Waterborne Parasites: Cryptosporidium, Giardia & Cyclospora

Most of what your water utility does to make water safe is aimed at bacteria and viruses, and chlorine handles those brilliantly. But there is a small family of protozoan parasites that chlorine struggles with — or, in two cases, cannot touch at all. Three of them account for the overwhelming majority of parasite-related waterborne illness in the United States: Cryptosporidium, Giardia, and Cyclospora.

They are often lumped together, and they do share the trait that matters most for how you protect yourself. But they reach you by very different routes — one defeats a working treatment plant, one rides untreated wilderness and well water, and one arrives on the produce in your refrigerator. Understanding which is which tells you exactly where your risk actually sits and what, if anything, you should do about it.

The Three Parasites at a Glance

All three are single-celled protozoa that infect the intestine, spread by the fecal-oral route, and survive in the environment inside a tough dormant shell — a cyst (Giardia) or oocyst (Cryptosporidium and Cyclospora). From there they diverge on almost every axis that matters: how big they are, whether chlorine works, how they reach you, and how they are treated. This table is the core of the guide; everything else expands on it.

The single most useful column is “killed by tap-dose chlorine?” Giardia is vulnerable to chlorine given enough contact time, which is why standard municipal treatment controls it and why the EPA built its first surface-water rule around it. Cryptosporidium and Cyclospora shrug chlorine off entirely — which is why the defenses that work against them are physical (filtration, reverse osmosis) or thermal (boiling), never chemical.

Where the Risk Actually Sits

The instinct during a parasite scare is to distrust the tap. For these three, that instinct is right for only one of them. Map each parasite to where people actually get infected and the picture reorganizes itself:

• Cryptosporidium is the one genuinely associated with treated water. Because chlorine can’t kill it, a filtration failure at a municipal plant sends it straight to the tap — the 1993 Milwaukee outbreak sickened an estimated 403,000 people this way. It is also the number-one cause of pool and water-park outbreaks in the US, because chlorinated recreational water offers it no barrier.
• Giardia is the parasite of water you didn’t treat: backcountry streams, shallow or poorly protected private wells, and recreational water people swallow. Properly treated municipal water reliably keeps it out.
• Cyclospora barely involves drinking water at all in the US. Its exposure runs through fresh produce grown or rinsed with sewage-contaminated irrigation water. The tap is a near-zero source.

That last point is worth making concrete, because it is where public understanding goes most wrong during an outbreak. When researchers pooled global studies of where Cyclospora actually shows up in water, the contrast between farm water and finished tap water was stark:

How Treatment Sheds Parasites — and Where It Fails

A US drinking-water system is a multi-barrier design: no single step is trusted to do everything, so that a failure at one stage is caught by another. Follow the water through it, and you can see exactly which barrier each parasite tests.

Read left to right, the design reveals its own weak point. Chlorine (stage 3) is the barrier that fails against Cryptosporidium and Cyclospora, so for those two the entire defense rests on filtration (stage 2). When filtration falters — a coagulation error, a filter breach, turbidity breakthrough — Cryptosporidium has no disinfection backstop, which is precisely the Milwaukee failure mode. Giardia is more forgiving: even if some cysts slip past filtration, chlorine finishes them, so it takes a failure at both barriers to reach the tap. And Cyclospora largely bypasses this train altogether, because its US contamination happens on the farm, downstream of any drinking-water plant. Stage 4 — a filter you install — exists to protect against exactly the cases where the utility’s barriers are absent or fail.

Do You Need a Parasite Barrier at Home?

For the average household on a well-run municipal system, the answer is usually no — the barriers above are doing their job, and a filter bought in a panic addresses a risk you may not have. The honest test is whether you fall outside that protection or into a higher-sensitivity group.

The Barriers That Actually Work

If you do want protection, only a few approaches genuinely stop these parasites — and one popular one does nothing. Ranked by reliability:

The one to strike off your list is chemical disinfection. Chlorine and iodine tablets — the backpacker’s default — do not kill Cryptosporidium or Cyclospora, and work only slowly against Giardia. If you are treating questionable water in the field, filtration or boiling is the dependable choice, not tablets. And a standard carbon pitcher (the kind most kitchens have) removes chlorine taste but has no cyst rating and offers no parasite protection at all.

The Certifications That Matter

When a filter claims to remove parasites, the claim is only as good as its third-party certification. These are the standards that actually apply to cysts and oocysts — and the common ones that don’t.

Our NSF water filter certifications guide walks through how to read a certification listing and spot the “tested to” language that isn’t the same as certified.

Cryptosporidium: The One That Beats a Working Plant

Of the three, Cryptosporidium is the parasite that keeps water engineers up at night, because it is the one that can reach the tap through a functioning municipal system. Its oocysts are the smallest of the three (4–6 µm), the most chlorine-resistant, and immediately infectious at a dose as low as ten oocysts. When Milwaukee’s filtration faltered in 1993, chlorine offered no second line of defense and an estimated 403,000 people fell ill — still the largest waterborne disease outbreak in US history. That event rewrote the federal rulebook, adding Cryptosporidium-specific filtration and monitoring requirements on top of the original Giardia-based rule. Today it is also the leading cause of pool and water-park outbreaks, since chlorinated recreational water gives it a free pass. Read the full Cryptosporidium profile for the Milwaukee case study and the EPA rules it produced.

Giardia: The Untreated-Water Parasite

Giardia is the most commonly identified intestinal parasite in the US and the classic “beaver fever” of untreated streams and wells. Its cysts are the largest of the three (8–12 µm), which makes them the easiest to filter, and — crucially — it is the only one of the three that chlorine reliably inactivates given adequate contact time. That vulnerability is why the EPA’s 1989 Surface Water Treatment Rule was written around Giardia, requiring 3-log (99.9%) removal or inactivation, and why properly treated municipal water keeps it out. The people who get giardiasis are mostly those drinking water no plant ever treated: backpackers, private-well owners near septic systems or livestock, and children in daycare outbreaks. Its tell is a longer incubation (1–3 weeks) and greasy, floating stools. See the full Giardia profile for symptoms, treatment, and well-water guidance.

Cyclospora: The Produce Parasite

Cyclospora is the odd one out. Like Cryptosporidium it laughs at chlorine, but unlike either cousin its oocysts are not infectious when shed — they must spend days to weeks maturing in the environment before they can infect anyone. That single quirk means it does not spread person-to-person and behaves as a seasonal food-and-water contamination problem rather than a contagion. In the US, the vehicle is overwhelmingly fresh produce — imported herbs, berries, and bagged salad greens contaminated by sewage-tainted irrigation water on the farm. The 2026 season set records, with roughly 7,000 reported cases across 34 states by mid-July, and investigators pointed to lettuce and salad greens. For this parasite, the highest-value prevention is food handling and heeding recall notices, not a water filter — the tap is a near-zero source. Read the full Cyclospora profile and our news coverage of the 2026 outbreak.

How to Remove All Three — Summary

Because the three parasites are all stopped by the same physical barriers, one well-chosen setup covers the whole family. Match the barrier to your situation:

For a permanent solution at the kitchen sink, a certified reverse osmosis system is the most complete barrier — it stops all three parasites and dissolved contaminants like lead and PFAS in one unit. A certified under-sink filter with an NSF 53 cyst rating is a simpler alternative. Private-well owners should start with testing — see well water testing — and anyone unsure what is in their water can compare home and lab options in our how to test your tap water guide.

Frequently Asked Questions

What is the difference between Cryptosporidium, Giardia, and Cyclospora?

All three are intestinal protozoan parasites removed by fine filtration, but they differ in critical ways. Cryptosporidium is chlorine-resistant and can reach the tap through a municipal treatment failure. Giardia is larger, easier to filter, and — unlike the other two — is killed by chlorine at adequate contact time, so treatment controls it well; its risk is untreated water. Cyclospora is chlorine-resistant but isn’t infectious until it matures in the environment, so it doesn’t spread person-to-person and is mainly foodborne in the US.

Does chlorine kill waterborne parasites?

Only partly. Chlorine reliably kills Giardia given enough contact time, which municipal plants achieve. But it does not kill Cryptosporidium or Cyclospora at drinking-water doses. That is why utilities depend on physical filtration for those two, and why chemical tablets are a poor field defense against parasites.

What water filter removes parasites?

A filter certified to NSF/ANSI 53 for cyst reduction (a 1-micron absolute pore size), a reverse osmosis system certified to NSF/ANSI 58, or an NSF/ANSI 55 Class A UV unit will remove or inactivate these parasites. A standard carbon pitcher certified only to NSF/ANSI 42 does not — it addresses taste and chlorine, not cysts.

Does boiling water kill Cryptosporidium and Giardia?

Yes. Bringing water to a rolling boil for one minute (three minutes above 6,500 feet) destroys Cryptosporidium, Giardia, and Cyclospora. Boiling is the most reliable emergency measure, and it works when chlorine does not.

Are these parasites in US tap water?

Rarely, in properly treated municipal water. Treatment is built to remove them, and Giardia is additionally killed by chlorine. Cryptosporidium is the one that can reach the tap through a filtration failure, so utility compliance history matters. Cyclospora in US tap water is very unlikely — its route is fresh produce. Search your city on WaterVerge to review your utility’s treatment and coliform record.

Want to know how well your own utility is holding these barriers? Search your city to review its treatment compliance and coliform history — the signals that tell you whether the parasite defenses upstream of your tap are actually intact.