You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

May 9, 2024

Critical Updates to Vietnam’s Regulatory Framework for Intermediary Payment Services

As non-cash payments continue to surge in Vietnam, the requirement for strong security standards and a clear legislative framework for intermediary payment services (“IPS”) is becoming more and more critical. Recognizing this, the State Bank of Vietnam (“SBV”) has been working on a draft decree to supersede the outdated Decree No. 101/2012/ND-CP dated November 22, 2012, on non-cash payments (“Draft Non-Cash Payment Decree”), which will lay the groundwork for non-cash payments in general and the provision of IPS in particular.

Building upon this, the SBV recently issued a draft circular to replace Circular No. 39/2014/TT-NHNN dated December 11, 2014, on IPS (“Circular 39”) (“Draft IPS Circular”), which will offer more detailed guidance on the provision of IPS in Vietnam on top of the Draft Non-Cash Payment Decree. The Draft IPS Circular will be applicable to (i) IPS providers; (ii) foreign organizations providing IPS in Vietnam; and (iii) organizations and individuals involved in the provision of IPS.

Some key updates regarding the Draft IPS Circular are as follows:

Scope of Application

The Draft IPS Circular sets out further guidance for the provision of IPS as listed under the Draft Non-Cash Payment Decree, including: (i) electronic clearing services; (ii) electronic wallet (“e-wallet”) services; (iii) collection and payment support services; (iv) financial switching services; (v) international financial switching services; and (vi) electronic payment gateway services.

Notably, the Draft IPS Circular has explicitly excluded from its scope of application the provision of accounts by goods/service providers to their customers solely for the purpose of payment within the systems of such providers (e.g., cards/coupons or service/transaction accounts of online game service providers, transportation service providers, or securities companies, etc.).

Requirements on the Provision of IPS

Electronic Clearing Services: The Draft IPS Circular introduces regulations to cover certain elements of electronic clearing services that have not been explicitly outlined in Circular 39. This is done to ensure alignment with Circular No. 37/2016/TT-NHNN dated December 30, 2016, on the management, operation, and use of the national interbank electronic payment system, specifically:

  • Additional clarification is provided on the responsibilities of the “organization presiding over electronic clearing system,” which refers to an IPS provider licensed by the SBV to offer financial switching services and electronic clearing services. This organization is also permitted to directly participate in and connect with the interbank electronic payment system (“IEPS”) for the purpose of conducting electronic clearing settlements. To achieve this, the organization will have to construct and operate an Electronic Clearing System.
  • To send, receive, and process payment transactions, IPS providers need to be members of the Electronic Clearing System. This system consists of two types of memberships: settlement members and non-settlement members. Settlement members in the system have an established net debt limit within the system, maintain a payment account at the SBV Transaction Office, and are responsible for managing their own clearing settlements. Non-settlement members depend on settlement members to manage these tasks while still being able to send, receive, and process payment transactions within the system.
  • The conditions for becoming a settlement member include: (i) being a direct member of the IEPS; (ii) establishing, monitoring, and managing an electronic clearing limit; and (iii) having written commitments with the organization presiding over the Electronic Clearing System and the SBV Transaction Office regarding its payment ability.

E-Wallet Services: The Draft Non-Cash Payment Decree and the Draft IPS Circular tightly regulate e-wallet services in the same manner as other non-cash payment methods. Some notable requirements for the provision of e-wallet services include the following:

  • E-wallet customers: Pursuant to the Draft IPS Circular, e-wallet customers are individuals and organizations allowed to open and have payment accounts at banks and/or branches of foreign banks. E-wallet service providers are not allowed to open their own e-wallets.
  • E-wallet opening channels: E-wallet opening channels have been expanded, allowing customers to also register to open e-wallets directly at partnered banks or their online transaction channels according to the e-wallet service contracts/agreements between the e-wallet service providers and the partnered banks.
  • E-wallet transaction limit: The Draft IPS Circular prescribes the personal e-wallet limit at VND 100 million/month (about USD 400/month) for normal payment transactions (excluding transactions for goods and services serving the essential needs of consumers).
  • Linking e-wallets with owners’ payment accounts/debit cards: In order to maintain a strict management approach as reflected in the Draft Non-Cash Payment Decree as well as the SBV’s recent directions, the Draft IPS Circular does not allow e-wallet customers to use e-wallets in the absence of a connection with their payment accounts/debit cards.
  • E-wallet services payment capability assurance: The Draft IPS Circular requires that e-wallet service providers must maintain (i) a payment guarantee account specifically for e-wallet services; and (ii) segregation of account information, money flows, and the use of the payment guarantee account for e-wallet services, as well as for any collection and payment support services, if applicable.

Collection and Payment Support Services: The Draft IPS Circular sets forth several principles on the provision of collection and payment support services, including: (i) subjects allowed to use the services (i.e., customers having payment accounts or bank cards); (ii) requirements for an agreement or contract with the partnered banks, which are to contain regulations on payment guarantee measures for the provision of these services, including opening a payment guarantee account, maintaining deposits, or other guarantee measures.

IPS Containing International Elements: The Draft IPS Circular provides guidance on the provision of IPS containing international elements, specifically regarding (i) foreign IPS providers that offer IPS to customers who are non-residents and foreigners residing in Vietnam to perform payment transactions for goods and/or services in Vietnam; and (ii) Vietnamese IPS providers who allow customers to perform payment transactions for goods and/or services in foreign countries.

Electronic Payment Gateway Services: The Draft IPS Circular separates the obligations of financial switching service providers, international financial switching service providers, and electronic clearing service providers from those of electronic payment gateway service providers. This separation is made due to the distinct nature of the former services, which involve providing services to parties involved in the payment systems rather than directly to customers, as is the case with payment gateway services. The Draft IPS Circular also includes a section outlining the obligations of electronic payment gateway service providers, covering their responsibilities toward both their customers and their service provision partners, such as associated banks and merchants.

Short Transitional Period

The Draft IPS Circular is expected to take effect on July 1, 2024, with a transitional period until December 31, 2024, for IPS providers to review existing information, documents, procedures, etc., and implement necessary measures to ensure full compliance. Depending on the specific circumstances, failure to do so may subject the IPS providers to penalties such as enforced termination of service provision, termination of respective partnership contracts/agreements, or termination of partnership from January 1, 2025.

IPS-Related Issues Under Other Legal Instruments

In addition to the Draft Non-Cash Payment Decree and the Draft IPS Circular, several recently released and impending legal instruments also have the potential to reshape the legal landscape for the provision of IPS in Vietnam. These include the following:

  • Decision No. 2345/QD-NHNN of the SBV dated December 18, 2023, on the application of safety and security measures to online payment and card payment: Categorizes online transactions based on transaction value and imposes specific authentication measures on the respective transaction categories, especially including an authentication mechanism using biometric data for certain transactions. Also prescribes risk mitigation solutions in online payments applicable to IPS providers, including notably: (i) customer authentication for individual customers for their first transaction using mobile banking; (ii) notification of first log-in to internet banking/mobile banking applications; and (iii) storage of information about devices on which customers’ online transactions are carried out and transaction authentication logs.
  • Draft circular to replace Circular No. 46/2014/TT-NHNN of the SBV dated December 31, 2014, guiding non-cash payment services: Addresses the responsibilities of payment service providers when cooperating with IPS providers, including (i) the responsibility to have a written agreement that clearly stipulates the parties’ obligations regarding confidentiality of customer information, payment transactions, and liability for violations of this obligation; and (ii) the responsibility for coordinating with IPS providers in checking and comparing data, authenticating transactions, customer information, etc.
  • Draft circular to replace Circular No. 20/2018/TT-NHNN of the SBV dated August 30, 2018, on the supervision of payment systems: Regulates the supervision of activities related to the provision of IPS, including monitoring compliance with legal regulations and overseeing risk management activities. These activities encompass policy development, risk management processes, and implementation activities.
  • Draft circular to replace Circular 19/2016/TT-NHNN of the SBV dated June 30, 2016, on bank card operations: Addresses the cooperation between IPS providers and other parties in transactions related to bank cards, specifically in the electronic switching and clearing of these transactions.
  • Draft circular on payment agent services: Expands regulations to encompass certain activities that resemble those of IPS providers but are not legally considered IPS. These activities now may include the following on behalf of banks: (i) collecting and verifying documents to open accounts, (ii) receiving and verifying information for bank card issuance, and (iii) handling customer service, processing transactions, and receiving or paying cash for customers.

Conclusion

As part of a series of draft circulars under the regulatory development program of the SBV this year, the Draft IPS Circular encompasses a number of new and more stringent regulations on the provision of IPS. The Draft IPS Circular is expected to address the loopholes in the existing Circular 39 and usher in momentous changes to the legal framework governing IPS in Vietnam. Given the anticipated short transitional period for compliance, IPS providers should closely monitor the progress of this draft circular to ensure they are fully prepared to comply with its new requirements.

RELATED INSIGHTS​ 

July 8, 2026
On July 7, 2026, the Trade Competition Commission of Thailand (TCCT) issued a press release announcing the establishment of two new subcommittees designed to intensify oversight of digital platforms and modern trade businesses. The formation of the digital platform subcommittee marks a significant escalation in competition enforcement following the TCCT’s Guidelines on Multi-Sided Platforms and E-Commerce Businesses, which took effect on March 25, 2026. Platform operators, sellers, and related service providers should expect heightened regulatory scrutiny and potential investigations into practices already flagged under the March guidelines. Two Dedicated Enforcement Bodies The first new body is the digital platform subcommittee—formally the Subcommittee on Supervision, Monitoring, and Prevention of Trade Conduct in Digital Platform Business. It is tasked with driving intensive oversight of digital platform businesses. It will coordinate with government agencies, the private sector, business operators, and other relevant stakeholders to supervise and prevent trade conduct that may affect competition, and to promote free and fair competition in the digital platform sector. The subcommittee will be composed of TCCT members and representatives from the Department of Internal Trade. The second body—the Subcommittee on Determining Guidelines and Action Plans Concerning Competition Conditions in Modern Wholesale and Retail Business—will study, analyze, and monitor market structure in modern wholesale and retail businesses, compile databases to analyze retail business concentration, assess impacts on small-scale operators, and propose supervisory measures for the retail sector. TCCT members will serve on the subcommittee alongside experts from government and private organizations, including the Office of Industrial Economics, the Office of Small and Medium Enterprises Promotion, the Thai SME Federation, and the Thai SME Council. Operational Impact for Industry Participants These subcommittees provide the TCCT with a focused mechanism to investigate various trade practices deemed unfair, and the TCCT has authority under the Trade Competition Act to issue cease-and-desist
July 6, 2026
Vietnam has introduced an official list of high-risk AI systems, triggering more stringent compliance obligations for developers, suppliers, and deployers operating in the country. On June 30, 2026, the prime minister issued Decision No. 33/2026/QD-TTg (Decision 33), which establishes the List of High-Risk AI Systems under the Law on Artificial Intelligence (AI Law) and Decree No. 142/2026/ND-CP (Decree 142). Decision 33 takes effect on August 15, 2026. Decision 33 is significant because only AI systems included on the list will be subject to the heightened compliance obligations applicable to high-risk AI systems under the AI Law and Decree 142. These include, among others, local presence requirements for foreign providers, mandatory conformity assessment before deployment, comprehensive risk management and data quality documentation, and strict liability for damages even when the provider is fully compliant. Decision 33 also specifies the applicable conformity assessment pathway for each listed system, indicating whether the system must undergo mandatory third-party conformity certification before being placed into use, or whether the provider may self-assess conformity or voluntarily engage a registered or recognized conformity assessment body. Which AI Systems Are Covered? Decision 33 identifies high-risk AI systems across six sectors—the key attributes of which are summarized below. Education: AI systems used for automated assessment, learner ranking, behavioral monitoring, or generating educational content from uncontrolled data sources. Ethnic affairs and religion: AI systems used to automatically score, classify, or rank applications for government ethnic policies; approve or reject regulatory applications; suspend benefits on suspicion of fraud; allocate budgets; or infer and classify individuals by ethnicity or religion for administrative purposes. Healthcare: AI-assisted surgical systems and autonomous AI-powered surgical robots. Banking: AI systems that autonomously conduct electronic banking transactions or make credit approval decisions. Judicial proceedings: Certain large-scale biometric identification systems used in public-interest civil proceedings. Transport: Thirty-one categories
July 6, 2026
Indonesia’s regulation on reporting online intellectual property (IP) infringement provides comprehensive procedural guidance for IP rights holders and their licensees in reporting online infringement complaints. Issued in December 2025 by the Ministry of Law as Regulation No. 47 of 2025 regarding Handling of Intellectual Property Infringement Reports in Electronic Systems, this regulation covers all types of IP rights. It also specifies documentation when reporting infringement, and lays out the procedures for examination, verification, and enforcement actions. Submission of Complaints Complainants may submit reports through the online system of the Directorate General of Intellectual Property (DGIP) or in person at the DGIP office. Complaints may also be filed through an authorized proxy. Under the regulation, complainants are required to provide the following information and documents: Personal details of the complainant; Brief description of the protected work or subject matter (i.e., type of IP and name or address of the infringing website, portal, account, or application, or a link to the location of the infringing content); Complete description of the alleged infringement; Certificate of registration or recordal of the relevant IP; Recordal of IP license agreement, if any; and Other supporting evidence. Verification and Examination Process Upon receiving a complaint, the responsible formality officer may request clarification or additional supporting documents. In the latter case, the complainant must then submit the necessary administrative documents within 14 days of the notification date. Once the documentation is deemed complete and sufficient, the case will be formally registered. Subsequently, the DGIP will establish a verification team to handle online IP violations, which will include the Civil Servant Investigator (PPNS), the Ministry of Communication and Digital Affairs, experts with relevant expertise in IP, and representatives from related associations such as AVISI (Indonesian Video Streaming Association). After examining the report, the team will prepare the Minutes
July 6, 2026
Tilleke & Gibbins has contributed the Vietnam chapter to Data Protection & Privacy 2027, a global guide published by Lexology Panoramic that provides comparative insights into data protection and privacy regimes across multiple jurisdictions. The Vietnam chapter offers a comprehensive overview of the country’s data protection framework, addressing both regulatory structure and practical compliance considerations for businesses operating in or engaging with Vietnam. Topics covered include: Law and the regulatory authority: Legislative framework; data protection authority; cooperation with other data protection authorities; breaches of data protection law; judicial review of data protection authority orders Scope: Exempt sectors and institutions; interception of communications and surveillance laws; other laws; personal information formats; extraterritoriality; covered uses of personal information Legitimate processing of personal information: Lawful bases for processing; grounds for legitimate processing; types of personal information Data handling responsibilities of owners of personal information: Transparency; exemptions from transparency obligations; data accuracy; data minimization; data retention; purpose limitation; automated decision-making Security: Security obligations; notification of data breaches; internal controls Accountability: Data protection officer requirements; record-keeping; risk assessment; design of personal information processing systems Registration and notification: Registration requirements; other transparency duties Sharing and cross-border transfers of personal information: Sharing with processors and service providers; restrictions on third-party disclosures; cross-border transfers; further transfers; localization requirements Rights of individuals: Right of access; other statutory rights; compensation Enforcement: Enforcement mechanisms; exemptions, derogations, and restrictions; further exemptions and restrictions Specific data processing: Cookies and similar technologies; electronic communications marketing; targeted advertising; sensitive personal information; profiling; cloud services The chapter concludes with an update on key legal and regulatory developments over the past year and emerging trends in Vietnam’s data protection landscape. The full Vietnam chapter is available as a PDF through the button below. Readers can also gain 30 days of complementary access to the full Data