My Banking App Blocked the VPN in China—The Fix Wasn’t Another Server

The banking app displayed Turn off your VPN or proxy and try again just as the airline’s payment hold dropped below twelve minutes. I was checking out of a Shanghai hotel, trying to confirm a replacement flight after my original connection had been cancelled. The booking page was open on my laptop, the verification request was waiting on my phone, and both devices were using the same VPN over hotel Wi-Fi. I blamed the bank’s app, closed it, restarted the phone and tried again. The warning returned before I could approve the payment.

The bank was not declining my card.

It was refusing to let me confirm that the payment was mine.

That distinction mattered because the airline had already reserved the seat. If I could not approve the transaction before the timer expired, the booking would disappear and the replacement fare could rise again.

I turned off the VPN on my phone.

The banking app opened immediately.

Then I realised the confirmation number I needed was in Gmail, which would not load on the hotel network without a VPN.

I had solved one half of the problem by breaking the other.

One transaction required two kinds of connection

Foreign visitors now rely heavily on phones for payments in China. The official payment guide for overseas visitors explains how international cards can be linked to Alipay and WeChat Pay, while bank cards and cash remain available in many situations. (State Council of the People’s Republic of China)

That makes everyday spending easier, but the traveler’s home bank still remains part of the payment chain.

A bank may send a verification request, ask for a one-time code or require approval inside its own app. Alipay can accept the card while the bank behind it still pauses the transaction.

That was exactly what had happened to me.

The phone needed a direct connection the bank accepted.

The laptop needed a VPN because Gmail and several international services were unavailable on the hotel network.

Keeping the VPN active everywhere had seemed simpler.

Instead, it forced two very different tasks through the same route.

The bank disliked the route, not the hotel

Banking apps compare more than a password.

They look at the device, recent account activity, apparent location and the reputation of the IP address reaching them. Addresses associated with public proxies, shared VPN servers or unusual activity can trigger additional checks. (MaxMind)

A commercial VPN exit may be shared by thousands of people. The address may appear in a country that does not match the phone’s other signals. Someone else may previously have used the same exit for automated logins or suspicious transactions.

The bank cannot see the person standing in the Shanghai hotel lobby.

It sees the connection.

From its perspective, blocking that route is cautious.

From mine, it meant watching an airline timer count down beside an open suitcase.

The key point was becoming clearer: China had not necessarily blocked the banking app. The banking app was rejecting the VPN.

China made the conflict harder because turning the VPN off also removed access to the international services needed to complete the same purchase.

So I tried to separate the devices.

The major provider could not hold the laptop connection

I left the phone on the hotel’s direct connection so the bank could open. Then I moved the VPN work to the laptop.

The provider was the one I normally trusted. It had years of public history, a large support operation and a long list of Asian locations.

I selected Hong Kong.

The connection failed.

I tried Japan.

The app connected, but Gmail stopped halfway through loading the inbox.

Singapore lasted long enough to show the booking email, then dropped when I opened the attachment.

China’s filtering systems can identify and interrupt encrypted circumvention traffic by its connection pattern, even when the contents remain hidden. (GFW Report and USENIX Security) The practical effect was simple: the provider offered many routes, but none stayed alive long enough to retrieve the confirmation details and finish the payment.

The airline timer reached eight minutes.

More countries were not helping.

The free proxy made the transaction look worse

I tried a browser proxy because it promised instant access without changing the laptop’s entire connection.

Gmail opened.

Then Google asked me to verify the login.

The airline site noticed another location change and refreshed the payment session. The seat remained reserved, but the timer returned with fewer minutes.

The proxy had assigned the browser an address in the United States. My phone was connecting directly from China. The earlier VPN attempts had appeared to come from Hong Kong, Japan and Singapore.

One purchase now seemed to be moving across several countries within minutes.

That was the opposite of consistency.

Travelers often warn that home banks may still block foreign transactions even when mobile payments appear ready to use. (Reddit) In my case, the card itself was fine. The growing trail of changing VPN locations was making a routine approval look increasingly unusual.

I closed the proxy.

I no longer needed another country.

I needed one stable connection on the laptop while the phone remained direct.

The backup let each device do one job

I had installed OnlydogVPN^↗ before arriving in China but had not used it as my main service.

The established provider had more reviews, more server locations and a much longer public history. The smaller app’s shorter record was the reason I had treated it as a backup.

But it was already on the laptop, and its interface matched the situation better.

Instead of presenting a large country map, it asked what kind of connection problem I was trying to solve.

I selected the preset for a restrictive network and connected.

The status changed after several seconds.

I opened Gmail.

The inbox loaded.

The airline message appeared, including the six-digit booking reference I needed.

This time, I did not touch the laptop connection again.

On the phone, with no VPN active, I reopened the banking app. The proxy warning had disappeared. The pending transaction showed the airline name and amount.

I entered the booking reference and approved the payment.

Back on the laptop, the airline page changed from Awaiting bank confirmation to Ticket issued.

A boarding document arrived in Gmail a few seconds later.

The problem was finished.

Not because I had forced the bank to accept a VPN.

Because the backup kept the international side of the transaction working without interfering with the banking side.

Separation mattered more than disguise

The smaller service uses an HTTP/3-based connection with additional obfuscation for restrictive networks. That kept the laptop route available after the larger provider’s connections had repeatedly dropped.

The more important advantage was the workflow it made possible.

The laptop kept Gmail and the airline page open.

The phone gave the bank a direct, consistent connection.

I could not observe the bank’s internal fraud checks or the hotel network’s filtering rules. I could compare the outcomes in front of me.

Routing everything through the major VPN caused the banking app to reject the phone.

Turning the VPN off everywhere restored the bank but removed Gmail.

Cycling through servers and a free proxy created a messy sequence of locations.

Keeping the backup on the laptop while leaving the phone direct completed the purchase.

For this task, clean separation mattered more than having a VPN icon active on every device.

The phone could connect after the bank finished

Once the ticket was issued, I still needed international services on the phone.

My family was expecting the new arrival time through a messaging app, and the address for my next hotel was saved in Google Maps.

The backup was installed on the phone but had never been configured.

The laptop displayed a verification code. I entered it on the phone and connected without starting another conventional email-and-password login.

Gmail refreshed. The map loaded. My message sent.

That smaller benefit appeared only after the banking task was complete.

The sequence was the important part.

First, the phone remained direct while the bank evaluated the transaction.

Then, after approval, I connected it for the services that needed the VPN.

The app made that change quick enough that I did not have to choose permanently between banking and the rest of the trip.

A VPN warning does not mean the card has failed

The bank’s warning had sounded more serious than it was.

It did not mean someone had stolen my account. It did not mean the card could not be used in China. It meant the bank did not accept the connection used for that verification attempt.

Repeatedly changing VPN servers can make the situation worse by presenting a series of countries and shared addresses around the same transaction.

The cleaner response is to stop changing the payment itself.

Leave the amount, merchant and booking details unchanged.

Disconnect the VPN on the banking device.

Use the normal hotel or mobile connection.

Then reopen the bank app and check the pending request.

If the restriction remains, the next step is the bank’s official support channel. The bank may need to verify the trip or recent activity.

The VPN still has a role.

It simply belongs on the device handling Gmail, work tools or other international services—not inside the bank’s approval session.

In China, one device does not need to carry every part of the transaction.

The final test came after checkout

I closed the suitcase and left the hotel.

In the taxi, the laptop moved from hotel Wi-Fi to my phone’s hotspot. The VPN paused, recovered and brought Gmail back without another server selection.

The ticket remained open.

The phone was connected too, and my family had the updated flight details.

I did not reopen the banking app. The payment had cleared, and there was no reason to present it with another network identity.

That decision felt obvious only after the problem was over.

Before the warning, I had treated an always-on VPN as a universal sign of safety. The bank had treated the same tunnel as a reason for caution.

The major provider offered more locations but could not keep the laptop route alive.

The free proxy opened Gmail but made the transaction’s apparent location even less consistent.

The smaller backup kept the restricted services available while the bank received the direct connection it expected.

The ticket was issued with five minutes left on the hold.

In Shanghai that morning, the right VPN setup was not the one that stayed on everywhere. It was the one that kept the bank outside the tunnel while the rest of the trip stayed connected.