For most visitors, China’s internet restrictions become obvious within minutes of connecting to a local network. Services, such as Google, WhatsApp, Instagram, and ChatGPT, that come in handy for your daily activities and work everywhere else, suddenly become inaccessible. This guide covers how the network works, what internet censorship in China actually blocks, which connection to use in which situation, and the handful of quirks that no one warns you about until your payment fails at a noodle counter.
How the internet in China works
Two separate problems sit between you and a foreign website.
The first is filtering. The Great Firewall, part of the Golden Shield Project launched in 1998, inspects traffic leaving the country and drops connections to restricted services. It uses IP blocking, DNS tampering, URL filtering, and deep packet inspection, and it applies to every domestic connection: hotel Wi-Fi, cafe hotspots, and any local SIM.
The second is plumbing, and it surprises people more. All foreign traffic funnels through a small number of international gateways, with the main choke points in Shanghai, Guangdong, and Qingdao. Most consumer connections then share the same congested peering route out of the country, which is why a plain, entirely uncensored foreign site like your airline’s booking page can crawl at 9pm on a Sunday. No VPN fixes congestion. Knowing the difference saves you an hour of pointless troubleshooting.
Internet censorship in China: what you lose
Google goes first, and it goes completely. Search, Gmail, Maps, Drive, Photos, and YouTube are all unreachable, and Google Play services are restricted too. That last one breaks Android apps that never looked Google-related, since push notifications, Google sign-in, and embedded maps all route through that layer.
Then the social and messaging layer: Facebook, Instagram, X, Reddit, Telegram, Signal, WhatsApp, and Discord. Add Netflix, Twitch, Wikipedia, Dropbox, ChatGPT, and most foreign newsrooms. Google Translate is blocked as well, which people discover in front of a menu.
A short list still works on local networks. iMessage and FaceTime connect. Most Microsoft services do, including Outlook, Bing, and Teams, though attachments often fail and personal OneDrive stays blocked. Zoom works. Banking apps usually load, but not always, and travellers regularly find one specific bank unreachable while the rest are fine.
THE INTERNET IN CHINA, AT A GLANCE
Your connection type decides what works, not your location.
Hotel Wi-Fi and local SIMs are filtered. Foreign eSIMs often are not.
Slow does not always mean blocked. Congestion is a separate problem.
VPN download pages are blocked from inside the country.
Hong Kong and Macau sit outside the Firewall entirely.
How to use the Internet in China for foreigners: your three connection options
Most travellers end up running two of them side by side.
Hotel Wi-Fi and public hotspots
Domestic infrastructure, fully filtered, and shared with everyone else in the building. You need a VPN here, and there is no way around it. Public Wi-Fi in malls and stations often demands SMS verification with a Chinese number as well, so a foreign number can leave you locked out of the login page entirely.
A local Chinese SIM
Buy one at a China Mobile, Unicom, or Telecom booth in the arrival hall, passport in hand, since registration is required by law. It gives you a +86 number, which matters more than you expect: Meituan food delivery needs one to register, some Wi-Fi networks need one to let you on, and Didi drivers will call it when they cannot find you. The trade-off is that your data now runs on the domestic network, so everything blocked stays blocked without a VPN.
A travel eSIM
An international travel eSIM connects to Chinese towers for signal but routes your data back through overseas networks, so the Firewall treats you as a visiting connection rather than a domestic one. Blocked apps load without a VPN toggle. It gives you internet, not a phone number, which is why plenty of people carry an eSIM for data and a local SIM for the +86 number.
The ZoogVPN travel eSIM is built to be bought once rather than repurchased on every trip. You pay for the eSIM, then top up whenever you need data, in any country on the list, without hunting for a new provider each time you fly. Coverage runs to 170+ countries across 200+ mobile networks, China included, and plans start around $3.
Installation takes three steps and has no counter queue. Pick the plan for your destination, buy it, then scan the QR code that arrives to install the profile. Your plan activates when you land, with no SIM swapping and no roaming charges from your home carrier. Your physical SIM stays exactly where it is, since the eSIM runs alongside it in dual SIM mode, so your usual number keeps receiving calls and verification codes while your data comes through the eSIM.
Buy and install it before departure, since activation needs a working connection, and keep the top-up page saved in case you burn through your data faster than planned. Support runs 24/7, which matters more than it sounds when something goes wrong eight time zones from home. The combination most seasoned travellers land on: the eSIM for data on the move, ZoogVPN for hotel Wi-Fi, and the laptop.
A VPN, on top of whichever of those you choose
A VPN is not a way of getting online. It is the layer that decides what your connection can reach once you are. Hotel Wi-Fi and a local SIM both leave you on filtered infrastructure, and a VPN is what lifts that filter. It encrypts your traffic and routes it through a server outside the country, so the Firewall sees ordinary encrypted data heading somewhere permitted rather than a request to a blocked service.
It also covers the device that an eSIM cannot. Your laptop has no eSIM slot in most cases, and it is the machine you open when you need to work, check a bank account, or join a call from the hotel desk. One ZoogVPN subscription runs on Windows, macOS, iOS, Android, Android TV, and Fire TV at the same time, so the phone and the laptop are covered together rather than one at a time.
It’s important to mention that China blocks most VPN provider websites, and the local App Store carries almost none of these apps, so the fix is unreachable from the place you need it. ZoogVPN keeps mirror sites live at zooog.info and zoog.pro for exactly that situation, and they stay reachable from inside the mainland, so you can still sign up, pay, and download the apps after you have landed. Save both addresses in a note before you fly.
The requirement specific to China is obfuscation. The Firewall identifies and drops standard VPN traffic, which is why most consumer services fail the moment they cross the border, and why ZoogVPN’s Shadow protocol exists. On top of the access question, the same tunnel wraps your logins and card details in AES-256 encryption on cafe and airport networks, with a Kill Switch, DNS and IP leak protection, and a no-logs policy on every tier, including the free one.
Setting up ZoogVPN, step by step
Every step below belongs on your home connection, before the flight.
1. Install it everywhere, not only on the phone. The apps cover Windows, macOS, iOS, Android, Android TV, and Fire TV. Travelling with a router? Configure it there and every device in the hotel room goes through one login.
2. Register and confirm your email. A card is only needed for a paid plan. The free tier hands every account 10 GB a month across Singapore, Germany, the United States, the Netherlands, and the United Kingdom.
3. Set the protocol to Shadow. Make it your default now, so you are not digging through settings later on a connection that has already stalled.
4. Connect to a nearby server and put it under load. Singapore gives the shortest route from the mainland, with Hong Kong, Taiwan, and Japan close behind. Run a speed test and make a video call, since a problem you find at home is a support ticket and the same problem in Chengdu costs you an evening.
5. Save the mirror addresses somewhere durable. A note on your phone, not a browser bookmark that disappears with the next reinstall.
How to use the internet in China without a Chinese account
Several things to sort out while you still have an open connection.
VPN
Install, pay for, and test your VPN before you leave, and set the protocol to Shadow while you are at it. China blocks most VPN download pages, so waiting until you arrive often means you cannot get the app you need.
Payments
Link a card to Alipay or WeChat Pay before you travel, because both are awkward to configure from behind the Firewall. Keep single payments at or under 200 RMB where you can: cross that line and both apps add a 3% service fee to the whole amount, not just the excess, so a 199 RMB payment is free while a 201 RMB payment costs you around 6. Splitting a large bill is worth the extra tap. If your bank offers an international UnionPay card, that fee does not apply at all. Cash is still legal tender, and merchants must accept it, but small vendors rarely have change, so carry 500 to 1,000 RMB in small notes as a fallback rather than a plan. Those same two wallets work at ZoogVPN’s checkout, which most Western providers cannot offer, so renewing from inside China does not depend on a foreign card going through.
One thing that catches people out: turn the VPN off before you pay. Alipay and WeChat Pay check your IP when you scan a QR code, and a London or New York address on a payment at a Chengdu noodle shop looks like fraud. The transaction fails with a vague error. Kill the VPN, pay, switch it back on.
Translation
Google Translate is blocked along with the rest of Google, so install the Baidu Translate or Microsoft Translator app before your flight. Get the app rather than bookmarking a site, since Microsoft retired its Translator website in June 2026. WeChat and Alipay both include camera translation inside their scan function, which handles menus and signs when your hands are full.
Maps
Apple Maps comes preinstalled on iPhones and works without a VPN, and Amap’s English app is the best backup on Android. Google Maps is blocked and unreliable even through a VPN for the reason below. Save your hotel, airports, stations, and key addresses offline, ideally with the Chinese characters as well as the English.
Travel documents
Keep boarding passes, hotel reservations, train tickets, visas, and passport copies available offline. Most confirmations arrive in Gmail, and personal OneDrive and Google Drive are both blocked, so the three places people usually keep these are all unreachable. Save them to the device itself.
Two-factor authentication
Check how each important account sends its codes. Authenticator apps generate codes offline and keep working. What breaks is an SMS to your home number when you are not roaming, a push-approval app that needs to reach its own servers, and any code emailed to a Gmail address. Restoring an authenticator from a Google-backed cloud backup will not work either, so move your codes across and save your backup codes before you fly.
Essential apps and your eSIM
Download everything you might need before boarding: airline and banking apps, WhatsApp and Instagram if they are not already on your phone, Didi, translation tools, offline entertainment. Buy and install your travel eSIM at the same time, since activation needs a working connection, and save the top-up page for when you burn through your data faster than planned. Once you are inside China, many download pages become difficult or impossible to reach, and switching your App Store region to get around it creates its own problems with existing subscriptions.
Turn the VPN off before you pay. Alipay and WeChat Pay run a security check on your IP when you scan a QR code. A London or New York address on a payment at a Chengdu noodle shop looks like fraud, and the transaction fails with a vague error. Kill the VPN, pay, switch it back on. This trips up more travellers than the Firewall does.
Why Google Maps feel broken even when it loads
Getting Maps through the Firewall solves half the problem. China mandates a shifted coordinate system called GCJ-02 for domestic mapping data, and Google’s correction is inconsistent, so your blue dot can land 50 to 100 metres off in dense districts. In a Beijing hutong, it walks you down the wrong lane twice. Apple Maps pulls its data from Amap, the same source locals use, works without a VPN, and has an English interface. Download Amap’s English app as a backup before you go.
Matching the protocol to the network you are on
One setting for the Firewall, two more for the conditions on the ground.
ZoogVPN’s Shadow protocol is the one that clears deep packet inspection, since it disguises VPN traffic as ordinary browsing. Leave it on for hotel Wi-Fi and local SIMs. If a Shadow server slows at peak hours, ZoogTLS gives you a second disguised route on a different port profile rather than sending you back through the same congested path.
Once you have a stable tunnel out of the country, switch by situation. WireGuard for streaming and large downloads on a settled connection. IKEv2/IPSec when you are moving, since it holds a call together as your phone jumps between hotel Wi-Fi, metro Wi-Fi, and mobile data. The Chinese-language publication DigitalCruch ranked ZoogVPN first among nine free VPNs tested from inside the mainland for 2026, judging firewall bypass, mirror-site access, Chinese payment support, and daily usability.
Which connection for which situation
Airport arrival. Travel eSIM, activated on landing.
Hotel and cafe Wi-Fi. ZoogVPN on Shadow, installed before you flew.
Paying by QR code. VPN off, then back on afterwards.
Food delivery and app registrations. Local SIM for the +86 number.
Navigation. Apple Maps or Amap, no VPN needed.
Trips over two weeks. Local SIM for value, VPN for everything blocked.
Frequently asked questions
What foreigners ask in the week before landing.
How to use Internet in China for foreigners?
Most combine a VPN with obfuscation for filtered networks and an international eSIM or roaming for data on the move, then keep local apps like Alipay, WeChat, and Amap for payments, transport, and navigation.
Does roaming get around the censorship?
Often, since roaming routes your data through your home carrier rather than the local network. It is expensive, throttles quickly, and drops the second you join any Wi-Fi, so treat it as a stopgap rather than a plan.
Why is my internet slow even with a VPN connected?
Congestion at the international gateways, not censorship. Encryption adds a little overhead, but the bottleneck is the shared route out of the country. Switching servers or protocols can help at peak hours.
If I have a travel eSIM, do I still need a VPN?
For hotel Wi-Fi and your laptop, yes. The eSIM covers the device it is installed on while you are using its data, and the moment you join a local network, you are back on filtered infrastructure. Running both is the usual arrangement.
Will my banking app work in China?
Usually, though not reliably. Travellers regularly find one specific bank unreachable while others load fine, with no pattern to it. Enable your VPN before assuming the app is down, and never rely on a single payment method for a whole trip.
Why did my QR payment fail?
Almost always the VPN. Alipay and WeChat Pay check your IP during the transaction, and a foreign address on a payment at a local vendor gets flagged. Turn the VPN off, complete the payment, and turn it back on.
The internet in China is manageable. Unprepared is what makes it painful.
Install ZoogVPN before you fly, switch on Shadow when you land, and the rest of your setup falls into place.
- Diana BestaievaContent Writer at ZoogVPN. Diana deeply explores the newest technologies and shares valuable insights engagingly and comprehensively. Keeping up with the tech news, she makes in-depth content, explaining complex concepts with ease.
