You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

May 14, 2021

Vietnam’s Decree 21 Updates Regulations on Security for Performance of Obligations

On May 15, 2021, Decree No. 21/2021/ND-CP of the Government of Vietnam dated March 19, 2021, guiding the implementation of the Civil Code of 2015 on security for performance of obligations (Decree 21) will come into effect and replace Decree No. 163/2006/ND-CP of the Government dated December 29, 2006, on security transactions, as amended by Decree No. 11/2012/ND-CP (together, “Decree 163”).

One of the most significant changes of Decree 21 in comparison to Decree 163 is the new system of terminology in relation to security for performance of obligations. In particular, the new decree provides new definitions for existing terms such as “guarantor” and “guarantee” and sets out the definitions of newly added terms such as “secured obligator,” “security contract,” and “reasonable duration.” This change reflects the intention of the legislators to unify the relevant terminology in accordance with the Civil Code of 2015.

Article 4 of Decree 21 lists out principles for the application of laws and the parties’ agreements on security for performance of obligations. Accordingly, in cases where the laws on specialized areas such as land, housing, insurance, banking, aviation, or intellectual property have provisions on security assets, establishment and implementation of means of security, or enforcement of security assets, the provisions of the specialized laws will prevail. Moreover, if the parties have agreements that are different from provisions in Decree 21 but do not violate (i) fundamental principles of civil law or (ii) conditions for a civil transaction to be valid or (iii) limitations on the exercise of civil rights in accordance with the Civil Code or other relevant laws, such agreements may be enforced.

Decree 21 devotes an entire chapter to regulations on security assets (collateral) which includes definitions and descriptions of security assets and detailed provisions on 10 types of security assets including land use rights and assets attached to land, objects, valuable papers, etc. Notably, Decree 21 no longer provides that a security asset may not be attached by the courts or authorities to perform the guarantor’s other obligations if the security transaction is valid and effective against third parties and the laws do not regulate otherwise, as provided under Decree 163. This change makes the new decree consistent with the existing regulations on enforcement of civil judgments which state that mortgaged or pledged assets may still be attached for the purpose of enforcement of civil judgments, provided that the applicable conditions are satisfied.

The new decree provides detailed regulations on the establishment and implementation of means of security and enforcement of security assets. Accordingly, a means of security may be established based on the agreement of the parties via a security contract or a lien. For enforcement of security assets, Decree 21 goes into detail on the enforcement of future assets or invested mortgaged assets for the first time.

Decree 163 will still be applicable to security agreements or security interests which were established and implemented prior to May 15, 2021. The parties to such security agreements or security interests which have not been implemented or have been implemented but contain provisions different from provisions under Decree 21 may, but are not required to, agree to amend the existing security agreements or security interests to comply with the new decree.

RELATED INSIGHTS​ 

August 3, 2026
On July 23, 2026, the Bank of Thailand (BOT) released for public comment its draft Notification on Digital Channel Security, which would significantly expand the scope and stringency of Thailand’s existing mobile banking security framework. If finalized in its current form, the draft notification would extend mandatory security requirements to credit card providers and credit providers, cover internet banking in addition to mobile applications, phase out SMS one-time passwords (OTPs) for transaction authentication, and introduce biometric verification requirements for high-value transactions. The public comment period is open through August 24, 2026. Background The BOT’s existing Mobile Banking Security Notification, issued in 2024, sets minimum security standards for financial institutions, specialized financial institutions (SFIs), and e-money providers, significantly reducing “money-draining app” fraud. However, fraudsters have since shifted to nonbank providers and internet banking channels, prompting the BOT to propose broader security requirements. Expanded Scope of Regulated Entities and Channels The existing Mobile Banking Security Notification covers only financial institutions, SFIs, and e-money providers offering mobile banking services. The draft expands coverage in two key areas: entities and channels. On the entity side, it adds credit card providers and credit providers that offer fund transfers to third parties at other financial service providers or that provide cash withdrawal services to individual retail customers. On the channel side, it broadens coverage to include internet banking in addition to mobile banking. Strengthened Customer Authentication The draft introduces enhanced authentication requirements in three areas: Service enrollment and device changes. Providers must implement rigorous identity verification, notify customers of enrollment results through out-of-band communication channels, and adopt risk-mitigation measures such as cooling-off periods and temporary transaction limits. Transaction-level authentication. Providers must use two-factor authentication for fund transfers, cardless ATM withdrawals, and transaction limit increases. Secure authentication factors. Key requirements include the following: “What-you-know” factors must
July 27, 2026
A new decree on penalties for violations related to the crypto asset market creates compliance risks for offshore crypto asset exchanges in Vietnam that do not hold, and practically cannot obtain, a Vietnamese license, and for Vietnamese users who continue to transact on those platforms. Decree No. 284/2026/ND-CP (Decree 284), issued by the government of Vietnam on July 16, 2026, formally establishes an administrative penalty framework for violations related to crypto assets and the crypto asset market. The decree takes effect on September 1, 2026, and will remain in force for the duration of the five-year pilot program under Resolution No. 05/2025/NQ-CP, which is scheduled to end in September 2030. Direct Penalties on Vietnamese Users The most immediate commercial risk to offshore platforms is that their Vietnamese users now face direct personal liability for using their exchanges. Vietnamese users who trade crypto assets outside of a Ministry of Finance-licensed service provider face fines of up to VND 50 million (approximately USD 1,900). Vietnamese users trading in crypto assets that are offered or issued to foreign users face higher penalties of up to VND 100 million (approximately USD 3,800). It is expected that Vietnamese users will be more willing to migrate away from offshore platforms now that there is a risk of real enforcement against them. Penalties on Unlicensed Service Providers Violations of providing crypto asset services or advertising crypto-related services without a license face fines of up to VND 200 million (approximately USD 7,700). Operating a crypto asset trading market without proper authorization falls within the same highest penalty bands. Organizations that violate issuance, provision, or disclosure rules may face fines of up to VND 200 million. Although the maximum administrative fine per violation is capped at VND 200 million for organizations and VND 100 million for individuals, these
July 17, 2026
On July 11, 2026, media reports conveyed key messages from Bank of Thailand (BOT) Governor Vitai Ratanakorn’s announcement of a sweeping regulatory crackdown on grey capital activities. The measures target high-value cash transactions, gold trading, and stablecoin flows, with new requirements set to take effect in the fourth quarter of 2026. The initiative aims to prevent financial institutions from facilitating shadow economy activity, money laundering—particularly through stablecoins—and capital flight, through enhanced compliance obligations on commercial banks across multiple transaction channels. Expanded Cash Controls Close the Deposit–Withdrawal Circuit New fourth-quarter guidelines will require individuals depositing THB 5 million or more in cash to formally verify the source of their funds. This builds on restrictions introduced in April 2026, which required anyone withdrawing 5 million baht or more in cash to provide their bank with verified commercial justification for why electronic transfers or checks could not be used. That initial measure caused high-value physical cash withdrawals to drop by 35 percent nationwide. The upcoming deposit-side requirement closes the circuit on large cash movements. The BOT is also assessing tracking mechanisms for high-value banknote swaps, specifically targeting individuals seeking to exchange large volumes of THB 1,000 notes into smaller THB 100 or THB 500 denominations without clear business justification. Governor Vitai emphasized that these measures require continuous deployment of multiple parallel strategies rather than short-term fixes. Tightened Bullion Reporting Frameworks Restrict Money Laundering Channels The BOT has also tightened reporting frameworks for gold trading to close money laundering loopholes and shield the Thai baht from speculative bullion volatility. Regulators identified a recurring pattern in which buyers purchased large quantities of gold through digital applications in the morning and then made same-day physical withdrawals from retail gold shops in the afternoon. Gold shops are reminded of their duties to flag and report cash
July 15, 2026
On July 8, 2026, Thailand enacted a new law significantly expanding the framework for government service delivery and licensing facilitation. The Facilitation of Licensing and Public Services Consideration Act B.E. 2569 (2026) (Facilitation Act 2026) replaces and expands the framework of governmental services under the Facilitation of Official Licensing Consideration Act B.E. 2558 (2015) (Facilitation Act 2015) and broadens its scope to cover public services, administrative processes, and public benefits. The Facilitation Act 2026 aims to modernize government services by promoting e-filing, reducing administrative burdens and repeated document requests, and improving predictability. For businesses, this should ease compliance and shorten approval timelines, subject to implementing regulations and agency readiness. Public Services Facilitation Scope The Facilitation Act 2015 applied mainly to permissions, registrations, and notifications required before conducting activities that require licenses, certificates, permits, approvals, or registrations. The Facilitation Act 2026 broadens this framework to include public services and other benefits, such as welfare, subsidies, and grants, provided to Thai citizens, expanding government agencies’ responsibilities beyond licensing facilitation into a wider administrative-service framework. It also introduces a broader definition of “government agency” to include central, regional, and local government bodies, state enterprises, public organizations, and other state entities. Licensing Changes The Facilitation Act 2026 introduces a “super license” (termed a “main license” under the act) that exempts the holder from obtaining multiple related or ancillary licenses issued by different government agencies. Obtaining a super license deems the licensee to have automatically obtained the related “sublicenses” required to conduct the relevant activities. The cabinet will designate eligible activities by royal decree. The act also introduces an expedited licensing option, allowing applicants to pay an additional fee to fast-track their applications in urgent cases. Expedited processing must not interfere with standard application timelines. The criteria, procedures, conditions, and fees for expedited licensing