Regulation

Decree 320/2026: three reasons banks should prepare now

New requirements on customer identification and authentication make early preparation the lower-risk path for Vietnamese banks.

Decree 320/2026 tightens how banks identify customers and authenticate transactions. Its deadlines leave limited time for projects that touch core banking, mobile apps and customer data.

First, identity linking and re-verification at scale take time to design and test. Second, authentication changes affect every digital channel, so they need careful rollout to avoid friction for customers. Third, auditors will expect evidence that controls work, not only that they exist.

Decree 320/2026/ND-CP takes effect on 28 September 2026; existing e-transaction accounts must be linked and verified by 30 June 2027.

SAVIS helps banks plan and deliver this work with VNeID Integration, eKYC and ID verification, Mobile Identity SCA, SmartOTP+ and transaction signing, backed by consulting and managed services.

Media contact: dichvuso@savis.vn

Keep reading

Insight

eIDAS 2.0 explained: what trust service providers and wallets must change

The European Digital Identity framework extends trust services and introduces digital identity wallets. Here is what changes for providers.

Insight

Harvest now, decrypt later: why post-quantum planning starts today

Data with a long life is already at risk. A practical path to post-quantum cryptography starts with knowing where your cryptography is.

Customer story

VPBank achieves PCI DSS certification with SAVIS and ControlCase

SAVIS supported VPBank from gap assessment to certification, working with ControlCase as the qualified security assessor.