Why Banking, Government and ID Apps Stop Working Abroad on a Travel eSIM

Two completely different things break when a banking, tax, or national ID app stops working abroad, and they need opposite fixes. Either the app loads but refuses you because your connection now arrives from a foreign IP address, or the login stalls waiting for an SMS code that never arrives, because that code rides your home number rather than your data plan. A data-only travel eSIM such as co:sim's changes the first and never touches the second.

This guide separates the two symptoms, shows how to tell them apart in about thirty seconds, and lists what to set up before you fly. It also explains why a VPN is not the blanket answer it looks like.

#Why does my banking app stop working on a travel eSIM?

A travel eSIM registers on a local or regional network in the country you are visiting, so your traffic reaches the internet from there. Your bank suddenly sees a login from an address in Portugal instead of Ohio, on a handset that also reports a new SIM. Risk engines weigh precisely those signals.

The result is rarely a hard failure. It is step-up verification, a declined transfer, a temporary lock, or a message asking you to confirm it was really you. Other apps on the same connection keep working, which is the clue that connectivity is fine and an access decision is what stopped you.

Government and national ID apps often fail for an unrelated reason: deliberate geographic restriction. Some public services are simply not offered outside their own country, and no network change on your side alters that. Working out which category you are in decides whether troubleshooting is worth the effort at all.

#Is it the foreign IP address or the missing SMS code?

Work down that table before changing anything else. The two middle rows are the ones travellers confuse most often, and their fixes have nothing in common.

#How do two-factor codes reach me on a data-only eSIM?

An SMS one-time passcode is an ordinary text message addressed to your phone number. That number lives on your home SIM or home eSIM line, not on the travel data plan, so a data-only profile neither carries those codes nor blocks them. Each co:sim plan page states that the plan is data-only and names the underlying network it uses, so there is no ambiguity about what it delivers.

Keep the home line switched on for calls and texts, and switch data roaming off on that line so it cannot bill you. Apple documents this pairing directly, and notes that from iOS 26 an iPhone turns the travel eSIM off and the home SIM back on automatically when you return, depending on country or region.

Banks have a reason to treat a texted code as fragile. NIST's SP 800-63B classifies use of the public telephone network to deliver out-of-band secrets as a restricted authenticator, and requires the verifier to confirm the registered number belongs to a specific physical device, watching for SIM changes and number porting. A new SIM alongside a foreign IP address is, by that logic, two of the signals it was told to notice.

#What should I set up before I fly?

1. Enrol a passkey or an authenticator app wherever your bank offers one. FIDO Alliance passkeys are device-bound credentials with no shared secret in transit, so they do not depend on a text arriving.
2. Confirm the phone number and email on your account are current and reachable, and switch on transaction alerts.
3. Install the travel eSIM before departure. co:sim emails the QR code within seconds of checkout, so the profile is on the phone while you still have home Wi-Fi.
4. Leave calls and texts assigned to your home number, set the travel profile as the data line, and leave roaming off on the home line.
5. Save your bank's international contact number somewhere offline. A locked app is a poor moment to go hunting for it.
6. Download any government document or certificate you might need while the app still opens for you.

#What if the app is already locked?

Approve the verification prompt inside the app if one appears, then retry once. Repeated attempts after a lock usually deepen it rather than clear it.

If no prompt appears, call your bank on the number printed on your card, not a number taken from the message that warned you. The CFPB notes that messages claiming suspicious account activity are a common impersonation, and that caller ID, texts, and email can all be faked.

Do not treat a VPN as the general fix. It replaces one unexpected location with another, many risk systems score commercial VPN and data-centre ranges more harshly than an ordinary mobile network in a tourist destination, and some banking terms restrict it outright. It occasionally unblocks a service that refuses you purely on geography, and it is worth trying only in that narrow case, once you have confirmed the block is geographic rather than behavioural.

For a hard geographic restriction on a public service, the browser version is often more permissive than the app. Otherwise the honest answer is that it waits until you are home.

Connectivity itself is the straightforward part: a plan for a single country such as Thailand or a regional bundle installs before you leave and connects on arrival. Account access is the part that rewards ten minutes of preparation.

#FAQ

#Will my bank's SMS code arrive if I use a data-only eSIM?

Yes, provided your home SIM or home eSIM line is still enabled in the phone and remains the line assigned to messaging. A one-time passcode is an ordinary text message addressed to your phone number, and that number belongs to your home carrier's line. A data-only travel plan, including every co:sim plan, carries mobile data and no number at all, so it sits outside the delivery path in either direction. The workable setup is to keep the home line on for calls and texts, switch data roaming off on that line so it cannot generate charges, and set the travel profile as the data line. Codes then arrive as normal texts while maps, messaging, and banking apps run on travel data. If you switch the home line off entirely to avoid roaming fees, the texts stop along with it.

#Does a travel eSIM change the country my bank sees?

In practice, yes. A travel eSIM registers on a network in the country you are visiting and your traffic reaches the internet from there, so your bank sees an address in that country rather than at home. That is ordinary, legitimate behaviour rather than a fault, but a risk engine can still read it as a change worth checking. It is why a login gets challenged, a transfer is declined, or an app locks briefly while every other app on the same connection behaves normally. Exit points vary by provider and by network, and the plan page documents the underlying operator so you know which network you are on. Expect a verification prompt on the first login of a trip and treat it as routine rather than as evidence something has broken.

#Should I use a VPN to make a banking app work abroad?

Not as a default. A VPN does not remove the location signal, it substitutes a different one, and many fraud systems score traffic from commercial VPN and data-centre ranges more harshly than an ordinary mobile network in a tourist destination. Some banks also restrict VPN use in their terms of service, so a login that appears to succeed can still be flagged afterwards. There is one narrow case where it genuinely helps: a service that blocks you purely on geography, before you reach a login screen at all, and that you are entitled to use. Even then, read the provider's terms first. For the far more common case, a risk check triggered by a foreign address, the quicker path is approving the verification prompt in the app or calling your bank on its published international number.

#Why does a government or national ID app refuse to open abroad?

Usually by design. Many public services restrict access to their own country, either because the service is only meaningful domestically or because the identity check behind it is tied to national infrastructure that does not answer requests from elsewhere. That is a policy boundary rather than a connectivity fault, so a different network, a faster connection, or a co:sim travel plan changes nothing about it. Two things sometimes help: the browser version of the same service is often less restricted than the app, and some countries publish a separate consular or expatriate route with its own sign-in. The reliable approach is preparation. Download the certificates, tax documents, or confirmations you might need before you leave, and check whether the provider offers a verification method that does not depend on a domestic phone number.