← Wszystkie artykuły

Ten artykuł nie jest jeszcze dostępny po polsku — czytasz wersję angielską.

China's Great Firewall: what's blocked, and why a VPN isn't a plan

Most travel advice about the internet in China stops at two words: get a VPN. That advice is roughly a decade out of date, and it skips the part that actually decides your trip. The Great Firewall doesn't block the internet — it blocks the connection you're using to reach it. Which connection you arrive with matters more than any app you install.

A hand holding a phone with a blank, glowing screen in the dark

What the Great Firewall actually does

It isn't a single wall with a list of banned sites. It's several filtering techniques stacked on top of each other, applied to traffic on Chinese networks:

  • DNS tampering. Your phone asks where a domain lives and gets a wrong or empty answer back, so the app never reaches the real server.
  • IP blocking and connection resets. Even with the correct address, the connection can be dropped mid-handshake.
  • Traffic inspection. The system reads the still-unencrypted server name in a TLS handshake and can reset connections that look like circumvention tools.

The practical consequence is the one nobody warns you about: blocked things don't look blocked. You get spinners, timeouts and "couldn't refresh" — not a censorship notice. So most travelers spend their first day blaming the hotel, the airport, or their phone.

What tends to be unavailable

On a local connection as of mid-2026, the usual list includes Google services (Search, Maps, Gmail, Drive), WhatsApp, Instagram, Facebook, X, YouTube, Telegram and Signal, plus a long tail of international news sites. The list shifts over time, and it shifts without announcement.

The less obvious casualties hurt more:

  • App stores and updates can be slow or unreachable, so you can't fetch the tool you forgot.
  • Cloud sync — documents, photo backup, password-manager sync — quietly stops.
  • Login and two-factor flows that ride on Google or Apple push services may not arrive, which can lock you out of your own email or bank at the worst possible moment.

The VPN question

A VPN is the traditional answer, and it's a weaker answer than its reputation suggests. Three problems, in the order travelers hit them.

Legality. VPN services in China must be licensed by the state; unlicensed ones are illegal to operate, and unauthorized VPN apps have been removed from the Chinese App Store since 2017. Enforcement has focused on operators and domestic distribution rather than visiting tourists — but "widely tolerated" isn't "permitted", and none of this is legal advice.

Availability. Popular consumer VPNs are blocked to varying degrees, and their websites are often unreachable from inside the country. You can't land, discover the problem, and fix it — you have to arrive with a working setup already installed and tested.

Reliability. Even a good VPN degrades. Detection improves, server addresses get blocked, and access typically tightens around politically sensitive dates and major political meetings. A service that worked flawlessly on your last trip can be a coin flip on this one.

There's a quieter fourth problem: a VPN adds a moving part to everything your phone does. Battery drains faster, transfers drop, and when something breaks you can't tell whether the fault is the app, the network or the tunnel.

Why a VamosData eSIM skips the question

The filtering applies to traffic that enters the internet as a Chinese local connection. A VamosData eSIM for China works like international roaming: your phone uses the local radio network, but your data exits to the internet through a gateway outside the mainland — commonly Hong Kong or Singapore. It was never a local connection, so it isn't filtered like one.

In practice that means Maps, messaging and your inbox behave the way they do at home, with nothing to configure:

  • No tunnel to install, test or troubleshoot. Your VamosData eSIM is set up before you fly and there's no second app in the chain.
  • Nothing unusual about it. This is ordinary roaming — the same mechanism as a business traveler using their home operator abroad.
  • Your home SIM stays in. Your normal number keeps taking calls and bank SMS while your VamosData eSIM handles data.

One honest caveat: routing and policy are set by each plan's network partner, so if one specific app is mission-critical, check the plan details before you rely on it. Mainland options live on our China plans page, and the full pre-flight checklist is in how to get internet on your phone in China.

What an eSIM doesn't fix

Worth knowing before you go, because none of this is a data problem:

  • Wi-Fi is still local. The moment you join hotel or café Wi-Fi, you're behind the filter again — and many public networks want an SMS code sent to a Chinese number you don't have. Stay on mobile data for anything that matters.
  • Some services are China-only by design. Taxis, tickets and everyday payments increasingly assume WeChat or Alipay. Set those up before you travel if you can.
  • Offline maps still earn their keep, especially underground where no eSIM has signal at all.

Check your phone supports eSIM with the device checker — and note that handsets sold in mainland China often ship with eSIM disabled — then browse what's available on destinations.

Szybkie odpowiedzi

Do I need a VPN in China if I have a VamosData eSIM?

For most travelers, no. Your VamosData eSIM routes data out through a gateway outside the mainland, so your usual apps work without a tunnel. A VPN only becomes relevant on local connections like hotel Wi-Fi.

Are VPNs illegal in China?

Operating an unlicensed VPN service is illegal, and unauthorized VPN apps have been pulled from the Chinese App Store. Enforcement has focused on providers rather than visiting tourists, but this isn't legal advice — plan around the issue rather than betting on it.

Why do blocked apps just spin instead of showing an error?

The filtering happens at the network level: DNS answers are tampered with and connections are reset mid-handshake. Your app sees a timeout, not a refusal, so it looks like bad signal.

Will my VamosData eSIM still work if I switch to hotel Wi-Fi?

Your VamosData eSIM keeps working, but Wi-Fi traffic doesn't travel through it. Hotel Wi-Fi is a local connection and is filtered like one, so stay on mobile data for anything that has to load.

Używamy plików cookie do analizy, aby zrozumieć, jak korzystasz z witryny, i ją ulepszać. Możesz je zaakceptować lub odrzucić. Polityka prywatności