Vietnam's Decree 320 sets a June 2027 deadline to link existing online banking accounts to VNeID digital IDs

Implications for lenders

Lenders in Vietnam that disburse loans to, or collect repayments from, customers' bank accounts may need to check that those accounts are linked to VNeID as the 30 June 2027 deadline approaches. Identity data obtained through VNeID can be used only with the borrower's consent and is logged, so onboarding and credit-check flows may need consent records. Non-bank lenders may need to watch for ministerial lists that add their online transactions to the linking requirement.

Implications

Facts

Rule: Decree 320/2026/ND-CP, signed on 13 August 2026 and in force since 28 September 2026, amends Decree 69/2024/ND-CP on electronic identification and authentication. It requires electronic transaction accounts on digital platforms in listed fields to be linked to and authenticated with an electronic identification account (VNeID). The fields include banking, securities, telecommunications, education, e-invoices, transport, tourism, pharmacy and medical services, social networks, and e-commerce sellers, livestream sellers and affiliate marketers. Ministers may name further online transactions that must be linked before use.

Deadlines: accounts in the banking sector created before the decree took effect must be linked no later than 30 June 2027. Existing accounts in the other listed fields must be linked no later than 31 December 2026, the same date by which national digital platforms must integrate VNeID log-in and authentication.

Data use: a party that accesses a person's identification data needs that person's consent. Organisations that receive data through the system must keep an access history, which the account holder can see in the national identification app, and may not pass the data on unless the person asks or the law provides for it.

Existing bank rules: under SBV Circulars 17/2024/TT-NHNN and 18/2024/TT-NHNN, in force since 1 January 2025, withdrawals and electronic payments from payment accounts and electronic card transactions are allowed only after the customer's identity and biometric data have been verified. From 1 January 2026, according to the SBV as reported by Viet Nam News, electronic transactions require biometric data that match a chip-based ID card or a high-level electronic identification account, and passports are no longer accepted from Vietnamese customers for opening bank cards.

Analysis

Vietnam's identity rules for bank customers have tightened in steps: biometric verification for electronic transactions from 1 January 2025, the end of passport use for Vietnamese customers' bank cards from 1 January 2026, and, under Decree 320, a VNeID link for older electronic banking accounts by 30 June 2027. The decree gives banks a longer deadline than the other listed fields, which must finish linking by 31 December 2026.

The rule sits alongside Vietnam's anti-money-laundering commitments. Vietnam has been on the FATF list of jurisdictions under increased monitoring since June 2023; in June 2026 the FATF noted that all deadlines in Vietnam's action plan had expired in May 2025 and urged it to implement the plan swiftly. A government resolution of July 2026 (Resolution 66.23/2026/NQ-CP) separately set beneficial-ownership and customer due diligence rules. In Thailand, the Bank of Thailand has addressed account misuse through other tools, including age-based daily transfer caps on accounts held by children and teenagers that banks had to apply from September 2026 and source-of-funds checks on large foreign-currency inflows.

Counterpoints and uncertainties

The decree does not say whether unlinked accounts will be restricted after the deadlines; implementing guidance from the SBV may decide how banks treat them. The decree text does not spell out whether accounts at finance companies, e-wallets or other non-bank lenders count as banking-sector accounts. Widely circulated English versions are unofficial translations; the Vietnamese text governs.