Restricted networks
Does a travel eSIM bypass internet censorship?
Land in Shanghai and Google is gone. Land in Dubai and WhatsApp calls will not connect. A travel eSIM roams as a foreign visitor — and visitors usually meet a different set of filters, or none at all. Here is the mechanism, the countries where it holds, and the one situation nothing fixes.
The short answer: usually yes, for the ordinary blocks
Almost every national block is applied by the network you are attached to, on traffic that is leaving into that country’s internet. A travel eSIM does not leave there. It attaches as a foreign visitor, and in the standard roaming arrangement your data is carried back out to the network that issued the profile before it ever touches the public internet. The filtering equipment on the destination’s border is not on that path, so it does not get a vote.
- Website and DNS blocks. The Great Firewall, national blocklists, ISP-level filtering — usually invisible to a roaming profile.
- VoIP bans. WhatsApp and FaceTime calls in the United Arab Emirates and Oman generally connect again.
- App-specific throttling. Shaping aimed at local subscribers is applied to local subscribers.
- An internet shutdown. When mobile data is switched off in a region, it is off for roamers too. No profile survives that.
- Blocks the service imposes on itself. If an app refuses to work in a country, or refuses your exit address, that is the app’s policy and not the carrier’s.
- Anything past the exit. Once your traffic reaches the internet it is ordinary traffic, readable by whoever carries it.
None of this is a loophole. It is how international roaming has worked since long before eSIMs existed — the reason business travellers have carried foreign SIMs into China for twenty years is not a secret, it is a routing diagram.
How a country actually blocks a website
Blocking is not one technique, and which technique is used decides whether roaming helps. From cheapest to most severe:
- DNS tampering. The operator’s resolver returns the wrong answer, or none at all. Cheap, fast to deploy, trivial to circumvent — this is how most gambling, adult and copyright blocklists work, and much of Indonesia’s.
- SNI and TLS inspection. The hostname you are asking for is still visible in the handshake, so the connection is reset the moment it is named. This is the modern default in China.
- IP blackholing. Routes towards the service’s address ranges are simply dropped. Blunt, and it takes bystanders with it.
- Protocol blocking. The call setup used by WhatsApp or FaceTime is fingerprinted and dropped while the rest of the app keeps working. That is what a “VoIP ban” is in practice: your messages arrive, your calls do not.
- Throttling. Nothing is blocked. The service is simply made slow enough that people give up. Deliberately hard to prove, and popular for exactly that reason.
- Shutdown. Data service is switched off for a region or a whole country. Nothing running on the handset is relevant at that point.
The first five all live in equipment operated by the network you are attached to, and are applied to traffic on its way into that country’s internet. Where that filtering sits is the entire subject of this guide.
Why a roaming eSIM sees a different internet
When you roam, the visited network does not usually hand your data to the local internet. It hands it back to the operator that issued your profile:
- 01Your phone attaches to a local tower
A partner network in the destination accepts the profile, the same way it accepts any foreign visitor’s SIM.
- 02Your data is tunnelled, not released
Under the standard arrangement — home-routed roaming — the visited network encapsulates your traffic and carries it back to the issuing operator’s gateway.
- 03It surfaces somewhere else
Your packets reach the public internet from that gateway, with an address belonging to the issuing operator’s country rather than the one you are standing in.
- 04The local blocklist never sees it
The destination’s filters sit on the road into the destination’s internet. Your traffic took a different road.
The alternative is called local breakout: your traffic exits in the country you are standing in and receives exactly what a local subscriber receives. It is used for some regional deals, for machine-to-machine traffic, and increasingly wherever latency matters more than anything else. Which is why nobody honest promises that every network, in every country, on every day, will behave like the diagram above.
The same detour explains why a roaming connection often pings worse than a local SIM. Your packets are travelling a few thousand extra kilometres before they begin. Sidestepping a filter has a latency bill, and on a video call you can hear it.
China: the Great Firewall and the roaming exception
China is the case that sends most people looking for this guide. On a Chinese line, Google, Gmail, YouTube, Instagram, Facebook, X, WhatsApp and most Western news sites are unreachable; Apple services, FaceTime included, largely are not. The filtering happens at the international gateways of the Chinese carriers, on traffic crossing from Chinese networks to the outside world.
A home-routed roaming profile is not crossing there. It is carried back out as roaming traffic over inter-operator links and reaches the internet abroad, which is why foreign SIMs in China have a long-standing reputation for behaving like foreign SIMs. Our own China eSIM connects through China Mobile, China Telecom and China Unicom as a visitor, from $1.85.
- It is a routing arrangement, not a right. Commercial arrangements between operators change, and no reseller controls them.
- iPhones sold in mainland China ship without eSIM support. Buy the handset elsewhere or bring one — is your phone eSIM-compatible? has the model list.
- Install everything before you land. App stores, VPN provider websites and the very pages you would use to troubleshoot are filtered once you are inside.
Being outside the filter is not the same as being invisible. The Chinese network still sees an anonymous roaming subscriber on a particular tower at a particular time — what an anonymous eSIM hides sets out exactly what that does and does not reveal.
On the legal side: China licenses VPN operators and blocks the rest, and the enforcement that exists has been aimed at operators and residents rather than at tourists. That is an observation about how the rule has been applied, not permission. If it matters to your trip, read up on the current position before you go rather than after.
WhatsApp and FaceTime calls in the Gulf
The second cluster of “blocked abroad” searches is not about websites at all. It is somebody in a Dubai hotel discovering that WhatsApp messages arrive fine and WhatsApp calls will not connect. Consumer voice over IP has been restricted in parts of the Gulf for years, generally to protect the incumbent carriers’ international call revenue, with licensed local apps offered as the alternative.
| Country | Consumer VoIP on a local line | On a roaming eSIM |
|---|---|---|
| United Arab Emirates | WhatsApp, FaceTime and Skype calls blocked; licensed apps such as BOTIM permitted | Calls generally connect |
| Oman | Consumer VoIP calling restricted | Calls generally connect |
| Qatar | Restricted at times, inconsistently across operators | Usually unaffected |
| Saudi Arabia | Unblocked since September 2017 | Nothing to bypass |
| Morocco | Blocked in early 2016, reversed within the year | Nothing to bypass |
| China | WhatsApp blocked outright; FaceTime works | Both work |
Two of those rows are corrections rather than caveats. Saudi Arabia lifted its VoIP ban in 2017 and Morocco reversed its 2016 block within months, yet both are still listed as blocked by a good share of the travel advice online. The restrictions that remain — in the United Arab Emirates, Oman and, less predictably, Qatar — are narrower than their reputation, and it is worth knowing which is which before paying to solve a problem you do not have.
Messaging was never the target. WhatsApp text, photos and voice notes work on a local Emirati line; it is the call signalling that is dropped. If all you need is to say that you landed, nothing here needs bypassing.
Iran, Turkey, Egypt and everywhere else
Outside China and the Gulf, filtering is generally lighter, patchier and more political. The pattern holds: where a block is applied by the local network to local traffic, a roaming profile is a different customer.
| Country | What a local line meets | What a roaming profile usually meets |
|---|---|---|
| Iran | One of the world’s heaviest blocklists, revised with the political weather | Filter cleared — but shutdowns are the real risk here |
| Turkey | Platform blocks and throttling after major events, plus a long standing blocklist | Usually unaffected |
| Egypt | Hundreds of news and media sites blocked since 2017 | Usually unaffected |
| Indonesia | A large DNS-level blocklist — Reddit, Vimeo, gambling, adult content | Cleared trivially |
| Vietnam | Platform pressure and occasional throttling rather than hard blocks | Usually unaffected |
| Pakistan | Platform blocks plus frequent regional shutdowns | Filters yes, shutdowns no |
| India | App bans, and more internet shutdowns than any other country | Filters yes, shutdowns no |
| Cuba | Restricted media, and shutdowns during unrest | Filters yes, shutdowns no |
Iran deserves its own sentence, because it is the country where the distinction in this guide matters most and helps least. Its blocklist has moved repeatedly — Telegram, then Instagram and WhatsApp in 2022, with some of that reversed at the end of 2024 — and roaming does sidestep the filtering. What it cannot sidestep is a national shutdown, which Iran has imposed more than once. Coverage there is a single partner network, and it is priced accordingly.
The rest are ordinary travel destinations with an unusual amount of filtering: Turkey, Egypt, Indonesia, Vietnam, Pakistan, India and Cuba. In every one of them the local SIM also comes with a registration desk — countries that require SIM registration has that side of the ledger.
Blocklists change faster than any article. Treat this table as the shape of the map rather than as today’s status, and expect any country on it to have moved by the time you land.
The flip side: you are not on the local internet either
Exiting somewhere else is the feature. It is also the bug, and an honest version of this guide has to say so.
- Streaming follows your exit, not your feet. You may get the issuing country’s catalogue rather than the local one, and services that dislike unfamiliar exits may ask you to log in again.
- Local services can refuse you. Government portals, some banks, and delivery, transport or ticketing apps that geofence by address will see a foreigner standing in their own city.
- Your bank sees a foreign login. Sometimes that is precisely what you wanted. Sometimes it is a frozen card at eleven at night.
- The detour costs latency. Calls and games take the long way round, every packet, in both directions.
Keep the physical SIM in the phone. Dual SIM means you can put the local line back on for the one app that insists on a local address, then switch back — keep your number and WhatsApp abroad covers the toggles.
The one thing no eSIM fixes: a shutdown
Filtering decides what your data may reach. A shutdown decides whether you have data at all — and it is imposed on the mobile network itself, not on the internet. When a government orders mobile data off in a district, the towers stop passing packets for everyone attached to them, roaming visitors included. A foreign profile changes nothing, because there is nothing left to route.
This is not a rare event. India has ordered more regional shutdowns than any other country, year after year, from Kashmir to Manipur to exam days in Rajasthan. Iran has cut national access during unrest. Ethiopia kept parts of Tigray offline for the better part of two years. Belarus went dark for days in August 2020, Cuba for hours in July 2021. The pattern is regional, political, and almost never announced in advance.
Offline maps of wherever you are cost nothing to carry and work with the radio off.
Tickets, bookings, addresses and 2FA backup codes stored locally rather than in a browser tab.
A “no news means fine, meet at the hotel at six” rule beats a message that cannot be delivered.
Any product that claims to work during a shutdown is either describing satellite service — which is separately restricted or outright illegal in several of the countries most likely to impose one — or it is lying to you.
You still want a VPN, and where that gets complicated
These two tools do different jobs, and the difference is worth being precise about. A travel eSIM changes where your traffic exits, which is what defeats a national filter. A VPN changes what anyone on the path can read, which is what protects the contents. Running both is the normal configuration, not belt and braces.
- Install the app and sign in before you fly. Provider websites and app-store listings are themselves blocked in several of the countries in this guide.
- Choose a provider with an obfuscated or stealth transport. Plain WireGuard and OpenVPN are fingerprinted and dropped in China and Iran.
- Have a second provider configured. The first one having a bad week is the most common failure by a distance.
- Test it at home on mobile data, not on Wi-Fi, before you rely on it.
Legality varies and deserves ten minutes before departure rather than a guess. China licenses VPN operators and blocks the rest. The United Arab Emirates penalises using a VPN to commit or conceal an offence rather than the VPN itself. Iran, Oman and a handful of others restrict unauthorised services outright. This is not legal advice — check the country you are actually going to.
What an anonymous eSIM hides — and what it can’t takes the same honesty further down the stack: purchase anonymity is real, network invisibility is not, and marketing copy confuses the two constantly.
Setting one up before you fly
All of this only helps if the profile is installed while you can still reach the internet you are used to:
- 01Check the handset
eSIM support, and no carrier lock. Both are settled in five minutes at home, and neither is fixable at an airport.
- 02Size the pack
Packs run 1, 3, 5, 10, 20 and 50 GB, priced per country and valid for 30 days from the first connection.
- 03Pay in crypto
BTC, XMR, ETH, LTC, TRX, SOL, or USDT on ERC-20 or TRC-20. No name, no card, no account.
- 04Install the QR on Wi-Fi
It arrives in about two minutes. Install and test before you travel, while the pages you might need are still reachable.
- 05Land with the VPN already in place
Switch the eSIM on, bring the VPN up. Neither of them needs a working local internet in order to be set up.
Sizing is the only decision that takes any thought — how much data do you need abroad? has the arithmetic. How to buy an eSIM with crypto covers the wallet side if this is your first time, install and activate your eSIM covers the QR, and the destinations list has all 190 countries with per-gigabyte pricing.
What this guide is not claiming
The claim worth making here is a narrow one, and narrow claims are the only kind that survive contact with a real trip:
- Not a guarantee. Routing is a commercial arrangement between operators. It usually works the way this guide describes, and no reseller can promise it for every network on every day.
- Not encryption. Exiting in another country changes who filters you, not who can read you. That is the VPN’s job.
- Not anonymity from the network. The local network still sees a subscriber on a tower — the privacy limits guide is the honest version.
- Not a shutdown workaround. Nothing on your phone is.
- Not an exemption from local law. What you do with a connection is governed where you are standing, exactly as with any internet access.
What it is: a foreign-issued, data-only profile that reaches local towers as a roaming visitor, exits abroad, and — because it is a no-KYC eSIM — was bought without a name, a card or an account. That covers the routing and the paperwork. The rest of the stack is still yours.
Questions, answered
Does an eSIM bypass the Great Firewall in China?
Usually, yes. A travel eSIM connects to Chinese networks as a roaming visitor, and roaming traffic is normally carried back to the operator that issued the profile before it reaches the internet — so it does not cross the filtering points on China’s international gateways. Google, WhatsApp and Instagram typically work. It is a routing arrangement rather than a guarantee, so install a VPN before you land as a backup.
Will WhatsApp calls work in Dubai with a travel eSIM?
Generally yes. The restriction on consumer VoIP in the United Arab Emirates is applied by the local operators to local traffic, and a roaming profile that exits abroad is not subject to it. WhatsApp messages, photos and voice notes work either way — it is only the call signalling that is dropped on a local Emirati line.
Do I still need a VPN if I have a travel eSIM?
Yes, and they are not alternatives. The eSIM changes where your traffic exits, which is what defeats a national filter. A VPN encrypts what your traffic contains, which is what protects it from whoever is carrying it. Install and test the VPN before you travel, because provider sites and app stores are themselves blocked in several of these countries.
Is it legal to use an eSIM to reach blocked websites?
Buying and using a foreign data-only travel eSIM is legal in the overwhelming majority of countries — it is roaming, the same mechanism as your home SIM abroad. What you do with the connection is governed by local law where you are standing. Rules on VPNs specifically vary a great deal and are worth reading before you travel rather than after.
Will an eSIM work during an internet shutdown?
No. A shutdown is imposed on the mobile network itself, so the towers stop passing data for everyone attached to them, roaming visitors included. No profile, plan or app changes that. Shutdowns are usually regional and unannounced, and offline maps plus locally stored documents are the only real mitigation.
Why does my eSIM show an IP address from another country?
Because that is where your traffic reaches the internet. Under home-routed roaming the visited network tunnels your data back to the operator that issued the profile, and your public address belongs to that operator. It is the same mechanism that gets you past local filters, and the reason streaming catalogues and some local apps behave as though you were somewhere else.
Can the local network tell that I am avoiding its filters?
It can see that a roaming subscriber is attached, which is unremarkable — millions of visitors roam every day and their traffic has always been routed this way. What it does not see is the content of that traffic, or an identity behind the profile when the eSIM was bought without KYC.
