The Brazilian National Telecommunications Agency has been intercepting incoming purchases of the Flipper Zero hacking tool due to its alleged use in criminal activity.
Flipper Zero is a portable cybersecurity tool that enables pentesters and hacking enthusiasts to tinker with a range of hardware, including RFID emulation, digital access key cloning, radio communications, NFC, infrared, and Bluetooth.
Security researchers have showcased Flipper Zero’s capabilities on social media, demonstrating how it can trigger doorbells, perform replay attacks, and be used as a digital key.
Several Brazilian purchasers of the tool have reported that their shipments are being redirected to Anatel, Brazil’s telecommunications agency, due to a lack of certification with the country’s Radio Frequencies department.
The agency has flagged Flipper Zero as a tool used for criminal purposes, making its clearance complicated and preventing it from reaching its final destination. The device does not use illegal hardware, but its market success fueled negative media attention that portrayed it as a risk to society.
Buyers have been trying to get their Flipper Zero devices cleared by Anatel, exchanging advice on Reddit and attempting to apply for personal homologation certificates.
However, many report that the agency has rejected the certification procedure because Flipper Zero is allegedly being used to facilitate crime. As a result, the unexpected interceptions of the $169 portable multi-functional tool continue to occur.
The Electronic Frontier Foundation (EFF) has published a report on the issue, highlighting the need for clear and consistent certification processes that do not impede the development of innovative cybersecurity tools.