You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

August 21, 2023

New Regulations on Onshore Loans in Vietnam

Subscribe to Updates

On September 1, 2023, Circular No. 06/2023/TT-NHNN (“Circular 06”) issued by the State Bank of Vietnam on June 28, 2023, will take effect. This circular introduces noteworthy amendments to the regulations concerning the offering of onshore loans to customers by credit institutions (including commercial banks and foreign bank branches).

Introducing New Lending Restrictions but Loosening Refinancing Restrictions

Circular 06 introduces several new categories of loans that credit institutions are not allowed to provide. These include loans for depositing money in accounts; loans for making or acquiring capital contributions or shares in other companies which have not yet been listed on the securities market or registered for trading on the UPCoM system; and loans for paying capital contributions under capital contribution contracts, investment cooperation contracts, or business cooperation contracts for implementation of investment projects that fail to satisfy conditions for being put into business operation. [However, Circular No. 10/2023/TT-NHNN, issued shortly before Circular 06 was to take effect (see related story here), suspended the restrictions on the latter two categories until further notice.]

A new exception in Circular 06 allows credit institutions to offer loans for repaying foreign loans if the foreign loans were granted in the form of deferred payment for purchase of goods. Circular 06 also amends an exception of the previous regulations that new loans for repaying foreign loans or onshore loans from other credit institutions can be offered, as long as the term of the new loan does not exceed the remaining term of the original loan and the refinanced loan has not yet undergone any repayment rescheduling. This exception removes a requirement under the previous regulations that the original loan had to be made “for business purposes.”

Further, Circular 06 introduces the term “financial reimbursement” (“cho vay bù đắp tài chính” in Vietnamese) whereby credit institutions offer loans to customers to reimburse expenses advanced by the customer from its own capital, or capital borrowed from other individuals and non-bank entities, to implement plans or projects for business activities or living purposes.

Credit institutions are not allowed to offer financial reimbursement unless the borrowers can prove statutory conditions are satisfied. First, the borrowers must have used their own capital for paying costs incurred from their business project within the 12-month period before the date of the lending decision. Second, the costs to be reimbursed must be those that are listed in the usage plan approved by the credit institution for the loan for that business project. [The application of these conditions has also been suspended under Circular No. 10/2023/TT-NHNN. For the time being, loans for financial reimbursement are permissible.]

Conditions for Digital Lending by Credit Institutions

Circular 06 provides key conditions for digital lending. To provide digital lending, credit institutions are required to have a level-3 or higher information system used for carrying out digital lending activities. (Information systems are classified in increasing strictness from level-1 to level-5 based on standards for the types of information processed and their respective security level.)

Credit institutions are free to adopt their own measures and technologies for carrying out digital lending, but must satisfy certain requirements such as:

  • Adopting solutions and technologies for ensuring accuracy, confidentiality, and safety during the collection, use, and verification of information;
  • Adopting measures for examining, checking, updating, and verifying information (“eKYC”), and measures for preventing acts of forging, interfering with, and falsifying information;
  • Developing measures for monitoring, identifying, measuring, and controlling risks, and developing risk treatment plans; and
  • Assigning responsibilities to each individual or department for performance of digital lending activities and risk management and control.

The requirement to develop and implement an efficient and secure process of verifying a customer’s identity makes the measures and technologies for eKYC the most essential to minimize the risk of identity fraud. Specifically, for individuals who apply for loans for living purposes and wish to obtain the loans from the credit institution via digital lending as the first transaction for establishing the relationship with such credit institution, the eKYC process must be conducted properly to check and verify that the individuals are the ones conducting the e-transaction and have consented to the loan agreement.

In addition, credit institutions must store and manage, in a full and detailed manner, customer identification information and biometric data of their customers; sounds, images, videos and recordings (as applicable to customer identification); telephone numbers used for conducting transactions; and transaction logs.

The outstanding balance of loans for living purposes for an individual customer who has been identified or duly verified via digital lending may not exceed VND 100,000,000 (approximately USD 4,200).

Other Changes

Circular 06 sets out other new regulations. In particular, credit institutions and their customers may agree on a currency for loan repayment that is different from the lending currency. For a loan having one or more overdue payments, Circular 06 also provides for a more detailed repayment order than the previous regulations.

After issuance of Circular 06 by the State Bank of Vietnam, the Prime Minister requested a working session between Deputy Prime Minister Le Minh Khai and the Governor of the State Bank of Vietnam to study and amend certain unreasonable points in Circular 06 that would too heavily restrict loans to borrowers. There may be further loosening of the requirements in the near future.

[UPDATE: This meeting resulted in the issuance of a new circular on August 23, 2023, which suspended some of the restrictions found in Circular 06, as noted above.]

Related Professionals

Practices

Banking and Finance

Location

RELATED INSIGHTS​ 

June 19, 2025
The Bank of Thailand (BOT) has released draft guidelines establishing principles for managing artificial intelligence (AI) risks in the financial sector. The draft guidelines provide a structured framework for the responsible adoption of AI technologies. Financial service providers will be able to use the guidelines as a reference to appropriately manage their risks in a manner that aligns with internationally recognized best practices. The BOT is accepting public comments on the draft guidelines until June 30, 2025. Scope and Application The draft guidelines apply to all financial service providers, including financial institutions and special financial institutions under the Financial Institution Business Act, as well as payment providers under the Payment Systems Act. These guidelines supplement existing BOT risk management guidelines covering IT risk management, third-party risk management, data governance, and market conduct. The guidelines define AI systems as systems that mimic human intelligence, including machine learning, deep learning, generative AI (such as large language models), and agentic AI. This definition specifically excludes rule-based automation systems like robotic process automation and condition matching. Key Risk Management Principles The guidelines lay out two main principles in managing AI risk. Governance: Financial service providers should define and establish clear roles and responsibilities for their personnel and AI system supervision structures to uphold FEAT (fairness, ethics, accountability, and transparency) principles as follows: Stakeholder roles and responsibilities. Financial service providers should define roles and responsibilities for boards and executives on AI risk oversight. Responsibilities include establishing an AI system usage policy, designating personnel responsible for AI risk management, and building awareness of AI-related risk within the organization. AI system usage policy. The AI system usage policy should be aligned with organizational objectives, regulatory requirements, and FEAT principles. These policies should be reviewed regularly to respond to technological advancements and evolving risk profiles. Risk management
Read More
June 12, 2025
Thailand’s Ministry of Finance has issued a royal decree placing the business of hire purchase and leasing of cars and motorcycles under the scope of the Financial Institution Business Act B.E. 2551 (2008), effective December 2, 2025. This is to ensure appropriate regulatory oversight of these business activities, as they function similarly to credit granting and serve as a source of funding for the public with a broad impact on the overall economic system and consumers at large. The business operators that this royal decree applies to include corporate entities engaging regularly in the business of hire purchase or leasing of cars or motorcycles, currently excluding: Financial institutions and specialized financial institutions. Individuals operating such businesses (noncorporate entities). Cooperatives. Key regulatory obligations of this royal decree include the following: Business operators must disclose interest rates, service fees, and other relevant business information to the public and report to the Bank of Thailand (BOT). Business operators must display how the annual percentage rate (APR), including all annual charges covering interest and service fees, is calculated. Business operators must maintain accurate accounting records in accordance with recognized accounting standards. The BOT may issue warnings or suspend operations if business operators fail to comply with this royal decree or act unfairly in a way that may result in serious harm to customers. Directors, managers, and responsible persons of any business operator that violates this royal decree may also be subject to the prescribed penalties. Before the royal decree takes effect, business operators should conduct internal assessments and engage with counsel to prepare for regulatory implementation. The BOT is expected to issue further subordinate regulations and guidance regarding: Interest, service fees, deposits, collateral, benefits, and penalties that may be charged by business operators. Contract content, methods of benefit calculation, and format in conducting
Read More
May 28, 2025
Tilleke & Gibbins attorneys in Vietnam have contributed the 2025 edition of Doing Business in Vietnam, a comprehensive Q&A-style resource from Thomson Reuters Practical Law that provides essential insights for companies navigating business operations in Vietnam. The guide presents a detailed overview of the country’s legal framework and regulatory environment, reflecting recent updates in Vietnamese legislation and practice. This annually updated guide offers key information on the following areas: Legal system: Structure of the Vietnamese judiciary and the role of codified law. Foreign investment: Conditions for market access, licensing requirements, foreign ownership restrictions, and investment incentives. Business vehicles: Formation and operation of legal entities, including limited liability companies, joint-stock companies, and representative offices. Employment: Employment contracts, social insurance, labor rights, and procedures for hiring foreign nationals. Tax: Overview of corporate income tax, personal income tax, value-added tax, and other tax obligations. Intellectual property: Procedures for protecting and enforcing patents, trademarks, copyrights, and other IP rights. Data protection: Compliance requirements under Vietnam’s data privacy laws, including the Personal Data Protection Decree. Competition law: Antitrust rules and regulatory oversight under the Law on Competition. Anti-bribery and corruption: Legal framework and enforcement practices aimed at curbing corrupt activities. E-commerce and digital business: Regulations governing online platforms, digital content, and cross-border services. Marketing and advertising: Laws and guidelines on advertising standards and consumer protection. Product regulation and liability: Safety requirements, product liability issues, and roles of relevant authorities. Doing Business in Vietnam is part of Practical Law’s global series of legal guides designed to support international practitioners and businesses. To access the most recent edition of the Vietnam guide, visit the Practical Law website and sign up for a free trial.
Read More
May 5, 2025
On April 29, 2025, the government of Vietnam promulgated Decree No. 94/2025/ND-CP with regulations on a controlled “sandbox” for innovative fintech solutions in the banking sector (Decree 94). The decree aims to promote innovation, modernize banking, and enhance financial inclusion while assessing risks and benefits of fintech solutions in a controlled testing environment. Fintech Sandbox Currently, the fintech sandbox focuses on three specific areas: Credit scoring Open API data sharing Peer-to-peer (P2P) lending Eligible participants for the fintech sandbox include: Credit institutions and foreign bank branches (except for P2P lending) Fintech companies operating in Vietnam Cross-border supply by foreign providers is not included in the sandbox framework. Eligible participants are permitted to provide fintech solutions only within the scope specified in the Certificate of Sandbox Participation issued by the State Bank of Vietnam in consultation with other ministries. P2P lending companies face specific restrictions within the fintech sandbox, including prohibitions against: Providing security for customer loans Operating as a customer (i.e., P2P lender or borrower) Providing P2P lending solutions to pawn shops The maximum sandbox period is two years, with the possibility of extension as permitted by law. The outcomes of the fintech sandbox will serve as a practical basis for authorities to develop and refine future fintech regulations. It is worth noting that participation in the sandbox does not guarantee that participants will meet relevant business and investment conditions that may be stipulated in future regulations. Decree 94 will take effect on July 1, 2025, signaling that the Vietnamese government intends to take a proactive approach to fostering fintech development. Implications Parties interested in participating in the fintech sandbox should begin preparing now to be ready to apply for a Certificate of Sandbox Participation when the decree takes effect.
Read More