Vietnamese police have dismantled a cross-border fraud ring operating out of Laos that tricked more than 1,000 victims into scanning fake QR codes, stealing over VND 5 billion (roughly USD 195,000). Authorities arrested 40 Vietnamese suspects in Bokeo Province, Laos, on July 19–20, seizing 56 mobile phones and 49 computers.
Operation in Bokeo Province
The Lai Chau Provincial Police, acting under the direction of Deputy Minister Nguyen Van Long, coordinated with Lao counterparts to raid a rented house in Tonpheung commune, Bokeo Province, according to VnExpress. Investigators believe the group had been operating since at least April 2026. Among those arrested, one person was already wanted by police and 16 tested positive for narcotics. A 23-year-old from Tuyen Quang Province, Ha Van Hieu, is suspected of leading the operation.
How the Scam Worked
The ring exploited a genuine government policy — the elimination of school fees and health insurance subsidies for primary and secondary students — to build a convincing cover story. Suspects used virtual call centers to phone parents and students, posing as insurance officers who needed to link national ID accounts on the VNeID app with health insurance and bank accounts.
The fraud unfolded in three stages. First, callers instructed parents to visit their local commune office to upgrade their child's digital identity to Level 2 on VNeID, promising a follow-up call with a confirmation code. Second, suspects added victims on Zalo and requested a video call, asking them to point a second device's camera at their screen while the VNeID social security section and banking app were open — allowing the fraudsters to read account balances in real time. They then generated a QR code for exactly that amount and told victims to scan it to "link health insurance to their bank account," prompting them to enter a one-time password.
The third step was the most calculated: suspects asked victims to cover the phone camera with their national ID card, claiming it was needed to "sync data." This prevented victims from seeing the outgoing transfer notification on screen. Once the OTP was confirmed, the funds moved immediately to accounts controlled by the ring.
Scale of the Network
From June through late July, the group defrauded victims across multiple provinces and cities, the investigation found. The house in Bokeo was purpose-built for the operation, equipped with computer systems and telecommunications hardware — a setup that mirrors the industrial-scale fraud compounds that have proliferated along the Mekong border in recent years. Locating the operation in Laos created jurisdictional distance from Vietnamese law enforcement, requiring a bilateral coordination effort before any arrests could be made.
A Pattern of Mekong Border Fraud
Scam compounds operating in border zones — particularly in Myanmar's Shan State and the Lao-Myanmar-Thai triangle — have become a well-documented regional problem. Vietnamese nationals have appeared repeatedly in these networks both as operators and as victims, often trafficked into forced labor. This case is notable because the entire 40-person workforce appears to have relocated voluntarily to run the scheme, rather than being coerced. The use of policy-linked pretexts, specifically the school fee waiver program, shows that operators actively monitor domestic Vietnamese government announcements to craft timely, credible scripts.
What Authorities Are Warning
Police issued a direct public advisory following the arrests. They warned residents never to follow phone or Zalo instructions to update VNeID, link health insurance, or connect bank accounts. Critically, they advised against scanning any QR code, sharing OTP codes, screen-sharing, or allowing anyone to observe banking app activity remotely. These warnings are particularly relevant now that VNeID-linked services are expanding: the broader the app's role in daily transactions, the wider the attack surface for social-engineering scams of this type.
The arrests underscore how quickly criminal networks adapt legitimate digital infrastructure for fraud. As Vietnam's national digital identity rollout deepens, public awareness of multi-step social engineering — and clear government messaging about what officials will never ask citizens to do by phone — will matter as much as law enforcement action.
