Vietnamese police warn fake VNeID site bcavneid.com steals ID numbers, passwords and OTPs
Hai Phong City Police warned on 29 October 2026 that bcavneid.com imitates the VNeID identity portal to steal ID numbers, passwords and OTP codes.
- First reported
- Reports
- 1
Source: vietnam.vn · published
What happened
According to a report published 29 October 2026 (Báo Lạng Sơn, republished on vietnam.vn), the Cyber Security Department of Hai Phong City Police warned about the website bcavneid.com, which impersonates the VNeID electronic identification system of Vietnam's Ministry of Public Security. The fake site's structure, logo and interface are described as almost identical to the official portal.
How the scam works
The domain uses letters that suggest an official agency ("bca" is the abbreviation for the Ministry of Public Security) joined to the app name VNeID, which helps it look genuine. When a visitor logs in, the fraudsters' server records the national ID card number, password, phone number and OTP verification code. With those the criminals can take control of a digital identity account, reach linked banking apps and e-wallets, and make transfers. Police also say some scenarios go further: users are pushed to grant deep access permissions or to download unfamiliar configuration files, which can let malware remotely control the phone and automatically carry out financial transactions.
Victims are lured by phone calls from people posing as officials who ask them to "synchronize level-2 identity data", fix faulty administrative records or activate an emergency identity account. They are then sent links by SMS or social media. The police describe this as part of a wider wave of scams impersonating government agencies and public online services.
The police advise using VNeID only through the official app from the standard app stores or through the Ministry of Public Security's official site, and doing administrative procedures only through national or local portals ending in .gov.vn.
Source
Báo Lạng Sơn, "Warning about fake websites impersonating the VNeID electronic identity system", 29 October 2026, as republished on vietnam.vn; the warning is attributed to the Cyber Security Department of Hai Phong City Police.
Red flags
- A website at bcavneid.com, not an official .gov.vn address, asking you to log in to VNeID.
- A caller claiming to be an official who says your identity data needs "level-2 synchronization".
- Links sent by SMS, email or social media to a VNeID page.
- A request to enter your ID number, password, phone number and OTP on a web page.
- Prompts to install configuration files or grant unusual permissions.
If you were targeted
- 1Use VNeID only through the official app from Google Play or the App Store, or the Ministry of Public Security's official website.
- 2Never share OTP codes, passwords or PINs with callers or enter them on unverified websites.
- 3Do not open links about identity accounts sent by SMS, email or social media.
- 4If you entered details, change your passwords, contact your bank and ask the police to help secure your VNeID account.
- 5Go to your nearest police station or use the local police hotline for help with identity-account problems.