XeSIM Review: Is It Legit, and What Happened to 5ber?

Short answer: XeSIM is a real, shipping product — a Shenzhen-made removable eUICC card with an Android app, sold on Amazon and elsewhere, rated 4.3–4.7 on Google Play across ~10K+ installs. It is widely reported to come from people who previously worked on 5ber, though that lineage is not something either company has publicly documented. The more useful question isn't "is XeSIM legit," it's "what happens to my card if this vendor stops answering the phone?" — because that already happened once in this category, and the answer depended less on the company's finances than on one technical field on the chip.

Disclosure: published by Switch eSIM, which sells competing hardware. Competitor claims below are attributed to named public sources and dated [DATE]. Where we can't substantiate something — including about our own product — we say so.

Documented vs. reported: read this table first

This distinction matters, so we're leading with it rather than burying it.

Claim	Status	Source
5ber app/servers ceased functioning; new profile downloads unavailable	Documented	Google Play reviews (Mar–Jun 2025); Japanese user write-up (Nov 2025); ISPreview thread
Customers with unused paid "download licences" lost that ability	Documented	Google Play reviews describing purchase flow failing
5ber cards remained usable via open-source LPA tools + a card reader	Documented (mechanism)	OpenEUICC/EasyEUICC README; corroborated by user recovery reports
XeSIM founded by 5ber's former technical team	Reported, single independent source + forum echo	Frank Ruan, Apr 2025; ISPreview commenter
XeSIM uses the same Eastcompeace-manufactured card as 5ber	Reported, single independent source	Frank Ruan, Apr 2025
5ber's parent iFree Group "ran out of funding"	Asserted by a competitor's marketing page — not independently verified	9eSIM blog
Wage/insurance non-payment at 5ber	Allegation only. We are not repeating it	—
5ber licences were transferred to XeSIM	*Reported as not* transferred**	Japanese user write-up

We are not characterising any company's finances or intentions. What follows sticks to what users experienced and what the hardware does.

Who's behind XeSIM

XeSIM (xesim.net) markets a physical eSIM adapter for phones without built-in eSIM, with multi-profile storage and — notably — "no external reader required," implying an STK menu for on-device switching. Its Android app is com.elink.xesim.

The connection to 5ber comes from Frank Ruan, an independent researcher whose removable-eUICC write-ups are the most-cited technical reference in this niche. In April 2025 he wrote that 5ber's technical team "started a new company called XeSIM," describing it as "the exact same thing… same solution, same card manufactured by Eastcompeace." An ISPreview commenter separately observed that XeSIM "seems to have hired ex-5Ber employees."

That's the whole evidentiary basis, and you should weight it accordingly: one well-regarded but single source, plus anecdote. Ruan's own verdict was blunt — "DON'T BUY IT" — and he applied it to both brands. We're reporting his conclusion, not endorsing it; he doesn't detail his reasoning beyond the shared hardware and personnel.

For context, 5ber itself was a product of iFree Group, a Shenzhen company with a SIM/IoT product history running back to 2017 (MOGO SIM, MOGO eSIM, MOGO 5G SIM). It wasn't a fly-by-night operation, which is rather the point: category incumbency didn't protect anyone.

One practical warning for searchers: "Xe eSIM" from Xe.com — the currency-conversion company — is an entirely unrelated travel eSIM service. It is not XeSIM and has no connection to 5ber.

What actually happened to 5ber customers

From dated public reviews and forum reports, the failure sequence looked like this:

Around spring 2025, 5ber's backend stopped serving requests. Users could still log into the website but the app couldn't authenticate. Existing, already-installed profiles kept working — the card is a standards-compliant eUICC and doesn't phone home to run. What broke was everything requiring the vendor's cloud:

Adding new profiles. 5ber sold cards with a small number of included "downloads" and charged for more. Reviews from March–June 2025 describe the purchase button simply failing. One user: "I'm now stuck overseas, unable to get a new 5ber SIM posted to me and unable to use additional eSIM as I travel."
Deleting profiles to free a slot. Multiple users report that removing a profile didn't restore the ability to install another.
Support. "None of the support channels have responded."
Licence portability. A Japanese user who returned to a two-year-old card in late 2025 found the team had moved to XeSIM but that "5ber's licences were not carried over," leaving no route to add profiles.

The recovery path that did work: pull the card, put it in a USB CCID card reader, and manage it with EasyEUICC — a free, open-source LPA. In reader mode, EasyEUICC can access any SGP.22-compliant chip regardless of its ARA-M contents. That's the escape hatch, and it's the whole reason some 5ber owners still have working hardware.

Is the hardware fine? Mostly — but not for the reason you'd think

Yes, in the sense that matters most: a removable eUICC is a standards-compliant secure element. Profiles already written to a 5ber or XeSIM card don't stop working because a server went dark. Eastcompeace is a legitimate, long-established Chinese SIM manufacturer whose cards are, per Ruan, quietly shipped by many travel-eSIM brands under their own labels.

But "the failure was operational, not technical" is too generous, and here's the correction that actually matters:

Eastcompeace-class cards of this generation ship with no ARA-M rule. In Ruan's comparison table, the Eastcompeace-based card is listed with ARA-M "N/A" — versus a published hash on the Kigen-based alternatives. ARA-M is the field on the chip that authorises a non-vendor app to talk to it. With no ARA-M hash, an inserted card can only be reached by the vendor's own app. Which is exactly why stranded users needed a physical reader rather than just installing a different app.

So the lock-in was partly a hardware-configuration decision. A card carrying the EasyEUICC ARA-M hash 2A2FA878BC7C3354C2CF82935A5945A3EDAE4AFA would have let abandoned customers switch apps in five minutes with no reader at all.

Two further caveats, reported honestly because they're the only user-level data we found:

Ruan notes that "some profiles do cause some cards to BRICK" on removable eUICCs generally.
One ISPreview user reported an Amazon-bought XeSIM card becoming unreadable after installing a second profile, and said the same had happened to their 5ber card. That is a single anecdote from one user on one device — not a pattern, and not something we've reproduced.
A recurring Google Play complaint: XeSIM's site lists devices supporting the STK menu, not devices supporting the app. If you buy a blank card, you need an app-compatible device (or reader) to write the first profile. That's a documentation problem, and a real one.

Five continuity questions to ask any vendor

Ask these of us, of XeSIM, of anyone. Screenshot the answers.

Does the card publish an ARA-M hash — specifically EasyEUICC's? If yes, any open-source LPA can manage it while inserted, forever, with no reader. This is the single highest-value question.
Who manufactures the chip, and what's the EID prefix? Predicts both carrier acceptance and whether the card is commodity silicon.
Is there a USB CCID (T=0) reader path? The universal fallback. Note carefully: Bluetooth readers do not satisfy this — EasyEUICC supports T=0 USB CCID only.
Are profile downloads metered or licensed? Metered download credits are the mechanism through which 5ber customers lost value. Unmetered cards can't strand you that way.
Does profile switching work without the vendor app? An on-card STK menu means the card degrades gracefully into a manual-but-functional device.

How the vendors answer

	XeSIM	9eSIM V2/V3	eSTK.me	Switch
Chip vendor published	No (Eastcompeace, per third party)	Yes — Kigen	Yes — Thales/G+D	No
ARA-M hash published	No	Yes	Yes (editable)	[UNPUBLISHED]
Works with open-source LPA inserted	Not documented	Yes (own signed build)	Yes	[UNCONFIRMED]
USB CCID reader path	Reader-free claimed	Yes	Yes	[VERIFY — bundled reader is Bluetooth]
Download metering	Historically metered (5ber)	Unmetered	Unmetered	[VERIFY]

We are not going to pretend that last column reads well. On the specific criteria this article argues you should use, Switch currently publishes less than 9eSIM or eSTK.me. Our hardware may well satisfy all five — we haven't confirmed it in writing, and until we do, you should treat the gaps as gaps. A vendor asking you to weigh continuity risk has to submit to the same test.

Where Switch does have a real answer: the business layer that 5ber's collapse exposed. Plan B supplies institutional customers — 200+ clients, turnkey reseller kits, bulk and IoT volumes, invoiced procurement, volume warranties. Diversified B2B revenue is a genuinely different risk profile from a consumer-only card business dependent on app-store purchases and download credits. That's a structural argument we can make honestly today. It is not a substitute for publishing an ARA-M hash.

Limitations

Everything about XeSIM's corporate lineage here is third-party reporting, not confirmation. Both XeSIM user-level failure reports are single anecdotes. Ruan's blog is one expert's view, respected but singular, and dated April 2025 — hardware revisions since then may differ. 5ber's shutdown chronology is assembled from user reports rather than any company statement; no official announcement was ever made, which is itself part of the story. Switch's own gaps are marked above rather than smoothed over.

Learn more:

Cited with attribution, not as neutral authority: 9eSIM's "What happens when a vendor disappears?" — a competitor's marketing page making an unverified funding claim about iFree Group. Deliberately not cited: scam-detector.com's xesim.cc page (automated scoring, wrong domain, no editorial review).

Learn more: