Vietnam banks tighten digital security after AI‑driven fraud arrests

Vietnam police announced the detention of 13 individuals in June 2026 for exploiting AI‑generated deep‑fake and malware to bypass facial‑recognition and fingerprint checks on bank apps, prompting the State Bank of Vietnam to tighten biometric authentication rules for online transactions【1】. The arrests underscore a growing “underground market” for tools that can defeat multi‑layered bank security, raising immediate concerns for the sector’s digital trust.

Surge in AI‑enabled banking fraud

The June 26 2026 operation in Thanh Hóa uncovered a network that harvested and sold large volumes of bank‑account data, using custom software to hijack phone cameras and feed stored portrait images into banks’ facial‑recognition systems. A similar crackdown in Hà Nội on June 6 2026 led to five arrests for producing and distributing malware capable of bypassing biometric checks. Earlier, Lai Châu authorities reported customized mobile devices that could defeat facial‑recognition on e‑banking apps. These coordinated incidents indicate a nascent “black‑market” for high‑tech fraud tools rather than isolated crimes【1】.

Regulatory response and new safeguards

In response, the State Bank of Vietnam (NHNN) has refined its legal framework. The 28 June 2024 Circular 17/2024/TT‑NHNN now mandates that banks verify customer identity against biometric data for high‑risk or large‑value online transactions, with thresholds set at VND 10 million per transaction and VND 20 million per day for individuals. Additional directives issued in 2023 and 2024 require on‑site biometric verification for certain account changes and enforce stricter controls on “rác” (throwaway) accounts used in illicit activities【1】. These measures aim to reinforce the “digital trust” that underpins the sector’s expansion.

Industry perspective

At the NHNN’s 13 July 2026 IT conference, Cục trưởng Cục Công nghệ Thông tin Lê Hoàng Chính Quang emphasized that digital transformation must be paired with robust security and risk‑management. He warned that shortcuts in system safety or data protection would erode customer confidence, a sentiment echoed by Governor Phạm Đức Ấn, who framed digital safety as a prerequisite for sustainable banking innovation【2】. The consensus among officials is that the new biometric thresholds and tighter oversight will curb the profitability of fraud schemes that rely on low‑value, high‑frequency transactions.

What to watch

• NHNN enforcement data – weekly reports on the number of banks complying with the biometric thresholds.
• Next cyber‑security briefing – scheduled for early August 2026, where authorities may disclose additional technical standards.
• Market sentiment – any notable shifts in Vietnamese banking stocks or bond yields following further regulatory announcements.

The crackdown highlights the accelerating arms race between financial institutions and cyber‑criminals leveraging AI. While the new biometric rules raise the cost of low‑value fraud, the emergence of sophisticated deep‑fake tools suggests that banks must continuously evolve their security architectures to preserve digital trust.