A wave of impersonation scams is targeting online shoppers in Vietnam, as criminals use leaked personal data to pose as delivery personnel and defraud unsuspecting buyers. The Ministry of Public Security has launched an investigation into the illegal trading of personal information that fuels these schemes.

According to reports from numerous victims, orders placed on major e-commerce platforms or deliveries made via postal services are quickly followed by scam calls or messages. In these, fraudsters - disguised as shippers - request payment for goods and then disappear with the money.

Speaking to VietNamNet, Lieutenant Colonel Nguyen Dinh Do Thi from the Department for Cyber and High-Tech Crime Prevention (A05) said the situation reflects a growing threat.

“Personal data breaches in cyberspace are becoming increasingly common, some involving very serious consequences,” he said. “There are even private forums and closed groups where personal data of Vietnamese users is openly traded.”

He explained that cybercriminals often harvest and exploit this data to commit fraud and other offenses. In response, the Ministry of Public Security is stepping up efforts to track and punish those who illegally obtain or sell such information.

“Authorities will focus on detecting, reviewing, and strictly handling individuals and organizations that engage in unauthorized data exploitation,” Thi emphasized. “At the same time, individuals must also take responsibility for protecting their personal information.”

Thi advised internet users to be proactive in safeguarding digital accounts - using strong passwords, avoiding public sharing of sensitive details, and staying informed about new fraud techniques.

“Scammers typically collect victim information in advance, creating convincing scripts for theft,” he said. “Raising public awareness is vital - not just to prevent crime, but to protect each person from becoming a victim.”

He added that when a data breach occurs or is suspected, individuals should promptly report it to authorities. The Ministry has already delegated handling of such cases to specialized units within provincial and municipal police departments.

Legal protection now in force

Vietnam’s new Personal Data Protection Law officially took effect on January 1, 2026. Thi described the legislation as a comprehensive legal framework that strengthens privacy rights and data security for individuals and businesses in the digital age.

Lawyer Ha Huy Phong, director of Inteco Law Firm, said the law marks a shift from voluntary compliance to mandatory enforcement.

“Starting this year, personal data protection is no longer optional. It’s a legal obligation with specific penalties for violations,” he said.

Phong also shared a personal experience - falling victim to a scam himself. The fraudster knew he had recently purchased a book and used that detail to craft a believable delivery scenario.

“It may seem minor, but it shows how misused personal data can lead to very real, very close consequences,” he said.

Thai Khang