eSIM vs Physical SIM
A physical SIM is a removable UICC card carrying one operator profile. An eSIM (eUICC) is a soldered secure element that can hold multiple profiles, downloaded and switched remotely via GSMA RSP.
| Attribute | eSIM | Physical SIM |
|---|---|---|
| Form factor | Soldered eUICC | Removable UICC |
| Provisioning | GSMA SGP.22 / SGP.32 RSP | Physical distribution |
| Multi-profile | Yes | One |
| SIM swap vector | Attacker requests eSIM re-provisioning | Attacker requests physical SIM replacement |
| Theft resistance | Cannot be pulled from device | Removable |
| IoT / M2M | SGP.32 designed for IoT | MFF2 for embedded, still discrete |
Verdict
eSIM does not eliminate SIM swap — it moves it into the operator's eSIM re-provisioning flow. Controls have to move with it: identity proofing, cool-down periods, notification of new profile downloads.