Verification runs on three documents, and none of them are optional
A Zalo Official Account only unlocks once its owner submits a Vietnamese business license, the legal representative's CCCD (the national ID card), and a Vietnamese phone number. The name on the CCCD has to match the legal representative named on the license — Zalo cross-checks the two rather than accepting either alone, so a scanned ID that doesn't line up with the license on file gets rejected, not flagged for review.
This is where most foreign teams stall. A regional or global entity can register the OA and start a conversation, but it can't produce a Vietnamese business license, and it doesn't have a staff member holding a Vietnamese CCCD. The account exists; it just can't clear the second step. A passport doesn't substitute for the CCCD either — the requirement is specifically the national ID issued to a Vietnamese citizen, which rules out simply naming a foreign director as the account's legal representative.
An unverified account isn't a lesser version of the real thing — it's mostly closed
Before verification, an OA can't run Broadcast campaigns, can't run a chatbot, can't use the API, and can't send a message once a conversation is older than 48 hours. Inside that 48-hour window, the first eight messages are free; keep messaging past that inside the window and it costs 55 VND per message. Outside the window, verification is the only way back in.
In practice, an unverified OA works fine for a same-day reply to a same-day question, and not much else. No scheduled campaigns, no automation, no way to re-open a conversation that's gone cold — which is most of what a customer service or marketing team actually wants a Zalo channel to do.
Skip the 14-day deadline and the account doesn't wait for you
Zalo gives a newly created OA 14 days to submit its verification documents. Miss that window and the account isn't paused — it's locked permanently. Creating a fresh OA doesn't reset anything either; the same three documents are still required, so a company without them lands at the same wall a second time.
For a foreign company still sorting out its Vietnamese paperwork, the practical move is not to register the OA the day marketing wants to “test Zalo.” Register it once the business license exists and a named local representative is actually in hand, so the 14-day clock doesn't run out on documents that don't exist yet.
- The 14-day clock starts at account creation, not at the first attempt to verify
- A locked account can't be reopened by resubmitting later — it stays locked
- A new OA still needs the same license, CCCD, and phone number — starting over changes nothing about the requirements
The legal route for a company with no Vietnamese entity: authorized management, not a shared login
Zalo's own path for this situation is delegated access through its official OAuth authorization flow (oauth.zaloapp.com), not handing account credentials to whoever happens to be in Vietnam. A verified local party — an in-country partner, a subsidiary, or an operations team already holding the license and CCCD — is granted OA management rights through Zalo's platform, while the foreign company keeps ownership of the brand and the conversation history.
This matters for two reasons. It keeps the account inside Zalo's own compliance rules instead of relying on informal document-sharing between a head office and whoever's local. And it survives staff turnover on either side, since access is granted to a role through the platform rather than tied permanently to one person's personal login.
Plan the timeline around the paperwork, not around the campaign launch date
The mistake that costs the most time isn't skipping a document — it's sequencing the work backward. Marketing picks a launch date, someone registers the OA that same week to “get started,” and the 14-day verification clock starts running before the business license or the local representative's CCCD is actually in hand. By the time the paperwork arrives, the account may already be locked, and starting over doesn't shorten anything.
The order that avoids this is straightforward: confirm the Vietnamese entity, the named legal representative, and their CCCD first, then register the OA once all three actually exist. If the entity or the representative isn't settled yet, it's better to hold off entirely than to start a clock that expires before the paperwork does — and to run first response through Messenger or a website live chat in the meantime, since neither one carries this verification requirement.