What is an eSIM: the plastic card was never the account

What is an eSIM: the account moved into software while the secure chip stayed in the phone. You already felt it if a US iPhone arrived with no tray, or if a travel pack told you to scan a code in the jetway instead of hunting a kiosk. The plastic rectangle was never “your number.” It was a removable copy of credentials the carrier also keeps. eSIM just stopped pretending you needed the copy in your wallet.

GSMA, the same trade body behind RCS, wrote the consumer remote-SIM-provisioning spec (SGP.22). Their overview is here: What is eSIM.

The chip and the profile

Two pieces, always.

The eUICC is hardware: a tamper-resistant element that can hold more than one operator profile. Apple publishes that recent iPhones can store several eSIMs and run two active at once. Android flagships vary by OEM. The chip does not care which logo is on the status bar.

The profile is the download: IMSI, keys, network access rules. That file is built on the operator’s SM-DP+ (Subscription Manager Data Preparation). The phone’s LPA (Local Profile Assistant) pulls it over TLS, installs it, enables it. iOS hides the LPA in Settings. Android may use the system LPA, an OEM skin, or a carrier app. Same dance, uglier menus.

Physical SIM and eSIM authenticate the same way once they are live. You did not get a weaker radio. You got a different delivery truck.

How the QR code works

The code is an activation address, usually an SM-DP+ FQDN plus a matching ID. It is not the SIM. Anyone who scans a unused code first can steal that install. Treat it like a one-time pairing token. Do not post it in a group chat. Do not let a “helpful” airport stranger scan it for you.

Carrier app / SM-DS (discovery service) can skip the QR entirely: you sign in, the phone asks the discovery server, the profile shows up. That is cleaner until the app is a 400 MB clone of the carrier’s website.

Activation needs data. Catch-22 on a new phone: you need internet to fetch the profile that gives you internet. Use Wi-Fi, the other line, or the old phone as a hotspot. A Wi-Fi 7 lounge AP does not change that. It only makes the download less sad: Wi-Fi 7.

Home line plus travel

This is why people actually switch. Keep the US/Canada number on eSIM one. Park a local or travel-data profile on eSIM two. Voice and iMessage stay on the home line if you set it that way. Data rides the cheap pack. Incoming SMS for bank codes still hit the home IMSI, which is the whole point of not porting the number to a tourist SIM.

Travel eSIMs are prepaid data profiles from a reseller who wholesale-roams. Coverage is the partner network, not magic. Read the country list. “Unlimited” with a 1 Mbps fair-use cap after 3 GB is a cap. The QR still works if the SM-DP+ is up; it does not fix a dead partner in rural Oaxaca.

Roaming on the home carrier can be cheaper than a third-party pack for a weekend. Do the arithmetic once. The eSIM does not care.

Moving phones

iPhone to iPhone, same carrier, Quick Transfer or eSIM Carrier Activation is often a few taps. Bluetooth, both unlocked, don’t yank the old profile first.

Apple’s current Android → iPhone path (iOS 26, some Android 16 devices, some carriers): Settings → Cellular → Add eSIM → Transfer from Android, scan or type the pairing codes. When it finishes, the Android line is dead. Apple’s own page: Transfer your eSIM from Android to iPhone. If the menu is missing, the carrier did not turn the feature on. You get a new QR from them. That is not you failing. That is SGP.22 meeting a billing system from 2011.

iPhone → Android is the same story in reverse, still carrier-gated. Do not factory-reset the donor until the new radio shows bars and you can place a call. Profiles can be one-shot.

Lost, stolen, wiped

A stolen plastic SIM could be popped into another phone. An eSIM does not ride along unless the thief also has your Apple ID / PIN and the carrier’s transfer flow. That is better. It is not a vault.

You still call the carrier (or use their app) to suspend and re-issue. There is no tray to mail. If you deleted the profile in Settings because “I’ll re-scan the screenshot,” many operators will not let that QR work twice. You are in a 45-minute hold queue. Keep the account PIN written down somewhere that is not the phone.

Watch pairing (Apple Watch cellular) uses extra entitlement servers. Killing the phone eSIM can orphan the watch. Do the watch first or read the carrier’s watch SOP. This is the part forums skip.

RCS and Wi-Fi

RCS and Wi-Fi calling bind to a line. Dual eSIM means dual IMS registrations. The default voice line is the one that gets RCS. If travel data is “default data” and the home line is “default voice,” Messages may look fine until Android friends stop getting receipts. We already unpacked that stack: what is RCS.

A travel eSIM that is data-only will not magically carry iMessage. iMessage follows the Apple ID and SMS fallback number you configured. Set Send & Receive addresses before you board.

Passkeys stay on the device, not on the SIM. Swapping eSIMs does not move Face ID credentials. Different locker: what is a passkey.

When plastic still wins

A prepaid stall that only sells nano-SIM. A work MDM that forbids eSIM. A rural carrier whose eUICC whitelist does not include your Chinese-import Android. A phone with a dead eUICC and a working tray. Keep a cheap unlocked plastic line as a spare if your job is “must receive SMS at 2 a.m.”

US iPhones went eSIM-only on the domestic models. International models sometimes still have a tray. That split has confused more airport counters than any GSMA white paper.

If a website sells “eSIM” as a PDF of numbers and a Telegram bot, that is not SGP.22. Walk away. The real install always ends in Settings showing a carrier name, an ICCID, and a signal. If you only have a screenshot of a QR, you have a coupon, not a line.

Not a carrier support script. Operators and OS builds differ. Do not delete a working profile until the new one has registered on the network and you have placed a test call.