Digital Life in China: Internet Access, Online Platforms, Mobile Payments, Social Media, and Legal Responsibilities of Foreign Users

Digital Life in China: Internet Access, Online Platforms, Mobile Payments, Social Media, and Legal Responsibilities of Foreign Users

Introduction

Digital technology is deeply integrated into everyday life in China. Shopping, transportation, food delivery, banking, communication, accommodation, healthcare, entertainment and many public services are accessible through mobile applications and online platforms. For many residents, a smartphone is not merely a communication device but an essential tool for participating in ordinary economic and social activities.

Foreign nationals living, working, studying or travelling in China encounter a digital environment that may differ substantially from the systems familiar to them in Europe, North America and other parts of the world. Services such as WeChat, Alipay, UnionPay, Baidu Maps, DiDi and major Chinese e-commerce platforms perform functions that international users may otherwise obtain through several separate applications. At the same time, certain international websites and digital services may be inaccessible or operate differently within mainland China.

This environment is supported by an extensive legal and regulatory framework. The Cybersecurity Law, Data Security Law and Personal Information Protection Law establish the principal rules governing network security, data processing and personal information. The E-Commerce Law, Anti-Telecom and Online Fraud Law, Telecommunications Regulations and administrative measures governing online platforms regulate particular activities and services. Other legislation addresses digital payments, electronic contracts, online publishing, advertising and the responsibilities of individual internet users.

The regulatory framework has also developed significantly in recent years. The Cybersecurity Law was amended in October 2025, with the revised provisions taking effect on 1 January 2026. The Network Data Security Management Regulations entered into force on 1 January 2025. New measures governing cross-border transfers of personal information took effect in January 2026. In February 2026, Chinese authorities also issued guidelines intended to improve digital services and payment facilities for foreign visitors and other overseas users.

For foreigners, the most important practical distinction is between access to digital services, the legal conditions governing their use, and the protection of personal information generated through those services. A foreign national may be able to register for a Chinese mobile application but encounter identity verification requirements, payment restrictions or limitations on particular functions. Similarly, the ability to access a website does not mean that every form of online activity is lawful under Chinese legislation.

This article examines how foreign nationals can navigate China’s digital environment, obtain internet and telecommunications services, use mobile payments, access online platforms and social media, and understand the legal responsibilities associated with digital activity in mainland China.

1. The Structure of China’s Digital Environment

China has developed one of the world’s largest digital economies. Its internet infrastructure supports electronic commerce, mobile banking, social communication, public administration, transportation, entertainment and a wide range of professional services.

The digital environment is characterised by extensive domestic platforms, integrated payment systems, widespread QR-code transactions and a regulatory structure that gives considerable responsibility to telecommunications operators, internet service providers and online platforms.

1.1 The importance of mobile applications

Mobile applications are central to everyday activities in China.

A single application may provide several services that would ordinarily be separated in other countries. WeChat, for example, combines messaging, social networking, payments, mini-programmes, official accounts and access to third-party services. Alipay offers payment functions alongside transportation, shopping, accommodation and other digital services.

Other applications specialise in particular activities, including:

• online shopping;
• food delivery;
• transportation and ride-hailing;
• navigation and mapping;
• accommodation reservations;
• banking and financial services;
• entertainment and video streaming;
• public administration;
• healthcare and education.

This integration makes everyday transactions convenient, but it also means that access to one platform may depend on identity verification, a functioning mobile number, a compatible payment method and compliance with the platform’s own rules.

1.2 Domestic platforms and international services

China’s digital environment includes both domestic and international services.

Domestic platforms are generally designed around Chinese-language interfaces, local payment arrangements and domestic regulatory requirements. Some offer English-language functions, but their complete functionality may not be available in other languages.

Certain international websites, search engines, messaging services, social networks and cloud platforms may be inaccessible from ordinary internet connections in mainland China. Others may operate with reduced functionality or require different authentication procedures.

This situation should be distinguished from ordinary technical incompatibility. Some services are restricted through China’s internet filtering and regulatory systems, while others may be unavailable because of commercial decisions, licensing conditions or technical limitations.

1.3 Mainland China, Hong Kong and Macao

Foreign residents should distinguish between mainland China and the Special Administrative Regions of Hong Kong and Macao.

Hong Kong and Macao operate under separate legal and regulatory arrangements, including distinct telecommunications, internet and personal information protection frameworks.

The mainland Chinese rules discussed in this article should therefore not automatically be applied to online activity in Hong Kong or Macao.

A foreign resident travelling between mainland China and either Special Administrative Region may encounter differences in mobile services, payment applications, platform availability and data protection requirements.

2. The Principal Laws Governing Digital Life in China

China’s digital environment is regulated through several major statutes and administrative instruments. Understanding their respective functions helps foreign users distinguish cybersecurity obligations from personal information rights and rules governing online conduct.

2.1 The Cybersecurity Law

The Cybersecurity Law of the People’s Republic of China was adopted on 7 November 2016 and originally entered into force on 1 June 2017.

It establishes the principal statutory framework for network security, network operations, information security and the protection of critical information infrastructure.

The law applies to the construction, operation, maintenance and use of networks within the territory of China, together with the supervision and administration of network security.

Its provisions address matters including:

• network security obligations;
• the protection of critical information infrastructure;
• network operator responsibilities;
• real-name registration;
• protection of user information;
• security incident reporting;
• unlawful interference with networks;
• cybersecurity supervision and enforcement.

The law is particularly relevant to foreign users because it does not regulate only Chinese technology companies. Its territorial application also concerns individuals and organisations using networks within mainland China.

2.2 The 2025 amendment to the Cybersecurity Law

The Cybersecurity Law was amended by the Standing Committee of the National People’s Congress on 28 October 2025. The revised law entered into force on 1 January 2026.

The amendment introduced several significant developments.

First, it strengthened the statutory framework supporting artificial intelligence research, development and technological infrastructure.

Second, it increased and adjusted certain penalties for violations of cybersecurity obligations.

Third, it expanded the law’s extraterritorial reach. The revised Article 77 provides for legal responsibility where overseas organisations or individuals engage in activities that endanger China’s cybersecurity, with sanctions available in cases resulting in serious consequences.

This development is important for international technology businesses and organisations operating across borders. It does not mean that every ordinary online activity undertaken abroad automatically falls within Chinese jurisdiction. The relevant legal conditions and the nature of the conduct remain essential.

For foreign residents, the central practical principle is that using digital networks within China must comply with the applicable Chinese cybersecurity framework.

2.3 The Data Security Law

The Data Security Law, adopted on 10 June 2021 and effective from 1 September 2021, regulates data processing activities and the protection of data security.

It establishes a framework for classifying and protecting data according to its importance and potential consequences if compromised.

The law addresses:

• data security management;
• data classification and hierarchical protection;
• important data;
• national core data;
• data security assessments;
• cross-border data activities;
• protection of national security and public interests.

For ordinary foreign users, the Data Security Law is unlikely to govern every routine personal activity in the same way that it governs a company’s data-processing operations. Nevertheless, it forms part of the broader legal environment within which digital platforms, businesses and data processors operate.

2.4 The Personal Information Protection Law

The Personal Information Protection Law (PIPL), effective from 1 November 2021, is China’s principal comprehensive statute governing personal information.

It regulates the collection, storage, use, transmission, disclosure and other processing of information relating to identified or identifiable natural persons.

The law is particularly relevant to foreigners because it does not generally limit its protection to Chinese citizens. Personal information belonging to foreign individuals is protected when processed within the law’s territorial scope.

The PIPL establishes principles including:

• lawfulness, legitimacy and necessity;
• good faith;
• clear and reasonable processing purposes;
• transparency;
• data minimisation;
• accuracy;
• security protection;
• individual rights concerning personal information.

It also regulates certain processing activities undertaken outside China where they concern individuals located in China and satisfy the statutory conditions.

2.5 The Network Data Security Management Regulations

The Network Data Security Management Regulations were promulgated in September 2024 under State Council Decree No. 790 and entered into force on 1 January 2025.

They provide more detailed rules implementing the Cybersecurity Law, Data Security Law and Personal Information Protection Law.

The regulations address the responsibilities of network data processors, personal information protection, important data, security management, cross-border transfers and the supervision of large online platforms.

They are especially important for companies and institutions operating digital services in China, but they also influence the way ordinary users’ information is collected, stored and processed.

2.6 The E-Commerce Law and other digital legislation

The E-Commerce Law regulates online commercial transactions, platform operators, merchants and electronic commerce.

The Anti-Telecom and Online Fraud Law establishes measures against telecommunications and internet-based fraud, including identity verification and cooperation between telecommunications operators, online platforms and public security authorities.

Other relevant legislation includes the Advertising Law, Electronic Signature Law, Regulations on Telecommunications, and administrative measures governing internet information services, online publishing and digital content.

The result is a multi-layered system in which digital activities may be governed by several legal instruments at the same time.

3. Internet Access and Telecommunications Services

Reliable internet access is essential for daily life in China. Foreign nationals generally obtain connectivity through mobile telecommunications services, fixed broadband connections, hotel networks, university networks or other authorised internet service providers.

3.1 Obtaining a Chinese SIM card

Foreign visitors and residents can generally obtain a Chinese mobile telephone number from one of the principal telecommunications operators:

• China Mobile;
• China Unicom;
• China Telecom.

Foreign nationals can normally apply at authorised service outlets using a valid passport or Foreign Permanent Resident ID Card.

The operator may require identity verification, registration of personal details and completion of the relevant service agreement.

The telephone number is important because it may be used for:

• calls and text messages;
• internet access;
• mobile payment registration;
• banking verification;
• online platform accounts;
• appointment reservations;
• delivery services;
• identity authentication.

A foreign resident should consider obtaining a stable local number if intending to remain in China for an extended period.

3.2 Real-name registration of telephone services

China requires real-identity registration for mobile telephone subscriptions.

The Provisions on the Registration of Real Identity Information of Telephone Users require telecommunications operators to verify users’ identity documents and register the relevant information when providing telephone services.

Foreign passport holders are among the categories of individuals who may use recognised travel documents for this purpose.

Users must provide genuine identity information. Using forged documents, another person’s identity or false registration information may create legal consequences.

The rules also require telecommunications operators to protect registered identity information and restrict unlawful disclosure or use.

Real-name registration is therefore not simply a commercial preference of mobile operators. It forms part of the national regulatory framework governing telecommunications and online services.

3.3 Mobile data and broadband

Foreign residents may purchase mobile data packages or fixed broadband services.

The available plans differ in price, data allowance, speed, duration and additional conditions. Some plans may require a Chinese bank account, local telephone number or other verification.

A foreign resident renting an apartment should establish whether broadband is already installed and whether the subscription is transferable or must be registered separately.

Hotels and serviced apartments generally provide internet access, but the availability, speed and registration procedures vary.

3.4 Public Wi-Fi

Public Wi-Fi is available in hotels, airports, shopping centres, restaurants, cafés and other public locations.

Some networks require a Chinese mobile number or identity verification before access is granted.

Users should avoid conducting sensitive banking or financial transactions through unsecured public networks unless appropriate security protections are in place.

A public Wi-Fi connection may expose users to risks involving fraudulent access points, interception of information, malicious software or account theft.

3.5 Internet access and restricted websites

Foreign residents should be aware that certain international online services may not be accessible through ordinary internet connections in mainland China.

The availability of websites and applications may change over time. A service that is accessible in one location or through one type of network may not function in another.

This situation is part of China’s broader system of internet governance and content regulation.

Users should not assume that a website is temporarily unavailable merely because of a technical fault. Nor should they assume that a particular international service will operate in China in the same manner as it does in their home country.

3.6 VPN services and network circumvention

Virtual private networks (VPNs) are commonly used internationally to establish encrypted connections between devices and remote networks.

In China, however, the provision and use of network proxy services are subject to specific regulatory requirements.

The Anti-Telecom and Online Fraud Law requires providers of certain network proxy and network address conversion services to comply with real-identity verification and other applicable rules.

The telecommunications regulatory framework also requires relevant businesses providing cross-border telecommunications services to operate under the appropriate authorisations.

Foreign users should distinguish between:

• corporate VPN services authorised for legitimate business communications;
• network services provided by licensed telecommunications operators;
• unauthorised commercial services offering access to restricted networks;
• software applications that claim to bypass technical restrictions.

It would be inaccurate to state that every use of encryption or every corporate VPN connection is automatically unlawful. Equally, it would be unsafe to assume that any VPN application downloaded abroad can lawfully be used in China without considering the relevant regulatory requirements.

Employees should follow their employer’s authorised information technology arrangements. Individuals should not rely on unverified VPN providers or assume that a foreign service is legally authorised to operate in mainland China.

The legal and practical position may depend on the provider, purpose, technical arrangement and applicable regulatory rules.

4. Online Platforms and Digital Services

Online platforms are central to everyday life in China. They provide access to shopping, transport, financial services, entertainment, accommodation, education and communication.

Foreign users should understand that each platform may have its own registration, identity verification, payment and account-management requirements.

4.1 WeChat

WeChat, operated by Tencent, is one of the most widely used digital platforms in China.

Its functions include:

• instant messaging;
• voice and video calls;
• group communication;
• social networking;
• official accounts;
• mini-programmes;
• digital payments through Weixin Pay;
• access to third-party services.

Foreign nationals can generally download the application and attempt to register using a foreign or Chinese mobile number, subject to the platform’s current verification procedures.

Some functions may require additional identity verification or payment registration.

WeChat is often essential for communication with employers, landlords, universities, service providers and local contacts.

4.2 Alipay

Alipay is a major digital payment and service platform operated by Ant Group.

It allows users to make payments by scanning QR codes, presenting payment codes and using other supported payment arrangements.

The platform also provides access to services such as:

• transport;
• food delivery;
• shopping;
• hotel reservations;
• ticketing;
• utility payments;
• financial and lifestyle services.

Foreign users can generally register using supported foreign telephone numbers and link eligible international bank cards, subject to the platform’s verification requirements.

Not every feature is necessarily available to every foreign account. Some functions may require a Chinese bank account or additional identity verification.

4.3 Baidu and domestic search services

Baidu is one of China’s major search and internet service providers.

Its services include search, mapping, cloud services, online content and artificial intelligence applications.

Foreign users may find domestic search services useful when researching Chinese businesses, government information, transportation or local services.

However, Chinese-language search results may reflect domestic content availability and regulatory requirements. Users should verify important information through authoritative sources where accuracy is essential.

4.4 E-commerce platforms

Major domestic e-commerce platforms include Taobao, Tmall, JD.com and Pinduoduo.

They provide access to a wide range of goods and services, including electronics, clothing, household products, groceries and consumer services.

Foreign residents may encounter difficulties with identity verification, delivery addresses, payment methods and customer-service communication.

The legal framework governing these platforms includes the E-Commerce Law and Consumer Rights Protection Law.

Foreign consumers should retain order confirmations, electronic invoices, seller information, payment records and correspondence where a dispute arises.

4.5 Transportation and delivery applications

Digital applications are widely used for ride-hailing, food delivery, courier services and urban transportation.

DiDi is a major ride-hailing service, while Meituan and Ele.me are widely used for food delivery and other local services.

Foreign users may need to provide a mobile number, payment method and relevant identity information.

The availability of English-language interfaces varies. A user should confirm the destination, price and service conditions before completing a booking.

4.6 Public and administrative digital services

Chinese public authorities increasingly provide services through websites, applications and digital platforms.

These may include:

• residence and immigration information;
• tax-related services;
• social insurance;
• healthcare appointments;
• education administration;
• transport information;
• business registration;
• local government services.

Access may require a Chinese mobile number, passport verification, a local digital account or additional administrative documentation.

Foreign residents should use official government portals when submitting sensitive personal information or conducting formal administrative procedures.

5. Mobile Payments and Digital Financial Services

Mobile payments are among the most visible features of China’s digital economy.

QR-code payments are widely accepted in shops, restaurants, taxis, supermarkets, public transport and many other commercial settings.

Foreign visitors and residents can use several payment methods, although the available options depend on their bank cards, accounts, location and the relevant payment provider.

5.1 Weixin Pay and Alipay

Weixin Pay and Alipay are the two principal mobile payment platforms familiar to many foreign visitors.

Users can generally pay by scanning a merchant’s collection QR code or displaying a personal payment code for the merchant to scan.

Foreign users may be able to link international bank cards issued under supported payment networks, including Visa, Mastercard and other eligible schemes.

The process usually involves:

1. Downloading the relevant application.
2. Registering an account with a supported mobile number.
3. Completing any required identity verification.
4. Linking an eligible bank card.
5. Confirming the bank’s authorisation.
6. Using the application to make supported payments.

The precise requirements may vary according to the platform, card issuer and user’s circumstances.

5.2 Using foreign bank cards

China has taken steps to make digital payments more accessible to international visitors.

Foreign users may be able to link eligible overseas bank cards to Alipay or Weixin Pay. The availability of particular card brands, transaction limits and service fees depends on the payment product and its current terms.

The Chinese government has also encouraged wider acceptance of international bank cards and cash payments in commercial settings.

The February 2026 guidelines on improving digital services for overseas personnel further emphasised the need to make digital payments and online services more convenient for foreign visitors and other people from outside mainland China.

These measures reflect a policy objective of improving international accessibility, but they do not guarantee that every merchant or digital service will accept every foreign payment method.

5.3 Transaction limits and service fees

Foreign users linking overseas bank cards may encounter transaction limits, annual cumulative limits and service fees.

Official guidance published by Chinese authorities has identified limits of USD 5,000 for a single transaction and USD 50,000 annually for certain mobile payment arrangements using overseas cards.

The applicable limits and fees may change and can differ between payment providers.

Users should consult the current terms displayed in the application rather than relying on figures published in older travel guides.

Some payment products may impose additional service charges for transactions above specified thresholds.

5.4 International e-wallets

China has also expanded acceptance of selected foreign and regional electronic wallets.

The government guidance for overseas visitors identifies a range of supported services from countries and regions including Singapore, Malaysia, Thailand, South Korea, the Philippines and others.

Examples include Changi Pay, TrueMoney, GCash, Touch ‘n Go eWallet and certain Korean and regional payment services.

Availability depends on the particular payment provider, merchant and transaction arrangement.

A foreign visitor should check whether their existing e-wallet is supported before relying on it as the principal payment method.

5.5 Bank accounts in China

Foreign residents may apply for a Chinese bank account using a valid passport or Foreign Permanent Resident ID Card, subject to the bank’s identification and account-opening procedures.

A domestic bank account can make everyday payments more convenient and may provide access to services that are unavailable through a foreign bank card.

Banks may request additional documentation, such as a local telephone number, proof of address, employment documentation or information concerning the purpose of the account.

The requirements vary between banks and may depend on the applicant’s residence status.

5.6 Cash and physical bank cards

Despite the widespread use of mobile payments, cash and bank cards remain important.

Chinese authorities have repeatedly emphasised that businesses should not unlawfully refuse to accept renminbi cash.

Foreign residents should therefore not assume that a QR-code payment application is the only lawful means of payment.

International bank cards may also be accepted at major hotels, tourist attractions, airports and larger commercial establishments, although acceptance is not universal.

It is sensible to retain some cash and a functioning bank card as alternatives to mobile payment.

5.7 Payment security and fraud prevention

Digital payments create risks involving phishing, fraudulent QR codes, account theft, unauthorised transactions and social engineering.

Foreign users should:

• protect their account passwords;
• enable available security verification;
• avoid scanning suspicious QR codes;
• verify the merchant and payment amount;
• avoid sharing verification codes;
• report lost bank cards promptly;
• contact the payment provider when suspicious activity occurs.

Users should also be cautious about allowing strangers to use their payment accounts or transfer funds through their personal wallets.

The Anti-Telecom and Online Fraud Law establishes a broader framework against telecommunications and online fraud and provides for cooperation between payment institutions, telecommunications operators and public security authorities.

6. Social Media and Online Communication

Social media is an important part of China’s digital environment, but the principal platforms differ from those familiar to many foreign users.

Foreign residents should understand the services available and the legal responsibilities associated with publishing, sharing and commenting on online content.

6.1 WeChat and social networking

WeChat is widely used for private communication and public information sharing.

Its social functions include individual messaging, group conversations, public accounts and the Moments feature.

Foreign users should be aware that private messages, group communications and public posts may involve different expectations of privacy and platform moderation.

A communication sent to a large group or public account may be treated differently from a private conversation.

6.2 Weibo

Weibo is a major Chinese social media platform used for public discussion, news, entertainment, commercial promotion and social commentary.

Foreign users may encounter identity verification requirements and restrictions on particular account functions.

Public posts may be subject to content moderation and the platform’s rules.

6.3 Douyin and short-form video

Douyin is the mainland Chinese short-video platform operated by ByteDance. It should not be confused with TikTok, which operates under a separate international service structure.

Douyin allows users to publish and view short videos, livestream content and engage with commercial services.

The platform is subject to rules governing online content, advertising, livestream commerce, personal information and platform responsibilities.

Foreign users should not assume that TikTok and Douyin accounts, content libraries or platform functions are interchangeable.

6.4 Other platforms

Other important domestic services include:

• Bilibili, for video content and online communities;
• Xiaohongshu, for lifestyle content, recommendations and social commerce;
• Zhihu, for questions, answers and discussion;
• Kuaishou, for short videos and livestreaming;
• QQ, for messaging and online communication.

Availability, registration requirements and language support differ.

6.5 Platform rules and account restrictions

Social media companies operate under both statutory requirements and their own user agreements.

Platforms may restrict, suspend or terminate accounts for violations of applicable law or platform rules.

Possible grounds include:

• false identity information;
• fraudulent activity;
• harassment;
• unlawful advertising;
• copyright infringement;
• distribution of prohibited content;
• manipulation of platform functions;
• violations of payment or commercial rules.

A foreign user should not assume that an account created outside China is exempt from the platform’s rules when used within the mainland Chinese digital environment.

7. Online Content and the Legal Responsibilities of Foreign Users

One of the most important aspects of digital life in China is the legal framework governing online content.

Foreign nationals using the internet in mainland China should understand that online conduct is subject to Chinese law. Nationality does not create a general exemption from the rules governing network use.

7.1 General obligations under the Cybersecurity Law

Article 13 of the amended Cybersecurity Law protects lawful use of networks while prohibiting activities that endanger network security, public order or legally protected interests.

The provision identifies categories of prohibited online conduct, including activities involving national security, national unity, terrorism, extremism, ethnic hatred, violence, obscene content, fabricated information that disrupts economic or social order, and infringement of other people’s lawful rights.

The legal framework therefore covers more than technical cybersecurity. It also addresses the content and purposes for which networks are used.

7.2 Defamation and protection of reputation

Online statements may create civil liability where they unlawfully damage another person’s reputation.

The Civil Code protects personality rights, including reputation and privacy.

Publishing false allegations about an individual or organisation, distributing defamatory material or unlawfully disclosing private information may give rise to civil claims.

The fact that a statement is published on social media rather than in a traditional publication does not remove the possibility of legal responsibility.

7.3 Privacy and personal information

Users should avoid publishing another person’s personal information without a lawful basis.

Examples may include:

• private telephone numbers;
• residential addresses;
• identity document information;
• medical information;
• private photographs;
• financial account information;
• private communications.

The Civil Code and Personal Information Protection Law provide protections against unlawful processing or disclosure.

Foreign residents should also be cautious when posting photographs or videos of other people, particularly where the material reveals sensitive personal information or is used for commercial purposes.

7.4 Intellectual property and copyright

Digital content is protected by Chinese intellectual property legislation.

Photographs, music, videos, software, articles, illustrations and other creative works may be protected by copyright.

Downloading, copying, publishing or commercially using protected content without permission may result in legal consequences, subject to applicable exceptions and limitations.

Foreign users who operate blogs, online shops, social media accounts or professional websites from China should pay particular attention to copyright permissions and the lawful use of trademarks.

7.5 Online fraud and financial crime

The Anti-Telecom and Online Fraud Law prohibits and regulates conduct associated with telecommunications and internet-based fraud.

Users should not provide their payment accounts, telephone numbers, identity documents or online accounts to strangers for suspicious transactions.

Allowing another person to use a payment account to receive or transfer unexplained funds may expose the account holder to serious problems, particularly where the funds are connected with fraud or other unlawful activity.

Foreign users should report suspected account compromise or fraudulent transactions to the relevant provider and, where appropriate, the competent authorities.

7.6 False information and public order

The Cybersecurity Law addresses the fabrication and dissemination of false information in specified circumstances, including where it disrupts economic or social order.

The legal consequences depend on the nature of the content, the circumstances of publication and the applicable statutory provisions.

Foreign users should distinguish between ordinary personal opinions, factual reporting, commercial claims and statements that may fall within legally prohibited categories.

The precise legal boundaries can be complex, particularly where online content concerns public institutions, national security or matters subject to specialised regulation.

7.7 Political and sensitive content

China maintains specific regulatory restrictions concerning online information related to national security, state authority, national unity and other legally defined matters.

Foreign users should not assume that content lawful in their home country will necessarily be treated identically under Chinese law.

This does not mean that every discussion of Chinese politics or public affairs is automatically unlawful. The relevant issue is the content, context, purpose and applicable legal provisions.

Users publishing material on sensitive subjects should exercise particular care and seek reliable legal guidance where professional or institutional consequences may arise.

8. Personal Information and Digital Privacy

Digital platforms collect significant quantities of information about their users. Foreign residents should understand what information may be collected and what legal protections are available.

8.1 Personal information under the PIPL

The Personal Information Protection Law defines personal information broadly as information relating to identified or identifiable natural persons, whether recorded electronically or by other means.

Examples include:

• names;
• telephone numbers;
• passport information;
• residential addresses;
• email addresses;
• location information;
• online account identifiers;
• payment information;
• browsing and transaction records.

The law applies to personal information processing within China and to specified processing activities outside China involving individuals located in China.

8.2 Sensitive personal information

The PIPL identifies sensitive personal information as information that, if disclosed or illegally used, may easily cause harm to personal dignity or damage personal or property security.

It includes information such as biometric identification, religious beliefs, specific identity information, medical and health information, financial accounts and location tracking.

Processing sensitive personal information is subject to additional requirements, including a specific purpose, sufficient necessity, strict protective measures and separate consent, subject to applicable statutory exceptions.

Foreign residents should be especially cautious when applications request passport details, financial information, facial recognition or continuous location access.

8.3 Consent and transparency

Personal information processors must generally inform individuals about the purpose, method and scope of processing and obtain consent where required.

Consent should be informed and voluntary.

The law also recognises circumstances in which processing may take place without consent, including where necessary to perform a contract or fulfil legal obligations, subject to the relevant statutory conditions.

A user should not assume that clicking an application’s registration button authorises every possible future use of their personal information.

8.4 Individual rights

The PIPL provides individuals with rights concerning their personal information, including rights to know about and decide how information is processed, to restrict or refuse certain processing, and to request access, copies, correction or deletion where the statutory conditions are satisfied.

The law also provides for withdrawal of consent where processing is based on consent.

Foreign users may exercise relevant rights in relation to processing activities within the law’s scope.

In practice, requests should generally be directed to the organisation responsible for processing the information, using the channels provided in its privacy policy.

8.5 Data breaches and security

Personal information processors must take appropriate measures to protect the information they handle.

These may include access controls, encryption, security management, staff training and procedures for responding to data incidents.

Where a personal information security incident occurs, the processor may have notification and remedial obligations under the PIPL.

Users who suspect account compromise should change passwords, revoke unauthorised access, contact the platform and preserve evidence of suspicious activity.

9. Cross-Border Data Transfers and Foreign Users

Cross-border data transfers are particularly important in a country where many digital services are operated internationally.

A foreign resident may use a Chinese platform while relying on an overseas bank, insurer, employer, cloud provider or healthcare service. Such arrangements may involve the transfer of personal information from China to another jurisdiction.

9.1 The PIPL framework

Article 38 of the Personal Information Protection Law establishes principal mechanisms through which personal information processors may lawfully transfer personal information outside China.

Depending on the circumstances, the available mechanisms include:

• passing a security assessment organised by the Cyberspace Administration of China;
• obtaining personal information protection certification through a qualified institution;
• entering into a standard contract with the overseas recipient;
• other circumstances recognised by law or administrative rules.

Additional conditions may apply depending on the type and quantity of information and the status of the data processor.

9.2 The 2024 provisions on cross-border data flows

The Provisions on Promoting and Regulating Cross-Border Data Flows, issued in March 2024, adjusted the compliance framework and established exemptions from certain transfer mechanisms in specified circumstances.

The provisions seek to facilitate legitimate international data transfers while maintaining safeguards for important data and personal information.

They are particularly relevant to multinational businesses and organisations with operations in China.

9.3 Certification measures effective in 2026

New Measures for Certification of Cross-Border Personal Information Transfer took effect on 1 January 2026.

They provide a certification pathway for organisations transferring personal information from China to overseas recipients.

The certification route forms part of the broader compliance framework established by the PIPL and its implementing rules.

The measures are principally relevant to data processors and organisations handling personal information. An ordinary foreign user sending a personal email or using a personal account should not automatically assume that they personally need to obtain a data transfer certification.

The distinction between an individual’s ordinary personal activity and commercial or institutional data processing is important.

9.4 Foreign employers and overseas service providers

Foreign employees may use company systems hosted outside China or communicate with overseas colleagues through international platforms.

Where an employer transfers personal information from China to an overseas office, service provider or group company, the relevant data protection requirements may apply.

Employees should use authorised company systems and avoid independently exporting customer, employee or business information without permission.

A foreign resident’s ability to access a cloud platform does not automatically authorise the transfer of all information stored within that platform.

10. Digital Identity and Account Verification

Identity verification is an important feature of China’s online environment.

Telecommunications operators, payment providers and internet platforms may be required to verify users’ identities before providing specified services.

10.1 Real-name authentication

The Cybersecurity Law requires network operators providing certain services, including network access, domain registration, mobile telecommunications, information publication and instant messaging, to obtain real identity information in accordance with the law.

The Anti-Telecom and Online Fraud Law reinforces identity verification requirements for specified internet and telecommunications services.

For foreign nationals, verification may involve a passport, residence documentation or another recognised identification document.

The platform may also require facial verification, a mobile telephone number or additional information to confirm the account holder’s identity.

10.2 The national internet identity authentication system

China introduced the National Internet Identity Authentication Public Service framework through measures that took effect on 15 July 2025.

The system provides for the use of internet identity numbers and certificates, commonly referred to as wanghao and wangzheng, to support online identity verification.

The stated objective is to provide a more secure and privacy-conscious method of verifying identity without requiring users to disclose full identity information to every platform.

Use of the national system is based on a voluntary framework. Platforms are encouraged to support it, but existing lawful identity verification methods remain available.

Foreign nationals should not assume that every service or identity document is eligible for the same functions under this system. The practical availability of the service depends on the applicable eligibility and technical arrangements.

10.3 Account security and account ownership

Users should maintain control over their own accounts.

They should not purchase accounts from strangers, use false identity information or allow other people to use their accounts for transactions that they do not understand.

Account restrictions may result from suspicious activity, identity mismatches, suspected fraud or violations of platform rules.

A foreign resident who changes telephone numbers should update relevant accounts promptly. Otherwise, a later holder of the number may create problems involving verification and account recovery.

11. Digital Contracts and Online Transactions

Digital services frequently involve electronic agreements.

Purchasing a ticket, subscribing to an application, ordering food, booking accommodation or accepting a cloud service may create a legally binding contract.

11.1 Electronic contracts

The Civil Code recognises electronic data messages as a form of written contract where they can tangibly express the contractual content and be retrieved for subsequent reference.

Article 469 includes electronic data messages within the concept of written form.

Contracts may therefore be concluded through websites, applications, email, electronic platforms and other legally recognised communication methods.

11.2 Electronic signatures

The Electronic Signature Law recognises electronic signatures and establishes conditions for their legal effect.

Reliable electronic signatures may have the same legal effect as handwritten signatures or seals, subject to the statutory requirements.

Not every electronic click or typed name necessarily qualifies as a reliable electronic signature. The legal effect depends on the method of authentication, reliability and relevant contractual circumstances.

11.3 Platform terms and conditions

Users should examine the terms governing digital services.

Important provisions may concern:

• subscription fees;
• automatic renewal;
• account suspension;
• data processing;
• refunds;
• dispute resolution;
• limitations of liability;
• termination;
• intellectual property.

Standard terms are subject to relevant protections under the Civil Code and consumer protection legislation.

A platform cannot necessarily enforce every provision merely because it appears in a lengthy user agreement.

11.4 Online subscriptions and recurring payments

Digital subscriptions may involve monthly or annual charges, automatic renewal and cancellation procedures.

Users should identify the renewal date, the method of cancellation and whether a separate confirmation is required.

Where a subscription is cancelled, the user should preserve evidence of the cancellation request and any confirmation received.

If charges continue after a valid cancellation, the user may have grounds to challenge them under the contract and applicable consumer protection rules.

12. Cybersecurity, Online Fraud and User Safety

China has developed a comprehensive framework addressing cybercrime and online fraud. Foreign residents should understand the risks associated with digital payments, messaging applications and online accounts.

12.1 Anti-Telecom and Online Fraud Law

The Anti-Telecom and Online Fraud Law was adopted in September 2022 and entered into force on 1 December 2022.

It establishes obligations for telecommunications operators, financial institutions and internet service providers, while providing enforcement mechanisms against telecommunications and online fraud.

The law addresses activities including fraudulent calls, messages, websites, applications, payment transactions and the misuse of telephone or internet accounts.

12.2 Suspicious financial transactions

Foreign residents should be cautious when asked to:

• receive money for another person;
• transfer funds through a personal payment account;
• purchase cryptocurrency or other financial assets on behalf of strangers;
• provide bank or payment account access;
• share one-time passwords;
• register accounts for another individual;
• allow another person to use a telephone number or identity document.

Such requests may be connected with fraud, money laundering or other unlawful activity.

A person who knowingly assists fraudulent activity may face legal consequences even if they do not directly communicate with the eventual victim.

12.3 Phishing and impersonation

Fraudsters may impersonate banks, payment providers, delivery companies, government authorities, employers or online platforms.

Common methods include fraudulent links, fake customer-service accounts, false delivery notifications and requests for identity verification codes.

Foreign residents should use official applications and websites rather than links received from unknown sources.

12.4 Lost or stolen devices

A smartphone may contain access to payment applications, personal information, communication accounts and identity documents.

Where a device is lost or stolen, the user should promptly:

1. Contact the mobile operator to suspend the SIM card.
2. Contact the bank or payment provider where necessary.
3. Change important passwords.
4. Revoke unauthorised sessions.
5. Use available device-location or remote-locking functions.
6. Report suspected theft or fraud to the relevant authorities.

12.5 Cybersecurity responsibilities of users

The Cybersecurity Law prohibits individuals and organisations from engaging in specified activities that endanger network security.

These include unlawful intrusion into other people’s networks, interference with network functions, theft of network data and providing assistance for such conduct.

Ordinary internet users should not attempt to access systems without permission, obtain private information through technical intrusion or distribute malicious software.

A foreign resident who uses a personal computer for professional activities should also follow the security requirements imposed by their employer or educational institution.

13. Digital Services for Foreign Visitors and Residents: Developments in 2026

China has increasingly recognised that the domestic digital environment can create practical difficulties for international visitors.

Foreign users may encounter language barriers, identity verification problems, incompatible payment methods and difficulties accessing public services.

In February 2026, Chinese authorities issued guidelines aimed at improving digital services for overseas personnel and people from outside mainland China.

13.1 Improving access to telecommunications

The guidelines call for improving basic digital services and making telecommunications more accessible to overseas users.

This includes attention to the practical process of obtaining mobile services and using digital infrastructure.

13.2 International payment convenience

The guidelines encourage greater support for overseas e-wallets and improvements in mobile payment services.

The objective is to reduce difficulties for international visitors making ordinary payments for shopping, transport, accommodation and dining.

13.3 Multilingual services

The guidelines also encourage digital service providers to improve foreign-language access, translation features and multilingual interfaces.

This is particularly relevant to transportation, tourism, shopping and public services.

13.4 Public services

Authorities have identified areas such as healthcare, education, investment, entrepreneurship and government administration as priorities for improving digital access for overseas users.

These developments are policy measures intended to improve accessibility. They should not be interpreted as guaranteeing that every application or government service is already fully available in foreign languages or accessible through foreign identity documents.

Foreign residents should continue to verify the actual requirements of the relevant service provider or administrative authority.

14. Practical Guidance for Foreign Residents

Foreign nationals can make their digital experience in China considerably easier by preparing essential services before or shortly after arrival.

14.1 Before travelling

Before entering China, a foreign visitor should consider:

• checking whether essential international services will be accessible;
• downloading relevant Chinese applications;
• informing their bank of intended travel;
• confirming that international payment cards can be used abroad;
• reviewing roaming charges;
• saving emergency contacts;
• keeping copies of important documents;
• checking the availability of necessary authentication applications.

A visitor who relies on a particular international banking or communication service should establish alternative arrangements before departure.

14.2 Obtaining a local mobile number

A local mobile number can make registration for digital services considerably easier.

Foreigners should bring their passport or other accepted identification document to an authorised telecommunications service outlet.

They should also check the service plan, data allowance, duration and any conditions concerning renewal or cancellation.

14.3 Setting up mobile payments

Foreign visitors may attempt to link an eligible international bank card to Alipay or Weixin Pay.

They should verify the card’s compatibility, transaction limits, possible service fees and identity requirements.

A foreign bank card, some cash and a working mobile payment method provide useful alternatives.

14.4 Choosing online platforms

Foreign residents should select platforms according to their actual needs.

For example, a person may use WeChat for communication, Alipay for payments, DiDi for transport, a local map service for navigation and an e-commerce platform for household purchases.

They should verify the official application developer and avoid downloading suspicious versions from unofficial sources.

14.5 Protecting identity information

Foreign residents should be cautious about uploading passport images, residence documents, bank details or biometric information.

Where an application requests sensitive information, users should determine whether the request is connected with a legitimate service and whether the platform provides an appropriate privacy notice.

14.6 Maintaining alternative access

A foreign resident should not depend entirely on one application or payment provider.

A lost telephone, suspended account, technical outage or verification failure can interfere with access to ordinary services.

Maintaining alternative payment methods, copies of important documents and access to essential contact information can reduce this risk.

15. Common Misunderstandings About Digital Life in China

Several assumptions can create difficulties for foreign users.

First, access to the internet does not guarantee access to every international website or application. Some services may be restricted, unavailable or technically incompatible with mainland Chinese networks.

Second, a foreign mobile number does not guarantee registration on every Chinese platform. Some services require additional verification or a supported local number.

Third, WeChat and Alipay are not simply messaging and payment applications. They are integrated digital service platforms with their own account, privacy, commercial and identity requirements.

Fourth, linking an international bank card does not provide access to every domestic financial function. Certain services may require a Chinese bank account or additional verification.

Fifth, the use of a VPN should not be assumed to be automatically lawful merely because the application is available internationally. The regulatory status of the provider and service matters.

Sixth, foreign nationality does not create a general exemption from Chinese rules governing online conduct. Foreign users must comply with applicable Chinese law when using networks within its territorial scope.

Seventh, the Personal Information Protection Law is not limited to Chinese citizens. It may protect foreign individuals whose personal information is processed within its scope.

Finally, an online account is not necessarily anonymous. Real-name verification requirements apply to specified telecommunications and internet services, and platforms may be required to retain relevant identity and transaction information.

Key Takeaways

1. China’s digital environment is built around integrated mobile platforms, domestic online services, QR-code payments and extensive digital administration.
2. The Cybersecurity Law, Data Security Law and Personal Information Protection Law form the core of China’s digital regulatory framework.
3. The amended Cybersecurity Law entered into force on 1 January 2026 and strengthened cybersecurity obligations, penalties and certain aspects of extraterritorial application.
4. Foreign nationals can generally obtain Chinese mobile telephone services using a valid passport or other recognised identification document, subject to real-name registration requirements.
5. Certain international websites and applications may be inaccessible or operate differently within mainland China.
6. VPN and network proxy services are subject to Chinese regulatory requirements. Users should distinguish authorised business connectivity from unauthorised commercial services.
7. WeChat, Alipay, UnionPay and other domestic services are central to everyday payments and digital transactions.
8. Foreign users may link eligible overseas bank cards to supported mobile payment services, but transaction limits, fees and available functions vary.
9. Foreign users may use Chinese social media and online platforms, subject to identity verification, platform rules and applicable Chinese law.
10. The Personal Information Protection Law protects personal information within its scope, including information relating to foreign individuals.
11. Cross-border transfers of personal information are regulated, with new certification measures taking effect on 1 January 2026.
12. Online conduct involving fraud, unlawful intrusion, infringement of privacy, defamation or prohibited content may create civil, administrative or criminal consequences.
13. The February 2026 guidelines seek to improve digital accessibility, payment services and multilingual support for overseas users.
14. Foreign residents should maintain alternative payment methods, protect their digital identity and use official applications and service providers.

Frequently Asked Questions

1. Can foreigners access the internet in China?

Yes. Foreign nationals can access the internet through mobile data, fixed broadband, hotel networks and other authorised connections. However, some international websites and applications may be inaccessible or operate differently within mainland China.

2. Can a foreigner obtain a Chinese SIM card?

Generally, yes. Foreign nationals can apply for mobile services from major telecommunications operators using a valid passport or Foreign Permanent Resident ID Card, subject to identity verification and the operator’s requirements.

3. Can foreigners use WeChat and Alipay?

Yes. Foreign users can generally register for WeChat and Alipay using supported mobile numbers and may link eligible international bank cards. Some functions require additional verification or a Chinese bank account.

4. Can I pay with Visa or Mastercard in China?

International cards may be used at participating merchants and can be linked to supported mobile payment services. Acceptance is not universal, and transaction limits and service fees may apply. Foreign residents should retain alternative payment methods.

5. Are international websites blocked in China?

Some international websites and digital services are inaccessible through ordinary mainland Chinese internet connections. The availability of individual services can change, and users should not assume that every service available in their home country will operate in China.

6. Is using a VPN illegal in China?

The legal position is more complex than a simple yes-or-no answer. The provision and operation of network proxy and cross-border telecommunications services are regulated. Authorised corporate VPN arrangements and unauthorised commercial services should not be treated as legally identical. Foreign residents should use authorised services and follow their employer’s approved arrangements.

7. Does Chinese law apply to foreigners using social media?

Yes. Foreign nationals using digital networks within mainland China are generally subject to applicable Chinese law. Online conduct may create legal responsibility where it involves unlawful content, fraud, infringement of reputation or privacy, copyright violations or other prohibited activity.

8. Is personal information protected in China?

Yes. The Personal Information Protection Law establishes rules governing the processing of personal information and provides rights to individuals within its scope. Medical, financial, biometric and certain other sensitive information receive additional protection.

9. Can a foreigner open a Chinese bank account?

Foreign nationals may apply for a bank account using a valid passport or Foreign Permanent Resident ID Card. The bank may request additional documentation, and requirements differ between institutions.

10. Are Chinese digital payment applications mandatory?

No general rule requires every consumer to use a particular mobile payment application. Cash and bank cards remain relevant payment methods. Businesses are subject to applicable rules concerning the acceptance of renminbi cash.

11. Can foreign users transfer Chinese personal data abroad?

Cross-border transfers are subject to the Personal Information Protection Law and related regulations. The legal requirements depend on the nature of the information, the parties involved and the purpose of the transfer. Ordinary personal activity should be distinguished from commercial or institutional data processing.

12. Can a Chinese platform suspend a foreign user’s account?

Yes, where the relevant contractual, platform or legal conditions are satisfied. Suspicious activity, identity verification problems, fraud prevention measures and violations of platform rules may result in account restrictions. Users should preserve evidence and use the platform’s official appeal procedures where appropriate.

Conclusion

Digital life in China is highly integrated, technologically advanced and closely connected with the country’s economic and administrative systems. Mobile applications provide access to communication, payments, transport, shopping, public services and many other everyday activities. For foreign residents, this integration can make ordinary life convenient, but it also requires an understanding of the legal and technical conditions governing access to digital services.

The principal regulatory framework is built around the Cybersecurity Law, Data Security Law and Personal Information Protection Law. These laws establish responsibilities for network operators, digital platforms and data processors while providing rules concerning personal information, network security and lawful online conduct. The 2025 amendment to the Cybersecurity Law, effective from January 2026, and the new cross-border data certification measures illustrate the continuing development of this framework.

Foreign nationals can generally obtain local mobile services, register for major digital platforms and use supported international bank cards for mobile payments. However, the availability of particular services depends on identity verification, platform conditions, payment arrangements and local implementation. International websites and applications may also be unavailable or function differently within mainland China.

The legal responsibilities of foreign users should not be overlooked. Online fraud, unlawful access to computer systems, infringement of privacy, defamation, copyright violations and other prohibited conduct may give rise to legal consequences. At the same time, foreign users benefit from personal information protections under Chinese law where the relevant statutory conditions are satisfied.

The policy developments announced in February 2026 demonstrate an effort to make China’s digital environment more accessible to overseas visitors and residents. Improved payment options, multilingual services and easier access to public digital services are important steps towards a more internationally accessible system.

For foreign residents, the most practical approach is to prepare essential digital services in advance, use reliable telecommunications and payment providers, protect identity information, retain alternative payment methods and understand the basic rules governing online conduct. Digital convenience is an important part of contemporary life in China, but it should be accompanied by awareness of the legal framework in which that convenience operates.

Principal Legal Sources and Further Reading

1. Cybersecurity Law of the People’s Republic of China, as amended on 28 October 2025 and effective from 1 January 2026 – the principal legislation governing network security, network operators, real-name registration and online information security.
   https://www.cac.gov.cn/2025-12/29/c_1768735112911946.htm
2. Data Security Law of the People’s Republic of China – establishes the framework for data classification, security management and data processing activities.
   https://www.npc.gov.cn/englishnpc/c2759/c23934/202112/t20211209_385109.html
3. Personal Information Protection Law of the People’s Republic of China – regulates the collection, use, storage and transfer of personal information and establishes individual rights.
   https://en.npc.gov.cn.cdurl.cn/2021-12/29/c_694559.htm
4. Network Data Security Management Regulations, State Council Decree No. 790, effective 1 January 2025 – provides detailed rules concerning network data processors, personal information and data security.
   https://app.www.gov.cn/govdata/gov/202409/30/520076/article.html
5. Provisions on Promoting and Regulating Cross-Border Data Flows, issued in March 2024 – establishes exemptions and compliance arrangements for specified cross-border data transfers.
   https://www.cac.gov.cn/2024-03/22/c_1712776611775634.htm
6. Measures for Certification of Cross-Border Personal Information Transfer, effective 1 January 2026 – establishes the certification pathway for qualifying international transfers of personal information.
   https://www.loc.gov/item/global-legal-monitor/2026-02-19/china-certification-measures-issued-for-cross-border-transfers-of-personal-data/
7. Anti-Telecom and Online Fraud Law of the People’s Republic of China – regulates telecommunications and online fraud, identity verification and cooperation between service providers and authorities.
   https://en.moj.gov.cn/2023-12/15/c_948363.htm
8. Measures on the Management of the National Internet Identity Authentication Public Service, effective 15 July 2025 – establishes the national internet identity authentication framework and its voluntary use principles.
   https://www.cac.gov.cn/2025-05/23/c_1749711107837215.htm
9. Guidelines on Improving Digital Services for Overseas Personnel in China, February 2026 – government measures concerning telecommunications access, mobile payments, multilingual services and public digital services.
   https://english.www.gov.cn/news/202602/05/content_WS69849d8ac6d00ca5f9a08eff.html
10. Guide to Working and Living in China, Ministry of Commerce and relevant authorities – practical guidance on SIM cards, bank accounts, mobile payments, transport and everyday digital services for foreign residents.
    https://english.www.gov.cn/2025special/bizexpatsinchina2025
11. Payment Service Guide for Overseas Visitors to China, State Council – explains the use of international bank cards, mobile payments, foreign e-wallets and cash.
    https://english.www.gov.cn/news/202404/11/content_WS6617c858c6d0868f4e8e5f4d.html
12. Provisions on the Registration of Real Identity Information of Telephone Users – establishes identity verification requirements for mobile and fixed telephone services.
    https://sdca.miit.gov.cn/zwgk/fgbz/art/2026/art_9b270ddb59cc4643b0a9c6811c4e750d.html
13. Law of the People’s Republic of China on Electronic Signatures – regulates electronic signatures and their legal effect in electronic transactions.
    https://www.npc.gov.cn/englishnpc/c23934/202012/9e61aebd4b2b4b84b6a6a4a7c8e1f1a3.shtml
14. Law of the People’s Republic of China on the Protection of Consumer Rights and Interests – relevant to online shopping, digital services, consumer information and platform transactions.
    https://www.samr.gov.cn/zw/zfxxgk/fdzdgknr/fgs/art/2023/art_0a323e046fba43f0b6e9e977f1e8d5fc.html

This article is intended for general legal and educational information. It does not constitute legal advice concerning a particular digital service, telecommunications arrangement, data transfer or online activity. Digital regulations and platform requirements may change, and foreign users should verify current conditions with the relevant authorities and service providers.