Four suspects arrested for a sophisticated scheme that stole more than 23 billion VND

On April 13, Quảng Trị Provincial Police, in cooperation with the Cyber Security Department of Vietnam’s Ministry of Public Security, announced the arrest of four suspects for using computer networks, telecom networks, and electronic devices to steal more than 23 billion VND from multiple victims nationwide through a sophisticated method.

Case overview and arrests

After intelligence gathering, the Cyber Security Department of Quảng Trị Police and the Ministry of Public Security, working with local agencies, cracked the case and arrested four individuals:

• Tran Quang Trong (born 2000)
• Nguyen Minh Thuan (born 1997; resident of Dien Hong Ward, Gia Lai province)
• Le Van Ky (born 1995; resident of Ho Chi Minh City)
• Ho Duc The (born 1990; resident of Dak Lak province)

How the scheme worked

According to initial investigation documents, from January 2026, Trong and Ky discussed carrying out a “SIM swap” to take control of victims’ phone numbers. After gaining control of the numbers, the suspects obtained access to bank accounts linked to those numbers to receive OTP codes, enabling theft.

The investigation documents describe the roles as follows:

• Trong searched for customers with savings deposits and provided the information to Ky to perform SIM swaps using prepared “clean” SIM cards.
• Ky hired Ho Duc The, described as a collaborator of a mobile network operator, to conduct the illegal SIM swap at 15 million VND per SIM.
• After taking control of subscriber numbers, Trong used specialized devices and software to access victims’ bank accounts, bypass security layers, and execute transfers.

Money laundering and cryptocurrency conversion

The stolen funds were laundered by converting them into cryptocurrency USDT. Investigators stated that Nguyen Minh Thuan purchased USDT on an exchange, then moved the funds through multiple digital wallets to conceal the source. The group later used the cryptocurrency to legitimize the proceeds and divide them among themselves.

Example operation

For example, on January 20, 2026, the group collected information on 15 customers using a SIM from one telecom provider. They successfully swapped 13 SIMs and stole from 7–8 bank accounts, with a total amount of about 3 billion VND.

Scale of theft and security bypass

Investigators noted that the suspects were able to bypass biometric security. From February to March 2026, the group continued similar operations, stealing more than 20 billion VND, before converting the proceeds into cryptocurrency.

Legal proceedings and official commendation

On March 30, 2026, the Investigative Police Agency of Quảng Trị Province issued indictments and placed the four suspects in temporary detention for the offenses of “Using computer networks, telecommunications networks and electronic devices to appropriate assets” and “Money laundering.”

Vietnam’s Ministry of Public Security also sent a letter of commendation. In the letter, the Deputy Minister affirmed the case as an excellent achievement, reflecting a high sense of responsibility and the astuteness of Quảng Trị Police in implementing Party Committee and Ministry directives in combating organized crime and cybercrime.

The letter also instructed Quảng Trị Police to promptly continue investigating, secure evidence, and prosecute the suspects in accordance with the law.