A method at a user equipment comprising a mobile equipment (310, 410, 510, 610) and a smartcard (312, 412, 710) having only a first subscriber identity stored thereon, wherein the first subscriber identity is associated with a home network of the user equipment, the method comprising: receiving at the user equipment, over the internet, from a remote server, a plurality of second subscriber identities and a corresponding roaming policy; storing the plurality of second subscriber identities and the corresponding roaming policy on the smartcard while maintaining the first subscriber identity on the smartcard, wherein the corresponding roaming policy includes expiry and revocation information necessary to enforce rules for when each of the plurality of the second subscriber identities is used during roaming and for when each of the plurality of second subscriber identities needs to be removed from the provided smartcard; determining that the user equipment is roaming in a visited network; determining, by a roaming applet on the user equipment, using the roaming policy, whether a change of subscriber identity is necessary; selecting, if determined that a subscriber identity change is necessary, based on the corresponding roaming policy, a subscriber identity of the plurality of the second subscriber identities; attaching to the visited network based on the selected subscriber identity; wherein the smartcard includes common authentication keys and algorithms for the first subscriber identity and the plurality of second subscriber identities; and removing, when needed, by the roaming applet on the user equipment, a subscriber identity from the smartcard in accordance with the expiry and revocation information in the corresponding roaming policy for the subscriber identity. receiving at the user equipment, over the internet, from a remote server, a plurality of second subscriber identities and a corresponding roaming policy; storing the plurality of second subscriber identities and the corresponding roaming policy on the smartcard while maintaining the first subscriber identity on the smartcard, wherein the corresponding roaming policy includes expiry and revocation information necessary to enforce rules for when each of the plurality of the second subscriber identities is used during roaming and for when each of the plurality of second subscriber identities needs to be removed from the provided smartcard; determining that the user equipment is roaming in a visited network; determining, by a roaming applet on the user equipment, using the roaming policy, whether a change of subscriber identity is necessary; selecting, if determined that a subscriber identity change is necessary, based on the corresponding roaming policy, a subscriber identity of the plurality of the second subscriber identities; attaching to the visited network based on the selected subscriber identity; wherein the smartcard includes common authentication keys and algorithms for the first subscriber identity and the plurality of second subscriber identities; and removing, when needed, by the roaming applet on the user equipment, a subscriber identity from the smartcard in accordance with the expiry and revocation information in the corresponding roaming policy for the subscriber identity.