More and more USB sticks and microSD cards are being made with dubious components — data recovery firm uncovers no-name, low-quality NAND inside many devices | Tom's Hardware

Nameless NAND chips everywhere.

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

Data recovery firm CBL reports that memory chips in the most recent microSD cards and USB sticks are perhaps the most unreliable. The company says that in its business, it's finding more and more devices with cut-down memory chips with manufacturer names removed and even USB sticks that utilize a repurposed microSD card soldered onto the board. CBL concludes that portable flash devices are suffering from increasingly poor quality.

“When we opened defective USB sticks last year, we found an alarming number of inferior memory chips with reduced capacity and the manufacturer's logo removed from the chip. Clearly discarded and unrecognizable microSD cards are also soldered onto a USB stick and managed with the external one on the USB stick board instead of the microSD's internal controller," explains Conrad Heinicke, Managing Director of CBL Datenrettung GmbH.

CBL believes these low-quality NAND flash chips were probably manufactured at trustworthy companies like SanDisk and Samsung but failed quality control. Instead of being thrown away, they were saved and made it to the broader market. These chips are not completely broken, but CBL notes they come with reduced storage capacity, implying that reducing capacity was how they were salvaged.

CBL even provided photos of three USB sticks in its data recovery business. The manufacturer's name was covered with text on one of the flash chips, but it can be identified as SanDisk. However, the two other drives shown had no names or labels. One even used a black microSD card soldered to a PCB, an increasingly common tactic to produce USB sticks cost-effectively (and perhaps dubiously).

Most low-quality USB sticks were "promotional gifts," according to CBL, but some were "branded products." Though this should concern us, CBL doesn't elaborate on what it considers a "branded" product. USB sticks can come in many forms: free ones that you might get (such as a promotional gift, as CBL says), regular sticks that come from brands you probably haven't heard of, and models that are from mainstream brands like SanDisk. If CBL claims this kind of flash is found inside even drives from brands with name recognition, that would be a big problem.

CBL also identifies QLC technology as another factor that compounds the reliability problems exhibited by these repurposed chips. Every flash chip comprises cells, and each cell can store several bits. The first NAND chips could only store one bit per cell and were called single-level cell (SLC), which meant excellent performance and reliability but inferior data density.

Eventually, manufacturers began increasing the bits per cell to increase the amount of storage that could be put on a single chip, but more bits meant less reliability. Today, quad-level (QLC) flash chips offer the highest bits per cell and are commonly used for cheap drives. CBL says that combining subpar flash chips with QLC memory exacerbates already existing quality problems, and the company says, "You shouldn't rely too much on the reliability of flash memory."

Get Tom's Hardware's best news and in-depth reviews, straight to your inbox.

This report doesn't even touch on the plague of USB sticks that falsely claim to have several hundred gigabytes of capacity but only have perhaps as little as 16GB or even 8GB. These devices are also constructed using techniques similar to the USB sticks that CBL warns of, like sticking microSD cards to a board.

Matthew Connatser is a freelancing writer for Tom's Hardware US. He writes articles about CPUs, GPUs, SSDs, and computers in general.

Our favorite 1TB USB Flash drive is now $69, matching its lowest price ever

Japanese company shows off $50 USB thumb drive with integrated digital camera

Chinese and Iranian hackers use ChatGPT and LLM tools to create malware and phishing attacks — OpenAI report has recorded over 20 cyberattacks created with ChatGPT