CBP Tightens Foreign Importer of Record Rules: CTPAT Validation Required From January 5, 2027

What happened

On November 6, 2026, CBP published an interim final rule (91 FR 69977; CBP Dec. 26-19) implementing Section 2 of Executive Order 14411, "Strengthening Customs Enforcement" (signed June 3, 2026). The rule restructures who can act as importer of record in the United States and how entries get filed:

• Foreign IORs are restricted. A foreign importer of record — anyone who doesn't meet the new U.S. IOR definition in 19 CFR 110.2 — may only enter merchandise for consumption if it is CTPAT validated, or if it designates a CTPAT-validated licensed customs broker to make the entry (new 19 CFR 141.21). This covers formal entries and informal entry types 11, 12, and 13 (the ones filed on CBP Form 3461/7501), including withdrawals from bonded warehouses and foreign trade zones.
• U.S. IORs must declare it. At every entry and entry summary, the filer must state on the updated CBP Forms 3461/7501 whether the IOR qualifies as a U.S. IOR (new 19 CFR 141.22). Updated forms are mandatory from January 5, 2027.
• Brokers must verify. Before declaring a client as a U.S. IOR, a customs broker must verify the qualification — reviewing citizenship/permanent-residence proof, corporate charters, financial statements, purchase receipts, documents of title — and keep those records for five years (new 19 CFR 111.29(a)(2), 111.21(a), 111.23).
• False declarations have consequences. An IOR that inaccurately declares U.S. IOR status can be put on live entry (pay all duties, taxes and fees before release) and lose immediate delivery privileges (19 CFR 142.13(a)(5), 142.25(a)(5)).
• Broker penalties get teeth. CBP revised the penalty guidelines so brokers can be pursued under 19 U.S.C. 1592 — where penalties can reach the domestic value of the merchandise — instead of only 19 U.S.C. 1641, which caps penalties at $30,000.

Because the rule invokes the foreign-affairs function exception, it took effect without prior notice and comment — comments are instead due January 5, 2027 (docket USCBP-2026-1387), the same day the rule takes effect.

The new U.S. IOR test

The rule creates a new Part 110 in 19 CFR. An entity counts as a U.S. IOR only if it is organized under U.S. law, located in the United States, and at all times meets one of:

1. at least 51% of its beneficial owners are U.S. citizens or lawful permanent residents and control the entity; or
2. it directly owns a significant amount of unencumbered U.S. real property.

"Beneficial owner" follows the FinCEN-style definition: a natural person with substantial control or at least 25% of ownership interests, looked through every layer of corporate ownership — a U.S. shell owned by a foreign parent does not magically produce U.S. beneficial owners. "Physical domestic assets" means U.S. bank cash, U.S. Treasuries, and real property, inventory, machinery or equipment located in the United States — accounts receivable explicitly don't count.

Everyone else is a foreign IOR (19 CFR 110.3). CBP verifies qualification claims, with the relevant Center director making the call — criteria include principal place of business, real operations (paying employees, generating revenue, retail locations), unencumbered domestic assets, gross sales exceeding cost of goods sold, and adequate capitalization. A mailing address and a registered agent no longer make you a U.S. importer.

Timeline

Date	What happens
2026-06-03	President signs EO 14411 "Strengthening Customs Enforcement" (published June 10, 91 FR 35125).
2026-11-06	CBP publishes the interim final rule (91 FR 69977).
2027-01-05	Rule takes effect. Foreign IOR restriction and the U.S. IOR declaration on updated Forms 3461/7501 both apply. Comments due the same day.
by 2027-01-05	Deadline for customs brokers to request delayed compliance with the new verification duty (19 CFR 111.29); brokers under certain enforcement actions are ineligible.
2027-05-06	All customs brokers expected to be in full compliance.

What this means for cross-border sellers

If a foreign entity is the IOR on your U.S. entries, that channel narrows to one lane. From January 5, 2027, a non-CTPAT foreign IOR cannot make entry — directly or through a regular broker. The only paths are: get CTPAT validated yourself, or file through a CTPAT-validated licensed broker. And if the foreign principal on the broker's power of attorney is not the owner or purchaser of the goods, the CTPAT-validated broker must act as the IOR itself — which is exactly the DDP logistics model many sellers use today, now restricted to validated brokers.

The broker pool that can serve you just shrank. Of roughly 3,100 brokers that filed entry summaries between October 2020 and February 2026, only 21% are CTPAT validated (78% are not), and about two-thirds have served a foreign IOR. The 1,401 non-validated brokers that served foreign IORs must either win CTPAT validation or drop the business. Expect CTPAT-validated brokers to be in demand — and priced accordingly.

"U.S. company" setups face a verification test, not a formality. Many sellers route imports through a U.S. entity. If that entity genuinely has U.S.-person beneficial owners controlling it, real operations, or real domestic assets, it can keep importing as a U.S. IOR — no CTPAT needed, just the new declaration on every entry. If it's a name-and-mailbox shell over a foreign parent, declaring U.S. IOR status is now a false statement that can cost you immediate delivery privileges. The declaration is per-entry and CBP can verify.

De minimis parcels are not in scope — yet. Section 321 clearances are not formal or informal entries under this rule. But note the signal: EO 14411 directed CBP to bar foreign IORs from informal entry altogether, and CBP chose not to go that far in this rule — while explicitly asking for comments on prohibiting informal entries by foreign IORs if monitoring shows risk. For low-value e-commerce flows that clear as informal entries (type 11), that reserved option is the next shoe to watch.

What to do now

1. Ask your broker or forwarder one question this week: are you CTPAT validated, and will you still be able to file entries for a foreign IOR after January 5, 2027? Get it in writing. If the answer is no, you need a new clearance path before the effective date — not in January.
2. Audit your U.S. entity against the new test. Map beneficial ownership (25% thresholds, every layer up to natural persons) and domestic physical assets. If it qualifies as a U.S. IOR, prepare to declare it on every 3461/7501 from January 5. If it doesn't, plan as a foreign IOR now.
3. Evaluate CTPAT membership on its own timeline. Validation means a security profile and a CBP validation process — start early if you want the self-filing lane back. Otherwise, budget for CTPAT-validated broker fees.
4. Keep watching the comment docket. The informal-entry prohibition for foreign IORs is explicitly on the table. Significant moves land in our Tariff Radar within hours, and you can price both scenarios (current rules vs. full informal-entry ban) in the tariff calculator.
5. Classify your goods properly in the meantime. Whatever lane you end up in, the duty stack is unchanged — MFN plus Section 301/232 where they hit. Run your HTS codes through the HTS lookup so the compliance work doesn't hide a rate surprise.

How we read it

This is the administrative skeleton of the customs-enforcement EO arriving on schedule — and it aims less at tariff rates than at who stands behind an entry. The economics in the rule explain why: CBP counted $1.01 billion in unpaid bills from non-CTPAT foreign IORs, and recovered only 3.1% of the $1.16 billion its audits found foreign IORs cost the government since 2020, versus 15.2% for U.S. IORs. A debtor you can't reach is a debtor you don't price for — so CBP is forcing every foreign IOR through a party it can hold accountable. For legitimate sellers this is a cost-and-logistics problem, not a duty increase; the real strategic risk is the reserved informal-entry ban, which would reach much further into low-value e-commerce than this rule does.