Beat Region Blocks: A Practical Guide to Stable Claude + ChatGPT Access in Hong Kong
Last updated: October 5, 2026 — Updated with the latest notes on Claude account restrictions, stable VPN routing, region/location metadata, and domain-based routing for AI services.
Recently, I’ve seen more reports of Claude accounts in Hong Kong being suspended or banned, particularly from users relying on VPNs to access the service. Anthropic itself says it may take enforcement action for violations of its Supported Region Policy, so this is a real risk, not just forum speculation.
I’m still using Claude normally and currently maintaining two Claude Pro subscriptions, alongside one ChatGPT Plus plan. I’ve updated this guide with more detail on stable routing, region/location metadata, VPN setup, domain-based routing, and subscription handling so the setup reflects what I’m actually using day to day.
The goal is simple: help people in Hong Kong who genuinely want to learn and use AI get a more reliable setup.
And no, I don’t blame those providers for this. The bigger problem is the political and regulatory environment surrounding China and Hong Kong, which has pushed many global services into stricter regional restrictions. My frustration is with those conditions and the government policies behind them — not with the AI tools themselves.
The result: fewer account headaches, more predictable subscriptions, and a setup that stays consistent whether you’re at home or on the move.
What I used
- A UK Apple ID configured for the UK App Store.
- A UK mobile number (giffgaff eSIM) for Apple verification.
- Apple UK gift card to pay for subscriptions.
- A VPN: Surfshark as the quick option, or a small VPS running WireGuard if you prefer full control.
- A home router that supports VPN client functionality (I’m using a Ubiquiti DR7).
- A small always‑on device at home (Raspberry Pi/NAS/desktop) running Tailscale.
- Your phone and laptop for testing.
Why this pattern
Apps and subscription services check geography and IP reputation to prevent fraud and enforce regional compliance. Sudden login patterns — such as Hong Kong, followed by a VPN, then a random coffee shop IP — can easily trigger security reviews, verification locks, or even account flags.
By routing your app and CLI traffic through your home router’s VPN, you eliminate the risk of forgetting to turn on your VPN. It also prevents your other traffic from being routed through the VPN, avoiding unexpected localized content (for example, Japanese search results when using a JP VPN).
Most importantly, services see a consistent home IP location, which greatly reduces friction and the chance of triggering fraud detection.
Create a oversea Apple ID and secure a phone number
Make an Apple ID with its country set to the oversea like UK, so you can access UK App Store listings for Claude and ChatGPT.
During Apple ID setup, use a UK mobile number for SMS verification rather than your Hong Kong number — it reduces the chance of Apple rejecting verification with “SMS limit” or similar cross‑region problems.
A Pay‑As‑You‑Go giffgaff eSIM is cheap, easy to obtain, and reliable for receiving verification messages
Pick your VPN strategy
Two approaches work well:
- Commercial VPN (Surfshark): fast to start, many endpoints, and an app ecosystem.
- Self‑managed VPS + WireGuard: slightly more setup, but you control the IP and avoid shared IP blacklists.
If you want full control, I’d suggest WireGuard on a small Linode/Akamai Cloud instance. The entry Nanode is about US$5/month and includes 1 TB of transfer, so the cost is much more predictable for a personal VPN.
That is also where Linode is attractive versus normal AWS EC2-style pricing: AWS generally charges data transfer out by usage, while Linode bundles a large transfer allowance into the monthly plan. AWS Lightsail is closer to Linode because it also includes a transfer allowance, but it still charges per-GB overages once you exceed it.
Run the VPN at the router level
Install the VPN client on your router via OpenVPN or WireGuard with traffic policies. This gives you a single, stable IP for all devices at home — much safer for subscription continuity than running VPN apps respectively.
Get sac’s stories in your inbox
Join Medium for free to get updates from this writer.
Crucially, enable a kill‑switch so if the VPN drops, those routed domains do not fallback to your Hong Kong IP. Treat the kill‑switch as mandatory for privacy and account safety.
For my setup, I use a UK VPN when accessing Claude, ChatGPT, and Gemini domains. At the same time, I route my general traffic through a separate Hong Kong VPN to hide my real IP from the public.
Add Tailscale as your remote bridge
Install Tailscale on all your devices — laptops, phones, tablets, and other gadgets — and configure an always-on device at home as an exit node.
When you’re away (e.g., at a coffee shop or co-working space), simply connect to Tailscale and turn on the home exit node. This routes all your traffic through your home device.
The result is secure, authenticated, and fully encrypted access to your home “AI-specific” network environment — without exposing any ports or services directly to the internet.
Test locally and remotely
First, test from home: connect to your network and confirm claude.ai load without region blocks.
Then test from outside by connecting your phone or laptop to cellular/ public Wi‑Fi and using Tailscale to route through your home exit node; try loading the same pages.
If you see the “App unavailable” screen, check that your VPN is connected and the policies include the right domains.
Download, redeem, and subscribe from the App Store
Many Hong Kong cards don’t work for overseas App Store purchases. Buy an Apple UK gift card from a reputable online seller and redeem it into your Apple ID; the balance will let you subscribe to the app without a oversea bank card.
Download Claude and ChatGPT, and create your account. After that, use your redeemed App Store credit to pay for the subscription.
Because the purchases come through the App Store and your verification uses a oversea number, the flow is usually smooth.
Make sure the gift card is redeemed into the same Apple ID you’ll use on your device.
Match timezone + locale, turn off Claude location metadata
Claude (like many services) builds a lightweight profile from timezone, browser/OS locale, language preference, and User-Agent – not just your IP. A Hong Kong timezone and zh-HK language on an overseas IP can still look suspicious.
Quick fixes (UTC+8 friendly):
- Set system timezone to another supported UTC+8 region (e.g. Asia/Taipei).
- If you use Traditional Chinese, set language to zh-TW in system and browser language settings.
- In Claude → Settings → Privacy → Turn OFF “Location metadata”.
These small fingerprint tweaks, combined with the stable overseas exit IP from the main guide, reduce the chance of region blocks.
Appendix — AI Service Domains
Use these domains for policy-based routing through the same overseas VPN endpoint.
Claude / Anthropic
anthropic.com
clau.de
claude.ai
claude.com
claudemcpclient.com
claudeusercontent.comChatGPT / OpenAI
chat.com
chatgpt.com
crixet.com
oaistatic.com
oaiusercontent.com
openai.com
sora.com
learn.chatgpt.comGemini / Google AI
google.com is intentionally excluded because it would route too much unrelated Google traffic.
gemini.google
gemini.google.com
ai.google.dev
generativelanguage.googleapis.com
deepmind.google
labs.google
makersuite.google.com
bard.google.com
aistudio.google.com
alkalimakersuite-pa.clients6.google.com
waa-pa.clients6.google.com
notebooklm.google
notebooklm.google.comKeep it simple: make your setup consistently overseas, let the router do the heavy lifting, and use Tailscale as your secure tunnel home — then cross the barriers and get back to learning, building, and creating.
