Data Source:Laws and Regulations Retrieving System of the Banking Bureau


Title: Regulations Governing Fraud Crime Hazard Prevention by Financial Institutions and Businesses or Personnel Providing Virtual Asset Services (2026.07.20 Modified)
  Chapter 2 Standards for Identifying Abnormal Accounts (Account Numbers) and Notification Procedures

   Section 2 Electronic Payment Accounts

Article    6    The criteria for identifying abnormal electronic payment accounts or transactions suspected of involvement in fraud are as follows:
1. The applicant frequently applies to open an electronic payment account over a short period of time without reasonable explanation.
2. The transaction functions applied for are obviously inconsistent with the user's age or background.
3. The contact information provided by the user cannot be verified by using reasonable measures.
4. The electronic payment account has been reported by a financial institution or a member of the general public as being used by someone suspected of criminal activity.
5. The electronic payment account has been used with frequent small-amount inward and outward remittances suspected of being probing activities.
6. The user makes frequent use of electronic services or facilities of electronic payment institutions within a short period of time in a manner that is obviously at variance with the normal transaction activities of the user.
7. An inactive account with unexpected unusual transactions.
8. An electronic payment account whose user provides the same mobile phone number as that provided by the user of another watch-listed electronic payment account, and which is suspected to be used for criminal activity.
9. A non-Taiwanese person who is found by an electronic payment institution to have had relevant identity certification documents, such as resident certificates provided for verification upon opening an electronic payment account, revoked prior to expiration, to have overstayed, or to have been reported as missing.
10. A user who is verified by an electronic payment institution to have been reported as a missing person.
11. A domestic electronic payment account listed by a judicial police authority as suspected of involvement in fraud.
12. Accounts with transactions that show signs of involvement in fraud, as set out in the Template for Directions Governing Anti-Money Laundering and Counter-Financing of Terrorism of Electronic Payment Institutions.
13. Other abnormal electronic payment accounts or transactions determined by the competent authority or electronic payment institutions to be suspected of involvement in fraud.
Article    7    Electronic payment institutions shall implement enhanced due diligence to verify the identity of users in cases of abnormal electronic payment accounts suspected of involvement in fraud, and may adopt the following ongoing due diligence measures:
1. Obtaining the approval of senior management before establishing or entering a new business relationship.
2. Taking reasonable measures to understand the source of funds of the user. The aforementioned source of funds refers to the substantial source from which the funds are generated.
3. Conducting enhanced ongoing monitoring of the business relationship.
Article    8    When electronic payment institutions implement control and management measures provided for in the latter part of Paragraph 1, Article 8 of the Act with respect to abnormal electronic payment accounts suspected of involvement in fraud, or when it is necessary to identify transactions suspected of involving fraud, they may send inquiries to other deposit business institutions, electronic payment institutions, credit card business institutions, or virtual asset service providers by telephone, e-mail, the fraud prevention platform, or other means acceptable to the recipient to obtain information about such abnormal electronic payment accounts suspected of involvement in fraud.
The recipient of the inquiry shall provide the following information as requested by the inquiring institution:
1. Where the recipient of the inquiry is a deposit business institution, it shall provide:
(1) Name of the deposit account holder and account opening date.
(2) The age and occupation of the account holder and the purpose of the account opening or transaction.
(3) Whether there are any abnormal transactions in the deposit account and whether the account is being monitored.
2. Where the recipient of the inquiry is an electronic payment institution, it shall provide:
(1) Name of the electronic payment account holder and account opening date.
(2) The user's age.
(3) Whether there are any abnormal transactions of the electronic payment account and whether the electronic payment account is being monitored.
3. Where the recipient of the inquiry is a card issuer, it shall provide:
(1) Name of the cardholder and card approval date.
(2) The age and occupation of the cardholder.
(3) Whether there are any abnormal transactions on the credit card and whether the card is being monitored.
4. Where the recipient of the inquiry is a virtual asset service provider, it shall provide:
(1) Name of the customer holding the virtual asset account and opening date of the virtual asset account.
(2) The age and occupation of the customer and the purpose of the virtual asset account opening or transaction.
(3) Whether there are any abnormal transactions in the virtual asset account and whether the account is being monitored.
In addition to the information specified in the preceding paragraph, the recipient of the inquiry may also provide other necessary information requested by the inquiring institution to implement the control measures provided for in the latter part of Paragraph 1, Article 8 of the Act or to identify transactions suspected of involving fraud.
The recipient of the inquiry shall provide the requested information within five business days. However, this shall not apply if there are practical operational difficulties, the recipient has explained such difficulties to the inquiring institution within the preceding period, and both parties agree to extend the period for providing the requested information.
Where the recipient of the inquiry is an electronic payment institution, the key points or other procedures for the recipient to confirm the identity of the inquiring institution under this Article shall be formulated by the Electronic Payment Association of R.O.C. and reported to the competent authority for record.