TH v13.3.0
content: ai_generated 110 sources retrieved model claude-opus-4-8 · 2026-06-27

Thailand

TH schema world-payments-v1 trajectory: not yet assessed

Last updated · 14 modules · 53 sourced findings · 124 sources in the cumulative register

14Modulesbaseline.modules[]
53Findingsmodules[].findings[]
15Tier-1 sourcesrun_metadata.t1_source_count
Confidence mix (sums to 14 rendered modules; click to filter)

Jurisdiction brief

Latest update · 18 October 2026

Lead Signal

The Bank of Thailand has undertaken its largest organisational restructuring in 27 years, creating three dedicated operational lines covering non-bank providers, consumer protection and payment systems, including a new Payment Service Provider Policy and Supervision Division. This is a structural governance shift rather than a single new rule, and it arrives alongside the first concrete products of Thailand's virtual-banking reform: CLICX Bank Public Company Limited, the Krungthai-AIS-OR consortium's vehicle, has officially received its virtual banking licence from the Bank of Thailand and is targeting a June 2026 service launch as the country's first branchless commercial bank.

14 of 14 modules
Signal
Density

Selections OR within a group, AND across groups. Press / to search.

#

Payment businesses in Thailand are licensed under the Payment Systems Act B.E. 2560 (2017), supervised by the Bank of Thailand. BOT released for public comment (23 July 2026) a draft Notification on Digital Channel Security extending mandatory security requirements beyond mobile banking to internet banking and credit-card/credit providers, phasing out SMS OTPs and mandating biometric verification for high-value transactions.

Movement — CHANGEDBOT 27-year restructuring; CLICX virtual bank licensedMajor organisational restructuring and virtual bank licence grant are new material developments this cycle.
Standing sub-brief · as of 27 June 2026270 words · last cycle 2026-10-18

Licensing, Authorisation & Market Access

Thailand's licensing perimeter is anchored in the Payment Systems Act B.E. 2560 (2017), in force 16 April 2018, consolidating prior e-payment laws under Bank of Thailand oversight; BOT maintains a public register of Designated Payment Systems and Services providers. This is the supervisor and statute any payments operator must engage with to enter the Thai market, and non-bank applicants are eligible without a banking background.

Periodic update · new data 2026-10-18

Licensing, Authorisation & Market Access

The Bank of Thailand has undertaken its largest organisational restructuring in 27 years, creating three dedicated operational lines: non-bank providers, consumer protection, and payment systems, the last including a newly established Payment Service Provider Policy and Supervision Division. This is a structural supervisory reorganisation rather than a single new statute, and it reshapes how licensing and ongoing supervision will be administered across bank and non-bank payment-service providers going forward. Against that backdrop, CLICX Bank Public Company Limited, the vehicle for the Krungthai-AIS-OR consortium, officially received its virtual banking licence from the Bank of Thailand and is targeting a June 2026 service launch as the country's first branchless commercial bank. CLICX is one of three virtual-bank consortia, the others being CP Group with Ascend Money and SCBX with KakaoBank, approved by the Bank of Thailand in June 2025 out of five original applicants; each approved consortium is required to begin operations within one year of approval, making CLICX's licensing this cycle a concrete marker of that cohort's progress toward market entry.

Outlook

Whether CLICX meets its targeted June 2026 launch, and how the remaining two virtual-bank consortia progress toward their own one-year operational deadlines, are the clearest near-term markers for Thailand's virtual-banking market-access picture. The practical effect of the BOT's new three-line supervisory structure on licensing timelines and ongoing compliance expectations for both bank and non-bank payment-service providers is a second, slower-moving marker to watch.

4 earlier distinct update(s)
Periodic update · new data 2026-10-11

Licensing, Authorisation & Market Access

The Bank of Thailand's Systemically Important Retail Payment System framework became effective 21 February 2026, establishing a dedicated supervisory category for retail payment systems whose scale or interconnectedness makes their disruption a systemic concern. PromptPay, Thailand's dominant real-time retail payment rail, was designated as the first system to fall under this category, marking the first time a Thai retail payment system has been brought under dedicated systemic-infrastructure oversight rather than general payment-service-provider regulation under the Payment Systems Act B.E. 2560.

This designation sits within, rather than alongside, the existing Payment Systems Act framework: it creates a new oversight tier above standard payment-service authorisation, reflecting PromptPay's role as critical national payments infrastructure. For market participants, the designation signals that the Bank of Thailand now treats the operational resilience and systemic risk profile of PromptPay with a distinct regulatory lens from that applied to ordinary licensed payment service operators, a lens that is likely to extend to any future payment system reaching comparable scale.

Outlook

The SIRPS framework is newly effective rather than newly proposed; the item to watch is whether any additional payment system is designated under the framework in future cycles, which would indicate the Bank of Thailand is applying the systemic-infrastructure category beyond PromptPay alone.

Periodic update · new data 2026-09-28

Licensing, Authorisation & Market Access

The Bank of Thailand issued a draft Notification on Digital Channel Security on 23 July 2026, with the comment period closing 24 August 2026. The draft extends mandatory security requirements beyond mobile banking to internet banking and to credit-card and credit providers -- a meaningful widening of the regulatory perimeter, since these categories had previously sat outside the mobile-banking-focused security regime. Substantively, the draft phases out SMS one-time passwords for transaction authentication and mandates biometric verification for high-value transactions. This is a T1-sourced, Confirmed-confidence development, and it carries direct market-access implications for both bank and non-bank credit and payment providers operating in Thailand, since compliance with the new authentication standards will be a condition of continued digital-channel operation once the notification is finalised.

Alongside this security-standards tightening, the Bank of Thailand has also issued Notification No. 23/2569, standardising 19 banking-fee items across four categories, with phased implementation running through October 2026. This is a Probable-confidence, T3-sourced development. Taken together, the two notifications point to simultaneous regulatory attention to both the security and cost dimensions of digital banking access in Thailand this cycle -- a bank-PSP-relevant tightening that applies across the digital-channel landscape rather than to a single product line.

Outlook

The draft Digital Channel Security Notification's comment period has closed, and finalisation is the next milestone to watch, expected around Q4 2026 based on the consultation timeline. The fee-standardisation notification's phased rollout continues through October 2026, and full implementation by that date is the concrete near-term milestone for this module.

Periodic update · new data 2026-09-21

Licensing, Authorisation & Market Access

Bank of Thailand's Systemically Important Retail Payment System framework took effect on 21 February 2026 under the Payment Systems Act B.E. 2560, with PromptPay designated as the first payment system to carry SIRPS status. This designation attaches expanded supervisory obligations that apply to the system and its participants rather than to any single institution, and it applies without regard to whether a given participant is a bank or a nonbank payment service provider.

Wise, already Bank-of-Thailand-licensed, launched direct integration into PromptPay on 19 May 2026, enabling scan-and-pay functionality via PromptPay QR and ThaiQR without routing through a sponsoring bank. This is a market-access development distinct from the SIRPS designation itself: it demonstrates that Thailand's licensing regime now supports a nonbank PSP obtaining direct rail access to a newly systemic payment system, a bank-versus-nonbank access question that carries forward into subsequent cycles.

Outlook

The immediate item to watch is how Bank of Thailand applies SIRPS-attendant obligations differentially, if at all, across bank and nonbank participants including Wise. A second nonbank PSP following Wise's direct-access precedent would confirm this cycle's development as a structural opening rather than a one-off licensing decision.

Periodic update · new data 2026-08-11

Licensing, Authorisation & Market Access

The Bank of Thailand designated PromptPay as Thailand's first Systemically Important Retail Payment System, effective 21 February 2026, under the authority of the Payment Systems Act B.E. 2560 [wpm-2026-W1a-001]. The Systemically Important Retail Payment System framework is itself new to Thailand's regulatory architecture, and PromptPay's designation as the inaugural instrument under it formalises what has long been true in practice: PromptPay is the backbone of Thailand's retail instant-payments ecosystem, and its systemic designation brings it under a heightened supervisory regime spanning both the bank and non-bank participants that rely on the rail.

Separately, the Bank of Thailand granted Thailand's first Virtual Bank licence on 14 May 2026, under Notification FPG.6/2567, to CLICX, a consortium formed by Krungthai Bank, AIS and PTT Oil and Retail Business, with a targeted June 2026 launch [wpm-2026-W1a-002]. This is a market-access event of a different character to the SIRPS designation: rather than formalising oversight of existing infrastructure, it opens an entirely new licensed channel to market, combining a state-linked bank, a mobile-network operator and a retail-and-energy conglomerate in a single bank-chartered entity.

Both developments should be read against the bank-PSP versus non-bank-PI/EMI distinction that structures Thailand's payments market access. The SIRPS designation applies to PromptPay as shared infrastructure used by both bank and non-bank participants, while the virtual-bank licence is, by definition, a bank-charter route, meaning CLICX will operate under full banking-sector prudential requirements rather than the lighter payment-institution or e-money-institution regimes available to non-bank players. For non-bank PSPs and EMIs, the practical market-access lesson this cycle is that Thailand's most significant new licensing pathway remains a bank-charter route, even as the SIRPS framework extends systemic oversight to infrastructure non-bank participants also depend on.

Outlook

CLICX's targeted June 2026 launch is the immediate marker to watch: a successful, on-schedule launch would validate the consortium-licensing model and likely encourage further virtual-bank applications, while delay would signal implementation friction in Thailand's newest bank-charter pathway. Separately, watch for whether the Bank of Thailand extends the Systemically Important Retail Payment System designation beyond PromptPay to other retail payment infrastructure.

Sources and findings (5)
  1. T1https://www.bot.or.th/en/our-roles/payment-systems/payment-act-oversight.htmlretrieved
  2. T1https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2561/EngPDF/25610195.pdfretrieved
  3. T1https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2561/EngPDF/25610100.pdfretrieved
  4. T3https://paymentbrief.com/markets/thailand/retrieved
  5. T3https://kpmg.com/th/en/home/insights/2023/03/legal-news-update-issue-23.htmlretrieved

#

Under the Emergency Decree, banks, e-money providers, digital-asset operators and telcos carry joint/pro-rata liability for technology-crime losses absent demonstrated compliance. BOT has added youth-specific transfer caps (rollout Sep-Oct 2026) atop the existing mule-account taxonomy and Central Fraud Registry; SEC has imposed pro-rata liability on digital-asset operators for mule-account failures.

Standing sub-brief · as of 27 June 2026173 words · last cycle 2026-10-18

Conduct, Safeguarding & Financial Promotions

Bank of Thailand minimum operating requirements for payment providers include good governance, risk management, consumer protection, security standards, business continuity planning and KYC policies, with the stated aim of protecting retail customers; these are supplemented by the Consumer Protection Act, the Electronic Transactions Act and the PDPA. Conduct and safeguarding obligations flow from BOT notifications issued under the PSA, and a vulnerable-customer concept appears in the BOT Market Conduct notification FPG.6/2565. This conduct framework applies to both bank-PSP and non-bank PI/EMI providers.

Periodic update · new data 2026-10-18

Conduct, Safeguarding & Financial Promotions

Bank of Thailand Notification No. 23/2569 standardised and reduced bank and credit-card service fees, with implementation beginning the day after publication in the Royal Gazette and phased adjustments continuing through October 2026. The measure is a direct conduct-level intervention aimed at reducing transaction costs for consumers and small and medium enterprises, and it sits alongside the Bank of Thailand's broader organisational restructuring, which created a dedicated consumer-protection operational line as one of three new supervisory divisions. Together, the standardised-fee reform and the new consumer-protection line indicate a conduct-regulation environment that is actively tightening rather than static, with the restructuring providing institutional capacity behind the substantive fee-reduction measure.

Outlook

The phased adjustments to standardised fees running through October 2026 are the immediate marker to track for whether the reform's cost-reduction goals are being realised on schedule. Beyond that, how the newly created consumer-protection supervisory line uses its mandate in practice, including whether further conduct rules follow the fee-standardisation measure, will determine whether this cycle's structural change translates into further substantive conduct requirements.

1 earlier distinct update(s)
Periodic update · new data 2026-08-11

Conduct, Safeguarding & Financial Promotions

Thailand's fraud-liability framework tightened materially this cycle, extending across both bank and non-bank participants. The Bank of Thailand is introducing daily digital-transfer caps for young account holders, a direct response to a 70.3 percent rise in youth mule accounts, from 3,371 to 5,741, recorded between January 2025 and March 2026 [wpm-2026-W1b-001]. Rollout is staged, with banks required to implement the caps by September 2026 and e-money providers following in October 2026.

This bank-and-e-money-sector measure sits within a wider liability architecture, and the Securities and Exchange Commission has now extended a comparable obligation into the digital-asset sector: a parallel SEC Notification imposes pro-rata liability on digital-asset business operators for mule-account-standard failures, apportioning liability among digital-asset operators, financial institutions, payment-system operators, customers and other relevant parties, with explicit reference to AMLO's HR-03-01 and HR-03-02 typology codes [wpm-2026-W1b-002]. The cross-reference to AMLO's own case-classification codes is a notable conduct-regulation detail: it means the SEC's liability standard for digital-asset operators is being calibrated directly against the national financial-intelligence unit's typology framework.

Read together, these two developments describe a single, cross-sector fraud-liability regime rather than two independent conduct rules: banks, e-money providers, payment-system operators and digital-asset business operators are all being brought within a comparable pro-rata liability standard for mule-account failures, on broadly overlapping implementation timelines.

Outlook

The September and October 2026 rollout deadlines for bank and e-money youth transfer caps respectively are the clearest near-term compliance markers. Firms across all four affected sector categories should expect continued regulatory attention to how effectively the joint and pro-rata liability framework is enforced once the caps take effect.

Sources and findings (4)
  1. T1https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2561/EngPDF/25610093.pdfretrieved
  2. T3https://multilaw.com/Multilaw/ZENTSO/BusinessGuides/Presentation/Section_Home.aspx?GuideId=2&GuideCountry=Thailand&GuideSection=547retrieved
  3. T1https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2565/EngPDF/25650188.pdfretrieved
  4. T3https://stripe.com/resources/more/how-to-accept-credit-card-payments-in-thailandretrieved

#

USDT/USDC approved for regulated trading (16 Mar 2025); BOT THB-stablecoin Programmable Payment sandbox expanding; means-of-payment prohibition retained; dedicated statute pending.

Horizon · 2026 (±year)Thailand dedicated THB-stablecoin regulatory frameworkconsultation · T3
Standing sub-brief · as of 27 June 2026224 words · last cycle 2026-08-05

Stablecoins & Digital Money

Thailand's digital-money posture liberalised at the trading layer in 2025 while preserving a firm payments boundary. On 16 March 2025 the SEC officially approved inclusion of USDC and USDT in the list of permitted cryptocurrencies for digital-asset transactions, following a February 2025 public consultation, while reaffirming the prohibition on using digital assets as a general means of payment for goods and services. Previously only BTC, ETH, XRP, XLM and certain BOT settlement-system tokens were approved. The approval admits USDT/USDC to regulated digital-asset trading, but the means-of-payment prohibition keeps stablecoins out of Thai retail payment instruments.

Periodic update · new data 2026-08-11

Stablecoins & Digital Money

Thailand's digital-asset oversight advanced on two distinct but parallel tracks this cycle. On the tightening track, the Securities and Exchange Commission's News No. 51/2026, effective 1 March 2026, expanded the definitions of institutional investor and eligible investment capital to include digital asset business operators, while News No. 54/2026, issued 10 March 2026, opened a formal consultation on Travel Rule requirements for digital-asset transfers by licensed operators [wpm-2026-W2-001]. Neither announcement is anchored by a primary sec.or.th source retrieved this cycle, a coverage gap worth flagging even as the substantive direction is reasonably clear from secondary reporting.

On the market-building track, a Bank of Thailand and SEC sandbox continues to cover tokenisation, stablecoin, deposit-token and e-money-token payment and settlement use cases, building on a Cabinet-approved draft of tokenised-electronic-securities amendments from June 2025 [wpm-2026-W2-002]. This sandbox work runs on a separate track to the Travel Rule tightening: it represents active regulatory engagement with new payment-instrument forms rather than compliance-perimeter tightening for existing digital-asset activity.

The coexistence of these two tracks in a single cycle is itself the notable finding: Thai authorities are pursuing both AML/CFT tightening and sandbox-based innovation-enablement simultaneously rather than treating digital-asset oversight as a binary choice between the two.

Outlook

The close of the SEC's Travel Rule consultation, expected within the current half-year uncertainty band, is the clearest near-term marker on the tightening track. On the market-building track, watch for further detail on the tokenised-electronic-securities amendments following the June 2025 Cabinet approval, and for any indication the BOT-SEC sandbox is moving toward a formal stablecoin framework.

Sources and findings (4)
  1. T3https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/thailand/retrieved
  2. T3https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developmentsretrieved
  3. T3https://www.lexology.com/library/detail.aspx?g=a3817f0d-fa22-4594-98e7-bff1d3e22971retrieved
  4. T3https://www.coindesk.com/policy/2025/03/10/thailand-regulator-adds-usdc-usdt-stablecoins-to-approved-cryptocurrenciesretrieved

#

Operational resilience for payment providers is governed by BOT IT-risk supervision and information-security notifications under the PSA, requiring business-continuity planning, incident response, backup systems and third-party/outsourcing oversight. BOT issued AI Risk Management Guidelines for financial service providers in September 2025 and aligns with the National Cybersecurity Act B.E. 2562 (2019).

Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. Open this jurisdiction's page on Dataprotection.gi →

Standing sub-brief · as of 27 June 2026164 words · last cycle 2026-10-04

Operational Resilience & Critical Infrastructure

Bank of Thailand released AI Risk Management Guidelines for Financial Service Providers on 12 September 2025, building on June 2025 drafts, applicable to financial institutions and to payment providers under the Payment Systems Act and structured around governance and AI development/security controls. Resilience is supervised via BOT IT-risk notifications under the PSA and aligns with the National Cybersecurity Act B.E. 2562 (2019) and the Royal Decree on Technology Crimes (No.2) B.E. 2568.

Periodic update · new data 2026-09-28

Operational Resilience & Critical Infrastructure

The Bank of Thailand's draft Digital Channel Security Notification, issued 23 July 2026 with comments due 24 August 2026, is directly a critical-infrastructure and operational-resilience development as much as a licensing one. It would phase out SMS one-time passwords for transaction authentication fleet-wide across internet banking and credit-card/credit provider channels, and would mandate biometric verification for high-value transactions. This represents a fundamental technical-infrastructure change for any provider currently relying on SMS-OTP as its primary transaction-authentication mechanism: institutions will need to build or procure biometric-verification capability ahead of the notification's eventual effective date.

This is a T1-sourced, Confirmed-confidence development, and its operational-resilience significance lies in the scale of the authentication-infrastructure migration it would require across the Thai digital-banking and payments sector simultaneously, rather than through a phased, provider-by-provider rollout.

Outlook

The comment period on this draft closed 24 August 2026. Finalisation, expected around Q4 2026, will set the definitive timeline by which affected providers must complete the SMS-OTP-to-biometric authentication migration this notification would require.

Sources and findings (4)
  1. T1https://www.bot.or.th/en/our-roles/payment-systems/information-technology-risk-supervision.htmlretrieved
  2. T3https://www.tilleke.com/insights/thailand-issues-ai-risk-management-guidelines-for-financial-service-providers/25/retrieved
  3. T1https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2551/EngPDF/25510316.pdfretrieved
  4. T3https://techforgoodinstitute.org/insights/country-spotlights/rules-in-action-thailands-evolving-tech-governance/retrieved

#

Card payments in Thailand operate over Visa, Mastercard and local networks under BOT supervision and PCI DSS, with BOT terms regulating card-fee collection and limiting additional surcharging except as permitted. Thailand does not operate an EU-style statutory interchange cap; pricing is governed by scheme rules plus BOT fairness/transparency terms. The national QR standard is BOT-mandated and interoperable.

Standing sub-brief · as of 27 June 2026181 words · last cycle 2026-06-27

Scheme & Network Compliance

Card processing in Thailand is supervised by BOT and must comply with PCI DSS; BOT terms regulate fair and transparent collection of credit-card fees, and providers cannot charge additional fees for card use except as permitted by BOT. Crucially, Thailand does not operate an EU-style statutory interchange cap; pricing is governed by scheme rules plus BOT fairness terms. The BOT-mandated interoperable QR standard and near-zero PromptPay MDR exert downward pressure on card economics, where card MDR runs approximately 1.5–2.5%.

no periodic updates on record for this sub-brief

Sources and findings (3)
  1. T3https://stripe.com/resources/more/how-to-accept-credit-card-payments-in-thailandretrieved
  2. T2https://www.visa.co.th/en_TH/support/small-business/regulations-fees.htmlretrieved
  3. T3https://paymentbrief.com/markets/thailand/retrieved

#

Bank of Thailand is enforcing baht-only settlement for regulated payment providers and has suspended roughly 5,000 accounts (Feb 2025-May 2026) linked to peer-to-peer renminbi payment activity; personal QR payments via platforms such as Alipay/WeChat Pay may not be processed in yuan.

Horizon · 2026 (±year)Project Nexus multilateral instant-payment rollout (Thailand participating)in_force_pending · T3
Standing sub-brief · as of 27 June 2026185 words · last cycle 2026-08-21

Payment Corridor Dynamics

Thailand is a regional leader in instant cross-border account-to-account payments. MAS and BOT launched the PayNow-PromptPay linkage in 2021 — the first real-time payment-system linkage globally — enabling real-time transfers up to S$1,000/THB25,000 daily using a mobile number, completing within minutes versus one to two working days for legacy remittance. Corridor coverage now spans Singapore, Malaysia, Indonesia, Vietnam, Cambodia, Lao PDR, Hong Kong and Japan under the ASEAN Regional Payment Connectivity initiative.

Periodic update · new data 2026-09-21

Payment Corridor Dynamics

Bank of Thailand has enforced baht-only settlement for regulated payment service providers, and approximately 5,000 accounts linked to peer-to-peer renminbi payment activity were suspended between February 2025 and May 2026. Personal QR payments processed through Alipay/WeChat Pay-type platforms may not be settled in yuan under this enforcement posture, narrowing an informal cross-border corridor that had allowed yuan-denominated flows to route through Thai retail payment rails.

This is a corridor-restriction development rather than a blanket prohibition on cross-border payment activity: the restriction targets currency-of-settlement rather than the underlying cross-border use case, meaning properly baht-settled cross-border payment activity through regulated channels is not itself affected by this enforcement action.

Outlook

The scale of the account-suspension figure — approximately 5,000 accounts over a fifteen-month enforcement window — suggests sustained rather than one-off enforcement activity, and further suspensions in subsequent reporting periods would confirm the corridor restriction as an ongoing regulatory posture rather than a completed one-time action.

Sources and findings (4)
  1. T1https://www.mas.gov.sg/news/media-releases/2021/singapore-and-thailand-launch-worlds-first-linkage-of-real-time-payment-systemsretrieved
  2. T1https://www.bot.or.th/en/financial-innovation/digital-finance/digital-payment/cross-border-payment.htmlretrieved
  3. T3https://ps-engage.com/cross-border-qr-payments-driving-asias-digital-integration/retrieved
  4. T1https://www.hkma.gov.hk/eng/news-and-media/press-releases/2014/07/20140728-3/retrieved

#

Thailand's payments market is large, fragmented and competitive, anchored by mass-market PromptPay (90M+ registered accounts on a ~72M population) and a concentrated e-wallet segment led by TrueMoney (Ascend Money). Bank-PSP and fintech players coexist; foreign processors (2C2P, Opn, Adyen, Stripe, Checkout.com) typically enter via local licensing or partnership. Virtual banks awarded mid-2025 will reshape structure from 2026.

Horizon · 2026-Q2 (±half_year)Thailand virtual banks commence operationsin_force_pending · T3
Standing sub-brief · as of 27 June 2026178 words · last cycle 2026-10-11

Industry Structure & Commercial Dynamics

The Thai e-wallet segment is concentrated: TrueMoney holds roughly 53% of the market with 17M+ active users, with Rabbit LINE Pay around 25% share. Most foreign operators enter via licensed Thai PSPs such as 2C2P (acquired by Ant in 2022), Opn, Adyen, Stripe and Checkout.com, shaping market-access strategy through local licensing or partnership. Mass-market PromptPay, with 79M+ IDs, anchors the A2A layer beneath this competitive non-bank wallet segment.

Periodic update · new data 2026-10-11

Industry Structure & Commercial Dynamics

The Bank of Thailand issued notifications this cycle tightening qualification requirements for payment service operators under the Payment Systems Act B.E. 2560. The development is sourced from secondary legal commentary; the primary BOT notification text was not independently retrieved this cycle, so the precise scope of the tightened qualification criteria is not established beyond the general direction indicated by the secondary source.

Qualification tightening of this kind typically raises the bar for market entry and continued authorisation for non-bank payment institutions and e-money issuers operating under the Payment Systems Act, which may have structural implications for industry concentration if smaller or newer entrants face a higher compliance threshold than previously in force. The non-bank payment-institution and e-money-issuer population is the segment most directly affected by a qualification-requirement change of this kind, given that bank-operated payment services typically already meet a higher baseline prudential standard under separate banking regulation.

Outlook

Primary BOT notification text for the qualification tightening has not yet been retrieved; confirming its precise scope and the population of payment service operators it reaches is the item to watch in upcoming reporting windows.

1 earlier distinct update(s)
Periodic update · new data 2026-09-21

Industry Structure & Commercial Dynamics

Thailand granted three digital-bank licences in April 2025: to a Krungthai-AIS-Gulf-OR consortium, an SCBX-KakaoBank-WeBank consortium, and an Ascend Money-Ant International consortium. These licensees represent Thailand's most significant recent bank-sector market-structure change, each anchored by a telecommunications, technology, or overseas-banking partner rather than by an incumbent Thai bank alone.

Wise's BOT-licensed nonbank entry, with direct PromptPay integration live from 19 May 2026, adds a further competitive vector distinct from the digital-bank licensees: it is a nonbank PSP gaining direct access to the incumbent instant-payment rail rather than a new licensed bank entering deposit-taking competition. Together, the three digital-bank licences and Wise's nonbank entry represent two structurally different forms of new competitive pressure on Thailand's payments incumbents within the same reporting cycle.

Outlook

Whether the new digital-bank licensees begin offering PromptPay-adjacent or SIRPS-participant services directly is the structural question to watch; such a move would complete a three-way competitive convergence between incumbent banks, digital-bank licensees, and nonbank PSPs on Thailand's core retail payment rail.

Sources and findings (3)
  1. T3https://multilaw.com/Multilaw/ZENTSO/BusinessGuides/Presentation/Section_Home.aspx?GuideId=2&GuideCountry=Thailand&GuideSection=547retrieved
  2. T3https://paymentbrief.com/markets/thailand/retrieved
  3. T3https://www.forvismazars.com/th/en/insights/doing-business-in-thailand/audit/what-thailand-s-financial-services-firm-must-watchretrieved

Enforcement in the payments-adjacent space is currently dominated by SEC digital-asset actions and cyber-fraud prosecutions. In 2025 the SEC pursued licence revocations and criminal complaints against unlicensed operators, blocked five offshore exchanges (Bybit, 1000X, CoinEx, OKX, XT.COM) from 28 June 2025, and in early 2026 filed criminal complaints over joint unlicensed exchange operations and Worldcoin-related trading. Cyber-fraud prosecutions under the 2025 Royal Decree carry up to 20-year sentences.

Standing sub-brief · as of 27 June 2026117 words · last cycle 2026-06-27

Legal & Litigation

Digital-asset enforcement sharpened in 2025. On 29 May 2025 the SEC identified Bybit, 1000X, CoinEx, OKX and XT.COM as operating illegally and filed complaints with the Economic Crime Suppression Division; MDES issued blocking orders effective 28 June 2025 under the Royal Decree on Technology Crimes (No.2) B.E. 2568. This is a dated dashboard entry: the announcement date is timezone-dependent (29–30 May 2025) while the 28 June 2025 blocking date is consistently confirmed; the finding is carried at Assessed.

no periodic updates on record for this sub-brief

Sources and findings (3)
  1. T3https://aimbangkok.com/thailand-digital-asset-regulation-2025/retrieved
  2. T3https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developmentsretrieved
  3. T3https://www.nortonrosefulbright.com/en/knowledge/publications/a9c07f1f/regulation-of-digital-assets-takes-effect-in-thailandretrieved

#

Acquiring in Thailand is a PSA-designated payment service requiring a Designated Payment Service Licence; acquirers must route settlement through licensed banks, comply with PCI DSS, maintain fraud-prevention and cardholder-data protection, store and report transaction data to BOT, and apply AML/KYC with STR reporting to AMLO. Chargeback/dispute mechanics follow scheme rules incorporated through acquirer agreements.

Standing sub-brief · as of 27 June 2026110 words · last cycle 2026-06-27

Merchant Acquiring & Risk

Acquiring is a PSA-designated payment service requiring a Designated Payment Service Licence. BOT requires acquirers to route all settlements through licensed banks, comply with PCI DSS, implement fraud-prevention and cardholder-data protection, store transaction data and report to BOT, with AML/KYC checks and AMLO reporting; BOT may suspend or revoke acquiring licences for violations. Chargeback and dispute mechanics follow scheme rules incorporated through acquirer agreements. These obligations apply to both bank and non-bank acquirers.

no periodic updates on record for this sub-brief

Sources and findings (3)
  1. T3https://kpmg.com/th/en/home/insights/2023/03/legal-news-update-issue-23.htmlretrieved
  2. T3https://khonsulegal.com/tpost/6ign94al31-financial-licenses-in-thailandretrieved
  3. T3https://www.pxp.io/payments-glossary/card-scheme-rulesretrieved

#

Thailand is highly innovation-active: PromptPay underpins instant A2A and QR, with PromptBiz for businesses, an active BOT regulatory sandbox, programmable-payment/THB-stablecoin testing, National Digital ID (NDID) for KYC, and ongoing retail CBDC and mBridge cross-border research. Open-banking remains early-stage (dStatement since 2022; API standards not yet finalised).

Movement — NEWBOT signals direct BNPL supervision by end-2026First reported signal of dedicated BNPL supervisory rules.
Standing sub-brief · as of 27 June 2026114 words · last cycle 2026-10-18

Product Innovation & Market Development

Thailand's primary real-time rails are PromptPay, BAHTNET and PromptBiz. PromptPay, launched in 2016, settles in up to 60 seconds, 24/7, using a mobile number or national ID, operated by National ITMX with final interbank settlement via BAHTNET using ISO 20022 messaging. Open banking remains early-stage: dStatement has operated since January 2022, but API standards are not finalised, and NDID (2018) underpins reusable KYC. The rails serve both bank and non-bank participants.

Periodic update · new data 2026-10-18

Product Innovation & Market Development

The Bank of Thailand has signalled plans to bring Buy-Now-Pay-Later lending under direct supervision, with new regulations targeted for end-2026 that would address loan limits, interest caps and disclosure requirements. A stated key principle behind the forthcoming rules is that BNPL loans must provide clear, complete and easy-to-understand information without encouraging borrowing, indicating the regulatory direction is oriented toward consumer-facing disclosure and responsible-lending safeguards rather than prohibition of the product itself. This represents an escalation from a product that has so far operated with less direct regulatory structure toward one brought formally within the Bank of Thailand's supervisory perimeter for non-bank lending-adjacent payment products.

Outlook

The finalisation of the dedicated BNPL regulations targeted for end-2026, and specifically the actual loan-limit and interest-cap figures they set, are the clearest markers to watch; these details were not available this cycle and will determine the practical compliance burden the new regime places on BNPL providers operating in Thailand.

1 earlier distinct update(s)
Periodic update · new data 2026-09-28

Product Innovation & Market Development

Thailand's stablecoin product-development landscape advanced on two separate tracks this cycle. First, the Bank of Thailand's Programmable Payment Sandbox was expanded in December 2025 to safely test Thai-baht-backed stablecoins, a T1-sourced, Probable-confidence development that continues the sandbox's function as a controlled testing environment for programmable-payment innovation rather than a general-market product launch. Second, SEC Thailand has proposed a daily cap on stablecoin transfers together with a same-owner-wallet requirement for transfers via licensed digital-asset operators; this proposal is T4-sourced with Uncertain confidence, reflecting that it rests on aggregator-tier reporting rather than a directly retrieved primary consultation document.

Read together, these two developments suggest Thailand's regulatory instinct toward stablecoin products is to control risk at the transfer/movement layer -- caps and wallet-ownership verification -- rather than at the issuance layer, a distinct product-development environment from jurisdictions that regulate stablecoin issuance directly through a dedicated statute. Separately, a digital-asset Travel Rule is scheduled to take effect on 27 February 2027, requiring operators to retain transaction information for at least five years; this is a forward-dated regulatory milestone relevant to product-development planning for any digital-asset-adjacent payment product, though its effective date remains well over a year out from this cycle.

Outlook

The SEC stablecoin transfer-cap consultation closed 25 September 2026; its outcome will determine whether Thailand formalises transfer-layer controls that product teams building stablecoin-adjacent payment products will need to design around. The Travel Rule's 27 February 2027 effective date is the furthest-dated fixed milestone on this module's horizon.

Sources and findings (4)
  1. T3https://www.lightspark.com/knowledge/instant-payments-thailandretrieved
  2. T3https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developmentsretrieved
  3. T3https://silklegal.com/what-foreign-investors-need-to-know-licensing-and-market-entry-for-digital-asset-businesses-in-thailand/retrieved
  4. T3https://paymentbrief.com/markets/thailand/retrieved

#

Emergency Decree on Technology Crimes (No.2) B.E. 2568, effective 13 Apr 2025, establishes negligence-based shared liability among banks, telcos, e-wallets and platforms with mandatory SMS screening, mule-account penalties and victim compensation.

Standing sub-brief · as of 27 June 2026183 words · last cycle 2026-10-18

Consumer Protection & APP Fraud

The Emergency Decree on Measures for the Prevention and Suppression of Technology Crimes (No.2) B.E. 2568, published 12 April 2025 and effective 13 April 2025, establishes a shared-liability framework where banks, telcos, digital-wallet providers and platforms are collectively responsible for scam losses assessed on negligence, with mandatory SMS screening, mule-account penalties and a victim compensation mechanism. National Assembly approval followed on 28 May 2025. The framework materially shifts fraud-loss allocation onto banks, e-wallet providers, telcos and platforms operating in Thailand, and applies to both bank and non-bank actors.

Periodic update · new data 2026-10-18

Consumer Protection & APP Fraud

The Bank of Thailand's organisational restructuring created a dedicated consumer-protection operational line as one of three new supervisory divisions resulting from the central bank's largest reorganisation in 27 years, giving consumer protection a distinct institutional home within BOT's supervisory structure going forward. This structural change sits alongside the continuing phased implementation of Notification No. 23/2569's standardised and reduced bank and credit-card service fees, a substantive consumer-facing measure that began implementation the day after Royal Gazette publication and continues adjusting through October 2026. Together, the two developments indicate that consumer-protection conduct regulation in Thailand's payments sector is tightening, with new institutional capacity now in place to support continued fee-related and other consumer-facing interventions.

Outlook

How the newly dedicated consumer-protection supervisory line exercises its mandate beyond the current fee-standardisation measure, including whether it takes on a role in the forthcoming BNPL disclosure rules targeted for end-2026, is the development to watch for this module.

Sources and findings (4)
  1. T3https://www.about-fraud.com/thailand-legislation-to-combat-technology-related-crimes/retrieved
  2. T3https://www.biocatch.com/blog/thailand-royal-decree-financial-fraudretrieved
  3. T3https://www.libothai.com/post/protecting-victims-of-online-scams-in-thailand-legal-rights-and-remedies-for-foreign-residents-par-1retrieved
  4. T3https://www.nationthailand.com/news/general/40060662retrieved

#

sentinel.gi position carried: Thailand's AML/CFT regime is built on the Anti-Money Laundering Act B.E. 2542 (1999) and the CTPF Act B.E. 2559 (2016), with AMLO as FIU and supervisor. Thailand was grey-listed (2010/2011), exited in 2013/2015 and remains in APG enhanced follow-up; a February 2025 AMLA amendment package expanded predicate offences and reporting entities. Digital-asset operators are 'financial institutions' for AML purposes. Payments-context risks: mule accounts, QR-code laundering, cross-border scam-compound flows.

Standing sub-brief · as of 27 June 2026176 words · last cycle 2026-10-11

AML/CFT & Financial Crime

This module is sourced from the Sentinel feed (sentinel.gi); original illicit-finance analysis is routed to FIM and is not re-analysed here. Per Sentinel, the Cabinet approved a substantial AMLA amendment package on 25 February 2025, expanding the predicate-offence list (including nominee shareholding and digital-asset offences), adding reporting-entity categories and clarifying AMLO's inspection authority, as part of continued FATF alignment. Thailand remains in APG enhanced follow-up. Also per Sentinel, in its 2023 follow-up report Thailand was re-rated on Recommendations 1 and 26 from Partially to Largely Compliant, now holding 33 Recommendations Compliant/Largely Compliant with 6 remaining Partially Compliant, and remains in enhanced follow-up under the APG. Digital-asset operators are treated as 'financial institutions' under AMLA via the Emergency Decree on Digital Asset Businesses s.7. These surfaces apply to both bank and non-bank actors.

Periodic update · new data 2026-10-11

AML/CFT & Financial Crime

This intelligence is attributed to the Sentinel.gi feed. The Bank of Thailand proposed amendments expanding the scope of know-your-customer and due-diligence requirements for cash-related transactions at financial institutions, a proposal that would supersede BOT Notification No. 16/2569 once finalised. The proposal remains at consultation stage, with an expected outcome in the fourth quarter of 2026, and differs in its practical reach depending on whether a financial institution is a bank or a non-bank payment company, since cash-transaction handling volumes and existing KYC infrastructure differ materially between the two populations.

Outlook

The consultation outcome, expected in Q4 2026, is the item to watch; its final scope will determine the practical compliance burden for both bank and non-bank payment company populations handling cash-related transactions.

Sources and findings (4)
  1. T3https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/thailand/retrieved
  2. T?FIM (sentinel.gi) per-JID baseline profile — Thailand — AMLA 1999 (amended) with AMLO as FIU/supervisor; Emergency Decree on Digital Asset Businesses 2018 (SEC-regulated VASPs); 2022 NRA underpins 2022-2027 AML/CFT National Strategy; no beneficial ownership registry; DNFBP (real estate, gold/jewellery, casino) supervision remains weak per FATF follow-up findings.
  3. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: absent-field-provenance
  4. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: legal-gap

#

BAHTNET (launched 24 May 1995) is BOT's RTGS system providing final, irrevocable settlement for high-value interbank transfers, accessible to institutions holding current accounts at BOT and to qualifying juristic persons under defined access criteria; it provides collateralised intraday liquidity and serves as the settlement backbone for PromptPay (via National ITMX). Cross-border PvP links (e.g. HKMA USD CHATS) support FX settlement and correspondent-banking relationships. BAHTNET has migrated to ISO 20022.

Standing sub-brief · as of 27 June 2026201 words · last cycle 2026-06-27

Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank versus non-bank access asymmetry to settlement infrastructure. BAHTNET, launched 24 May 1995, is BOT's RTGS system providing final, irrevocable settlement for high-value interbank transfers, accessible to institutions with current accounts at BOT and qualifying juristic persons under defined Access Criteria. It provides unlimited collateralised intraday liquidity, settles in central bank money with immediate finality, and has migrated to ISO 20022; it is the settlement backbone for PromptPay via National ITMX, and was assessed against CPSS-IOSCO PFMI as a sound system. Access to central-bank-money settlement is structured around bank and qualifying-institution criteria, leaving non-bank PIs dependent on bank rails for final settlement.

no periodic updates on record for this sub-brief

Sources and findings (4)
  1. T1https://www.bot.or.th/en/our-roles/payment-systems/Payment-systems.htmlretrieved
  2. T1https://documents1.worldbank.org/curated/en/769411571259925337/pdf/Thailand-Assessment-of-Observance-of-the-CPSS-IOSCO-Principals-for-Financial-Market-Infrastructures-BAHTNET-and-TSD.pdfretrieved
  3. T1https://www.hkma.gov.hk/eng/news-and-media/press-releases/2014/07/20140728-3/retrieved
  4. T1https://www.imf.org/external/pubs/ft/scr/2009/cr09149.pdfretrieved

#

Three virtual-bank licences awarded 19 Jun 2025 to SCB X (WeBank/KakaoBank), Krungthai (Gulf/AIS/PTT OR) and ACM Holding/Ascend Money (CP/Ant International); operations required within one year.

Standing sub-brief · as of 27 June 2026215 words · last cycle 2026-08-05

Commercial Intelligence (M&A, Investment & Product)

The dominant commercial event this cycle is the award of Thailand's first virtual-bank licences. On 19 June 2025 the Ministry of Finance approved virtual-bank licences for three consortia — SCB X (with WeBank and KakaoBank), Krungthai Bank (with Gulf, AIS and PTT OR), and ACM Holding/Ascend Money (CP Group, the TrueMoney operator, backed by Ant International) — selected from five applicants, with operations required within one year. This discrete licence-award event reshapes Thai banking and payments structure from 2026, pairing incumbents with regional digital banks and payments players. The deal value is not publicly disclosed; the event is classed as M&A, completed, with an event date of 19 June 2025.

Periodic update · new data 2026-08-11

Commercial Intelligence & Fintech

Wise's Bank of Thailand-licensed Thai entity gained direct outbound baht remittance capability and PromptPay access, effective on or after 19 May 2026, alongside enhanced KYC verification requirements for account holders [wpm-2026-W13-001]. This is a completed product release; amount not publicly disclosed, as this is a product-access expansion rather than a disclosed-value transaction. The finding rests on a single Tier-4 source this cycle and is held at Low confidence.

Outlook

Watch for whether other non-bank remittance providers pursue comparable direct PromptPay access following Wise's move, and for any Bank of Thailand commentary on the KYC standards applied to non-bank entities gaining direct instant-payment-rail access.

Sources and findings (4)
  1. T3https://www.nationthailand.com/business/banking-finance/40051473retrieved
  2. T3https://www.crowdfundinsider.com/2025/04/238662-thailand-picks-krungthai-scbx-and-ascend-money-for-digital-banking/retrieved
  3. T3https://aimbangkok.com/crypto-license-thailand/retrieved
  4. T3https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developmentsretrieved
No modules match.

Filters combine as OR inside a group and AND across groups.

Editorial metadata

Provenance only. Nothing below gates publication or affects the render.

Editorial metadata for Thailand
FieldValue
trust.lawyer_review.statusnever_reviewed
trust.lawyer_review.reviewerno reviewer on record
trust.content_sourceai_generated

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light; derived_scores = {}.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band.

Orphan deltas: 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 14 module(s), 53 finding(s), 124 source(s) in the cumulative register.

Think something on this page is wrong? Report an error.