State Bank guides facial authentication for users of citizen identification cards and phones without NFC chips

Accordingly, for customers who do not have a chip-embedded CCCD (customers who only have an ID card or a non-chip-embedded CCCD with a valid term of use according to the provisions of law), the customer's biometric authentication measure is performed by matching the biometric data stored in the biometric database about the customer that has been collected and checked, in which the checking is performed by meeting directly at the transaction counter.

For customers with a chip-embedded CCCD but using a phone that does not support NFC, the customer's biometric identification method will be through the authentication of the customer's electronic identification account created by the electronic identification and authentication system; or match the biometric data stored in the biometric database about the customer that has been collected and checked.

The test is performed as follows:

Match the customer's biometric identification data with the biometric data in the customer's CCCD chip issued by the police agency by performing at the transaction counter, through the unit's chip-mounted CCCD reader device/phone;

Or match the customer's biometric identification data through the authentication of the customer's electronic identification account created by the electronic identification and authentication system.

For storing information about devices (including on computers using web browsers) performing transactions: the unit stores identifying information about the device performing the transaction according to the principle that it only needs to store information to uniquely identify the device.

For deposit and withdrawal transactions from e-wallets via payment accounts/debit cards linked to the owner, if the customer has authenticated the owner with the bank when making the connection using authentication measures for type B transactions or higher (except for authentication measures using biometric identification signs attached to smart handheld devices), it is not mandatory to apply authentication measures for deposit and withdrawal transactions from e-wallets with limits: G ≤ 10 million VND and G + Tksth ≤ 20 million VND. Other transactions are implemented according to the provisions of Decision 2345.

G: Value of the transaction.

Tksth: Total value of type A and type B transactions of each group of transaction types performed by a bank account (including e-wallet deposit transactions) or an e-wallet (excluding e-wallet deposit transactions). Tksth of a bank account/e-wallet is calculated as 0 at the beginning of the day or immediately after that bank account/e-wallet has a transaction during the day using authentication measures for type C or type D transactions.

To prepare for the implementation of safe and secure solutions in online payments and bank card payments effective from July 1, the State Bank of Vietnam requires credit institutions to organize communications and provide instructions to all customers on the implementation of transaction authentication measures corresponding to the prescribed transaction limits.

Prepare plans, hotline channels and arrange staff on duty 24/7 to promptly guide and support customers in registering and using biometric authentication information.

Actively coordinate with the National Population Data Center - Department of Administrative Police for Social Order, the Ministry of Public Security and other relevant organizations to prepare plans to handle difficulties and problems in the process of registering and using biometric authentication services from July 1.

Deploy technical solutions to ensure security and safety of information and customer data, comply with legal regulations on personal data protection and legal regulations on ensuring security and safety of information systems.

To avoid transaction congestion and support customers promptly, we encourage units that have completed implementation to promptly provide services to customers.