Sub-GHz Frequency Legality for Makers: ISM Bands, Transmit Limits, and What's Actually Legal to Capture and Replay

The Flipper Zero's Sub-GHz module gets covered extensively for what it can capture and replay — garage remotes, weather station data, tire pressure sensors — but far less gets written about what's actually legal to do with it, and the honest answer is "it depends on what you're transmitting, on what frequency, and in some cases what country you're in." Capturing and analyzing a signal is treated very differently under most regulatory frameworks than re-transmitting one, and the line between a legitimate test of your own equipment and a legal problem is narrower than a lot of forum advice suggests. This is general information, not legal advice specific to your situation — when in doubt, check your own country's spectrum regulator directly.

Receiving vs. Transmitting: Very Different Legal Treatment

In most jurisdictions, including the US under FCC rules, simply receiving and decoding a radio signal that's being broadcast into the air is broadly permitted — you're not required to have a license to listen. This is why Sub-GHz capture, signal analysis, and passive monitoring are generally the least legally fraught uses of the Flipper's radio module. Transmitting is a different matter entirely: you're putting your own RF energy onto a licensed or shared band, and that's where frequency allocation, power limits, and intent (what signal you're re-creating) all start to matter.

ISM Bands: Why They Exist and What They Actually Allow

Industrial, Scientific, and Medical (ISM) bands are frequency ranges set aside in most countries for unlicensed, low-power use — this is the band your garage remote, weather station, and the Flipper's Sub-GHz transmitter all operate in. Common ISM allocations relevant to Sub-GHz devices include 315 MHz (common in North America for remotes), 433 MHz (widely used in Europe and much of the world), and 868/915 MHz regional bands. Being an ISM band doesn't mean "anything goes" — it means unlicensed operation is permitted within specific power and bandwidth limits set by the regulator for that band in that country. The Flipper Zero's stock firmware is generally configured to respect regional power limits for its intended market, but custom/modified firmware and external amplifier modules can push well past those limits, at which point you're outside the unlicensed allowance regardless of which band you're on.

RegionCommon Sub-GHz AllocationRegulator to Check United States315 MHz, 433 MHz (shared), 915 MHz ISMFCC (Part 15 rules govern unlicensed low-power devices) European Union / UK433 MHz, 868 MHzNational telecom regulator under ETSI harmonized standards Most other regionsVaries — often 433 MHz plus a regional bandNational telecommunications/spectrum authority

What Pushes a Capture-and-Replay From "Fine" to "Not Fine"

• Replaying your own devices: cloning your own garage remote, your own car key (where not protected by rolling codes), or your own weather station transmitter to test or back it up is generally the least legally ambiguous use — it's your property and your transmission.
• Replaying someone else's signal without authorization: capturing and replaying a neighbor's garage remote, even "just to see if it works," crosses from a spectrum question into unauthorized access and potentially trespass or computer-fraud-adjacent statutes depending on jurisdiction, regardless of what frequency it's on.
• Jamming or sustained interference: transmitting noise or a flood of signals to disrupt other legitimate users of a band is treated far more seriously almost everywhere than a single capture-and-replay, often as a separate and more serious offense (in the US, intentional jamming is explicitly illegal under FCC rules regardless of power level or band).
• Rolling-code and encrypted protocols: most modern car keys and many newer garage openers use rolling codes specifically to make simple replay attacks non-functional. Devices and firmware specifically marketed around defeating these protections raise separate legal questions beyond spectrum allocation, in multiple jurisdictions.
• Protected/licensed spectrum: some frequencies that look superficially similar to ISM allocations are actually licensed to specific services (emergency services, aviation, amateur radio bands with licensing requirements) — transmitting there without the appropriate license is a separate and often more serious violation than exceeding a power limit on an ISM band.

Power Limits Matter As Much As Frequency

Even on a legitimate ISM band, regulators cap effective radiated power specifically to limit interference range and keep the band usable by many unlicensed devices simultaneously. Firmware forks and external amplifier add-ons that boost the Flipper's Sub-GHz transmit power beyond stock levels can push a device out of compliance with the power limit for its region even while staying on an otherwise-legal frequency. If you're modifying firmware or adding an external amplifier module, check the power limit for your region and band, not just whether the frequency itself is unlicensed.

A Reasonable Default Approach

Capturing and analyzing Sub-GHz traffic for learning purposes is low-risk almost everywhere. Replaying captures against devices you own, at stock power levels, on your region's standard ISM allocation, is the safest practical use case. Anything beyond that — other people's devices, boosted transmit power, frequencies you haven't confirmed are unlicensed in your country — is worth five minutes with your national regulator's published rules before you do it, not after. The Sub-GHz module is a genuinely useful learning and home-automation tool used within those boundaries; it's also one of the easier ways to accidentally cross from "hobbyist experiment" into "regulatory violation" if you treat ISM-band status as a blanket permission rather than a specific, limited one.