فيتنام KYC, KYB & AML compliance checklist
قائمة عملية وموثقة بالمصادر لتنفيذ متطلبات KYC وKYB وAML في فيتنام.
- تاريخ آخر مراجعة
- تاريخ آخر مراجعة:
- الإصدار
- الإصدار 1.1
دليل تنفيذ قابل للتنزيل
الحصول على ملف PDF
11 مجالات رقابية · 38 فحوص تنفيذ
تاريخ آخر مراجعة: 27 September 2026 · الإصدار 1.1
تنزيل قائمة التحققإجابة مباشرة
ما الذي تغطيه قائمة الامتثال الخاصة بـ فيتنام؟
تحوّل قائمة فيتنام قواعد KYC وKYB وAML الأساسية إلى 11 مجالات رقابية و38 فحوص تنفيذ، وتشمل الجهات المختصة وواجبات الإبلاغ والأدلة الواجب الاحتفاظ بها.
حقائق تنظيمية أساسية
- FIU
- Anti-Money Laundering Department within the State Bank of Vietnam
- Primary AML rules
- Law 14/2022/QH15, Decree 19/2023/ND-CP and Circular 27/2025/TT-NHNN
- STR timing
- Within 3 working days from the transaction or 1 working day from detecting suspicion, whichever is earlier
- Large-value report
- Transactions of VND 400 million or more under the current general threshold rule
- Wire reports
- Domestic transfers from VND 500 million; international transfers from USD 1,000 equivalent
- AML records
- Generally 5 years from the applicable transaction, closure or report trigger
- Privacy framework
- Personal Data Protection Law 91/2025/QH15 and Decree 356/2025/ND-CP apply from 1 January 2026
- FATF public lists
- Under increased monitoring at 19 June 2026
تفاصيل التنفيذ
متطلبات وإجراءات الامتثال في فيتنام
افتح كل مجال لمراجعة المتطلب وإجراء التنفيذ المقترح والأدلة الواجب الاحتفاظ بها والمصدر الأساسي.
01Scope, authorities, and licensingClassify the entity, activity and competent supervisor before applying any control or threshold.3 عناصر+
Determine whether each activity is performed by a reporting entity.
- إجراء التنفيذ
- Map licensed financial activities and the listed non-financial businesses and professions to Article 4, including relevant gaming, real-estate, precious-metal and stone, accounting, notarial, legal and company-service activity; document exclusions and supervisor.
- الأدلة الواجب الاحتفاظ بها
- Entity chart, product and funds-flow inventory, perimeter memorandum, source extracts and counsel sign-off.
- المصدر الأساسي
- Law 14/2022/QH15, Article 4
Obtain every sector licence, registration or approval before launch.
- إجراء التنفيذ
- Confirm State Bank, securities, insurance, gaming, foreign-exchange, payment and other competent-authority requirements for the actual service and delivery model.
- الأدلة الواجب الاحتفاظ بها
- Perimeter analysis, application, licence or registration, conditions, regulator correspondence and renewal calendar.
- المصدر الأساسي
- Applicable sector law; Decree 52/2024/ND-CP for non-cash payment services
Maintain current AML reporting access and accountable contacts.
- إجراء التنفيذ
- Register required contacts and reporting users with the AML Department, test the current electronic route and protect credentials and signing authority.
- الأدلة الواجب الاحتفاظ بها
- Registration, user inventory, access test, delegation, contact-change notice and continuity plan.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 24 and 37; Circular 27/2025/TT-NHNN
02Governance and ML/TF/PF risk assessmentThe programme must be risk-based, approved, resourced and independently tested.3 عناصر+
Maintain a documented institutional risk assessment.
- إجراء التنفيذ
- Assess customers, countries, products, services, transactions, channels, technology, agents and outsourcing; complete the annual update by 31 March for the preceding calendar year and refresh before material change.
- الأدلة الواجب الاحتفاظ بها
- Methodology, data set, assessment, scoring, approval, residual-risk decisions and remediation plan.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 15-16; Circular 27/2025/TT-NHNN, Articles 3-4
Maintain approved internal AML rules and accountable governance.
- إجراء التنفيذ
- Assign senior responsibility and a competent AML function; document CDD, monitoring, reporting, sanctions, records, training and escalation and send current internal rules to the competent authority within the applicable period.
- الأدلة الواجب الاحتفاظ بها
- Approved rules, appointments, submission receipt, committee minutes, training and issue log.
- المصدر الأساسي
- Law 14/2022/QH15, Article 24; Circular 27/2025/TT-NHNN, Article 5
Independently test design and operating effectiveness.
- إجراء التنفيذ
- Use a risk-based audit scope to sample customer files, ownership, reporting clocks, sanctions, data quality and remediation; submit the annual internal-audit report where required.
- الأدلة الواجب الاحتفاظ بها
- Audit plan, independence record, samples, report, submission receipt and closure tests.
- المصدر الأساسي
- Law 14/2022/QH15, Article 24; Circular 27/2025/TT-NHNN, Article 5
03Natural-person identificationCDD applies at relationship, relevant occasional-transaction, suspicion and prior-data-doubt triggers.4 عناصر+
Identify and verify natural-person customers.
- إجراء التنفيذ
- Collect prescribed identity information and verify it from reliable independent documents, data or electronic-identification sources; resolve discrepancies and prohibit anonymous or false-name relationships.
- الأدلة الواجب الاحتفاظ بها
- Customer record, identity evidence, verification source, timestamp and discrepancy resolution.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 9-12
Apply the correct CDD trigger and aggregation rule.
- إجراء التنفيذ
- Configure relationship opening, occasional transactions, suspicion and doubt about existing data. For a customer without an active transactional history, apply the current VND 400 million same-day identification trigger only within its stated scope and exclusions.
- الأدلة الواجب الاحتفاظ بها
- Trigger matrix, linked-transaction logic, tested scenarios, rule version and exceptions.
- المصدر الأساسي
- Law 14/2022/QH15, Article 9; Circular 27/2025/TT-NHNN, Article 5
Verify representatives and authority.
- إجراء التنفيذ
- Identify and verify each person acting for a customer and establish the mandate, legal representative status and limits before accepting instructions or access.
- الأدلة الواجب الاحتفاظ بها
- Representative KYC, authority instrument, verification, scope limits and activity log.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 10-12
Control failed CDD and tipping-off risk.
- إجراء التنفيذ
- When required CDD cannot be completed, refuse, suspend or end the relationship or transaction as the governing rule requires, assess an STR and prevent disclosure that could prejudice reporting or investigation.
- الأدلة الواجب الاحتفاظ بها
- CDD gap, restriction or exit decision, approval, suspicion assessment and filing evidence.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 9, 13 and 40
04KYB, registries, and beneficial ownershipVerify legal existence, authorised persons and natural-person ownership or control; registry data supports but does not replace AML analysis.4 عناصر+
Verify every legal person or arrangement.
- إجراء التنفيذ
- Obtain current National Business Registration Portal or other competent-registry evidence, constitutional documents, purpose, address, legal representatives, controllers and authority information.
- الأدلة الواجب الاحتفاظ بها
- Registry extract, constitutional documents, licences, mandates and discrepancy log.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 10-12; Law on Enterprises, as amended by Law 76/2025/QH15
Identify and verify beneficial owners through ownership and control.
- إجراء التنفيذ
- Trace the chain to natural persons, assess actual ownership and control and document the prescribed fallback analysis; do not treat nominees or a registry filing as conclusive.
- الأدلة الواجب الاحتفاظ بها
- Ownership chart, calculations, registry evidence, control analysis, verified identities and fallback rationale.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 3, 10-12; Decree 19/2023/ND-CP
Identify relevant trust and arrangement parties.
- إجراء التنفيذ
- Identify and verify settlors, trustees or equivalents, protectors where relevant, beneficiaries or classes and every natural person exercising ultimate effective control.
- الأدلة الواجب الاحتفاظ بها
- Trust instrument, party schedule, control powers, entitlement analysis and verified identities.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 10-12; Decree 19/2023/ND-CP
Make and maintain corporate beneficial-owner filings.
- إجراء التنفيذ
- For enterprises subject to the amended Enterprise Law, collect, retain and declare beneficial-owner information from 1 July 2025 and update it through the current business-registration process; reconcile it to AML CDD.
- الأدلة الواجب الاحتفاظ بها
- BO register, filing, portal receipt, change log, reconciliation and discrepancy escalation.
- المصدر الأساسي
- Law 76/2025/QH15; Decree 168/2025/ND-CP; Circular 68/2025/TT-BTC
05PEPs, enhanced due diligence, and remote onboardingPolitical exposure, higher risk and non-face-to-face delivery require stronger measures.3 عناصر+
Identify politically exposed persons and relevant relationships.
- إجراء التنفيذ
- Screen customers and beneficial owners for foreign PEP status and applicable related persons under the current framework; apply risk-sensitive refresh and escalation.
- الأدلة الواجب الاحتفاظ بها
- Screening result, source, relationship map, rationale and refresh history.
- المصدر الأساسي
- Law 14/2022/QH15, Article 17
Apply enhanced due diligence to high-risk customers.
- إجراء التنفيذ
- Obtain approval at least one management level above the ordinary approval level, gather and verify additional income, business, source-of-funds or source-of-assets information and increase monitoring and refresh frequency.
- الأدلة الواجب الاحتفاظ بها
- Risk trigger, approval, additional verification, enhanced plan and periodic reviews.
- المصدر الأساسي
- Law 14/2022/QH15, Article 16; Circular 27/2025/TT-NHNN, Article 4
Control remote and electronic identification.
- إجراء التنفيذ
- Validate identity, document authenticity, liveness, impersonation and device risk; preserve the electronic-identification method, result and exception handling required by the applicable sector rule.
- الأدلة الواجب الاحتفاظ بها
- Method assessment, fraud tests, vendor diligence, verification result and exception log.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 11-12; applicable State Bank electronic-KYC rules
06Monitoring and suspicious transaction reportingMonitor expected activity and report suspicion to the State Bank AML Department without waiting for a monetary threshold.4 عناصر+
Conduct ongoing due diligence and transaction monitoring.
- إجراء التنفيذ
- Keep identity, ownership and risk information current and scrutinise activity against purpose, profile, capacity and source of funds; investigate deviations promptly.
- الأدلة الواجب الاحتفاظ بها
- Monitoring scenarios, alerts, case analysis, refresh history and dispositions.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 13, 16 and 20
Detect suspicious transactions and attempts regardless of amount.
- إجراء التنفيذ
- Map statutory suspicion indicators and attempted or incomplete activity, record when suspicion was detected and escalate immediately to the authorised decision-maker.
- الأدلة الواجب الاحتفاظ بها
- Alert chronology, indicator mapping, analysis, decision and supporting records.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 26-36
File STRs within the statutory earlier-of clock.
- إجراء التنفيذ
- Submit through the current authorised route within three working days from the transaction or one working day from detecting suspicion, whichever is earlier; report suspected criminal activity promptly to the competent state authority as required.
- الأدلة الواجب الاحتفاظ بها
- Transaction time, detection time, decision, report, acknowledgement and supplement log.
- المصدر الأساسي
- Law 14/2022/QH15, Article 37; Circular 27/2025/TT-NHNN, Article 7
Protect reporting confidentiality.
- إجراء التنفيذ
- Restrict STR and authority-request information to authorised need-to-know access and legally review disclosures and customer communications.
- الأدلة الواجب الاحتفاظ بها
- Access matrix, disclosure log, legal review, training and incident record.
- المصدر الأساسي
- Law 14/2022/QH15, Article 40
07Threshold reports, wires, payments, and virtual assetsReporting thresholds, transfer data and licensing must be kept distinct.4 عناصر+
Report large-value transactions at the current threshold.
- إجراء التنفيذ
- Identify and report transactions at or above VND 400 million under the current general rule, apply aggregation and exclusions correctly and send electronic reports before 16:00 on the next working day.
- الأدلة الواجب الاحتفاظ بها
- Threshold matrix, transaction data, aggregation tests, report and acknowledgement.
- المصدر الأساسي
- Law 14/2022/QH15, Article 25; Decision 11/2023/QD-TTg; Circular 27/2025/TT-NHNN, Articles 6 and 10
Report qualifying electronic transfers and preserve required data.
- إجراء التنفيذ
- Report domestic electronic transfers from VND 500 million and international electronic transfers from USD 1,000 equivalent; retain required originator, beneficiary, institution and transaction fields and handle incomplete data under the risk procedure.
- الأدلة الواجب الاحتفاظ بها
- Transfer-field matrix, messages, screening, report, exception decision and acknowledgement.
- المصدر الأساسي
- Law 14/2022/QH15, Article 34; Circular 27/2025/TT-NHNN, Articles 8-10
Obtain permission for regulated payment activity.
- إجراء التنفيذ
- Map account, wallet, switching, clearing, collection, payment-support and other non-cash payment functions to Decree 52 and current State Bank rules; launch only after the required licence or approval.
- الأدلة الواجب الاحتفاظ بها
- Service map, legal analysis, application, licence, conditions and agent inventory.
- المصدر الأساسي
- Decree 52/2024/ND-CP and current State Bank implementing rules
Do not assume virtual-asset activity is licensed or AML-covered.
- إجراء التنفيذ
- Obtain current Vietnamese advice before offering exchange, custody, transfer, brokerage or issuance. Treat FATF's June 2026 finding that Vietnam still needs effective VASP regulation as a launch and risk-control warning.
- الأدلة الواجب الاحتفاظ بها
- Activity analysis, legal opinion, regulator correspondence, product restriction and change-monitoring record.
- المصدر الأساسي
- FATF Vietnam action plan, 19 June 2026; APG Vietnam follow-up reports
08Targeted financial sanctionsControls must detect listed persons, ownership and control and support immediate legally required action.3 عناصر+
Screen relevant persons and transactions against current lists.
- إجراء التنفيذ
- Screen customers, beneficial owners, controllers, representatives and transactions at onboarding, during the relationship and when UN or Vietnamese lists change; assess indirect ownership and control.
- الأدلة الواجب الاحتفاظ بها
- List inventory, update log, configuration test, match analysis and disposition.
- المصدر الأساسي
- Law on Prevention and Combat of Terrorism; Decree 122/2013/ND-CP; applicable PF rules
Apply freezing, suspension and reporting measures through the verified route.
- إجراء التنفيذ
- On a true match, prevent prohibited dealing or availability, preserve property and follow the competent authority's current suspension, freezing, reporting, exemption and release direction without delay.
- الأدلة الواجب الاحتفاظ بها
- Match analysis, action timestamp, report, system blocks and authority correspondence.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 44-46; Law on Prevention and Combat of Terrorism
Maintain distinct TF and PF procedures.
- إجراء التنفيذ
- Map designation, screening, action, reporting, exemption, delisting and release routes for terrorism and proliferation financing and test ownership/control and evasion scenarios.
- الأدلة الواجب الاحتفاظ بها
- Legal map, procedures, list-update record, scenario tests and escalation log.
- المصدر الأساسي
- Law 14/2022/QH15; Law on Prevention and Combat of Terrorism; FATF Vietnam action plan
09Records and regulator accessRecords must reconstruct identity, ownership, transactions, reports and decisions from the correct trigger.3 عناصر+
Retain AML records for the applicable five-year period.
- إجراء التنفيذ
- Apply the five-year minimum from transaction completion, account closure, relationship termination or report date as applicable, and preserve longer for an active authority request, investigation or legal hold.
- الأدلة الواجب الاحتفاظ بها
- Retention schedule, trigger calculations, archive samples, holds and deletion approvals.
- المصدر الأساسي
- Law 14/2022/QH15, Article 38
Preserve reconstructable and secure evidence.
- إجراء التنفيذ
- Link identity, ownership, risk, instructions, transaction data, alerts, reports, sanctions actions, approvals and communications under stable identifiers with controlled access.
- الأدلة الواجب الاحتفاظ بها
- Sample case pack, lineage report, retrieval test and access log.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 38-40
Provide information securely to authenticated authorities.
- إجراء التنفيذ
- Validate the requesting authority, preserve confidentiality and record the scope, approval, material produced and delivery route.
- الأدلة الواجب الاحتفاظ بها
- Request register, authority validation, production index, approval and receipt.
- المصدر الأساسي
- Law 14/2022/QH15, Articles 39-40 and Chapter III
10Personal data, biometrics, and transfersAML processing remains subject to Vietnam's current personal-data and cybersecurity framework.4 عناصر+
Document the legal basis, notice and proportionality of KYC processing.
- إجراء التنفيذ
- Map identity, biometric, screening and monitoring fields to a valid processing ground, give required notices, minimise collection and maintain accuracy, purpose and data-subject-rights controls.
- الأدلة الواجب الاحتفاظ بها
- Data inventory, legal-basis map, notices, consent where relied upon, field justification and rights procedure.
- المصدر الأساسي
- Personal Data Protection Law 91/2025/QH15; Decree 356/2025/ND-CP
Apply enhanced controls to sensitive personal data.
- إجراء التنفيذ
- Classify biometric, financial and other sensitive KYC data under the current law; assign responsibility and apply risk-appropriate access, security, processor and accountability controls.
- الأدلة الواجب الاحتفاظ بها
- Classification, responsibility map, access review, security tests, vendor terms and training.
- المصدر الأساسي
- Personal Data Protection Law 91/2025/QH15; Decree 356/2025/ND-CP
Maintain the required personal-data risk and impact records.
- إجراء التنفيذ
- Assess processing and transfer risks before deployment and keep the current dossiers, supporting evidence and competent-authority submissions required for the entity's processing scale and role.
- الأدلة الواجب الاحتفاظ بها
- Processing map, risk and impact records, submission analysis, receipts, approvals and review log.
- المصدر الأساسي
- Personal Data Protection Law 91/2025/QH15, Articles 21-23 and 33; Decree 356/2025/ND-CP
Control incidents, processors and cross-border transfers.
- إجراء التنفيذ
- Maintain detection, containment, evidence, notification and remediation procedures using the current statutory triggers and routes; contractually control processors and document cross-border recipients, purpose, safeguards and onward transfers.
- الأدلة الواجب الاحتفاظ بها
- Incident procedure, chronology, notices where required, vendor contracts, transfer map and monitoring.
- المصدر الأساسي
- Personal Data Protection Law 91/2025/QH15; Decree 356/2025/ND-CP
11Practical evidence packsEvidence should reproduce onboarding, reporting, sanctions and launch decisions end to end.3 عناصر+
Maintain a reconstructable onboarding pack.
- إجراء التنفيذ
- Bundle identity, representative authority, KYB, ownership and control, PEP and sanctions screening, risk, approvals, privacy records and exceptions.
- الأدلة الواجب الاحتفاظ بها
- Complete sampled onboarding pack and retrieval result.
- المصدر الأساسي
- Operational control supporting Law 14/2022/QH15, Articles 9-24
Maintain a reconstructable reporting and sanctions pack.
- إجراء التنفيذ
- Link transactions, alerts, detection and decision times, report, acknowledgement, supplements, suspension or freeze actions, authority communications and access logs.
- الأدلة الواجب الاحتفاظ بها
- Complete sampled case pack, timeline and controlled access log.
- المصدر الأساسي
- Operational control supporting Law 14/2022/QH15, Articles 25-46
Maintain a regulator-scoped launch pack.
- إجراء التنفيذ
- Record perimeter, permissions, current sources, reporting readiness, ownership analysis, sanctions, privacy transfers, outsourcing, virtual-asset restrictions and validation before launch or material change.
- الأدلة الواجب الاحتفاظ بها
- Signed launch pack, source register, regulator map, uncertainty log, tests and approvals.
- المصدر الأساسي
- Official sources listed below
سجل المصادر الأساسية
18 مصدرًا مستخدمًا في هذه القائمة
استخدم هذه الروابط للتحقق من التشريعات وإرشادات الجهات الرقابية وإجراءات الإبلاغ والبيانات الدولية.
- Law No. 14/2022/QH15 on Anti-Money LaunderingNational Legal Database / State Bank of Vietnam · Primary legislation
- Decree No. 19/2023/ND-CP implementing the AML LawNational Legal Database · Primary regulation
- Circular No. 27/2025/TT-NHNN implementing the AML LawState Bank of Vietnam / National Legal Database · Official regulation
- Circular No. 27/2025/TT-NHNN operative textState Bank of Vietnam / National Legal Database · Official regulation
- Decision No. 11/2023/QD-TTg on the large-value transaction thresholdGovernment of Vietnam / National Legal Database · Primary regulation
- Law on Prevention and Combat of TerrorismNational Legal Database / State Bank of Vietnam · Primary legislation
- Personal Data Protection Law No. 91/2025/QH15Government Gazette of Vietnam · Primary legislation
- Decree No. 356/2025/ND-CP implementing the Personal Data Protection LawNational Legal Database · Primary regulation
- Law No. 76/2025/QH15 amending the Law on EnterprisesNational Business Registration Portal · Primary legislation
- Official 2026 implementation guidance on enterprise beneficial ownersNational Business Registration Portal · Official registry guidance
- Decree No. 52/2024/ND-CP on non-cash paymentsState Bank of Vietnam · Primary regulation
- Vietnam 2022 mutual evaluation reportAsia/Pacific Group on Money Laundering · Authoritative assessment
- Vietnam first follow-up reportAsia/Pacific Group on Money Laundering · Authoritative assessment
- Vietnam second follow-up reportAsia/Pacific Group on Money Laundering · Authoritative assessment
- FATF jurisdictions under increased monitoring - 19 June 2026FATF · Authoritative current status
- FATF high-risk jurisdictions subject to a call for action - 19 June 2026FATF · Authoritative current status
- FATF Vietnam country profileFATF · Authoritative country status
- United Nations Security Council consolidated sanctions listUnited Nations · Authoritative sanctions list
إجابات مباشرة
أسئلة KYC وKYB وAML في فيتنام
Who receives AML transaction reports?+
The State Bank of Vietnam's Anti-Money Laundering Department through the current authorised reporting route.
When must an STR be filed?+
Within three working days from the suspicious transaction or one working day from detecting suspicion, whichever is earlier. Preserve both timestamps and escalate suspected criminal activity as required.
What is the general large-value transaction threshold?+
VND 400 million under the current general threshold rule. Apply aggregation, exclusions and any sector-specific requirements separately.
What electronic transfers are reported?+
Under Circular 27/2025, domestic electronic transfers from VND 500 million and international electronic transfers from USD 1,000 equivalent are reportable, subject to stated exclusions.
Is there one universal CDD threshold?+
No. Relationship opening, suspicion and doubt about prior information can trigger CDD without an amount; occasional-transaction rules and sector requirements must be applied in their exact scope.
How is beneficial ownership determined?+
Trace actual ownership and control to natural persons and document the prescribed fallback analysis. Enterprise-register disclosure from July 2025 supports but does not replace AML CDD.
How long are AML records retained?+
Generally five years, but the clock starts from the applicable transaction, account closure, relationship termination or report date. Active matters may require longer preservation.
Can a payment service launch without State Bank permission?+
No. Map the exact service to Decree 52/2024 and current implementing rules and obtain the required licence or approval before launch.
Can a virtual-asset service assume it has a Vietnamese licence route?+
No. FATF still identified effective VASP regulation as an outstanding action in June 2026. Obtain current Vietnamese advice and competent-authority confirmation before offering a service.
What happens on a sanctions match?+
Confirm identifiers and ownership or control, prevent prohibited dealing, apply the competent authority's suspension or freezing direction without delay and report through the verified route.
Is Vietnam on a FATF public list?+
Yes. Vietnam remained under increased monitoring on 19 June 2026, and FATF strongly urged swift completion of its overdue action plan. This calls for proportionate risk measures, not automatic de-risking.
منهجية البحث والمراجعة
تحدد VOVE ID Compliance Research النطاق التنظيمي، وتحول الالتزامات إلى ضوابط تشغيلية، وتربط الادعاءات الجوهرية بالمصادر، وتسجل تاريخ وإصدار كل مراجعة.
General regulatory information, not legal advice or a licence determination. Reviewed as applicable on 27 September 2026. Vietnamese-language instruments control. Confirm the reporting-entity perimeter, current AML Department filing specifications, sector permissions, sanctions directions, virtual-asset regime and personal-data requirements with the competent authority and qualified Vietnamese counsel before launch.