Chapter 1 General Provisions

Article 1 These Regulations are promulgated pursuant to Paragraphs 3 and 5 of Article 8, Paragraph 3 of Article 9, Paragraph 3 of Article 10, and Paragraph 2 of Article 11 of the Fraud Crime Hazard Prevention Act (hereinafter referred to as the "Act").

Article 2 The terms used in these Regulations are defined as follows:

1. Deposit accounts: They refer to checking deposit, demand deposit, and time deposit accounts established in financial institutions specified in Subparagraph 1 and Subparagraphs 3 to 7, Paragraph 1, Article 5 of the Money Laundering Control Act.

2. Electronic payment accounts: They refer to electronic payment accounts described in Subparagraph 4, Article 3 of the Act Governing Electronic Payment Institutions.

3. Credit cards: They refer to credit cards described in Subparagraph 1, Article 2 of the Regulations Governing Institutions Engaging in Credit Card Business.

4. Credit card settlement number: It refers to the account number set by a card issuer for the cardholder for the payment of accounts payable for credit cards.

5. Virtual account number: It refers to a virtual payment account number assigned by a deposit business institution to a payer or a designated transaction that can be used by the payer or the trader to deposit funds into the corresponding physical deposit account.

6. Virtual asset account: It refers to an account provided to a customer by a business or person providing virtual asset services (hereinafter referred to as a "virtual asset service provider") for the purpose of providing virtual asset services.

7. Watch-listed deposit account: It refers to a deposit account that a court, public prosecutor’s office, or a judicial police authority has notified deposit business institutions to classify as watch-listed.

8. Watch-listed e-payment account: It refers to an electronic payment account that a court, public prosecutor’s office, or a judicial police authority has notified electronic payment institutions to classify as watch-listed.

9. Watch-listed virtual account: It refers to a virtual account that a court, public prosecutor’s office, or a judicial police authority has notified deposit business institutions to classify as watch-listed.

10. Watch-listed credit card settlement number: It refers to a credit card settlement number that a court, public prosecutor’s office, or a judicial police authority has notified deposit business institutions to classify as watch-listed.

11. Watch-listed virtual asset account: It refers to a virtual asset account that a court, public prosecutor’s office, or a judicial police authority has notified virtual asset service providers to classify as watch-listed.

12. Deposit business institution: It refers to financial institutions specified in Subparagraph 1 and Subparagraphs 3 to 7, Paragraph 1, Article 5 of the Money Laundering Control Act.

13. Electronic payment institution: It refers to an electronic payment institution as described in Subparagraph 1, Article 3 of the Act Governing Electronic Payment Institutions.

14. Credit card business institution: It refers to an institution engaging in credit card business described in Subparagraph 7, Article 2 of the Regulations Governing Institutions Engaging in Credit Card Business.

15. Card issuer: It refers to a card issuer described in Subparagraph 9, Article 2 of the Regulations Governing Institutions Engaging in Credit Card Business.

16. Fraud prevention platform: It refers to a system platform established, with the approval of the Financial Supervisory Commission (hereinafter referred to as the "FSC"), by a financial information service enterprise engaged in inter-financial institution funds transfer and settlement or a service enterprise engaged in the processing and exchange of credit information among financial institutions under Article 47-3 of the Banking Act, for the purpose of preventing fraud crimes. The platform assists financial institutions or virtual asset service providers under the Act in conducting intra-industry or cross-industry cooperation to collect, process, and use customer information within the necessary scope, and in using technological means to analyze and identify abnormal deposit accounts, electronic payment accounts, credit cards, or virtual asset accounts suspected of involvement in fraud.

17. Participating institution of the fraud prevention platform: It refers to a financial institution or virtual asset service provider participating in the fraud prevention platform.

Chapter 2 Standards for Identifying Abnormal Accounts (Account Numbers) and Notification Procedures

Section 1 Deposit Accounts

Article 3 The criteria for identifying abnormal deposit accounts or transactions suspected of involvement in fraud are as follows:

1. The applicant frequently applies to open a deposit account or to set up designated accounts over a short period of time without reasonable explanation.

2. The transaction functions applied for are obviously inconsistent with the account holder’s age or background.

3. The contact information provided by the account holder cannot be verified by using reasonable measures.

4. The deposit account has been reported by a financial institution or a member of the public as being used by someone suspected of criminal activities.

5. The deposit account has been used with frequent small-amount inward and outward remittances suspected of being probing activities.

6. The user makes frequent use of electronic services or facilities of deposit business institutions within a short period of time in a manner that is obviously at variance with the normal transaction activities of the account holder.

7. An inactive deposit account with unexpected unusual transactions.

8. A deposit account whose account holder provides the same mobile phone number as that provided by the account holder of another watch-listed deposit account at the same deposit business institution, and which is suspected to be used for criminal activity.

9. The virtual account linked to the deposit account has been listed as a watch-listed virtual account several times within a certain period of time.

10. A non-Taiwanese person who is found by a deposit business institution to have had relevant identity certification documents, such as resident certificates provided for verification upon opening a deposit account, revoked prior to expiration, to have overstayed, or to have been reported as missing.

11. An account holder who is verified by a deposit business institution to have been reported as a missing person.

12. A domestic deposit account listed by a judicial police authority as suspected of involvement in fraud.

13. A deposit account with transactions suspected of involving fraud, as listed in the Model Guidelines for Banks' Anti-Money Laundering and Counter-Terrorism Financing Policies and Procedures.

14. Other abnormal deposit accounts or transactions determined by the competent authorities or deposit business institutions to be suspected of involvement in fraud.

Article 4 Deposit business institutions shall implement enhanced due diligence to verify the identity of the account holder in cases of abnormal deposit accounts suspected of involvement in fraud, and may adopt the following ongoing due diligence measures:

1. Obtaining the approval of senior management before establishing or entering a new business relationship.

2. Taking reasonable measures to understand the sources of wealth and the source of funds of the account holder. The aforementioned source of funds refers to the substantial source from which the funds are generated.

3. Conducting enhanced ongoing monitoring of the business relationship.

Article 5 When deposit business institutions implement control and management measures provided for in the latter part of Paragraph 1, Article 8 of the Act with respect to abnormal deposit accounts suspected of involvement in fraud, or when it is necessary to identify transactions suspected of involving fraud, they may send inquiries to other deposit business institutions, electronic payment institutions, credit card business institutions, or virtual asset service providers by telephone, e-mail, the fraud prevention platform, or other means acceptable to the recipient to obtain information about such abnormal deposit accounts suspected of involvement in fraud.

The recipient of the inquiry shall provide the following information as requested by the inquiring institution:

1. Where the recipient of the inquiry is a deposit business institution, it shall provide:

(1) Name of the deposit account holder and account opening date.

(2) The age and occupation of the account holder and the purpose of the account opening or transaction.

(3) Whether there are any abnormal transactions in the deposit account and whether the account is being monitored.

2. Where the recipient of the inquiry is an electronic payment institution, it shall provide:

(1) Name of the electronic payment account holder and account opening date.

(2) The user's age.

(3) Whether there are any abnormal transactions of the electronic payment account and whether the electronic payment account is being monitored.

3. Where the recipient of the inquiry is a card issuer, it shall provide:

(1) Name of the cardholder and card approval date.

(2) The age and occupation of the cardholder.

(3) Whether there are any abnormal transactions on the credit card and whether the card is being monitored.

4. Where the recipient of the inquiry is a virtual asset service provider, it shall provide:

(1) Name of the customer holding the virtual asset account and opening date of the virtual asset account.

(2) The age and occupation of the customer and the purpose of the virtual asset account opening or transaction.

(3) Whether there are any abnormal transactions in the virtual asset account and whether the account is being monitored.

In addition to the information specified in the preceding paragraph, the recipient of the inquiry may also provide other necessary information requested by the inquiring institution to implement the control measures provided for in the latter part of Paragraph 1, Article 8 of the Act or to identify transactions suspected of involving fraud.

The recipient of the inquiry shall provide the requested information within five business days. However, this shall not apply if there are practical operational difficulties, the recipient has explained such difficulties to the inquiring institution within the preceding period, and both parties agree to extend the period for providing the requested information.

Where the recipient of the inquiry is a deposit business institution, the key points or other procedures for the recipient to confirm the identity of the inquiring institution under this Article shall be formulated by the Bankers Association of the Republic of China and reported to the competent authority for record.

Section 2 Electronic Payment Accounts

Article 6 The criteria for identifying abnormal electronic payment accounts or transactions suspected of involvement in fraud are as follows:

1. The applicant frequently applies to open an electronic payment account over a short period of time without reasonable explanation.

2. The transaction functions applied for are obviously inconsistent with the user's age or background.

3. The contact information provided by the user cannot be verified by using reasonable measures.

4. The electronic payment account has been reported by a financial institution or a member of the general public as being used by someone suspected of criminal activity.

5. The electronic payment account has been used with frequent small-amount inward and outward remittances suspected of being probing activities.

6. The user makes frequent use of electronic services or facilities of electronic payment institutions within a short period of time in a manner that is obviously at variance with the normal transaction activities of the user.

7. An inactive account with unexpected unusual transactions.

8. An electronic payment account whose user provides the same mobile phone number as that provided by the user of another watch-listed electronic payment account, and which is suspected to be used for criminal activity.

9. A non-Taiwanese person who is found by an electronic payment institution to have had relevant identity certification documents, such as resident certificates provided for verification upon opening an electronic payment account, revoked prior to expiration, to have overstayed, or to have been reported as missing.

10. A user who is verified by an electronic payment institution to have been reported as a missing person.

11. A domestic electronic payment account listed by a judicial police authority as suspected of involvement in fraud.

12. Accounts with transactions that show signs of involvement in fraud, as set out in the Template for Directions Governing Anti-Money Laundering and Counter-Financing of Terrorism of Electronic Payment Institutions.

13. Other abnormal electronic payment accounts or transactions determined by the competent authority or electronic payment institutions to be suspected of involvement in fraud.

Article 7 Electronic payment institutions shall implement enhanced due diligence to verify the identity of users in cases of abnormal electronic payment accounts suspected of involvement in fraud, and may adopt the following ongoing due diligence measures:

1. Obtaining the approval of senior management before establishing or entering a new business relationship.

2. Taking reasonable measures to understand the source of funds of the user. The aforementioned source of funds refers to the substantial source from which the funds are generated.

3. Conducting enhanced ongoing monitoring of the business relationship.

Article 8 When electronic payment institutions implement control and management measures provided for in the latter part of Paragraph 1, Article 8 of the Act with respect to abnormal electronic payment accounts suspected of involvement in fraud, or when it is necessary to identify transactions suspected of involving fraud, they may send inquiries to other deposit business institutions, electronic payment institutions, credit card business institutions, or virtual asset service providers by telephone, e-mail, the fraud prevention platform, or other means acceptable to the recipient to obtain information about such abnormal electronic payment accounts suspected of involvement in fraud.

The recipient of the inquiry shall provide the following information as requested by the inquiring institution:

1. Where the recipient of the inquiry is a deposit business institution, it shall provide:

(1) Name of the deposit account holder and account opening date.

(2) The age and occupation of the account holder and the purpose of the account opening or transaction.

(3) Whether there are any abnormal transactions in the deposit account and whether the account is being monitored.

2. Where the recipient of the inquiry is an electronic payment institution, it shall provide:

(1) Name of the electronic payment account holder and account opening date.

(2) The user's age.

(3) Whether there are any abnormal transactions of the electronic payment account and whether the electronic payment account is being monitored.

3. Where the recipient of the inquiry is a card issuer, it shall provide:

(1) Name of the cardholder and card approval date.

(2) The age and occupation of the cardholder.

(3) Whether there are any abnormal transactions on the credit card and whether the card is being monitored.

4. Where the recipient of the inquiry is a virtual asset service provider, it shall provide:

(1) Name of the customer holding the virtual asset account and opening date of the virtual asset account.

(2) The age and occupation of the customer and the purpose of the virtual asset account opening or transaction.

(3) Whether there are any abnormal transactions in the virtual asset account and whether the account is being monitored.

In addition to the information specified in the preceding paragraph, the recipient of the inquiry may also provide other necessary information requested by the inquiring institution to implement the control measures provided for in the latter part of Paragraph 1, Article 8 of the Act or to identify transactions suspected of involving fraud.

The recipient of the inquiry shall provide the requested information within five business days. However, this shall not apply if there are practical operational difficulties, the recipient has explained such difficulties to the inquiring institution within the preceding period, and both parties agree to extend the period for providing the requested information.

Where the recipient of the inquiry is an electronic payment institution, the key points or other procedures for the recipient to confirm the identity of the inquiring institution under this Article shall be formulated by the Electronic Payment Association of R.O.C. and reported to the competent authority for record.

Section 3 Credit Cards

Article 9 The criteria for identifying abnormal credit cards or transactions suspected of involvement in fraud are as follows:

1. The applicant frequently applies for credit cards over a short period of time without reasonable explanation.

2. The credit card has been reported by a financial institution or a member of the general public as being used by someone suspected of criminal activity.

3. The credit card has been used with frequent small transactions suspected of being probing activities.

4. The user makes frequent use of credit card transactions within a short period of time in a manner that is obviously at variance with the normal transaction activities of the cardholder.

5. An inactive credit card with unexpected unusual transactions.

6. A credit card whose holder provides the same mobile phone number as that provided by a cardholder of another watch-listed credit card settlement number in the same issuer, and which is suspected to be used for criminal activity.

7. A non-Taiwanese person who is found by a card issuer to have had relevant identity certification documents, such as resident certificates provided for verification upon the issuance of a credit card, revoked prior to expiration, to have overstayed, or to have been reported as missing.

8. An account holder who is verified by a card issuer to have been reported as a missing person.

9. A credit card with transactions that show signs of involvement in fraud, as set out in the Template for Directions Governing Anti-Money Laundering and Counter-Financing for Credit Card Business Institutions.

10. Other abnormal credit cards or transactions determined by the competent authorities or issuers to be suspected of involvement in fraud.

Article 10 Card issuers shall implement enhanced due diligence to verify the identity of the cardholder in cases of abnormal credit cards suspected of involvement in fraud, and may adopt the following ongoing due diligence measures:

1. Obtaining the approval of senior management before establishing or entering a new business relationship.

2. Taking reasonable measures to understand the sources of wealth and the source of funds of the cardholder. The aforementioned source of funds refers to the substantial source from which the funds are generated.

3. Conducting enhanced ongoing monitoring of the business relationship.

Article 11 When card issuers implement control and management measures provided for in the latter part of Paragraph 1, Article 8 of the Act with respect to abnormal credit cards suspected of involvement in fraud, or when it is necessary to identify transactions suspected of involving fraud, they may send inquiries to other deposit business institutions, electronic payment institutions, credit card business institutions, or virtual asset service providers by telephone, e-mail, the fraud prevention platform, or other means acceptable to the recipient to obtain information about such abnormal credit cards suspected of involvement in fraud.

The recipient of the inquiry shall provide the following information as requested by the inquiring institution:

1. Where the recipient of the inquiry is a deposit business institution, it shall provide:

(1) Name of the deposit account holder and account opening date.

(2) The age and occupation of the account holder and the purpose of the account opening or transaction.

(3) Whether there are any abnormal transactions in the deposit account and whether the account is being monitored.

2. Where the recipient of the inquiry is an electronic payment institution, it shall provide:

(1) Name of the electronic payment account holder and account opening date.

(2) The user's age.

(3) Whether there are any abnormal transactions of the electronic payment account and whether the electronic payment account is being monitored.

3. Where the recipient of the inquiry is a card issuer, it shall provide:

(1) Name of the cardholder and card approval date.

(2) The age and occupation of the cardholder.

(3) Whether there are any abnormal transactions on the credit card and whether the card is being monitored.

4. Where the recipient of the inquiry is a virtual asset service provider, it shall provide:

(1) Name of the customer holding the virtual asset account and opening date of the virtual asset account.

(2) The age and occupation of the customer and the purpose of the virtual asset account opening or transaction.

(3) Whether there are any abnormal transactions in the virtual asset account and whether the account is being monitored.

In addition to the information specified in the preceding paragraph, the recipient of the inquiry may also provide other necessary information requested by the inquiring institution to implement the control measures provided for in the latter part of Paragraph 1, Article 8 of the Act or to identify transactions suspected of involving fraud.

The recipient of the inquiry shall provide the requested information within five business days. However, this shall not apply if there are practical operational difficulties, the recipient has explained such difficulties to the inquiring institution within the preceding period, and both parties agree to extend the period for providing the requested information.

Where the recipient of the inquiry is a card issuer, the key points or other procedures for the recipient to confirm the identity of the inquiring institution under this Article shall be formulated by the Bankers Association of the Republic of China and reported to the competent authority for record.

Section 4 Virtual Asset Accounts

Article 12 The criteria for identifying abnormal virtual asset accounts or transactions suspected of involvement in fraud are as follows:

1. The applicant frequently applies for virtual asset accounts over a short period of time without reasonable explanation.

2. The transaction functions requested by the customer are obviously inconsistent with the customer's age or background.

3. The contact information provided by the customer cannot be verified by using reasonable measures.

4. The virtual asset account has been reported by a virtual asset service provider, financial institution, government agency, or a member of the general public as being used by someone suspected of criminal activity.

5. The virtual asset account has been used with frequent small-amount inward and outward remittances suspected of being probing activities.

6. The customer makes frequent use of the services or facilities of virtual asset service providers within a short period of time in a manner that is obviously at variance with the normal transaction activities of the customer.

7. An inactive virtual asset account with unexpected unusual transactions.

8. A virtual asset account whose holder provides the same mobile phone number as that provided by the customer of another watch-listed virtual asset account in the same virtual asset service provider, and which is suspected to be used for criminal activity.

9. A non-Taiwanese person who is found by a virtual asset service provider to have had relevant identity certification documents, such as resident certificates provided for verification upon the opening of a virtual asset account, revoked prior to expiration, to have overstayed, or to have been reported as missing.

10. A customer who is verified by a virtual asset service provider to have been reported as a missing person.

11. A domestic virtual asset account listed by a judicial police authority as suspected of involvement in fraud.

12. A virtual asset account with transactions that show signs of involvement in fraud, as set out in the Anti-Money Laundering, Counter-Terrorism Financing, and Anti-Fraud Crime and Industry Joint Defense Mechanisms and other self-regulatory rules of the Taiwan Virtual Asset Service Provider Association.

13. Other abnormal virtual asset accounts or transactions determined by the competent authority or virtual asset service providers to be suspected of involvement in fraud.

Article 13 Virtual asset service providers shall implement enhanced customer due diligence to verify the identity of the customer in cases of abnormal virtual asset accounts suspected of involvement in fraud, and may adopt the following ongoing customer due diligence measures:

1. Obtaining the approval of senior management of the virtual asset service provider before establishing or entering into a new business relationship.

2. Taking reasonable measures to understand the sources of wealth and the source of funds of the customer. The aforementioned source of funds refers to the substantial source from which the funds are generated.

3. Conducting enhanced ongoing monitoring of the business relationship.

Article 14 When virtual asset service providers implement control and management measures provided for in the latter part of Paragraph 1, Article 8 of the Act with respect to abnormal virtual asset accounts suspected of involvement in fraud, or when it is necessary to identify transactions suspected of involving fraud, they may send inquiries to other deposit business institutions, electronic payment institutions, credit card business institutions, or virtual asset service providers by telephone, e-mail, the fraud prevention platform, or other means acceptable to the recipient to obtain information about such abnormal virtual asset accounts suspected of involvement in fraud.

The recipient of the inquiry shall provide the following information as requested by the inquiring institution:

1. Where the recipient of the inquiry is a deposit business institution, it shall provide:

(1) Name of the deposit account holder and account opening date.

(2) The age and occupation of the account holder and the purpose of the account opening or transaction.

(3) Whether there are any abnormal transactions in the deposit account and whether the account is being monitored.

2. Where the recipient of the inquiry is an electronic payment institution, it shall provide:

(1) Name of the electronic payment account holder and account opening date.

(2) The user's age.

(3) Whether there are any abnormal transactions of the electronic payment account and whether the electronic payment account is being monitored.

3. Where the recipient of the inquiry is a card issuer, it shall provide:

(1) Name of the cardholder and card approval date.

(2) The age and occupation of the cardholder.

(3) Whether there are any abnormal transactions on the credit card and whether the card is being monitored.

4. Where the recipient of the inquiry is a virtual asset service provider, it shall provide:

(1) Name of the customer holding the virtual asset account and opening date of the virtual asset account.

(2) The age and occupation of the customer and the purpose of the virtual asset account opening or transaction.

(3) Whether there are any abnormal transactions in the virtual asset account and whether the account is being monitored.

In addition to the information specified in the preceding paragraph, the recipient of the inquiry may also provide other necessary information requested by the inquiring institution to implement the control measures provided for in the latter part of Paragraph 1, Article 8 of the Act or to identify transactions suspected of involving fraud.

The recipient of the inquiry shall provide the requested information within five business days. However, this shall not apply if there are practical operational difficulties, the recipient has explained such difficulties to the inquiring institution within the preceding period, and both parties agree to extend the period for providing the requested information.

Where the recipient of the inquiry is a virtual asset service provider, the key points or other procedures for the recipient to confirm the identity of the inquiring institution under this Article shall be formulated by the Taiwan Virtual Asset Service Provider Association and reported to the competent authority for record.

Chapter 3 Recordkeeping and Notification of Data Transactions and Account Management

Section 1 Deposit Accounts

Article 15 When deposit business institutions implement measures in accordance with the latter part of Paragraph 1, Article 8 of the Act, they shall retain the following information and transaction records in hard copy or electronic format:

1. All records obtained through CDD measures, such as copies or records of passports, identity cards, driving licenses or other similar official identification documents of the account holder.

2. Contract files.

3. All abnormal transaction records of deposit accounts suspected of involvement in fraud.

4. Data and records obtained from inquiries regarding abnormal deposit accounts suspected of involvement in fraud in accordance with regulations in Chapter 2.

The abnormal transaction records of deposit accounts suspected of involvement in fraud, as referred to in Subparagraph 3 of the preceding paragraph, shall be sufficient to reconstruct individual abnormal transactions and serve as evidence for identifying illegal activity.

Article 16 Where a deposit account is identified as an abnormal deposit account suspected of involvement in fraud, the deposit business institution shall take the following response measures:

1. It shall strengthen the CDD measures for the account holder in accordance with the latter part of Paragraph 1, Article 8 of the Act. It may adopt control measures such as continual review, suspension of deposits or withdrawals, suspension of outward remittance of funds, suspension of all or certain transaction functions, and refusal to establish a business relationship or to provide services, and may report to the judicial police authority.

2. If a virtual account is watch-listed, the deposit business institution shall suspend all transaction functions of the virtual account and earmark an amount in the deposit account that corresponds to the amount in the virtual account. Subsequent inward remittances of the virtual account shall be returned to the deposit business institution or electronic payment institution that conducted the remittance by refund. If there is no outward remittance account corresponding to the virtual account to which the remittance can be returned, the deposit business institution shall earmark the amount in the virtual account. The deposit business institution shall immediately notify the account holder to take relevant control measures with regard to the user of the virtual account.

3. If the watch-listed virtual account is a virtual account under a trust deposit account of a virtual asset service provider that is held in custody by a deposit business institution, the deposit business institution shall immediately notify the virtual asset service provider. After receiving the notification from the deposit business institution, the virtual asset service provider shall check whether all or part of the reported fraud-related funds remain in the virtual account, and provide the results to the receiving deposit business institution.

4. Measures to be taken in accordance with the Money Laundering Control Act and other applicable laws and regulations.

When a deposit business institution notifies the judicial police in accordance with the regulations in the preceding paragraph, it shall use the telephone, fax, email, electronic platform, or other feasible means. It shall also provide documents of abnormal deposit accounts suspected of involvement in fraud, the identity of the account holder, relevant transaction records, or other documents required to be provided under the notification method based on the request.

Article 17 After receiving a report from the deposit business institution, the judicial police authority shall notify the deposit business institution by official letter within 20 days whether to continue or lift the control measures imposed on the abnormal deposit account suspected of involvement in fraud. If the judicial police authority fails to notify the deposit business institution within this period, the deposit business institution may continue to apply the control measures.

In case of major contingencies, the judicial police authority may send the notification in the preceding paragraph to the deposit business institution by telephone, fax, email, or other feasible means, followed by a confirming official letter and documents which should be delivered within five business days.

If an account holder has any doubts regarding the control measures implemented by the deposit business institution with respect to his or her deposit account in accordance with the notification from the judicial police authority, he or she may contact the deposit business institution for inquiries, and may also contact the original judicial police authority that notified the implementation of the control measures where necessary.

Section 2 Electronic Payment Accounts

Article 18 When electronic payment institutions implement measures in accordance with the latter part of Paragraph 1, Article 8 of the Act, they shall retain the following information and transaction records in hard copy or electronic format:

1. All records obtained through CDD measures, such as copies or records of passports, identity cards, or other similar official identification documents of the user.

2. Contract files.

3. All abnormal transaction records of electronic payment accounts suspected of involvement in fraud.

4. Data and records obtained from inquiries regarding abnormal electronic payment accounts suspected of involvement in fraud in accordance with regulations in Chapter 2.

The abnormal transaction records of electronic payment accounts suspected of involvement in fraud, as referred to in Subparagraph 3 of the preceding paragraph, shall be sufficient to reconstruct individual abnormal transactions, and shall serve as evidence for identifying illegal activity.

Article 19 Where an electronic payment account is identified as an abnormal electronic payment account suspected of involvement in fraud, the electronic payment institution shall take the following measures:

1. It shall strengthen the CDD measures for the user in accordance with the latter part of Paragraph 1, Article 8 of the Act. It may adopt control measures such as continual review, suspension of inward remittances (transfers) or withdrawals, suspension of all or part of the transaction functions, refusal to establish a business relationship or to provide services, and may report to the judicial police authority.

2. Measures to be taken in accordance with the Money Laundering Control Act and other applicable laws and regulations.

When the electronic payment institution reports to the judicial police authority in accordance with the regulations in the preceding paragraph, it shall use the telephone, fax, email, electronic platform, or other feasible means. The institution shall also provide relevant documents related to the suspicious electronic payment accounts, the user’s identity information, relevant transaction records, or other documents required to be provided under the reporting.

Article 20 After receiving a report from the electronic payment institution, the judicial police authority shall notify the electronic payment institution by official letter within 20 days whether to continue or lift the control measures imposed on the abnormal electronic payment account suspected of involvement in fraud. If the judicial police authority fails to notify the electronic payment institution within this period, the electronic payment institution may continue to apply the control measures.

In case of major contingencies, the judicial police authority may send the notification in the preceding paragraph to the electronic payment institution by telephone, fax, email, or other feasible means, followed by a confirming official letter and documents which should be delivered within five business days.

If a user has any doubts regarding the control measures implemented by the electronic payment institution with respect to his or her electronic payment account in accordance with the notification from the judicial police authority, he or she may contact the electronic payment institution for inquiries, and may also contact the original judicial police authority that notified the implementation of the control measures where necessary.

Section 3 Credit Cards

Article 21 When card issuers implement measures in accordance with the latter part of Paragraph 1, Article 8 of the Act, they shall retain the following information and transaction records in hard copy or electronic format:

1. All records obtained through CDD measures, such as copies or records of passports, identity cards, driving licenses or other similar official identification documents of the cardholder.

2. Contract files.

3. All abnormal transaction records of credit cards suspected of involvement in fraud.

4. Data and records obtained from inquiries regarding abnormal credit cards suspected of involvement in fraud in accordance with regulations in Chapter 2.

The abnormal transaction records of credit cards suspected of involvement in fraud, as referred to in Subparagraph 3 of the preceding paragraph, shall be sufficient to reconstruct individual abnormal transactions and shall serve as evidence for identifying illegal activity.

Article 22 Where a credit card is identified as an abnormal credit card suspected of involvement in fraud, the card issuer shall take the following response measures:

1. It shall strengthen the CDD measures for the customer in accordance with the latter part of Paragraph 1, Article 8 of the Act. It may adopt control measures such as continual review, credit card management, suspension of credit card account transaction functions, and refusal to establish a business relationship or to provide services, and may report to the judicial police authority.

2. Measures to be taken in accordance with the Money Laundering Control Act and other applicable laws and regulations.

When a card issuer notifies the judicial police authority in accordance with the regulations in the preceding paragraph, it shall use the telephone, fax, email, electronic platform, or other feasible means. It shall also provide documents of abnormal credit cards suspected of involvement in fraud, the identity of the cardholder, relevant transaction records, or other documents required to be provided under the notification method based on the request.

Article 23 After receiving a report from the card issuer, the judicial police authority shall notify the card issuer by official letter within 20 days whether to continue or lift the control measures imposed on the abnormal credit card suspected of involvement in fraud. If the judicial police authority fails to notify the card issuer within this period, the card issuer may continue to apply the control measures.

In case of major contingencies, the judicial police authority may send the notification in the preceding paragraph to the card issuer by telephone, fax, email, or other feasible means, followed by a confirming official letter and documents which should be delivered within five business days.

If a cardholder has any doubts regarding the control measures implemented by the card issuer with respect to his or her credit card in accordance with the notification from the judicial police authority, he or she may contact the card issuer for inquiries, and may also contact the original judicial police authority that notified the implementation of the control measures where necessary.

Section 4 Virtual Asset Accounts

Article 24 When virtual asset service providers implement measures in accordance with the latter part of Paragraph 1, Article 8 of the Act, they shall retain the following information and transaction records in hard copy or electronic format:

1. All records obtained through CDD measures, such as copies or records of passports, identity cards, driving licenses or other similar official identification documents of the customer.

2. Contract files.

3. All abnormal transaction records of virtual asset accounts suspected of involvement in fraud.

4. Data and records obtained from inquiries regarding abnormal virtual asset accounts suspected of involvement in fraud in accordance with regulations in Chapter 2.

The abnormal transaction records of virtual asset accounts suspected of involvement in fraud, as referred to in Subparagraph 3 of the preceding paragraph, shall be sufficient to reconstruct individual abnormal transactions and shall serve as evidence for identifying illegal activity.

Article 25 When a virtual asset account is identified as an abnormal virtual asset account suspected of involvement in fraud, the virtual asset service provider shall take the following measures:

1. In accordance with the latter part of Paragraph 1, Article 8 of the Act, the virtual asset service provider shall strengthen the CDD measures for the customer and may adopt control measures such as continual review, suspension of deposits or withdrawals, suspension of outward remittance of virtual assets and funds, suspension of all or partial transaction functions, and refusal to establish a business relationship, service provision, and other control measures, and may report to the judicial police authority.

2. Measures to be taken in accordance with the Money Laundering Control Act and other applicable laws and regulations.

When a virtual asset service provider notifies the judicial police authority in accordance with the regulations in the preceding paragraph, it shall use the telephone, fax, email, electronic platform, or other feasible means. The virtual asset service provider shall also provide documents of abnormal virtual asset accounts suspected of involvement in fraud, the identity of the customer, relevant transaction records, or other documents required to be provided under the notification method.

Article 26 After receiving a report from the virtual asset service provider, the judicial police authority shall notify the virtual asset service provider by official letter within 20 days whether to continue or lift the control measures imposed on the abnormal virtual asset account suspected of involvement in fraud. If the judicial police authority fails to notify the virtual asset service provider within this period, the virtual asset service provider may continue to apply the control measures.

In case of major contingencies, the judicial police authority may send the notification in the preceding paragraph to the virtual asset service provider by telephone, fax, email, or other feasible means, followed by a confirming official letter and documents which should be delivered within five business days after the initial notification.

If a customer has any doubts regarding the control measures implemented by the virtual asset service provider with respect to his or her virtual asset account in accordance with the notification from the judicial police authority, he or she may contact the virtual asset service provider for inquiries, and may also contact the original judicial police authority that notified the implementation of the control measures where necessary.

Chapter 4 Joint Defense Reporting System and Earmarking of Funds

Section 1 Deposit Accounts

Article 27 For a deposit account reported as a watch-listed account, the deposit business institution shall verify the source of the notification, classify it as a watch-listed account, and check related transactions of the account. If the deposit business institution finds that funds reported as fraudulent have been remitted to another deposit account, an electronic payment account, or a virtual asset account, the deposit business institution shall notify the receiving deposit business institution, electronic payment institution, or virtual asset service provider of the remittance of such amount.

The receiving deposit business institution shall immediately review the transactions of the recipient account after receiving a notification made by the previous receiving institution or the virtual asset service provider. If the funds reported as fraudulent have been remitted to another account, the deposit business institution shall notify the next receiving deposit business institution, electronic payment institution, or virtual asset service provider of the outward transfer information.

If the deposit business institution holding the trust deposit account linked to the virtual asset account finds that the funds reported as fraudulent have been remitted into a virtual account under such trust deposit account, it shall immediately notify the virtual asset service provider to investigate whether all or part of the funds reported as fraudulent remain in the virtual account. The virtual asset service provider shall report the inquiry results to the deposit business institution holding the trust deposit account. The deposit business institution shall report the inquiry results to the original judicial police authority that reported the watch-listed account.

If the recipient deposit business institution discovers that the funds reported as fraudulent have been withdrawn, it shall notify the original judicial police authority that reported the watch-listed deposit account.

The original judicial police authority that reported the watch-listed deposit account shall verify the information listed in the preceding paragraph. If the original judicial police authority determines that the receiving account or virtual asset account shall also be classified as a watch-listed account, it shall notify the relevant deposit business institution, electronic payment institution, or virtual asset service provider to classify such account or account number as a watch-listed account.

Article 28 When a victim of fraud visits a deposit business institution during its business hours to report that he or she has been defrauded, the deposit business institution shall confirm his or her identity, remittance or transfer information, and the reason for the fraud. The victim shall then be asked to fill out an affidavit and call the 165 hotline.

The deposit business institution shall notify the recipient deposit business institution, electronic payment institution, or virtual asset service provider based on the affidavit and remittance or transfer information in the preceding paragraph. The inquiry and notification procedures in the preceding article shall apply mutatis mutandis if the recipient deposit business institution receives a notification from the previous deposit business institution, electronic payment institution, or virtual asset service provider.

If a fraud victim visits a deposit business institution in person to inform the institution of the fraud, in accordance with Paragraph 1, the police authority shall send an officer to the deposit business institution within two hours to process the victim’s report and, if necessary, classify the deposit account as watch-listed.

After receiving the notification from the police authority in the preceding paragraph, the deposit business institution shall process the notification in accordance with the inquiry and notification procedures in the preceding article.

Article 29 The contents of the joint defense notifications in the preceding two articles shall be registered in the manner prescribed by the authority responsible for sending the watch-listed deposit account notification.

The contents of the joint defense notification, format of the notification form and the affidavit, and other detailed items for the notifications shall be formulated by the Bankers Association of the Republic of China and reported to the competent authority for record.

Article 30 After a deposit business institution receives a notification from the previous deposit business institution, electronic payment institution, or virtual asset service provider, it shall earmark the amount received based on the notification. If the account balance is less than the notified amount, the current balance in the account shall be earmarked. The amount of funds or virtual assets earmarked by each deposit business institution, electronic payment institution, and virtual asset service provider for the same notification shall be capped at the amount of the fraudulent funds specified in the notification from the judicial police authority that provided the original notification or the amount of the fraudulent funds or virtual assets specified by the victim in his or her affidavit.

The recipient deposit business institution shall notify the judicial police authority that reported the watch-listed deposit account of the results of the earmarking.

After receiving the notification in the preceding paragraph, the judicial police authority that reported the watch-listed deposit account shall verify the results as soon as possible and notify the deposit business institution within 48 hours from the time of the earmarking regarding whether the deposit account with the earmarked amount should be classified as watch-listed or whether the earmarking should be released.

If the deposit business institution does not receive a notification within the period specified in the preceding paragraph regarding the deposit account with the earmarked amount to be classified as watch-listed, it shall release the earmarking.

The deposit business institution may release the earmarked funds in advance if it determines, after careful verification, that there is no illegal or abnormal circumstance in the deposit account specified in the earmarking notification.

The deposit business institution shall continuously monitor the deposit accounts with earmarked amounts, and if it determines that the account is an abnormal deposit account suspected of involvement in fraud, it may process the account in accordance with Paragraph 1, Article 8 of the Act.

Article 31 If the funds in a deposit account have been seized, preserved, prohibited, or subjected to similar measures under another law, and the deposit business institution subsequently receives a notification for the earmarking of proceeds of fraud in the deposit account, the deposit business institution shall still be required to earmark the proceeds of fraud, but priority shall be given to the order for the seizure, preservation, prohibition, or similar measure for such funds.

Article 32 Deposit business institutions shall, to the extent possible, set up a dedicated 24-hour joint defense notification contact window to carry out the joint defense notification mechanisms.

Deposit business institutions shall immediately notify Financial Information Service Co., Ltd. when they set up the contact window in the preceding paragraph, and the same applies when the contact window is changed.

Article 33 If the account holder of a deposit account with seized funds has any doubts regarding the seizure of his/her funds, he or she should contact the judicial police authority that reported the watch-listed deposit account to resolve the matter. The deposit business institution shall also provide assistance where necessary.

If a deposit business institution conducts joint defense operations but no facts of fraud are found in subsequent investigations and the customer's rights and interests are damaged due to the deposit business institution's joint defense notification or the earmarking of funds results in a dishonored check, the deposit business institution shall assist in applying to the Taiwan Clearing House for the cancellation of dishonored check records or take other remedial measures.

Section 2 Electronic Payment Accounts

Article 34 When an electronic payment account is reported as a watch-listed account, the electronic payment institution, in addition to verifying the source of the notification, shall classify it as a watch-listed account, and immediately review the related transactions of the account. If the electronic payment institution finds that funds reported as fraudulent have been remitted to another deposit account, electronic payment account, or virtual asset account, the electronic payment institution shall notify the receiving deposit business institution, electronic payment institution, or virtual asset service provider of the remitted amount.

The receiving electronic payment institution shall immediately review the transactions of the recipient account after receiving a notification made by the previous receiving institution or the virtual asset service provider. If the funds reported as fraudulent have been remitted to another account, the electronic payment institution shall notify the next receiving deposit business institution, electronic payment institution, or virtual asset service provider of the outward transfer information. If the funds are not remitted, it shall notify the judicial police authority that reported the watch-listed electronic payment account.

The original judicial police authority that reported the watch-listed electronic payment account shall verify the information listed in the preceding paragraph. If the original judicial police authority determines that the receiving account or virtual asset account shall also be classified as a watch-listed account, it shall notify the relevant electronic payment institution, deposit business institution, or virtual asset service provider to classify such account or account number as a watch-listed account.

Article 35 When a victim of fraud visits an electronic payment institution to report that he or she has been defrauded, the electronic payment institution shall confirm his or her identity, certification of electronic payment account transactions, and the reason for the fraud. The victim shall then be asked to fill out an affidavit and call the 165 hotline. When a victim of fraud calls the customer service of an electronic payment institution to report a fraud, the electronic payment institution shall refer the victim to the 165 hotline.

The electronic payment institution shall notify the receiving deposit business institution, electronic payment institution, or virtual asset service provider based on the affidavit and the electronic payment account transaction certification in the preceding paragraph. The inquiry and notification procedures in the preceding article shall apply mutatis mutandis if the receiving electronic payment institution receives a notification from the previous deposit business institution, electronic payment institution, or virtual asset service provider.

If a fraud victim visits an electronic payment institution in person to inform the institution of the fraud, the police authority shall send an officer to the electronic payment institution within two hours to process the victim’s report and, if necessary, classify the electronic payment account as watch-listed.

After receiving the notification from the police authority in the preceding paragraph, the electronic payment institution shall process the notification in accordance with the inquiry and notification procedures in the preceding article.

Article 36 The contents of the joint defense notifications in the preceding two articles shall be registered in the manner prescribed by the authority responsible for sending the watch-listed electronic payment account notification.

The contents of the joint defense notification, format of the notification form and the affidavit, and other detailed items for the notifications shall be formulated by the Electronic Payment Association of R.O.C. and reported to the competent authority for record.

Article 37 After an electronic payment institution receives a notification from the previous deposit business institution, electronic payment institution, or virtual asset service provider, it shall earmark the amount received based on the notification. If the account balance is less than the notified amount, the current balance in the account shall be earmarked. The amount of funds or virtual assets earmarked by each electronic payment institution, deposit business institution, and virtual asset service provider for the same notification shall be capped at the amount of the fraudulent funds specified in the notification from the judicial police authority that provided the original notification or the amount of the fraudulent funds or virtual assets specified by the victim in his or her affidavit.

The electronic payment institution shall notify the judicial police authority that reported the watch-listed electronic payment account of the results of the earmarking.

After receiving the notification in the preceding paragraph, the judicial police authority that reported the watch-listed electronic payment account shall verify the results as soon as possible and notify the electronic payment institution within 48 hours from the time of the earmarking regarding whether the electronic payment account with the earmarked amount should be classified as watch-listed or whether the earmarking should be released.

If the electronic payment institution does not receive a notification for classifying the electronic payment account as watch-listed within the period specified in the preceding paragraph, the electronic payment institution shall release the earmarking.

The electronic payment institution may release the earmarked funds in advance if it determines, after careful verification, that there is no illegal or abnormal circumstance in the electronic payment account specified in the earmarking notification.

The electronic payment institution shall continuously monitor the electronic payment accounts with earmarked amounts, and if it determines that the account is an abnormal electronic payment account suspected of involvement in fraud, it may process the account in accordance with Paragraph 1, Article 8 of the Act.

Article 38 If the funds in an electronic payment account have been seized, preserved, prohibited, or subjected to similar measures under another law, and the electronic payment institution subsequently receives a notification for the earmarking of proceeds of fraud in the electronic payment account, the electronic payment institution shall still be required to earmark the proceeds of fraud, but priority shall be given to the order for the seizure, preservation, prohibition, or similar measure for such funds.

Article 39 Electronic payment institutions shall, to the extent possible, set up a dedicated 24-hour joint defense notification contact window to carry out the joint defense notification mechanisms.

Electronic payment institutions shall immediately notify Financial Information Service Co., Ltd. when they set up the contact window in the preceding paragraph, and the same applies when the contact window is changed.

Article 40 If the user of an electronic payment account with seized funds has any doubts regarding the seizure of his or her funds, he or she shall contact the judicial police authority that reported the watch-listed account to resolve the matter. The electronic payment institution shall also provide assistance where necessary.

Section 3 Credit Cards

Article 41 Where a credit card settlement number is reported as a watch-listed credit card settlement number, the card issuer shall immediately suspend all transaction functions of the credit card and disable the payment functions for automatic payment channels. This restriction does not apply if the card issuer verifies that payment is made by the cardholder.

If the card issuer finds that funds reported as fraudulent have been remitted to another deposit account or an electronic payment account held by the cardholder, the card issuer shall notify the next receiving deposit business institution or electronic payment institution as well as the judicial police authority that reported the credit card settlement number as watch-listed.

Article 42 When a victim of fraud calls the customer service of a card issuer to report a fraud, the card issuer shall refer the victim to the 165 hotline.

When a victim of fraud visits a card issuer during its business hours to report that he or she has been defrauded, the card issuer shall confirm his or her identity, remittance or transfer information, and the reason for the fraud, and call the 165 hotline. The police authority shall send an officer to the card issuer within two hours to accept the case report from the victim and, if necessary, classify the credit card settlement number as watch-listed.

After receiving the notification from the police authority in the preceding paragraph, the card issuer shall process the notification in accordance with the inquiry and notification procedures in the preceding article.

Article 43 The contents of the joint defense notifications in the preceding two articles shall be registered in the manner prescribed by the authority responsible for sending the watch-listed credit card settlement number notification.

The contents and format of the joint defense notification and other detailed items for the notifications shall be formulated by the Bankers Association of the Republic of China and reported to the competent authority for record.

Article 44 The card issuers shall, to the extent possible, set up a dedicated 24-hour joint defense notification contact window to carry out the joint defense notification mechanisms.

The card issuers shall immediately notify Financial Information Service Co., Ltd. when they set up the contact window in the preceding paragraph, and the same applies when the contact window is changed.

Section 4 Virtual Asset Accounts

Article 45 For a virtual asset account reported as a watch-listed virtual asset account, the virtual asset service provider, in addition to verifying the source of the report and classifying it as a watch-listed virtual asset account, shall suspend all transaction functions of the account and investigate related transactions. If the virtual asset service provider finds that the reported fraud-related virtual assets have been remitted to another virtual asset service provider or remitted in the form of fiat currency to another deposit account, virtual account, or electronic payment account, it shall notify the receiving virtual asset service provider, the receiving deposit business institution, or the electronic payment institution of the outward transfer information of the virtual assets.

The receiving virtual asset service provider shall immediately investigate the transactions of the recipient account after receiving the notification made by the previous virtual asset service provider or receiving institution. If the virtual assets have been remitted or remitted in the form of fiat currency to another deposit account, virtual account, or electronic payment account, it shall notify the next receiving virtual asset service provider, or the next receiving deposit business institution or electronic payment institution, of the outward transfer information of the virtual assets.

If the receiving virtual asset service provider finds that fraudulent virtual assets reported have been withdrawn or remitted to an offshore virtual asset account, it shall notify the original judicial police authority that reported the watch-listed virtual asset account.

The original judicial police authority that reported the watch-listed virtual asset account shall verify the information listed in the preceding paragraph. If the original judicial police authority determines that the receiving virtual asset account or recipient account into which such virtual assets were transferred shall also be classified as watch-listed, it shall notify the relevant virtual asset service provider, deposit business institution, or electronic payment institution to classify such account as watch-listed.

For the purpose of fraud crime prevention, virtual asset service providers may notify the deposit business institution holding the trust deposit account linked to a watch-listed virtual asset account, or the deposit business institution or electronic payment institution holding the bound deposit account or electronic payment account, of information related to the watch-listed virtual asset account or fraudulent virtual assets. Deposit business institutions or electronic payment institutions may, based on the relevant information provided by virtual asset service providers, implement control measures provided in the latter part of Paragraph 1, Article 8 of the Act.

Article 46 When a victim of fraud visits a virtual asset service provider during its business hours to report that he or she has been defrauded, the virtual asset service provider shall confirm his or her identity, the transfer of virtual assets or funds, remittance or transfer information, and the reason for the fraud. The victim shall then be asked to fill out an affidavit and call the 165 hotline. When a victim of fraud calls the customer service of a virtual asset service provider to report a fraud, the virtual asset service provider shall refer the victim to the 165 hotline.

The virtual asset service provider shall notify the receiving virtual asset service provider, receiving deposit business institution, or electronic payment institution based on the affidavit and remittance or transfer information in the preceding paragraph. The inquiry and notification procedures in the preceding article shall apply mutatis mutandis if the virtual asset service provider of the recipient account receives a notification from the previous virtual asset service provider, deposit business institution, or electronic payment institution.

If a fraud victim visits a virtual asset service provider in person to inform the service provider of the fraud, in accordance with Paragraph 1, the police authority shall send an officer to the virtual asset service provider within two hours to process the victim’s report and, if necessary, classify the virtual asset account as watch-listed.

After receiving the notification from the police authority in the preceding paragraph, the virtual asset service provider shall process the notification in accordance with the inquiry and notification procedures in the preceding article.

Article 47 The contents of the joint defense notifications in the preceding two articles shall be registered in the manner prescribed by the authority responsible for sending the watch-listed virtual asset account notification.

The contents of the joint defense notification, format of the notification form and the affidavit, and other detailed items for the notifications shall be formulated by the Taiwan Virtual Asset Service Provider Association and reported to the competent authority for record.

Article 48 After a virtual asset service provider receives a notification from the previous virtual asset service provider, deposit business institution, or electronic payment institution, it shall earmark an amount based on the virtual assets or funds specified in the notification. If the account balance is less than the notified amount, the current balance of virtual assets or funds in the account shall be earmarked. The amount of virtual assets or funds earmarked by each virtual asset service provider, deposit business institution, and electronic payment institution for the same notification shall be capped at the amount of the fraudulent funds specified in the notification from the judicial police authority that provided the original notification for the virtual asset account or the amount of the fraudulent virtual assets or funds specified by the victim in his or her affidavit.

The virtual asset service provider shall notify the judicial police authority that reported the watch-listed virtual asset account of the results of the earmarking.

After receiving the notification in the preceding paragraph, the judicial police authority that reported the watch-listed virtual asset account shall verify the results as soon as possible and notify the virtual asset service provider within 48 hours from the time of the earmarking regarding whether the virtual asset account with the earmarked amount should be classified as watch-listed or whether the earmarking should be released.

If the virtual asset service provider does not receive a notification for classifying the virtual asset account with the earmarked virtual assets or funds as watch-listed within the period specified in the preceding paragraph, the virtual asset service provider shall release the earmarking.

The virtual asset service provider may release the earmarked virtual assets or funds in advance if it determines, after careful verification, that there is no illegal or abnormal circumstance in the virtual asset account specified in the earmarking notification.

The virtual asset service provider shall continuously monitor the virtual asset accounts with earmarked virtual assets or funds, and if it determines that the account is an abnormal virtual asset account suspected of involvement in fraud, it may process the account in accordance with Paragraph 1, Article 8 of the Act.

Article 49 If the virtual assets or funds in a virtual asset account have been seized, preserved, prohibited, or subjected to similar measures under another law, and the virtual asset service provider subsequently receives a notification for the earmarking of proceeds of fraud in the virtual asset account, the virtual asset service provider shall still be required to earmark the proceeds of fraud in the form of virtual assets or funds, but priority shall be given to the order for the seizure, preservation, prohibition, or similar measure for such virtual assets or funds.

Article 50 Virtual asset service providers shall, to the extent possible, set up a dedicated 24-hour joint defense notification contact window to carry out the joint defense notification mechanisms.

Virtual asset service providers shall immediately notify the Taiwan Virtual Asset Service Provider Association when they set up the contact window in the preceding paragraph, and the same applies when the contact window is changed.

Article 51 If the customer of a virtual asset account with seized virtual assets or funds has any doubts regarding the seizure of his or her virtual assets or funds, the customer shall contact the judicial police authority that reported the watch-listed virtual asset account to resolve the matter. The virtual asset service provider shall also provide assistance where necessary.

Chapter 5 Return of Remaining Funds or Virtual Assets

Section 1 Deposit Accounts

Article 52 If a deposit account suspected of involvement in fraud has been reported as a watch-listed deposit account, and there are still unwithdrawn funds remitted (transferred) by a victim in the account, when the judicial police authority notifies the deposit business institution in writing to return the remaining funds in the watch-listed deposit account to the victim, with a copy of the notification sent to the account holder, the deposit business institution may proceed with the return upon receipt of the written notification.

Article 53 When a deposit business institution implements measures in accordance with the preceding article, it shall notify the victims through the remitting (transferring) deposit business institutions or electronic payment institutions to prepare the following documents. Thereafter, based on the chronological order of inward remittances (transfers), the deposit business institution shall identify, transaction by transaction, the portions that have not yet been withdrawn or transferred, and return the remaining money held in the watch-listed account to victims, starting from the amount of the last transaction and working backward until the balance of the watch-listed deposit account reaches zero:

1. Identity certification document.

2. A certificate or document of case acceptance (processing) issued by the judicial police authority.

3. An undertaking issued by the victim stating that he or she will bear all liability for any damages incurred by the deposit business institution due to untrue information provided by such victim.

Article 54 With respect to returning the remaining funds held in a watch-listed deposit account pursuant to the preceding two articles, if any of the following occurs, the deposit business institution may settle and close the account, record such remaining money as an account payable, and wait until a person legally having the right to claim such money requests payment:

1.The account balance is below a certain amount, such that the cost of returning would make such return not worthwhile.

2. The institution is unable to contact the victim(s) within three months after receipt of the notification from the judicial police authority.

3. The victim is unwilling to report the case or to claim the money.

After the deposit business institution settles and closes the account in accordance with the preceding paragraph, it shall not lift the effect of the watch-listing on the account holder until it has been notified to lift the watch-listing or the watch-listing period has expired.

Article 55 If the funds in a deposit account have been seized, preserved, prohibited, or subjected to similar measures under another law, and the deposit business institution subsequently receives a notification from the judicial police authority as described in Article 52 to return the remaining funds in the account, priority shall be given to the order for the seizure, preservation, prohibition, or similar measure with respect to such funds.

Section 2 Electronic Payment Accounts

Article 56 If an electronic payment account suspected of involvement in fraud has been reported as a watch-listed electronic payment account, and there are still unwithdrawn funds remitted (transferred) by a victim in the account, when the judicial police authority notifies the electronic payment institution in writing to return the remaining funds in the watch-listed electronic payment account to the victim, with a copy of the notification sent to the account user, the electronic payment institution may proceed with the return upon receipt of the written notification.

Article 57 When an electronic payment institution carries out the procedures described in the preceding article, it shall notify the victims through the remitting (transferring) electronic payment institutions or deposit business institutions to prepare the following documents. Thereafter, based on the chronological order of inward remittances (transfers), the electronic payment institution shall identify, transaction by transaction, the portions that have not yet been withdrawn or transferred, and return the remaining money held in the watch-listed account to victims, starting from the amount of the last transaction and working backward until the balance of the watch-listed e-payment account reaches zero:

1. Identity certification document.

2. A certificate or document of case acceptance (processing) issued by the judicial police authority.

3. An undertaking issued by the victim stating that he or she will bear all liability for any damages incurred by the electronic payment institution due to untrue information provided by such victim.

Article 58 With respect to returning the remaining funds held in a watch-listed e-payment account pursuant to the preceding two articles, if any of the following occurs, the electronic payment institution may settle and close the account, record such remaining money as an account payable, and wait until a person legally having the right to claim such money requests payment:

1. The account balance is below a certain amount, such that the cost of returning would make such return not worthwhile.

2. The institution is unable to contact the victim(s) within three months after receipt of the notification from the judicial police authority.

3. The victim is unwilling to report the case or to claim the money.

After the electronic payment institution settles and closes the account in accordance with the preceding paragraph, it shall not lift the effect of the watch-listing on the account user until it has been notified to lift the watch-listing or the watch-listing period has expired.

Article 59 If the funds in an electronic payment account have been seized, preserved, prohibited, or subjected to similar measures under another law, and the electronic payment institution subsequently receives a notification from the judicial police authority as described in Article 56 to return the remaining funds in the account, priority shall be given to the order for the seizure, preservation, prohibition, or similar measure with respect to such funds.

Section 3 Credit Cards

Article 60 If a credit card settlement number suspected of involvement in fraud has been reported as a watch-listed credit card settlement number, and there are still unwithdrawn funds remitted (transferred) by a victim, when the judicial police authority notifies the credit card business institution in writing to return the remaining funds in the watch-listed credit card settlement number to the victim, with a copy of the notification sent to the cardholder, the credit card business institution may proceed with the return upon receipt of the written notification.

Article 61 When a credit card business institution implements measures in accordance with the preceding article, if the funds are remitted (transferred) from a deposit business institution or an electronic payment institution, it shall notify the victims through the remitting (transferring) deposit business institutions or electronic payment institutions to prepare the following documents. Thereafter, the credit card business institution shall identify transaction by transaction based on the chronological order of inward remittances (transfers), and return the remaining money held in the watch-listed credit card settlement number to victims:

1. Identity certification document.

2. A certificate or document of case acceptance (processing) issued by the judicial police authority.

3. An undertaking issued by the victim stating that he or she will bear all liability for any damages incurred by the credit card business institution due to untrue information provided by such victim.

Article 62 With respect to returning the remaining funds held in a watch-listed credit card settlement number pursuant to the preceding two articles, if any of the following occurs, the credit card business institution may record such remaining money as an account payable, and wait until a person legally having the right to claim such money requests payment:

1. The account balance is below a certain amount, such that the cost of returning would make such return not worthwhile.

2. The institution is unable to contact the victim(s) within threemonths after receipt of the notification from the judicial police authority.

3. The victim is unwilling to report the case or to claim the money.

After the credit card business institution records the remaining funds in the account as other payables, the credit card business institution shall not lift the effect of the watch-listing on the credit card until it has been notified to lift the watch-listing or the watch-listing period has expired.

Article 63 If the funds in a credit card settlement number have been seized, preserved, prohibited, or subjected to similar measures under another law, and the credit card business institution subsequently receives a notification from the judicial police authority as described in Article 60 to return the remaining funds in the account, priority shall be given to the order for the seizure, preservation, prohibition, or similar measure with respect to such funds.

Section 4 Virtual Asset Accounts

Article 64 If a virtual asset account suspected of involvement in fraud has been reported as a watch-listed virtual asset account, and there are still unwithdrawn virtual assets or funds remitted (transferred) by a victim in the account, the virtual asset service provider shall return the remaining virtual assets or funds in the watch-listed virtual asset account to the victim after receiving a written notification from the judicial police authority that provided the notification to the virtual asset service provider, and notify the customer holding the virtual asset account.

When a virtual asset service provider returns the remaining virtual assets in a watch-listed virtual asset account in accordance with the preceding paragraph, it may first sell the remaining virtual assets in the watch-listed virtual asset account through the virtual asset service provider, and then return the proceeds of such sale to the victim.

Article 65 When a virtual asset service provider carries out the procedures described in the preceding article, it shall notify the victims through the remitting (transferring) virtual asset service provider, deposit business institution, or electronic payment institution to prepare the following documents. Thereafter, based on the chronological order of inward remittances (transfers), the virtual asset service provider shall identify, transaction by transaction, the portions that have not yet been withdrawn or transferred, and return the remaining virtual assets or funds held in the watch-listed account to victims, starting from the amount of the last transaction and working backward until the balance of virtual assets or funds in the account reaches zero:

1. Identity certification document.

2. A certificate or document of case acceptance (processing) issued by the judicial police authority.

3. An undertaking issued by the victim stating that he or she will bear all liability for any damages incurred by the virtual asset service provider due to untrue information provided by such victim.

When virtual asset service providers process the return of remaining virtual assets or funds in a watch-listed virtual asset account, other virtual asset service providers, deposit business institutions, and electronic payment institutions shall, within the necessary scope, cooperate to provide information required for the return operations, including remitting account information, remittance time, remitted amount, virtual asset accounts, and other information sufficient to confirm the order and amount of the return.

The fields, format, timing of provision, notification methods, and operating procedures for the information in the preceding paragraph shall be formulated by the Taiwan Virtual Asset Service Provider Association in consultation with the Bankers Association of the Republic of China and the Electronic Payment Association of R.O.C., and reported to the competent authority for record.

Article 66 With respect to returning the remaining virtual assets or funds held in a watch-listed virtual asset account pursuant to the preceding two articles, if any of the following occurs, the virtual asset service provider may settle and close the account, record such remaining virtual assets or funds as a virtual asset payable or an account payable, and wait until a person legally having the right to claim such assets requests payment:

1. The remaining virtual assets or funds are below a certain amount, such that the cost of returning would make such return not worthwhile.

2. The institution is unable to contact the victim(s) within three months after receipt of the notification from the judicial police authority.

3. The victim is unwilling to report the case or to claim the virtual assets or funds.

After the virtual asset service provider settles and closes the account in accordance with the preceding paragraph, it shall not lift the effect of the watch-listing on the account holder until it has been notified to lift the watch-listing or the watch-listing period has expired.

Article 67 If the virtual assets or funds in a virtual asset account have been seized, preserved, prohibited, or subjected to similar measures under another law, and the virtual asset service provider subsequently receives a notification from the judicial police authority described in Article 64 to return the remaining virtual assets or funds in the account, priority shall be given to the order for the seizure, preservation, prohibition, or similar measure with respect to such virtual assets or funds.

Section 5 Supervising Officer and Cases Where Assets Cannot be Returned

Article 68 Deposit business institutions, electronic payment institutions, credit card business institutions, and virtual asset service providers shall designate a deputy general manager or officer of equivalent level to supervise the handling of balances or virtual assets held in watch-listed deposit accounts, watch-listed electronic payment accounts, watch-listed credit card settlement numbers, or watch-listed virtual asset accounts.

Article 69 Cases identified by deposit business institutions, electronic payment institutions, credit card business institutions, or virtual asset service providers as being suspected of involving transaction disputes or otherwise complicated shall be handled through judicial procedures, and the rules regarding return of remaining funds or virtual assets in these Regulations shall not apply thereto.

Chapter 6 Operations of the Fraud Prevention Platform

Article 70 To establish a fraud prevention platform, the establishing institution shall submit the following documents to the FSC to apply for approval:

1. Operational proposal specifying matters such as the purpose of establishing the fraud prevention platform, participating institutions, operational structure and workflow, risk and benefit assessment, and expected implementation schedule.

2. Explanation of the scope and necessity of customer information collected, processed, and used by participating institutions of the fraud prevention platform.

3. Agreements, templates, or explanations regarding rights and obligations among related parties of the fraud prevention platform.

4. Explanation of the information system and security control operations of the fraud prevention platform.

5. Other documents required by the FSC.

A fraud prevention platform that, prior to the amendment and promulgation of these Regulations on July 20, 2026, was established after being reported to the FSC shall be deemed to have obtained the FSC’s approval.

Article 71 Participating institutions of the fraud prevention platform may use the services provided by the fraud prevention platform to perform the following operations:

1. Analysis or identification of abnormal deposit accounts, electronic payment accounts, credit cards, or virtual asset accounts suspected of involvement in fraud pursuant to these Regulations.

2. Operations related to inquiries, reporting, and account control measures pursuant to these Regulations.

Article 72 To implement anti-fraud measures prescribed by the Act and these Regulations, the establishing institution and participating institutions of the fraud prevention platform may collect, process, and use customer information of participating institutions through the fraud prevention platform within the necessary scope.

Chapter 7 Supplementary Provisions

Article 73These Regulations shall enter into force on the date of promulgation.