Decision 05 Locks In VIFC Licensing Rules, Adding Auto-Invalidation and Fortune 500 Fast-Track

Editor's note: This article updates our earlier coverage at VIFC Licensing Handbooks Signal Risk-Based Entry Regime With 120-Day Bank Timeline, published 26 July 2026. We will update this article as further implementing guidance or the primary Decision 05 text becomes available through official channels.

When VIFC Insight covered the draft licensing handbooks in July 2026, we flagged them as unverified drafts and promised an update when official documents appeared. That moment has arrived. Decision No. 05/QĐ-HĐĐHTTTC, issued 24 July 2026 by the VIFC Executive Council, is the binding instrument. What changed from draft to final matters: the official Regulation added enforcement mechanisms the draft did not detail, and those mechanisms now govern the 38 institutions already on the VIFC roster.

A note on body-name terminology: GV Lawyers' Legal Alert refers to the issuing body using language that translates consistently as "Executive Council" in their analysis. Earlier VIFC Insight coverage has used both "Executive Board" and "Executive Council" across articles in this corpus. This article aligns to "Executive Council" throughout, consistent with GV Lawyers' usage and the rendering in Decree 92 Explained. Readers cross-referencing other articles in this series should note the inconsistency until a single authoritative English rendering is confirmed by the VIFC Authority.

What the Official Regulation Confirms#

The headline figure from the draft holds. Bank licensing runs 120 days from receipt of a complete and valid dossier — now a binding commitment, not a planning assumption. According to GV Lawyers' Legal Alert on Decision 05, the legal basis for this timeline draws on Articles 3.2, 10.4, 10.5, and 10.6 of Resolution 222/2025/QH15 and Chapter II of Decree No. 329/2025/ND-CP. These article-number citations come directly from GV Lawyers' analysis; institutions should verify against the primary instruments before building compliance timelines.

The eight-category governance dossier also survives unchanged: corporate governance, internal controls, risk management, compliance framework, business plan, business continuity plan, IT systems, and management credentials. IT and cybersecurity remain explicit entry criteria — not a post-admission compliance requirement but a condition for the licence itself.

Fit-and-proper requirements apply to the enterprise, major investors, ultimate beneficial owners, and key management personnel. The head office must be located within the VIFC — either the Ho Chi Minh City or Da Nang node — and maintained throughout the operation period. That physical-presence obligation has direct implications for the Grade A office market already repricing around VIFC demand.

Three Additions the Draft Did Not Contain#

A Three-Track Admission System#

The final Regulation introduces a formal tiered structure that the draft did not articulate. According to GV Lawyers' analysis:

• Track 1 — Establishment/licensing: Full regulatory process for banks, securities firms, and insurance companies, subject to the 120-day and 7-working-day windows respectively.
• Track 2 — Recognition: Fortune 500 companies and what the Regulation terms the Top 10 domestic enterprises (excluding banking, securities, and insurance) receive a Membership Certificate within 5 working days. This is the fastest admission path in the VIFC framework.
• Track 3 — Standard registration: All other eligible enterprises, with a certificate issued within 7 working days.

The recognition lane is a meaningful signal. International institutions that qualify on the Fortune 500 list have a named procedural path — not a promise of regulatory facilitation, but a defined administrative timeline with no parallel in the draft.

Enforcement Mechanisms: Auto-Invalidation and Revocation#

This is where the final Regulation most substantially exceeds the draft. Two hard deadlines now govern licensed institutions:

12-month commencement rule. Licensed banks that fail to commence operations within 12 months of receiving their licence face auto-invalidation of that licence. For securities and insurance firms, the equivalent failure triggers revocation. Whether this distinction between auto-invalidation (banking) and revocation (securities/insurance) reflects different regulatory architectures under the State Bank of Vietnam and the State Securities Commission has not been confirmed in the available analysis. The practical effect is the same: a licence left unused for a year is a licence lost.

90-day capital contribution deadline. All new members — across all three tracks — must complete and report their charter capital contribution within 90 days of receiving a Membership Certificate. Failure may result in termination of membership status.

Together, these two deadlines mean VIFC membership can no longer be held indefinitely without action. Institutions that have received Membership Certificates without completing capital are already on the clock. Banks that have received licences but have not opened for business are running against the 12-month limit. For the current 38-member roster, these are not abstract risks.

Pre-Launch Obligations#

Decision 05 also specifies what must happen before an institution opens its doors. According to GV Lawyers, members must deposit capital into a blocked account 30 days before commencing operations. They must also give 15 days' advance notice — both public disclosure and notification to the VIFC Authority — before launch. These sequenced pre-launch requirements give the regulator visibility into the operational timeline and create a paper trail against which the 12-month auto-invalidation clock can be tracked.

What Speeds Up: Securities and Insurance#

The precision on non-bank financial licences is new and notable. Securities and insurance licences issue within 7 working days from the date of written confirmation that capital has been deposited in a blocked account. That is a materially faster headline timeline than most comparable IFC regimes. The TCBS, HSC, and DNSE securities subsidiaries already planning VIFC operations have a concrete processing window to work against.

Digital Administration#

Membership Certificates are issued electronically by default, with hard copies available on request. Applications can be submitted through the online Membership Registration and Recognition System. These are administrative details, but they matter for multinationals managing document execution across jurisdictions: the digital-first default reduces friction for offshore parent companies managing Vietnam incorporation processes remotely.

What Still Is Not Resolved#

Two gaps from the draft article remain open in the official Regulation as described in GV Lawyers' Legal Alert.

Dual-regulator coordination. The VIFC Authority shares oversight responsibility with the SBV (for banks) and the SSC (for securities and insurance firms). Decision 05 references inter-agency coordination as part of its governance architecture, but GV Lawyers' analysis does not indicate that the Regulation establishes binding service-level commitments or escalation paths for SBV and SSC processing. The 120-day bank window is a commitment on receipt of a complete dossier — but whether SBV's internal review of that dossier has its own sub-deadline within the 120 days is not established in the available analysis. That gap determines whether 120 days is a real ceiling or an optimistic planning assumption.

Geographic parity between nodes. Decision 05 names HCMC and Da Nang as valid head-office locations but does not clarify, in the available analysis, whether all three admission tracks apply identically to both nodes. Da Nang's VIFC framework has its own regulatory nuances, and whether the Fortune 500 fast-track operates identically in Da Nang as in HCMC has not been confirmed.

Minimum capital thresholds and fees. Neither the minimum paid-up capital requirements nor the application fee schedules appear in GV Lawyers' analysis of Decision 05. These were gaps in the draft article and remain so.

A note on sourcing: GV Lawyers is a credible law firm with direct access to regulatory documents, and their Legal Alert is the primary source for this article. The full text of Decision 05/QĐ-HĐĐHTTTC has not been independently verified against the official gazette (Công Báo), and institutions should obtain the primary instrument before building compliance timelines around specific provisions.

What Comes Next#

The binding Regulation resolves the largest uncertainty the draft-based article carried: whether the licensing framework would hold. It held — and added enforcement mechanisms the draft did not carry. The immediate compliance priorities for institutions already in the VIFC:

• Members with Membership Certificates: Audit the date of certificate issuance and confirm whether the 90-day capital contribution window has been met or is running.
• Banks with licences: Confirm operational commencement status against the 12-month auto-invalidation clock.
• Institutions that qualify for the Fortune 500 recognition lane: The 5-working-day admission path is now a named administrative procedure — but it requires a complete application to trigger the clock.
• Da Nang-focused applicants: Until geographic parity is confirmed in writing, treat the HCMC procedures as the baseline and seek specific confirmation from the VIFC Authority on Da Nang-specific processes.

The dual-regulator coordination question — how the VIFC Authority, SBV, and SSC divide responsibility in practice — remains the operational variable that no public document has yet settled. Until service-level commitments between these bodies are published or tested in practice, the processing timelines in Decision 05 are best understood as ceilings, not guarantees.