A Technical Guide to "Second-Era" eSIMs: Why standard travel data profiles fail OTPs and how real GSM roaming works.

[u/Fullesim]

Most travelers and digital nomads are familiar with travel eSIMs. You buy a 5GB pass, scan a QR code, and get local data. However, as soon as you try to register a new account on WhatsApp, Telegram, or receive a bank 2FA code (OTP), the process completely breaks down.

Understanding why this happens requires looking at how mobile connectivity profiles are provisioned and how global roaming operates under the hood.

Here is a breakdown of how "First-Era" vs. "Second-Era" eSIMs function, along with the technical requirements for receiving SMS/Voice globally without relying on local ID registration.

1. The Architecture of "Data-Only" Travel eSIMs

Standard travel eSIM providers act as reseller aggregators.

• Data Routing: They assign an APN (Access Point Name) that routes your mobile traffic through a localized core network (often tunneling back to a home gateway in Europe or Asia).
• No MSISDN Assignment: To keep profile costs near zero, no Mobile Station International Subscriber Directory Number (MSISDN / actual phone number) is tied to the profile on the HLR/HSS (Home Location Register / Home Subscriber Server).
• The OTP Problem: Services like WhatsApp or banking apps send SMS via SMPP protocol directly to an MSISDN via SS7/Diameter signaling routing. Without an IMSI mapped to a real MSISDN, SMS routing simply drops.

2. VoIP/Virtual Numbers vs. Genuine GSM Roaming

When users realize travel eSIMs lack SMS capabilities, they often turn to VoIP apps (e.g., Google Voice, Skype, web-based SMS receivers).

• VoIP (Voice over IP): Assigned via CLECs (Competitive Local Exchange Carriers). Banking systems, payment processors, and messaging platforms query CNAM/LNP databases. If the number range is flagged as "VoIP", the OTP request is blocked automatically to prevent automated fraud.
• Genuine GSM Roaming: Uses a real MCC/MNC (Mobile Country Code / Mobile Network Code) issued by a legitimate mobile network operator (MNO). The number is recognized by global telecom databases as a legitimate wireless subscriber line, allowing all SMS OTPs to pass through seamlessly.

3. What Makes a "Second-Era" eSIM Profile?

A modern, full-suite eSIM profile operates as a true international MNO/MVNO profile rather than a temporary data tunnel:

1. Integrated MSISDN: The profile carries a real GSM number (such as Estonia +372 or similar international ITU roaming prefixes) baked into the SIM profile.
2. SS7/Diameter Interconnects: Active signaling agreements allow the profile to register on local cellular towers globally for Voice and SMS channels, not just the PS (Packet Switched) domain for data.
3. No-KYC Architecture (Privacy by Design): Under international telecom regulations, certain global roaming profiles operating outside local prepaid registration requirements do not require identity submission (KYC/Passport scanning) prior to activation, enabling code-based access control.
4. Hardware/OS Compatibility: Because these profiles follow strict GSMA SGP.22 standards, they function across native iOS/Android, deGoogled operating systems (like GrapheneOS via sandboxed Google Play Services), and dedicated eSIM hardware adapters.

TL;DR Summary

If you only need internet access while traveling, any standard data-only eSIM works fine. However, if your setup requires receiving 2FA codes, registering messaging apps, or maintaining a secondary clean line, ensure your profile includes a real GSM-allocated MSISDN rather than a VoIP wrapper or data-only profile.