New Delhi: Amazon and Walmart-owned Flipkart have begun reviewing security camera listings on their Indian platforms after hundreds of internet-connected surveillance cameras were found to be offered without the government approvals required under India’s tightened security rules.
The move follows a Reuters investigation that identified more than 700 of roughly 770 internet-enabled security camera listings on the two e-commerce platforms that did not appear in the Bureau of Indian Standards’ public database of approved brands or camera models. At least a dozen listings had been removed from the platforms since September 29, including models from Hikvision’s EZVIZ brand.
The development comes as India strengthens cybersecurity requirements for CCTV equipment amid concerns that compromised internet-connected cameras could be used for unauthorised surveillance or as an entry point into networks.
Amazon, Flipkart review third-party listings
According to people familiar with the checks cited by Reuters, Amazon and Flipkart were reviewing internet-enabled surveillance cameras listed by third-party sellers and brands. Products without the required government approval are expected to be removed.
Amazon declined to comment on the review, while Flipkart did not respond to Reuters’ queries.
The issue is significant because online marketplaces host large numbers of products from multiple sellers, making regulatory compliance more complicated than in conventional retail channels.
The Reuters analysis found that more than 700 of approximately 770 security camera listings examined on Amazon and Flipkart were for models that were not present in the BIS public database used for the investigation.
At least 12 listings had been removed by the time of the report. Among them were at least two Hikvision EZVIZ models, which Amazon subsequently displayed as unavailable.
India tightened CCTV security requirements
India has introduced mandatory Essential Requirements for security in CCTV cameras sold in the country.
The Ministry of Electronics and Information Technology has required security testing covering aspects such as the origin of critical hardware components, including the system-on-chip, protection against vulnerabilities that could allow unauthorised remote access and testing at accredited laboratories.
The government said in March that 507 CCTV camera models had been certified for compliance with the Essential Requirements at that time.
The Standardisation Testing and Quality Certification Directorate, or STQC, lists CCTV cameras among the IoT devices covered by its certification framework. Its current certified-product database includes network camera models from manufacturers including Samriddhi Automation, Prama India, Aditya Infotech and Matrix Comsec.
MeitY’s February 2026 clarification also states that CCTV cameras were brought under the compulsory registration framework for compliance with the Essential Requirements for security, with STQC responsible for issuing the relevant security testing reports.
Why internet-connected cameras raise security concerns
Unlike conventional cameras, internet-connected surveillance devices can transmit video and other information across networks.
India’s Essential Requirements specifically address the security of critical components and the supply chain. STQC guidance says testing can examine components such as the system-on-chip, firmware, printed circuit board assembly and network interface, while also checking physical interfaces for vulnerabilities and unintended data flows.
Former Indian cybersecurity chief Gulshan Rai told Reuters that unapproved cameras could present both surveillance and cybersecurity risks if compromised.
The concern is not limited to one manufacturer or country of origin. Any internet-connected camera with inadequate security controls can potentially expose footage or provide attackers with a route into a connected network.
However, the current controversy has drawn particular attention to Chinese camera manufacturers because of their significant presence in India’s surveillance market and security concerns raised by authorities in several countries.
Hikvision and Dahua products face scrutiny
Reuters reported that Hikvision and Zhejiang Dahua Technology together accounted for about 30% of India’s security camera market, according to Counterpoint Research data cited in the report.
At least eight unlicensed Wi-Fi camera models from Hikvision and Dahua were found on Amazon during the investigation. The companies did not respond to Reuters’ requests for comment.
The investigation also identified products from other sellers and brands.
One example was a Dahua Wireless Dome Camera listed on Amazon for ₹779 after a 70% discount. Dahua’s Imou brand also had a dedicated Amazon India page featuring indoor and outdoor Wi-Fi cameras and promotional material. One source cited by Reuters said Amazon had decided to remove the brand page.
The presence of a product on an e-commerce platform, however, does not by itself establish that the manufacturer or seller had intentionally violated the rules. The central issue identified in the investigation was whether individual camera models had the required certification.
Some cameras offered remote live streaming
The investigation also found Wi-Fi cameras marketed with remote-access capabilities.
One listing from Maizic India described a bulb-shaped Wi-Fi camera that could connect to a wireless network and allow users to stream live footage remotely through a smartphone or tablet.
Maizic co-founder Santosh Kumar Singh told Reuters that the company had removed the Wi-Fi functionality that enabled live feeds from its cameras and would limit the devices to direct connections with nearby mobile devices until the products obtained government approval.
The example illustrates why regulators are examining not just the physical hardware but also software, connectivity and supply-chain security.
Government certification database becomes important
For consumers and businesses purchasing internet-connected cameras, certification status has become an increasingly important consideration.
STQC maintains a list of products certified under the Essential Requirements framework. The directorate has clarified that CCTV cameras fall within its IoT System Certification Scheme, while certification information for network cameras is being maintained through the applicable regulatory framework.
The government’s framework also requires documentation concerning critical components. MeitY’s rules specifically require security testing and certification for CCTV equipment, while STQC’s guidance addresses trusted sources, supply-chain security and malware or counterfeit-product risks.
This means buyers increasingly need to verify the certification of the specific camera model, rather than relying solely on a brand name or a marketplace listing.
E-commerce compliance faces a wider challenge
The episode highlights a broader challenge for online marketplaces operating in India.
Platforms such as Amazon and Flipkart host products from thousands of third-party sellers, and regulatory requirements can change after products have already entered their catalogues.
Security cameras are particularly sensitive because they collect visual information from homes, offices, commercial establishments and public spaces. A compromised device can therefore have consequences beyond an ordinary product-safety violation.
India’s government has been tightening cybersecurity requirements for connected devices as part of a broader effort to improve the security of digital infrastructure and supply chains. The CCTV rules require manufacturers to demonstrate compliance before qualifying products can be supplied under the relevant frameworks.
What consumers should check
The latest developments make it important for buyers to check whether an internet-connected CCTV camera has the necessary Indian certification before purchasing it.
Consumers and businesses should verify the exact model against the applicable government certification information rather than assuming that every product sold under an approved brand is automatically compliant.
For organisations deploying cameras in sensitive locations, additional considerations such as firmware updates, strong passwords, network segmentation, remote-access settings and secure configuration can also reduce cybersecurity exposure.
The Amazon and Flipkart review therefore represents more than a marketplace clean-up. It reflects India’s attempt to bring internet-connected surveillance equipment under tighter security and certification controls at a time when CCTV systems are becoming increasingly common across homes, businesses and public infrastructure.