The directive, issued jointly by the IDF’s Technology and Logistics Directorate and the ministry’s Security Unit, follows a months-long internal audit. Around 650–800 EVs from brands such as BYD, Chery, and Geely will be removed or disabled by mid-2026.

Espionage Fears Over Vehicle Telematics

The ban targets Chinese EVs equipped with 360° cameras, LiDAR sensors, and cellular modems capable of real-time transmission—even when powered off.

Officials said Israeli teams could not fully audit these systems due to encrypted firmware and over-the-air updates controlled from China.

Concerns include potential tracking, audio capture, and base mapping by foreign actors.

Immediate and Phased Restrictions

Following an October 2025 audit labeling the vehicles “high-risk assets,” the IDF barred all PRC-origin EVs from entering bases on November 1.

By December 2025, units must disable onboard modems, and a full recall is planned for early 2026.

The affected fleet includes BYD Atto 3, Chery Tiggo 7 Pro, MG ZS EV, and Geely Geometry C models—mostly used by senior officers and logistics staff.

Failed Cyber Mitigations

IDF cyber specialists tried blocking updates, removing SIM cards, and isolating networks, but tests showed some systems reconnected through eSIM or Wi-Fi probing.

Engineers concluded hardware modifications risked bricking entire vehicles, making secure use “not feasible.”

Alignment With Wider Tech Policy

The move extends earlier Israeli restrictions on Huawei and ZTE equipment in 2020–2023 and mirrors U.S. “Clean Network” guidance under CENTCOM intelligence frameworks.

Replacement vehicles will come from Israeli firm REE Automotive, South Korea’s Kia EV6 and Hyundai Ioniq 5, and Germany’s Volkswagen ID.Buzz.

All new platforms must offer local data storage, open firmware access, and kill switches for sensors.

“Security Comes Before Convenience”

An IDF spokesperson stated, “Security comes before convenience. We will not risk operational secrecy for cost savings.” Chery’s Israeli distributor maintained “no data is sent to China” but declined to provide its source code for inspection.