visa-admin
Updated 2026-06-18 5 min
In short
- ●Visa updated its payment security roadmap in Cambodia on June 18, 2026.
- ●Five priority areas: phasing out SMS OTP, annual cyber assessments, combating AI-driven fraud, post-quantum preparation, system resilience.
- ●Expats will benefit from a safer payment ecosystem with reduced fraud risks.
- ●Implementation will be carried out in collaboration with banks, merchants, fintechs, and regulators.
June 18, 2026
Update Date
2019
First Version
5
Priority Areas
Cambodia Investment Review
Source
Key Facts at a Glance
- 5 priority areas. Visa has defined five key areas to strengthen digital payment security in Cambodia.
- Phasing out SMS OTP. The SMS code will be replaced by more secure authentication methods.
- Annual cyber assessments. Industry players must conduct annual evaluations of their cybersecurity posture.
- AI and quantum readiness. The roadmap includes combating AI-based fraud and adapting to post-quantum cryptography.
- System resilience. Ensuring processing integrity and resilience of payment infrastructures.
How It Happened
Visa presented the updated security roadmap on June 18, 2026, building on previous versions and ongoing dialogue with local stakeholders.
- 2019: Visa launches the first version of the payment security roadmap in Cambodia.
- 2022: First update to incorporate market developments.
- 2024-2025: Acceleration of digital payments in Cambodia (mobile, QR, e-commerce) and emergence of sophisticated fraud.
- June 18, 2026: Visa announces the 2026 version of the roadmap, with five priority areas.
- From 2026: Gradual implementation via the Cambodia Risk Forum and partnerships with banks, fintechs, and regulators.
Breakdown
The roadmap addresses the entire digital payment ecosystem in Cambodia. Here are the main segments involved:
| Segment | Role | Expected Impact |
|---|---|---|
| Banks | Card and account issuers | Compliance with new authentication and cybersecurity standards |
| Merchants | Payment acceptors | Securing terminals and online transactions |
| Fintechs | Payment solution providers | Integration of robust authentication methods and quantum readiness |
| Regulators | National Bank of Cambodia | Oversight and adoption of enhanced security standards |
| Consumers | End users | Reduced fraud risk and smoother payment experience |
What This Means for Siem Reap
- More secure card transactions, with lower risk of cloning or identity theft.
- Gradual phase-out of SMS OTP in favor of biometric or app-based authentication, reducing interception risks.
- Better protection against online fraud when shopping on Cambodian e-commerce sites.
- QR code payments (KHQR) will become safer, limiting diversion.
- Expats using money transfer services or neobanks will benefit from increased system resilience.
How to Stay Safe
- Enable two-factor authentication (2FA) via app: Prefer Google Authenticator or similar apps over SMS OTP as soon as possible.
- Update your banking apps: Install the latest versions that incorporate new security measures.
- Use chip and contactless cards: Avoid magnetic stripe cards, which are more vulnerable to skimming.
- Monitor your bank statements: Regularly check your transactions for any suspicious activity.
- Avoid public Wi-Fi for payments: Use a secure connection or VPN when making online transactions.
- Report fraud immediately: Contact your bank and local authorities (foreign police) in case of unauthorized transactions.
- Stay informed: Follow announcements from Visa and the National Bank of Cambodia on new security measures.
Frequently asked questions
What is Visa's payment security roadmap?
It is a strategic framework that defines priorities to strengthen digital transaction security in Cambodia, in collaboration with banks, merchants, fintechs, and regulators.
What are the five areas of the 2026 version?
1) Transition from SMS OTP to more secure methods, 2) Annual cybersecurity posture assessments, 3) Strengthening capabilities against AI threats, 4) Preparation for post-quantum cryptography, 5) Ensuring processing integrity and system resilience.
When will these measures be implemented?
Implementation is gradual, starting in 2026, through the Cambodia Risk Forum and partnerships with ecosystem players.
Are expats in Siem Reap directly affected?
Yes, because they frequently use bank cards, online payments, and money transfers. The new measures will reduce fraud risks and improve transaction security.
What should I do while waiting for full implementation?
Enable two-factor authentication via app, update your banking apps, monitor your accounts, and avoid public Wi-Fi for payments.
Free expat guide
Visa, housing, health — in your inbox.
🧭
Published by
Siem Reap Hub
The community guide for expats and travelers in Siem Reap, Cambodia