Single-Brand Extension Is a Fair-Weather Dividend. Multi-Brand Isolation Is a Stormy-Weather Harbor.
The Eufy privacy crisis burned for 14 months in 2022. Anker's charging products stayed #1 on Amazon throughout. This piece breaks down the risk math behind that — and the rule for which categories should become sub-brands.
🌍 中文版:[单品牌的扩张是顺风时的红利,多品牌的隔离是逆风时的避风港](Cmd+K 链 https://adamnote.com/anker-brand-firewall/)
On November 23, 2022, an independent UK security researcher named Paul Moore posted a video on Twitter. The video showed that Eufy, a home-security camera brand that sells well in the U.S. market and advertises itself with promises of “end-to-end encryption,” “local-only storage,” and “no cloud uploads,” was uploading thumbnails and facial-recognition data to AWS even when users had explicitly disabled cloud storage.
Two days later, Moore discovered something worse: Eufy camera live streams could be accessed via VLC media player without authentication, from anywhere in the world. The Verge’s Sean Hollister decided to verify the claim independently. Anker PR manager Brett White initially denied the VLC vulnerability existed. The Verge tested it on two of their own Eufy cameras across the United States and confirmed it worked, directly contradicting Anker’s public statement.
The crisis lasted 14 months. During that time Eufy quietly removed its “10 privacy promises” page from the website, issued a half-hearted statement, and finally admitted in January 2023 that the products had not delivered the end-to-end encryption they claimed. In 2025, the New York State Attorney General imposed a $450,000 settlement on multiple companies for similar conduct.
This was a textbook brand trust crisis. By any normal logic, it should have crushed the parent company, Anker. But during the same period, Anker charging products held the #1 spot on Amazon’s bestseller list, kept getting recommended by The Verge, Wired, and Wirecutter, and prompted a typical Reddit comment that read: “I see no reason to stop buying their cables because of that.”
Same parent company. Same supply chain. Same executives. The sub-brand burned for 14 months. The mother brand was barely scratched.
That outcome is worth interrogating.
Most people misread the value of multi-brand portfolios
When Chinese DTC brands explain their multi-brand portfolios, the rationale is almost always “category coverage.” The framing is one of business expansion: since you have R&D, supply chains, and channel resources, you might as well use them across multiple categories.
The framing inverts the actual value proposition.
When Anker spun up Eufy (smart home), Soundcore (audio), and Nebula (projection) between 2014 and 2018, the public explanation was the same: “we’re covering more categories.” But when the Eufy crisis hit in 2022, a different value of the multi-brand portfolio surfaced in a single moment: risk isolation. This value is underrated and almost never discussed.
The number of categories in which a company can earn user trust depends, fundamentally, on how many independent “trust pools” it can sustain. A trust pool is the cumulative sum of user reviews, word-of-mouth, memory, and emotional response toward a single brand. When a trust pool gets punctured by an event (a defect, a privacy breach, a compliance failure, a review-manipulation scandal), it shifts from a positive balance to a negative one. The contagion radius of that negative balance defines the company’s loss boundary.
Single-brand extension (using one brand across many categories) means the company has exactly one trust pool. All categories share it. When the pool is punctured, every category enters the negative-balance zone together.
A multi-brand portfolio (one brand per category) means the company has N trust pools, isolated from each other. When one is punctured, the others are unaffected.
This is a difference at the level of mathematics, not marketing.
But to see the difference, you need an event that punctures the pool. That’s why most discussions of multi-brand portfolios never address defense: defense is a foul-weather asset. In fair weather its value is zero. The value only manifests in a moment you didn’t see coming, when you take a hit, and then it returns to zero.
A CMO who only looks at fair-weather data will conclude that multi-brand portfolios have worse ROI than single-brand extension. Multi-brand requires fragmented investment, separate operations teams, separate websites, separate customer-service systems. These are visible costs.
Until the storm arrives.
How risk travels
Picture two companies.
Company A uses a single brand across five categories: chargers, smart speakers, smart locks, children’s toys, and supplements. Every product carries the same logo, the same brand story, the same customer service number, and the same packaging language.
Company B has five independent brands, one per category. Each brand has its own website, its own social accounts, its own customer-service team. The logos and visual systems differ entirely. A user who sees these five brands on Amazon won’t immediately realize they share an owner.
Now an event hits: the smart lock is found to have a critical security flaw that allows remote unlocking. Hacker community videos spread on Twitter.
Company A’s fate: when users search for any of this company’s other categories, the top result is “lock vulnerability.” Charger buyers start wondering if the firmware in their chargers is also vulnerable. Parents who bought supplements start worrying whether the certifications on the packaging are also fabricated. Children’s-toy returns climb 30% within two weeks. The trust pool was punctured, and every category is drawing from the same contaminated water.
Company B’s fate: the smart-lock brand is pinned to the wall and may have to enter recovery mode or exit the market entirely. But charger, speaker, toy, and supplement buyers have no idea the event has anything to do with what they bought. To them, the failed lock brand is just an unrelated competitor.
This is the difference between multiplication and addition.
Single-brand extension: contagion follows multiplicative law. Crisis loss = single-category damage × shared-brand coefficient. The higher the shared-brand coefficient (shared logo, shared CS, shared brand story), the more the damage gets amplified.
Multi-brand portfolios: contagion follows additive law. Crisis loss = single-category damage × independence factor (approaches zero as independence approaches 1).
In fair weather, multiplication looks attractive: you build one strong brand and every category rides on it. A new category can launch at near-zero cost by recycling existing trust. Multi-brand portfolios are a disadvantage in fair weather: every brand has to build trust from scratch, investment is fragmented, momentum is slower.
In foul weather, multiplication turns into poison: the strong brand becomes a receiver for every problem in every category. Nothing is local anymore.
Two real cases
In May 2021, Aukey, a Shenzhen-based DTC brand, was wiped off Amazon overnight. Amazon’s investigation had concluded that Aukey systematically manipulated reviews by tucking “$35 gift card for a 5-star review” cards inside its packaging. The technique wasn’t unique to Aukey. RAVPower, TaoTronics, Vava, and hundreds of other Chinese brands were swept out in the same wave.
Aukey’s structure was single-brand extension. Chargers, power banks, car chargers, true-wireless earbuds, cables — every product wore the Aukey logo. After the ban, every category froze simultaneously. Parent-company GMV dropped from ¥8.79 billion in 2021 to ¥4.91 billion in 2022, a 44.1% collapse. The company eventually rebranded (creating AuGroup as a holding entity) and pivoted into a completely different category (large furniture) before completing a Hong Kong IPO in 2024. The original Aukey brand was effectively retired.
Anker, in the same timeframe, found itself in the opposite situation. Its multi-brand portfolio (Anker, Eufy, Soundcore, Nebula) meant that even when Eufy was nailed to the wall for 14 months over privacy violations in 2022, Anker charging products held the #1 Amazon bestseller spot, YouTube reviewers kept recommending them, and The Verge / Wired kept handing out Editor’s Choice awards.
The isolation effect of a multi-brand portfolio shows up cleanly in this comparison: Aukey was a pool of water knocked over. Anker was one cup that broke.
Eufy’s isolation wasn’t perfectly hermetic. The Verge’s headlines used “Anker’s Eufy,” pulling Anker’s name back into the story. Privacy-sensitive, high-information audiences (tech blog readers, active Reddit users) did form a secondary impression that “Anker is the company that lied.” Linus Tech Tips ended its sponsorship with Eufy entirely, a concrete piece of secondary damage.
But that damage was contained to “people who follow the details.” The vast majority of Anker charging product buyers are Amazon shoppers who scan star ratings, read reviews, and don’t subscribe to The Verge. To them, Anker is still “the default non-Apple charger choice.”
Isolation isn’t perfect insulation. It’s the vast majority of damage being kept inside the sub-brand. That’s enough.
Three conditions for the firewall to work
If you watch how the Anker / Eufy isolation actually played out, you can reverse-engineer the three conditions that have to be in place for the firewall to function. The most common failure pattern among Chinese brands building multi-brand portfolios is to satisfy only the first condition and treat the other two as optional.
Condition one: operational independence
The first condition is that sub-brand operations are completely independent: independent website, independent marketing team, independent customer service, independent social accounts, independent product launch cadence.
This sounds obvious, but it’s the most common pitfall. The most frequent error is using the mother brand’s website as the entry point for the sub-brand. For example, putting a “Smart Home” navigation tab on Anker.com that takes you straight to Eufy products. This looks more efficient from an SEO and supply-chain standpoint, but in firewall logic it’s self-sabotage. When Eufy has a problem, users searching for it find Anker.com, which cements the perception that “the Anker company has a problem.”
Real operational independence means: a user buying a Eufy camera on Eufy.com never sees the Anker name. Customer service phone calls open with “Thanks for calling Eufy,” not “Thanks for calling the Eufy division of Anker Group.” The social account’s posting cadence, content style, and visual system follow Eufy’s own strategy.
The cost of independence is visible: you have to staff two or four separate operations teams. That cost buys the isolation layer.
Condition two: distinguishable brand identity
The second condition is that brand identity is clearly differentiated in user perception: logos, names, visual systems, and brand stories all let the user immediately recognize “these are different brands.”
The opposite of this is the common “X by Y” naming convention. For example, the early “soundcore by Anker.” That naming tells the user, the moment they enter the store, “this is from Anker.” Short term, it looks like an advantage: mother-brand trust transfers directly to the sub-brand. Long term, it pokes a hole in the firewall. If soundcore ever has a problem, those three words “by Anker” pull the event straight into the mother brand.
Real multi-brand identity demands: a user seeing Anker chargers and Eufy cameras on Amazon doesn’t immediately register that they share an owner. Different logo, different name, different product page design, different CS scripts. Doing this requires accepting, when the sub-brand launches, that “we won’t borrow mother-brand trust for now.” That means the sub-brand’s first 2-3 years of growth will be slower than a “tagged-on” sub-brand. This is another hidden cost of the firewall.
Condition three: locatable problem
The third condition is that when a crisis hits, the problem is attributable to the sub-brand rather than to “the corporate group.” This one is the most subtle, because it’s not entirely under the company’s control. How the media writes the story, how users remember it, how social platforms propagate it: all of this affects “which level the problem is attributed to.”
But the company can do this: when a crisis hits, issue statements through the sub-brand’s channels, not the parent company’s. Have the sub-brand’s CEO (if there is one) respond, not Anker’s founder. Have the sub-brand’s PR team handle media, not the parent company’s PR manager.
In the Eufy crisis, Anker PR manager Brett White was the one who lied to The Verge. That decision turned every Verge headline into “Anker’s Eufy” rather than just “Eufy.” The company’s own crisis-response choices weakened the firewall. If a Eufy spokesperson, not an Anker corporate PR manager, had taken the call, the headline might have been “Eufy lied” instead of “Anker’s Eufy lied.” A few words of difference, but those words determine where the attribution lands.
Why the three conditions depend on each other
These three conditions aren’t parallel — they stack. The first (operational independence) is the foundation; without it the other two are moot. The second (distinguishable identity) is the daily defense, working in peacetime to keep clear borders in user perception. The third (locatable problem) is the crisis response: it determines whether the firewall’s last line holds when an event breaks.
Most Chinese multi-brand portfolios satisfy only the first condition. The second and third are empty. That’s why their isolation effect falls so far short of Anker’s.
Which categories should be independent?
Not every category needs to be its own sub-brand. The isolation value of a multi-brand portfolio comes with a cost. Independent operations, independent marketing, independent CS all cost real money. If a category’s worst-case crisis is just a 5% return-rate bump, building an independent brand for it has negative ROI.
The rule for deciding which categories should be independent comes down to one question:
If this category had its worst-possible crisis, would I want to shut it down?
If yes, the category needs to be its own sub-brand.
If no, the category can sit under the mother brand.
The question’s purpose is to test the “crisis floor” of the category. Categories with deep floors (worst-case scenarios are catastrophic) need a firewall. Categories with shallow floors (worst case is some returns) don’t.
Categories with deep floors
The following categories typically have worst-case scenarios bad enough to make a company want to shut them down. They need to be independent.
Privacy-sensitive categories are the most obvious. Cameras, smart locks, smart assistants, fitness trackers. Once data leaks or unauthorized data collection is alleged, the damage is orders of magnitude worse than “the product doesn’t work well.” Eufy is the textbook case.
Children-related categories follow. Toys, children’s apparel, baby bottles, strollers. Worst case is a child being hurt or killed, accompanied not by returns but by lawsuits, regulatory investigations, and parental community mobilization. The speed and depth of contagion in this domain dwarfs adult categories.
Health and medical categories sit in the same tier. Supplements, medical devices, ingestibles. Worst case is consumer health damage with FDA or regulatory investigation. Another flavor of catastrophic floor.
Food and ingestibles work the same way. Pet food, human food, beverages. Worst case is poisoning incidents, animal deaths.
Financial and asset categories carry a more direct cost. Insurance, lending, wealth management. Worst case is total trust collapse plus regulatory fines plus class action.
There’s one more category that’s easy to overlook: compliance-sensitive technologies. Anything tied to military or dual-use applications, encryption, export-controlled categories. Worst case is being placed on an entity list or equivalent restriction.
Categories with shallow floors
The following categories typically have shallow crisis floors, and can sit under the mother brand (assuming the mother brand has been built):
Chargers, power banks, accessories, office supplies, stationery, household cleaning, sports equipment (excluding children’s or medical-adjacent variants).
The worst case in these categories is usually returns plus a recall plus a short-term sales dip. The mother brand can absorb it. Anker itself recalled 1.1 million PowerCore power banks in June 2025, and the long-term mother-brand trust was barely affected. That’s the signature of a shallow floor.
Edge categories
There’s a class of categories sitting in the middle: smart appliances (excluding cameras), smart speakers (with voice assistants), smart lighting. Worst case depends on the specific feature. If the feature touches recording, video, or biometrics, it should be independent. If it’s just controlling switches or brightness, it can extend the mother brand.
The principle: the closer a feature gets to the user’s body or private space, the deeper the floor, and the more it should be independent.
Start independent, merge later
A common objection is “building independent brands is too expensive.” But this objection misses something important: a sub-brand can start independent and merge into the mother brand later, once it’s been confirmed low-risk. The reverse is much harder. Pulling a category that’s already merged into the mother brand back out costs roughly twice what building a new brand costs.
Anker’s recent moves illustrate this logic. Nebula (the projection brand) was merged back under Soundcore in August 2025. That happened because the projection category had been verified as having a shallow floor, and independent operation no longer had ROI. But Eufy’s independence has been reinforced, because privacy sensitivity gives it a deep floor, and it will never merge.
This is a dynamic process: treat new categories as “high-risk by default and independent,” operate them for 2-3 years, observe actual crisis exposure, and then decide whether to keep them independent or merge them. Conservative entry, permissive consolidation. That’s the safe strategy at the brand-defense layer.
Multi-brand portfolios have been a topic of conversation among Chinese DTC brands for over a decade. But the conversation has mostly stayed at “expansion tools”: covering more categories, tapping more supply chains, riding more growth engines.
That conversation has missed a more important angle. The hidden value of multi-brand portfolios is risk isolation: an asset that’s invisible in fair weather and gets cashed in once during a storm.
Its competitor isn’t other multi-brand companies. It’s the temptation of “extension,” the temptation to use the mother brand’s trust to cover more categories. Every decision to do that quietly switches the contagion coefficient of the trust pool from additive to multiplicative.
The Aukey story and the Anker story sit on opposite sides of that mathematical difference.
Single-brand extension is a fair-weather dividend. Multi-brand isolation is a stormy-weather harbor.
When a CMO at a global-expansion brand makes a category-extension decision, the most useful question isn’t “do we have the capability to do this new category?” It’s: “if this new category has its worst-possible crisis, would I rather it land on the mother brand, or on a self-contained sub-brand?”
Adam Yang | 10+ years in global expansion (出海) — formerly Greater China at Twitter, Greater China at Quora.