VPNs are illegal in China unless the service has been approved by Chinese telecommunications authorities, and virtually no consumer VPN meets that bar. The U.S. State Department puts it bluntly: “use of a VPN in China is illegal in most cases,” and it can lead to device confiscation, a fine, or detention.1U.S. Department of State. China Travel Advisory In practice, millions of people inside China use unauthorized VPNs daily and most foreign visitors who do the same never hear from authorities. The legal risk is still real, and it has grown sharper under penalty increases that took effect on January 1, 2026.
What Chinese Law Actually Says
Two instruments do the work. The Cybersecurity Law of the People’s Republic of China, originally enacted in 2017 and amended in October 2025, sets the general framework for network operators and their obligations. A 2017 Ministry of Industry and Information Technology (MIIT) regulation is more specific: no one may set up or lease cross-border dedicated lines, including virtual private networks, for business activities without approval from telecommunications authorities.2China Law Translate. MIIT Notice on Cleaning Up and Regulating the Internet Access Service Market
The result is a permission regime. Only government-approved VPN services may legally operate, and those approvals go to businesses leasing international dedicated lines through licensed Chinese telecom carriers. An MIIT spokesman said the rules target “VPN users who illegally conduct cross-border telecommunications activities without approval” and that lawfully operating companies and individuals using proper channels would not be affected.3Yicai Global. New VPN Regulation Will Not Affect Lawful Users, MIIT Says Consumer VPNs used to jump the Great Firewall are not a proper channel.
Penalties for Users
Enforcement against individuals is uneven but documented. Reports indicate Chinese authorities have issued fines equivalent to roughly $145 against people caught using unauthorized VPNs. One individual was detained for three days for setting up a personal VPN server to visit blocked websites. The current State Department Level 2 advisory for China warns that VPN use “may result in confiscation of your device, a fine, or detention.”1U.S. Department of State. China Travel Advisory
Most foreign visitors who quietly use a VPN never face consequences. But the legal authority to act exists, and whether it gets used can turn on factors outside your control: where you are in the country, what you access, and the political climate that week. In late 2025, China’s Ministry of State Security deployed an AI-generated news anchor to warn citizens about “scaling the wall” (Chinese slang for using a VPN), framing it as a gateway to espionage and pushing viewers to report violators through a government hotline.
Penalties for Providers and Sellers
The heaviest punishments land on people who build, sell, or distribute unauthorized VPN services. Wu Xiangyang received a five-and-a-half-year prison sentence and a 500,000 yuan fine (roughly $70,000) for running a commercial VPN service since 2013. Another man was jailed for nine months for selling VPN access.
The 2026 amendments to the Cybersecurity Law pushed financial penalties much higher for network operators who violate their obligations. Fines for serious violations can now reach 10 million yuan (about $1.4 million), and personally responsible managers can be fined up to 1 million yuan. These figures aim at companies and network operators rather than individual travelers, but they set the tone for the broader enforcement climate.
What This Means for Foreign Travelers
Beyond the VPN question itself, a foreign visitor should assume that Chinese networks offer no meaningful privacy. The Cybersecurity Law requires network operators to “provide technical support and assistance to public security organs and national security organs” conducting investigations.4Stanford University. Translation: Cybersecurity Law of the People’s Republic of China (Effective June 1, 2017) The State Department states there is “no expectation of privacy on mobile or other networks in China” and that security personnel have detained and deported U.S. citizens for sending private electronic messages critical of the Chinese government.1U.S. Department of State. China Travel Advisory
People have been held responsible not just for their own posts on Chinese platforms like WeChat, Little Red Book, and Weibo, but for content others posted in spaces they manage, including comments and group chats.1U.S. Department of State. China Travel Advisory If you use WeChat in China, treat everything on it as visible to authorities.
Enforcement Varies by Region and Timing
VPN blocking is not uniform across the country. Research published in 2025 found that some Chinese provinces run their own regional firewalls that are more aggressive than the national one. Henan blocked approximately 4.2 million domains during a 15-month study period, roughly six times the 741,542 blocked at the national level. Hebei, Tibet, and Xinjiang operate similar provincial censorship systems. Researchers found no additional regional censorship in Beijing, Guangdong, Shanghai, or Jiangsu. A university student in Zhengzhou described classmates in Beijing and Shanghai reaching overseas sites while students in the Henan capital could not.
Timing matters too. During the annual “Two Sessions” legislative meeting in Beijing, VPN services suffer significantly more outages and connection failures. Anniversary dates, including the Tiananmen Square protests in early June, tend to bring similar crackdowns. If you travel during a politically sensitive window, expect both tighter blocking and more attentive enforcement.
A Legal Alternative: Foreign SIMs and Roaming eSIMs
There is a workaround that does not require a VPN at all. When you use a non-Chinese SIM on a roaming connection, your data routes through your home carrier’s network rather than Chinese infrastructure, so it bypasses the Great Firewall. One traveler confirmed this directly: a phone with an international SIM accessed Western apps freely, while a phone with a Chinese SIM in the same location was heavily restricted.
Most major U.S. carriers offer international roaming plans that work in China, though rates are steep and speeds may be throttled. Travel eSIMs from foreign providers do the same thing more cheaply by routing data through servers outside China. If your phone supports eSIM, you can activate one before departure and still keep your regular line active.
One caveat that catches people out: a local Chinese SIM or a Chinese-issued eSIM routes traffic through domestic networks and gives you the full Great Firewall experience. Only foreign SIMs with international routing produce the bypass effect.
Rules for Businesses Are Different
The corporate side of this question sits under a separate regime, so it’s worth naming the boundary. Foreign companies operating in China that need cross-border encrypted data transmission must lease international dedicated lines from licensed Chinese telecom carriers.3Yicai Global. New VPN Regulation Will Not Affect Lawful Users, MIIT Says Those dedicated lines are the government-approved form of VPN.
Companies providing VPN services inside China need a B13 (IP-VPN) license issued by regional telecommunications authorities under MIIT oversight. Foreign-invested enterprises are capped at 50% foreign ownership, so a foreign company must set up a joint venture with a Chinese partner holding at least half the equity. Minimum registered capital runs from 1 million yuan for provincial operations to 10 million yuan for cross-provincial operations. If the connection carries cross-border data, it must also pass a separate data export security assessment. Companies that skip licensing and rely on consumer VPNs for business operations take on legal exposure that grew substantially under the 2026 penalty increases.
The Practical Bottom Line
Unauthorized VPN use in China is against the rules for both individuals and companies. Foreign travelers who use one usually get away with it; some do not, and there is no reliable way to know in advance which category you’ll fall into. The safer path, if you need reliable access to Google, Gmail, WhatsApp, and other blocked services during a short trip, is a foreign SIM or roaming eSIM that keeps your data off Chinese networks entirely. If you’re operating a business, the only fully legal route is the licensed dedicated line, and the cost of doing anything else has gone up.