26 Taels of Gold, 64 Savings Books and a Missing Permit: Auditing One Prize Ledger

The file arrived with a label stuck on it: Football. I went through all twenty-seven information points. No club, no player, no coach, no match, not one mention of a corner kick. What the file actually held was a Vietnamese retail-bank savings campaign — HDBank's Tiết kiệm Tỷ phú – Hè Vàng Đại Cát — whose Mid-Autumn prize handover was streamed on 25 September 2026. At the top of the list: 16 taels of SJC gold. Four first prizes of 2 taels each. Twenty second prizes of 1 chỉ each. Sixty-four customers receiving advance-draw savings books worth 10 to 200 million Vietnamese dong. Fifteen Korea trips. The ledger was still in the kit bag when I found it — except this time the kit bag carried a bank's logo.

My first ledger came to me in March 2026, in a Chattogram press area, at seventeen. I was asked to move a kit bag and found a folded payment schedule inside. A Nigerian striker was listed at eighteen thousand dollars; every Dhaka outlet was reporting forty-five thousand. The gap was a facilitation line paid to an unlicensed intermediary. That week I stopped quoting press releases and opened a numbered, dated archive — registration forms, payment schedules, transfer certificates, filed by club and season. In 2026, checking pandemic relief rosters against the federation's own registered squad lists, I counted forty-one names that had been released before March or had never been registered at all: roughly 1.2 million taka in claims. I published the spreadsheet rather than the accusation. Two clubs returned funds; the federation added a countersignature requirement.

That work left me one rule, and it applies to today's file: every incentive document has four parts — the anchor prize, the mid-tier spread, the volume-linked bonus, and the missing paper. HDBank's document makes the first three plain. The fourth is absent.

Start with weight. One lượng is about 37.5 grams in Vietnam; one chỉ is a tenth of that, roughly 3.75 grams. A 16-lượng grand prize is about 600 grams of gold. Four first prizes add 8 lượng, twenty second prizes add 2 lượng; the stated total is 26 lượng, close to a kilogram. That is the number the campaign put in its headline. Gold at 26 lượng is a closed, bounded cost — once the list is printed, the bill stops growing. The real incentive sits elsewhere: an interest bonus of up to +2.35 percent a year on six-month app deposits, which is volume-linked and effectively an open liability, because the cost rises with every dong attracted. The gold is attention bait; the contract hides in the bonus rate.

The bonus attaches to three double days — 10/10, 11/11 and 12/12. Anyone who has audited deposit flows knows why dates like these are chosen: money arrives on a chosen day and locks into a term that matches the bank's own reporting rhythm. For the saver it reads as a small discount; for the bank it is funding-cost management. The sixty-four advance-draw savings books follow the same logic — cash-equivalent rewards whose unit cost is lower than a gold bar but whose felt value is higher. The Korea trips are experiential prizes tied to a measurable trigger: highest net new online deposits, which makes them a branch-level competition in disguise. The architecture is simple enough to teach: one loud anchor, a spread of mid-tier prizes, a dense floor of small ones.

Now count the missing paper. Vietnamese competition and consumer-protection practice expects a permit or notification for a regulated prize draw; the file carries no number. A deposit-rate bonus invites a comparison against the State Bank of Vietnam's rate framework; the file offers no context. Gold and cash prizes normally carry personal income tax withholding above a statutory threshold; no withholding line appears. The SkyPoint loyalty ecosystem implies consumer-data handling; there is not a sentence on consent. The scandal is not the draw — the draw is lawful. The scandal is the compliance document that vanished around it. Years ago, isolating the fifth-substitution rule, I learned the same lesson: the rule is observed, and the test record that was supposed to sit beside it goes missing.

The date is a flag of its own. The event is dated 25/9/2026 — future-dated, most likely a typo. When a document cannot be trusted about its own date, nothing downstream can be treated as settled.

There is a person in the file too. Mã Tiếp Ngân, a customer at the Kiên Giang branch. Three lines: a name, a branch, a gold bar. Naming the branch is a deliberate signal — the campaign is run centrally, but the sales target lands locally, and branches win by moving advance-draw books. There is another person with no name anywhere: the saver who moves money on 12/12 and locks it for six months chasing +2.35 percent, and whom nobody told that a gold bar usually carries a taxable-income line, or where deposit rates settle once the bonus term ends.

On a feed, this becomes an easy story — another bank lottery, or a scam. That framing misses three things. The important figure is not the gold but the bonus rate, and the question is not moral but one of funding-cost disclosure: if the bank states how much it raised and what it owes, the arithmetic closes. The whole narrative is self-reported — fulfilling, closer to your goals — with no independent metric, no draw audit, no complaint data, no third-party verification. And the campaign is explicitly a recurring franchise, with new seasons promised, which means the missing paper returns every cycle. Build the audit template once.

Verification is infrastructure. The same logic that demands an immutable, publicly checkable record of transactions demands three things from any incentive campaign: the permit number, the full bonus terms, and an independently audited draw result. Publish those three, and nobody gets to tell a gold-lottery story anymore.

When the next season's file lands, I will look for three lines first: the permit number, the tax-withholding sentence, and the draw auditor's signature. With two documents in hand, the bank gets a specific right-of-reply letter and a deadline — and whether a reply or silence comes back, that goes to print. I do not chase rumours. I chase receipts, timestamps, and the gaps between them.