Crypto-funded debit card in Vietnam
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Vietnam with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VASP licensing requires AML/CTF policies as a core obligation, including internal AML/CFT/CPF procedures, risk management, and market surveillance (vn.licensing.the-framework-mandates-vasps-to)
- KYC must be performed for transactions equivalent to at least USD 1,000, with updated customer identity verification (vn.licensing.vasps-must-conduct-updated-kyc)
- Platforms must have programmed AML/KYC processes with anti-tampering logs, secure key management, and transaction monitoring for STR detection (vn.licensing.platforms-require-programmed-amlkyc-processes)
- Data retention of 10 years on Vietnam servers, including transaction history, originator/beneficiary details, wallet addresses, IP/device logs, and account info (vn.licensing.vasps-must-retain-data-on)
- AML/CTF policies imply STR reporting via MPS/SBV coordination; no explicit STR mechanism detailed yet (vn.licensing.no-explicit-str-filing-mechanism)
- Oversight involves MOF (lead), SSC (receiving applications), SBV (financial integrity), and MPS (AML, cybersecurity) (vn.licensing.oversight-involves-mof-lead-ssc)
Key Restrictions
- Crypto cannot be used as a means of payment — the SBV enforces this restriction, meaning the crypto-to-fiat conversion at point of sale raises legal ambiguity (vn.licensing.state-bank-of-vietnam-sbv)
- All transactions must be conducted in VND via a single VND account at a licensed local bank (vn.licensing.foreign-investors-require-a-single)
- Systems must achieve Level 4 cybersecurity (highest standard) including encryption, intrusion detection, and continuous monitoring (vn.licensing.systems-must-achieve-level-4)
- Data must be stored on Vietnam servers for 10 years (vn.licensing.vasps-must-retain-data-on)
- No explicit e-money or payment-institution license framework exists for crypto-funded debit cards — the card program would need to fit within the VASP licensing pilot under MOF/SSC oversight
Key Risks
- SBV prohibits use of crypto as a payment method — converting crypto to fiat at POS to fund a debit card transaction could be interpreted as use of crypto as payment, creating material legal risk (vn.licensing.state-bank-of-vietnam-sbv)
- The VASP licensing pilot is new (Resolution No. 05/2025/NQ-CP) and lacks published implementing guidance for card-based products — regulatory ambiguity is high (vn.licensing.key-reference-resolution-no-052025nq-cp)
- Recent enforcement against the ONUS platform (arrests, fraud charges) signals aggressive enforcement posture from MPS toward crypto operators (vn.enforcement.entity-targeted-onus-cryptocurrency-platform)
- No explicit STR filing mechanism is detailed in pilot documents, creating operational uncertainty for compliance program design (vn.licensing.no-explicit-str-filing-mechanism)
- Need for a partner bank/BIN sponsor is implied by the local bank account requirement but no clear regime for card issuing or acquiring exists yet
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Ministry of Finance (MOF) — Lead authority
State Securities Commission (SSC) — Licensing review and compliance monitoring
State Bank of Vietnam (SBV) — Financial oversight
Ministry of Public Security (MPS) — Cybersecurity and financial integrity
The framework mandates VASPs to apply AML/CTF obligations as part of licensing, treating crypto exchanges as market infrastructure akin to securities exchanges. This includes internal policies for AML/CFT, counter-proliferation financing, risk management, and market surveillance.
Oversight involves MOF (lead), SSC (receiving applications), SBV (financial integrity), and MPS (AML, cybersecurity).
VASPs must conduct updated KYC for transactions equivalent to at least USD 1,000, verifying customer identities to mitigate fraud, money laundering, and terrorist financing.
VASPs must retain data on Vietnam servers for 10 years, including transaction history, originator/beneficiary details (e.g., wallet addresses), IP/device logs, and account info.
Platforms require programmed AML/KYC processes with anti-tampering logs, secure key management, and transaction monitoring for STR detection.
No explicit STR filing mechanism is detailed in pilot docs, but AML/CTF policies imply reporting via MPS/SBV coordination during licensing appraisals and operations.
Key reference: Resolution No. 05/2025/NQ-CP (September 9, 2025) establishes the licensing regime with AML/CTF as a core objective; Decision No. 96/QD-BTC details procedures, including AML appraisals.
Foreign investors require a single VND account at a licensed local bank; all transactions use VND.
Systems must achieve Level 4 cybersecurity (highest standard), including encryption, intrusion detection, and continuous monitoring to support CDD.
Entity Targeted: ONUS cryptocurrency platform (including tokens VNDC, ONUS, and HNG), operated by Vương Lê Vĩnh Nhân (Eric Lê/Vuong Le Vinh Nhan) and associates. Violation Type: Fraud via token price manipulation, deceptive marketing, misleading promotions, artificial trading to control supply/demand, property appropriation, and money laundering using platform infrastructure. Penalty Amount: Not yet finalized; investigation targets billions of dollars in mobilized funds and investor losses (preliminary estimates in billions of USD).
Outcome: At least 7–9 arrests (including Vương Lê Vĩnh Nhân and 6–8 accomplices); over 140 individuals summoned; platform operations dismantled; charges filed for fraud and money laundering.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card could potentially operate under Vietnam's new VASP licensing pilot (MOF/SSC oversight), but faces fundamental legal ambiguity because the SBV prohibits crypto as a means of payment, no e-money or card-issuance licensing framework is articulated, and the pilot regime is nascent with high enforcement risk.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?