Jump to content

DJI: Difference between revisions

From Consumer Rights Wiki
← Older edit
VisualWikitext
SinexTitan (talk | contribs)
confirmed, superconfirmed
1,335 edits
See Also cultivated
OrwellsJester (talk | contribs)
confirmed
22 edits
m Add citation for DJI rebind
 
(11 intermediate revisions by 9 users not shown)
Line 1: Line 1:
{{StubNotice}}
{{#seo:
{{Cleanup}}
|description=DJI forces app activation on cameras and drones, locks devices after 5 uses, broadcasts unencrypted pilot location, and faces US FCC bans.
}}
{{CompanyCargo
{{CompanyCargo
|Description=Chinese tech company producing drones and camera accessories for use in drone flying and surveying.
|Description=Forces app activation on cameras and drones; locks devices after 5 uses; broadcasts unencrypted pilot location; US-sanctioned & FCC-banned
|Founded=2006
|Founded=2006
|Industry=Cameras, Drones, Electronics
|Industry=Drones,Cameras,Electronics
|Logo=DJ logo.svg
|Logo=DJI logo.svg
|ParentCompany=
|ParentCompany=
|CompanyAlias=SZ DJI Technology Co. Ltd.,Da-Jiang Innovations
|Type=Private
|Type=Private
|Website=https://www.dji.com/
|Website=https://www.dji.com/
}}
}}
[[wikipedia:DJI|'''DJI''']] is a Chinese technology company headquartered in Shenzen. DJI manufactures commercial unmanned aerial vehicles (UAV or Drone) for aerial photography and videography. It also designs and manufactures camera systems, gimbal stabilizers, propulsion systems, enterprise software, aerial agriculture equipment, and flight control systems.
'''DJI''' is a Chinese drone and camera manufacturer that requires mandatory app activation on its consumer products, locks cameras and gimbals into non-functional states after 5 activation skips, and restricts drone flight to 30 meters altitude and 50 meters distance when a user is not logged into a DJI account.<ref name="mavic3-manual">{{Cite web |url=https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf |title=DJI Mavic 3 User Manual v1.0 |website=DJI |access-date=2026-03-29}}</ref> The US Department of the Treasury added DJI to its Non-SDN Chinese Military-Industrial Complex Companies list in December 2021, citing DJI's provision of drones to the Xinjiang Public Security Bureau, which are used to surveil Uyghurs in Xinjiang.<ref name="treasury">{{Cite web |url=https://home.treasury.gov/news/press-releases/jy0538 |title=Treasury Identifies Eight Chinese Tech Firms as Part of The Chinese Military-Industrial Complex |date=2021-12-16 |website=U.S. Department of the Treasury |access-date=2026-03-29}}</ref> In December 2025, DJI was added to the FCC's Covered List, banning the import and sale of new DJI drone models in the United States.<ref name="fcc-order">{{Cite web |url=https://www.fcc.gov/document/fcc-updates-covered-list-add-certain-uas-and-uas-components-0 |title=FCC Updates Covered List to Add Certain UAS and UAS Components |website=Federal Communications Commission |access-date=2026-03-29}}</ref>


==Consumer impact summary==
==Consumer impact summary==
Some of DJI's devices require an initial connection to a proprietary app (typically DJI Mimo or DJI Ronin) in order to be usable, as well as to provide firmware updates. This application also requires various permissions to location and other privacy-impacting data which is then provided to and stored by DJI.


In particular, DJI drones have the following limits and caveats on their operation:
*DJI drones require persistent login to a DJI account. When signed out, flight is restricted to 30 m altitude and 50 m range.<ref name="mavic3-manual" />
*DJI cameras (Osmo Action 5 Pro, Osmo Pocket 3) require activation through a proprietary app; after 5 skips the device locks its core functions until activation is completed (see [[Forced app download]], [[Forced account]]).<ref name="dji-activation">{{Cite web |url=https://support.dji.com/help/content?customId=01700006759&spaceId=17&re=US&lang=en&documentType=&paperDocType=ARTICLE |title=Activating Your Handheld Products |website=DJI Support |access-date=2026-03-29}}</ref>
*The DJI Fly app became unavailable on the Google Play Store in 2021, forcing Android users to sideload APK files from DJI's website.<ref name="dronedj-fly-removal">{{Cite web |url=https://dronedj.com/2021/01/27/latest-dji-fly-android-app-only-available-from-djis-website-not-the-play-store/ |title=You need to download the DJI Fly app from DJI's website |date=2021-01-27 |website=DroneDJ |access-date=2026-03-29}}</ref>
*DJI drone telemetry (serial number, pilot GPS coordinates, return-to-home location) is broadcast unencrypted via the DroneID protocol. DJI admitted the signal was unencrypted by design.<ref name="verge-aeroscope">{{Cite web |last=Hollister |first=Sean |url=https://www.theverge.com/2022/4/28/23046916/dji-aeroscope-signals-not-encrypted-drone-tracking |title=DJI insisted drone-tracking AeroScope signals were encrypted; now it admits they aren't |date=2022-04-28 |website=The Verge |access-date=2026-03-29}}</ref>
*DJI uses anti-rollback hardware fuses to prevent firmware downgrades, blocking users from restoring removed features.<ref name="mavicpilots-fuse">{{Cite web |url=https://mavicpilots.com/threads/not-be-able-to-degrade-firmfare-of-dji-mini2-from-01-06-0200.134806/post-1518967 |title=Not be able to degrade firmware of DJI Mini2 from 01.06.0200 |website=MavicPilots |access-date=2026-03-29}}</ref>
*DJI dropped Mobile SDK support for consumer drones starting with MSDK V5 in 2022, blocking third-party app development for models like the Mavic 3 and Mini 3 Pro.<ref name="sdk-forum">{{Cite web |url=https://sdk-forum.dji.net/hc/en-us/articles/8818033368857-What-is-the-plan-for-the-consumer-level-aircraft |title=What is the plan for the consumer level aircraft |website=DJI Developer Forum |access-date=2026-03-29}}</ref>
*DJI's official end-of-life page lists over 111 discontinued products for which the company no longer provides repairs, parts, or firmware updates.<ref name="gizmochina-eol">{{Cite web |url=https://www.gizmochina.com/2025/12/08/check-the-list-111-dji-products-including-popular-drones-now-out-of-support/ |title=Check the list: 111 DJI products, including popular drones, now out of support |date=2025-12-08 |website=Gizmochina |access-date=2026-03-29}}</ref>


*They require persistent online reauthentication with a DJI account. Offline/signed-out operation is possible, however the account will sign out after a period of no internet connectivity (usually a few weeks). When signed out, flight altitude is limited to 30m, and flight distance is limited to 50m. From the [https://dl.djicdn.com/downloads/DJI_Mavic_3/DJI_Mavic_3_User_Manual_v1.0_en.pdf DJI Mavic 3 manual]: "For increased safety, flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight. This applies to DJI Fly and all apps compatible with DJI aircraft".
==Background==
*The [https://www.dji.com/dji-fly DJI Fly app] consistently checks for new firmware and No-Fly Zone (NFZ) updates, and if detected, can soft-brick the device (preventing takeoff) until the updates are installed, showing the error "Unable to take off. Update Fly Safe database/Fly Safe database requires update".
 
*The DJI Fly App, required to control and operate DJI consumer drones with a mobile device, was removed from the Google Play Store in 2021. DJI requires Android users to install an APK file provided on their website in order to control their drone.
DJI (Da-Jiang Innovations) was founded in 2006 by Frank Wang (Wang Tao) in Shenzhen, China.<ref name="wikipedia-dji">{{Cite web |url=https://en.wikipedia.org/wiki/DJI |title=DJI |website=Wikipedia |access-date=2026-03-29}}</ref> Market analyses estimate the company controls between 70% and 90% of the global consumer drone market.<ref name="wikipedia-dji" /> DJI is privately held; its products include consumer and enterprise drones, handheld cameras (Osmo Action, Osmo Pocket), gimbal stabilizers (Ronin series), and robot vacuums (Romo).
*DJI drones send out [https://www.theverge.com/2022/4/28/23046916/dji-aeroscope-signals-not-encrypted-drone-tracking unencrypted RemoteID/Aeroscope packets] that can be captured by anyone, to follow the [https://www.faa.gov/uas/getting_started/remote_id Remote ID] law in the USA. They contain, amongst other things, the drone's serial number, camera information, pilot location, and Return-to-Home location. A [https://github.com/MAVProxyUser/CIAJeepDoors patch] is available to mitigate this feature on certain drone models and firmware versions.
 
*DJI firmware comes with [https://gist.github.com/KonradIT/e7bf81793eda6bb1e5406fd351d33565 many GPL components] whose sources aren't disclosed, thus violating the GPL license. There is a limited [https://dji.com/opensource disclosure page for their enterprise platforms], but it is very outdated and doesn't cover the GPL software in newer (post Mavic 2) consumer drones (whose OS is based on Android).
The US Department of Commerce added DJI to its Entity List in December 2020, restricting the company's access to US-made technologies.<ref name="uhrp">{{Cite web |url=https://uhrp.org/report/surveillance-tech-series-djis-links-to-human-rights-abuses-in-east-turkistan/ |title=Surveillance Tech Series: DJI's Links to Human Rights Abuses in East Turkistan |date=2024-03-05 |website=Uyghur Human Rights Project |access-date=2026-03-29}}</ref> The Treasury Department followed in December 2021 by adding DJI to the NS-CMIC list, citing DJI's provision of drones to the Xinjiang Public Security Bureau.<ref name="treasury" />
*While many drones support the [https://developer.dji.com/mobile-sdk/ DJI Mobile SDK], drones released from late 2021/2022 onwards have not yet received support. This significantly inhibits the consumer's ability to use their drone how they desire as it prevents the use of third party applications that often provide improved functionality and additional features. [https://github.com/dji-sdk/Mobile-SDK-Android-V5/issues/496#issuecomment-2652986885 DJI Support has stated] that the company intends to no longer make SDK support available for new consumer models (such as the Air 3+ family) and only for enterprise series drones. For mapping use cases, users can now only rely on [https://www.youtube.com/watch?v=QpIej0Ai3VE a tedious manual workaround] rather than use dedicated applications.
*DJI Drones can be permanently linked to users which turns them into e-waste if carelessly returned to online shops.
*DJI devices have hardware fuses that can be blown using software to [https://mavicpilots.com/threads/not-be-able-to-degrade-firmfare-of-dji-mini2-from-01-06-0200.134806/post-1518967 prevent firmware downgrade] to earlier versions.
*DJI Action and Pocket cameras require activation with the DJI Mimo app after a few uses or would fail to function.
*The Android version of the DJI Mimo application requests full filesystem access to the user's device each time a connection to a DJl camera is initiated. If a user denies this permission, the application will refuse to connect to the camera. If a user grants permission for access to only a specific folder or selection of media, the app will connect. However, on every subsequent connection, the app will again prompt for full filesystem access with the message: "DJI Mimo would like to access mobile device's storage, so that you can use features, including editing and downloading photos and videos from camera. Otherwise, related services will be restricted. Go to settings to grant permissions". To prevent the app from gaining access to all files on the device, the user must repeatedly select the "Don't select more" option in the Android permission prompt. This option is positioned directly below the "Allow all" selection, which necessitates user attention during each connection to maintain a restricted level of access.
*The DJI Mini 2 SE is almost identical to the Mini 2, but despite having a 4K camera, it is limited to 2.7K by its firmware. Users have found ways to rollback the firmware, flash it to the Mini 2 firmware, and then shoot in 4K. In later firmware versions, DJI implemented anti-rollback features, hence making it impossible to do this.
*The DJI RS 3 Mini requires the DJI Ronin app, downloaded directly from the DJI website for Android users, in order for the product to function after five "skips" of non-activation.


==Incidents==
==Incidents==
{{Placeholder box|Add one-paragraph summaries of incidents below in sub-sections, which link to each incident's main article while linking to the main article and including a short summary. It is acceptable to create an incident summary before the main page for an incident has been created. To link to the page use the "Hatnote" or "Main" templates.
This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}|{{PAGENAME}} category]].
 
===Forced activation and login requirements===
 
DJI drones enforce strict authentication requirements. The official DJI Mavic 3 user manual states that "flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight."<ref name="mavic3-manual" /> DJI cameras extend this pattern: the [[DJI Osmo Action 5 Pro]] and [[DJI Osmo Pocket 3]] require activation through a DJI app, with the device locking core functions after 5 skips of the activation prompt.<ref name="dji-activation" />
 
===DJI Fly app removal from Google Play===
 
In early 2021, the DJI Fly app became unavailable on the Google Play Store.<ref name="dronedj-fly-removal" /> DJI cited a vague "compatibility strategy" change; the app hasn't returned to Google Play since. Android users must sideload the APK directly from DJI's website to operate their drones. The absence of DJI's apps from Google Play created an opening for fraudulent apps; in August 2023, DJI warned that all DJI-branded apps on the Play Store were scams stealing users' money.<ref name="petapixel-fraud">{{Cite web |url=https://petapixel.com/2023/08/10/all-dji-apps-on-google-play-are-frauds-and-are-stealing-users-money/ |title=All DJI Apps on Google Play Are Frauds and Are Stealing Users' Money |date=2023-08-10 |website=PetaPixel |access-date=2026-03-29}}</ref>
 
===Unencrypted AeroScope tracking===
 
DJI marketed its AeroScope counter-drone tracking system to law enforcement & aviation authorities starting in 2017, insisting the DroneID telemetry was encrypted. In April 2022, security researchers demonstrated that DroneID packets containing the drone's serial number, GPS coordinates, altitude, heading, & pilot location were broadcast in plaintext, readable by anyone with a software-defined radio.<ref name="verge-aeroscope" />
 
DJI acknowledged the finding. In an August 2022 blog post on DJI Viewpoints, the company stated the signal was unencrypted by design, describing it as a proprietary protocol rather than a cryptographically secured transmission.<ref name="dji-viewpoints-aeroscope">{{Cite web |url=https://viewpoints.dji.com/blog/how-djis-aeroscope-system-protects-the-public-interest |title=How DJI's AeroScope System Protects the Public Interest |date=2022-08-03 |website=DJI Viewpoints |access-date=2026-03-29}}</ref> DJI discontinued the AeroScope hardware line in March 2023 as the FAA's standardized Remote ID requirement took effect.<ref>{{Cite web |url=https://dronelife.com/2023/03/06/as-remote-id-approaches-dji-discontinues-aeroscope/ |title=As Remote ID Approaches, DJI Discontinues AeroScope |date=2023-03-06 |website=Dronelife |access-date=2026-03-29}}</ref>
 
===DJI Romo vacuum security vulnerability===
 
{{Main|DJI Robot Vacuum Hack}}
 
In February 2026, security researcher Sammy Azdoufal discovered a critical API vulnerability in DJI's Romo robot vacuum that granted him access to the data streams of approximately 7,000 Romo vacuums operating in 24 countries. The flaw exposed live camera feeds, microphone audio, floor plans, & IP addresses from inside users' homes.<ref name="verge-romo">{{Cite web |last=Hollister |first=Sean |date=2026-02-14 |title=The DJI Romo robovac had security so poor, this man remotely accessed thousands of them |url=https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt |archive-url=https://web.archive.org/web/20260222215257/https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt |archive-date=2026-02-22 |access-date=2026-02-14 |website=The Verge}}</ref> DJI deployed automatic over-the-air patches & awarded Azdoufal a $30,000 bug bounty.<ref name="dronedj-bounty">{{Cite web |url=https://dronedj.com/2026/03/10/dji-romo-security-bug-bounty/ |title=The discovery that triggered a $30,000 DJI reward |date=2026-03-10 |website=DroneDJ |access-date=2026-03-29}}</ref>
 
===Firmware restrictions & anti-rollback fuses===
 
The DJI Mini 2 SE uses the same 1/2.3-inch CMOS camera sensor as the standard DJI Mini 2, but DJI limits the Mini 2 SE to 2.7K resolution through firmware while the identical hardware in the Mini 2 records 4K.<ref name="firmware-tools">{{Cite web |url=https://github.com/o-gs/dji-firmware-tools/issues/356 |title=Mini 2 SE 4K limitation |website=GitHub (dji-firmware-tools) |access-date=2026-03-29}}</ref> Users initially bypassed this by cross-flashing Mini 2 firmware onto the SE model. DJI responded by deploying anti-rollback mechanisms. Hardware analysis shows DJI uses eFuses (one-time programmable hardware fuses) to record a firmware version index; once the fuse is blown by a firmware update, the standard downgrade path is blocked.<ref name="mavicpilots-fuse" />
 
===Mobile SDK discontinuation===
 
DJI's Mobile Software Development Kit (MSDK) allowed third-party apps like Litchi and DroneDeploy to build custom flight-planning and photogrammetry tools for DJI hardware. Starting with MSDK V5 in 2022, DJI dropped SDK support for all new consumer-grade drones.<ref name="sdk-forum" /> DJI Developer Support confirmed that the company no longer plans to provide SDK access for new consumer models, restricting third-party development to enterprise drones only.<ref name="sdk-github">{{Cite web |url=https://github.com/dji-sdk/Mobile-SDK-Android-V5/issues/496#issuecomment-2652986885 |title=DJI Support comment on consumer SDK discontinuation |website=GitHub |access-date=2026-03-29}}</ref>
 
===Geofencing controversies===
 
DJI operated a proprietary geofencing system called "Fly Safe" that imposed hard flight restrictions based on DJI's own airspace database.<ref name="flysafe">{{Cite web |url=https://www.dji.com/flysafe/introduction |title=Fly Safe Introduction |website=DJI |access-date=2026-03-29}}</ref> Drones inside DJI-designated restricted zones could not take off until the user submitted an unlock request through DJI's portal.
 
In 2025, DJI removed geofencing hard-stops, transitioning to an advisory-only model that allows takeoff after acknowledging an in-app warning. The change rolled out globally by November 2025.<ref name="dronedj-geofencing">{{Cite web |url=https://dronedj.com/2025/11/17/dji-drone-geo-geofencing-unlock/ |title=DJI drops old drone geofencing rules: What pilots need to know |date=2025-11-17 |website=DroneDJ |access-date=2026-03-29}}</ref>
 
===Device permanent binding and e-waste===
 
DJI's "Account Binding" feature ties a drone's serial number to the owner's cloud account & remote controller. If a drone is sold, returned, or gifted without the original owner unbinding it through the DJI app, the new owner cannot pair the drone with a controller or fly it.<ref>{{Cite web |last=Singh |first=Ishveena |date=2026-06-14 |title=How to rebind a used DJI drone: Step-by-step guide |url=https://dronedj.com/2025/06/14/how-to-rebind-dji-drone/ |url-status=live}}</ref>
 
===Product end-of-life===
 
DJI's official end-of-life support page lists over 111 discontinued products, including the Mavic Air, Spark, Phantom 4 Pro, & original Osmo Pocket.<ref name="gizmochina-eol" /> Once a product reaches end-of-life status, DJI ceases repairs, spare part manufacturing, & firmware updates.<ref name="dronedj-eol">{{Cite web |url=https://dronedj.com/2026/01/05/dji-mavic-mini-service-support/ |title=DJI ending support for iconic Mavic Mini drone, OG Pocket camera |date=2026-01-05 |website=DroneDJ |access-date=2026-03-29}}</ref> When DJI discontinues app support for legacy hardware while mobile operating systems continue to update, devices that still function mechanically lose their software interface.{{Citation needed}}
 
==US government restrictions==
 
DJI faces a layered set of US government restrictions spanning 4 federal agencies:
 
*'''Commerce Department Entity List:''' In December 2020, the Bureau of Industry and Security added DJI to the Entity List, restricting the company's access to US-origin technologies.<ref name="uhrp" />
*'''Treasury NS-CMIC List:''' In December 2021, the Treasury Department added DJI to the Non-SDN Chinese Military-Industrial Complex Companies list, citing DJI's provision of drones to the Xinjiang Public Security Bureau, which are used to surveil Uyghurs in Xinjiang. This designation prohibits US persons from purchasing or selling publicly traded securities connected with DJI.<ref name="treasury" />
*'''DoD Section 1260H:''' The Department of Defense classified DJI as a "Chinese Military Company" under Section 1260H of the National Defense Authorization Act. A federal judge upheld DJI's placement on this list in September 2025 after DJI challenged it in court.<ref name="dronelife-pentagon">{{Cite web |url=https://dronelife.com/2025/09/29/dji-to-remain-on-pentagon-list-after-u-s-court-ruling/ |title=DJI to Remain on Pentagon List After U.S. Court Ruling |date=2025-09-29 |website=Dronelife |access-date=2026-03-29}}</ref>
*'''FCC Covered List:''' The Countering CCP Drones Act (H.R. 2864) passed the US House of Representatives in September 2024.<ref name="congress-hr2864">{{Cite web |url=https://www.congress.gov/bill/118th-congress/house-bill/2864 |title=H.R.2864 - Countering CCP Drones Act |website=Congress.gov |access-date=2026-03-29}}</ref> Its provisions were absorbed into the 2025 NDAA, which required a federal security review of DJI's equipment within one year. No agency completed the review by the December 23, 2025 deadline, & DJI was added to the FCC's Covered List.<ref name="fcc-order" /> This bars the import & sale of new DJI drone models; existing models with prior FCC authorization remain exempt.<ref name="dronedj-fcc">{{Cite web |url=https://dronedj.com/2025/12/22/dji-drone-us-fcc-ban/ |title=DJI drone ban has started in the US, but it won't happen overnight |date=2025-12-22 |website=DroneDJ |access-date=2026-03-29}}</ref><ref name="cnn-ban">{{Cite web |url=https://www.cnn.com/2025/12/23/business/us-ban-foreign-drones-dji-intl-hnk |title=US bans new foreign drone models in a blow to Chinese giant DJI |date=2025-12-23 |website=CNN |access-date=2026-03-29}}</ref>


If the company has numerous incidents then format them in a table (see [[Amazon]] for an example). }}
==Litigation==
 
===''Bishop v. SZ DJI Technology Co.''===
 
In ''Bishop v. SZ DJI Technology Co., Ltd.'' (E.D. Tex., No. 4:24-CV-268-SDJ), the Bishop family sued DJI after a Mavic Air 2 drone malfunctioned & flew into their son's face. The son has had 7 surgeries on his right eye since the incident & is now legally blind in that eye.<ref name="bishop-doc68">{{Cite web |url=https://law.justia.com/cases/federal/district-courts/texas/txedce/4:2024cv00268/228932/68/ |title=Bishop v. SZ DJI Technology Co., Document 68 |date=2025-03-06 |website=Justia |access-date=2026-03-29}}</ref>
 
DJI moved to dismiss for lack of personal jurisdiction, arguing it designed & manufactured drones solely in China with no physical presence in Texas. On March 6, 2025, Judge Sean D. Jordan denied the motion. The court applied the stream-of-commerce test, finding that DJI's website advertised availability at approximately 580 retail locations in Texas & that DJI had hosted drone industry events in the state.<ref name="bishop-doc68" />
 
DJI then moved to compel arbitration based on an arbitration clause in the DJI Fly app's Terms of Use. On September 30, 2025, Judge Jordan denied this motion as well. The court found that the only person who agreed to the Terms of Use was the plaintiffs' son, who was a minor at the time; under Texas law, a minor's contract is voidable, and the son had disaffirmed the agreement both during his minority and after turning 18.<ref name="bishop-doc83">{{Cite web |url=https://law.justia.com/cases/federal/district-courts/texas/txedce/4:2024cv00268/228932/83/ |title=Bishop v. SZ DJI Technology Co., Document 83 |date=2025-09-30 |website=Justia |access-date=2026-03-29}}</ref>


This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}|{{PAGENAME}} category]].
===Example incident one (''date'')===
{{Main|link to the main article}}
Short summary of the incident (could be the same as the summary preceding the article).
===Example incident two (''date'')===
...
==Products==
==Products==
*[[DJI Osmo Action 5 Pro]]
*[[DJI Osmo Action 5 Pro]]
*[[DJI Osmo Pocket 3]]
*[[DJI Ronin RS4 Pro]]
*[[DJI Ronin RS4 Pro]]


==See also==
==See also==


* [[GoPro]]
*[[GoPro]]
* [[Insta360]]
*[[Insta360]]
*[[Forced app download]]
*[[Forced account]]


==References==
==References==
{{reflist}}{{Placeholder box|Link to relevant theme articles or companies with similar incidents.}}
 
{{reflist}}
 
[[Category:DJI]]
[[Category:DJI]]
[[Category:Companies]]
[[Category:Devices requiring account for initial setup]]
[[Category:Drones]]

Latest revision as of 01:26, 20 April 2026


DJI
Basic information
Founded 2006
Legal Structure Private
Industry Drones,Cameras,Electronics
Also known as SZ DJI Technology Co. Ltd.,Da-Jiang Innovations
Official website https://www.dji.com/

DJI is a Chinese drone and camera manufacturer that requires mandatory app activation on its consumer products, locks cameras and gimbals into non-functional states after 5 activation skips, and restricts drone flight to 30 meters altitude and 50 meters distance when a user is not logged into a DJI account.[1] The US Department of the Treasury added DJI to its Non-SDN Chinese Military-Industrial Complex Companies list in December 2021, citing DJI's provision of drones to the Xinjiang Public Security Bureau, which are used to surveil Uyghurs in Xinjiang.[2] In December 2025, DJI was added to the FCC's Covered List, banning the import and sale of new DJI drone models in the United States.[3]

Consumer impact summary

[edit | edit source]
  • DJI drones require persistent login to a DJI account. When signed out, flight is restricted to 30 m altitude and 50 m range.[1]
  • DJI cameras (Osmo Action 5 Pro, Osmo Pocket 3) require activation through a proprietary app; after 5 skips the device locks its core functions until activation is completed (see Forced app download, Forced account).[4]
  • The DJI Fly app became unavailable on the Google Play Store in 2021, forcing Android users to sideload APK files from DJI's website.[5]
  • DJI drone telemetry (serial number, pilot GPS coordinates, return-to-home location) is broadcast unencrypted via the DroneID protocol. DJI admitted the signal was unencrypted by design.[6]
  • DJI uses anti-rollback hardware fuses to prevent firmware downgrades, blocking users from restoring removed features.[7]
  • DJI dropped Mobile SDK support for consumer drones starting with MSDK V5 in 2022, blocking third-party app development for models like the Mavic 3 and Mini 3 Pro.[8]
  • DJI's official end-of-life page lists over 111 discontinued products for which the company no longer provides repairs, parts, or firmware updates.[9]

Background

[edit | edit source]

DJI (Da-Jiang Innovations) was founded in 2006 by Frank Wang (Wang Tao) in Shenzhen, China.[10] Market analyses estimate the company controls between 70% and 90% of the global consumer drone market.[10] DJI is privately held; its products include consumer and enterprise drones, handheld cameras (Osmo Action, Osmo Pocket), gimbal stabilizers (Ronin series), and robot vacuums (Romo).

The US Department of Commerce added DJI to its Entity List in December 2020, restricting the company's access to US-made technologies.[11] The Treasury Department followed in December 2021 by adding DJI to the NS-CMIC list, citing DJI's provision of drones to the Xinjiang Public Security Bureau.[2]

Incidents

[edit | edit source]

This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the DJI category.

Forced activation and login requirements

[edit | edit source]

DJI drones enforce strict authentication requirements. The official DJI Mavic 3 user manual states that "flight is restricted to a height of 98.4 ft (30 m) and range of 164 ft (50 m) when not connected or logged into the app during flight."[1] DJI cameras extend this pattern: the DJI Osmo Action 5 Pro and DJI Osmo Pocket 3 require activation through a DJI app, with the device locking core functions after 5 skips of the activation prompt.[4]

DJI Fly app removal from Google Play

[edit | edit source]

In early 2021, the DJI Fly app became unavailable on the Google Play Store.[5] DJI cited a vague "compatibility strategy" change; the app hasn't returned to Google Play since. Android users must sideload the APK directly from DJI's website to operate their drones. The absence of DJI's apps from Google Play created an opening for fraudulent apps; in August 2023, DJI warned that all DJI-branded apps on the Play Store were scams stealing users' money.[12]

Unencrypted AeroScope tracking

[edit | edit source]

DJI marketed its AeroScope counter-drone tracking system to law enforcement & aviation authorities starting in 2017, insisting the DroneID telemetry was encrypted. In April 2022, security researchers demonstrated that DroneID packets containing the drone's serial number, GPS coordinates, altitude, heading, & pilot location were broadcast in plaintext, readable by anyone with a software-defined radio.[6]

DJI acknowledged the finding. In an August 2022 blog post on DJI Viewpoints, the company stated the signal was unencrypted by design, describing it as a proprietary protocol rather than a cryptographically secured transmission.[13] DJI discontinued the AeroScope hardware line in March 2023 as the FAA's standardized Remote ID requirement took effect.[14]

DJI Romo vacuum security vulnerability

[edit | edit source]
Main article: DJI Robot Vacuum Hack

In February 2026, security researcher Sammy Azdoufal discovered a critical API vulnerability in DJI's Romo robot vacuum that granted him access to the data streams of approximately 7,000 Romo vacuums operating in 24 countries. The flaw exposed live camera feeds, microphone audio, floor plans, & IP addresses from inside users' homes.[15] DJI deployed automatic over-the-air patches & awarded Azdoufal a $30,000 bug bounty.[16]

Firmware restrictions & anti-rollback fuses

[edit | edit source]

The DJI Mini 2 SE uses the same 1/2.3-inch CMOS camera sensor as the standard DJI Mini 2, but DJI limits the Mini 2 SE to 2.7K resolution through firmware while the identical hardware in the Mini 2 records 4K.[17] Users initially bypassed this by cross-flashing Mini 2 firmware onto the SE model. DJI responded by deploying anti-rollback mechanisms. Hardware analysis shows DJI uses eFuses (one-time programmable hardware fuses) to record a firmware version index; once the fuse is blown by a firmware update, the standard downgrade path is blocked.[7]

Mobile SDK discontinuation

[edit | edit source]

DJI's Mobile Software Development Kit (MSDK) allowed third-party apps like Litchi and DroneDeploy to build custom flight-planning and photogrammetry tools for DJI hardware. Starting with MSDK V5 in 2022, DJI dropped SDK support for all new consumer-grade drones.[8] DJI Developer Support confirmed that the company no longer plans to provide SDK access for new consumer models, restricting third-party development to enterprise drones only.[18]

Geofencing controversies

[edit | edit source]

DJI operated a proprietary geofencing system called "Fly Safe" that imposed hard flight restrictions based on DJI's own airspace database.[19] Drones inside DJI-designated restricted zones could not take off until the user submitted an unlock request through DJI's portal.

In 2025, DJI removed geofencing hard-stops, transitioning to an advisory-only model that allows takeoff after acknowledging an in-app warning. The change rolled out globally by November 2025.[20]

Device permanent binding and e-waste

[edit | edit source]

DJI's "Account Binding" feature ties a drone's serial number to the owner's cloud account & remote controller. If a drone is sold, returned, or gifted without the original owner unbinding it through the DJI app, the new owner cannot pair the drone with a controller or fly it.[21]

Product end-of-life

[edit | edit source]

DJI's official end-of-life support page lists over 111 discontinued products, including the Mavic Air, Spark, Phantom 4 Pro, & original Osmo Pocket.[9] Once a product reaches end-of-life status, DJI ceases repairs, spare part manufacturing, & firmware updates.[22] When DJI discontinues app support for legacy hardware while mobile operating systems continue to update, devices that still function mechanically lose their software interface.[citation needed]

US government restrictions

[edit | edit source]

DJI faces a layered set of US government restrictions spanning 4 federal agencies:

  • Commerce Department Entity List: In December 2020, the Bureau of Industry and Security added DJI to the Entity List, restricting the company's access to US-origin technologies.[11]
  • Treasury NS-CMIC List: In December 2021, the Treasury Department added DJI to the Non-SDN Chinese Military-Industrial Complex Companies list, citing DJI's provision of drones to the Xinjiang Public Security Bureau, which are used to surveil Uyghurs in Xinjiang. This designation prohibits US persons from purchasing or selling publicly traded securities connected with DJI.[2]
  • DoD Section 1260H: The Department of Defense classified DJI as a "Chinese Military Company" under Section 1260H of the National Defense Authorization Act. A federal judge upheld DJI's placement on this list in September 2025 after DJI challenged it in court.[23]
  • FCC Covered List: The Countering CCP Drones Act (H.R. 2864) passed the US House of Representatives in September 2024.[24] Its provisions were absorbed into the 2025 NDAA, which required a federal security review of DJI's equipment within one year. No agency completed the review by the December 23, 2025 deadline, & DJI was added to the FCC's Covered List.[3] This bars the import & sale of new DJI drone models; existing models with prior FCC authorization remain exempt.[25][26]

Litigation

[edit | edit source]

Bishop v. SZ DJI Technology Co.

[edit | edit source]

In Bishop v. SZ DJI Technology Co., Ltd. (E.D. Tex., No. 4:24-CV-268-SDJ), the Bishop family sued DJI after a Mavic Air 2 drone malfunctioned & flew into their son's face. The son has had 7 surgeries on his right eye since the incident & is now legally blind in that eye.[27]

DJI moved to dismiss for lack of personal jurisdiction, arguing it designed & manufactured drones solely in China with no physical presence in Texas. On March 6, 2025, Judge Sean D. Jordan denied the motion. The court applied the stream-of-commerce test, finding that DJI's website advertised availability at approximately 580 retail locations in Texas & that DJI had hosted drone industry events in the state.[27]

DJI then moved to compel arbitration based on an arbitration clause in the DJI Fly app's Terms of Use. On September 30, 2025, Judge Jordan denied this motion as well. The court found that the only person who agreed to the Terms of Use was the plaintiffs' son, who was a minor at the time; under Texas law, a minor's contract is voidable, and the son had disaffirmed the agreement both during his minority and after turning 18.[28]

Products

[edit | edit source]

See also

[edit | edit source]

References

[edit | edit source]
  1. ↑ 1.0 1.1 1.2 "DJI Mavic 3 User Manual v1.0" (PDF). DJI. Retrieved 2026-03-29.
  2. ↑ 2.0 2.1 2.2 "Treasury Identifies Eight Chinese Tech Firms as Part of The Chinese Military-Industrial Complex". U.S. Department of the Treasury. 2021-12-16. Retrieved 2026-03-29.
  3. ↑ 3.0 3.1 "FCC Updates Covered List to Add Certain UAS and UAS Components". Federal Communications Commission. Retrieved 2026-03-29.
  4. ↑ 4.0 4.1 "Activating Your Handheld Products". DJI Support. Retrieved 2026-03-29.
  5. ↑ 5.0 5.1 "You need to download the DJI Fly app from DJI's website". DroneDJ. 2021-01-27. Retrieved 2026-03-29.
  6. ↑ 6.0 6.1 Hollister, Sean (2022-04-28). "DJI insisted drone-tracking AeroScope signals were encrypted; now it admits they aren't". The Verge. Retrieved 2026-03-29.
  7. ↑ 7.0 7.1 "Not be able to degrade firmware of DJI Mini2 from 01.06.0200". MavicPilots. Retrieved 2026-03-29.
  8. ↑ 8.0 8.1 "What is the plan for the consumer level aircraft". DJI Developer Forum. Retrieved 2026-03-29.
  9. ↑ 9.0 9.1 "Check the list: 111 DJI products, including popular drones, now out of support". Gizmochina. 2025-12-08. Retrieved 2026-03-29.
  10. ↑ 10.0 10.1 "DJI". Wikipedia. Retrieved 2026-03-29.
  11. ↑ 11.0 11.1 "Surveillance Tech Series: DJI's Links to Human Rights Abuses in East Turkistan". Uyghur Human Rights Project. 2024-03-05. Retrieved 2026-03-29.
  12. ↑ "All DJI Apps on Google Play Are Frauds and Are Stealing Users' Money". PetaPixel. 2023-08-10. Retrieved 2026-03-29.
  13. ↑ "How DJI's AeroScope System Protects the Public Interest". DJI Viewpoints. 2022-08-03. Retrieved 2026-03-29.
  14. ↑ "As Remote ID Approaches, DJI Discontinues AeroScope". Dronelife. 2023-03-06. Retrieved 2026-03-29.
  15. ↑ Hollister, Sean (2026-02-14). "The DJI Romo robovac had security so poor, this man remotely accessed thousands of them". The Verge. Archived from the original on 2026-02-22. Retrieved 2026-02-14.
  16. ↑ "The discovery that triggered a $30,000 DJI reward". DroneDJ. 2026-03-10. Retrieved 2026-03-29.
  17. ↑ "Mini 2 SE 4K limitation". GitHub (dji-firmware-tools). Retrieved 2026-03-29.
  18. ↑ "DJI Support comment on consumer SDK discontinuation". GitHub. Retrieved 2026-03-29.
  19. ↑ "Fly Safe Introduction". DJI. Retrieved 2026-03-29.
  20. ↑ "DJI drops old drone geofencing rules: What pilots need to know". DroneDJ. 2025-11-17. Retrieved 2026-03-29.
  21. ↑ Singh, Ishveena (2026-06-14). "How to rebind a used DJI drone: Step-by-step guide".{{cite web}}: CS1 maint: url-status (link)
  22. ↑ "DJI ending support for iconic Mavic Mini drone, OG Pocket camera". DroneDJ. 2026-01-05. Retrieved 2026-03-29.
  23. ↑ "DJI to Remain on Pentagon List After U.S. Court Ruling". Dronelife. 2025-09-29. Retrieved 2026-03-29.
  24. ↑ "H.R.2864 - Countering CCP Drones Act". Congress.gov. Retrieved 2026-03-29.
  25. ↑ "DJI drone ban has started in the US, but it won't happen overnight". DroneDJ. 2025-12-22. Retrieved 2026-03-29.
  26. ↑ "US bans new foreign drone models in a blow to Chinese giant DJI". CNN. 2025-12-23. Retrieved 2026-03-29.
  27. ↑ 27.0 27.1 "Bishop v. SZ DJI Technology Co., Document 68". Justia. 2025-03-06. Retrieved 2026-03-29.
  28. ↑ "Bishop v. SZ DJI Technology Co., Document 83". Justia. 2025-09-30. Retrieved 2026-03-29.
Retrieved from "https://consumerrights.wiki/index.php?title=DJI&oldid=51688"