VPN or eSIM for China? How to Get Online in 2026 (Decision Guide)

Short answer: if you just want Google, WhatsApp, Instagram and Maps to work on your phone for a normal trip, buy a foreign eSIM and you do not need a VPN. A foreign eSIM routes your data through a gateway outside mainland China, so the Great Firewall never touches it. You only need a VPN if you use a Chinese SIM card, depend on Chinese Wi-Fi, or need blocked sites on a laptop/desktop.

This is the single most confusing thing for first-time visitors — “why would I need a VPN if I have an eSIM?” — so this page lays out exactly who needs what, and the gotchas nobody warns you about.

This is a decision guide. For full provider lists and step-by-step setup, see Internet Access & the Great Firewall and the SIM Card & eSIM guide.

Do I need a VPN or an eSIM for China?

Pick the row that matches you:

Your situation	What you need	Why
Short trip, phone only, want blocked apps to work	Foreign eSIM, no VPN	eSIM data bypasses the firewall entirely
Want a Chinese phone number (+86) for local apps	Chinese SIM + VPN	A Chinese SIM is behind the firewall, so it needs a VPN
Bringing a laptop and need Google/Gmail on it	eSIM (tether) or VPN on the laptop	The laptop uses Wi-Fi, not your eSIM, unless you tether
Long stay / resident	Chinese SIM + 2 VPNs	You’ll need a local number; VPNs are your firewall workaround
Only need Chinese apps (Alipay, Amap, WeChat, DiDi)	Nothing special	These all work natively without a VPN

Rule of thumb: eSIM = the easy, VPN-free path for tourists. VPN = only when you’re on a Chinese SIM or Chinese Wi-Fi, or on a computer.

How does a foreign eSIM bypass the Great Firewall without a VPN?

When you use a foreign or Hong Kong eSIM (Airalo, Holafly, Ubigi, Nomad), your phone connects to a Chinese tower but your data is tunneled back to the provider’s home network abroad before it reaches the internet. Because the traffic exits outside mainland China, China’s filtering — which only applies to traffic that exits inside the mainland — never sees it. Google, WhatsApp, YouTube and everything else just work.

A Chinese SIM card is the opposite: its data exits inside mainland China, so it goes straight through the firewall and blocked services stay blocked unless you add a VPN.

iPhone caveat: iPhones sold in mainland China have no eSIM hardware, so a mainland-bought iPhone can’t use a foreign eSIM. iPhones bought anywhere else are fine. Check before you rely on an eSIM.

When do I still need a VPN?

Even with an eSIM, a VPN is useful (or necessary) when:

• You use a Chinese SIM card — needed if you want a +86 number for app registrations and SMS. A Chinese SIM is behind the firewall. That said, most visitors don’t actually need a Chinese phone number at all.
• You’re on Chinese Wi-Fi — hotel, café and airport Wi-Fi all sit behind the firewall. (Your eSIM’s mobile data does not, so you can often just turn Wi-Fi off.)
• You’re on a laptop or desktop — computers connect over Wi-Fi, not your phone’s eSIM, so they need either a VPN or your phone’s tethered eSIM data.
• As a backup — many travelers keep one VPN installed even on an eSIM, in case they end up on Chinese Wi-Fi.

Why does my foreign eSIM break Alipay or WeChat Pay?

This catches people out: some foreign eSIMs (notably Holafly) include an always-on VPN you can’t switch off. Because your traffic appears to come from outside China, it can occasionally:

• trip Alipay / WeChat Pay fraud checks, so a payment is declined, or
• stop a mini-program (e.g. ordering at Luckin, some bike-share) from loading.

How to handle it:

• If a payment fails on an always-on-VPN eSIM, complete that one payment over Chinese Wi-Fi or a Chinese SIM instead.
• On a normal VPN (separate app), simply toggle the VPN off while you pay, then back on.
• This is also why a dual setup (foreign eSIM for data + a cheap Chinese SIM for a number and payments) is the most robust option for longer or payment-heavy trips.

See Mobile Payment for the other big payment gotcha — foreign cards can only pay merchant QR codes, not personal ones.

Which is best: eSIM, Chinese SIM, or roaming?

Option	Bypasses firewall?	Gives +86 number?	Best for	Watch out for
Foreign eSIM (Airalo, Holafly, Ubigi, Nomad)	✅ Yes (no VPN)	❌ No	Most tourists	Always-on-VPN eSIMs can break Alipay; no local number; mainland iPhones lack eSIM
Chinese SIM (China Mobile/Unicom)	❌ No (needs VPN)	✅ Yes	Long stays, apps needing +86	Behind the firewall; buy with passport
Home-carrier roaming	✅ Often yes	❌ No	Short stops, zero setup	Can be expensive; reliability varies
eSIM + Chinese SIM (dual)	✅ Yes	✅ Yes	Longer / payment-heavy trips	Costs a bit more; dual-SIM phone needed

For data sizing, activation timing and brand-by-brand notes, see the SIM Card & eSIM guide.

Why do VPNs that worked last week suddenly stop?

China’s firewall is a moving target, not a fixed wall. It uses deep packet inspection and machine learning to detect and block VPN traffic, and it gets updated constantly — hardest around politically sensitive dates.

• The 2026 crackdown disrupted many popular services; LetsVPN, long a community favorite, became largely unusable for many users.
• Some providers ban accounts for high bandwidth use (downloading Steam games, heavy torrenting), often blamed on an “AI system” — so don’t rely on a single account for heavy use.
• Protocols matter: newer obfuscated protocols like Xray Reality and Trojan currently survive better than older Shadowsocks variants, which are mostly dead.
• Most reliable in 2026: Astrill (StealthVPN) and ExpressVPN (Lightway) are the most consistently recommended; free VPNs have a ~0% success rate in China.

Always install and test two VPNs before you fly, and keep them updated.

How do I get a VPN if I’m already in China and mine stopped working?

This is genuinely hard, because VPN provider websites and most VPN app-store listings are themselves blocked from inside China. In rough order:

1. Switch to your backup VPN (this is why you install two).
2. Use a saved China mirror link — some providers (e.g. ExpressVPN) give subscribers special China download URLs. Save these in your notes app before you travel.
3. Have someone send you the installer — a friend can email it (Outlook/Yahoo/iCloud Mail work without a VPN) or share it via WeTransfer, which is often not blocked.
4. Use a different-region App Store account — the China App Store removes many VPN apps; another region’s store may still list them.
5. Wait until Hong Kong, Macau or Taiwan — the firewall doesn’t apply there, so you can download and configure freely, then return.

Prevention beats all of these: install two VPNs and save their mirror links before departure.

Quick recommendation by scenario

• Two-week sightseeing trip, phone only: foreign eSIM (Airalo or Holafly). No VPN needed. Optionally one backup VPN for Chinese Wi-Fi.
• You want a Chinese number for every local app: Chinese SIM + two VPNs (Astrill + ExpressVPN).
• Payment-heavy or month-plus stay: dual — foreign eSIM for firewall-free data + a cheap Chinese SIM for a +86 number and reliable payments.
• Bringing a laptop for work: eSIM with tethering, or a VPN on the laptop; test tethering before you go.

See Also

• Internet Access & the Great Firewall — full block list, VPN provider table, setup steps
• SIM Card & eSIM — eSIM brands, data sizing, activation, local SIM options
• Mobile Payment — Alipay/WeChat setup and why payments fail