China’s Big Three Carriers End Third-Party Online SIM Sales

China Mobile, China Telecom, and China Unicom stopped third-party online SIM card ordering on August 1, following coordinated notices issued one day earlier.

The change removes outside websites, stores, mini programs, livestream sellers, and independent distributors from a sensitive part of mobile customer acquisition. Online customers must now order through carrier-controlled apps, websites, and other official channels.

A 36Kr newsflash, citing CCTV News, said the carriers framed the decision around consumer rights and data security. The announcement is short, but its implications extend far beyond a routine sales-channel adjustment.

The central conflict is control versus reach. Third-party distributors helped carriers find customers and market specialized data plans. They also placed identity documents, facial verification, delivery information, and activation steps across a fragmented chain of outside businesses.

The new policy pulls that chain back toward the operators. It gives them greater control over personal data and identity checks, but it also removes a broad distribution network that supported aggressive online competition.

What the Carriers Changed on August 1

Online SIM card ordering has moved from a distributed sales model to a carrier-controlled process.

The three carriers published notices on July 31 and made the new arrangement effective on August 1. Customers seeking a new mobile number online must use an operator’s official app, official website, or another operator-controlled channel.

Third-party internet channels can no longer provide services for ordering the carriers’ mobile phone cards. The public notice focuses on where an order can be completed, rather than banning online orders themselves.

That distinction matters. China is not forcing every customer into a physical retail store. It is narrowing online fulfillment to channels where the carrier directly controls the transaction and its identity-verification workflow.

Under the previous model, a customer might discover a plan through an ecommerce listing, social account, livestream, mini program, or specialized distributor. The seller could guide the customer through selection, data collection, shipping, activation, or several of those steps.

The exact division of responsibilities varied between channels. Some businesses acted mainly as marketing affiliates, while others operated more complete ordering flows under carrier authorization.

That diversity made online distribution flexible. It also made responsibility harder to follow when a plan was misrepresented, personal data was mishandled, or a card was activated under questionable circumstances.

Earlier reporting about the planned change described a broad cleanup of outside online sales touchpoints. The reported restrictions covered third-party pages, mini programs, short-video channels, livestreams, ecommerce stores, and private distribution networks.

That earlier channel report relied partly on documents circulating online before the carriers issued their public notices. Its unverified financial estimates should therefore be treated cautiously.

The July 31 announcements provide a firmer basis for the core claim. Online ordering remains available, but the transaction now needs to occur inside an official carrier environment.

The change also appears broader than simply revoking permission from unauthorized sellers. Many third-party channels previously operated with some form of operator agreement or platform-level qualification.

For example, Kuaishou’s published rules previously required eligible phone-card merchants to provide operator agreements and real-name sales authorization. The platform described the category as restricted rather than open to any seller.

Those platform qualification rules show that third-party distribution was not automatically informal or unauthorized. The new policy replaces that qualification model with direct channel control.

The most important fact is therefore not that carriers are fighting obviously illegal SIM sales. They are withdrawing legitimate online ordering functions from outside channels as well.

That creates the article’s main tension. A compliance problem once managed through contracts, seller qualifications, and enforcement is now being addressed through channel consolidation.

Why SIM Ordering Became a Data-Security Problem

A mobile number is both a communications service and a credential used across banking, social media, commerce, and workplace systems.

Opening a mobile account requires more than choosing a data allowance. The process can involve a legal name, identification number, identity-document image, address, phone number, payment information, and facial verification.

Each additional company in the ordering chain creates another place where that information can be viewed, transmitted, stored, copied, or processed incorrectly.

A carrier-controlled channel does not eliminate these risks. It reduces the number of organizations directly involved in the application and gives the operator clearer authority over system design, access controls, retention, and incident response.

The security concern also extends beyond privacy. Fraud networks depend on telephone numbers for calls, text messages, account registration, verification codes, and contact with potential victims.

China’s Anti-Telecom and Online Fraud Law requires telecom operators to verify the real identity of phone users. It also prohibits the illegal sale, rental, or lending of telephone cards.

The law further prohibits helping another person bypass real-name verification. Its official English legal text places telephone cards alongside payment and internet accounts within a shared anti-fraud framework.

A fragmented sales network complicates that framework. A carrier can set identity rules, but a distributor still influences how customers encounter those rules and how their information reaches the operator.

Weak supervision can create several failure points. A seller might exaggerate a plan, collect information through an unofficial form, submit applications without adequate consent, or encourage applications designed to evade normal controls.

Even compliant partners face operational risk. Their employees, contractors, advertising systems, customer-service tools, and cloud providers can expand the data path around a single SIM order.

China has spent years tightening telephone real-name registration. A 2016 policy required operators to hold commissioned sales channels responsible for registration violations.

That policy called for removing agents involved in missing registrations, false registrations, bulk card opening, or card farming. The channel enforcement policy shows that agent oversight has long been part of China’s anti-fraud system.

The August 1 change takes a more structural approach. Instead of relying only on auditing and punishing partners, the carriers are removing outside ordering from the approved online model.

Recent regional enforcement adds context. In July, Jilin’s communications authority announced a campaign targeting cards associated with identity mismatches, excessive registrations, stockpiling, and card farming.

The Jilin campaign includes secondary verification notices and possible restrictions when users fail required checks. It cites anti-fraud, privacy, and real-name registration rules.

That campaign is separate from the nationwide channel notices. Together, however, they show the same direction of travel: reduce ambiguity between the registered customer and the person controlling the card.

This helps explain why the carriers acted together. If only one operator removed third-party ordering, distributors and price-sensitive customers could move toward the other two.

A coordinated shift prevents sales-channel controls from becoming a competitive disadvantage. It also gives online platforms a consistent rule across the three largest network operators.

Official Channels Gain Control as Distributors Lose Reach

The policy transfers leverage from external distributors to carrier-owned apps, websites, and customer-service systems.

Third-party sellers previously offered the carriers something difficult to reproduce centrally: countless small points of discovery across ecommerce, social media, private groups, and specialized online communities.

A distributor could target students, remote workers, delivery drivers, travelers, heavy data users, or residents seeking plans available beyond their home province. Marketing could move quickly and adapt to narrow customer segments.

The carriers benefited from that reach even when the seller owned the customer relationship at the point of discovery. Affiliates and agents absorbed parts of the marketing, explanation, and conversion process.

That structure also encouraged complicated competition. Sellers could emphasize headline data allowances while placing activation conditions, promotional periods, geographic limits, or renewal details deeper in the offer.

Customers sometimes struggled to determine whether a page represented the operator, an authorized agent, a reseller, or an unrelated lead-generation business.

The August 1 policy simplifies one question: where can a new card be ordered online? For the three carriers, the answer is now an official channel.

It does not necessarily solve every discovery problem. Promotional content can still circulate outside an operator’s systems, and unofficial sellers can continue making misleading claims without actually completing valid orders.

Enforcement will therefore depend on the boundary between advertising and ordering. A third party might publish information, then redirect the user to an operator-controlled page.

That arrangement would preserve some affiliate marketing while keeping identity information and fulfillment inside the carrier’s environment. The public notices do not fully explain whether such referral-only models remain acceptable.

They also leave questions about customer support. Existing users who obtained cards through third parties still need plan details, billing help, cancellation assistance, and dispute resolution.

Carriers will need to make those customers visible inside official service systems. Otherwise, removing the original distributor could increase confusion for people already using these plans.

The immediate pressure falls hardest on businesses built around completed applications rather than simple traffic referrals. Their value came from converting attention into activated accounts.

Ecommerce platforms also lose a category that connected product search with telecommunications fulfillment. Mini-program operators and private-domain sales teams face a similar loss.

The carriers accept a burden in return. Their official apps and websites must now handle demand previously distributed across numerous sellers.

That means maintaining plan discovery, eligibility checks, identity verification, payment, shipping, activation, and post-sale support at greater scale. A controlled process still fails users if it is difficult to navigate.

The three carriers also need to preserve enough plan visibility to prevent unofficial marketing from filling the information gap. Standardized descriptions and accessible terms will matter more after outside sellers disappear.

China’s telecom market remains competitive, but the location of that competition changes. Operators can still compete on plans, coverage, service, and digital experience.

What shrinks is the outside layer that packaged those offers into a sprawling online sales market. The carrier becomes both network provider and mandatory digital storefront.

The Tradeoff Is Safer Onboarding Versus Less Choice

Centralization improves accountability, but it can also reduce comparison, experimentation, and access to niche offers.

The case for direct control is straightforward. Carriers are ultimately responsible for real-name registration, account security, billing, and network access.

When an outside seller causes a problem, customers rarely distinguish between the agent and the operator behind the card. The carrier inherits the complaint and the reputational damage.

Direct ordering gives the operator a cleaner record of what the customer saw, accepted, and submitted. It can standardize consent language and reduce the movement of identity documents between businesses.

It can also make technical monitoring more consistent. A carrier can connect application risk signals, registration limits, device information, delivery records, activation results, and later account behavior.

However, official control should not be confused with automatic safety. Central systems can still be breached, misconfigured, abused by insiders, or designed with excessive data collection.

The new model reduces exposure to third parties. It does not answer every question about carrier data retention, facial verification, automated risk scoring, or customer appeal mechanisms.

Consumers also lose some independent comparison at the transaction stage. Third-party sellers often assembled plans from multiple operators or explained offers for a specific type of user.

Official apps naturally prioritize the operator’s own catalog. Customers must move between separate systems to compare coverage, contract terms, data allowances, and eligibility.

Niche plans present another uncertainty. Some online offers were designed for specific regions, occupations, devices, or usage patterns and reached customers through specialized distributors.

The carriers can migrate these offers into official stores. They can also simplify their catalogs and discontinue products that depended on agent-led acquisition.

Neither outcome was specified in the notices. Users should not assume every previously marketed plan remains available through an official app.

Access is another concern. A highly controlled digital process can create friction for older adults, foreign residents, people with accessibility needs, or users whose documents fail automated checks.

Physical carrier stores remain an alternative, but that does not fully replace a broad online assistance network. Customers in less convenient locations may face more work when an automated application fails.

There is also a competitive-policy question. The three carriers announced substantially aligned channel restrictions at the same time.

Coordination can establish a consistent security baseline, but it also removes channel strategy as an area of competition. Customers cannot choose an operator that retains a more open distribution model.

The cautious conclusion is that the policy changes who carries the risk. Third-party exposure declines, while operational responsibility concentrates inside the carriers.

Whether consumers benefit will depend on execution. Safer data handling, clearer plan terms, and reliable support would strengthen the carriers’ case.

A smaller catalog, weaker comparison, or unresolved service problems would reveal the cost of consolidation. The notices establish the new boundary, but customer outcomes will determine its value.

What Customers and Businesses Need to Do Now

Anyone ordering a new SIM online should verify that identity submission and payment occur inside a carrier-controlled service.

For individual customers, the safest first step is to begin with the official app or website of China Mobile, China Telecom, or China Unicom.

A social post, search result, advertisement, or private message should no longer be treated as a valid ordering destination. Even a familiar seller cannot complete the carrier’s online SIM application under the new rule.

Users should pay close attention to redirects. A legitimate referral might lead to an official carrier domain or app, but a copied page can imitate carrier branding.

The final ordering environment should clearly identify the operator and provide its privacy terms, customer-service route, and transaction record.

Customers should avoid sending identity-card images, facial-verification videos, bank information, or verification codes directly to a salesperson. Those materials create immediate identity and account risks.

Anyone with an unfinished order should check its status with the relevant carrier. The public announcement does not detail how every pending third-party application will be handled.

The operator can confirm whether the application entered its system, whether identity verification was completed, and whether a card was issued.

Existing customers do not need to assume their SIM cards stopped working on August 1. The announcement concerns third-party online ordering services, not a blanket cancellation of cards previously sold through agents.

Still, those users should move future account management into official channels. They should verify the registered owner, plan terms, billing details, and customer-service options with the carrier.

A mobile number also needs careful handling when it is replaced or canceled. It may remain connected to banking, social media, messaging, commerce, and workplace accounts.

Chinese communications authorities have advised users to unlink those services before cancellation and destroy discarded SIM cards. This reduces the risk that a reassigned number exposes old accounts.

For third-party distributors, the immediate task is to stop collecting application data and completing orders. Keeping old forms or automated workflows online could create both compliance and privacy problems.

They also need a plan for previously collected personal information. A shutdown does not remove obligations involving access control, retention, deletion, and customer requests.

Businesses that acquired customers for carriers should separate three activities: publishing information, referring traffic, and processing applications.

The first two might survive in a revised relationship, depending on operator rules. The third now belongs inside official carrier channels.

Online platforms need to review category rules, merchant pages, mini programs, advertising creatives, and embedded forms. Listings that appear active after August 1 can mislead users even if checkout no longer works.

Platforms should also expect impersonation attempts. When legitimate merchants disappear from a category, fraudulent sellers can exploit customer confusion by claiming special authorization.

Enterprises buying larger numbers of connections should not assume the consumer notice governs every corporate or Internet of Things arrangement in the same way.

They should ask their operator about the applicable business channel, authorized account representative, identity requirements, and fulfillment process.

Mobile virtual network operators also require separate analysis. The July 31 announcement specifically concerns the three basic operators and their card-ordering channels.

A virtual operator may have its own licensed service model and sales rules. Customers should identify the actual service provider rather than applying the new restriction to every mobile brand.

Three Signals Will Show Whether the Policy Works

The next test is not whether third-party checkout pages disappear, but whether official channels absorb their users without recreating the same risks elsewhere.

The first signal is the carriers’ treatment of referral traffic. Clear rules should distinguish permitted advertising from prohibited ordering and personal-data collection.

If operators publish standardized referral methods that keep applications inside official systems, part of the old distribution network can survive safely.

If the boundary remains vague, sellers may rebuild ordering flows through redirects, embedded pages, private messages, or loosely supervised lead generation. That would weaken the centralization promised by the notices.

The second signal is the official channel experience. Customers need searchable plans, visible eligibility rules, understandable terms, accessible identity checks, and dependable help when automation fails.

A rise in unresolved orders or complaints would suggest that third-party networks performed support functions the operators underestimated.

Better disclosure and faster dispute resolution would support the opposite conclusion. They would show that direct control improved both security and service.

The third signal is enforcement against disguised third-party sales. Platforms can remove obvious checkout pages, but private groups, livestreams, and short-video promotions are harder to monitor.

The important evidence will come from platform rule changes, carrier warnings, regulatory actions, and visible removal of forms that collect identity information outside official channels.

Effective enforcement would reinforce the carriers’ claim that consolidation protects users. Persistent unofficial sales would show that changing contracts and announcements cannot remove underlying demand.

Longer term, the policy may influence how other identity-sensitive services use distribution partners. Telecom accounts are unusually important because mobile numbers unlock so many other digital services.

Banks, payment providers, and online platforms face similar questions about how far onboarding can be delegated without losing control of identity data.

For the three carriers, the immediate calculation is narrower. They traded reach and sales flexibility for direct custody of the online application.

That trade looks defensible under China’s anti-fraud framework, but its success is not guaranteed by the August 1 deadline.

Watch where a customer submits identity data, which plans remain available, and who resolves a failed application. Those details will reveal whether the change delivers safer onboarding or merely a smaller sales network.

For readers following the original 36Kr coverage, the lasting story is not the feed that surfaced the alert. It is the carriers’ decision to make official systems the only online doorway for new SIM orders.

Customers should now verify that doorway before sharing any personal information. Businesses should map every remaining handoff in their sales process and remove any step that resembles third-party ordering.