Savyint Advances Cooperation in Cybersecurity, Artificial Intelligence and High Technology in India

Savyint Advances Cooperation in Cybersecurity, Artificial Intelligence and High Technology in India (1)

May 6, 2026, Savyint Group participated in the Vietnam – India Innovation Forum in New Delhi, India. The event was jointly organized by Vietnam’s Ministry of Science and Technology and India’s Ministry of Electronics and Information Technology, as part of the State visit to India by H.E. To Lam, The General Secretary, President of the Socialist Republic of Viet Nam. Taking place from May 5 to 7, 2026, the State visit by General Secretary, President To Lam was made at the invitation of Indian Prime Minister Narendra Modi, with the participation of a high-level Vietnamese delegation and a business delegation. The visit also coincided with the 10th anniversary of the elevation of Viet Nam-India relations to a Comprehensive Strategic Partnership, while opening new momentum for cooperation in areas that are fundamental to future growth, including science and technology, innovation, digital transformation, cybersecurity, artificial intelligence, semiconductors, energy and high-quality human resource development. Under the theme “Cooperation in Human Resource Development, Science and Technology, Innovation and Digital Transformation,” the Vietnam-India Innovation Forum brought together senior leaders, ministries, government agencies, research institutes, universities, associations, digital technology corporations, and innovation-driven enterprises from both countries. At the forum, General Secretary and President To Lam emphasized the need for Viet Nam and India to strengthen strategic information sharing and expand cooperation in cybersecurity, digital infrastructure protection, the prevention of high-tech crime, and capacity building to respond to non-traditional security challenges. The forum served as an important platform to promote substantive cooperation between the Vietnamese and Indian technology communities, particularly in fast-growing sectors across the Asia-Pacific region. Amid the rapid growth of the digital economy, data security, digital identity protection, and cyber resilience have become strategic requirements for governments, financial institutions, large enterprises, and critical infrastructure operators. As a Vietnamese technology company focused on digital safety, data protection, digital trust, and risk governance in digital environments, Savyint joined the forum with the aim of expanding international cooperation, connecting Vietnamese technology capabilities with India’s technology ecosystem, and supporting the development of platforms and solutions that meet the increasingly demanding requirements of regional markets. At the event, Savyint Group and Vantageo Pvt. Ltd. exchanged a technology cooperation agreement, opening new directions for collaboration in development, integrated design, joint research and co-production. The partnership aims to combine the strengths of both companies to deliver solutions and products in areas such as cybersecurity, AI Security, Data Safe, Quantum Safe, Zero Trust Network, HPC platforms, AI accelerators, and GPU platforms for Viet Nam, India, the APAC region and SAARC region. The cooperation agreement goes beyond connecting the capabilities of the two companies. It also reflects a shared orientation toward co-developing secure technology platforms that can be localized to meet the requirements of each market, while aligning with international standards for security, compliance, and operational reliability. Mr. Steve Huang, Executive Chairman of Savyint Group, shared: “India is one of the world’s fastest-growing technology hubs. By participating in the Vietnam-India Innovation Forum, Savyint aims to connect with like-minded partners and jointly develop secure, trusted, and widely applicable technology solutions for enterprises and organizations in Viet Nam, India, and the wider region.” As Viet Nam-India relations enter a new phase of deeper and broader cooperation, Savyint’s presence at the forum affirms its commitment to accompanying Viet Nam’s national digital transformation journey, while promoting “Make-in Vietnam” technology solutions to regional and global markets. The event through media coverage: CafeF – Savyint đẩy mạnh hợp tác phát triển an ninh mạng, trí tuệ nhân tạo & công nghệ cao tại Ấn Độ VietNamNet – Savyint đẩy mạnh hợp tác phát triển an ninh mạng, AI, công nghệ cao tại Ấn Độ

Common Challenges in Consent Management

Common Challenges in Consent Management

Customer data is a valuable asset for organizations and businesses. Without a structured, transparent system, companies may face numerous challenges, or even risk compromising customer trust. Typical Challenges in User Consent Management  Most businesses and organizations understand the importance of consent management. However, in practice, the majority still manage it manually, in a fragmented way, with limited oversight. Common challenges in managing user consent management include: Incomplete or invalid consent collection  Many organizations collect consent through default checkbox plugins, registration forms, often accompanied by terms of service that span dozens of pages and combine multiple purposes. Unintentionally, these practices can violate fundamental data protection laws, as they may not rely on voluntary consent and often fail to provide full, specific, clear, and detailed information to users. Fragmented consent management  Organizations interact with customers through multiple touchpoints: mobile apps, internet banking, service counters, emails, SMS, and more. Each channel often has its own mechanism for collecting consent, which can lead to: These inefficiencies affect user experience and complicate organizational data management.  Non-compliance with legal regulations  Data protection laws are constantly evolving. What is valid today may no longer be valid tomorrow. Different regions and countries have different requirements. Violating international regulations can result in fines up to €20 million or 4% of annual global revenue under GDPR (EU), or USD 7,500 under CCPA (US). In Vietnam, banks must comply with the Personal Data Protection Law 2025 and Decree 356/2025/ND-CP. User personal data must be collected, stored, processed, and shared transparently, with mechanisms ensuring user rights to access, edit, revoke consent, and delete data when no longer necessary. Ensuring ongoing compliance with both international and local regulations is a significant challenge for organizations. Modern Consent Management Architecture  Today, a modern consent management system is more than just a pop-up or a checkbox form. It is a complex technical system with multiple layers, ensuring that consent is collected accurately, stored securely, and remains consistent across the organization’s digital ecosystem. A modern consent management system typically includes the following pillars: About Savyint Consent Management  SAVYINT is a global technology company with extensive experience in building secure digital infrastructure and digital trust for financial institutions, governments, and large enterprises. Built on an API-first and Zero Trust architecture, Savyint Consent Management automates the entire consent management process – from collection and storage to verification and revocation – ensuring transparency and control over user data. Integrating advanced technologies such as AI/ML and Post-Quantum Cryptography (PQC), Savyint Consent Management leverages immutable logs and homomorphic encryption to maximize security for sensitive data, enabling organizations to: Savyint Consent Management meets international standards such as GDPR, PDPA, CCPA, ISO 27701, PCI DSS, and local regulatory requirements in countries including Vietnam (Personal Data Protection Law 2025, Decree 356/2025/ND-CP, Circulars 64, 50, 77 from the State Bank of Vietnam), Singapore (PDPA), and more. Upgrade your consent management system and protect customer data today with Savyint, CONNECT NOW.

Zero Trust – A Next-Gen Security Architecture for Vietnamese Banks Amid Increasingly Stringent Regulations

Zero Trust – A Next-Generation Security Architecture for Vietnamese Banks Amid Increasingly Stringent Regulations

Vietnam’s financial and banking sector is entering a phase of significantly tightened requirements for security, data protection, and fraud prevention. From Circular 50, Circular 77, and Circular 64 issued by the State Bank of Vietnam, to the Personal Data Protection Law, Decree 356, and the Cybersecurity Law 2025, financial institutions are no longer required to simply have security systems – they must prove that these systems are reliable, secure, and capable of real-time risk control. Over the past five years, regulations in Vietnam’s financial and banking sector have clearly shifted – from system-level security requirements to comprehensive control and enhanced protection across the entire digital customer journey. Notably, since 2024, the Vietnamese government has introduced a series of policies to strengthen information security, data protection, and cybersecurity. Online Service Security Circular 50/2024/TT-NHNN establishes a comprehensive foundation for securing online banking services, covering customer authentication, transaction data protection, and responsibilities for guiding users about risks. However, the real tightening comes with Circular 77/2025/TT-NHNN, which amends Circular 50 and takes effect from March 1, 2026. Accordingly, financial institutions must place strong emphasis on endpoint security (Mobile Apps). Mobile banking applications are required to automatically log out or stop functioning if detecting: rooted/jailbroken devices, emulators, debuggers, etc. Server systems must implement version control mechanisms, prevent users from downgrading versions, and ensure software is protected against the top 10 common vulnerabilities (OWASP). Stronger identity verification is required in high-risk scenarios, mandating biometric authentication combined with high-level verification when customers change identity documents or authentication methods. Circular 64/2024/TT-NHNN sets strict technical standards for open system connectivity architecture, requiring data structures using JSON or XML via REST APIs. APIs must be digitally signed (JWS) and encrypted. It also mandates identity and access management between banks, customers, and third parties (TPPs) based on OAuth 2.0 standards. Personal Data Protection The Personal Data Protection Law No. 91/2025/QH15, effective from January 1, 2026, marks a significant milestone in privacy protection in Vietnam. The law requires technical controls embedded directly into system architecture, including mandatory encryption/decryption of sensitive data, implementation of data anonymization processes to prevent re-identification, and compulsory impact assessments for data processing and cross-border data transfers. Systems involving Big Data, AI, Blockchain, and Cloud must integrate appropriate security measures with strict access controls. Additionally, the law requires the establishment of identity governance mechanisms based on user consent, with features allowing customers to monitor, view, modify, or withdraw their consent. Decree 356/2025/NĐ-CP, which guides the implementation of the law and replaces Decree 13/2023, establishes a robust technical and legal “barrier,” requiring organizations to implement dual verification mechanisms in personal data processing. Systems must support verifiable consent logging (e.g., OTP, voice recordings, SMS). Access to sensitive data requires strong authentication methods, at minimum multi-factor authentication (MFA), combining passwords with OTP, digital signature devices, or biometrics. These requirements exceed the capabilities of most existing identity and access management systems. Cybersecurity The Cybersecurity Law 2025, effective July 1, 2026, establishes a framework for protecting information systems based on five risk levels. It clearly defines the responsibility of online service providers to verify user information during digital account registration and secure user account data. This compels financial institutions to treat digital security as a core capability rather than a supporting technical function. Zero Trust Architecture Zero Trust is a modern security architecture based on the principle “Never trust, always verify,” designed for complex and distributed systems. Instead of inherently trusting users or devices within the network, Zero Trust continuously verifies five key pillars: user identity, devices, networks, applications, and data. Every access request must be authenticated, authorized, and continuously monitored. This model enforces strict control over identity, device posture, applications, data, and user behavior in real time. The three core principles of Zero Trust include: By applying these principles, Zero Trust helps organizations reduce cyberattack risks, limit lateral movement within systems, and protect digital assets across cloud, mobile, IoT, and remote working environments. Comprehensive Security and Fraud Prevention Solution for Banks With extensive experience in the financial and banking sector, Savyint introduces a comprehensive security and fraud prevention solution based on Zero Trust architecture. This solution enables financial institutions to comply with stringent legal requirements both domestically and internationally while addressing key challenges including user authentication, device and application protection, API security, consent management, fraud prevention, transaction risk control, and compliance: Beyond compliance with Vietnamese regulations, Savyint’s security and fraud prevention solutions also strictly adhere to international standards such as eIDAS, GDPR, PCI-DSS, as well as regional regulations in countries like Malaysia (PDPA, RMiT) and the Philippines (AFASA, BSP 1213-1215). Connect with Savyint experts today to ensure secure operations and full compliance with both domestic and international regulations.

SAVYINT Officially Joins the Cloud Signature Consortium (CSC): Advancing the Global Digital Trust Ecosystem

SAVYINT-Officially-Joins-the-Cloud-Signature-Consortium-CSC-Advancing-the-Global-Digital-Trust-Ecosystem

March 2026, SAVYINT has officially become a member of the Cloud Signature Consortium (CSC) – the world’s leading international standardization body in the field of cloud-based digital signatures and digital trust services. As the global digital economy undergoes profound shifts in both regulatory frameworks and technical standards, establishing common benchmarks for cross-border electronic transactions has become an urgent priority. SAVYINT –  a pioneer in security and trust services – has officially joined the Cloud Signature Consortium (CSC). This milestone reaffirms SAVYINT’s position and commitment to aligning its digital signature and authentication solutions with the highest international standards. Trust with Cross Border As a CSC member, SAVYINT’s Chairman of the Board, Mr. Steve Huang, made a notable introduction at the CSC online networking session themed “Trust with Cross Border — The EU–Mercosur Free Trade Agreement and Its Impact on the Digital Trust Ecosystem”. During the session, leading experts shared insights on the opportunities and challenges in advancing global interoperability for cross-border digital signatures. For SAVYINT, participating in these international dialogues is not only an opportunity to stay current with the most advanced technical specifications, but also a chance to connect with strategic partners across Europe and Latin America — laying the groundwork for SAVYINT’s international market expansion strategy. SAVYINT – Leading Digital Trust Solutions in the Region SAVYINT Group is a premier IT security company headquartered in Australia, with a Research & Development (R&D) center based in Vietnam. With a strategic focus on building market-adaptive digital trust infrastructure, SAVYINT has developed a comprehensive suite of solutions including: Qualified Remote Signing, VA & Timestamp, PKI in a Box, SAM Appliance, ePaperless, eStamping, and eArchive. All platforms are entirely researched and developed in-house, ensuring high flexibility and customizability to meet the distinct legal frameworks and trust requirements across regional markets including SEA, APAC, and MENA, as well as international standards such as PSD2/PSD3, eIDAS, GDPR, and beyond. Looking further ahead, SAVYINT is also committed to realizing a roadmap toward post-quantum-ready trust services, encompassing PQC-enabled cryptographic infrastructure and PKI. As a member of CSC, SAVYINT commits to long-term contributions to the digital trust community, synchronizing with international standards, sharing real-world implementation experience, and offering practical perspectives from Vietnam and other emerging markets to help make CSC’s standards more comprehensive and reflective of the world’s diverse realities. Digital trust knows no borders, and joining CSC is the foundation upon which SAVYINT will realize that vision on a global scale.

PIONEERING THE NEXT GENERATION OF SECURITY: QUANTUM AND AI HORIZON 

On March 26, Savyint welcomed a student delegation from the University of San Agustin, Philippines. During the visit, the students got a first-hand look at leading technology trends such as Post-Quantum Cryptography (PQC), the Digital Trust platform, AI in fraud prevention, and especially Agentic AI – fields that are shaping the future of global digital security and transformation. 1. Post-Quantum Cryptography (PQC) – Ready for the New Era As quantum computing gets closer to a breakthrough, traditional encryption methods are at risk of being broken. PQC (Quantum-Resistant Cryptography) has emerged as a vital solution, designed to protect data infrastructure against the massive computing power of this new era. Savyint is a pioneer in integrating advanced PQC standards (like ML-KEM and ML-DSA) into its core systems to secure devices. Furthermore, Savyint has established the Quantum AI Lab – a leading lab in Vietnam for researching and testing these quantum-resistant algorithms. Here, they simulate real-world attacks from “AI hackers” to test how strong their security layers really are. 2. AI Fraud & Digital Trust – Protecting Finance in the AI Age Beyond the pressure from quantum computers, threats like Deepfakes and automated malware are making financial security more urgent than ever. Savyint shared an overview of the 2025 threat landscape, where fraud not only causes financial loss but also creates legal risks for organizations. To fight this, Savyint introduced its Digital Trust platform. This platform uses AI to analyze user behavior, detect unusual activity, and make decisions in real-time. The system is built on four pillars: device security, advanced authentication, AI-based fraud detection, and risk management. 3. Agentic AI – Toward Self-Operating Security Systems Savyint also introduced Agentic AI – AI systems capable of making decisions and taking action on their own, rather than just creating content or analyzing data. In fraud prevention, Agentic AI is used to simulate complex attack scenarios to “train” defense systems, helping them react and adapt faster over time. Additionally, these AI agents can: This approach marks a shift from “reactive” systems to “autonomous” (self-operating) systems, where AI acts as an active partner in the security ecosystem. The visit gave the University of San Agustin students a practical look at how cutting-edge tech is used in real businesses. It was more than just a learning experience; it was inspiration for the younger generation to join the journey of global innovation. See more photos from the event below: 

Dreamland Soirée: A Dreamy Wonderland for the Muses of Savyint

Dreamland Soirée A Dreamy Wonderland for the Muses of Savyint

March gently knocks on the door, bringing with it the colors of spring and warm wishes dedicated to the wonderful half of the world. In the space of “Dreamland Soirée,” the company lobby was transformed into a softer, more sparkling setting where the muses of Savyint could truly shine. This year, beyond flowers and gifts, the women of Savyint also had a special moment to pause and enjoy time just for themselves. The Beauty Corner – Where the Muses Shine  Dreamland Soirée featured a charming “beauty corner” right at the office, where the ladies could enjoy getting their nails and lashes done in a gentle and relaxing atmosphere. How long has it been since we last sat down, unhurried, choosing our favorite nail color? How long has it been since we tried a little change to see ourselves shine a little brighter? With soft music in the background and cheerful conversations all around, every hand was carefully pampered, and every gaze became more radiant with delicately curled lashes. Nothing too extravagant – just a little moment of self-care was enough to bring more confidence to every smile and a sparkle to every pair of eyes. During the morning, the ladies also received lovely pink cups of milk tea, thoughtfully prepared by the gentlemen of the company. With flowers, gifts, and heartfelt wishes, everything came together just perfectly to make every woman feel appreciated and cherished. A Cozy Celebration and Warm Wishes for March  Later in the afternoon, members of the S-family gathered together for a cozy celebration to mark International Women’s Day (March 8), while also sending birthday wishes to colleagues born in March. To warm up the atmosphere, everyone joined the game “Guess the Word from the Image.” Quick thinking and surprising answers filled the room with laughter and joyful moments. In the blink of an eye, Ms. Trang Nhung and Ms. Hieu Ly dominated the game with 5 out of 10 correct answers, receiving lovely small gifts from the organizing team. Following the lively minigame, everyone gathered together to celebrate the March birthdays. Wishing our colleagues a new year filled with health, happiness, and continued passion in their work. The day of March 8th ended with countless smiles and laughter. Thank you to all the wonderful women for always being gentle and graceful, yet strong and resilient. May the beautiful half of our team continue to shine in your own unique ways and keep glowing on the journey ahead. Let’s take a look back at the memorable moments from Dreamland Soirée – A Dreamy Wonderland for the Muses of Savyint. 

Biometrics, Smart OTP, Smart Token, Passkey/FIDO2: Passwordless Authentication for Stronger Financial Fraud Prevention

Biometrics, Smart OTP, Smart Token, PasskeyFIDO2 Passwordless Authentication for Stronger Financial Fraud Prevention

As digital banking and mobile banking make payments and account management more convenient, financial fraud is also increasing at a rapid pace. Technologies such as biometrics, Smart OTP, Smart Token, and Passkey/FIDO2 are emerging as next-generation authentication methods. These passwordless authentication technologies help banks and financial institutions strengthen transaction security while significantly improving fraud prevention. Traditional authentication methods are no longer secure enough For many years, banking transactions have mainly relied on traditional authentication methods such as passwords, SMS OTP, and security questions. However, these methods are increasingly showing critical security weaknesses:  In response, financial regulators around the world are tightening requirements for strong authentication and encouraging banks and financial institutions to adopt more secure authentication technologies. Some notable regulations include:  These regulations clearly reflect a global trend: passwordless authentication methods such as biometrics, Smart OTP, and Smart Token are becoming the new standard for financial security. Why are biometrics, Smart OTP, and Smart Token more secure than traditional authentication? Smart OTP  Smart OTP has become a widely adopted authentication method in digital banking. Unlike SMS OTP, Smart OTP is generated directly inside the banking application, tied to the user’s device and protected by cryptographic keys. Key advantages of Smart OTP: As a result, Smart OTP provides a critical additional security layer to protect digital banking transactions. Smart Token  Alongside Smart OTP, Smart Token is another strong authentication method widely used by banks for high-value transactions. Smart Tokens can exist in different forms: Unlike standard OTP mechanisms, Smart Tokens use cryptographic algorithms to generate dynamic authentication codes tied to specific transactions. This provides several security benefits:  Because of their strong security capabilities, Smart Tokens are often deployed as an additional authentication layer in electronic banking systems. Biometrics  Biometric authentication verifies a user based on biological or behavioral characteristics. Common biometric technologies used in digital banking include: Unlike passwords or OTP codes, biometric traits are unique to each individual and extremely difficult to replicate or forge, ensuring that the person performing the transaction is truly the legitimate account holder. Another major advantage of biometrics is user convenience. Customers no longer need to remember passwords or wait for OTP codes. A simple fingerprint scan or facial recognition can authenticate a transaction instantly. A growing trend in fraud prevention is behavioral biometrics. Instead of relying on physical traits, this technology analyzes how users interact with their devices, such as: Typing speed, Screen swipe patterns, App usage behavior,…Users do not need to perform any additional authentication step, yet the system can still detect suspicious behavior in real time. Passkey / FIDO2  Another rapidly growing passwordless authentication trend is Passkey/FIDO2. A passkey is a FIDO-based credential that allows users to sign in to apps and websites using the same method they use to unlock their devices – biometrics, PIN, or device pattern – without entering a username, password, or additional authentication factors. Passkey/FIDO2 offers extremely strong protection against phishing and credential theft because: A passkey works only with the specific domain or website where it was registered. If users visit a phishing or fake website, the passkey simply will not work. Passkeys are device-bound credentials, meaning authentication requires the registered device and user verification (biometrics or PIN). In the digital banking era, security is no longer just a technical defense layer – it has become a core foundation for building digital trust between financial institutions and their customers. The combination of biometrics, Smart OTP, device-based authentication, and modern technologies such as Passkey/FIDO2 is paving the way for more secure authentication models, stronger fraud prevention, and seamless user experiences. If your bank or financial institution is looking for modern passwordless authentication solutions, from biometrics, Smart OTP, Smart Token, and Passkey/FIDO2 to AI-powered behavioral analytics and fraud detection. Connect with Savyint’s experts today to explore how we can support your digital security transformation. Read more:

SAVYINT Supports BAC A BANK in Upgrading Passwordless Authentication in Compliance with Circular 50/2024/TT-NHNN and Circular 77/2025/TT-NHNN (Vietnam)

SAVYINT successfully implemented passwordless authentications for BAC A BANK, including SmartOTP, Smart Token. The project enables the bank to fully comply with Circular 50/2024/TT-NHNN and Circular 77/2025/TT-NHNN issued by the State Bank of Vietnam while strengthening transaction security and reinforcing customer trust. Overview – Industry: Banking & Financial Services – Project: Deployment of passwordless authentication including SmartOTP, Smart Token for retail and corporate customers– Timeline: 2025  1. BAC A BANK and the Challenge of Complying with Circular 50/2024/TT-NHNN and Circular 77/2025/TT-NHNN  Established in 1994, BAC A BANK currently operates 138 transaction offices across major cities and provinces in Vietnam. In 2024, the bank ranked among the Top 5 banks with the largest foreign exchange transaction volume in Vietnam.  In 2024, the State Bank of Vietnam issued Circular 50/2024/TT-NHNN on security and safety requirements for providing online banking services, which officially came into effect on January 1, 2025. The regulation introduces several key requirements, particularly: In 2025, the State Bank of Vietnam continued to enhance the regulatory framework by issuing Circular 77/2025/TT-NHNN, which will take effect on March 1, 2026. This circular amends and supplements several provisions of Circular 50 to further strengthen security and risk management requirements for online banking services. As a result, BAC A BANK needed to upgrade its authentication infrastructure to comply with the new regulations while ensuring secure and reliable electronic transaction authentication for both retail and corporate banking customers. 2. SAVYINT’s Solution  As a global technology company specializing in Secure Payment, Digital Trust, and Open Banking, SAVYINT delivered a comprehensive electronic transaction authentication solution such as SmartOTP and Smart Token. The solution is designed in alignment with the regulatory requirements of Circular 50 and can be seamlessly integrated into the bank’s Internet Banking and Mobile Banking ecosystem, supporting both retail and corporate customers. 2.1. System Architecture  The advanced authentication system implemented by SAVYINT includes two main components:  2.2. User Groups    2.3. Models  The system supports two primary authentication flows:  2.4. Key Use Cases   a. SmartOTP and Smart Token Service Activation & Management  b. Transaction Authentication using SmartOTP, Smart Token The solution also supports Web-to-App authentication and App-based authentication, ensuring flexibility in service usage. c. Multi-Level Transaction Approval  d. PIN Management and Security Protection  e. Support Features and User Convenience  3. Results    Following the successful deployment of SAVYINT’s passwordless authentication solution, BAC A BANK fully met the requirements of Circular 50/2024/TT-NHNN and Circular 77/2025/TT-NHNN issued by the State Bank of Vietnam. The solution is consistently applied across both retail and corporate banking services.  By implementing advanced and passwordless authentication methods such as SmartOTP, Smart Token, BAC A BANK achieved several key benefits: This strategic upgrade enables BAC A BANK to strengthen digital trust and enhance its competitiveness in the evolving digital finance landscape.

ACCELERATE AFASA & BSP CIRCULAR NO. 1213 COMPLIANCE WITH SAVYINT 

ACCELERATE AFASA & BSP CIRCULAR NO. 1213 COMPLIANCE WITH SAVYINT 

AFASA and BSP Circular No. 1213 are fundamentally reshaping the security architecture of the Philippine financial sector. With the compliance deadline fast approaching, banks and financial institutions must act decisively to meet mandatory regulatory requirements. In June 2025, Bangko Sentral ng Pilipinas (BSP) issued Circular No. 1213, amending the IT Risk Management framework to formally implement Section 6 of the Anti-Financial Account Scamming Act (AFASA). This marks a structural transformation in how financial institutions across the Philippines approach cybersecurity and fraud prevention. Circular 1213 applies to all BSP-supervised entities, including banks, fintech companies, payment service providers, and lending institutions. The regulation focuses on:  Notably, before June 2026, , financial institutions are required to eliminate SMS OTP for high-risk transactions and transition to more secure, phishing-resistant, device-bound authentication methods. Understanding the regulatory and operational challenges faced by banks and financial institutions, Savyint delivers an integrated security and fraud prevention platform aligned with AFASA and BSP Circulars 1213 – 1215. The solution is built around four core pillars: Cyber Security & App Protection, SCA/MFA Identity, AI-Driven Fraud Management (FMS), and Risk Management & Compliance, protecting the entire customer journey – from onboarding and login to authentication, transaction execution, and post-transaction monitoring. Savyint’s Key Advantages:   Savyint’s integrated platform complies with both international and local security standards and regulations, including: Philippines (AFASA, BSP 1213–1215), Vietnam (Circulars 50, 64, 77/NHNN), Singapore (MAS), as well as FIDO2, PSD2/PSD3, eIDAS, GDPR, and PCI DSS. Connect with our experts today to accelerate your compliance with AFASA and BSP Circulars 1213–1215.