According to Circular 08/2026 issued by the Ministry of Science and Technology on March 31, within a maximum of two hours from the time a SIM card is detected to be used on a different device than before, the telecommunications enterprise must review and temporarily suspend the provision of incoming services. At the same time, the network operator sends a notice requesting users to carry out verification. The regulation takes effect from June 15.
Authentication is carried out in two ways. First, use electronic authentication services to compare face images taken directly with data in national databases such as population, identity cards, entry and exit or data on ID cards that have been authenticated by the police agency. Second, compare facial images with biometric data stored by network operators. With this option, telecommunications enterprises are responsible for accuracy.
The authentication system must meet strict technical standards, in which the rate of incorrect refusal is below 5% and the rate of incorrect acceptance is below 0.01% according to FIDO standards. The technology must also detect forms of forgery such as photos, videos or 3D masks. The authentication time of each subscriber is fully recorded.
For subscribers who have not completed verification, the regulation provides a clear handling roadmap. After being temporarily suspended from calling and texting, users have a maximum of 30 days to complete biometrics. If this time limit is exceeded, the service will be suspended in both directions. After the next 5 days, if it is still not implemented, the telecommunications enterprise will terminate the contract and terminate the service provision.
The regulation aims to ensure that the phone number is attached to the right user, limiting risks when the SIM is lost or lost but not locked in time. This helps prevent the abuse of subscribers for fraudulent acts.
The addition of biometric authentication is considered a necessary technical solution, similar to the way banks are applying to enhance security. The new policy is also expected to contribute to ending the situation of buying and selling pre-activated SIMs.
Along with that, from April 15, all newly developed mobile subscribers must carry out facial verification, compare with the national database on population and identity.
