3 "forbidden zones" that cause banking apps to automatically disconnect
From March 1, 2026, requiring banking applications (Mobile Banking) to have a "self-defense" mechanism, according to Circular 77/2025/TT-NHNN. Specifically, applications must automatically exit, stop operating and notify customers of the reason if mobile devices do not ensure a secure environment.
Below are 3 "forbidden areas" that cause the banking app to automatically disconnect:
1. Locked device (Root/Jailbreak)
This is the most common case. If the customer's phone has been tampered with with the operating system (Root for Android or Jailbreak for iOS) or the bootloader protection mechanism has been unlocked, the bank application will refuse to operate. This is to prevent hackers from taking deep control of the device to steal OTP code or login information.
2. Run in a simulated or error-resolving environment
The application will automatically exit if it detects:
The environment has a debugger in operation.
The application is running on a virtual machine, a simulator.
The phone is on mode that allows the computer to intervene directly (Android Debug Bridge).
3. Application with malicious code interference
If Mobile Banking software detects that a strange code is inserted from outside (hooking) to track data, log, or detects that the application has been repackaged (repackaged) differently from the original version of the bank, the system will immediately stop trading.
Must update to the latest version
In addition to the self-escape mechanism, Circular 77 also requires banks to strictly control the application version:
Block downgrade: Customers when reinstalling or activating on new devices are required to use the latest version. Banks must have technical solutions to prevent users from downgrading to older versions that lack security.
Periodic review: At least 3 times a month, banks must re-evaluate security vulnerabilities of current versions.
Emergency handling: If a serious vulnerability is detected, the bank has the right to stop allowing transactions on the faulty version and request customers to update immediately.
This regulation is considered a strong step by the State Bank against the increasing situation of high-tech crime, taking advantage of loopholes in user devices to appropriate assets.
It's a bit of a bit of a bit of a bit of a bit of a bit.
