Vietnamese banking customers and everyday citizens are facing a surge of sophisticated online scams, with criminals leveraging advanced technology to steal funds and personal information. Over the past several months, police across Vietnam have issued urgent warnings about new tactics targeting users of digital banking services and those worried about so-called "cold fines"—traffic penalties detected by artificial intelligence (AI) cameras. The scams, which have already resulted in significant financial losses, exploit both technological vulnerabilities and human psychology, making vigilance more essential than ever.
According to recent alerts from the Phu Tho provincial police, one of the most alarming trends is the use of fake bank account balance interfaces. As reported by Nhịp sống thị trường, scammers have developed methods to create counterfeit displays of bank balances, deceiving users into believing their accounts remain untouched even as their funds are siphoned away. Victims often discover the theft only after unauthorized transactions have already occurred, by which time the criminals have covered their tracks.
These scams do not involve direct attacks on the core banking systems. Instead, they prey on users' lapses in security awareness, particularly when using electronic banking services. The criminals' arsenal includes fake banking applications that closely mimic legitimate ones. When users install these counterfeit apps and enter their credentials, their usernames, passwords, and authentication codes are harvested and sent directly to the fraudsters.
Even more insidious are malware programs that overlay fake login screens atop genuine banking apps. These overlays are so convincing that even vigilant users may not notice anything amiss. Some malicious software can even record every keystroke, silently collecting sensitive data without the user's knowledge. In some cases, the attackers go a step further by hijacking victims' phone SIM cards. By intercepting one-time passwords (OTP) sent via SMS, they can bypass two-factor authentication and gain full control over the account.
After draining the account, scammers manipulate the displayed balance or transaction history, giving victims a false sense of security and delaying detection. Police have emphasized that these tactics are particularly effective against users who frequently transact online but are lax about security—such as those who download apps from unofficial sources or use public Wi-Fi for financial transactions. Vulnerable groups include the elderly, students, and manual laborers, who may lack the digital literacy needed to recognize high-tech scams.
In parallel, another wave of fraud is capitalizing on public anxiety surrounding the nationwide rollout of AI-powered traffic cameras. As reported by Vũ Tâm, scammers send messages or emails claiming the recipient has been caught violating traffic laws by an AI camera. The communications often include convincing details: the vehicle's license plate, the alleged violation, and the fine amount. Victims are urged to click a link to verify or pay the fine online, which leads to a fake website designed to closely resemble official government or public service portals.
Once on the fraudulent site, users are prompted to enter their bank account details, card numbers, and OTP codes under the guise of "payment verification" or "fine processing." If they comply, their financial information is immediately compromised, and their accounts can be emptied before they realize what has happened. This scam is particularly effective because it exploits the fear of legal penalties and the unfamiliarity many people have with the new AI camera enforcement procedures.
Authorities have been quick to clarify that official fine notifications are never sent via suspicious links and never request bank or OTP information. To check for traffic violations, citizens should use only trusted platforms such as the VNeTraffic app, the National Public Service Portal, or directly contact the local police department where their vehicle is registered. Any message or email urging users to click an unfamiliar link or provide sensitive banking details should be treated with extreme skepticism.
The police have issued a series of practical recommendations to help the public protect themselves. First and foremost, users should only install banking apps from official app stores and never through links received in messages or emails. Two-factor authentication should be enabled using dedicated security apps, and reliance on OTPs delivered by SMS should be minimized, as SIM hijacking remains a real threat. Real-time transaction notifications can provide an early warning of unauthorized activity, but users are also urged to regularly review their transaction histories instead of relying solely on the displayed balance.
It is also crucial to avoid clicking on links in unsolicited emails or messages, especially those purporting to be from banks or government agencies. When in doubt, users should access bank services and government portals directly through their official websites or apps, not through links received via communication channels. Financial transactions should never be conducted over public Wi-Fi networks, which are often insecure and susceptible to interception by cybercriminals.
In the event that suspicious activity is detected or money is stolen, the first step should be to contact the bank immediately to lock the affected account. Victims should then report the incident to the nearest police station for guidance and support. Prompt action can help limit losses and increase the chances of recovering stolen funds, while also aiding authorities in their efforts to combat these increasingly sophisticated cybercrimes.
Law enforcement officials stress that public awareness and caution are the best defenses against these evolving threats. As the digital economy expands and more daily activities move online, criminals will continue to adapt their tactics. "Official fine notifications are never sent through suspicious links or requests for sensitive banking information," police authorities emphasize. "Always verify the source before taking any action and never share personal or financial details with unverified contacts."
For those who may feel overwhelmed by the complexity of these scams, the message is simple: stay cautious, stay informed, and when in doubt, ask for help. The fight against online fraud is a collective effort, and every vigilant user plays a part in keeping the digital landscape safer for everyone.
