Case File
Henan Bank Depositors and Red Codes: Public-Health Infrastructure Repurposed for Stability Control
An officially confirmed health-code misuse case linking lists, system permissions, and grassroots restriction.
Event chronologyFull case chronology and key recordsExpand
Online withdrawals stopped at several village banks
Depositors found that they could no longer withdraw funds online, beginning a prolonged financial dispute.
Depositors traveling to Henan reported red health codes
Depositors said they had no health-risk basis for a red code but were restricted while attempting to travel to Zhengzhou.
Local authorities opened an inquiry into improper code assignment
After public reporting, the inquiry shifted attention from anomalous health status to the lists, access permissions, and personnel involved.
Officials announced accountability measures
Authorities confirmed that personnel improperly assigned red codes to identified depositors and announced disciplinary measures.
Contents
From list to red-code restriction
In April 2022, online withdrawals stopped at several village banks in Henan, leaving depositors unable to access their money. Around June 12, depositors preparing to travel to Zhengzhou found that their health codes had turned red. Many reported no infection risk and no travel to affected areas, yet the red code blocked transport, hotels, and public venues. After the incident became public, Henan authorities investigated the source of the list and the permissions used to assign codes. On June 22, officials confirmed that personnel had improperly assigned red codes to identified depositors and announced discipline. [1] [2]
The incident connected a financial dispute directly to public-health infrastructure. Depositors wanted answers about bank funds and local financial supervision. Grassroots authorities instead used health codes to control whether they could reach a protest site. The red code was not merely a technical error. It was an officially confirmed case of a public database being redirected for stability control.
A depositor list entered the health-code interface
Health codes were designed for infection-risk assessment and checks at transport and public venues. Once local personnel fed a list of depositors preparing to petition into the system, the color change produced immediate administrative effects: restricted travel, restricted lodging, and denial of entry. One database field replaced summons, detention, and visible police action. Movement control could appear as pandemic protection.
The official accountability finding shows that the assignment violated the health-code purpose, but authorities did not publish a complete account of list generation, approval, or technical logs. The system could act because local governments, grid-style community offices, and platform permissions were already capable of rewriting a financial identity as a health risk.
Purpose limitation failed and stability control took over a public service
China's personal-information and data-security rules require defined purposes, access controls, and safeguards. In Henan, a financial petition was treated as a stability risk. The more centralized the interface, the easier it becomes to turn a public service into an immediate penalty for dissent. [5] [6]
Local authorities faced village-bank risk, collective depositor action, and pressure to maintain order. Calling the red code a “pandemic issue” delayed financial accountability, blocked gatherings, and bought time for public attention to fade. Responsibility was assigned to operators and grassroots officials, while the political benefit remained with the authorities controlling the system.
Discipline did not resolve the deposits or the rights violation
The official finding and punishments establish that identified depositors were improperly restricted. The fate of bank funds, supervisory failures, and compensation are separate questions, and red-code discipline did not replace a financial investigation. Depositors also received no independent hearing, data access, or complete appeal record.
Discipline reduced a system-wide abuse to misconduct by a few operators. Unless permission structures and local stability incentives change, another list can enter a health-code, social-security, or transport system after personnel are replaced.
The event exposed the real boundary of data governance
Public-security video, health-code, and grassroots grid systems can record, classify, and restrict people. The Henan case does not show that every locality acted this way. It does show that without purpose limitation, audit trails, and independent review, a public-service interface can quickly leave its original function. [3] [4]
Depositors wanted their money back and answers about supervision. The local Party-state system supplied a color change and a movement ban. Digital governance here did not improve service. It wrote stability commands into a database so citizens could lose the ability to move and organize before they had even spoken.
What the available sources establish
Official accountability information after the Henan village-bank incident confirmed that health codes were improperly used to restrict identified depositors.
Sources
Official Accountability Record on the Henan Red-Code Incidentprimary-recordRedirected
Investigation into Red Health Codes Assigned to Henan Bank Depositorsinvestigative-reportingLive
Regulation on Public Security Video Image Information Systemsprimary-recordLive
MPS Rules for Public Security Video Information Systemsprimary-recordUnavailable
Personal Information Protection Law of the PRCprimary-recordLive
Data Security Law of the PRCprimary-recordLive
Provisions on the Administration of Internet User Account Informationprimary-recordLive
Provisions on Algorithmic Recommendation in Internet Information Servicesprimary-recordLive
China's Algorithms of Repression: Reverse Engineering a Xinjiang Police Apptechnical-researchLive
We Chat, They Watchtechnical-researchLive
Censored Contagion IItechnical-researchLive
OHCHR Assessment of Human Rights Concerns in Xinjiangofficial-findingLive