Thoroughly changing the way it works
Directive No. 57-CT/TW dated December 31, 2025 of the Secretariat of the Party Central Committee requests resolute handling of "junk" SIM cards, "virtual" accounts, and anonymous accounts; applying mandatory identity verification and age control mechanisms to protect children in the online environment.
Talking about this content, Mr. Nguyen Van Thin - Director of Sandmedia Group, security expert of the Anti-Fraud Project - assessed it as an important step in establishing discipline in cyberspace, creating a foundation for a more transparent and safe digital environment.
The unified identification and tightening of user management are expected to contribute to effectively preventing fraud and counterfeiting, while enhancing the responsibility of digital platforms. This is also a premise to promote sustainable digital economy development, associated with protecting users, especially children, in the online environment.
To thoroughly handle "junk" SIMs and "virtual" accounts, according to Mr. Nguyen Van Thin, network operators and digital platforms will have to fundamentally change their operating methods.
Firstly, in terms of technology, it is mandatory to apply advanced eKYC (Electronic Customer Recognition). Not only stopping at taking paper photos, platforms must apply biometric technology (face recognition, Liveness Detection - anti-counterfeit biometrics) and directly compare (in real time) with the National Population Database.
He also noted the deployment of AI and Machine Learning: Automatically scan, detect and lock accounts/SIMs with abnormal behaviors (such as mass creation from an IP, bot-like behavior, no incurred fees/actual interaction).
Regarding the management process, it is necessary to completely stop the pre-activation of SIMs or allowing account registration using virtual information. At the same time, units must build a post- periodic inspection mechanism, requiring users to re-verify when there are suspicious signs or when documents expire.
Notably, legal and economic responsibilities for SIM card agents or account management departments also need to be tightened to avoid lax management.
This requires cooperation between major transnational platforms on current law, which is also an important issue," he emphasized.
The most fragile and difficult line
Balancing authentication, child protection and privacy is the slimmest and most difficult boundary. To do this, the expert proposed applying technology solutions to protect privacy from design including 3 main solutions.
Undisclosed Evidence" technology: Social media platforms can verify a user who is over 18 years old (or under 16 years old) through a token code from a national identification application (such as VNeID) without knowing the exact date of birth, full name or ID card number of that person.
Minimum data collection principle: Social networks are only allowed to receive status verification data (Valid/Not valid; Aged/Not old) instead of storing the entire user identity profile on their server.
Digital experience streaming: When the age authentication system recognizes the user as a child, it will automatically activate "safe mode", disable targeted advertising, block malicious content and limit strangers from texting, but still maintain the interface and basic entertainment features so as not to spoil the children's digital experience.
According to Mr. Nguyen Van Thin, Directive No. 57-CT/TW sets out an urgent requirement for "identifying" cyberspace to ensure security and protect children.
Network operators and social networks must deeply integrate eKYC biometrics and AI technology to prevent the creation of anonymous accounts/SIMs right from the gateway.
It is necessary to apply advanced encryption technologies (such as Zero-Knowledge Proof) so that the platform can only "verify status" (sufficient age, true identity) without being allowed to store or exploit users' core personal information" - he said.
