter the US market due to the new decision.
What is considered an advanced robot?
Let's go back to the starting point: the law enacted in 2019, during Donald Trump's first term, prevented communication products such as smartphones and routers from Chinese companies like Huawei, ZTE, and Hikvision (a well-known security camera manufacturer) from being imported or marketed in the United States, due to fears of espionage. The concern was that information from these products is streamed to servers in China and that "backdoors" were installed in them, allowing a remote operator to turn them into active spying devices. Drones (especially DJI) and electric vehicles were later added to the list of regulated products for the same reason.
The definitions of an "advanced robotic device" include independent movement capability, navigation and obstacle avoidance, remote operation, sensors, network connectivity at a rate of at least 200 kilobits/second, and a weight of more than two kilograms. This description matches a robotic vacuum cleaner perfectly. The Chinese claim that the United States made the move for geopolitical reasons, as Americans cannot compete with the Chinese in the vacuum market. Stationary industrial robots, medical equipment, and surgical robotics are not included in the definition.
What does the vacuum know?
Oded Vanunu, head of product vulnerability research at the security company Check Point, explains the risks:
"Take the pager, for example. It's an electronic component, very limited, only with text. We saw the applications of location and destruction in the pager operation against Hezbollah. Now, millions of Chinese products are coming — cameras, vacuum cleaners, refrigerators, smoke detectors. These components are controlled by a cloud system exposed to the internet. Potentially, any small vulnerability allows entry into these systems and control over millions of components. If it's a component that has cameras, a microphone, and access to the home router, it gives me all the possible surfaces I want."
Vanunu explains how the supposedly innocent vacuum cleaner can be used for target intelligence — collecting information on a specific personality, such as a senior military officer or government official. The vacuum serves as an entry gate to the home network, from where it is possible to penetrate computers and smartphones. "In the world of offensive cyber, all means are fair," he says. "If you want to sit on a target and you know that this target has a home electronic component that can give you visual information, you can track when the target leaves the house."
AI is a danger
Artificial intelligence makes the business even more complex. First, this information is used to train machine vision models. Second, a manufacturer can install a small AI model with specific settings inside the vacuum from the start, making spying much more effective because the model already knows what to look for. AI is a double-edged sword, and we haven't even talked about the possibility of using it to quickly scan old videos, maps, and other information accumulated on company servers for military or business intelligence.
Afterword: Is the robotic vacuum a victim of war?
Chinese companies and others (like the American firm SharkNinja) have issued reassuring messages to the market. Models that have already received FCC approval will be able to continue to be marketed until existing stock runs out. Until 2029, manufacturers will be able to continue to release software updates for those who have already purchased a robotic vacuum in the United States. After 2029, either the exemption will be extended, or millions of owners will find themselves without security updates.
At the same time, the FCC, in cooperation with the American Department of Defense, has opened a conditional approval path that includes the disclosure of a long list of details, such as the country of origin of each component, supply chain concentration, and ownership structure. The Chinese Foreign Ministry responded with sarcasm, stating that protectionism does not make the United States more competitive and that the real struggle is a trade war over technology and business competition between two superpowers, with the robotic vacuum as its victim.
