Back to blog
Guides

Why WeChat, Alipay and Bank Apps Break With a VPN On (2026)

A full VPN makes Chinese apps think you are abroad, so payments fail and everything slows. Smart routing keeps WeChat and Alipay local and the rest goes abroad.

Updated October 2026.

The short answer

A VPN in "global" mode sends every app abroad, so WeChat, Alipay, bank and delivery apps see a foreign connection. Payment and identity checks can fail, apps can show the wrong place, and Chinese content takes the long way round. Smart routing on a router fixes this: Chinese services use your normal line and international ones go through Throughwire, automatically, for every device.

Table of contents

Why do Chinese apps act up when a VPN is on?

Most VPN apps start in a "global" mode: every connection from your phone or laptop leaves China through the VPN, including connections to apps that live in China. That causes four separate problems.

1. The app thinks you are abroad. With a global VPN on, the internet address an app sees belongs to a server outside China. Any app that uses your address as a clue to where you are now sees a foreign one.

2. Payment and identity checks get stricter or fail. Payment and banking apps watch for unusual logins, and a sudden foreign address is one. Trip.com's payments guide (September 2026) says Alipay and WeChat Pay check your IP address during authentication, that a foreign or VPN address can end a transaction silently, and its advice is to turn the VPN off before paying. Chinese bank apps can ask for extra verification for the same reason.

3. Maps, delivery, ride and video apps can show the wrong place. Phones mostly use GPS for your position, but some apps also use your internet address to choose a city, a region or a catalogue. With a foreign address, a delivery app can open on the wrong city, and Chinese video apps can treat you as an overseas viewer.

4. Everything gets slower and costs data. A photo a colleague sends you on WeChat from the same street now travels abroad and back again, crossing the border twice. If your VPN has a data allowance, that round trip counts against it too.

The result is a habit many people in China will recognise: switch the VPN off to pay or order food, then forget to switch it back on before the next video call.

What is smart routing?

Smart routing (also called China-direct split routing) looks at where each connection is going and picks the right path for it:

  • Chinese services go direct. They use your normal China Telecom, China Unicom or China Mobile line, exactly as if no VPN were installed. They see your real Chinese connection.
  • International services go through Throughwire. Google, Slack, Zoom, ChatGPT and the rest use the encrypted international connection.
  • Anything not identified as Chinese goes through Throughwire, so new international sites work without anyone changing settings.

It happens automatically, with no switch to press. And because it works by destination rather than by app, the same app can use both paths: WeChat's own chats and payments go direct, while a YouTube link you open inside WeChat goes through Throughwire.

Traffic to Chinese services doesn't pass through our servers, and it doesn't use your Throughwire data allowance. Only international traffic counts.

What stays local, what goes through

These examples come from our routing list (catalog version 2026.10). You can look up any website or app on our routing page.

What you're doingStays on your normal lineGoes through Throughwire
Messaging and callsWeChat and WeCom, QQ, DingTalkWhatsApp, Slack, Zoom, Microsoft Teams, Discord
Paying and bankingAlipay, UnionPay, Chinese bank appsPayPal, Wise and other international payment sites
Shopping and foodTaobao and Tmall, JD.com, Pinduoduo, Meituan and Dianping, Ele.meAmazon and other international shops
Getting aroundDidi, Amap, Ctrip and Trip.comGoogle Maps
Video and socialDouyin and Toutiao, Kuaishou, Bilibili, iQIYI, Youku, Tencent Video, Xiaohongshu (RED), WeiboYouTube, Netflix and Disney+, Instagram and Facebook, X, TikTok, Reddit, Spotify
Work and AIAlibaba Cloud, Baidu, NetEase, KimiGoogle Search, Gmail and Workspace, Microsoft 365, ChatGPT, Claude, GitHub, Dropbox, LinkedIn, Moonshot AI international login
Phones, devices and gamesApple services, Xiaomi, Huawei, Microsoft China support, Steam ChinaGoogle Play and other international app stores

A few details people ask about:

  • Chinese bank apps are not listed one by one; they are caught by the broader China domain and IP lists, as are most other Chinese sites.
  • Douyin stays local; TikTok goes through. They are separate services from the same company. The same goes for Kimi (local) and Moonshot AI's international login (through).
  • Streaming services still apply their own account and region rules.

On your phone or on a router?

Automatic smart routing is a router feature. The apps are the simpler, portable option, but they work differently.

In the app. Throughwire uses the free, open-source Hiddify app on iPhone, iPad, Android, Mac, Windows and Linux. You sign in, copy your subscription link, paste it into the app and connect. Personal plans cover up to 3 app devices. The app carries your international traffic, but we don't promise it will keep Chinese apps on your local line: Hiddify's own China option depends on lists it downloads from GitHub, which can fail inside China. If WeChat Pay or a bank app acts up while the app is on, pause it for that payment, or use a router.

On a router. A supported GL.iNet router, or one running OpenWrt 24.10 or 25.12, applies smart routing to every device on its Wi-Fi: phones, laptops, smart TVs, game consoles and meeting-room screens, with nothing to install on them. You set it up once from a Mac or Windows laptop, and it refreshes its China lists and keeps itself updated. Home router setup is included on Personal plans and office router setup on Team plans. See which GL.iNet router to buy, our home router page and our router setup for teams.

A router is the bigger change for a household or office, because nobody has to remember anything. Guests, children's tablets and the TV just work, and WeChat Pay at the corner shop works the same on the home Wi-Fi as on mobile data.

A Chinese app still acts up: troubleshooting checklist

Work down this list. Most problems end in the first three steps.

  1. Look the app up. Type its web address (for example alipay.com) on our routing page. If it says "Direct in China", our routing is not sending it abroad.
  2. Pause Throughwire for one try. Disconnect in the app, or join your provider's original Wi-Fi instead of the router's. If the problem stays, the cause is the app, the bank or the line, not the routing.
  3. Close any other VPN or proxy app. Two running at once compete, and the other one may be in global mode.
  4. Check the mode in other apps. If you use our link in Shadowrocket or v2rayN, choose the rule-based mode (some apps call it "bypass mainland"), not a global mode.
  5. Leave DNS on automatic. A DNS server typed in by hand on a phone or laptop, especially a foreign one, can point Chinese apps at servers far away.
  6. Refresh. Update the app, refresh your subscription in Hiddify, or restart the router. Routers also refresh their China lists automatically.
  7. Payment still failing? Rule out the non-network causes in Trip.com's guide: a foreign card used on a personal QR code, your home bank blocking the charge, a bank SMS code that never arrives, or a payment limit.
  8. Wrong city in a delivery or ride app? Check the app's location permission and pick your city again. GPS decides where you are.
  9. Tell us. Send us the app's name, what you tapped and the time. If one of its addresses belongs on the direct list, we can review it.

When Throughwire isn't the right choice

  • You only use Chinese apps. You don't need a VPN at all.
  • You need one international app now and then. A cheaper app VPN that you switch on only when needed may be enough, as long as you remember to switch it off for payments.
  • You want Chinese apps to see a foreign address on purpose, for example to test how your own app looks to overseas users. Smart routing is designed to do the opposite.
  • Your company needs a licensed cross-border line for compliance. Our guide to office internet options in China explains when that is the right answer.

Common questions

Do I need to turn off my VPN to pay with Alipay or WeChat Pay?

Not with smart routing. Alipay and WeChat go direct, so they see your normal Chinese connection while the rest of your phone uses Throughwire. If a payment still fails, check the card, QR code and bank causes in the checklist above.

Does WeChat use my Throughwire data?

No. WeChat and WeCom go direct in China, and direct traffic doesn't count against your allowance. Only international traffic does, and traffic on the Ultra routes counts at 2.5 times.

Is smart routing the same as split tunnelling?

It is the same idea, done automatically. Split tunnelling usually means you choose which apps use the VPN. Smart routing chooses by destination, using lists of Chinese websites and Chinese internet addresses, so you don't have to maintain anything.

What if a Chinese app I use isn't in the table?

The table shows well-known examples. Our full routing policy contains 154,707 compiled domain and IP entries (catalog 2026.10), so most Chinese sites are caught by the broader lists. You can check any address on the routing page.

Does smart routing work on my iPhone without a router?

Not reliably. Our automatic China-direct routing runs on the router, where we load and refresh the China lists ourselves. The Hiddify app on iPhone and iPad ("Hiddify Next" on the App Store) carries your international traffic well, but if a Chinese app misbehaves while it is on, pause it briefly. At home or in the office, a router handles this for every phone on the Wi-Fi.

Details for your IT team

  • Routing is by destination. Domain rules (international overrides, curated China-direct domains, international domains, broader China domains) are checked before mainland China IP ranges. Anything unmatched uses the tunnel.
  • China IP ranges are limited to mainland allocations, so Chinese cloud providers' overseas regions use the tunnel.
  • On routers, international domain names are resolved through the tunnel and Chinese names through the local resolver. QUIC (HTTP/3) to international sites is blocked so browsers fall back to HTTPS over TCP; BitTorrent goes direct.
  • The router engine is sing-box with VLESS-REALITY. The Hiddify app is also sing-box based.