Why you don't need a VPN in China in 2026

Last week a friend texted me from Heathrow — she'd already bought a $99/year VPN subscription before her Shanghai trip. She didn't need it. She wasted the money and the setup time. I told her to install an international eSIM on the plane instead. By the time she landed at Pudong, her WhatsApp, Google Maps, and Instagram were all working without ever opening the VPN app.

This is the most common, most expensive mistake foreign travelers make about China. Three reasons it persists:

Most “VPN for China” articles are recycled from 2018

The top Google results for “best vpn for china” in 2026 are mostly articles last meaningfully updated in 2020–2022. They reference protocols and apps that worked fine then but get detected and blocked within hours now. SEO doesn't require accuracy — only freshness signals and backlinks. Publishers re-stamp the year in the title and call it done.

VPN brands pay affiliates $30–80 per signup

Most “best VPN for China” lists are funded by affiliate commissions. The recommendation isn't neutral; it's the one that pays the publisher the most per click. An international eSIM, by contrast, has no affiliate program comparable to VPN brands — so publishers have no incentive to recommend it.

Full disclosure: we sell eSIMs at GetShanghai. We're biased toward our product. But our bias is public and checkable — you can compare our prices to Airalo, Nomad, Ctrip's international SIM, or any other international eSIM provider, and you'll find we're in the same range. The thing we don't do is recommend a VPN brand we don't sell. We'll explain VPNs technically (below), but we won't tell you which one to buy.

The actual landscape changed in 2024–2026

Two technical shifts made VPN-in-China much harder than it used to be. First, the Great Firewall's deep-packet-inspection capabilities now identify VPN protocol signatures within seconds — including the “stealth” modes that VPN brands market specifically for China. Second, the cat-and-mouse cycle accelerated: VPNs that worked for months in 2022 now stop working for weeks at a time after each enforcement push. Independent measurement projects clock major commercial VPNs at 30–50% success rate in mainland China in 2026.

The one-sentence answer

If you are a foreign tourist visiting mainland China for under 30 days, buy an international eSIM and skip the VPN. It works, it's legal, it's cheaper, and the setup takes 5 minutes.

(If you're a long-term resident or digital nomad spending months in China, the trade-offs are different and this article isn't aimed at you.)

The Great Firewall's block list isn't random — it targets services where Chinese alternatives exist and where content moderation by foreign companies is considered inadequate by Chinese regulators. Practically, here's the comprehensive list as of May 2026:

The apps that “kinda work”

TikTok (Western) is technically blocked, but loads via fallback servers and shows you mostly Chinese-domestic content rather than your home feed. LinkedIn loads on Chinese networks but with degraded image/feed performance. ChatGPT sometimes works on local Wi-Fi (perhaps 30% of the time) — same situation as Google search.

What still works fine without any workaround

Apple iMessage and the Apple ecosystem (iCloud, App Store, Apple Maps, Apple News) work on Chinese networks. Banking apps from US/UK/EU banks generally work. Uber works for foreign cards (though local apps like DiDi accept foreign cards now and are dramatically better for Shanghai). Calendar sync via iCloud works.

How international roaming bypasses the firewall

When you use an international roaming eSIM, your data doesn't enter the Chinese network at all. Your phone (international eSIM line) → international partner carrier in HK / SG / JP → their network's routing outside mainland China → the open internet, where Google, WhatsApp, Instagram are all reachable.

vs. what happens on Chinese Wi-Fi or a Chinese SIM: phone → China Telecom / Mobile / Unicom backbone → Great Firewall DNS + DPI inspection → blocked sites silently fail.

It's not magic. International roaming has always worked this way — your AT&T or Vodafone roaming in any country sends your data back through your home carrier's network. China is no exception. The catch historically was that roaming costs $5–10 per megabyte on default carrier plans, which is where international eSIMs come in: $5–50 total for the whole trip instead of a $200+ roaming bill.

Why VPNs keep failing in 2024–2026

The Great Firewall stopped blocking VPNs by IP address years ago. The current generation uses deep packet inspection that identifies VPN traffic by its behavioral signature: regular packet sizes, encrypted handshake patterns, persistent connections to a single endpoint. A new VPN protocol's signature is identified and added to the block list within hours.

The major commercial VPN brands all market “stealth” or “obfuscated” modes designed for China — but these add 300–800ms of latency, which makes voice and video calls effectively unusable. International eSIMs don't have this problem because the firewall never sees them. From the firewall's perspective, your phone is in Hong Kong.

Why we don't recommend a specific VPN brand

Compliance. GetShanghai is a China-based business. Chinese regulations restrict domestically registered businesses from promoting VPN services. We're allowed to describe how VPNs work technically and why they tend to fail in China; we're not allowed to recommend specific brands.

Conflict of interest. We sell eSIMs. Recommending a VPN brand we don't sell would be transparently self-serving. Better to just be explicit: we sell eSIMs, here are the technical reasons we think eSIMs are the better choice for short-trip foreign tourists, you can verify those reasons independently.

Is using an eSIM in China “翻墙”?

No — and the distinction matters legally. “翻墙” is a Chinese-language term for circumventing the Great Firewall from inside China, typically applied to Chinese residents using technical tools. Using an international roaming eSIM as a foreign tourist is a different situation:

• Your data never enters the Chinese network. It routes through your eSIM provider's home-region partner, the same way standard international roaming has worked since the 1990s.
• Foreign carriers (AT&T, Vodafone, NTT, etc.) all roam this way in China by default — it's the protocol that makes international roaming work at all.
• China's tourism authority encourages foreign visitors to maintain home-country connectivity. Major international hotel chains explicitly recommend international roaming or international eSIM at check-in.
• There is no legal restriction on a foreign tourist using a foreign-issued SIM/eSIM while visiting China. It's an intended, supported use case.

If you are a Chinese national or permanent resident, the legal nuances are different — this article doesn't apply to your situation.

Quick reference for skimmers. Each app links to a dedicated cluster article if we've published one.

• → Does WhatsApp work in China? Yes with eSIM, including 1080p video calls
• → Does Google work in China? (full guide coming) — Yes with eSIM: Search, Gmail, Drive, Translate all work
• → Does Google Maps work in China? (full guide coming) — Yes with eSIM, including live routing
• → Does Instagram work in China? (full guide coming) — Yes with eSIM, upload works fine
• → Does YouTube work in China? (full guide coming) — Yes with eSIM, 4K streaming on 5G

The 5 questions we get most

1. Will WhatsApp video calls actually work? Yes with an international eSIM, 1080p sustained on Shanghai 5G. See the WhatsApp deep dive.
2. Will Google Maps re-route in Shanghai? Yes, fully, with live traffic. On Chinese networks even Apple Maps shows shifted GPS coordinates because of government mapping requirements — international eSIM bypasses that too.
3. Does Instagram upload still work? Yes — uploads of photos and 30-second Reels work normally on international eSIM.
4. Will my US bank's 2FA SMS arrive? Yes — SMS goes over GSM (the call/text network), not the internet. Keep your home SIM line active for SMS, your eSIM line for data, both at once.
5. Will Netflix show me US or China content? US (home region). Because your eSIM has a Hong Kong / Singapore IP from Netflix's perspective, you get the home-region catalog.

Four options, four trade-offs. Here's the honest comparison for a typical 1–3 week foreign tourist trip:

The hotel Wi-Fi reality

Even at five-star Shanghai hotels with “international Wi-Fi” labels, the connection still routes through Chinese ISP infrastructure for compliance reasons. Most international brands (Marriott, Hilton, IHG) offer a paid “international” tier — typically $3–15/day — that uses a separate VLAN. This works but is generally slow (3–8 Mbps), and it doesn't cover you outside the hotel.

The “I'll just buy a SIM at the airport” trap

SIM card counters at Pudong and Hongqiao airports sell local Chinese SIMs. These are excellent if your priority is making local calls. They are useless if you want WhatsApp, Google, Instagram, or any other blocked service: the SIM puts you squarely behind the Great Firewall.

International SIM/eSIM is only available before you fly. You can't buy one in mainland China because the QR delivery requires internet access to the eSIM provider's servers — mostly outside the country and effectively unreachable from inside.

The entire setup happens before you fly. Once you land in China, you'll spend 30 seconds switching your data line. That's it.

Step 1 — Pick a plan

Decide on trip length (5/10/15/30 days) and data tier. Our plans range from $5 (5 days / 1GB per day) to $50 (30 days unlimited). Look for “Greater China” or “China + Hong Kong + Macau” coverage. Avoid “China local” — those put you behind the firewall.

Step 2 — Buy and receive the QR

Checkout takes 30 seconds. Within 30 minutes (often instant) you'll have an activation QR code in your email and in your /my-orders page.

Step 3 — Install before you fly

On your phone: Settings → Cellular → Add eSIM → scan QR. Label the new line “China travel”. Keep your home line active for SMS 2FA codes.

Step 4 — On landing, switch your data line

1. Turn off Wi-Fi (this is critical)
2. Settings → Cellular → Cellular Data → select “China travel”
3. Enable Data Roaming for that line (only)
4. Voice/SMS line stays as your home line for 2FA codes

Step 5 — Verify with 3 tests

• Google Maps — search “The Bund”. Should show English POI names and an accurate route.
• WhatsApp — send a test message. Double check mark within 2 seconds = success.
• Instagram — scroll your feed. Images should load.

If something doesn't work

• Wrong data line — confirm “China travel” is selected. #1 cause.
• Wi-Fi is enabled — turn it OFF in hotels. Wi-Fi takes priority over cellular.
• QR scan failed — use manual entry from /my-orders.
• Speed is slow — hard restart the phone.
• Still broken — email support@getshanghai.com (4h response UTC+8 business hours).