Is Using a VPN Illegal in China? The 2026 Legal Picture

Using a VPN in China is a legal grey area: only government-approved VPN services are authorised, so the consumer VPNs people actually use are technically unauthorised. In practice, as of September 2026, enforcement targets the companies that sell and run unsanctioned services rather than individual users, and no foreign tourist is known to have been penalised for personal use. That said, a draft law published in January 2026 could change the calculus, so the honest answer is 'grey, and worth watching'.

This guide focuses on the law and enforcement. For which providers are reported to work and how to set up, see our VPN for China guide; for the global picture, the VPN legality-by-country guide. Not legal advice — verify the current rules with an official source before you travel.

Is using a VPN illegal in China?

Not exactly — it's unauthorised rather than flatly criminal for individuals. Chinese regulations require VPN services to be approved by the authorities, and unapproved ones are not permitted to operate. For a user, that means the app you're running is almost certainly outside the approved set, which is why the situation is best described as a grey zone rather than 'legal' or 'illegal'.

What Chinese law actually says

The framework centres on requiring VPNs and cross-border data services to be licensed, and on the Great Firewall's technical mandate to block unauthorised circumvention. Administrative penalties have historically applied — warnings, orders to stop, and fines that have been reported up to around RMB 15,000 for using unauthorised services in some cases — with the heaviest enforcement reserved for those who build or sell circumvention tools commercially. The state's clear priority is controlling the supply of VPNs, not chasing every traveller checking email.

Enforcement: who actually gets penalised

The pattern matters more than the letter of the law here. The people who have faced real penalties are overwhelmingly sellers and operators of unauthorised VPN services, not tourists or ordinary users. Reporting consistently indicates that foreign visitors using a VPN for personal purposes have not been targeted. For residents, especially Chinese citizens, the risk is higher than for foreigners, and using a VPN to access or spread content the state deems sensitive is where trouble concentrates.

The realistic risk for a tourist is that the VPN won't connect, not that you'll be detained. The realistic risk for a resident is tied to what you access, not merely to running the app. Treat both honestly.

The 2026 draft law that could change things

A draft cybercrime-prevention law published in January 2026 has been reported as potentially moving unauthorised VPN use from administrative penalties toward a criminal framework, with much larger maximum fines and short detention floated for individuals. As of September 2026 this is a draft, not enacted law, and nothing has changed for travellers yet. But it's a genuine reason to re-check the current position right before you fly rather than trusting an older guide.

Tourists vs residents vs businesses

The same law lands very differently depending on who you are. Tourists face mainly technical friction and negligible legal risk for ordinary use. Residents carry more exposure, especially around sensitive content. Businesses often use approved, licensed cross-border connectivity — the legal route — and multinationals typically route staff through corporate VPNs under that framework. If you're moving to China rather than visiting, get local, current advice rather than relying on a travel guide.

Staying on the right side of the line

Keep it simple and conservative: use a VPN for legitimate privacy and to reach your own home services, never to access or publish anything that would be an offence in China; set it up before you arrive; and re-check the legal position close to your trip given the draft law. For the technical how-to and provider options, our VPN for China guide picks up where this one leaves off.

How the Great Firewall and VPN law evolved

The current situation makes more sense with a little history. China's filtering system — the 'Great Firewall' — has been built up since the early 2000s, and the licensing approach to VPNs took clearer shape around 2017, when regulators moved against unauthorised VPN services and required approved providers to route through state-sanctioned channels. Since then the pattern has been steady escalation of technical blocking (better deep-packet inspection, active probing of servers) punctuated by periodic crackdowns on sellers. The January 2026 draft law is the latest step, and the first that has been widely read as potentially extending clear criminal exposure to individual use.

What this means in practice for your trip

Strip away the legal detail and the practical guidance for a visitor is stable: the odds you face any legal consequence for using a mainstream VPN for personal purposes are very low, but the odds your VPN stops working at some point are high. So plan for the technical problem — obfuscation, a provider that updates, a backup route — and behave conservatively on the legal one by keeping your use to ordinary privacy and home services. If you're relocating rather than visiting, treat this guide as background only and get current, local advice, because the resident risk profile is genuinely different and the draft law could move.

Do free VPNs or Tor work in China?

Mostly no. Free VPNs rarely invest in the obfuscation and constant server updates needed to beat the Great Firewall, so they're usually detected and blocked — and some monetise by logging or selling data, which is exactly the wrong trade-off in a censored network. Tor is also blocked by default in China; reaching it requires bridges and pluggable transports, which is fiddly and unreliable for most travellers. The practical answer for a visitor who needs dependable access is a reputable paid provider with a stealth mode and a China track record, set up before arrival. Treat 'free and works in China' claims with real skepticism.