eSIM and Digital Legacy: What Happens to Your Digital SIM When You're Gone

When we think about digital assets, our minds typically jump to cryptocurrency wallets, social media accounts, or cloud photo libraries. But there is an even more foundational digital asset that almost no estate plan addresses: your eSIM profile and the mobile identity it represents. Your eSIM is not just a piece of software that connects you to a carrier network — it is the cryptographic key that unlocks two-factor authentication for your banking, email, and investment accounts. It is the phone number that financial institutions use to verify your identity. It is the subscription that may continue billing your estate for months or years after you are gone. The GSMA estimates that over 3.4 billion eSIM-capable devices will be in circulation by 2025, yet there are virtually no standardized legal frameworks governing what happens to these digital profiles when the account holder dies. Unlike a physical SIM card that can be physically retrieved and destroyed by next of kin, an eSIM profile exists as encrypted data buried inside a device's embedded UICC (eUICC) chip. It cannot be removed, handed over, or accessed without biometric authentication or the device passcode — creating a perfect storm of technical and legal complexity that most families are entirely unprepared to navigate.

If you expect a clear, unified process for handling a deceased person's eSIM, prepare for disappointment. Mobile carriers around the world have wildly inconsistent policies. In the United States, major carriers like Verizon, T-Mobile, and AT&T generally allow next of kin to cancel a line by providing a death certificate and proof of executorship — but deactivating the eSIM profile itself is a separate matter. Some carriers can remotely delete the eSIM profile from their SM-DP+ (Subscription Manager Data Preparation) server, effectively revoking the profile. Others simply suspend the line, leaving the eSIM dormant on the device. In the European Union, GDPR adds another layer of complexity: carriers are obligated to protect the deceased's personal data, but eSIM profiles contain the International Mobile Subscriber Identity (IMSI) and other identifiers that may or may not qualify as personal data under different national interpretations. In jurisdictions like Japan and South Korea, carriers often require in-person visits with original documentation, and the process can take weeks. For multi-profile eSIM devices — which can store multiple carrier profiles simultaneously — the challenge multiplies. Each profile may be governed by a different carrier in a different country with entirely different rules. What makes this particularly problematic is that many of these policies were written for physical SIM cards and have not been updated to reflect the unique characteristics of eSIM technology.

Perhaps the most significant risk at the intersection of eSIM and digital legacy is the two-factor authentication (2FA) problem. When someone passes away, their survivors often need urgent access to email accounts, bank portals, insurance policies, and investment platforms — many of which send one-time passcodes via SMS to the deceased's phone number. If that phone number is tied to an eSIM that cannot be accessed, and if the carrier prematurely deactivates the line, the family may find themselves permanently locked out of critical accounts. This is not a theoretical concern. Estate attorneys increasingly report cases where families spend months locked in bureaucratic loops — the bank requires an SMS code to release funds, the carrier cannot reactivate a terminated line without consent from the account holder, and the account holder is deceased. Adding to the complexity, some modern eSIM implementations use GSMA-certified security features like SAS-UP (Security Accreditation Scheme for UICC Production) that make unauthorized profile cloning practically impossible — a feature designed to prevent fraud that also prevents legitimate access by estate executors. The solution, experts suggest, lies in digital legacy planning: documenting phone numbers, carrier account details, and PUK codes in estate documents, and using password managers with emergency access features that allow designated heirs to bypass SMS-based 2FA through pre-authorized recovery mechanisms.

Given the current state of regulatory fragmentation and carrier inconsistency, the burden falls on individuals to proactively manage their eSIM digital legacy. Here are concrete steps you can take today. First, inventory every eSIM profile you use — including those on secondary devices like cellular-enabled tablets and smartwatches — and record the associated phone numbers, carrier names, and account PINs in a secure location such as a password manager with a legacy contact feature. Second, check whether your carriers support designated account successors. Some enterprise-focused carriers and MVNOs now offer 'digital nominee' features that let you pre-authorize someone to manage or close your account upon verified death. Third, consider creating a 'digital death dossier' that your executor knows how to access: a sealed document containing your device passcodes, eSIM profile details, and explicit instructions for which lines to retain (for ongoing 2FA needs) and which to cancel immediately. Fourth, review whether any of your critical accounts support alternative 2FA methods — such as authenticator apps, hardware security keys, or backup codes — that do not depend on SMS delivery to your mobile number, and enable them. Finally, have a conversation with your family. The most sophisticated digital legacy plan is worthless if nobody knows it exists. As eSIM adoption accelerates toward near-universal status — Apple has already removed physical SIM trays entirely from U.S. iPhone models — the question of what happens to our digital SIMs after we are gone will only grow more urgent.