diff --git a/infra/conf/vless.go b/infra/conf/vless.go
index 1c8ababfd..8c72c730c 100644
--- a/infra/conf/vless.go
+++ b/infra/conf/vless.go
@@ -312,6 +312,8 @@ func (c *VLessOutboundConfig) Build() (proto.Message, error) {
 				if err := json.Unmarshal(rawUser, account); err != nil {
 					return nil, errors.New(`VLESS users: invalid user`).Base(err)
 				}
+				// validateOutboundTransportSecurity needs to see this
+				c.Encryption = account.Encryption
 				if account.Reverse != nil { // may not be reached: error json unmarshal
 					return nil, errors.New(`VLESS users: please use simplified outbound's config style to use "reverse"`)
 				}