An eSIM QR code looks harmless, which is exactly why people put it in screenshots, email threads and photo libraries without thinking. It is better to treat the installation information as a credential.
Do not publish installation codes
Avoid posting the QR in social media, public support forums or shared group chats. If the QR is still valid, someone else may attempt to use it. Share the order reference with support first; only provide activation details through the support channel when necessary.
Use a normal device lock
The eSIM lives on a phone that also contains email, banking apps, tickets and identity documents. A strong screen lock, current OS version and device-finding feature matter more to travel security than any exotic eSIM setting.
Watch for fake support requests
A legitimate support process should not ask for your full card number, banking password or one-time bank login code. Payment is handled by the payment processor; troubleshooting an eSIM should focus on the order, device and connectivity settings.
Be cautious on public Wi‑Fi
Airport and café Wi‑Fi can be convenient, but verify the network name and avoid assuming the captive portal proves a network is trustworthy. Once your travel eSIM is working, mobile data can be a simpler option for sensitive tasks.
Delete only when the trip is truly over
Removing a profile can be irreversible for some products. Disable the line first if you simply want it inactive. Delete only when you know the plan is finished and you will not need support to reconnect it.
Check device compatibility, carrier lock, destination coverage, high-speed allowance and fair-use conditions. Price is only one part of the decision.
See destinations →