3 ms·

This is likely part of the Vietnamese and Thai governments' rollout of biometric linking for bank accounts, similar to KYC regulations in the United States. The

This is likely part of the Vietnamese and Thai governments' rollout of biometric linking for bank accounts, similar to KYC regulations in the United States. The deadline for Vietnamese biometric linking was December 19th, 2025 [1]. The Vietnamese government has reported a rise in account takeovers and other banking thefts [2]. SIM-swapping has been a tactic used. Adding difficulty for fraudsters to trick unsophisticated banking customers is a valid security layer. 1. https://vietnamnet.vn/en/biometric-deadline-nears-millions-of-accounts-face-online-suspension-from-2026-2474005.html https://vietnamnet.vn/en/biometric-deadline-nears-millions-o... 2. https://evrimagaci.org/gpt/vietnam-faces-surge-in-sophisticated-online-banking-scams-521355 https://evrimagaci.org/gpt/vietnam-faces-surge-in-sophistica... (expands upon https://vneconomy-vn/techconnect/mobile-banking-phat-trien-manh-tai-viet-nam.htm)

alephnerd 9mo ago
Partially, but it's also connected with the VNeID project [0]. The goal is by 2030 [1], all Vietnamese nationals and foreign visitors will have a digital biometric ID attached to themselves, and all services linked to said ID. [0] - https://vneid.gov.vn/ https://vneid.gov.vn/ [1] - https://tuoitre.vn/thieu-tuong-nguyen-ngoc-cuong-nang-cap-vneid-thanh-sieu-nen-tang-so-diem-truy-cap-duy-nhat-20251220151845288.htm https://tuoitre.vn/thieu-tuong-nguyen-ngoc-cuong-nang-cap-vn...
basilikum 9mo ago
> SIM-swapping has been a tactic used. Adding difficulty for fraudsters to trick unsophisticated banking customers is a valid security layer. You fight SIM-swapping by outlawing the moronic practice of using SMS for anything security sensitive. Not by blocking user modified OSes.
- morshu9001 9mo ago
  What's the alternative that regular people will understand how to use and not get locked out of?
  - basilikum 9mo ago
    TOTP is pretty standard. Give the user backup codes and just use normal recovery methods. For most things that might be email. For a bank it's probably identity verification.
    - freddie_mercury 9mo ago
      The vast majority of Vietnamese I know do not have an email account. So that would be a dumb thing for a Vietnamese bank to use as a recovery method.
      - morshu9001 9mo ago
        Email shouldn't be recovery for bank anywhere, you go to the bank for that. But TOTP is so user-hostile that I can see it causing too many recovery requests for the bank.

alephnerd 9mo ago

Partially, but it's also connected with the VNeID project [0]. The goal is by 2030 [1], all Vietnamese nationals and foreign visitors will have a digital biometric ID attached to themselves, and all services linked to said ID. [0] - https://vneid.gov.vn/ https://vneid.gov.vn/ [1] - https://tuoitre.vn/thieu-tuong-nguyen-ngoc-cuong-nang-cap-vneid-thanh-sieu-nen-tang-so-diem-truy-cap-duy-nhat-20251220151845288.htm https://tuoitre.vn/thieu-tuong-nguyen-ngoc-cuong-nang-cap-vn...

basilikum 9mo ago

> SIM-swapping has been a tactic used. Adding difficulty for fraudsters to trick unsophisticated banking customers is a valid security layer. You fight SIM-swapping by outlawing the moronic practice of using SMS for anything security sensitive. Not by blocking user modified OSes.

morshu9001 9mo ago
What's the alternative that regular people will understand how to use and not get locked out of?
- basilikum 9mo ago
  TOTP is pretty standard. Give the user backup codes and just use normal recovery methods. For most things that might be email. For a bank it's probably identity verification.
  - freddie_mercury 9mo ago
    The vast majority of Vietnamese I know do not have an email account. So that would be a dumb thing for a Vietnamese bank to use as a recovery method.
    - morshu9001 9mo ago
      Email shouldn't be recovery for bank anywhere, you go to the bank for that. But TOTP is so user-hostile that I can see it causing too many recovery requests for the bank.