🇲🇦Morocco eSIM: Article 23 Ties Resellers to the Operator

7 plans for Morocco, from 1 GB at $5.99 to 5 GB at $21.99, plus 3 unlimited-data tiers. 5 GB for 30 days costs $21.99 — 8th cheapest of 35 in Africa, against a $25.99 median. Our retail prices from the operator catalogue, checked 28 September 2026.

Does this apply to you? (a real duty, aimed at a different sale)

An eSIM Morocco is Choukran, Airalo’s data-only profile that roams on Orange’s LTE (Long-Term Evolution) network with no KYC (Know Your Customer) step at checkout. Morocco runs a real identification duty for phone customers. Article 23 of Law 24-96 carries it. The law makes phone operators verify an applicant’s identity before service starts. It holds the operator liable even when a reseller does the check.

Buying through a middleman does not move the duty off the operator.

This eSIM for Morocco does not trigger that duty. It comes from a foreign operator. It roams into Morocco on Orange, under a number Morocco never assigned. Article 23 speaks to a Moroccan operator identifying its own customer. Think of someone buying a local Maroc Telecom, Orange, or inwi SIM. Buy a local Moroccan SIM instead, and Article 23’s reseller clause follows you there too.

What the portal’s own first line says

Morocco’s legislation portal opens the consolidated text of Law 24-96 with a warning about itself.

«تم إعداد هذه النسخة من أجل تسهيل مقروئية النص، ولا يحتج إلا بالنصوص في صيغتها المنشورة بالجريدة الرسمية»

Our translation: “This version was prepared to facilitate the readability of the text; only texts in the form published in the Official Gazette may be relied upon.”

That is the file’s first line, not a footnote. The portal is sgg.gov.ma, run by Morocco’s General Secretariat of the Government. It calls its own version a reading aid, not the authoritative text. We read that version — a “صيغة موطدة” (consolidated text) dated 29 May 2025. We did not read the Official Gazette printing.

Article 23: the identification duty, in the law’s own words

Three sentences, read together, carry the whole duty.

«تحت طائلة العقوبات المنصوص عليها في المادة 30 من هذا القانون، يلزم متعهدو الشبكات العامة للمواصلات بتحديد هوية صاحب الطلب ويبقى المتعهد مسؤولا عن تحديد هوية زبنائه التي قام بها المقاولون من الباطن المحتملون أو الموزعون أو البائعون أو الأعوان التجاريون. لهذا الغرض، يجب أن يكون كل زبون موضوع تعريف مدقق. يحدث كل متعهد للشبكات العامة للمواصلات قاعدة للمعطيات ويحينها، بما في ذلك في شكل إلكتروني، تتضمن المعلومات المتعلقة بهوية الزبناء. توضع قاعدة المعطيات هذه رهن إشارة الوكالة، بناء على طلبها، وفق أحكام القانون رقم 09.08 المتعلق بحماية الأشخاص الذاتيين تجاه معالجة المعطيات ذات الطابع الشخ[صي].»

The file itself breaks the last word at a page turn — “...الشخ” — at this exact point; we complete it in brackets. The same break recurs at the identical syllable twice more in the file (see Sources and freshness below).

Our translation: “Under penalty of the sanctions provided for in Article 30 of this law, operators of public telecommunications networks are required to establish the identity of the applicant, and the operator remains liable for the identification of its customers carried out by any subcontractors, distributors, vendors, or commercial agents. For this purpose, every customer must be the subject of verified identification. Each operator of public telecommunications networks creates and updates a database — including in electronic form — containing information relating to the identity of customers. This database is placed at the disposal of the Agency, upon its request, in accordance with the provisions of Law No. 09-08 on the protection of individuals with regard to the processing of personal data.” (Law 24-96, Article 23, consolidated text, read 17 August 2026)

The duty carries an enforcement reference to Article 30 of the same law. That phrase — “under penalty of the sanctions provided for in Article 30” — comes from the translation above. Article 30 itself opens as an administrative clause, not a criminal one. The Agency’s director sends the operator a formal notice, إعذار. It gives eight to sixty days to end the violation, publishable for public information. While that clock runs, the director can also charge a daily coercive payment, غرامة تهديدية. Per Law 24-96, it equals 1% of the operator’s average daily pre-tax turnover for the last closed accounting year. That runs for every day of delay under the affected licence (offset 63,111-63,225).

Ignore that notice and the sanctions ladder below opens. Per Law 24-96, its fine is capped at 2% of pre-tax turnover for the last closed accounting year, rising to 5% on a repeat breach of the same obligations (offsets 63,741-63,841). Where no activity allows that ceiling to be computed, the caps switch to 2,000,000 dirhams, rising to 5,000,000 on repeat (offsets 64,066 and 64,027). Both amounts are spelled out in Arabic words beside the digits — «مليوني (2.000.000) درهم … خمسة ملايين (5.000.000) درهم» — no ambiguity. The percentage digits sit displaced to the end of their printed line, the same right-to-left extraction artifact this page explains below for the “23المادة” marker.

“تعريف مدقق” is the operative phrase for the check itself: verified identification, not a bare record of a name.

The reseller clause: the operator answers, wherever the check happened

The sentence assigns liability precisely. The operator “remains liable for the identification of its customers carried out by any subcontractors, distributors, vendors, or commercial agents.” Four kinds of go-between are named. None of them absorbs the liability. Buy a Moroccan SIM from a kiosk, a street vendor, or a resale agent. That is anyone but the operator’s own counter. The duty still does not shift to that middleman.

It stays with the operator whose network the number runs on.

That is a closed loophole, not an open one. An operator cannot point to a reseller’s skipped check and call the sale valid anyway. Either the check happened correctly, or the operator faces Article 30’s full ladder. Ignore the injunction, and three more rungs follow.

First, a formal warning, إنذار, from the director. Once the operator is notified, it may be published in the Official Gazette, and the Agency’s board chair is informed at once (offset 63,480). Second, the fine capped above, sized to “the gravity of the breaches and the advantages derived from them” (offset 63,662) — a proportionality test, not a flat number. Third, and the strongest rung, hits the licence itself: suspension in whole or in part for up to thirty days, temporary suspension, a term cut of up to a year, or outright withdrawal. Suspension runs through the competent government authority on the director’s proposal; withdrawal runs by decree, on the same proposal (offsets 64,685, 64,973). No sanction under this article applies before the operator is told the specific acts alleged and given access to its file. It must also get a period set by the director to answer in writing (offset 65,046).

Article 30(b) does not fix the fine itself. It hands the sizing to a violations commission, and points to Article 31 bis as the article that creates it. Creating it is all 31 bis does. The same 2019 law added it. It seats the commission at the Agency, chaired by the director. Three members sit on it: a judge nominated by the Higher Judicial Council, and two sector specialists with no telecom interest. They serve five years, renewable once (offsets 67,054-67,933). The ceiling and the proportionality test stay in Article 30(b). This roaming eSIM sits outside that whole chain — a foreign operator issues it, not a Moroccan one — the same shape of exemption already on this project’s Germany, Italy, and Spain pages.

The customer database, and who can ask to see it

Article 23 does not stop at checking ID once. Every operator must build and keep updating a customer-identity database, electronic form included, and place it at the Agency’s disposal on request. Article 23 calls the regulator “the Agency” without defining it — Article 27 does that, and we have not read it. The clause also names Law 09-08, Morocco’s data-privacy statute, which we have not read either.

Locating Article 23 — the marker trap, and how we avoided it

Moroccan legal text, once extracted to plain text, puts an article’s number to the left of the word “المادة” (“article”). The two are glued together, no space: “23المادة” opens Article 23, “24المادة” opens Article 24. That is backward from how a Moroccan reader would say it out loud.

A forward search — “المادة” followed by a number — runs into a trap. This file carries a running page footer. A page number sits right above “الأمانة العامة للحكومة” (“General Secretariat of the Government”). Search “المادة” plus digits the ordinary way. The digits you find are often that footer’s page number, not an article citation. We hit this trap ourselves, then switched to the reversed marker.

With the right marker, the boundary is clear. Everything between “23المادة” (character 43,235 of the file) and “24المادة” is Article 23. The identification clause sits in its first numbered paragraph, marked “1 -.” That paragraph opens on general subscription rights, then states the identification duty, then the database clause. A second paragraph, “2 -”, follows right after. It covers something unrelated: subscriber rights under an operator’s specifications and subscription contracts.

Article 23 carries its own amendment note too. It was replaced by Article Two of Law 121-12, Official Gazette No. 6753, 18 February 2019, page 783. The file’s title page dates the whole consolidated text to 29 May 2025. Two different dates. Two different levels.

Counting by substring: a fourth zero that means nothing

Search the consolidated text — 109,984 characters — for the Latin word “SIM,” case-insensitive. Zero. Search شريحة (“card,” “chip”). Zero. Search بطاقة (“card,” everyday sense). Zero. All three are whole-document substring counts.

This is the fourth destination in this project where a zero for “SIM” means nothing. India and Taiwan came before it. Morocco’s law goes further than either. It never reaches for a word meaning “card” at all. Article 23 names a زبون (customer) and a صاحب الطلب (applicant). People, not objects.

هوية (“identity”) returns 4 as a substring. Word-boundary counting drops that to 2. The other two hits carry an attached prefix (بهوية) or sit inside a longer, unrelated word. Three of the four substring hits sit inside Article 23 itself, each about a customer’s identity. The fourth sits inside الجهوية (“regional”), an unrelated word in the law’s postal section. The letters match by coincidence, nothing more.

تعريف returns 11 as a substring, 3 by word boundary. Reading all eleven changes the number that matters. Only one is the identification sense this page is about: “تعريف مدقق,” inside Article 23. Four are “تعريف,” meaning “definition” rather than identification. Two sit inside Article 1 itself, titled تعاريف (“Definitions”) — one defines terminal equipment, one defines the service. One sits in Article 13, defining a network’s end points. One sits in Article 13 mukarrara martayn, defining land-use duties in the specifications book. The other six are تعريفية and تعريفات — forms of “tariff” — a different word. It shares the same root once Arabic’s own suffixes attach. Count the substring alone, skip reading each hit, and identification talk here looks eleven times more common than it is.

مشترك returns 25. The split is almost even, and it runs on grammar, not topic. Thirteen are the noun “subscriber,” including Article 23’s own follow-on paragraph on the rights of subscribers. Twelve are the adjective from the same root — “joint,” “shared,” “co-” — describing co-owners, shared infrastructure, and the “Common Provisions” heading used twice in the law. Same root, same five letters, two different jobs.

What you get: Choukran on Orange, LTE, data-only

Choukran is Airalo’s eSIM for Morocco. It is data-only, roaming on Orange at LTE. No KYC step applies at checkout (Airalo catalog data, checked 17 August 2026). The install window runs 365 days from purchase. The usage clock starts at first connection, not at purchase or install.

Four capped data plans and three unlimited-duration plans make up the full catalog. No 10 GB (gigabyte) tier exists here. No 20 GB tier either.

The unlimited plans carry a fair-use throttle. The catalog states the speed drops to 1 Mbps after 3 GB of use in a single day. That figure is catalog data, checked 17 August 2026.

Airalo’s own catalog disagrees with itself on one point. The entry covering the four capped plans is flagged rechargeable. The entry covering the three unlimited plans is flagged not rechargeable. Both carry the identical description, “Rechargeable online with no expiry,” read directly from the catalog on 17 August 2026. We cannot resolve it. Confirm at checkout.

The APN on Android: globaldata — the same value as China and Taiwan

Android needs the APN (Access Point Name) typed in by hand: globaldata, under Access Point Names in settings. iOS sets it on its own once the profile installs. Android does not (Airalo catalog data, checked 17 August 2026). Morocco sits in the 73-country slice of the catalogue where Android needs this typed in by hand — 121 of 368 operator entries, 32.9%, checked 3 September 2026.

Check it first if the profile shows installed but carries no data.

This value is not unique to Morocco. Airalo’s catalog sets globaldata as the manual Android APN in 19 of its 215 country catalogs, checked 3 September 2026. Turkey is one of them (catalog data, checked 17 August 2026). Four other destination pages already carry it as the single, standalone APN value: Indonesia, the UAE, China, and Taiwan. India’s catalog entry moved to automatic Android APN entry since this page’s earlier check and no longer belongs to that group. Germany’s page names globaldata too, but only as one of three candidate values alongside orange and orange.fr — not the same claim. Both install guides carry it too.

Before you fly, and on landing

Install the eSIM for Morocco before departure, on Wi-Fi. The QR code needs a working connection to scan, and one is not guaranteed on arrival. The 365-day install window means installing weeks ahead costs nothing.

Nothing activates at install; a profile reading installed but inactive before boarding is normal. The clock starts at first connection to Orange, once you land and switch on data roaming.

This profile is data-only and carries no Moroccan phone number. Anything that verifies you by SMS to a Moroccan number sits outside what it can do. That follows from being data-only, not from Article 23.

First eSIM install? The iPhone guide and the Android guide cover both install paths. For Airalo’s own track record across destinations, see the Airalo review.

FAQ

Sources and freshness

This page reads Law 24-96 on Post and Telecommunications. The source is the consolidated text dated 29 May 2025, from sgg.gov.ma (Morocco’s General Secretariat of the Government). That file runs 109,984 characters, 62 pages. It was retrieved and scanned in full on 17 August 2026. The page loads only through a Morocco-based connection; a direct request from outside the country does not connect at all.

Three articles were worked through verbatim: Article 23, Article 30 end to end through its suspension-and-withdrawal step, and Article 31 bis. The extraction genuinely breaks twice inside Article 30’s own cross-references, at offsets ~64,440 and ~64,610. Each phrase ends mid-sentence on “the paragraph” without saying which one — the paragraph letter is lost to extraction, not to the law. Article 30’s percentage and dirham figures are not among the losses — see above. The file cuts one more word mid-syllable at a page break, “...الشخ” — completed, “صي” would finish “شخصي” (“personal”) in the Law 09-08 citation. That break is not a one-off. The identical phrase, “المعطيات ذات الطابع الشخ”, cuts at the same syllable three times, at offsets 44,342, 51,313, and 52,000. The complete form, “الطابع الشخصي”, never once occurs. That three-for-three pattern is why we complete it in brackets. Not worked through: Article 27, which names and defines the Agency, and Law 09-08, the personal-data statute Article 23 cites. Also not worked through: any ANRT (Agence Nationale de Réglementation des Télécommunications) regulation or ruling, including whatever ANRT has published on selling a SIM to a tourist.

Before this page was written, the competitor pages and search-results captures collected for this site were searched rather than assumed empty. Not one of them is dedicated to Morocco: “Morocco,” “maroc,” and “marokko” each turn up only as one country named among several, on other-destination or multi-country pages. Two search-results captures target a Morocco eSIM query directly — “morocco esim whatsapp calls work” — returning 96 and 9 organic results, fetched August 2026. Every result concerns WhatsApp and VoIP calling. None discusses SIM identification, KYC, or Law 24-96. No traveller forum thread collected for this site mentions Morocco either.

Plans, prices, network, and catalog flags come from Airalo’s data for Choukran, checked 17 August 2026. They can change without notice. This page reads Moroccan law as the government portal’s own version stood on 17 August 2026. It does not read the law as the Official Gazette prints it, per the portal’s own first line above.

Sources cited only — expert review pending. For individualized advice, consult a licensed professional.