[CLSTR]
API
< Back to situation

[REVISION HISTORY]

Vietnam banking security, AI, and identity updates

14 recorded revisions of this situation.

What changed

2026-11-03 13:14 UTC → 2026-11-09 04:59 UTC · added removed

Vietnamese financial institutions and regulators are implementing rigorous security measures, digital identity requirements, and AI regulations to combat fraud. Under Circular 77/2025/TT-NHNN, mobile banking access will be restricted on devices with security risks, such as those with active debuggers, emulators, or compromised operating systems. Vietcombank will cease support for the VCB Digibank app on Android versions lower than 7.0 starting June 10, 2026. To prevent identity theft, banks like Vietcombank, BIDV, VietinBank, and Agribank may freeze accounts linked to expired identification documents. Furthermore, Circular 08/2026/TT-BKHCN mandates biometric facial authentication within two hours of a SIM card transfer. TPBank will stop supporting facial authentication on iOS devices below version 16.7 starting November 1, 2026. Major banks, including Vietcombank, VietinBank, BIDV, Agribank, and ACB, have issued urgent warnings regarding Coruna and DarkSword malware targeting iPhone users. Coruna targets iOS versions 13 through 17.2.1, while DarkSword exploits vulnerabilities in iOS 18.4 through 18.7. These tools can infect devices through compromised websites or malicious advertisements to steal passwords, OTP codes, and personal data. ABBank has also specifically alerted users to DarkSword, noting it can access keychain data, notes, photos, and crypto wallets via Safari. Regulatory updates include Circular 53/2026/TT-NHNN, which regulates AI in banking. Additionally, the State Bank of Vietnam is drafting a new circular to replace Circular 09/2020/TT-NHNN to strengthen information system security. This proposal addresses risks from cloud computing, AI, and open APIs by mandating data classification, encryption based on ISO/IEC 27001:2022 standards, and the use of immutable storage for geographically separate backups to combat ransomware. Electronic transaction accounts must link with the VNeID digital identity system by June 30, 2027. In response to these standards, CAKE by VPBank will require customers to reset Smart OTP settings starting October 30, 2026.

Versions

  1. 2026-11-09 04:59 UTC Vietnam banking security, AI, and identity updates
  2. 2026-11-03 13:14 UTC Vietnam banking security, AI, and identity updates
  3. 2026-10-30 17:05 UTC Vietnam banking security, AI, and identity updates
  4. 2026-10-30 01:02 UTC Vietnam banking security, AI, and identity updates
  5. 2026-10-17 03:19 UTC Vietnam banking security and AI regulatory updates
  6. 2026-10-12 13:59 UTC Vietnam banking security and AI regulatory updates
  7. 2026-10-12 03:20 UTC Vietnam banking security and AI regulatory updates
  8. 2026-10-11 02:15 UTC Vietnam banking security and AI regulatory updates
  9. 2026-10-04 14:21 UTC Vietnamese banking and telecommunications security updates
  10. 2026-10-02 19:40 UTC Vietnamese banking and telecommunications security updates
  11. 2026-09-29 04:16 UTC Vietnamese banking and telecommunications security updates
  12. 2026-09-25 23:51 UTC Vietnamese banking regulatory and security updates
  13. 2026-09-25 05:50 UTC Vietnamese banking regulatory and security updates
  14. 2026-09-20 04:01 UTC Vietnamese banking regulatory and security updates
  15. 2026-09-16 12:57 UTC Vietnamese banking regulatory and verification updates

Select a version to see what changed compared to the one before it.