The Vietnamese Model at Full Speed
Vietnam's Circular 08/2026/TT-BKHCN, in force since April 15, 2026, requires mobile subscribers to authenticate four data points — national ID number, full legal name, date of birth, and a facial biometric scan — cross-checked against the National Resident Database and the VNeID digital-identity platform. The enforcement clock that followed has been unusually fast. On June 15, carriers began blocking outgoing calls and texts for unverified accounts; Viettel and VinaPhone alone restricted service for over 8 million subscribers that day. Those subscribers got a 60-day window. On August 15, anyone still unverified lost incoming service too — full two-way suspension. Five days later, on August 20, the numbers still unverified were permanently revoked. From first block to permanent disconnection: 66 days.
The Vietnamese government's own description of the rule is candid about its scope: this is not just a one-time registration check, it is an ongoing authentication regime that re-triggers on device changes, tied permanently to facial biometrics and a national identity database.
The Steelman: Fraud Is Real, and Brazil Feels It Too
Before treating Vietnam's regime as a cautionary tale, it's worth taking seriously why governments reach for this tool. Anonymous or loosely-verified SIMs are a genuine vector for financial fraud, robocall spoofing, and disinformation campaigns run through disposable numbers. Brazil has its own version of this problem, and it is not hypothetical. In testimony to the Chamber of Deputies, telecom operators described a pattern of fraudsters obtaining other people's CPF numbers — including those of deceased citizens — to activate phone lines and WhatsApp accounts used to spread false information at scale. Anatel's own leadership has pushed operators for an explicit action plan, with the regulator's superintendent telling lawmakers, in effect, that carriers need to make this harder to pull off. Brazil already runs a public tool, Cadastro Pré, that lets citizens check whether their CPF has been misused to register a line they never authorized — implicit acknowledgment that the CPF-based identity check under Lei 10.703/2003 is being actively gamed. A regulator that ignored this pattern would be negligent, not neutral.
Where Enforcement Speed Becomes a Rights Problem
The case for identity-linked SIM registration does not, however, transfer cleanly into a case for Vietnam's execution. Three features of the Vietnamese rollout should worry anyone weighing it as a template, comparative or otherwise. First, the compression: two months from first restriction to permanent number loss leaves little room for the populations least able to navigate a biometric app flow — elderly users, migrant workers, and citizens living abroad, a group Vietnamese state media itself flagged as needing special accommodation. A phone number is not a convenience; in most of the world it is now the default second factor for banking, government benefits, and email recovery. Permanently reassigning it is closer to an administrative death sentence for a digital identity than a compliance penalty.
Second, the mandatory biometric layer goes well beyond what a fraud-verification goal requires. Confirming that a subscriber is a real, identifiable person — Brazil's current CPF-plus-selfie model — does not require permanently binding every mobile line to a centralized facial-recognition database that re-authenticates on every device change. That is a surveillance architecture, not a fraud filter, and it is the kind of scope creep that proportionate regulation is supposed to guard against.
Third, speed foreclosed independent recourse. A 60-day window with no visible appeals mechanism for contested identity mismatches — a wrong database entry, a legal name change, a lost ID — converts a bureaucratic error into a severed phone line, non-negotiably, on a fixed clock set by the regulator rather than by demonstrated harm.
What Proportionate Would Look Like
Brazil's Anatel does not need Vietnam's clock to solve Brazil's fraud problem.
Anatel's existing framework — CPF registration under Lei 10.703, refined through consumer-protection resolutions, paired with the Cadastro Pré self-check tool — already gives Brazilian subscribers a way to detect and contest misuse without a biometric mandate or a hard revocation deadline. The EFF's recent warning about enforcement overreach in Brazil's evolving intermediary-liability regime applies with equal force here: measures adopted to fight real fraud can create incentives for aggressive, low-appeal enforcement that outruns due process, especially once a regulator is under public pressure to show fast results.
If Anatel wants tighter enforcement, the more defensible path keeps three things Vietnam's model dropped: a genuine appeals window before any suspension becomes permanent, no mandatory centralized biometric database as the sole verification path, and enforcement timelines calibrated to demonstrated fraud rates in specific number ranges rather than a blanket population-wide deadline. Brazil can tighten a leaky identity check without adopting the compression that made Vietnam's rollout look, to outside observers, less like consumer protection and more like a stress test of how fast a state can disconnect its own citizens.