You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

August 21, 2023

New Regulations on Onshore Loans in Vietnam

On September 1, 2023, Circular No. 06/2023/TT-NHNN (“Circular 06”) issued by the State Bank of Vietnam on June 28, 2023, will take effect. This circular introduces noteworthy amendments to the regulations concerning the offering of onshore loans to customers by credit institutions (including commercial banks and foreign bank branches).

Introducing New Lending Restrictions but Loosening Refinancing Restrictions

Circular 06 introduces several new categories of loans that credit institutions are not allowed to provide. These include loans for depositing money in accounts; loans for making or acquiring capital contributions or shares in other companies which have not yet been listed on the securities market or registered for trading on the UPCoM system; and loans for paying capital contributions under capital contribution contracts, investment cooperation contracts, or business cooperation contracts for implementation of investment projects that fail to satisfy conditions for being put into business operation. [However, Circular No. 10/2023/TT-NHNN, issued shortly before Circular 06 was to take effect (see related story here), suspended the restrictions on the latter two categories until further notice.]

A new exception in Circular 06 allows credit institutions to offer loans for repaying foreign loans if the foreign loans were granted in the form of deferred payment for purchase of goods. Circular 06 also amends an exception of the previous regulations that new loans for repaying foreign loans or onshore loans from other credit institutions can be offered, as long as the term of the new loan does not exceed the remaining term of the original loan and the refinanced loan has not yet undergone any repayment rescheduling. This exception removes a requirement under the previous regulations that the original loan had to be made “for business purposes.”

Further, Circular 06 introduces the term “financial reimbursement” (“cho vay bù đắp tài chính” in Vietnamese) whereby credit institutions offer loans to customers to reimburse expenses advanced by the customer from its own capital, or capital borrowed from other individuals and non-bank entities, to implement plans or projects for business activities or living purposes.

Credit institutions are not allowed to offer financial reimbursement unless the borrowers can prove statutory conditions are satisfied. First, the borrowers must have used their own capital for paying costs incurred from their business project within the 12-month period before the date of the lending decision. Second, the costs to be reimbursed must be those that are listed in the usage plan approved by the credit institution for the loan for that business project. [The application of these conditions has also been suspended under Circular No. 10/2023/TT-NHNN. For the time being, loans for financial reimbursement are permissible.]

Conditions for Digital Lending by Credit Institutions

Circular 06 provides key conditions for digital lending. To provide digital lending, credit institutions are required to have a level-3 or higher information system used for carrying out digital lending activities. (Information systems are classified in increasing strictness from level-1 to level-5 based on standards for the types of information processed and their respective security level.)

Credit institutions are free to adopt their own measures and technologies for carrying out digital lending, but must satisfy certain requirements such as:

  • Adopting solutions and technologies for ensuring accuracy, confidentiality, and safety during the collection, use, and verification of information;
  • Adopting measures for examining, checking, updating, and verifying information (“eKYC”), and measures for preventing acts of forging, interfering with, and falsifying information;
  • Developing measures for monitoring, identifying, measuring, and controlling risks, and developing risk treatment plans; and
  • Assigning responsibilities to each individual or department for performance of digital lending activities and risk management and control.

The requirement to develop and implement an efficient and secure process of verifying a customer’s identity makes the measures and technologies for eKYC the most essential to minimize the risk of identity fraud. Specifically, for individuals who apply for loans for living purposes and wish to obtain the loans from the credit institution via digital lending as the first transaction for establishing the relationship with such credit institution, the eKYC process must be conducted properly to check and verify that the individuals are the ones conducting the e-transaction and have consented to the loan agreement.

In addition, credit institutions must store and manage, in a full and detailed manner, customer identification information and biometric data of their customers; sounds, images, videos and recordings (as applicable to customer identification); telephone numbers used for conducting transactions; and transaction logs.

The outstanding balance of loans for living purposes for an individual customer who has been identified or duly verified via digital lending may not exceed VND 100,000,000 (approximately USD 4,200).

Other Changes

Circular 06 sets out other new regulations. In particular, credit institutions and their customers may agree on a currency for loan repayment that is different from the lending currency. For a loan having one or more overdue payments, Circular 06 also provides for a more detailed repayment order than the previous regulations.

After issuance of Circular 06 by the State Bank of Vietnam, the Prime Minister requested a working session between Deputy Prime Minister Le Minh Khai and the Governor of the State Bank of Vietnam to study and amend certain unreasonable points in Circular 06 that would too heavily restrict loans to borrowers. There may be further loosening of the requirements in the near future.

[UPDATE: This meeting resulted in the issuance of a new circular on August 23, 2023, which suspended some of the restrictions found in Circular 06, as noted above.]

RELATED INSIGHTS​ 

February 27, 2026
The Bank of Thailand (BOT) has officially implemented a new regulatory framework supervising systemically important retail payment systems (SIRPS), effective February 21, 2026, with PromptPay being the first payment system designated as a SIRPS. Under this new set of regulations, the BOT may designate payment systems under the Payment Systems Act B.E. 2560 (2017) as SIRPSs based on quantitative and qualitative assessments. Once a system is designated as a SIRPS, the operator becomes subject to expanded supervisory obligations beyond the general requirements of the Payment Systems Act. Enhanced Supervisory Requirements SIRPS operators must comply with a heightened supervisory regime across three key areas, outlined below. 1. Governance SIRPS operators must maintain robust and transparent governance structures, including: Balanced board composition, with at least one-third of the board comprising independent directors who represent stakeholders in the system (such as payment service providers, consumers, and experts). Independent directors may serve for no more than two consecutive terms. Subcommittees to assist the board in overseeing compliance, policy implementation, and operational strategy. Clear separation between executives responsible for risk and information security and those overseeing day-to-day business operations. Risk Management and System SecuritySIRPS operators must implement comprehensive risk management frameworks, including: Clear service agreements between the SIRPS operator and its direct participants (payment service providers who connect directly to the SIRPS), defining roles and responsibilities among stakeholders. These agreements must include obligations for direct SIRPS participants to supervise any indirect participants they onboard to ensure compliance with service agreements and business rules. A business continuity plan covering both IT and non-IT aspects, with annual review. The SIRPS must target service availability comparable to international payment infrastructures, including the ability to recover operations within two hours of a disruption and to maintain scalable operational capacity. Tools and controls to monitor and manage material or
February 9, 2026
When unauthorized credit card transactions occur, who bears responsibility—the cardholder or the issuing bank? In Thailand, a landmark 2025 ruling by the country’s Supreme Court has clarified this question, establishing a stricter standard for banks in fraud disputes and significantly strengthening consumer protections. The case centered on disputed charges where a customer claimed their credit card had been used without authorization. The bank sued to recover the amount, and both the court of first instance and the Court of Appeal ruled in favor of the bank. However, the Supreme Court overruled their judgments and decided that the customer did not need to pay for the unauthorized transactions, placing liability squarely on the bank. This ruling was based on three key findings, which are outlined below. Finding 1: Insufficient Expert Testimony In this case, the bank bore the burden of proving matters related to the credit card system’s manufacture, design, security, and operation, as required under the Consumer Case Procedure Act B.E. 2551 (2008). To meet this requirement, the bank presented testimony from two employees in its credit card department regarding ’security measures and issuance procedures. However, the Supreme Court found these witnesses unqualified as experts, as they did not present technical or academic evidence and did not possess specialized expertise in credit card technology. As a result, their testimony failed to establish that the bank’s credit card technology was sufficiently secure against fraudulent misuse. Finding 2: Contradictory Terms and Conditions The bank’s own credit card terms and conditions included a provision acknowledging that despite the card’s EMV security standards, cardholders must still exercise caution to prevent unauthorized access. The Supreme Court interpreted this clause as an explicit admission that credit card systems remain vulnerable to hacking and fraud, even with high-level security measures in place. This acknowledgment undermined the
February 4, 2026
On November 18, 2025, Vietnam’s Ministry of Finance released for public consultation a draft decree on administrative sanctions in the field of crypto assets and crypto asset markets (the “Draft Decree”), intended to implement Resolution No. 05/2025/NQ-CP dated September 9, 2025, on the pilot crypto asset market in Vietnam (“Resolution 05”). While Resolution 05 sets out who may participate and under what conditions, the Draft Decree addresses a more practical question for market participants, i.e., what happens if those conditions are not met. In doing so, the Draft Decree offers important insight into how Vietnamese regulators intend to supervise, discipline, and ultimately shape the crypto market during the pilot phase. Regulatory Scope and Overall Sanctions Architecture The Draft Decree applies to both domestic and foreign organizations and individuals engaging in crypto-related activities in Vietnam’s market. Covered entities include: (i) crypto asset issuers; (ii) crypto asset service providers, including trading platforms and market operators; (iii) Vietnamese and foreign investors participating in the pilot market; and (iv) other organizations involved in the offering, issuance, or provision of crypto-related services in Vietnam. The breadth of this scope is deliberate. It appears to reflect a regulatory view that cross-border structures, offshore platforms, and indirect participation may not necessarily insulate market actors from compliance obligations once they operate within the pilot framework. For the crypto industry, this may mark a shift from regulatory ambiguity toward a more explicit articulation of jurisdictional reach. At first glance, the Draft Decree’s monetary penalties appear restrained. The maximum fine per administrative violation is capped at VND 200 million (approx. USD 7,700) for organizations and VND 100 million (approx. USD 3,800) for individuals. However, focusing solely on fine levels risks missing the point. The Draft Decree also places great regulatory weight on supplementary sanctions and corrective measures, including: (i)
January 23, 2026
On December 31, 2025, the State Bank of Vietnam (SBV) issued Circular No. 72/2025/TT-NHNN (Circular 72), establishing a streamlined foreign exchange framework for Vietnam’s International Financial Center (IFC). Circular 72, which took effect on the same day, implements core provisions of Decree No. 329/2025/ND-CP and marks a fundamental shift from ex ante licensing to ex post supervision for IFC member enterprises and foreign investors. These changes are designed to accelerate capital flows, reduce compliance costs, and position Vietnam as a competitive regional financial hub by granting IFC members substantially greater autonomy in currency transactions, borrowing, lending, and investment activities. Key provisions for IFC members to note are discussed below. Use of Foreign Currency and Payments within the IFC Vietnam generally requires the use of Vietnamese dong for transactions within the country, with limited exceptions. This can be burdensome for foreign investors, who may be unfamiliar with all the foreign exchange rules they must comply with. Under the new regulation, IFC member enterprises and foreign investors gain the ability to transact, list prices, and settle obligations in foreign currency when dealing with other IFC members or offshore counterparties, avoiding currency risk and conversion friction. With respect to individuals and organizations located within Vietnam who are not IFC members, the use of foreign currency must continue to comply with general restrictions on foreign exchange usage within Vietnam. Dual-Track Account System for IFC Members The new regulation introduces a two-tier account structure that differentiates transactions by purpose and counterparty. IFC member enterprises must use a designated foreign currency capital account at an IFC member bank for four specified activities: Borrowing from offshore individuals and organizations Lending to offshore entities and domestic borrowers Outbound investing from the IFC Investing elsewhere in Vietnam from the IFC All other foreign exchange transactions—including operational receipts, vendor