[CLSTR]
API
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [BUSINESS]

14 clusters · 17 sources · 58 days · First seen · Last updated

Vietnam banking security, AI, and identity updates

Overview

Vietnamese financial institutions and regulators are implementing rigorous security measures, digital identity requirements, and AI regulations to combat fraud. Under Circular 77/2025/TT-NHNN, mobile banking access will be restricted on devices with security risks, such as those with active debuggers, emulators, or compromised operating systems. Vietcombank will cease support for the VCB Digibank app on Android versions lower than 7.0 starting June 10, 2026.

To prevent identity theft, banks like Vietcombank, BIDV, VietinBank, and Agribank may freeze accounts linked to expired identification documents. Furthermore, Circular 08/2026/TT-BKHCN mandates biometric facial authentication within two hours of a SIM card transfer. TPBank will stop supporting facial authentication on iOS devices below version 16.7 starting November 1, 2026.

Major banks, including Vietcombank, VietinBank, BIDV, Agribank, and ACB, have issued urgent warnings regarding Coruna and DarkSword malware targeting iPhone users. Coruna targets iOS versions 13 through 17.2.1, while DarkSword exploits vulnerabilities in iOS 18.4 through 18.7. These tools can infect devices through compromised websites or malicious advertisements to steal passwords, OTP codes, and personal data. ABBank has also specifically alerted users to DarkSword, noting it can access keychain data, notes, photos, and crypto wallets via Safari.

Regulatory updates include Circular 53/2026/TT-NHNN, which regulates AI in banking. Additionally, the State Bank of Vietnam is drafting a new circular to replace Circular 09/2020/TT-NHNN to strengthen information system security. This proposal addresses risks from cloud computing, AI, and open APIs by mandating data classification, encryption based on ISO/IEC 27001:2022 standards, and the use of immutable storage for geographically separate backups to combat ransomware. Electronic transaction accounts must link with the VNeID digital identity system by June 30, 2027. In response to these standards, CAKE by VPBank will require customers to reset Smart OTP settings starting October 30, 2026.

Entities

State Bank of Vietnam · VietinBank · Vietcombank · TPBank · Ministry of Public Security

Timeline

  1. [BUSINESS] 2 sources
    Vietnamese banks issue security warnings over malware and password practices

    Vietnamese banks warn of DarkSword iOS malware and implement stricter Smart OTP security measures to protect customer data and assets.

  2. [BUSINESS] 2 sources
    Vietnam State Bank proposes new data security regulations for banking sector

    The State Bank of Vietnam is drafting new regulations to enhance data security, encryption, and ransomware protection for the banking sector amid rising digital risks.

  3. [TECHNOLOGY] 5 sources
    Vietnamese banks warn iPhone users of Coruna and DarkSword malware

    Major Vietnamese banks warn iPhone users that Coruna and DarkSword malware can steal passwords and OTPs by exploiting iOS vulnerabilities via malicious websites.

  4. [BUSINESS] 2 sources
    Vietnamese banks update mobile app OS requirements

    Vietnamese banks ACB and TPBank are raising mobile operating system requirements for their digital banking apps to improve security, affecting users on older iOS and Android versions.

  5. [CRIME] 2 sources
    Vietnam authorities intensify banking surveillance to combat money laundering

    Vietnamese police are increasing monitoring of bank accounts to detect money laundering, focusing on suspicious high-value transfers, unofficial currency exchanges, and cryptocurrency-linked transactions.

  6. [BUSINESS] 2 sources
    Vietnamese banks announce service changes and security advisories

    Vietnamese banks announce various updates: VietinBank is closing a transaction office, VPBank faces a scheduled service outage, LPBank is migrating to a new digital app, and Vietbank issued security warnings.

  7. [BUSINESS] 7 sources
    Vietnam State Bank issues new AI regulations for banking sector

    Vietnam's State Bank issued Circular 53 to regulate AI in banking, classifying high-value automated transactions as high-risk. New rules also mandate VNeID authentication for various digital accounts by late 20

  8. [BUSINESS] 9 sources
    Vietnamese banks implement security updates for digital transactions

    Vietnamese banks TPBank and LPBank are updating digital services to boost security, affecting high-value transactions on older iOS versions and transitioning users to new mobile applications.

  9. [TECHNOLOGY] 3 sources
    Vietnam implements mandatory biometric authentication for SIM transfers

    New regulations in Vietnam require users to perform biometric facial authentication within two hours of moving a SIM to a new device to prevent service suspension and fraud.

  10. [BUSINESS] 4 sources
    Vietnam banking security rules to restrict mobile app access

    Starting March 2026, new Vietnamese banking regulations will block mobile banking apps on devices with security risks like rooting, jailbreaking, or active debuggers to enhance cybersecurity.

  11. [BUSINESS] 2 sources
    State Bank of Vietnam proposes stricter anti-money laundering oversight

    The State Bank of Vietnam proposes new anti-money laundering regulations targeting VIP clients, bank executives, and politically exposed persons to enhance financial supervision.

  12. [BUSINESS] 2 sources
    Vietnamese banks implement fraud prevention transaction blocking

    Vietnamese banks, including ABBank and KienlongBank, are deploying new systems to block or warn users about fraudulent transfers by integrating with national cybersecurity and fraud monitoring databases.

  13. [BUSINESS] 3 sources
    VietinBank and TPBank announce operational updates in Vietnam

    VietinBank is relocating its Phuong Dong transaction office in Quang Ninh, while TPBank implements new verification procedures for foreign incoming transfers to comply with anti-money laundering regulations.

  14. [BUSINESS] 3 sources
    Vietnamese banks to freeze accounts over identity verification

    Major Vietnamese banks like Vietcombank and BIDV will freeze accounts or block transactions for users with expired or invalid identification documents to comply with new security regulations.

Sources

afamily.vn · baogialai.com.vn · baohatinh.vn · baoquangninh.vn · cafebiz.vn · cafef.vn · congnghe.vn · genk.vn · giaoducthoidai.vn · hoahoctro.tienphong.vn · kenh14.vn · phunuvietnam.vn · soha.vn · thanhnien.vn · thoibaonganhang.vn · thoibaotaichinhvietnam.vn · tienphong.vn

This summary has been updated 14 times: see revision history