You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

May 9, 2024

Critical Updates to Vietnam’s Regulatory Framework for Intermediary Payment Services

Subscribe to Updates

As non-cash payments continue to surge in Vietnam, the requirement for strong security standards and a clear legislative framework for intermediary payment services (“IPS”) is becoming more and more critical. Recognizing this, the State Bank of Vietnam (“SBV”) has been working on a draft decree to supersede the outdated Decree No. 101/2012/ND-CP dated November 22, 2012, on non-cash payments (“Draft Non-Cash Payment Decree”), which will lay the groundwork for non-cash payments in general and the provision of IPS in particular.

Building upon this, the SBV recently issued a draft circular to replace Circular No. 39/2014/TT-NHNN dated December 11, 2014, on IPS (“Circular 39”) (“Draft IPS Circular”), which will offer more detailed guidance on the provision of IPS in Vietnam on top of the Draft Non-Cash Payment Decree. The Draft IPS Circular will be applicable to (i) IPS providers; (ii) foreign organizations providing IPS in Vietnam; and (iii) organizations and individuals involved in the provision of IPS.

Some key updates regarding the Draft IPS Circular are as follows:

Scope of Application

The Draft IPS Circular sets out further guidance for the provision of IPS as listed under the Draft Non-Cash Payment Decree, including: (i) electronic clearing services; (ii) electronic wallet (“e-wallet”) services; (iii) collection and payment support services; (iv) financial switching services; (v) international financial switching services; and (vi) electronic payment gateway services.

Notably, the Draft IPS Circular has explicitly excluded from its scope of application the provision of accounts by goods/service providers to their customers solely for the purpose of payment within the systems of such providers (e.g., cards/coupons or service/transaction accounts of online game service providers, transportation service providers, or securities companies, etc.).

Requirements on the Provision of IPS

Electronic Clearing Services: The Draft IPS Circular introduces regulations to cover certain elements of electronic clearing services that have not been explicitly outlined in Circular 39. This is done to ensure alignment with Circular No. 37/2016/TT-NHNN dated December 30, 2016, on the management, operation, and use of the national interbank electronic payment system, specifically:

  • Additional clarification is provided on the responsibilities of the “organization presiding over electronic clearing system,” which refers to an IPS provider licensed by the SBV to offer financial switching services and electronic clearing services. This organization is also permitted to directly participate in and connect with the interbank electronic payment system (“IEPS”) for the purpose of conducting electronic clearing settlements. To achieve this, the organization will have to construct and operate an Electronic Clearing System.
  • To send, receive, and process payment transactions, IPS providers need to be members of the Electronic Clearing System. This system consists of two types of memberships: settlement members and non-settlement members. Settlement members in the system have an established net debt limit within the system, maintain a payment account at the SBV Transaction Office, and are responsible for managing their own clearing settlements. Non-settlement members depend on settlement members to manage these tasks while still being able to send, receive, and process payment transactions within the system.
  • The conditions for becoming a settlement member include: (i) being a direct member of the IEPS; (ii) establishing, monitoring, and managing an electronic clearing limit; and (iii) having written commitments with the organization presiding over the Electronic Clearing System and the SBV Transaction Office regarding its payment ability.

E-Wallet Services: The Draft Non-Cash Payment Decree and the Draft IPS Circular tightly regulate e-wallet services in the same manner as other non-cash payment methods. Some notable requirements for the provision of e-wallet services include the following:

  • E-wallet customers: Pursuant to the Draft IPS Circular, e-wallet customers are individuals and organizations allowed to open and have payment accounts at banks and/or branches of foreign banks. E-wallet service providers are not allowed to open their own e-wallets.
  • E-wallet opening channels: E-wallet opening channels have been expanded, allowing customers to also register to open e-wallets directly at partnered banks or their online transaction channels according to the e-wallet service contracts/agreements between the e-wallet service providers and the partnered banks.
  • E-wallet transaction limit: The Draft IPS Circular prescribes the personal e-wallet limit at VND 100 million/month (about USD 400/month) for normal payment transactions (excluding transactions for goods and services serving the essential needs of consumers).
  • Linking e-wallets with owners’ payment accounts/debit cards: In order to maintain a strict management approach as reflected in the Draft Non-Cash Payment Decree as well as the SBV’s recent directions, the Draft IPS Circular does not allow e-wallet customers to use e-wallets in the absence of a connection with their payment accounts/debit cards.
  • E-wallet services payment capability assurance: The Draft IPS Circular requires that e-wallet service providers must maintain (i) a payment guarantee account specifically for e-wallet services; and (ii) segregation of account information, money flows, and the use of the payment guarantee account for e-wallet services, as well as for any collection and payment support services, if applicable.

Collection and Payment Support Services: The Draft IPS Circular sets forth several principles on the provision of collection and payment support services, including: (i) subjects allowed to use the services (i.e., customers having payment accounts or bank cards); (ii) requirements for an agreement or contract with the partnered banks, which are to contain regulations on payment guarantee measures for the provision of these services, including opening a payment guarantee account, maintaining deposits, or other guarantee measures.

IPS Containing International Elements: The Draft IPS Circular provides guidance on the provision of IPS containing international elements, specifically regarding (i) foreign IPS providers that offer IPS to customers who are non-residents and foreigners residing in Vietnam to perform payment transactions for goods and/or services in Vietnam; and (ii) Vietnamese IPS providers who allow customers to perform payment transactions for goods and/or services in foreign countries.

Electronic Payment Gateway Services: The Draft IPS Circular separates the obligations of financial switching service providers, international financial switching service providers, and electronic clearing service providers from those of electronic payment gateway service providers. This separation is made due to the distinct nature of the former services, which involve providing services to parties involved in the payment systems rather than directly to customers, as is the case with payment gateway services. The Draft IPS Circular also includes a section outlining the obligations of electronic payment gateway service providers, covering their responsibilities toward both their customers and their service provision partners, such as associated banks and merchants.

Short Transitional Period

The Draft IPS Circular is expected to take effect on July 1, 2024, with a transitional period until December 31, 2024, for IPS providers to review existing information, documents, procedures, etc., and implement necessary measures to ensure full compliance. Depending on the specific circumstances, failure to do so may subject the IPS providers to penalties such as enforced termination of service provision, termination of respective partnership contracts/agreements, or termination of partnership from January 1, 2025.

IPS-Related Issues Under Other Legal Instruments

In addition to the Draft Non-Cash Payment Decree and the Draft IPS Circular, several recently released and impending legal instruments also have the potential to reshape the legal landscape for the provision of IPS in Vietnam. These include the following:

  • Decision No. 2345/QD-NHNN of the SBV dated December 18, 2023, on the application of safety and security measures to online payment and card payment: Categorizes online transactions based on transaction value and imposes specific authentication measures on the respective transaction categories, especially including an authentication mechanism using biometric data for certain transactions. Also prescribes risk mitigation solutions in online payments applicable to IPS providers, including notably: (i) customer authentication for individual customers for their first transaction using mobile banking; (ii) notification of first log-in to internet banking/mobile banking applications; and (iii) storage of information about devices on which customers’ online transactions are carried out and transaction authentication logs.
  • Draft circular to replace Circular No. 46/2014/TT-NHNN of the SBV dated December 31, 2014, guiding non-cash payment services: Addresses the responsibilities of payment service providers when cooperating with IPS providers, including (i) the responsibility to have a written agreement that clearly stipulates the parties’ obligations regarding confidentiality of customer information, payment transactions, and liability for violations of this obligation; and (ii) the responsibility for coordinating with IPS providers in checking and comparing data, authenticating transactions, customer information, etc.
  • Draft circular to replace Circular No. 20/2018/TT-NHNN of the SBV dated August 30, 2018, on the supervision of payment systems: Regulates the supervision of activities related to the provision of IPS, including monitoring compliance with legal regulations and overseeing risk management activities. These activities encompass policy development, risk management processes, and implementation activities.
  • Draft circular to replace Circular 19/2016/TT-NHNN of the SBV dated June 30, 2016, on bank card operations: Addresses the cooperation between IPS providers and other parties in transactions related to bank cards, specifically in the electronic switching and clearing of these transactions.
  • Draft circular on payment agent services: Expands regulations to encompass certain activities that resemble those of IPS providers but are not legally considered IPS. These activities now may include the following on behalf of banks: (i) collecting and verifying documents to open accounts, (ii) receiving and verifying information for bank card issuance, and (iii) handling customer service, processing transactions, and receiving or paying cash for customers.

Conclusion

As part of a series of draft circulars under the regulatory development program of the SBV this year, the Draft IPS Circular encompasses a number of new and more stringent regulations on the provision of IPS. The Draft IPS Circular is expected to address the loopholes in the existing Circular 39 and usher in momentous changes to the legal framework governing IPS in Vietnam. Given the anticipated short transitional period for compliance, IPS providers should closely monitor the progress of this draft circular to ensure they are fully prepared to comply with its new requirements.

Related Professionals

Industries

Fintech

Technology

Practices

Banking and Finance

Location

RELATED INSIGHTS​ 

July 17, 2026
On July 11, 2026, media reports conveyed key messages from Bank of Thailand (BOT) Governor Vitai Ratanakorn’s announcement of a sweeping regulatory crackdown on grey capital activities. The measures target high-value cash transactions, gold trading, and stablecoin flows, with new requirements set to take effect in the fourth quarter of 2026. The initiative aims to prevent financial institutions from facilitating shadow economy activity, money laundering—particularly through stablecoins—and capital flight, through enhanced compliance obligations on commercial banks across multiple transaction channels. Expanded Cash Controls Close the Deposit–Withdrawal Circuit New fourth-quarter guidelines will require individuals depositing THB 5 million or more in cash to formally verify the source of their funds. This builds on restrictions introduced in April 2026, which required anyone withdrawing 5 million baht or more in cash to provide their bank with verified commercial justification for why electronic transfers or checks could not be used. That initial measure caused high-value physical cash withdrawals to drop by 35 percent nationwide. The upcoming deposit-side requirement closes the circuit on large cash movements. The BOT is also assessing tracking mechanisms for high-value banknote swaps, specifically targeting individuals seeking to exchange large volumes of THB 1,000 notes into smaller THB 100 or THB 500 denominations without clear business justification. Governor Vitai emphasized that these measures require continuous deployment of multiple parallel strategies rather than short-term fixes. Tightened Bullion Reporting Frameworks Restrict Money Laundering Channels The BOT has also tightened reporting frameworks for gold trading to close money laundering loopholes and shield the Thai baht from speculative bullion volatility. Regulators identified a recurring pattern in which buyers purchased large quantities of gold through digital applications in the morning and then made same-day physical withdrawals from retail gold shops in the afternoon. Gold shops are reminded of their duties to flag and report cash
Read More
July 16, 2026
Thailand’s Office of the Personal Data Protection Committee (PDPC) published a series of draft guidance documents for public consultation on July 7, 2026. Issued under the Personal Data Protection Act B.E. 2562 (2019) (PDPA), the drafts address a range of compliance issues and offer insight into the regulator’s current enforcement priorities. This article examines two of those drafts: one on lawful bases for processing personal data, and another on marketing and direct marketing. Together, they reflect the Office of the PDPC’s evolving expectations on lawful-basis selection, accountability, and the use of personal data in marketing. Organizations operating in Thailand should assess the practical implications now, before the guidance is finalized. Lawful Bases: A Structured Selection Process The draft guidance on lawful bases introduces a systematic five-step process for selecting an appropriate lawful basis for each processing activity. Organizations are expected to: Identify the processing activity involved. Assess the appropriate lawful basis. Evaluate whether the data is necessary for the processing. Conduct a legitimate interest assessment (LIA) where applicable. Ensure transparency through privacy notices. The guidance provides practical explanations and examples for each lawful basis under section 24 of the PDPA—including archiving, research, statistics, vital interests, contractual necessity, legal obligation, public task, legitimate interests, and consent—as well as the bases applicable to sensitive personal data under section 26. The aim is to promote more consistent and accurate lawful-basis selection across public- and private-sector organizations. A recurring theme throughout the guidance is that organizations should select the lawful basis that most accurately reflects the actual purpose and circumstances of the processing activity. The guidance cautions against treating consent as a default or catch-all basis where another lawful basis is more appropriate. For processing based on legitimate interests, organizations should conduct and document an LIA. Processing involving sensitive personal data may require
Read More
July 14, 2026
Thailand’s National Broadcasting and Telecommunications Commission (NBTC) has published guidelines establishing a risk-based framework for the responsible use of artificial intelligence by telecom licensees. Released on July 2, 2026, the Guidelines on the Use of Artificial Intelligence for Telecommunications Services address governance structures, ethical principles, lifecycle management, and consumer protection obligations. Scope and Legal Context The nonbinding guidelines apply to holders of telecom business licenses under Thailand’s telecom licensing laws, but only with respect to the use of AI in providing licensed telecom services. Entities without such licenses are not directly subject to the guidelines, though they may be affected as third-party AI solution providers to licensees. The guidelines supplement and should be read alongside existing laws, including the Cybersecurity Act, the Personal Data Protection Act (PDPA), the Computer Crime Act, and the NBTC Notification regarding Measures to Protect Telecommunications Service Users’ Rights Regarding Personal Data, Privacy Rights, and Freedom of Telecommunications, as well as forthcoming AI governance legislation being drafted by the ETDA. AI Governance Structure Licensees are expected to establish committees, working groups, or designated officers at both policy and operational levels to set strategic direction for AI use, formulate governance policies and tools, and oversee risk management. Roles, responsibilities, and accountability should be clearly defined for all personnel across every stage of the AI lifecycle—including for third-party AI solution providers and outsourced service providers, whose obligations should be explicitly documented in service agreements. Core Principles The guidelines identify six core principles that licensees should adhere to when deploying AI: Compliance with laws, ethics, and international standards: AI should respect privacy, dignity, and human rights, and content filtering for inputs and outputs should be considered. For example, the AI should not be designed and developed to be used in generating false information, supporting illegal activities, or causing
Read More
July 10, 2026
Vietnam has taken a significant step in regulating its e-commerce sector with the issuance of a new decree guiding the country’s recently enacted Law on E-Commerce. Decree No. 248/2026/ND-CP, issued on June 30, 2026, and taking effect the following day, addresses mandatory platform policies, registration requirements for offshore platforms, additional obligations on platform operators, and market access conditions for foreign investors. Mandatory Policy Contents The decree sets out detailed guidance on the required contents of various platform policies, covering pricing, payment, display priority, livestream sales, delivery, returns, method of service provision, and service termination and refunds. Clarification of Obligations for Platform Operators The decree provides clarification of the obligations applicable to platform operators. Notably, intermediary e-commerce platform operators with online ordering functions must: Collect specific information to implement electronic identity verification of sellers; Cooperate with regulators by reporting online through the state e-commerce management system and by blocking, suspending, or removing content upon request of a competent authority; Maintain a mechanism to store contract data, including price, product or service information, and parties’ information, for at least three years from the date of contract conclusion; and If qualifying as a “large digital platform” under consumer protection law, maintain an online system for receiving and handling complaints and requests, and comply with enhanced content-removal requirements. Registration Requirements for Offshore Platforms Offshore e-commerce platforms, whether direct-sales, intermediary, social-network-based, or integrated, that conduct e-commerce activity in Vietnam must register with the Ministry of Industry and Trade if the platform: Allows Vietnamese-language selection; Uses a “.vn” domain; or Reaches 100,000 or more transactions with Vietnam-based buyers within a calendar year. Notably, the registration requirement now captures not only traditional intermediary platforms, but also direct-sales platforms. Foreign Investment Conditions Foreign investors holding a controlling interest in an intermediary e-commerce platform, a social media platform
Read More