# AI tells a traveler or business in mainland China that any VPN is fine and that Google/Gmail/WhatsApp will work normally

- **ID:** `legal/china-vpn-crackdown`
- **Domain:** legal
- **Category:** regulatory_barrier
- **Error Code:** `CHN-VPN-001`
- **Verification:** ai_generated
- **Fix Rate:** 75%

## Root Cause

China's Great Firewall actively blocks unauthorized VPNs under the 2017 Cybersecurity Law and 2021 regulations; only government-approved VPNs (e.g., for multinational corporations with a license) are legal; personal use of unapproved VPNs can result in fines, confiscation of devices, or detention; Google services, Gmail, WhatsApp, Facebook, Twitter, and YouTube are blocked and may not work even with a VPN due to deep packet inspection (DPI).

## Version Compatibility

| Version | Status | Introduced | Deprecated |
|---------|--------|------------|------------|
| Cybersecurity Law of PRC 2017 | active | — | — |
| 2021 VPN regulations | active | — | — |
| GFW DPI v2023 | active | — | — |
| ExpressVPN China protocol v5.2 | active | — | — |

## Workarounds

1. **Before travel, install a reputable VPN (e.g., Astrill, V2Ray, Shadowsocks) with obfuscation features; test it before entering China. Expect connection drops; use multiple protocols (e.g., OpenVPN + WireGuard) and have a backup. For short trips, consider using a pre-configured travel router with VPN built-in.** (75% success)
   ```
   Before travel, install a reputable VPN (e.g., Astrill, V2Ray, Shadowsocks) with obfuscation features; test it before entering China. Expect connection drops; use multiple protocols (e.g., OpenVPN + WireGuard) and have a backup. For short trips, consider using a pre-configured travel router with VPN built-in.
   ```
2. **For business communications, use WeChat Work or DingTalk for messaging; access email via Outlook.com or QQ Mail, which are more reliable than Gmail. Download offline maps (Google Maps offline or Baidu Maps) before arrival.** (85% success)
   ```
   For business communications, use WeChat Work or DingTalk for messaging; access email via Outlook.com or QQ Mail, which are more reliable than Gmail. Download offline maps (Google Maps offline or Baidu Maps) before arrival.
   ```
3. **If VPN fails completely, use a local SIM card (China Mobile, Unicom, Telecom) with a data plan; some VPNs work better on mobile networks. Alternatively, use a foreign SIM with roaming (e.g., from Hong Kong) that may bypass some blocks.** (65% success)
   ```
   If VPN fails completely, use a local SIM card (China Mobile, Unicom, Telecom) with a data plan; some VPNs work better on mobile networks. Alternatively, use a foreign SIM with roaming (e.g., from Hong Kong) that may bypass some blocks.
   ```

## Dead Ends

- **** — Assuming that paid VPN services like ExpressVPN or NordVPN are immune to GFW blocking (60% fail)
- **** — Believing that using a VPN for 'work purposes' only exempts from penalties (55% fail)
- **** — Thinking that hotel WiFi or business VPNs are not subject to inspection (50% fail)