Fake VNeID Electronic Authentication Website Targets Vietnamese Citizens' Banking Data

Vietnamese authorities have discovered a phishing website (bcavneid.com) that impersonates VNeID, the government's official electronic authentication system. The fake site closely mimics the legitimate platform's design, deceiving users into entering sensitive data such as ID numbers, passwords, and OTP codes, which are then used to conduct unauthorized financial transactions.

Overview of the Scam

Cyber Security Police in Ho Chi Minh City, operating under Vietnam's Ministry of Public Security, discovered a phishing website (bcavneid.com) impersonating VNeID, the government's official electronic identification and authentication system. This fraudulent site is designed to gain unauthorized access to citizens' banking accounts and personal data.

How the Fraud Works

Fake Website Characteristics

Nearly identical replication of VNeID's official logo, design, and user interface
Domain name combines abbreviations of government agencies with official application names to build false credibility
Difficult to distinguish from legitimate sites without careful URL inspection

Data Theft Method When users access and log into the fake site, scammers immediately capture:

Citizen identification number
Phone number
Password
OTP (One-Time Password) authentication code sent to the victim's phone

Exploitation of Stolen Information Scammers use the stolen credentials to:

Gain unauthorized access to digital identity accounts
Log into linked banking applications and digital wallets
Execute illegal fund transfers
Install remote control malware to manipulate victim devices

Psychological Manipulation Tactics

This phishing scheme is often combined with social engineering:

Scammers impersonate police officers or government officials, calling victims with false claims that "VNeID Level 2 account has errors"
They demand urgent account verification or emergency activation
They send links to the fraudulent site via SMS, messaging apps, or social media
They pressure or deceive victims into clicking the malicious links

Warning Signs and Prevention

Safe Access Methods

Access VNeID services only through official websites ending in ".gov.vn"
Log in exclusively through official applications (App Store, Google Play versions) or Vietnam's Ministry of Public Security official portal
Never click links received via SMS, social media, or email
Verify URLs by directly contacting authorities if uncertain

Data Protection Guidelines

Never enter passwords, PINs, or OTP codes on unverified websites
Recognize that legitimate authorities typically never request OTP codes
Do not respond to unsolicited requests for banking or authentication information

Reporting and Support

If you suspect phishing or become a victim:

Visit the nearest police station in person
Report to Vietnam's Ministry of Public Security hotline
If you accessed the fraudulent site, immediately change your passwords and banking authentication codes