You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 4, 2017

Tailoring Anti-Corruption Compliance: Vietnam

Expert Talk, Thomson Reuters Risk Management Solutions

Effective anti-corruption compliance programs are tailored for local jurisdictions. While bribery methods share common characteristics, different countries usually have their own business or cultural norms which impact corruption risks. In one country, for example, it may be common for bribes to be disguised as charitable contributions; while in another, political contributions are the favored method to make illicit payments.

Most companies doing business across borders have codes of conduct or other forms of corruption prevention. But when a company is operating in a high-risk environment, just having a code of conduct or a rule prohibiting bribery is not enough. Great-looking compliance programs can founder when set against real-world situations. In short, although many companies promote an organizational culture of ethics and compliance, that culture must be translated to fit the intricacies of local business cultures. This article will review key principles on customizing compliance programs for local jurisdictions, using Vietnam as an example.

The Risks

Vietnam’s rapidly developing economy offers foreign investors significant business opportunities. For investors to truly benefit from this dynamic emerging market, they should also be aware of the compliance risks. While Vietnam has taken measures to combat corruption, the practice persists. Transparency International, an anti-corruption NGO, has given Vietnam a 2015 score of 31 out of 100, with 100 being the least corrupt. Vietnam is ranked 112 out of 168 countries in the survey. For comparison, Cambodia has a 2015 score of 21 out of 100, and a rank of 150 out 168 countries; Laos’s score is 25 out of 100, and is ranked 139 out of 168. Thailand’s score is 38 out of 100, and with a rank of 76 out of 168.

Vietnam’s centralized bureaucratic structure gives its government oversight over nearly all economic activity. Foreign and domestic investors must work with officials of varying seniority, such as licensing authorities, tax officials, and police, on a regular basis. Indeed, the level of investor-to-state interaction is far higher than what most Western companies are used to in their home jurisdictions.

Agents, consultants, and other third-party intermediaries thrive in this environment. Foreign investors often find the bureaucracy opaque and challenging. Many officials also do not speak English. As a result, investors may have no choice but to engage local intermediaries to liaise with state officials. The use of such intermediaries greatly elevates the risk of a corruption-related compliance failure as they may not know or follow the company’s compliance policies.

Furthermore, state-owned enterprises (SOEs) still play a dominant role in Vietnam’s economy. While SOEs’ influence is gradually declining, foreign investors should expect to do business with government-invested companies regularly. Joint venture enterprises, business cooperation contracts, public-private partnerships and general procurement all involve working with the state. Under the U.S. Foreign Corruption Practices Act and other international anti-corruption laws, employees of state-owned companies are generally considered government officials. The government’s strong presence in business presents many opportunities for bribery, increasing the risks.

Ensure the Correct Tone

So what can foreign investors do to protect themselves in this rewarding but high-risk environment? First and foremost, local management must sincerely believe in doing business ethically. While this concept may sound cliché, it holds true. An honest regional managing director is far less likely to tolerate bribery or any bending of ethics rules. This will set the correct tone for the rest of the employees in the local entity. An ethical regional managing director is also less likely to require staff to do “whatever is necessary” to get business. Having a laissez faire attitude to compliance from management will significantly increase the prospects of a compliance failure, given Vietnam’s corruption risks.

Localized Risk Assessment

An initial step to tailor the anti-corruption compliance program is to conduct a localized risk assessment for Vietnam. The assessment should identify the applicable risks to the company. The risks will largely depend on the company’s industry, customer base, and business operations. For example, life sciences companies doing business with state-owned hospitals will face different risks than accountancies. Common risks to assess in Vietnam include the number of required licenses and approvals to obtain; the extent to which the investor will engage with SOEs; and whether and how often the investor will engage third-party agents, consultants, or distributors.

Customized Policies and Procedures

After the risk assessment, the investor should prepare customized policies and procedures to address the relevant risks. As part of this, investors should examine their existing global policies and procedures and address any gaps with respect to the local risks. If such gaps exist, new local policies or procedures designed for Vietnam should be drafted. For example, if gift-giving during the Tet (Lunar New Year) holiday is identified as a major compliance risk, but the global policy does not deal with holiday gifts, a specific local policy should be crafted. Although the main guiding principles in the policies may be universal, the policies should be written in a way that addresses local nuances.

The documentation should be comprehensive enough to cover all the risks the compliance program is looking to mitigate. The policies should also address local legal requirements. The policies should also be available in Vietnamese, easy to read, and accessible by all employees.

Training

Localized training is critical to the success of any anti-corruption compliance program. Local employees, business partners, and other intermediaries should receive training on the investor’s policies, procedures, and compliance program. The training should be in Vietnamese whenever appropriate. It should also involve real-world hypotheticals that employees will face.

In addition to educating the employees on the policies and compliance program, training can help local employees “buy in” to the program. This is important for a number of reasons. First, employees may feel that a (foreign) head office is trying to impose “foreign values” on them. The perception may be that the foreign company does not understand how to do business in Vietnam, and that the compliance program restricts their “freedom” to win business. Similarly, employees may think that the standards they are being asked to comply with do not fit the “real-world” conditions they face. When this this happens, employees will lose respect for the compliance program, leading to compliance failures. Effective training will address this issue.

Effective training should include role-playing involving real-world situations. If the training consists only of a lecture on the company’s anti-corruption policies and the relevant law, it will not be as compelling. Instead, the policies and law should be shown through hypothetical “gray-area” situations that employees actually deal with. This will help employees understand the principles and give the compliance program more credibility. Moreover, the training should be tailored for different employees. For instance, salespeople should be given different training than accountants.

Due Diligence

At times it is necessary for a foreign investor in Vietnam to use an intermediary to liaise with the government or other parties. When working with local third parties, such as consultants, agents, or partners, the investor should conduct an initial screening. During the screening period, the investor should assess the scope of the relationship between the company and the intermediary. For instance, the investor should identify whether the third party will perform services on behalf of the organization or whether it will be authorized to represent the organization.

The investor should also assess how they came into contact with the intermediary they are looking to work with. A bright red flag is raised whenever an official recommends or encourages the investor to use a particular intermediary. Once the details surrounding the relationship have been assessed, the investor should look into the intermediary’s local reputation. Since the indicators for corruption are often not apparent in the business relationship itself, investors should have a strong understanding on the pricing of goods and services and applicable government fees. They should also conduct regular local audits to identify excessive or unusual payments made by the intermediary e.g., payments to foreign bank accounts; payments to corporate entities in bank accounts held by individuals, etc.

Whistleblowers

Essential to the success of any successful compliance program is implementing an effective reporting mechanism. The reporting mechanism will vary by company, but whatever the method used, employees should feel comfortable to report wrongdoing. This means assurances that the employee will not face retaliation. Employees in Vietnam (as elsewhere) may be very reluctant to report on their superiors. The company should instill a culture where reporting wrongdoing is actively encouraged.

Training can help to encourage employees to come forward when they suspect wrongdoing. The critical issue is to ensure that employees do not consider wrongful payments to be “business as usual”. The company can help by actively investigating and dealing with any complaints. Failing to do so will just reinforce employees’ view that wrongful payments are an accepted way to do business.

Conclusion

Any foreign investor seeking to enter Vietnam, or already there, should be cognizant of the anti-corruption compliance risks. Those risks are magnified if the investor does not have a localized compliance program to fit the business and cultural environment in Vietnam. Broad anti-corruption compliance principles certainly apply in Vietnam, as they do elsewhere. But those broad principles may get lost in translation when they cross borders. Therefore, the first step to implementing an effective anti-corruption compliance program in Vietnam is to recognize this challenge and take the appropriate customization measures.

The author would like to thank Keshav Jha for his valuable contribution to producing this article.

RELATED INSIGHTS​ 

August 20, 2026
As part of its membership in Lex Mundi, Tilleke & Gibbins has released the latest edition of its Guide to Doing Business in Thailand, providing an overview of the legal, regulatory, and commercial considerations for companies establishing or expanding operations in Thailand. The 2026 edition offers practical insight into the country’s business environment, investment framework, and operational requirements. The guide covers a wide range of topics relevant to foreign and domestic investors, including: Investment incentives and promotion schemes Financial facilities and banking regulations Exchange controls and money transfers Import and export regulations Business structures and incorporation options Requirements for establishing a business Operational and compliance considerations Business cessation and insolvency procedures Employment and labor laws Taxation Immigration and visa requirements Prepared by Tilleke & Gibbins lawyers across multiple practice areas, the publication outlines key aspects of doing business in Thailand, including foreign investment restrictions, regulatory compliance obligations, corporate structures, employment requirements, and recent legal and economic developments affecting investors. The publication forms part of Lex Mundi’s Country Guides series, a global collection of jurisdiction-specific reference materials prepared by member firms around the world. Together, these guides help companies evaluate opportunities, compare regulatory environments, and plan international business activities across multiple markets. The full Guide to Doing Business in Thailand 2026 is available through the button below.
August 18, 2026
The Bank of Thailand (BOT) is seeking public comment on proposed amendments that would significantly expand know-your-customer (KYC) and customer due diligence (CDD) requirements for cash-related transactions at financial institutions (FIs) and specialized financial institutions (SFIs). Released on August 5, 2026, the proposed regulation would supersede BOT Notification No. 16/2569, which focused primarily on cash withdrawal transactions. The public comment period is open through September 3, 2026. The amendments reflect concerns that FIs and SFIs may be used to facilitate the movement, concealment, and conversion of criminal proceeds, potentially damaging institutional operations and public confidence in the financial system. Expanded Scope of Covered Transactions The most significant change is the broadening of the definition of “cash-related transactions.” Previously, the regulation covered only cash withdrawals and uncrossed check withdrawals. The amended regulation extends coverage to include: Cash deposits, check deposits, or receipt of funds from the public not in the form of deposit accounts; Thai baht (THB) banknote exchange (different denominations); Receipt of cash for issuing checks and drafts; and Purchase, sale, or exchange of foreign banknotes. Mandatory Identity Verification and Risk Management For all cash-related transactions, FIs and SFIs must require customers, or authorized or delegated persons, to present identification or verify their identity before every transaction, including one-time (walk-in) transactions. Specific identification requirements vary by transaction type, customer nationality, and channel (branch vs. electronic). FIs and SFIs must also establish comprehensive risk management processes and procedures for cash-related transactions. These requirements include identifying customers or authorized representatives in accordance with transaction-specific verification standards, analyzing customer behavior, implementing risk-management measures proportionate to the customer’s risk profile, and recording abnormal behavior in relevant systems. The BOT also encourages institutions to proactively guide customers toward transaction channels that offer greater traceability than cash. For corporate customers in high-risk business sectors—including foreign
July 14, 2026
Tilleke & Gibbins has contributed the Thailand and Vietnam chapters to Investigations in Southeast Asia, a comprehensive guide published by Drew Network Asia (DNA). The resource provides a practical overview of anticorruption laws, corporate investigations, and compliance frameworks across six key Southeast Asian jurisdictions. Designed for in-house counsel, compliance officers, and risk management professionals, the guide offers actionable insights for navigating complex cross-border regulatory challenges and establishing effective, regionally coordinated compliance and investigation strategies. The guide begins with a regional perspective on enforcement trends and cross-border cooperation initiatives. Jurisdiction-specific chapters follow a standardized structure—covering primary corruption offenses, enforcement authorities, corporate liability, investigation procedures and dawn raids, whistleblower protections, and recommended compliance measures. In addition to country-by-country analysis, the publication highlights best practices for conducting internal investigations, managing digital evidence, and handling parallel proceedings involving multiple regional or international regulators. The guide serves as a practical reference for organizations operating in Southeast Asia. Because legal and regulatory risks depend on specific industry sectors and operational contexts, readers seeking tailored advice are encouraged to contact the authors listed in each chapter. The full guide is available for download through the button below or directly from the DNA website.
April 28, 2026
Thailand’s Anti-Corruption Cooperation Committee has issued a major update to the anticorruption standards required for private entities engaging in high-value state projects. The update, titled “Announcement re: Procurement Limits and Minimum Anticorruption Standards (No. 2),” replaces and amends key provisions of the original announcement dated September 25, 2024. Published in the Government Gazette on April 10, 2026, the new rules take effect on May 10, 2026, and apply to projects valued at more than THB 300 million (approximately USD 9.3 million). The key amendments to the anticorruption standards are detailed below. Expanded Definition of Conflict of Interest The 2026 regulation significantly broadens the scope of what constitutes a conflict of interest compared to the 2024 version, which focused primarily on basic kinship and business ties. Under the new rules, a conflict of interest includes using one’s position or authority to seek benefits for oneself, a group, close associates, or business, including through business relationships, kinship ties, or relationships with spouses or individuals living together as partners without marriage registration. The 2026 announcement also introduces specific examples that were largely absent from the 2024 text, such as holding shares in similar businesses that submit proposals for the same project, or submitting proposals for projects in which a relative, spouse, or unregistered partner is an “involved party” in that procurement. Continuous Compliance: The “Final Payment” Rule Under the 2024 rules, the coverage period for anticorruption policies was less strictly defined. The new regulation mandates a continuous timeline: policies or certifications must remain effective from the date of bid submission until the contractor receives the final payment installment under the contract. If a certification or policy is set to expire before the final payment, the contractor must submit a new self-audit form and supporting evidence to the state agency before the original