A 1-day training for police officers on collecting evidence, analysing blockchain data, and tracing and recovering crypto-assets, with 7 specialist sessions, an interactive quiz and a group exercise.
Friday, 13 Nov 2026
08:00 - 17:00
In person and online
Linked to provincial, city and commune police
Investigative skills, evidence collection, blockchain data analysis, tracing and recovery of crypto-assets in criminal cases
Use blockchain data and electronic evidence in investigations to:
≥ US$14 billion
flowed into crypto scams in 2025, and the final figure could exceed US$17 billion.
84%
of fraud inflows in TRM's verified 2025 data were stablecoins such as 
USDT.
48 hours
is often all it takes for fraud networks to move funds onward, narrowing the window to freeze them.
The opening reviews high-tech crime, online fraud and money laundering through crypto-assets in Vietnam and around the world.
It also sets out the legal and technical challenges in detecting and investigating these cases, collecting evidence, analysing blockchain data, and tracing and recovering crypto-assets in criminal proceedings.
What it covers
This session explains how a blockchain records transactions and why a wallet address does not reveal who is behind it.
Participants meet the networks that come up most in cases, the difference between wallets held by an exchange and wallets users hold themselves, and the techniques offenders use to cover their tracks.
Programme wording
Kiến thức căn bản về truy vết trên nền tảng Blockchain
What it covers
Tô Trần Hòa presents the legal framework and points to watch in investigating, collecting evidence and recovering crypto-assets.
Programme wording
Khung pháp lý và một số vấn đề cần chú ý trong điều tra, thu thập tài liệu chứng cứ và thu hồi tiền mã hóa
What it covers
An exchange explains how it detects suspicious transactions, keeps information and responds to law-enforcement requests.
The blockchain only shows that assets reached the exchange's address. Only the exchange's internal records show which customer account was credited and where the assets went next.
Programme wording
Góc nhìn từ nhà cung cấp dịch vụ tài sản ảo (VASP)
What it covers
Senior Colonel Đinh Thị Thu Thủy discusses issues in collecting material from cross-border service providers.
Programme wording
Một số vấn đề trong thu thập tài liệu từ các nhà cung cấp dịch vụ xuyên biên giới
When assets move from 1 VASP to another, details of the sender and the recipient may travel with them through a separate secure channel.
This session explains how to identify the sending and receiving VASPs, how the information is shared across borders and what it is worth to an investigation.
Programme wording
Quy tắc chuyển thông tin (Travel Rule)
What it covers
This session covers preventing and detecting crypto-related crime through threat intelligence, blockchain monitoring and mapping criminal networks, and how to respond once an incident has happened.
The response part draws on real cases: tracing stolen assets quickly, working with exchanges and stepping in early enough to stop further losses.
Programme wording
Phòng ngừa và ứng phó sự cố
What it covers
A short quiz to help participants review the key ideas from the morning and early afternoon.
Tracing shows where assets went, but it does not give anyone control over them.
This session separates freezing, seizure, confiscation and return, and explains why the chance of freezing depends on where the assets are held and who controls them.
Programme wording
Phong tỏa, thu giữ và thu hồi tài sản
What it covers
Groups work through a fraud scenario and apply the day's lessons: analysing transactions, spotting where service providers come in, handling evidence, legal process and the difference between tracing assets and recovering them.
Office of the Investigation Police Agency (C01)3 experts and representatives from 4 overseas organisations.
Senior Blockchain Investigator / Forensics Specialist, CEO of ChongLuaDao
He joined Vietnam's National Cybersecurity Centre (NCSC) in 2020 and works part-time as a Cyber Threat Investigator at TRM Labs.
He presents Session 1: Fundamentals of tracing on the Blockchain platform and leads the afternoon's interactive quiz.
Deputy Standing Head of the Crypto-Asset Trading Market Management Board, State Securities Commission
He presents Session 2: The legal framework and points to watch in investigating, collecting evidence and recovering crypto-assets.
INTERPOL cybercrime investigation coordinator and head of a division at the Office of the Investigation Police Agency (C01)
She presents Session 4: Issues in collecting material from cross-border service providers.
Leads the opening at 08:00 and the closing at 16:50.
South KoreaA South Korean virtual-asset exchange.
Upbit uses the VerifyVASP protocol to match the account holder's name and date of birth before crediting a deposit from another exchange.
SingaporeA business-to-business Travel Rule solution provider.
Runs a secure network through which VASPs exchange originator and beneficiary details. The network has more than 150 member VASPs across more than 30 jurisdictions.
United StatesA Web3 security and blockchain investigation company.
Provides security consulting, investigations, incident response and threat intelligence services.
SwitzerlandA blockchain investigation and digital-asset recovery firm based in Zug.
The firm separates investigation, freezing and recovery, and never asks clients for private keys or passwords.
A crypto-asset is a digital asset created, held and transferred with cryptography on a blockchain network.
When assets move directly between wallets, there is no bank in the middle to check identities or reverse a confirmed transaction. That is why speed matters so much in fraud cases.
Common misunderstanding
Every crypto-asset is anonymous and impossible to trace.
What is actually true
Transactions on Bitcoin, Ethereum and Tron are public. The hard part is not seeing the transaction but proving who is behind each address.
Vietnamese lawA 5-year pilot. Only providers licensed by the Ministry of Finance may offer services. The Ministry says none had been licensed as of 18 October 2026. The 6-month transition for domestic investors starts only after the 1st licence is issued.
Defines digital assets in law for the first time and divides them into virtual assets and crypto-assets. Classification does not mean every token or offshore platform is permitted.
The Supreme People's Procuracy is the central authority for criminal mutual legal assistance (Article 6). The scope covers searches, seizure, confiscation and return of assets, evidence collection and information exchange (Article 9).
Issued on 16 July 2026. Each act should be tied to the right provision and the right person or entity, with a check on whether the triggering conditions have occurred and whether it is an administrative violation or a possible crime.
Article 87 names electronic data as a source of evidence.
Article 99 ties its value to how it was created, stored, transmitted and kept intact.
Article 107 covers seizing devices and copying electronic data.
Passed on 24 August 2026. Adds licensed crypto-asset services to the reporting entities and adds Article 33a with 15 suspicious signs. These are prompts for questions, not proof of a crime.
Signed on 31 October 2026. Requires reported and disclosed information to be kept for at least 10 years, with daily trading reports and weekly custody data.
INTERPOL Project CASTFeb 2026 to Feb 2027An INTERPOL project funded by Japan, with Vietnam among the participants, that builds capacity against crypto-related financial crime through training, tracing tools and international contact points.
View source
FATF 7th Targeted Update16 Jul 2026FATF records gaps in licensing, supervision and enforcement, and rising risks from industrial-scale fraud, stablecoins, P2P transfers through unhosted wallets, offshore VASPs and DeFi.
View source
Korea Financial Services Commission11 Aug 2026South Korea announced that the Travel Rule will cover transfers of any size, taking effect 6 months after promulgation.
View source
Anti-money laundering / countering the financing of terrorism
Anti-money laundering and countering the financing of terrorism: the rules and measures that require financial businesses to know their customers, monitor transactions and report suspicious activity.
US Federal Trade Commission (FTC)
FBI Internet Crime Complaint Center (IC3)
US National Institute of Standards and Technology (NIST)
Basel Institute on Governance
FBI Internet Crime Complaint Center (IC3)
INTERPOL
UN Office on Drugs and Crime (UNODC)
Europol
UN Human Rights Office (OHCHR)
Financial Action Task Force (FATF)
Financial Action Task Force (FATF)
Financial Action Task Force (FATF)
Financial Action Task Force (FATF)
Financial Action Task Force (FATF)
Europol and Eurojust
Basel Institute on Governance
INTERPOL
Basel Institute on Governance
Eurojust
Council of Europe
Council of Europe
Council of Europe
Council of Europe (T-CY)
Financial Action Task Force (FATF)
ChainalysisLooking for materials from the event? Leave your details and tell us what you would like to receive.
FBI IC3 reports
