Shinhan Bank Fake “Registration Reward” Scam (Vietnamese Variant)
This campaign impersonates Shinhan Bank, a legitimate international bank with a significant presence in Vietnam. The scam promotes a fake “ambassador” program offering a cash reward (800,000 VND, approximately 30 USD) for registering an account through a provided link. The goal is to trick victims into downloading a malicious app, entering personal information, or installing malware on their device.
How it works:
The victim encounters this scam via social media ads, SMS, email, or messaging apps (such as Facebook, Zalo, or Telegram). The page claims that by registering for a Shinhan Bank account through the provided links, the user will receive a cash reward.
The fake promotion includes:
- A promise of 800,000 VND for new account registration
- Instructions to download an app via Android or iOS buttons
- Steps that appear to describe a legitimate banking registration process (downloading the app, registering for internet banking, entering phone number and email, receiving OTP, completing eKYC – electronic Know Your Customer verification)
The goal:
The attacker aims to:
- Trick victims into downloading a fake banking app that may contain malware or steal credentials
- Capture personal information (phone number, email, ID documents) during the fake registration process
- Steal one-time passwords (OTP) or other authentication details
- Potentially gain access to the victim’s actual banking accounts if the victim mistakenly uses real credentials on a fake interface
There is no legitimate reward—the entire promotion is fabricated.
Red flags to watch for:
- Too good to be true offer: A cash reward of 800,000 VND for simply downloading an app and registering is highly unusual for a legitimate bank. Banks do not typically offer such promotions through unofficial channels with download links.
- Suspicious download links: The “Tải Android” and “Tải Cho iOS” buttons likely lead to fake apps or phishing pages, not the official Shinhan Bank app from the Google Play Store or Apple App Store.
- Unofficial distribution: Legitimate banking apps are distributed exclusively through official app stores (Google Play, App Store). Banks never require users to download apps via third-party links in promotional messages.
- Domain mismatch: The page is hosted on a domain that is not the official Shinhan Bank Vietnam domain (which is
shinhan.com.vn). - Generic instructions: The registration steps are described in vague terms. A legitimate bank would direct customers to its official website or app store listing, not provide a step-by-step guide on a promotional page with direct download buttons.
- Pressure to act: The language encourages immediate action (“còn chờ gì” – “what are you waiting for”) to create urgency.
What to do if you encounter this:
- Do not click the “Tải Android” or “Tải Cho iOS” buttons.
- Do not download any app from links provided on this page.
- Do not enter any personal information, phone numbers, email addresses, or ID documents.
- If you wish to open an account with Shinhan Bank, visit the official Shinhan Bank Vietnam website (
shinhan.com.vn) or go directly to a branch. Only download the official banking app from the Google Play Store or Apple App Store. - If you have already downloaded an app from a suspicious link or entered personal information, contact Shinhan Bank’s official customer service immediately to secure your accounts, and run a security scan on your device.
Why this scam is effective:
Shinhan Bank is a well-known and trusted financial institution in Vietnam. The promise of a cash reward (800,000 VND) is attractive to many individuals. The use of Vietnamese language, the mention of eKYC (a legitimate banking process), and the step-by-step instructions make the offer appear authentic. Scammers often use such “registration reward” campaigns to distribute malware or harvest personal data for identity theft.
Protective measures:
- Always download banking apps exclusively from official app stores (Google Play, App Store) and verify the developer name matches the official bank.
- Be suspicious of any unsolicited message offering cash rewards for downloading apps or registering accounts.
- Verify promotions by visiting the bank’s official website or contacting customer service through official channels—never use contact information provided in the suspicious message.
- Never enter personal information or banking credentials on pages reached via unsolicited links.
- Report suspicious promotions to the bank being impersonated and to local authorities.