VPN or eSIM for China? (2026 Guide)

Short answer: if you just want Google, WhatsApp, Instagram and Maps to work on your phone for a normal trip, buy a foreign travel eSIM and you usually do not need a VPN. These eSIMs route data through gateways outside mainland China, so the Great Firewall does not apply to that data — that is the providers’ own description, and it applies to eSIM data only. You only need a VPN if you use a Chinese SIM card, depend on Chinese Wi-Fi, or need blocked sites on a laptop/desktop. Note that not every “China eSIM” bypasses the firewall: some China Unicom tourist eSIMs route domestically, so check the provider’s routing before buying.

This is the single most confusing thing for first-time visitors — “why would I need a VPN if I have an eSIM?” — so this page lays out exactly who needs what, and the gotchas nobody warns you about.

This is a decision guide. For full provider lists and step-by-step setup, see Internet Access & the Great Firewall and the SIM Card & eSIM guide.

Do I need a VPN or an eSIM for China?

Pick the row that matches you:

Your situation	What you need	Why
Short trip, phone only, want blocked apps to work	Foreign eSIM, no VPN	Foreign travel eSIM data is routed outside the mainland
Want a Chinese phone number (+86) for local apps	Chinese SIM + VPN	A Chinese SIM is behind the firewall, so it needs a VPN
Bringing a laptop and need Google/Gmail on it	eSIM (tether) or VPN on the laptop	The laptop uses Wi-Fi, not your eSIM, unless you tether
Long stay / resident	Chinese SIM + 2 VPNs	You’ll need a local number; VPNs are your firewall workaround
Only need Chinese apps (Alipay, Amap, WeChat, DiDi)	Nothing special	These all work natively without a VPN

Rule of thumb: eSIM = the easy, VPN-free path for tourists. VPN = only when you’re on a Chinese SIM or Chinese Wi-Fi, or on a computer.

How does a foreign eSIM bypass the Great Firewall without a VPN?

When you use a foreign travel eSIM (Airalo, Holafly, Ubigi, Nomad), your phone connects to a Chinese tower but the provider routes your data back through its own network abroad before it reaches the internet. Because the traffic exits outside mainland China, China’s filtering — which only applies to traffic that exits inside the mainland — does not apply to it. That is the providers’ description of how their products work, not an independent routing audit; exit points vary by provider and plan, and some “China eSIMs” (e.g. China Unicom tourist eSIMs) route domestically and do not bypass anything. Google, WhatsApp, YouTube generally work on the ones that do route abroad.

A Chinese SIM card is the opposite: its data exits inside mainland China, so it goes straight through the firewall and blocked services stay blocked unless you add a VPN.

iPhone caveat: most iPhone models bought in mainland China are dual physical SIM with no eSIM, so they can’t use a foreign eSIM. The exception is the eSIM-only iPhone Air, sold in mainland China since October 2025 — but a China-version unit can only install Chinese-carrier eSIMs while you are in the mainland, so a foreign travel eSIM will not install there. Most iPhones bought outside mainland China support eSIM; verify your exact model.

When do I still need a VPN?

Even with an eSIM, a VPN is useful (or necessary) when:

• You use a Chinese SIM card — needed if you want a +86 number (some local services and mini-programs ask for one; Alipay and WeChat Pay accept foreign numbers). A Chinese SIM is behind the firewall. That said, most visitors don’t actually need a Chinese phone number at all.
• You’re on Chinese Wi-Fi — hotel, café and airport Wi-Fi all sit behind the firewall. (Your eSIM’s mobile data does not, so you can often just turn Wi-Fi off.)
• You’re on a laptop or desktop — computers connect over Wi-Fi, not your phone’s eSIM, so they need either a VPN or your phone’s tethered eSIM data.
• As a backup — many travelers keep one VPN installed even on an eSIM, in case they end up on Chinese Wi-Fi.

Why does my foreign eSIM break Alipay or WeChat Pay?

This catches people out: some foreign eSIMs (notably Holafly) bundle a VPN, so your traffic appears to come from outside China. There is no published Alipay/WeChat rule about IP mismatch — this is a troubleshooting pattern, not a documented cause — but a payment can occasionally fail, or a mini-program can fail to load, while you are on that kind of eSIM.

How to handle it:

• If a payment fails on an always-on-VPN eSIM, complete that one payment over Chinese Wi-Fi or a Chinese SIM instead.
• On a normal VPN (separate app), simply toggle the VPN off while you pay, then back on.
• This is also why a dual setup (foreign eSIM for data + a cheap Chinese SIM for a number and payments) is the most robust option for longer or payment-heavy trips.

See Mobile Payment for the other big payment gotcha — some personal QR codes may not accept foreign-card-funded payments, while merchant QR codes usually do.

Which is best: eSIM, Chinese SIM, or roaming?

Option	Bypasses firewall?	Gives +86 number?	Best for	Watch out for
Foreign eSIM (Airalo, Holafly, Ubigi, Nomad)	✅ Usually (no VPN)	❌ No	Most tourists	Some bundle a VPN that can affect payments; no local number; most mainland-China iPhones have no eSIM
Chinese SIM (China Mobile/Unicom)	❌ No (needs VPN)	✅ Yes	Long stays, apps needing +86	Behind the firewall; buy with passport
Home-carrier roaming	✅ Often yes	❌ No	Short stops, zero setup	Can be expensive; reliability varies
eSIM + Chinese SIM (dual)	✅ Yes	✅ Yes	Longer / payment-heavy trips	Costs a bit more; dual-SIM phone needed

For data sizing, activation timing and brand-by-brand notes, see the SIM Card & eSIM guide.

Why do VPNs that worked last week suddenly stop?

China’s firewall is a moving target, not a fixed wall. It uses deep packet inspection to detect and block VPN traffic, and it is updated constantly — hardest around politically sensitive dates.

• April 2026: LetsVPN suspended its mainland service; it resumed globally in May 2026 but still cannot guarantee availability in mainland China, and other tools were hit that month too.
• Some providers suspend accounts for high bandwidth use, according to user reports — so don’t rely on a single account for heavy use.
• Protocols matter: newer obfuscated protocols like Xray Reality and Trojan currently survive better than older Shadowsocks variants, which are less reliable.
• Most reliable in 2026: Astrill (StealthVPN) and ExpressVPN (Lightway) are the most consistently recommended; free VPNs rarely work in China.

Always install and test two VPNs before you fly, and keep them updated.

How do I get a VPN if I’m already in China and mine stopped working?

This is genuinely hard, because VPN provider websites and most VPN app-store listings are themselves blocked from inside China. In rough order:

1. Switch to your backup VPN (this is why you install two).
2. Use a saved China mirror link — some providers publish special China mirror download URLs for subscribers on their support pages. Save these in your notes app before you travel.
3. Have someone send you the installer — a friend can email it to an address you can open without a VPN (e.g. Outlook or Yahoo), or use a file-transfer service you can reach.
4. Use a different-region App Store account — the China App Store removes many VPN apps; another region’s store may still list them.
5. Wait until Hong Kong, Macau or Taiwan — the firewall doesn’t apply there, so you can download and configure freely, then return.

Prevention beats all of these: install two VPNs and save their mirror links before departure.

Quick recommendation by scenario

• Two-week sightseeing trip, phone only: foreign eSIM (Airalo or Holafly). No VPN needed. Optionally one backup VPN for Chinese Wi-Fi.
• You want a Chinese number for every local app: Chinese SIM + two VPNs (Astrill + ExpressVPN).
• Payment-heavy or month-plus stay: dual — foreign eSIM for firewall-free data + a cheap Chinese SIM for a +86 number and reliable payments.
• Bringing a laptop for work: eSIM with tethering, or a VPN on the laptop; test tethering before you go, and check the hotspot cap — Holafly, for example, limits tethering to 1 GB/day.

See Also

• Internet Access & the Great Firewall — full block list, VPN provider table, setup steps
• SIM Card & eSIM — eSIM brands, data sizing, activation, local SIM options
• Mobile Payment — Alipay/WeChat setup and why payments fail