Mechanism
How Real-Name Rules Bind Accounts, Devices, and Offline Identity
How phone numbers, identity documents, platform accounts, and public-service records form a unified identity interface.
Contents
Operational chain: How Real-Name Rules Bind Accounts, Devices, and Offline Identity
Read from information intake to organizational consequence.
How a phone number becomes a common identity gateway
Registering for communications and online services in China usually begins with a phone number tied to a verified subscriber. Some services also check an identity document or require additional authentication. The platform then records devices, logins, and content activity. A public nickname becomes connected to a telecom account, platform records, and an offline identity, even though the legal name never appears on the profile.
The Cyberspace Administration's Provisions on the Administration of Internet User Account Information require providers to manage account information and conduct true identity verification for specified accounts. [5] Platforms verify and retain data, cyberspace authorities regulate them, and police have investigative channels. Different institutions operate the system, but each layer points back to the same identifiable person.
Devices and service records bind accounts together
The phone number is only the first link. Device identifiers, IP addresses, login times, payment information, and usage patterns can help a platform decide whether several accounts share one operator. The algorithm recommendation rules also place user management and information service duties on platforms, encouraging continuous analysis of content and behavior. [6] Changing a nickname or opening another account may leave those backend connections untouched.
The Personal Information Protection Law requires a clear and reasonable purpose for processing and limits collection to what is necessary. [3] Those principles constrain commercial processing, but security, law enforcement, and regulatory bodies retain broad authority. Users rarely know whether a suspension began with a company decision, regulatory pressure, or a police request. They cannot see how identity records move between institutions.
The Henan red code incident exposed the danger of linked public services
In 2022, some depositors traveling to Henan to seek access to funds frozen at rural banks found that their health codes had turned red, restricting their movement. Investigative reporting connected the abnormal codes with the depositors' planned advocacy. [14] Officials later announced disciplinary action and acknowledged that personnel had improperly assigned red codes to depositors. [13]
The lesson is direct. A system created for epidemic control was used against people pursuing a financial grievance because identity, travel, and public service records were already connected. The official finding treated the assignments as misconduct, so the system itself did not autonomously issue a political order. The incident still proves how quickly officials can turn a public service credential into a movement control tool when identity interfaces are concentrated and oversight is weak.
The White Paper protests show how digital identity reaches offline investigation
After the 2022 White Paper protests, Human Rights Watch reported detentions and police examination of participants' phones. [16] Amnesty International's interviews one year later described surveillance, detention, and continuing pressure experienced by protesters. [17] The cases do not establish that authorities found every participant through one identical data interface. They do show digital records, device contents, and offline identity meeting inside a political investigation.
Once a platform account, phone, and device point to a person, police need not rely only on a public post. Group chats, contacts, devices found at the scene, and historical records can all provide leads. Real name rules give the regime the ability to deliver the cost of speech to a particular home, university, or workplace.
The CCP turns convenience into callable control
Identity verification can deter impersonation, recover accounts, and fight fraud. The danger comes from the CCP's monopoly over rulemaking, enforcement, and political judgment, without independent institutions continuously reviewing access to identity data. The state orders companies to identify users, companies accumulate behavior records, and administrative and police bodies retain access channels. The public cannot see effective walls between these layers.
That architecture converts daily convenience into political capacity available on demand. A phone number handles login, a health code controls entry, and platform data supports recommendations during ordinary life. During a protest or rights campaign, the same identity links can locate people, suspend accounts, inspect relationships, and restrict movement. The state does not need to build a new dossier because service use has already assembled it.
Identity verification must be separated from political power
Meaningful protection would limit each interface to a defined purpose, reduce identifiers shared across services, log government access, and permit independent review. Users would be able to inspect, correct, and delete links that are no longer necessary. A broad consent screen for account security cannot become permission for indefinite identity tracking.
Under CCP rule, the central danger of real name systems is not the absence of anonymous nicknames. It is the administrative road preserved behind every nickname, leading straight into offline life. The Henan red codes and investigations after the White Paper protests show what follows when technical identity gateways serve political power without checks: an identity used to receive services becomes an identity required to obey.
Sources
- Provisions on the Administration of Internet User Account Information[5]
- Provisions on Algorithmic Recommendation in Internet Information Services[6]
- Personal Information Protection Law of the PRC[3]
- Investigation into Red Health Codes Assigned to Henan Bank Depositors[14]
- Official Accountability Record on the Henan Red-Code Incident[13]
- Human Rights Watch Report on Detained White Paper Protesters[16]
- Amnesty International Interviews One Year after the White Paper Movement[17]
What the available sources establish
Citizen Lab found that some documents and images transmitted by international WeChat users entered content-surveillance processes and could help train censorship systems used for China-registered accounts.
Sources
Regulation on Public Security Video Image Information Systemsprimary-recordLive
MPS Rules for Public Security Video Information Systemsprimary-recordUnavailable
Personal Information Protection Law of the PRCprimary-recordLive
Data Security Law of the PRCprimary-recordLive
Provisions on the Administration of Internet User Account Informationprimary-recordLive
Provisions on Algorithmic Recommendation in Internet Information Servicesprimary-recordLive
China's Algorithms of Repression: Reverse Engineering a Xinjiang Police Apptechnical-researchLive
We Chat, They Watchtechnical-researchLive
Censored Contagion IItechnical-researchLive
OHCHR Assessment of Human Rights Concerns in Xinjiangofficial-findingLive
Treasury Sanctions on Biometric Surveillance Technologyofficial-findingLive
2024 Country Report on Human Rights Practices: Chinagovernment-reportLive
Official Accountability Record on the Henan Red-Code Incidentprimary-recordRedirected
Investigation into Red Health Codes Assigned to Henan Bank Depositorsinvestigative-reportingLive
CECC 2025 Annual Reportgovernment-reportLive
Human Rights Watch Report on Detained White Paper Protestersinvestigative-reportingLive
Amnesty International Interviews One Year after the White Paper Movementinvestigative-reportingLive