Who Runs Your Travel eSIM? Home Network and IP Location

You buy a "Japan eSIM," land in Osaka, and your phone shows a familiar Japanese network name. Then your banking app asks you to verify a login from Hong Kong, or a streaming app shows a catalog from a country you have never visited.

Nothing is broken. You have just met the layer of a travel eSIM that most product pages never describe: the network that issued the profile, and the place where your traffic actually reaches the internet.

That layer became news in October 2026. On October 6, Taiwan's Consumers' Foundation (CFCT) published lab results for 172 travel eSIMs sold for the six most popular outbound destinations from Taiwan. Only 27.9% had a home network registered in the destination printed on the product. Most seller pages named a different operator than the one the lab found.

This guide covers:

• what that finding means in plain terms,
• where the real risks are (and where they are overstated),
• what a traveler or a business buyer should ask before choosing a plan.

It is written from the travel eSIM side of the market, so we will also say what our own plan pages tell customers today.

What the Taiwan test actually measured #

How the test worked #

CFCT sampled travel eSIMs in August 2026 from different online sales channels, 30 per destination, for Japan, mainland China, South Korea, Hong Kong, Vietnam and Thailand. Eight could not be installed because their QR codes had expired, which left 172 valid samples (CFCT report).

The testing was done by Taiwan's Telecom Technology Center on two Android phones (a Google Pixel 8 and a Samsung Galaxy S26). For each eSIM the lab recorded:

• the home network identity (HPLMN) read from the installed profile,
• the ICCID printed in the purchase details, and the issuing country and issuer derived from it under the ITU-T E.118 numbering standard,
• where a connection was possible, the public IP address the phone received.

Why the HPLMN code matters #

The HPLMN code is the important part. It tells you which network the SIM profile "belongs to," regardless of which tower your phone is using.

• First three digits: the Mobile Country Code (for example 440 for Japan, 450 for Korea, 454 for Hong Kong, 460 for mainland China).
• Next two or three digits: the operator.

The headline numbers #

From the CFCT report and local coverage of the October 6 press conference (CFCT; UDN; Next Apple News; Epoch Times Taiwan; Taiwan News):

• eSIMs with a home network registered in the advertised destination: 48 of 172 (27.9%)
• eSIMs with a home network registered elsewhere: 124 of 172 (72.1%)
• Local home network share, Korea and mainland China groups: 0%
• Local home network share, Japan / Vietnam / Thailand: about 21% / 28% / 37%
• Local home network share, Hong Kong: about 88%
• Distinct home network operators across the sample: 17
• Top three operators' share: 64.5% (China Mobile Hong Kong 56, 3HK 35, HKT/CSL 20)
• Samples whose home network belongs to an overseas subsidiary of China Mobile, China Unicom or China Telecom: 70 of 172 (40.7%)
• Seller page named an operator that differed from the lab result: 118
• Seller page named no operator: 20
• Seller page matched the lab result: 34

Two things headlines tend to blur #

CFCT was careful about two distinctions:

1. Registration and ownership are different things. In CFCT's framing, "where the network is registered" and "which group owns the operator" are separate questions. China Mobile Hong Kong holds a Hong Kong licence and runs a network registered in Hong Kong, but it is part of the China Mobile group. Both facts are true at once.
2. A seller naming a different operator does not automatically mean the page is false. Many pages list the local partner network you will attach to, while the lab measured the network that issued the profile (Next Apple News).

What the test did not prove #

The report lists its own limits, and they matter:

• Testing was done inside Taiwan, so many destination-only plans could not connect. The HPLMN reading does not depend on a live connection, but the full data path abroad was not traced for every sample.
• Each profile was read once, on Android only.
• It was not a data-leak test. Nobody showed that traffic was intercepted.

So the honest summary is narrower than "70% of travel eSIMs are unsafe." It is this: most travel eSIMs in the sample were issued by a network outside the country they were sold for, and most buyers had no reliable way to know which one before paying.

Three layers that a product page collapses into one word #

A travel eSIM product page says "Japan." Underneath, at least three different things can each sit in a different country:

1. The visited network. The Japanese tower and operator your phone attaches to on arrival. This is what your status bar shows.
2. The home network (HPLMN). The operator that issued the profile and authenticates it. In the CFCT sample this was often in Hong Kong, Singapore or elsewhere.
3. The internet exit. The gateway where your data leaves the mobile network and reaches the public internet. This decides your public IP address and which country websites think you are in.

Providers say this openly #

Nomad, one of the larger travel eSIM brands, explains that travel eSIMs connect through roaming agreements, which is why they need data roaming switched on, and that they "will typically route your data back to the home country of that eSIM before you get connected to the internet" (Nomad).

Roamify's own plan pages say the same thing in customer terms. A plan that connects through a roaming partner may give you an IP address registered in another country. That is normal and does not change your allowance, speed or coverage (example: Roamify North America plan FAQ).

Independent research found the same pattern #

A Northeastern University team bought eSIM profiles from 25 providers and tested them from the United States. Presented at the 34th USENIX Security Symposium, their paper reports that "in almost all cases the device's public IP address did not correspond to its physical location," with traffic routed through foreign operators including Chinese and European networks (Motallebighomi et al., USENIX Security 2025; iTnews summary).

If you want the performance side of this story (why the exit location can make video calls feel slow even with full bars), we covered it in What "200+ Countries" Means on a Travel eSIM. This piece is about the other consequences: identity, trust and disclosure.

What a foreign home network actually changes for you #

1. Your IP location, and everything that reacts to it #

Websites and apps do not see your tower. They see your public IP address. If your travel eSIM exits in Hong Kong while you stand in Tokyo, many services will treat you as being in Hong Kong. In practice that can mean:

• Extra security checks. Banks and payment apps often weigh login location when deciding whether to challenge you, and Alertify notes that a foreign IP can trigger extra fraud checks (Alertify). A login from an unexpected country can mean a one-time code, a temporary lock or a call from the fraud team. That code usually goes to your home number, which is one reason to keep your home line active for SMS while the travel eSIM carries data.
• Different content and prices. Streaming catalogs, app store regions, search results and some booking sites can change with IP country.
• Local services that misbehave. Some ride-hailing, government or delivery apps expect a local IP and may limit features without one.

None of this is a security failure. It is a location mismatch, and it is the most common thing travelers actually notice. Roamify's plan FAQs give the practical fix for services that insist on a local address: use a local network or a VPN set to the region you need (Roamify plan FAQ).

2. Who handles your connection metadata #

The home network authenticates the profile, and the operator at the internet exit carries your traffic. Those companies can see connection metadata such as:

• when you connected,
• how much data you used,
• which IP addresses you reached.

That is true of every mobile operator, including your home carrier. What changes with a travel eSIM is how many companies are in the chain, which countries' laws apply to them, and whether you were told.

This is the real point of the Taiwan report. It is less about one country's operators and more about jurisdiction you did not choose because nobody disclosed it.

3. Who can reach you through the profile #

The Northeastern researchers also signed up as resellers on two eSIM platforms and found that a valid email address and a payment method were enough. As a reseller they could:

• see subscriber identifiers (IMSI),
• in one case, see approximate device location (to within about 800 metres, not in real time),
• send SMS to users (iTnews).

That is a seller-quality question, not a protocol flaw, and it is a good reason to buy from a brand you can identify and contact.

What it does not change: the content of encrypted traffic #

It is easy to jump from "routed abroad" to "my card details are exposed." For most everyday use, that jump is wrong. A foreign home network is not, on its own, evidence of a data leak.

• Encryption still protects what you send. Modern banking, payment, messaging and email apps encrypt traffic between your phone and the service, usually with TLS (the "S" in HTTPS). The UK National Cyber Security Centre treats properly configured TLS as the standard way to protect data in transit (NCSC data-in-transit guidance). A network operator on the path can see that you connected to your bank, but not your password or card number.
• An eSIM profile is not an app. Taiwan's own Administration for Cyber Security made this distinction in June 2026. A profile stores a number and encrypted telecom credentials and does not, by itself, read your photos, contacts, passwords or chats. The risk sits with the seller and the path your data takes, and mainly affects unencrypted traffic (Taiwan News, June 28 2026).

So the sensible stance is neither panic nor dismissal:

• For maps, messaging, rides and normal browsing, the routing layer mostly shows up as an IP-location quirk.
• For confidential corporate work, regulated data or anything you would not send over hotel Wi-Fi, where your traffic exits and under whose rules becomes a real buying criterion.

The bigger risk is often the app, not the profile #

The Taiwanese cyber agency's most practical advice was about companion apps. Some cheap eSIMs require a separate app to activate. If that app asks for contacts, photos, Bluetooth or precise location, treat it with suspicion, and only install apps from Google Play or Apple's App Store.

The agency's warning signs of trouble:

• unexpected verification codes,
• login alerts from unfamiliar places,
• sudden spikes in data use.

If you see them, the agency recommends disabling the eSIM, removing the profile and app, and changing key passwords (Taiwan News).

A legitimate travel eSIM does not need access to your photo library to give you data.

The data roaming switch is a clue, not a verdict #

CFCT offered one simple check: if you must turn on Data Roaming for the eSIM to work, the plan almost certainly uses a roaming architecture rather than being issued by a local operator (UDN). That is true for the vast majority of travel eSIMs, including ours.

But the foundation also stressed that roaming is not the same as a security problem, and the switch alone does not tell you which countries your data passes through (Next Apple News). It tells you that the three layers above are probably not all in one country. It does not tell you where they are.

How to check what you actually bought #

You do not need lab equipment for a rough picture.

• Public IP country: With Wi-Fi off and the travel eSIM selected for data, open any "what is my IP" page. The country shown is where websites think you are.
• Home network (Android): Free cell-info apps can show the HPLMN (MCC and MNC) of the installed profile. CFCT used one such public app. iOS restricts this information, so iPhone users usually cannot read it directly.
• Network name vs issuer: The carrier name in your status bar is the visited network. It does not tell you who issued the profile.

Questions worth asking any seller (including us) #

The CFCT recommendations and Alertify's analysis of the report point to the same disclosure list (Alertify, Oct 7 2026). Before you buy, a good seller should be able to answer:

1. Which local networks can this plan use in my destination?
2. Which operator or platform issues the profile (the home network)?
3. Does traffic use home routing, local breakout or a regional gateway?
4. What IP country or region should I expect?
5. Can routing change between destinations, suppliers or top-ups?
6. Does activation require a separate app, and what permissions does it need?

If a seller cannot answer the first three, that tells you something too. If you are a Roamify customer and need these details for a specific plan, ask our support team before you travel.

Which option fits which traveler #

• Maps, messaging, rides, social, normal browsing: A reputable travel eSIM is fine. Expect a possible foreign IP and keep your home line on for SMS codes.
• Banking and payments while away: A travel eSIM plus your bank's official app (TLS encrypted). Expect an occasional location check. Prefer the bank's official app over a browser on unknown networks.
• A local IP for a specific service: A plan or feature that offers local or chosen IP exit, a local operator eSIM, or a VPN set to the right region.
• Confidential corporate or regulated data: Company VPN as standard, plus either your home carrier's roaming or a destination operator's own eSIM if policy requires a known jurisdiction. Taiwan's agency and CFCT both point high-sensitivity users this way.

Some brands are already turning the routing layer into a product feature:

• Ubigi offers an IP location option that lets eligible customers choose between a regional IP and one from their country of residence, currently for residents of ten countries including the US, UK, Japan and Germany (Ubigi).
• Saily offers a virtual location feature that reroutes traffic through selected servers (Alertify).

These are useful, but they solve IP location, not disclosure of who issued the profile.

Why this matters for the travel eSIM market #

For years, travel eSIM brands competed on price per gigabyte, "unlimited" plans and country counts. The Taiwan test suggests the next competitive line is network transparency.

A ready-made disclosure template #

There is a regulatory edge to it. CFCT asked Taiwanese authorities to make the following part of the mandatory terms for online retail sales, enforceable under the island's Consumer Protection Act (Epoch Times Taiwan):

• the actual operator,
• whether the plan uses roaming,
• the data transmission architecture,
• any third locations traffic may pass through.

Whether or not that happens in Taiwan, it gives every market a ready-made template.

What sellers can do now #

For sellers, the honest response is cheap:

• publish the home network and expected IP country per plan,
• separate "networks you can attach to" from "who issues the profile,"
• stop using "native local network" language when the profile is issued elsewhere. CFCT found products making exactly that claim (Next Apple News).

What travelers should take from it #

The takeaway is simpler. A travel eSIM is still one of the easiest ways to get data abroad. Just know that "Japan eSIM" describes where it works, not necessarily who runs it or where your traffic leaves.

Practical takeaways #

• A travel eSIM usually involves three places: the visited network, the home network that issued the profile, and the internet exit. They are often in different countries.
• In Taiwan's 172-eSIM test, 72.1% had a home network outside the advertised destination, and only 34 seller pages matched the lab result.
• A foreign home network mostly changes your IP location and who handles metadata. It does not expose encrypted app traffic, and it is not proof of a data leak.
• Banking works, but expect occasional location checks. Keep your home line on for SMS codes.
• Be wary of activation apps that want photos, contacts or precise location.
• If you need a known jurisdiction or a local IP, ask the seller about home network, routing and IP country before you buy, or use a local operator eSIM or a VPN.

FAQ #

Is a travel eSIM safe for online banking? #

For most travelers, yes. Banking apps encrypt traffic, so the networks in the path cannot read your credentials. You may see more security prompts because your IP country can differ from your physical location. Avoid entering sensitive details on unencrypted sites on any network.

Why does my travel eSIM show an IP address from another country? #

Because most travel eSIMs work through roaming agreements, and traffic often exits through the issuing network's gateway or a regional hub. Your phone uses a local tower, but websites see the exit location.

Does turning on data roaming for a travel eSIM cost extra? #

Not with the travel eSIM itself, as long as the plan is active. Roamify's plan FAQs state that turning it on for an installed eSIM does not add charges (Roamify plan FAQ). The roaming switch is needed because the plan is technically roaming on a partner network. Keep data roaming off on your home line if you want to avoid home carrier charges.

Can my travel eSIM provider read my messages? #

Not the content of end-to-end encrypted apps or HTTPS traffic. Operators in the chain can see connection metadata, which is why it is worth knowing who they are.

How do I find out which network issued my eSIM? #

On Android, a cell-info app can show the profile's home network code (MCC and MNC). On iPhone this is usually not visible. The simplest route is to ask the seller before you buy.

Where Roamify fits #

Roamify is a travel eSIM, and like most travel eSIMs, our plans connect through roaming partners. That is why you switch on data roaming for the eSIM, and why your IP address may show another country. Here is what we can say plainly:

• Plans cover 200+ destinations, starting from $2, with an average of $1.75 per GB.
• We work with 358+ network operators worldwide.
• You can top up an active eSIM instead of buying a new one.
• Everything is managed in our iOS and Android apps.
• Call and SMS plans are available in almost all countries (Japan is the exception).

If you need to know the home network, routing or expected IP country for a specific plan before you travel, ask our support team. Those are fair questions, and you should get a straight answer from any seller.

How this piece was put together #

Who: Written by the Roamify editorial team.

How: We built this guide from public primary sources and published provider documentation. We did not repeat the lab test ourselves. Figures are as published by those sources on the dates shown.

Sources: the Consumers' Foundation, Chinese Taipei test report (October 6, 2026), Taiwan's Administration for Cyber Security guidance as reported by Taiwan News, the Northeastern University USENIX Security paper, provider documentation from Nomad and Ubigi, UK NCSC guidance, and Alertify's market analysis.

Sources #

• CFCT test report (Oct 6 2026, primary)
• UDN (Oct 6 2026)
• Next Apple News (Oct 6 2026)
• Epoch Times Taiwan (Oct 6 2026, operator counts and Consumer Protection Act Art. 56-1)
• Taiwan News (Oct 7 2026)
• Taiwan News, Administration for Cyber Security guidance (Jun 28 2026)
• Alertify (Oct 7 2026)
• Motallebighomi et al., Northeastern University, USENIX Security 2025
• iTnews summary
• Nomad
• Ubigi IP location
• UK NCSC data-in-transit guidance