P2P Lending in Vietnam: Sandbox Rules and Risks 2026

For any platform operator or investor weighing entry into Southeast Asia’s fastest-growing digital credit market, P2P lending in Vietnam currently sits in one of the region’s most consequential regulatory gaps. Billions of dong in informal peer-to-peer credit already flow through dozens of domestic and cross-border apps, yet no dedicated licensing law exists.

The State Bank of Vietnam (SBV) has instead opened a narrow, time-limited fintech regulatory sandbox, leaving most platforms to operate on borrowed legal theories, ad hoc contractual structures, and considerable enforcement risk. This article maps the current rules, the sandbox mechanism, AML/KYC exposure, and how Vietnam’s approach compares with Indonesia and Singapore.

What Is P2P Lending in Vietnam and Why It Matters Now

Peer-to-peer lending platforms connect individual or institutional lenders directly with borrowers through a digital marketplace, with the platform operator collecting fees for matching, credit scoring, and collection services rather than lending its own balance sheet. Investment crowdfunding operates on an adjacent but distinct model: investors fund equity or revenue-share stakes in early-stage businesses rather than originating debt.

Both models have grown rapidly in Vietnam over the past decade, filling a credit gap for unbanked consumers and small and medium enterprises (SMEs) that struggle to meet collateral requirements at traditional banks.

The commercial stakes are significant. Vietnam’s underbanked population, a young and digitally fluent consumer base, and a chronically underserved SME lending market make the country an attractive target for both domestic startups and cross-border platforms from Singapore, Indonesia, and China. Yet the absence of a dedicated licensing regime means every operator — foreign or domestic — is building on uncertain legal ground, a reality that shapes financing terms, investor due diligence, and exit planning alike.

How P2P Lending in Vietnam Differs From Traditional Credit

Unlike a bank loan, a P2P lending arrangement in Vietnam is typically structured as a series of bilateral civil loan contracts between individual lenders and borrowers, with the platform acting as an intermediary rather than a credit institution. This structuring choice is not incidental — it is the mechanism by which platforms have historically avoided the licensing requirements that apply to credit institutions under the Law on Credit Institutions.

Civil loan contracts between individuals are lawful under the Civil Code, but using a platform to intermediate thousands of such contracts at scale raises questions the Civil Code was never designed to answer.

The Regulatory Vacuum: Why P2P Lending in Vietnam Remains a Legal Gray Zone

No standalone statute currently licenses or comprehensively regulates peer-to-peer lending in Vietnam. Platforms rely on a patchwork of civil contract law, e-commerce registration, intermediary payment service rules, and general corporate licensing to justify their operating model. This is the defining characteristic of P2P lending in Vietnam as a legal gray zone: the activity is not expressly prohibited, but it is not expressly authorized either, and the line between a lawful matching service and an unlicensed credit intermediary is drawn inconsistently in practice.

SBV’s Cautious Stance and Draft Decree History

The SBV has publicly flagged P2P lending as a source of systemic and consumer-protection risk since at least 2019, citing concerns over disguised usury, data misuse, and platforms that in substance pool and re-lend investor funds rather than merely matching counterparties. Successive drafts of a dedicated P2P lending decree circulated for comment over several years without reaching enactment, reflecting the SBV’s preference to observe sandbox participants before committing to permanent rules.

That caution has left incumbent platforms operating for years under rules written for a different activity entirely.

Current Legal Basis — or Lack Thereof

In practice, a platform’s legal foundation today rests on three pillars: (i) its enterprise registration certificate, which typically describes the business as technology or information services rather than lending; (ii) compliance with intermediary payment and e-commerce regulations where applicable; and (iii) the civil-law validity of the underlying loan contracts.

None of these pillars was designed to regulate aggregated peer-to-peer credit intermediation, which is precisely why counsel advising platform operators or institutional investors must look beyond the registration certificate to the substance of the fee structure, risk allocation, and any guarantee or buy-back arrangement embedded in the platform’s terms of service.

The Fintech Regulatory Sandbox Decree: Scope and Eligibility

The government’s answer to this vacuum is Decree No. 94/2025/ND-CP on the controlled testing mechanism (sandbox) for fintech solutions in the banking sector, which took effect on 1 July 2025. The decree is significant precisely because it names P2P lending as one of the eligible solution types, alongside credit scoring and open-API data sharing, giving qualifying platforms a lawful, time-bound pathway to operate under direct SBV supervision rather than in the informal gray zone described above.

Which Fintech Solutions Qualify for the Sandbox

Eligible solutions under the decree are limited to a defined list — credit scoring, open API, and P2P lending — and applicants must be Vietnamese-incorporated entities meeting minimum capital, governance, and technology-safety criteria. A foreign platform cannot apply directly; it must establish or partner with a licensed Vietnamese entity to participate, a structural requirement that shapes market-entry strategy for every cross-border operator considering the fintech regulatory sandbox Vietnam route.

Sandbox Application Process and Timeline

The sandbox process involves an application dossier submitted to the SBV describing the solution, risk controls, and a proposed testing scope (geographic area, customer segment, loan or investment size limits), followed by SBV evaluation and, if approved, a testing period of up to two years with the possibility of extension.

Approved participants operate under bespoke conditions set by the SBV’s approval decision rather than a generic license, and the SBV retains broad authority to suspend or terminate participation if risk indicators — default rates, complaint volumes, data breaches — exceed agreed thresholds.

Cross-Border Investment Crowdfunding Platforms Targeting Vietnamese SMEs

A distinct but related risk arises from offshore investment crowdfunding Vietnam platforms that solicit Vietnamese SME issuers or Vietnamese retail investors without any local licensing footprint. Securities-based crowdfunding — where investors receive equity, convertible instruments, or revenue-share rights — intersects with the Law on Securities, which restricts public offers and intermediary securities services to licensed entities.

A platform based in Singapore or elsewhere that markets investment opportunities in Vietnamese SMEs to Vietnamese residents, or that channels Vietnamese investor capital offshore, risks characterization as conducting unlicensed securities or payment intermediation activity in Vietnam, regardless of where its servers or corporate seat are located.

Legal Risks for Foreign Platforms Operating Without a Local Entity

Exposure for an unlicensed cross-border platform spans several dimensions: administrative sanctions for unlicensed financial services activity, foreign exchange control violations if investor funds move offshore without SBV-compliant channels, and contractual unenforceability risk if a dispute lands before a Vietnamese court applying mandatory local-law provisions the platform’s terms of service never anticipated. For institutional sponsors evaluating a platform with Vietnamese exposure, this is a first-order due diligence item, not a footnote.

AML/KYC Obligations for Platform Operators

Whether or not a platform has secured sandbox status, Vietnam’s Anti-Money Laundering Law (Law No. 14/2022/QH15) and its implementing guidance impose independent obligations on entities facilitating financial transactions, and the SBV has signaled that AML/KYC fintech platforms compliance will be a non-negotiable condition of any future P2P lending license. Treating AML/KYC as a sandbox-only concern is a common and costly misreading of the current framework.

Customer Due Diligence Standards Under Vietnamese AML Law

Platforms must identify and verify the identity of both lenders and borrowers before onboarding, applying enhanced due diligence to higher-risk customers (large transaction volumes, politically exposed persons, or customers connecting from high-risk jurisdictions). Identity verification increasingly relies on electronic know-your-customer (eKYC) tools referencing the national population database, but platforms remain responsible for the adequacy of their verification methodology regardless of which vendor supplies the technology.

Reporting Obligations to the State Bank of Vietnam

Qualifying transactions trigger reporting duties to the SBV’s Anti-Money Laundering Department, including large-value transaction reports and suspicious-activity reports where a transaction pattern suggests structuring, layering, or other red flags. Sandbox participants face additional, solution-specific reporting conditions set out in their individual SBV approval, often requiring periodic disclosure of default rates, fund flow volumes, and consumer complaints on top of standard AML filings.

Comparative Regulatory Models: Vietnam vs Indonesia vs Singapore

Vietnam’s sandbox-first, licensing-deferred posture looks markedly different from the frameworks adopted by two of its closest regional comparators. The table below summarizes the core distinctions relevant to platform operators evaluating where and how to structure regional fintech operations.

Feature	Vietnam	Indonesia	Singapore
Dedicated P2P lending license	Not yet formalized; sandbox only	Yes — OJK-registered/licensed P2P lending providers	No single P2P license; activity captured under existing capital markets/payment regimes
Regulator	State Bank of Vietnam (SBV)	Otoritas Jasa Keuangan (OJK)	Monetary Authority of Singapore (MAS)
Foreign ownership of platform	Must operate through Vietnamese-incorporated sandbox participant	Foreign equity cap applies to licensed P2P providers	No P2P-specific cap; general foreign investment rules apply
Testing/trial mechanism	Up to 2-year sandbox trial under Decree 94/2025/ND-CP	Graduated registered-to-licensed pathway, no open-ended sandbox for P2P	MAS FinTech Regulatory Sandbox available but P2P largely routed through existing licenses
Minimum capital	Set case-by-case in sandbox approval	Fixed statutory minimum equity for licensed providers	Based on relevant capital markets services or payment license tier
AML/KYC baseline	General AML Law 14/2022/QH15 plus sandbox conditions	OJK AML/CFT regulations specific to P2P providers	MAS AML/CFT notices under Payment Services Act / Securities and Futures Act

Indonesia’s OJK-Licensed P2P Framework

Indonesia offers the clearest contrast: its financial services authority, OJK, operates a dedicated two-stage registration-then-licensing regime specifically for P2P lending providers, with fixed minimum capital, foreign ownership caps, interest-rate guidance, and mandatory credit bureau reporting. The framework is far from problem-free — Indonesia has also had to crack down repeatedly on illegal, unregistered platforms — but it gives both lenders and borrowers a clear reference point for what a compliant platform looks like, something P2P lending in Vietnam currently lacks.

Singapore’s MAS Capital Markets Services Regime

Singapore does not operate a bespoke P2P lending license at all. Depending on structure, a platform may fall under the Securities and Futures Act (if it facilitates debt securities or collective investment schemes), the Payment Services Act (if it handles e-money or remittance flows), or simply contract law if it is a pure bilateral-loan matching service outside regulated activity.

This produces a more fragmented but arguably more mature classification exercise, in which MAS licensing determinations turn on the precise economic substance of each platform’s product rather than a single catch-all license.

Structuring Options for Platform Operators Entering Vietnam

Given this landscape, operators and investors face a genuine strategic choice rather than a single compliant path. Three broad structuring options currently exist: apply for sandbox participation and accept SBV supervision and reporting burdens in exchange for legal certainty; continue operating under the civil-contract-plus-registration model while accepting elevated regulatory and reputational risk; or enter the market through a partnership or investment in an already-sandboxed incumbent rather than building a standalone license application from scratch.

Sandbox Participation vs Waiting for a Formal License

Sandbox participation offers a defensible regulatory position today but carries real costs: capped testing scope, bespoke and sometimes onerous reporting conditions, and no guarantee that a permanent license will follow on favorable terms once the trial period ends. Waiting for a formal licensing decree avoids those near-term costs but leaves an operator exposed to the gray-zone risks described earlier for an indeterminate period, with no public timeline for when — or whether — a standalone P2P lending law will be enacted.

Investor and SME Protections Under the Current Framework

For individual lenders and SME borrowers, protection today is thinner than headline platform marketing often suggests. Lenders bear full credit risk on underlying civil loan contracts with no deposit insurance equivalent, no statutory loss-sharing fund, and limited recourse beyond ordinary civil litigation if a platform collapses or a borrower defaults en masse.

SME borrowers, meanwhile, face effective interest rates that can approach or exceed the civil-law usury ceiling once platform fees, insurance add-ons, and penalty charges are layered onto the nominal rate — a structuring pattern regulators in both Vietnam and Indonesia have flagged as a recurring consumer-protection concern.

What’s Next: Toward a Formal P2P Lending Licensing Framework

The sandbox decree is explicitly framed as a transitional mechanism, and SBV officials have indicated that sandbox outcomes will inform eventual permanent legislation covering P2P lending, credit scoring, and open banking more broadly. Platform operators and investors should expect further implementing guidance on sandbox reporting templates, consumer-complaint handling standards, and — eventually — a dedicated licensing decree modeled in part on observed sandbox performance.

Until that framework is enacted, every structuring and investment decision in this sector should be made with the current legal gray zone, not an assumed future license, as the baseline case.

Operators should also track SBV fintech regulation closely, because the central bank remains the primary licensing authority for payment-adjacent activity. AML KYC fintech platforms must verify borrowers and lenders under the AML framework regardless of sandbox status. Finally, no peer-to-peer lending license Vietnam currently recognizes exists as a standalone category, so any P2P lending model must rely on the sandbox or on a licensed-institution partnership (verify before launch).

Frequently Asked Questions

Is P2P lending legal in Vietnam?

There is no law that expressly prohibits peer-to-peer lending, but there is also no dedicated licensing statute. Most platforms operate in a gray zone unless they hold SBV sandbox approval under Decree 94/2025/ND-CP.

What is the Vietnam fintech regulatory sandbox?

It is a controlled testing mechanism under Decree 94/2025/ND-CP letting approved fintech solutions — including P2P lending, credit scoring, and open API — operate under direct SBV supervision for up to two years.

Can a foreign platform offer P2P lending directly to Vietnamese users?

Generally no without a licensed or sandbox-approved Vietnamese entity. Direct offshore solicitation of Vietnamese lenders or borrowers raises securities, payment-intermediation, and foreign-exchange compliance risks.

What AML/KYC obligations apply to P2P platforms in Vietnam?

Platforms must verify customer identity, apply enhanced due diligence to higher-risk users, and file large-value and suspicious-activity reports with the SBV under Law No. 14/2022/QH15, regardless of sandbox status.

How does Vietnam’s approach compare to Indonesia’s?

Indonesia licenses P2P lending providers directly through OJK with fixed capital and ownership rules. Vietnam currently relies on a time-limited sandbox rather than a permanent licensing statute.

Operators and investors should treat any Vietnamese P2P lending or crowdfunding structure as requiring individualized legal review before capital commitment or platform launch, given how quickly sandbox conditions and enforcement practice are evolving. For primary source review, see the State Bank of Vietnam’s official portal and the Government Database of Legal Documents for the current text of Decree 94/2025/ND-CP and related guidance. IVLF Advisors’ investment finance practice and fintech regulatory advisory practice support platform operators and investors navigating this transition.

This article provides general information on the regulatory treatment of P2P lending and investment crowdfunding in Vietnam as of the publication date and does not constitute legal, tax, or financial advice. Regulations in this area are evolving; readers should seek advice tailored to their specific facts before making investment or compliance decisions.