“Deputy Director of the Cyber Security Bureau: Scammers Exploit Biometric Authentication to Dupe Victims”

From July 1, 2024, banks have implemented biometric authentication for certain online transactions according to Decision 2345/QD-NHNN. However, taking advantage of the difficulties faced by some customers in updating their biometric information, scammers have posed as bank employees and contacted customers offering “support” to gain access to their assets and information.

The scammers’ modus operandi involves calling unsuspecting individuals, claiming to be bank staff, and asking for personal information and photos of their ID cards. They also request a video call to capture facial features, voice, and gestures.

Furthermore, they ask individuals to visit suspicious links and download and install a so-called “biometric support application” on their phones. This application is then used to impersonate individuals, steal their accounts, or engage in other malicious activities.

To prevent falling victim to such scams, the Hanoi City Police’s Department of Cyber Security and High-Tech Crime Prevention advises individuals to refrain from providing personal data, OTP codes, or responding to suspicious links and app installation requests from strangers. It is also crucial not to buy, sell, exchange, rent, or lend payment accounts, bank cards, or personal identification documents. Enabling two-factor authentication and limiting the sharing of personal information on social media can also enhance security.

Previously, Ho Chi Minh City Police had also reported incidents of scammers impersonating bank employees and offering “support” with biometric setup to defraud customers of their assets and information.

The Ho Chi Minh City Police advise individuals never to disclose their OTP codes or bank passwords to anyone, including those claiming to be bank employees. Banks do not directly contact customers to guide them through the biometric collection process. Therefore, individuals should be vigilant and avoid accessing unfamiliar links received via Facebook, Zalo, SMS, or email on their phones to prevent fraud and information theft.

Speaking at a workshop on “Solutions to Protect Banking Customers” organized by the State Bank of Vietnam on July 4, Lieutenant Colonel Trieu Manh Tung, Deputy Director of the Cyber Security and High-Tech Crime Prevention Department, Ministry of Public Security, shared that the Ministry of Public Security highly anticipates the banking industry’s implementation of Decision 2345 on biometric application.

“The implementation of Decision 2345 is extremely meaningful and beneficial for crime prevention and social security,” said Mr. Tung. “While we can’t stop all fraud, this decision is one of the most fundamental and impactful solutions to combat fraud at this time.”

According to Mr. Tung, with the current development of payment activities, almost all crimes are related to bank accounts. If we fail to manage account openings and ensure account ownership, any type of criminal can exploit payment activities to facilitate illegal activities.

Mr. Tung also noted that as soon as we implement new policies or events, scammers from abroad contact individuals in Vietnam, posing as bank employees and offering biometric update support.

“These scammers quickly take advantage of new events to carry out their fraudulent activities. Therefore, as Decision 2345 is put into practice, we need to continue monitoring and responding, and banks need to develop large-scale data analysis on customer account usage to detect fraud and provide timely warnings,” he added.

Anticipating an increase in online fraud in the future, Lieutenant Colonel Trieu Manh Tung requested that the State Bank of Vietnam and commercial banks vigorously implement Decision 2345/QD-NHNN, ensuring that the sender of the money is the account holder. He also suggested building and implementing an inter-agency coordination process involving the Ministry of Public Security, the State Bank, and commercial banks.

Additionally, he proposed connecting the database platform related to account activities with the Ministry of Public Security’s legal document system and electronic document system. He emphasized the importance of regular propaganda, education, and warnings to raise the awareness of officials, employees, and customers about the tricks used by criminals in online fraud.