You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

June 19, 2024

Vietnam’s New Decree on Non-Cash Payments

Vietnam’s financial landscape is set to further transform on July 1, 2024, when the government’s long-awaited Decree No. 52/2024/ND-CP dated May 15, 2024 (“Decree 52”), will officially replace Decree No. 101/2012/ND-CP dated November 22, 2012, on non-cash payments (“Decree 101”).

Decree 52 marks an important milestone by introducing the country’s first-ever legal definition of e-money. In addition, the decree brings forth new updates to regulations governing payment and intermediary payment services, laying the groundwork for more comprehensive guidance that will be provided in draft circulars now being developed by the State Bank of Vietnam (SBV).

Non-Cash Payment Instruments

The new definition of non-cash payment instruments under Decree 52 expands upon the previous definition in Decree 101. Notably, it clearly specifies the issuing entities as payment service providers, financial companies licensed to issue credit cards, and e-wallet service providers. Additionally, the new definition further clarifies that bank cards include debit, credit, and prepaid cards, and adds e-wallets to the list of non-cash payment instruments. Unlawful non-cash payment instruments are still defined as those that are not otherwise specified.

E-Money

Prior to Decree 52, the concept of e-money lacked a precise legal definition, despite its growing prevalence in forms like prepaid cards and e-wallets. The absence of a clear framework for e-money led to confusion with terms like “cryptpcurrency” and “virtual currency” and left significant ambiguity on whether e-money includes certain instruments, such as online game cards and mobile money. Decree 52 addresses this issue by clearly defining e-money as value in Vietnamese dong (VND) stored electronically and prepaid by customers to banks, foreign bank branches, and e-wallet service providers. It also specifically designates e-wallets and prepaid cards as types of storage mechanisms for e-money.

Non-Cash Payment Services

Decree 52 categorizes non-cash payment services into services with and without client payment accounts. Payment services with client accounts involve various financial transactions like money transfers and card payments, while services without client accounts focus on transactions not requiring such accounts. The decree also expands the range of entities providing these services to include not only banks and financial institutions but also public postal service providers (as defined by the Law on Post). So far, regulations for non-cash payment services provided by public postal service providers have been outlined in Circular No. 38/2019/TT-NHNN dated December 31, 2019. Decree 52 now further formalizes the inclusion of public postal service providers, a move that emphasizes expanded access to financial services, particularly in underbanked areas.

In a bid to further clarify and regulate these payment services, the SBV is currently working on a draft circular that will replace Circular No. 46/2014/TT-NHNN dated December 31, 2014, on non-cash payment services. This circular aims to offer updated guidance on all aspects of non-cash payment services under Decree 52 to address the new practical challenges in the current non-cash payment landscape.

Intermediary Payment Services

Decree 52 defines intermediary payment service (IPS) providers as non-bank organizations licensed by the SBV to provide IPSs, which encompass financial switching services, international financial switching services, electronic clearing services, e-wallet services, collection and payment support services, and payment gateway services. Compared to the old IPS regime under Decree 101 and Circular No. 39/2014/TT-NHNN dated December 11, 2014 (“Circular 39”), Decree 52 removes electronic money transfer support services from the list of IPSs.

The decree also sets stringent requirements for obtaining an IPS license, encompassing capital adequacy, technical capabilities, and personnel qualifications. The most notable requirements for organizations applying for an IPS license include the following:

  • The organization must not be in the process of division, separation, consolidation, merger, conversion, dissolution, or bankruptcy.
  • For financial switching services and electronic clearing services, the organization must provide only IPSs.
  • The organization must fulfill minimum charter capital requirements of either (1) VND 50 billion (approx. USD 1,964,560) for e-wallet services, collection and payment support services, and payment gateway services, or (2) VND 300 billion (approx. USD 11,787,360) for financial switching services, international financial switching services, and electronic clearing services.
  • The organization must comply with information system security level 4 requirements for financial switching services and electronic clearing services, or level 3 for other IPSs.
  • The organization must meet specific technical and personnel requirements.

Decree 52 also introduces new regulations for the provision of IPSs with international elements. These affect:

  • Foreign service providers providing IPSs to nonresident customers and foreigners residing in Vietnam to perform payment transactions for goods and services in Vietnam; and
  • Providers of IPSs that customers use to perform payment transactions for foreign goods and services.

The SBV is currently preparing a draft circular that will replace Circular 39 on IPSs and is expected to be issued soon.

Safety and Security of Non-Cash Payments

Under Decree 52, payment service and IPS providers are responsible for ensuring the safety and confidentiality of transactions, conducting inspections of payment-accepting units, and actively managing risks to prevent the misuse of their services for illegal activities. IPS providers specifically must adhere to information system security requirements with varying levels of compliance depending on the specific services offered (level 4 for financial switching services and electronic clearing services, and level 3 for other IPSs). IPS providers should therefore also carefully review relevant regulations under the Law on Network Information Security and Decree No. 85/2016/ND-CP dated July 1, 2016, on the security of information systems by levels, for full compliance in this regard.

In addition to these requirements, payment service and IPS providers should also pay attention to the new, stringent requirements under Decision No. 2345/QD-NHNN dated December 18, 2023, on security measures for online payments and bank card transactions. To solidify the compulsory measures set out under this decision, the SBV is currently drafting a circular to replace Circular No. 35/2016/TT-NHNN dated December 29, 2016, which will further guide the requirements on safety and security for online banking services.

Other Notes

In addition to the above, Decree 52 also has the following key points:

  • Monitoring Activities: Decree 52 grants the SBV extensive supervisory powers over payment systems, payment services, and IPSs. The SBV is authorized to promulgate regulations, conduct remote and on-site supervision, and request information from relevant entities. Payment service providers and IPS providers must comply with these regulations and provide the requested information. Notably, the SBV has the authority to determine and supervise economically important payment systems to maintain their stability and security. To provide more guidance in this regard, the SBV is also currently working on a draft circular that will replace Circular No. 20/2018/TT-NHNN dated August 30, 2018, on supervision of payment systems.
  • Payment Agents: The SBV is developing a draft circular on payment agents for non-cash payment services as regulated under Decree 52. This initiative aims to enhance financial inclusion by enabling banks and foreign bank branches to expand their customer base and service reach without incurring the costs associated with expanding their physical networks. By partnering with payment agents, banks can offer basic financial services in remote areas, reducing travel time for customers and improving overall service efficiency.
  • Transitional Period: Decree 52 provides various transitional periods for different stakeholders to align with its new regulations, as follows:
    • Commercial banks and foreign bank branches have 24 months to comply with Decree 52 for international payment system participation;
    • IPS providers licensed for money transfer support services under Decree 101 can continue operations as agreed between the parties;
    • Financial switching service providers connected to international payment systems have 24 months to comply and apply for a new license under Decree 52;
    • Public postal service enterprises have 24 months to apply for approval to provide payment services other than through customer payment accounts; and
    • IPS providers licensed before Decree 52’s effective date can operate until their licenses expire, unless they apply for new licenses under Decree 52’s regime.

Outlook

Decree 52 introduces significant changes to the non-cash payment landscape in Vietnam, including the country’s first legal definition of e-money and expanded regulations for non-cash payment and IPS services. In light of the new regime under Decree 52, the SBV is also developing a number of new circulars to provide further guidance on implementing these regulations. Payment and IPS providers should therefore closely follow legal developments in this field to ensure full compliance with the fast-evolving regulatory framework.

RELATED INSIGHTS​ 

January 9, 2026
Thailand continues to advance its legal and regulatory framework for the technology sector, with several key laws undergoing review and proposed amendments. These developments reflect Thailand’s broader efforts to ensure that its regulatory landscape keeps pace with rapid technological change and aligns more closely with international standards and best practices. The following are key legal developments and proposed legislative reforms in 2026 that are expected to impact businesses operating in the technology sector and the broader Thai business landscape. Data Privacy and Cybersecurity Personal Data Protection Act B.E. 2562 (2019) Following the full enforcement of Thailand’s Personal Data Protection Act (PDPA) in June 2022, businesses and practitioners have identified practical implementation challenges and interpretative issues. These challenges were reflected in an effectiveness assessment conducted by the Personal Data Protection Committee (PDPC) in late 2024. The PDPC published a set of principles for public consultation to identify issues and directions for potential amendments to the PDPA. Key issues: Emerging issues include clarifying the definitions of “data controller,” “data processor,” and “criminal record”; revisiting the scope of sensitive personal data to better reflect Thailand’s context; proposing amendments to the hierarchy of legal bases to avoid misconceptions of consent as the default legal basis; and clarifying the required level of expressiveness for explicit consent, as well as rules for collecting personal data from other sources. Current status: The first round of public consultation has concluded. Next steps: The proposed amendments are proceeding to a revised draft following the consultation outcomes. Cybersecurity Act B.E. 2562 (2019) Thailand is moving forward with proposed amendments to enhance the effectiveness of its national cybersecurity framework, as evolving digital technologies bring new risks such as misinformation, system intrusions, and attacks on critical infrastructure, making cybersecurity a national priority. Key issues: The amendments aim to clarify and strengthen
January 8, 2026
Thailand’s Digital Government Development Agency (DGA) has proposed new standards that would require government agencies to select cloud services exclusively from a preapproved shortlist of providers. The draft Digital Government Standards re: Cloud Service Provider Standards aims to strengthen procurement confidence and reduce risks associated with selecting cloud service providers that do not meet the required standards. A public hearing period on these standards concluded on December 27, 2025. The DGA will now review submitted comments and consider revising the standards accordingly. Shortlisted Cloud Service Provider Tiers The draft standards establish three tiers of cloud service providers based on their assessed service capability levels, core qualifications, and certifications. The DGA sets qualification requirements for each tier, and it is at the discretion of each agency to select the tier of cloud service provider that best suits its operational needs, as follows: Tier 1 cloud service providers are suitable for providing services involving disclosable official data. Tier 2 cloud service providers are suitable for handling official data and protected data, such as personal data, which requires a high-security public cloud (e.g., virtual private cloud). Tier 3 cloud service providers are suitable for providing services to agencies with specific regulatory and security requirements that handle highly protected data, such as the national security system. These providers must offer sovereign or hybrid cloud as stipulated by the Ministry of Digital Economy and Society. All tiers of cloud service providers must be legal entities incorporated under Thai law and can be authorized distributors of offshore cloud service providers. However, each tier will be subject to different requirements, including infrastructure obligations. Government agencies are encouraged to select a cloud service provider appropriate for their intended use. For example, if a government agency intends to procure cloud services for operating applications that process personal data,
January 8, 2026
Thailand has enacted comprehensive sexual harassment legislation that significantly expands criminal penalties and creates new compliance obligations for online platform operators. The Act Amending the Penal Code (No. 30) B.E. 2568 (2025), enacted on December 29, 2025, and taking effect the following day, introduces a comprehensive definition of sexual harassment, establishes new criminal offenses with graduated penalties, and imposes content removal obligations on social media platforms and computer system service providers. The amendment, which establishes a comprehensive framework for addressing sexual harassment in both physical and digital environments, significantly expands legal exposure for online service operators. It also grants courts authority to order takedowns of violating data accessible to the public. Definition of Sexual Harassment The law introduces “sexual harassment” as a distinct statutory concept covering physical conduct, verbal conduct, sounds, gestures, expressions, postures, communications, surveillance, stalking, and acts committed through computer systems or electronic devices. Conduct qualifies as sexual harassment when it is sexual in nature and likely to cause the victim distress, annoyance, embarrassment, humiliation, fear, or a sense of sexual insecurity. Criminal Offenses and Penalties The amended Penal Code establishes graduated penalties based on the severity and context of the harassment—including enhanced penalties for public or online conduct. For instance: Basic sexual harassment is punishable by imprisonment for up to one year, a fine of up to THB 20,000, or both. Continuous or repeated harassment that prevents normal life escalates penalties to imprisonment for up to two years, a fine of up to THB 40,000, or both. Critically for online operators, harassment committed in public places, in the presence of the public, or through computer systems accessible to the general public triggers imprisonment for up to three years, a fine of up to THB 60,000, or both. Acts of harassment committed by supervisors, employers, or others
January 6, 2026
On December 30, 2025, Thailand’s Electronic Transactions Development Agency (ETDA) notified digital marketplace operators of a consolidated list of “high‑risk products” that are subject to strict monitoring on digital platforms. The list was jointly prepared by the Thai Industrial Standards Institute (TISI) and the Food and Drug Administration (FDA) to guide platform compliance in the initial phase of implementation of the Electronic Transaction Committee’s Notification on Other Measures for Marketplace for Goods with Specific Characteristics under Section 18(2) of the 2022 Royal Decree on Digital Platform Businesses Requiring Notification B.E.2568 (2025). The notice is addressed to operators of digital platform services that function as product marketplaces with specific characteristics laid out in the notification. The ETDA states that the TISI and the FDA are closely monitoring the high‑risk product categories on digital platforms, and the published list serves as the baseline reference for platform screening during the initial phase of the notification’s implementation. High‑Risk Product List The list aggregates categories of products that are illegal to sell online or are otherwise tightly regulated under Thai law, with an emphasis on health-related products, controlled substances, medical devices, and a wide range of industrial products that require certification or compliance with specified Thai Industrial Standards, as detailed below. Prohibited and tightly controlled health products. This includes all categories of modern medicines subject to control other than general household remedies; all categories of controlled herbal products except for over-the-counter herbal products; narcotics; psychotropic substances; and medical devices requiring use in medical facilities or a physician’s prescription. Selected industrial products requiring heightened controls. The list highlights dozens of TISI-regulated items commonly sold online. Examples include pacifiers, rice cookers, electrical wire, food wrap film, crayons, washing machines and dryers, air conditioners, electric cookers and air fryers, water heaters, microwave ovens, LED luminaires, hair dryers