Internet gateway provisioning and evaluation of embedded subscriber identity module (eSIM) privileges is provided. The Internet gateway receives, from a device, a request to provision an embedded subscriber identity module (eSIM) of the device. The Internet gateway, in response to receiving the request to provision the eSIM of the device, causes the eSIM of the device to be provisioned with a profile. Provisioning the eSIM gives the device an ability to authenticate with a base station for communicating, via the base station, over a cellular communication protocol. The Internet gateway, after causing the eSIM to be provisioned, determines whether at least one criterion is met. The at least one criterion is for retaining or denying the ability of the device to authenticate with the base station. The Internet gateway, sends data, to a server, indicating that the at least one criterion is met.