Skip to content
Submit incident
AII-1000-26803
Under investigationA regulator, court or police has opened a formal inquiry and reached no finding yet.Supporting sources are pending verification.

Biometric spoofing software used to compromise over 1,000 bank accounts in Vietnam

A criminal group in Vietnam allegedly used biometric spoofing software to compromise over 1,000 bank accounts from September 2025 to June 2026, bypassing facial recognition authentication and facilitating illegal transactions worth billions of Vietnamese đồng. Police arrested the ringleader and an accomplice on 26 June 2026.

26 June 2026 · Hoàng Đức Mạnh · Security and cyberattacks
26 June 2026
AII-1000-26803
Quick facts
Category
Security and cyberattacks
Country
Vietnam
Date
26 June 2026
Drafted by
Raidu Incident Detection

What happened

From September 2025 to June 2026, Nguyễn Tiến Đạt and Hoàng Đức Mạnh allegedly collected, stored, and illegally sold over 1,000 bank accounts across Vietnam's Hà Nội, TP.HCM, Ninh Bình, Sơn La, and Bắc Ninh provinces.

The group used software capable of intercepting and controlling device cameras to bypass banks' biometric authentication systems, replacing real-time facial recognition with stored portrait images of account owners.

Reported impact

The compromised accounts were used for gambling payments, money laundering, unlawful advertising, and other illegal transactions, generating illicit profits in the billions of Vietnamese đồng.

Đạt rented or sold bank accounts along with the biometric spoofing tool to networks of accomplices across the country.

Classification

Category
Security and cyberattacks
Industry
Financial and insurance services
Country
Vietnam
Harm status
Actual harm
Intent
Intentional
Timing
Post-deployment
Harm types
Economic or property
Harmed
Business, Consumers
Consequences
Police investigation
AI systems
Biometric spoofing software

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident