Flipper Zero is continuing to gain popularity. This little toy-like device is actually a powerful hacking tool that you can use to clone electronic key cards, intercept signals, and more!
The device, which is modeled after the Tamagotchi, takes on the personality of a curious cyber dolphin. However, it allows even people with little to no cybersecurity skills to intercept radio signals, RFID waves, and access control system signals.
However, is Flipper Zero illegal to buy? What are the legal implications of using Flipper Zero, and can you get in trouble with the authorities for owning or using one?
Before you decide to purchase or use Flipper Zero, it’s crucial to understand what is allowed and what is not allowed under the law. Otherwise, you are at risk of running afoul of laws that were put in place to protect people’s digital privacy.
In this post, I will discuss the legal implications of Flipper Zero and why you should be cautious when using it.
The short version: Yes, Flipper Zero is legal to own and use. However, there are certain things that are illegal to do with it, so you must be careful not to cross that line.
Read on for a more detailed legal breakdown of what you can and can’t do with Flipper Zero.
What Can Flipper Zero Really Do?
Before we get into whether Flipper Zero is legal, let’s talk a bit about what Flipper Zero is and what it does.
A lot of people seem to think that Flipper Zero is an unstoppable, magical tool that can break into any access control system, change prices at gas stations, and hack any car key or remote system. That’s because it was hyped up a lot on YouTube and TikTok, especially when it first came out, when people still didn’t know what it was.
However, those videos were usually staged.
The truth is that Flipper Zero is indeed a powerful tool, but it has many limitations. It can mostly hack access control systems that use older technologies, older cars, and simple systems like TV remote control systems.
It can’t magically clone someone’s credit card, for example. You might be able to clone an access control card if the system is outdated, but any building that has decent security will have a more advanced system that Flipper Zero will be useless against.
You can still do cool stuff with Flipper Zero. For example, you can listen in on signals emitted from microchipped pets, or you can clone TV remotes in public restaurants and turn the TV on and off without having the remote.
I felt it was necessary to get that out of the way, but now that I did, let’s talk about the main intended usages of Flipper Zero.
The intended use of Flipper Zero is to give non-hackers and people without a lot of technical IT skills the ability to listen in on the signals around them. All kinds of devices around us are emitting signals, and to most of us, this is a closed-off world that we can’t access.
Flipper Zero solves that. It also turns regular people into amateur hackers, albeit for very simple things.
Here are some things Flipper Zero can do:
- Serve as a transceiver for garage door opener signals, smart sockets and bulbs, and more
- Clone low-proximity access control cards
- Clone NFC cards
- Control TVs, stereo systems, air conditioners, and other electronics using the built-in commands to raise the volume and change other settings
- Serve as a hardware exploration device to test protocols, flash firmware, and more
Also Read: Flipper Zero vs Flipper One
As you can see, Flipper Zero is a pretty basic tool once you look at the big picture. Any decent hacker can easily do what it does – and a lot more – using their own tools.
However, what Flipper Zero does is provide access for everyone who wants to conduct such activities. It makes hacking accessible to the average Joe.
Flipper Zero has a lot of benefits. Besides being fun to use, it can give newbies who are just getting started with hacking a chance to try out new things.
It can open up the world of hacking to people who have yet to gain prior knowledge or
experience.
Check Out: Pwnagotchi vs Flipper Zero
Is Flipper Zero a Hacker’s Dream or a Legal Nightmare?
Flipper Zero really revolutionized the industry because it was a unique invention. There is nothing currently on the market that comes close to it – an all-in-one hacking device for beginners – although various somewhat similar projects such as HackyPi have been launched.
That is why the authorities in some places have viewed Flipper Zero with suspicion. There are no real legal precedents about it.
It is also why US Customs seized a shipment of 15,000 Flipper Zeros that were shipped in from Hong Kong. According to a post by Flipper Zero, though, it wasn’t due to a global ban on Flipper Zero – rather, it was only that specific shipment that was put on hold.
They tested that by sending another shipment soon after with another logistics carrier. This time, this shipment went through successfully without being put on hold.
US Customs subjected that shipment to a 30-day hold. After this examination period passed, though, it released the shipment, according to an update by Flipper Zero, as there were no legal grounds to confiscate the Flippers.
After all, Flipper Zero is not illegal, at least in the United States. There is no law that says you can not buy, sell, own, or import Flipper Zeros.
However, in other countries, things may be different. In Brazil, for example, authorities have been seizing all incoming Flipper Zero purchases made by Brazilian customers.
That’s because, in Brazil, such devices must be certified by the country’s telecommunications agency, Anatel. However, since Flipper Zero is not approved, the government has been redirecting all Flipper Zero shipments to Anatel, as shown in a tracking update shared by a Reddit user.
Also Read: Fake Spam Text Examples & How To Report?
Meanwhile, Anatel has refused to certify Flipper Zero. The reason for that is that the government of Brazil is afraid people will use Flipper Zero for illegal purposes; to prevent crime, it will not allow certification of the device.
Flipper Zero, though, maintains that it is legal to import into all countries. Still, in Brazil, without the proper certification, individuals have been restricted from accessing their purchased Flippers.
In the US, at least, there are no laws that say Flipper Zero is illegal.
Furthermore, according to Sapsan Sklep, a Polish company selling the device, Flipper Zero has also been entered into the list of permitted items for trading in the European Union.
Flipper Zero has long been compared to a Swiss knife, with people calling it the “Swiss knife of hacking.” I think that is a helpful analogy that we can use to understand the legality of Flipper Zero as well.
bergsten, Public domain, via Wikimedia Commons
A Swiss knife, like any knife, is legal to purchase and own. However, that doesn’t mean that you can do whatever you want with a Swiss knife or any knife; there are plenty of illegal activities you can do with it.
For example, stabbing someone with a knife or mugging them are both obviously illegal. On the other hand, using a knife in your kitchen to cut a cake is legal.
The same goes for Flipper Zero. Using Flipper Zero to clone your own garage door key and enter your house is legal.
Using it to clone someone else’s garage door or access control key and enter their home or private office without permission is illegal.
Check Out: Best Dehashed Alternatives
Is Flipper Zero a Card-Skimming Device?
Lance Cpl. Brandon R. Holgersen, Public domain, via Wikimedia Commons
According to TechTarget, Amazon banned Flipper Zero because it was flagged as a card-skimming device.
Furthermore, according to a Reddit post, eBay also banned Flipper Zero because of the potential it could be used for crime. Meanwhile, professional-grade hacking tools, including SDR devices, are still allowed on eBay, according to the post.
That is most likely a response to all the hype about Flipper Zero and how it could be used for all kinds of illegal activity, despite that not actually being the case. Also, the other devices require know-how to use, while Flipper Zero is meant to be an all-in-one hacking device for the uninitiated.
So, is Flipper Zero a card-skimming device, and might it be banned by the authorities as well for that reason? The answer is no.
The truth is that you can’t really clone credit cards with Flipper Zero. Let me explain a bit more.
Flipper Zero contains an NFC reader, which allows you to read signals from NFC chips.
Nowadays, credit cards often have NFC chips, which transmit information and enable contactless payment.
One of the benefits of putting NFC chips in credit cards is convenience. You can tap your card to make payments quickly and easily.
One of the disadvantages, though, is security. The NFC chip transmits certain information to anyone who has a reader, including someone with Flipper Zero; this information is not encrypted.
However – and this is the critical part – the NFC chip only transmits certain data to Flipper Zero, including the card type and the PAN (Primary Account Number), which is basically your credit card number.
European Commission, Attribution, via Wikimedia Commons
Nevertheless, that is not enough to perform a transaction. The card reader at a POS (Point of Sale) always communicates with the card via a secure handshake, and they exchange information. The card issues a one-time CVV code (similar to the CVV on the back of your card that you have to enter for online purchases).
This one-time code does expire quickly and can not be used at a later point. So, even if you get that code, you won’t be able to store it and use it for a transaction because it will already be outside the allotted time frame, and the code will have changed.
Flipper Zero later removed the ability to save cloned credit card information to combat fraud, but even with the capability to save the data, it would be useless because you would not be able to use the information received from the NFC chip for transactions.
Flipper Zero also can’t retrieve the CVV code from a card unless the owner of Flipper Zero can physically see the card or take a picture of it.
Even then, you can’t use that same CVV code to perform transactions at a POS terminal because that requires the one-time handshake code, which is not the same as the physical code.
The Flipper Zero Loophole: How to Stay on the Right Side of the Law
Turbospok, CC BY-SA 4.0, via Wikimedia Commons
There are plenty of things which you can legally use Flipper Zero for. You won’t get in trouble with the authorities for owning or operating a Flipper Zero as long as you don’t infringe on anyone’s rights.
For example, you can’t clone someone’s access card without their permission, read their credit card information, hijack their TV or air conditioning system, or otherwise invade their privacy physically or digitally.
Let’s go over some legal use cases for Flipper Zero.
What You Can Do With Flipper Zero?
Cloning Your Own Access Cards and Keys
Ca.garcia.s, CC BY-SA 4.0, via Wikimedia Commons
Flipper Zero is able to clone a lot of access control cards that use old or simple technology without advanced security. It could also clone car key fobs on older car systems as well as some garage door openers.
You can clone your access cards and use your Flipper Zero as a one-in-all device for getting into your garage, office, and car.
Use as a Remote
Photo by JESHOOTS.com, Pexels
Flipper Zero is also able to replace your remotes.
Do you always have trouble finding the TV remote? Does it always seem like your TV remote gets lost under the couch?
If you lost your TV remote, you can use Flipper Zero instead. It could also be used as a remote for other things, like your smart light bulbs or phone camera.
Read Signals
Flipper Zero is fun to have because it can read signals emitted by all kinds of devices. It is your portal for exploring the world of electronic signals all around you.
For example, you might be able to pick up signals from pet microchips or from weird things like soap dispensers in public places that emit a signal when they are running out of soap. Here are the types of pet microchips supported by Flipper Zero.
Use It for Fun
Flipper Zero was modeled after Tamagotchi, a digital pet. The little dolphin is like a digital virtual pet that you can take with you.
The more you interact with Flipper Zero, the happier your pet will be. It can smile and do activities like code or swim.
It can also be unhappy or get angry. Read more about it here.
There are also games you can play on Flipper Zero, such as Tetris or Minesweeper. You can download games to your Micro SD card and then play them on Flipper Zero.
What You Can’t Do With the Flipper Zero?
Clone People’s Cards Without Permission
You can’t clone someone else’s access control card, garage door opener, or car key fob without their permission.
You might think it’s a funk prank to play on a neighbor, friend, or office mate, but unless you are a really close friend and are sure that they will be okay with it, I would advise against it.
It is definitely illegal to enter someone’s house, car, or property by cloning their card with Flipper Zero. That is trespassing.
Try to Copy Someone’s Credit Card Information
Photo by energepic.com, Pexels
You can see some credit card information by reading the NFC chip. You can no longer save that information on your Flipper Zero, as that feature was disabled.
However, reading someone’s credit card details without their permission is not something you are allowed to do with Flipper Zero anyway.
Tamper With Anyone’s Things
You should not tamper with people’s systems. For example, don’t hack a TV in a restaurant.
Sure, you probably won’t get caught, but unless you have permission, you can’t go around shutting off TVs in restaurants or public buildings for fun.
Broadcast on Restricted Channels
Listening to unencrypted broadcasts from any channel is usually legal. However, transmitting on certain radio frequencies might be illegal.
For example, you can’t transmit on radio frequencies meant for police and emergency responders. The same applies to Flipper Zero.
Flipper Zero – Expert Opinions and Case Studies
There’s not a lot of case law on the legality of Flippers Zero – nothing came up when I searched through case law for “Flipper Zero” on Google Scholar.
According to Stephen Cass, writing for the Institute of Electrical and Electronics Engineers, the Flipper itself is legal, but it can be modified to be used illegally.
He uses the analogy of lock picking tools (a set of which is displayed below) – they are permitted to own, but they aren’t legal to use to open someone’s door and break into their home.
Chris Mitchell, Public domain, via Wikimedia Commons
Meanwhile, Scott Schober, CEO of Berkeley Varitronics Systems, writes that Flipper Zero blurs the line between legal and illegal hacking, but hacking isn’t necessarily bad. In the past, people used that word to refer to curiosity and finding out about new stuff.
In Conclusion: Key Takeaways on the Legal Status of Flipper Zero
Flipper Zero is legal to own in the US, and the US also does not systemically stop imports (although it did once). It is also legal to use Flipper Zero – there are many lawful things you can use it for.
It’s like owning a gun, knife, or a set of lock picking tools. The question is what you do with them. It can be used for good or bad.
Laws can change, though, and they can also vary by country or region. This article does not constitute legal advice, so you should always consult local laws and seek legal advice if you are still confused.
As a general rule, though, you should be fine as long as you only use Flipper Zero to clone your own things and interfere with your own devices. As soon as you start tampering with someone else’s things, you run the risk of committing a crime.
