title: Thailand Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/thailand/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Thailand TH schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 53 sourced findings · 124 sources in the cumulative register 14 Modules baseline.modules[] 53 Findings modules[].findings[] 15 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal The Bank of Thailand has undertaken its largest organisational restructuring in 27 years, creating three dedicated operational lines covering non-bank providers, consumer protection and payment systems, including a new Payment Service Provider Policy and Supervision Division. This is a structural governance shift rather than a single new rule, and it arrives alongside the first concrete products of Thailand's virtual-banking reform: CLICX Bank Public Company Limited, the Krungthai-AIS-OR consortium's vehicle, has officially received its virtual banking licence from the Bank of Thailand and is targeting a June 2026 service launch as the country's first branchless commercial bank. #### Other Developments **Virtual-bank cohort moves toward launch.** Three virtual-bank consortia, CP Group with Ascend Money, Krungthai-AIS-OR trading as CLICX, and SCBX with KakaoBank, were approved by the Bank of Thailand in June 2025 out of five original applicants, with each required to begin operations within one year of approval; CLICX's licensing this cycle is the clearest sign of that cohort progressing toward operational reality. **Standardised fee reform continues phased rollout.** Bank of Thailand Notification No. 23/2569 standardised and reduced bank and credit-card service fees, with implementation beginning the day after Royal Gazette publication and phased adjustments continuing through October 2026, directly reducing certain transaction costs for consumers and small and medium enterprises. **BNPL heading toward direct supervision.** The Bank of Thailand has signalled plans to bring Buy-Now-Pay-Later lending under direct supervision, with new regulations targeted for end-2026 addressing loan limits, interest caps and disclosure requirements, a key principle being that BNPL loans must provide clear, complete and easy-to-understand information without encouraging borrowing. #### Cross-Monitor Connections The Bank of Thailand's proposed draft notification expanding KYC and customer-due-diligence obligations for cash-related transactions overlaps directly with financial-integrity's AML/CTF regime tracker for Thailand; the two monitors are tracking the same underlying regulatory development from different analytical angles, with financial-integrity assessing the AML architecture implications and this brief assessing the payment-sector conduct and supervisory-capacity implications of the same BOT restructuring and rule-making wave. #### Outlook The next concrete markers to watch are CLICX's actual service launch, originally targeted for June 2026, against the backdrop of the newly restructured BOT supervisory lines now responsible for overseeing it, and the finalisation of dedicated BNPL conduct rules expected by end-2026, which would be the first direct-supervision regime for that product in Thailand. The continued phased rollout of the standardised fee reform through October 2026 is a shorter-term marker of whether the consumer-cost-reduction goals behind Notification No. 23/2569 are being realised on schedule. _4 earlier updates not shown here._ ###### Standing brief · as of 27 June 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Thailand's payments operating environment has crystallised into a coherent baseline this cycle, and the dominant structural signal is the June 2025 award of the country's first virtual-bank licences. On 19 June 2025 the Ministry of Finance approved virtual-bank licences for three consortia — SCB X (with WeBank and KakaoBank), Krungthai Bank (with Gulf, AIS and PTT OR), and ACM Holding/Ascend Money (CP Group, the TrueMoney operator, backed by Ant International) — selected from five applicants, with operations required within one year. The same event, captured structurally as the approval of Thailand's first virtual-bank applicants on 19 June 2025, marks a turning point with phased supervision and restrictions on integration with legacy banks, set against banking-system gross NPLs that rose to THB548bn in Q1 2025. The assessment is that these awards will restructure the Thai banking-payments landscape from 2026, pairing incumbents with regional digital banks and payments players. This is a market-structure liberalisation running alongside a tightening enforcement and consumer-protection posture — a dual direction that defines Thailand's current trajectory. The analytical spine here is the bank versus non-bank access asymmetry. Thailand operates a mature, Bank of Thailand-centred regime under the Payment Systems Act B.E. 2560 (2017), in force 16 April 2018, consolidating prior e-payment laws under BOT oversight, with BOT maintaining a public register of Designated Payment Systems and Services providers. The non-bank PI/EMI licensing route is distinct from the bank pathway: commercial banks must apply for BOT approval to engage in e-Money business under Section 36 of the Financial Institutions Businesses Act B.E. 2551 (2008), in addition to payment-services law licensing. This makes Thailand a structurally accessible but foreign-ownership-constrained market. #### Other Developments The consumer-protection environment tightened materially in April 2025. The Emergency Decree on Measures for the Prevention and Suppression of Technology Crimes (No.2) B.E. 2568, published 12 April 2025 and effective 13 April 2025, establishes a shared-liability framework where banks, telcos, digital-wallet providers and platforms are collectively responsible for scam losses assessed on negligence, with mandatory SMS screening, mule-account penalties and a victim compensation mechanism. The change materially shifts fraud-loss allocation onto operators. Consumer bodies, however, flag gaps: the Thailand Consumers Council reported 18,687 cyber-risk complaints between October 2024 and September 2025 and warned the decree lacks pre-transaction safeguards such as delayed transactions, calling for an automatic-liability system and a central compensation standard. On digital money, the regime liberalised at the trading layer while holding the line on payments. On 16 March 2025 the SEC officially approved inclusion of USDC and USDT in the list of permitted cryptocurrencies for digital-asset transactions, following a February 2025 public consultation, while reaffirming the prohibition on using digital assets as a general means of payment for goods and services. In parallel, BOT's Programmable Payment Project under the Enhanced Regulatory Sandbox — the Thai-Baht-backed Stablecoin Sandbox — expanded in H2 2025 with participants testing escrow payments and tokenised-asset settlement, and BOT is consulting market participants on a dedicated THB-stablecoin regulatory framework; as of early 2026 there are no statutory requirements specifically applicable to stablecoins. The judgment is that Thailand admits USDT/USDC to regulated trading while preserving the means-of-payment prohibition, keeping stablecoins outside Thai retail payment instruments for now. Enforcement sharpened in the digital-asset space: on 29 May 2025 the SEC identified Bybit, 1000X, CoinEx, OKX and XT.COM as operating illegally and filed complaints with the Economic Crime Suppression Division, with MDES blocking orders effective 28 June 2025 under the Royal Decree on Technology Crimes (No.2) B.E. 2568. On resilience, BOT released AI Risk Management Guidelines for Financial Service Providers on 12 September 2025, applicable to financial institutions and to payment providers under the Payment Systems Act. #### Cross-Monitor Connections Two AML/CFT surfaces are sourced from the Sentinel feed and routed for FIM analysis rather than analysed here. The Cabinet approved a substantial AMLA amendment package on 25 February 2025, expanding the predicate-offence list and clarifying AMLO's inspection authority as part of continued FATF alignment; and in its 2023 follow-up report Thailand was re-rated on Recommendations 1 and 26 from Partially to Largely Compliant, remaining in enhanced follow-up under the APG. Original illicit-finance analysis — mule-account typologies, scam-compound cross-border flows and QR-laundering — belongs to FIM. The anti-scam shared-liability decree and the SEC offshore-exchange enforcement also carry illicit-finance and sanctions-evasion significance beyond WPM payments scope and are flagged accordingly. #### Outlook Three forward items frame the coming year. BOT is consulting the market on a dedicated THB-stablecoin regime, with reserve and redemption standards not yet statutory, expected during 2026. Project Nexus — the BIS Innovation Hub hub-and-spoke model connecting instant payment systems, with Nexus Global Payments established in Singapore — is on track for 2026 rollout with Thailand participating. And the three licensed virtual-bank consortia are required to begin operations within one year of the 19 June 2025 award, pointing to a 2026 commencement that will reshape competitive dynamics. The net direction is tightening on consumer-fraud and digital-asset enforcement while liberalising on market structure — a configuration that rewards operators able to engage BOT's licensing perimeter directly while absorbing a heavier fraud-loss allocation. trust tier: ai_unverified ###### Latest update · 11 October 2026 #### Regulatory Status Thailand's payments-regulatory posture tightened this cycle across licensing, industry-structure and AML/CFT dimensions. The Bank of Thailand's Systemically Important Retail Payment System framework took effect 21 February 2026, with PromptPay designated as the first system under the category. The Bank of Thailand separately tightened qualification requirements for payment service operators under the Payment Systems Act B.E. 2560, and opened a consultation on significantly expanded cash-transaction KYC/CDD requirements, with an outcome expected in Q4 2026. #### Outlook The cash-transaction KYC/CDD consultation outcome, expected Q4 2026, is the clearest forward marker; confirmation of the precise scope of the payment-operator qualification tightening, whose primary text has not yet been retrieved, is the second item to watch. _2 earlier updates not shown here._ ###### Standing brief · as of 27 June 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Thailand operates a mature, Bank of Thailand-centred payments regime under the Payment Systems Act B.E. 2560 (2017), in force 16 April 2018, consolidating prior e-payment laws under BOT oversight, with BOT maintaining a public register of Designated Payment Systems and Services providers. The Minister of Finance, on BOT advice, designates credit/debit/ATM card services, electronic money, electronic fund transfer and money remittance as Designated Payment Services requiring a licence under Section 16 of the PSA. A clear non-bank PI/EMI route runs distinct from the bank pathway: commercial banks must apply for BOT approval to engage in e-Money business under Section 36 of the Financial Institutions Businesses Act B.E. 2551 (2008), in addition to payment-services law licensing. Conduct obligations — governance, risk management, consumer protection, security, BCP and KYC — flow from BOT notifications under the PSA, supplemented by the Consumer Protection Act, the Electronic Transactions Act and the PDPA. The regime is tightening on consumer-fraud and digital-asset enforcement while liberalising on market structure. The Emergency Decree on Technology Crimes (No.2) B.E. 2568, effective 13 April 2025, establishes negligence-based shared liability for scam losses across banks, telcos, e-wallets and platforms. On digital money, the SEC approved USDC and USDT for regulated digital-asset trading on 16 March 2025 while reaffirming the means-of-payment prohibition, and BOT's THB-stablecoin sandbox is expanding ahead of a dedicated statute. Enforcement against unlicensed foreign exchanges sharpened, with MDES blocking five platforms effective 28 June 2025. On market structure, the BOT/Ministry of Finance award of three virtual-bank licences on 19 June 2025 marks a structural turning point. Settlement runs through BAHTNET RTGS on ISO 20022 with immediate finality, with a USD-THB PvP link to Hong Kong. AML/CFT surfaces — the 25 February 2025 AMLA amendment package and the 2023 FATF follow-up upgrade — are Sentinel-fed and carried to FIM. Thailand is also a regional instant-cross-border-payments leader via PayNow-PromptPay (2021) and ASEAN connectivity. #### Outlook Three forward items frame 2026: BOT's dedicated THB-stablecoin framework at consultation stage; Project Nexus multilateral rollout with Thailand participating; and the three virtual banks required to commence operations within one year of the 19 June 2025 award, a 2026-Q2 window. The net direction is tightening enforcement and consumer protection alongside market-structure liberalisation — a moderate risk profile trending toward greater operator loss-allocation burden balanced by widening market access. This assessment carries trust_tier ai_unverified pending lawyer-diff. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access moved Confirmed confirmed 2026-06-27 Payment businesses in Thailand are licensed under the Payment Systems Act B.E. 2560 (2017), supervised by the Bank of Thailand. BOT released for public comment (23 July 2026) a draft Notification on Digital Channel Security extending mandatory security requirements beyond mobile banking to internet banking and credit-card/credit providers, phasing out SMS OTPs and mandating biometric verification for high-value transactions. Movement — CHANGED BOT 27-year restructuring; CLICX virtual bank licensed_Major organisational restructuring and virtual bank licence grant are new material developments this cycle._ Standing sub-brief · as of 27 June 2026 270 words · last cycle 2026-10-18 #### Licensing, Authorisation & Market Access Thailand's licensing perimeter is anchored in the Payment Systems Act B.E. 2560 (2017), in force 16 April 2018, consolidating prior e-payment laws under Bank of Thailand oversight; BOT maintains a public register of Designated Payment Systems and Services providers. This is the supervisor and statute any payments operator must engage with to enter the Thai market, and non-bank applicants are eligible without a banking background. The designated-services architecture flows from Section 16 of the PSA: the Minister of Finance, with BOT advice, designates credit/debit/ATM card services, electronic money, electronic fund transfer and money remittance as Designated Payment Services requiring a licence or registration. The structure is three-tier — e-payment service, e-money service and payment system operator — with direct licensing running roughly nine to fifteen months and foreign ownership generally capped at 49% without BOI approval. The non-bank PI/EMI route covers e-money, payment gateway/facilitation, e-money transfer, acquiring and payment-on-behalf. The bank versus non-bank distinction is structural here. Commercial banks must apply for BOT approval to engage in e-Money business under Section 36 of the Financial Institutions Businesses Act B.E. 2551 (2008), in addition to payment-services law licensing — a separate s.36 FIBA approval pathway for bank-PSP e-money that runs parallel to the PSA designated-service route used by non-bank PIs and EMIs. The net effect is a market that is structurally accessible to non-bank entrants but foreign-ownership-constrained. #### Outlook The W1a baseline is established and confirmed. The licensing perimeter is stable; the live forward variable is how the three virtual-bank consortia, licensed in June 2025, operationalise within the bank-side approval framework as they commence operations during 2026. Periodic update · new data 2026-10-18 #### Licensing, Authorisation & Market Access The Bank of Thailand has undertaken its largest organisational restructuring in 27 years, creating three dedicated operational lines: non-bank providers, consumer protection, and payment systems, the last including a newly established Payment Service Provider Policy and Supervision Division. This is a structural supervisory reorganisation rather than a single new statute, and it reshapes how licensing and ongoing supervision will be administered across bank and non-bank payment-service providers going forward. Against that backdrop, CLICX Bank Public Company Limited, the vehicle for the Krungthai-AIS-OR consortium, officially received its virtual banking licence from the Bank of Thailand and is targeting a June 2026 service launch as the country's first branchless commercial bank. CLICX is one of three virtual-bank consortia, the others being CP Group with Ascend Money and SCBX with KakaoBank, approved by the Bank of Thailand in June 2025 out of five original applicants; each approved consortium is required to begin operations within one year of approval, making CLICX's licensing this cycle a concrete marker of that cohort's progress toward market entry. #### Outlook Whether CLICX meets its targeted June 2026 launch, and how the remaining two virtual-bank consortia progress toward their own one-year operational deadlines, are the clearest near-term markers for Thailand's virtual-banking market-access picture. The practical effect of the BOT's new three-line supervisory structure on licensing timelines and ongoing compliance expectations for both bank and non-bank payment-service providers is a second, slower-moving marker to watch. **4 earlier distinct update(s)** Periodic update · new data 2026-10-11 #### Licensing, Authorisation & Market Access The Bank of Thailand's Systemically Important Retail Payment System framework became effective 21 February 2026, establishing a dedicated supervisory category for retail payment systems whose scale or interconnectedness makes their disruption a systemic concern. PromptPay, Thailand's dominant real-time retail payment rail, was designated as the first system to fall under this category, marking the first time a Thai retail payment system has been brought under dedicated systemic-infrastructure oversight rather than general payment-service-provider regulation under the Payment Systems Act B.E. 2560. This designation sits within, rather than alongside, the existing Payment Systems Act framework: it creates a new oversight tier above standard payment-service authorisation, reflecting PromptPay's role as critical national payments infrastructure. For market participants, the designation signals that the Bank of Thailand now treats the operational resilience and systemic risk profile of PromptPay with a distinct regulatory lens from that applied to ordinary licensed payment service operators, a lens that is likely to extend to any future payment system reaching comparable scale. #### Outlook The SIRPS framework is newly effective rather than newly proposed; the item to watch is whether any additional payment system is designated under the framework in future cycles, which would indicate the Bank of Thailand is applying the systemic-infrastructure category beyond PromptPay alone. Periodic update · new data 2026-09-28 #### Licensing, Authorisation & Market Access The Bank of Thailand issued a draft Notification on Digital Channel Security on 23 July 2026, with the comment period closing 24 August 2026. The draft extends mandatory security requirements beyond mobile banking to internet banking and to credit-card and credit providers -- a meaningful widening of the regulatory perimeter, since these categories had previously sat outside the mobile-banking-focused security regime. Substantively, the draft phases out SMS one-time passwords for transaction authentication and mandates biometric verification for high-value transactions. This is a T1-sourced, Confirmed-confidence development, and it carries direct market-access implications for both bank and non-bank credit and payment providers operating in Thailand, since compliance with the new authentication standards will be a condition of continued digital-channel operation once the notification is finalised. Alongside this security-standards tightening, the Bank of Thailand has also issued Notification No. 23/2569, standardising 19 banking-fee items across four categories, with phased implementation running through October 2026. This is a Probable-confidence, T3-sourced development. Taken together, the two notifications point to simultaneous regulatory attention to both the security and cost dimensions of digital banking access in Thailand this cycle -- a bank-PSP-relevant tightening that applies across the digital-channel landscape rather than to a single product line. #### Outlook The draft Digital Channel Security Notification's comment period has closed, and finalisation is the next milestone to watch, expected around Q4 2026 based on the consultation timeline. The fee-standardisation notification's phased rollout continues through October 2026, and full implementation by that date is the concrete near-term milestone for this module. Periodic update · new data 2026-09-21 #### Licensing, Authorisation & Market Access Bank of Thailand's Systemically Important Retail Payment System framework took effect on 21 February 2026 under the Payment Systems Act B.E. 2560, with PromptPay designated as the first payment system to carry SIRPS status. This designation attaches expanded supervisory obligations that apply to the system and its participants rather than to any single institution, and it applies without regard to whether a given participant is a bank or a nonbank payment service provider. Wise, already Bank-of-Thailand-licensed, launched direct integration into PromptPay on 19 May 2026, enabling scan-and-pay functionality via PromptPay QR and ThaiQR without routing through a sponsoring bank. This is a market-access development distinct from the SIRPS designation itself: it demonstrates that Thailand's licensing regime now supports a nonbank PSP obtaining direct rail access to a newly systemic payment system, a bank-versus-nonbank access question that carries forward into subsequent cycles. #### Outlook The immediate item to watch is how Bank of Thailand applies SIRPS-attendant obligations differentially, if at all, across bank and nonbank participants including Wise. A second nonbank PSP following Wise's direct-access precedent would confirm this cycle's development as a structural opening rather than a one-off licensing decision. Periodic update · new data 2026-08-11 #### Licensing, Authorisation & Market Access The Bank of Thailand designated PromptPay as Thailand's first Systemically Important Retail Payment System, effective 21 February 2026, under the authority of the Payment Systems Act B.E. 2560 [wpm-2026-W1a-001]. The Systemically Important Retail Payment System framework is itself new to Thailand's regulatory architecture, and PromptPay's designation as the inaugural instrument under it formalises what has long been true in practice: PromptPay is the backbone of Thailand's retail instant-payments ecosystem, and its systemic designation brings it under a heightened supervisory regime spanning both the bank and non-bank participants that rely on the rail. Separately, the Bank of Thailand granted Thailand's first Virtual Bank licence on 14 May 2026, under Notification FPG.6/2567, to CLICX, a consortium formed by Krungthai Bank, AIS and PTT Oil and Retail Business, with a targeted June 2026 launch [wpm-2026-W1a-002]. This is a market-access event of a different character to the SIRPS designation: rather than formalising oversight of existing infrastructure, it opens an entirely new licensed channel to market, combining a state-linked bank, a mobile-network operator and a retail-and-energy conglomerate in a single bank-chartered entity. Both developments should be read against the bank-PSP versus non-bank-PI/EMI distinction that structures Thailand's payments market access. The SIRPS designation applies to PromptPay as shared infrastructure used by both bank and non-bank participants, while the virtual-bank licence is, by definition, a bank-charter route, meaning CLICX will operate under full banking-sector prudential requirements rather than the lighter payment-institution or e-money-institution regimes available to non-bank players. For non-bank PSPs and EMIs, the practical market-access lesson this cycle is that Thailand's most significant new licensing pathway remains a bank-charter route, even as the SIRPS framework extends systemic oversight to infrastructure non-bank participants also depend on. #### Outlook CLICX's targeted June 2026 launch is the immediate marker to watch: a successful, on-schedule launch would validate the consortium-licensing model and likely encourage further virtual-bank applications, while delay would signal implementation friction in Thailand's newest bank-charter pathway. Separately, watch for whether the Bank of Thailand extends the Systemically Important Retail Payment System designation beyond PromptPay to other retail payment infrastructure. **Sources and findings (5)** 1. T1 [https://www.bot.or.th/en/our-roles/payment-systems/payment-act-oversight.html](https://www.bot.or.th/en/our-roles/payment-systems/payment-act-oversight.html) retrieved 2026-06-27 2. T1 [https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2561/EngPDF/25610195.pdf](https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2561/EngPDF/25610195.pdf) retrieved 2026-06-27 3. T1 [https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2561/EngPDF/25610100.pdf](https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2561/EngPDF/25610100.pdf) retrieved 2026-06-27 4. T3 [https://paymentbrief.com/markets/thailand/](https://paymentbrief.com/markets/thailand/) retrieved 2026-06-27 5. T3 [https://kpmg.com/th/en/home/insights/2023/03/legal-news-update-issue-23.html](https://kpmg.com/th/en/home/insights/2023/03/legal-news-update-issue-23.html) retrieved 2026-06-27 ### W1b Conduct, Safeguarding & Promotions Confirmed confirmed 2026-06-27 Under the Emergency Decree, banks, e-money providers, digital-asset operators and telcos carry joint/pro-rata liability for technology-crime losses absent demonstrated compliance. BOT has added youth-specific transfer caps (rollout Sep-Oct 2026) atop the existing mule-account taxonomy and Central Fraud Registry; SEC has imposed pro-rata liability on digital-asset operators for mule-account failures. Standing sub-brief · as of 27 June 2026 173 words · last cycle 2026-10-18 #### Conduct, Safeguarding & Financial Promotions Bank of Thailand minimum operating requirements for payment providers include good governance, risk management, consumer protection, security standards, business continuity planning and KYC policies, with the stated aim of protecting retail customers; these are supplemented by the Consumer Protection Act, the Electronic Transactions Act and the PDPA. Conduct and safeguarding obligations flow from BOT notifications issued under the PSA, and a vulnerable-customer concept appears in the BOT Market Conduct notification FPG.6/2565. This conduct framework applies to both bank-PSP and non-bank PI/EMI providers. A caveat is carried at module level: the specific vulnerable-customer language is not directly verifiable in the cited source, so the finding is held at High rather than Confirmed. #### Outlook The principal under-indexed area is customer-fund safeguarding mechanics for non-bank e-money and PI providers — segregation, trust-account or guarantee models. The PSA mandates customer-fund handling, but the specific protective mechanism is not directly evidenced in this cycle and is flagged for a next-cycle primary-source pull from BOT e-money notifications. Safeguarding and financial-promotion enforcement detail remains under-indexed. Periodic update · new data 2026-10-18 #### Conduct, Safeguarding & Financial Promotions Bank of Thailand Notification No. 23/2569 standardised and reduced bank and credit-card service fees, with implementation beginning the day after publication in the Royal Gazette and phased adjustments continuing through October 2026. The measure is a direct conduct-level intervention aimed at reducing transaction costs for consumers and small and medium enterprises, and it sits alongside the Bank of Thailand's broader organisational restructuring, which created a dedicated consumer-protection operational line as one of three new supervisory divisions. Together, the standardised-fee reform and the new consumer-protection line indicate a conduct-regulation environment that is actively tightening rather than static, with the restructuring providing institutional capacity behind the substantive fee-reduction measure. #### Outlook The phased adjustments to standardised fees running through October 2026 are the immediate marker to track for whether the reform's cost-reduction goals are being realised on schedule. Beyond that, how the newly created consumer-protection supervisory line uses its mandate in practice, including whether further conduct rules follow the fee-standardisation measure, will determine whether this cycle's structural change translates into further substantive conduct requirements. **1 earlier distinct update(s)** Periodic update · new data 2026-08-11 #### Conduct, Safeguarding & Financial Promotions Thailand's fraud-liability framework tightened materially this cycle, extending across both bank and non-bank participants. The Bank of Thailand is introducing daily digital-transfer caps for young account holders, a direct response to a 70.3 percent rise in youth mule accounts, from 3,371 to 5,741, recorded between January 2025 and March 2026 [wpm-2026-W1b-001]. Rollout is staged, with banks required to implement the caps by September 2026 and e-money providers following in October 2026. This bank-and-e-money-sector measure sits within a wider liability architecture, and the Securities and Exchange Commission has now extended a comparable obligation into the digital-asset sector: a parallel SEC Notification imposes pro-rata liability on digital-asset business operators for mule-account-standard failures, apportioning liability among digital-asset operators, financial institutions, payment-system operators, customers and other relevant parties, with explicit reference to AMLO's HR-03-01 and HR-03-02 typology codes [wpm-2026-W1b-002]. The cross-reference to AMLO's own case-classification codes is a notable conduct-regulation detail: it means the SEC's liability standard for digital-asset operators is being calibrated directly against the national financial-intelligence unit's typology framework. Read together, these two developments describe a single, cross-sector fraud-liability regime rather than two independent conduct rules: banks, e-money providers, payment-system operators and digital-asset business operators are all being brought within a comparable pro-rata liability standard for mule-account failures, on broadly overlapping implementation timelines. #### Outlook The September and October 2026 rollout deadlines for bank and e-money youth transfer caps respectively are the clearest near-term compliance markers. Firms across all four affected sector categories should expect continued regulatory attention to how effectively the joint and pro-rata liability framework is enforced once the caps take effect. **Sources and findings (4)** 1. T1 [https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2561/EngPDF/25610093.pdf](https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2561/EngPDF/25610093.pdf) retrieved 2026-06-27 2. T3 [https://multilaw.com/Multilaw/ZENTSO/BusinessGuides/Presentation/Section_Home.aspx?GuideId=2&GuideCountry=Thailand&GuideSection=547](https://multilaw.com/Multilaw/ZENTSO/BusinessGuides/Presentation/Section_Home.aspx?GuideId=2&GuideCountry=Thailand&GuideSection=547) retrieved 2026-06-27 3. T1 [https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2565/EngPDF/25650188.pdf](https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2565/EngPDF/25650188.pdf) retrieved 2026-06-27 4. T3 [https://stripe.com/resources/more/how-to-accept-credit-card-payments-in-thailand](https://stripe.com/resources/more/how-to-accept-credit-card-payments-in-thailand) retrieved 2026-06-27 ### W2 Stablecoins & Digital Money Probable confirmed 2026-06-27 USDT/USDC approved for regulated trading (16 Mar 2025); BOT THB-stablecoin Programmable Payment sandbox expanding; means-of-payment prohibition retained; dedicated statute pending. Horizon · 2026 (±year) Thailand dedicated THB-stablecoin regulatory framework_consultation · T3_ Standing sub-brief · as of 27 June 2026 224 words · last cycle 2026-08-05 #### Stablecoins & Digital Money Thailand's digital-money posture liberalised at the trading layer in 2025 while preserving a firm payments boundary. On 16 March 2025 the SEC officially approved inclusion of USDC and USDT in the list of permitted cryptocurrencies for digital-asset transactions, following a February 2025 public consultation, while reaffirming the prohibition on using digital assets as a general means of payment for goods and services. Previously only BTC, ETH, XRP, XLM and certain BOT settlement-system tokens were approved. The approval admits USDT/USDC to regulated digital-asset trading, but the means-of-payment prohibition keeps stablecoins out of Thai retail payment instruments. In parallel, BOT's Programmable Payment Project under the Enhanced Regulatory Sandbox — the Thai-Baht-backed Stablecoin Sandbox — expanded in H2 2025, with participants testing escrow payments and tokenised-asset settlement, and BOT is consulting market participants on a dedicated THB-stablecoin regulatory framework. As of early 2026 there are no statutory requirements specifically applicable to stablecoins, such as mandatory reserve composition or redemption at par; the framework is in development with no finalised THB-stablecoin statute as of mid-2026. #### Outlook The forward item is the dedicated THB-stablecoin regulatory framework, currently at consultation stage and expected during 2026, with reserve and redemption standards not yet statutory. Until that statute lands and the means-of-payment prohibition is revisited, stablecoins remain a regulated trading instrument rather than a payments instrument in Thailand. Periodic update · new data 2026-08-11 #### Stablecoins & Digital Money Thailand's digital-asset oversight advanced on two distinct but parallel tracks this cycle. On the tightening track, the Securities and Exchange Commission's News No. 51/2026, effective 1 March 2026, expanded the definitions of institutional investor and eligible investment capital to include digital asset business operators, while News No. 54/2026, issued 10 March 2026, opened a formal consultation on Travel Rule requirements for digital-asset transfers by licensed operators [wpm-2026-W2-001]. Neither announcement is anchored by a primary sec.or.th source retrieved this cycle, a coverage gap worth flagging even as the substantive direction is reasonably clear from secondary reporting. On the market-building track, a Bank of Thailand and SEC sandbox continues to cover tokenisation, stablecoin, deposit-token and e-money-token payment and settlement use cases, building on a Cabinet-approved draft of tokenised-electronic-securities amendments from June 2025 [wpm-2026-W2-002]. This sandbox work runs on a separate track to the Travel Rule tightening: it represents active regulatory engagement with new payment-instrument forms rather than compliance-perimeter tightening for existing digital-asset activity. The coexistence of these two tracks in a single cycle is itself the notable finding: Thai authorities are pursuing both AML/CFT tightening and sandbox-based innovation-enablement simultaneously rather than treating digital-asset oversight as a binary choice between the two. #### Outlook The close of the SEC's Travel Rule consultation, expected within the current half-year uncertainty band, is the clearest near-term marker on the tightening track. On the market-building track, watch for further detail on the tokenised-electronic-securities amendments following the June 2025 Cabinet approval, and for any indication the BOT-SEC sandbox is moving toward a formal stablecoin framework. **Sources and findings (4)** 1. T3 [https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/thailand/](https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/thailand/) retrieved 2026-06-27 2. T3 [https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developments](https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developments) retrieved 2026-06-27 3. T3 [https://www.lexology.com/library/detail.aspx?g=a3817f0d-fa22-4594-98e7-bff1d3e22971](https://www.lexology.com/library/detail.aspx?g=a3817f0d-fa22-4594-98e7-bff1d3e22971) retrieved 2026-06-27 4. T3 [https://www.coindesk.com/policy/2025/03/10/thailand-regulator-adds-usdc-usdt-stablecoins-to-approved-cryptocurrencies](https://www.coindesk.com/policy/2025/03/10/thailand-regulator-adds-usdc-usdt-stablecoins-to-approved-cryptocurrencies) retrieved 2026-06-27 ### W3 Operational Resilience & Critical Infra Confirmed confirmed 2026-06-27 Operational resilience for payment providers is governed by BOT IT-risk supervision and information-security notifications under the PSA, requiring business-continuity planning, incident response, backup systems and third-party/outsourcing oversight. BOT issued AI Risk Management Guidelines for financial service providers in September 2025 and aligns with the National Cybersecurity Act B.E. 2562 (2019). Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/thailand/) Standing sub-brief · as of 27 June 2026 164 words · last cycle 2026-10-04 #### Operational Resilience & Critical Infrastructure Bank of Thailand released AI Risk Management Guidelines for Financial Service Providers on 12 September 2025, building on June 2025 drafts, applicable to financial institutions and to payment providers under the Payment Systems Act and structured around governance and AI development/security controls. Resilience is supervised via BOT IT-risk notifications under the PSA and aligns with the National Cybersecurity Act B.E. 2562 (2019) and the Royal Decree on Technology Crimes (No.2) B.E. 2568. Underpinning this, BOT supervises IT risk for payment-system-related service providers and requires an IT contingency plan within a business continuity plan, plus a backup computer system located remotely from the main computer centre. These obligations apply to both bank and non-bank providers. #### Outlook The resilience framework is advancing, with the AI guidelines the most recent layer over established BCP and IT-security supervision under the PSA. The trajectory is toward closer alignment of AI governance with existing IT-risk supervision; no statutory rupture is signalled for the period ahead. Periodic update · new data 2026-09-28 #### Operational Resilience & Critical Infrastructure The Bank of Thailand's draft Digital Channel Security Notification, issued 23 July 2026 with comments due 24 August 2026, is directly a critical-infrastructure and operational-resilience development as much as a licensing one. It would phase out SMS one-time passwords for transaction authentication fleet-wide across internet banking and credit-card/credit provider channels, and would mandate biometric verification for high-value transactions. This represents a fundamental technical-infrastructure change for any provider currently relying on SMS-OTP as its primary transaction-authentication mechanism: institutions will need to build or procure biometric-verification capability ahead of the notification's eventual effective date. This is a T1-sourced, Confirmed-confidence development, and its operational-resilience significance lies in the scale of the authentication-infrastructure migration it would require across the Thai digital-banking and payments sector simultaneously, rather than through a phased, provider-by-provider rollout. #### Outlook The comment period on this draft closed 24 August 2026. Finalisation, expected around Q4 2026, will set the definitive timeline by which affected providers must complete the SMS-OTP-to-biometric authentication migration this notification would require. **Sources and findings (4)** 1. T1 [https://www.bot.or.th/en/our-roles/payment-systems/information-technology-risk-supervision.html](https://www.bot.or.th/en/our-roles/payment-systems/information-technology-risk-supervision.html) retrieved 2026-06-27 2. T3 [https://www.tilleke.com/insights/thailand-issues-ai-risk-management-guidelines-for-financial-service-providers/25/](https://www.tilleke.com/insights/thailand-issues-ai-risk-management-guidelines-for-financial-service-providers/25/) retrieved 2026-06-27 3. T1 [https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2551/EngPDF/25510316.pdf](https://www.bot.or.th/content/dam/bot/fipcs/documents/FPG/2551/EngPDF/25510316.pdf) retrieved 2026-06-27 4. T3 [https://techforgoodinstitute.org/insights/country-spotlights/rules-in-action-thailands-evolving-tech-governance/](https://techforgoodinstitute.org/insights/country-spotlights/rules-in-action-thailands-evolving-tech-governance/) retrieved 2026-06-27 ### W4 Scheme & Network Compliance Probable confirmed 2026-06-27 Card payments in Thailand operate over Visa, Mastercard and local networks under BOT supervision and PCI DSS, with BOT terms regulating card-fee collection and limiting additional surcharging except as permitted. Thailand does not operate an EU-style statutory interchange cap; pricing is governed by scheme rules plus BOT fairness/transparency terms. The national QR standard is BOT-mandated and interoperable. Standing sub-brief · as of 27 June 2026 181 words · last cycle 2026-06-27 #### Scheme & Network Compliance Card processing in Thailand is supervised by BOT and must comply with PCI DSS; BOT terms regulate fair and transparent collection of credit-card fees, and providers cannot charge additional fees for card use except as permitted by BOT. Crucially, Thailand does not operate an EU-style statutory interchange cap; pricing is governed by scheme rules plus BOT fairness terms. The BOT-mandated interoperable QR standard and near-zero PromptPay MDR exert downward pressure on card economics, where card MDR runs approximately 1.5–2.5%. At the scheme layer, under Visa Thailand scheme rules merchants must notify Visa and their acquirer 30 days before they begin surcharging, with stated factors governing whether surcharges are permitted. These obligations apply to both bank and non-bank participants. #### Outlook The module is stable. The absence of a statutory interchange cap is a regime feature, not a gap; actual interchange and MDR levels and any BOT fairness-term thresholds are not quantified beyond the approximate card MDR. Merchant-acquiring economics and the competitive dynamics of emerging-market QR rails are under-indexed relative to card-scheme framing and are flagged for future deepening. no periodic updates on record for this sub-brief ** Sources and findings (3)** 1. T3 [https://stripe.com/resources/more/how-to-accept-credit-card-payments-in-thailand](https://stripe.com/resources/more/how-to-accept-credit-card-payments-in-thailand) retrieved 2026-06-27 2. T2 [https://www.visa.co.th/en_TH/support/small-business/regulations-fees.html](https://www.visa.co.th/en_TH/support/small-business/regulations-fees.html) retrieved 2026-06-27 3. T3 [https://paymentbrief.com/markets/thailand/](https://paymentbrief.com/markets/thailand/) retrieved 2026-06-27 ### W5 Payment Corridor Dynamics Confirmed confirmed 2026-06-27 Bank of Thailand is enforcing baht-only settlement for regulated payment providers and has suspended roughly 5,000 accounts (Feb 2025-May 2026) linked to peer-to-peer renminbi payment activity; personal QR payments via platforms such as Alipay/WeChat Pay may not be processed in yuan. Horizon · 2026 (±year) Project Nexus multilateral instant-payment rollout (Thailand participating)_in_force_pending · T3_ Standing sub-brief · as of 27 June 2026 185 words · last cycle 2026-08-21 #### Payment Corridor Dynamics Thailand is a regional leader in instant cross-border account-to-account payments. MAS and BOT launched the PayNow-PromptPay linkage in 2021 — the first real-time payment-system linkage globally — enabling real-time transfers up to S$1,000/THB25,000 daily using a mobile number, completing within minutes versus one to two working days for legacy remittance. Corridor coverage now spans Singapore, Malaysia, Indonesia, Vietnam, Cambodia, Lao PDR, Hong Kong and Japan under the ASEAN Regional Payment Connectivity initiative. The next structural layer is Project Nexus, launched by the BIS Innovation Hub with ASEAN central banks including Thailand, which creates a hub-and-spoke model connecting instant payment systems, with Nexus Global Payments established in Singapore and rollout on track for 2026. The cumulative assessment is that the 2021 linkage and expanding ASEAN QR/FPS connectivity, plus the 2026 Nexus rollout, position Thailand as a hub for low-cost real-time A2A corridors, eroding card and legacy-remittance economics. #### Outlook The corridor trajectory is expanding. Project Nexus is the dominant 2026 horizon item, moving from in-force-pending toward a multilateral hub-and-spoke connection of ASEAN instant-payment systems. The directional signal is continued corridor opening across the region. Periodic update · new data 2026-09-21 #### Payment Corridor Dynamics Bank of Thailand has enforced baht-only settlement for regulated payment service providers, and approximately 5,000 accounts linked to peer-to-peer renminbi payment activity were suspended between February 2025 and May 2026. Personal QR payments processed through Alipay/WeChat Pay-type platforms may not be settled in yuan under this enforcement posture, narrowing an informal cross-border corridor that had allowed yuan-denominated flows to route through Thai retail payment rails. This is a corridor-restriction development rather than a blanket prohibition on cross-border payment activity: the restriction targets currency-of-settlement rather than the underlying cross-border use case, meaning properly baht-settled cross-border payment activity through regulated channels is not itself affected by this enforcement action. #### Outlook The scale of the account-suspension figure — approximately 5,000 accounts over a fifteen-month enforcement window — suggests sustained rather than one-off enforcement activity, and further suspensions in subsequent reporting periods would confirm the corridor restriction as an ongoing regulatory posture rather than a completed one-time action. **Sources and findings (4)** 1. T1 [https://www.mas.gov.sg/news/media-releases/2021/singapore-and-thailand-launch-worlds-first-linkage-of-real-time-payment-systems](https://www.mas.gov.sg/news/media-releases/2021/singapore-and-thailand-launch-worlds-first-linkage-of-real-time-payment-systems) retrieved 2026-06-27 2. T1 [https://www.bot.or.th/en/financial-innovation/digital-finance/digital-payment/cross-border-payment.html](https://www.bot.or.th/en/financial-innovation/digital-finance/digital-payment/cross-border-payment.html) retrieved 2026-06-27 3. T3 [https://ps-engage.com/cross-border-qr-payments-driving-asias-digital-integration/](https://ps-engage.com/cross-border-qr-payments-driving-asias-digital-integration/) retrieved 2026-06-27 4. T1 [https://www.hkma.gov.hk/eng/news-and-media/press-releases/2014/07/20140728-3/](https://www.hkma.gov.hk/eng/news-and-media/press-releases/2014/07/20140728-3/) retrieved 2026-06-27 ### W6 Industry Structure & Commercial limited signal Probable confirmed 2026-06-27 Thailand's payments market is large, fragmented and competitive, anchored by mass-market PromptPay (90M+ registered accounts on a ~72M population) and a concentrated e-wallet segment led by TrueMoney (Ascend Money). Bank-PSP and fintech players coexist; foreign processors (2C2P, Opn, Adyen, Stripe, Checkout.com) typically enter via local licensing or partnership. Virtual banks awarded mid-2025 will reshape structure from 2026. Horizon · 2026-Q2 (±half_year) Thailand virtual banks commence operations_in_force_pending · T3_ Standing sub-brief · as of 27 June 2026 178 words · last cycle 2026-10-11 #### Industry Structure & Commercial Dynamics The Thai e-wallet segment is concentrated: TrueMoney holds roughly 53% of the market with 17M+ active users, with Rabbit LINE Pay around 25% share. Most foreign operators enter via licensed Thai PSPs such as 2C2P (acquired by Ant in 2022), Opn, Adyen, Stripe and Checkout.com, shaping market-access strategy through local licensing or partnership. Mass-market PromptPay, with 79M+ IDs, anchors the A2A layer beneath this competitive non-bank wallet segment. The structural turning point is the BOT/Ministry of Finance approval of Thailand's first virtual-bank applicants on 19 June 2025, with phased supervision and restrictions on integration with legacy banks; banking-system gross NPLs rose to THB548bn in Q1 2025. This is the structural-trend view of an event whose discrete deal mechanics sit in W13. Virtual banks awarded mid-2025 reshape market structure from 2026. #### Outlook The module trajectory is shifting. The three licensed consortia are required to begin operations within one year of the 19 June 2025 award, pointing to a 2026-Q2 commencement window that will restructure competitive dynamics between incumbents, non-bank wallets and new digital banks. Periodic update · new data 2026-10-11 #### Industry Structure & Commercial Dynamics The Bank of Thailand issued notifications this cycle tightening qualification requirements for payment service operators under the Payment Systems Act B.E. 2560. The development is sourced from secondary legal commentary; the primary BOT notification text was not independently retrieved this cycle, so the precise scope of the tightened qualification criteria is not established beyond the general direction indicated by the secondary source. Qualification tightening of this kind typically raises the bar for market entry and continued authorisation for non-bank payment institutions and e-money issuers operating under the Payment Systems Act, which may have structural implications for industry concentration if smaller or newer entrants face a higher compliance threshold than previously in force. The non-bank payment-institution and e-money-issuer population is the segment most directly affected by a qualification-requirement change of this kind, given that bank-operated payment services typically already meet a higher baseline prudential standard under separate banking regulation. #### Outlook Primary BOT notification text for the qualification tightening has not yet been retrieved; confirming its precise scope and the population of payment service operators it reaches is the item to watch in upcoming reporting windows. **1 earlier distinct update(s)** Periodic update · new data 2026-09-21 #### Industry Structure & Commercial Dynamics Thailand granted three digital-bank licences in April 2025: to a Krungthai-AIS-Gulf-OR consortium, an SCBX-KakaoBank-WeBank consortium, and an Ascend Money-Ant International consortium. These licensees represent Thailand's most significant recent bank-sector market-structure change, each anchored by a telecommunications, technology, or overseas-banking partner rather than by an incumbent Thai bank alone. Wise's BOT-licensed nonbank entry, with direct PromptPay integration live from 19 May 2026, adds a further competitive vector distinct from the digital-bank licensees: it is a nonbank PSP gaining direct access to the incumbent instant-payment rail rather than a new licensed bank entering deposit-taking competition. Together, the three digital-bank licences and Wise's nonbank entry represent two structurally different forms of new competitive pressure on Thailand's payments incumbents within the same reporting cycle. #### Outlook Whether the new digital-bank licensees begin offering PromptPay-adjacent or SIRPS-participant services directly is the structural question to watch; such a move would complete a three-way competitive convergence between incumbent banks, digital-bank licensees, and nonbank PSPs on Thailand's core retail payment rail. **Sources and findings (3)** 1. T3 [https://multilaw.com/Multilaw/ZENTSO/BusinessGuides/Presentation/Section_Home.aspx?GuideId=2&GuideCountry=Thailand&GuideSection=547](https://multilaw.com/Multilaw/ZENTSO/BusinessGuides/Presentation/Section_Home.aspx?GuideId=2&GuideCountry=Thailand&GuideSection=547) retrieved 2026-06-27 2. T3 [https://paymentbrief.com/markets/thailand/](https://paymentbrief.com/markets/thailand/) retrieved 2026-06-27 3. T3 [https://www.forvismazars.com/th/en/insights/doing-business-in-thailand/audit/what-thailand-s-financial-services-firm-must-watch](https://www.forvismazars.com/th/en/insights/doing-business-in-thailand/audit/what-thailand-s-financial-services-firm-must-watch) retrieved 2026-06-27 ### W7 Legal & Litigation Probable confirmed 2026-06-27 Enforcement in the payments-adjacent space is currently dominated by SEC digital-asset actions and cyber-fraud prosecutions. In 2025 the SEC pursued licence revocations and criminal complaints against unlicensed operators, blocked five offshore exchanges (Bybit, 1000X, CoinEx, OKX, XT.COM) from 28 June 2025, and in early 2026 filed criminal complaints over joint unlicensed exchange operations and Worldcoin-related trading. Cyber-fraud prosecutions under the 2025 Royal Decree carry up to 20-year sentences. Standing sub-brief · as of 27 June 2026 117 words · last cycle 2026-06-27 #### Legal & Litigation Digital-asset enforcement sharpened in 2025. On 29 May 2025 the SEC identified Bybit, 1000X, CoinEx, OKX and XT.COM as operating illegally and filed complaints with the Economic Crime Suppression Division; MDES issued blocking orders effective 28 June 2025 under the Royal Decree on Technology Crimes (No.2) B.E. 2568. This is a dated dashboard entry: the announcement date is timezone-dependent (29–30 May 2025) while the 28 June 2025 blocking date is consistently confirmed; the finding is carried at Assessed. #### Outlook The litigation surface is escalating, driven by SEC enforcement and offshore-exchange blocking actions across 2025–2026. The directional read is continued enforcement against unlicensed foreign digital-asset operators following the expansion of regulatory scope to foreign platforms. no periodic updates on record for this sub-brief ** Sources and findings (3)** 1. T3 [https://aimbangkok.com/thailand-digital-asset-regulation-2025/](https://aimbangkok.com/thailand-digital-asset-regulation-2025/) retrieved 2026-06-27 2. T3 [https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developments](https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developments) retrieved 2026-06-27 3. T3 [https://www.nortonrosefulbright.com/en/knowledge/publications/a9c07f1f/regulation-of-digital-assets-takes-effect-in-thailand](https://www.nortonrosefulbright.com/en/knowledge/publications/a9c07f1f/regulation-of-digital-assets-takes-effect-in-thailand) retrieved 2026-06-27 ### W8 Merchant Acquiring & Risk Probable confirmed 2026-06-27 Acquiring in Thailand is a PSA-designated payment service requiring a Designated Payment Service Licence; acquirers must route settlement through licensed banks, comply with PCI DSS, maintain fraud-prevention and cardholder-data protection, store and report transaction data to BOT, and apply AML/KYC with STR reporting to AMLO. Chargeback/dispute mechanics follow scheme rules incorporated through acquirer agreements. Standing sub-brief · as of 27 June 2026 110 words · last cycle 2026-06-27 #### Merchant Acquiring & Risk Acquiring is a PSA-designated payment service requiring a Designated Payment Service Licence. BOT requires acquirers to route all settlements through licensed banks, comply with PCI DSS, implement fraud-prevention and cardholder-data protection, store transaction data and report to BOT, with AML/KYC checks and AMLO reporting; BOT may suspend or revoke acquiring licences for violations. Chargeback and dispute mechanics follow scheme rules incorporated through acquirer agreements. These obligations apply to both bank and non-bank acquirers. #### Outlook The module is stable. The settlement-routing-through-licensed-banks requirement preserves a structural dependency on bank infrastructure for non-bank acquirers, an asymmetry worth tracking as virtual banks and new processors enter the market from 2026. no periodic updates on record for this sub-brief ** Sources and findings (3)** 1. T3 [https://kpmg.com/th/en/home/insights/2023/03/legal-news-update-issue-23.html](https://kpmg.com/th/en/home/insights/2023/03/legal-news-update-issue-23.html) retrieved 2026-06-27 2. T3 [https://khonsulegal.com/tpost/6ign94al31-financial-licenses-in-thailand](https://khonsulegal.com/tpost/6ign94al31-financial-licenses-in-thailand) retrieved 2026-06-27 3. T3 [https://www.pxp.io/payments-glossary/card-scheme-rules](https://www.pxp.io/payments-glossary/card-scheme-rules) retrieved 2026-06-27 ### W9 Product Innovation & Market Development moved Confirmed confirmed 2026-06-27 Thailand is highly innovation-active: PromptPay underpins instant A2A and QR, with PromptBiz for businesses, an active BOT regulatory sandbox, programmable-payment/THB-stablecoin testing, National Digital ID (NDID) for KYC, and ongoing retail CBDC and mBridge cross-border research. Open-banking remains early-stage (dStatement since 2022; API standards not yet finalised). Movement — NEW BOT signals direct BNPL supervision by end-2026_First reported signal of dedicated BNPL supervisory rules._ Standing sub-brief · as of 27 June 2026 114 words · last cycle 2026-10-18 #### Product Innovation & Market Development Thailand's primary real-time rails are PromptPay, BAHTNET and PromptBiz. PromptPay, launched in 2016, settles in up to 60 seconds, 24/7, using a mobile number or national ID, operated by National ITMX with final interbank settlement via BAHTNET using ISO 20022 messaging. Open banking remains early-stage: dStatement has operated since January 2022, but API standards are not finalised, and NDID (2018) underpins reusable KYC. The rails serve both bank and non-bank participants. #### Outlook The module is active but with an unfinished product-access horizon. Open-banking API standards and a PSD-equivalent data-access framework remain unfinalised; dStatement is the only confirmed step, leaving the product-innovation horizon partly unspecified and flagged for future tracking. Periodic update · new data 2026-10-18 #### Product Innovation & Market Development The Bank of Thailand has signalled plans to bring Buy-Now-Pay-Later lending under direct supervision, with new regulations targeted for end-2026 that would address loan limits, interest caps and disclosure requirements. A stated key principle behind the forthcoming rules is that BNPL loans must provide clear, complete and easy-to-understand information without encouraging borrowing, indicating the regulatory direction is oriented toward consumer-facing disclosure and responsible-lending safeguards rather than prohibition of the product itself. This represents an escalation from a product that has so far operated with less direct regulatory structure toward one brought formally within the Bank of Thailand's supervisory perimeter for non-bank lending-adjacent payment products. #### Outlook The finalisation of the dedicated BNPL regulations targeted for end-2026, and specifically the actual loan-limit and interest-cap figures they set, are the clearest markers to watch; these details were not available this cycle and will determine the practical compliance burden the new regime places on BNPL providers operating in Thailand. **1 earlier distinct update(s)** Periodic update · new data 2026-09-28 #### Product Innovation & Market Development Thailand's stablecoin product-development landscape advanced on two separate tracks this cycle. First, the Bank of Thailand's Programmable Payment Sandbox was expanded in December 2025 to safely test Thai-baht-backed stablecoins, a T1-sourced, Probable-confidence development that continues the sandbox's function as a controlled testing environment for programmable-payment innovation rather than a general-market product launch. Second, SEC Thailand has proposed a daily cap on stablecoin transfers together with a same-owner-wallet requirement for transfers via licensed digital-asset operators; this proposal is T4-sourced with Uncertain confidence, reflecting that it rests on aggregator-tier reporting rather than a directly retrieved primary consultation document. Read together, these two developments suggest Thailand's regulatory instinct toward stablecoin products is to control risk at the transfer/movement layer -- caps and wallet-ownership verification -- rather than at the issuance layer, a distinct product-development environment from jurisdictions that regulate stablecoin issuance directly through a dedicated statute. Separately, a digital-asset Travel Rule is scheduled to take effect on 27 February 2027, requiring operators to retain transaction information for at least five years; this is a forward-dated regulatory milestone relevant to product-development planning for any digital-asset-adjacent payment product, though its effective date remains well over a year out from this cycle. #### Outlook The SEC stablecoin transfer-cap consultation closed 25 September 2026; its outcome will determine whether Thailand formalises transfer-layer controls that product teams building stablecoin-adjacent payment products will need to design around. The Travel Rule's 27 February 2027 effective date is the furthest-dated fixed milestone on this module's horizon. **Sources and findings (4)** 1. T3 [https://www.lightspark.com/knowledge/instant-payments-thailand](https://www.lightspark.com/knowledge/instant-payments-thailand) retrieved 2026-06-27 2. T3 [https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developments](https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developments) retrieved 2026-06-27 3. T3 [https://silklegal.com/what-foreign-investors-need-to-know-licensing-and-market-entry-for-digital-asset-businesses-in-thailand/](https://silklegal.com/what-foreign-investors-need-to-know-licensing-and-market-entry-for-digital-asset-businesses-in-thailand/) retrieved 2026-06-27 4. T3 [https://paymentbrief.com/markets/thailand/](https://paymentbrief.com/markets/thailand/) retrieved 2026-06-27 ### W10 Consumer Protection & APP Fraud Probable confirmed 2026-06-27 Emergency Decree on Technology Crimes (No.2) B.E. 2568, effective 13 Apr 2025, establishes negligence-based shared liability among banks, telcos, e-wallets and platforms with mandatory SMS screening, mule-account penalties and victim compensation. Standing sub-brief · as of 27 June 2026 183 words · last cycle 2026-10-18 #### Consumer Protection & APP Fraud The Emergency Decree on Measures for the Prevention and Suppression of Technology Crimes (No.2) B.E. 2568, published 12 April 2025 and effective 13 April 2025, establishes a shared-liability framework where banks, telcos, digital-wallet providers and platforms are collectively responsible for scam losses assessed on negligence, with mandatory SMS screening, mule-account penalties and a victim compensation mechanism. National Assembly approval followed on 28 May 2025. The framework materially shifts fraud-loss allocation onto banks, e-wallet providers, telcos and platforms operating in Thailand, and applies to both bank and non-bank actors. Consumer bodies flag persistent gaps. The Thailand Consumers Council reported 18,687 cyber-risk complaints between October 2024 and September 2025 and warned the decree lacks pre-transaction safeguards such as delayed transactions, calling for an automatic-liability system and a central compensation standard. Gaps remain for self-authorised investment/APP-type fraud and for compensation standardisation. #### Outlook The module is tightening. The negligence-based shared-liability standard is the operative compliance and loss-allocation development for Thai payments operators. The open question is whether self-authorised fraud coverage and a standardised compensation mechanism follow; consumer-side pressure points in that direction. Periodic update · new data 2026-10-18 #### Consumer Protection & APP Fraud The Bank of Thailand's organisational restructuring created a dedicated consumer-protection operational line as one of three new supervisory divisions resulting from the central bank's largest reorganisation in 27 years, giving consumer protection a distinct institutional home within BOT's supervisory structure going forward. This structural change sits alongside the continuing phased implementation of Notification No. 23/2569's standardised and reduced bank and credit-card service fees, a substantive consumer-facing measure that began implementation the day after Royal Gazette publication and continues adjusting through October 2026. Together, the two developments indicate that consumer-protection conduct regulation in Thailand's payments sector is tightening, with new institutional capacity now in place to support continued fee-related and other consumer-facing interventions. #### Outlook How the newly dedicated consumer-protection supervisory line exercises its mandate beyond the current fee-standardisation measure, including whether it takes on a role in the forthcoming BNPL disclosure rules targeted for end-2026, is the development to watch for this module. **Sources and findings (4)** 1. T3 [https://www.about-fraud.com/thailand-legislation-to-combat-technology-related-crimes/](https://www.about-fraud.com/thailand-legislation-to-combat-technology-related-crimes/) retrieved 2026-06-27 2. T3 [https://www.biocatch.com/blog/thailand-royal-decree-financial-fraud](https://www.biocatch.com/blog/thailand-royal-decree-financial-fraud) retrieved 2026-06-27 3. T3 [https://www.libothai.com/post/protecting-victims-of-online-scams-in-thailand-legal-rights-and-remedies-for-foreign-residents-par-1](https://www.libothai.com/post/protecting-victims-of-online-scams-in-thailand-legal-rights-and-remedies-for-foreign-residents-par-1) retrieved 2026-06-27 4. T3 [https://www.nationthailand.com/news/general/40060662](https://www.nationthailand.com/news/general/40060662) retrieved 2026-06-27 ### W11 AML/CFT & Financial Crime [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/thailand/#sec-dom-D7) limited signal Probable confirmed 2026-06-27 sentinel.gi position carried: Thailand's AML/CFT regime is built on the Anti-Money Laundering Act B.E. 2542 (1999) and the CTPF Act B.E. 2559 (2016), with AMLO as FIU and supervisor. Thailand was grey-listed (2010/2011), exited in 2013/2015 and remains in APG enhanced follow-up; a February 2025 AMLA amendment package expanded predicate offences and reporting entities. Digital-asset operators are 'financial institutions' for AML purposes. Payments-context risks: mule accounts, QR-code laundering, cross-border scam-compound flows. Standing sub-brief · as of 27 June 2026 176 words · last cycle 2026-10-11 #### AML/CFT & Financial Crime This module is sourced from the Sentinel feed (sentinel.gi); original illicit-finance analysis is routed to FIM and is not re-analysed here. Per Sentinel, the Cabinet approved a substantial AMLA amendment package on 25 February 2025, expanding the predicate-offence list (including nominee shareholding and digital-asset offences), adding reporting-entity categories and clarifying AMLO's inspection authority, as part of continued FATF alignment. Thailand remains in APG enhanced follow-up. Also per Sentinel, in its 2023 follow-up report Thailand was re-rated on Recommendations 1 and 26 from Partially to Largely Compliant, now holding 33 Recommendations Compliant/Largely Compliant with 6 remaining Partially Compliant, and remains in enhanced follow-up under the APG. Digital-asset operators are treated as 'financial institutions' under AMLA via the Emergency Decree on Digital Asset Businesses s.7. These surfaces apply to both bank and non-bank actors. #### Outlook The AML/CFT surface is advancing under continued FATF alignment. Original analysis of mule-account typologies, scam-compound cross-border flows and QR-laundering is carried to FIM as a cross-monitor reference, not a WPM conclusion. See the Sentinel feed for the underlying intelligence. Periodic update · new data 2026-10-11 #### AML/CFT & Financial Crime This intelligence is attributed to the Sentinel.gi feed. The Bank of Thailand proposed amendments expanding the scope of know-your-customer and due-diligence requirements for cash-related transactions at financial institutions, a proposal that would supersede BOT Notification No. 16/2569 once finalised. The proposal remains at consultation stage, with an expected outcome in the fourth quarter of 2026, and differs in its practical reach depending on whether a financial institution is a bank or a non-bank payment company, since cash-transaction handling volumes and existing KYC infrastructure differ materially between the two populations. #### Outlook The consultation outcome, expected in Q4 2026, is the item to watch; its final scope will determine the practical compliance burden for both bank and non-bank payment company populations handling cash-related transactions. **Sources and findings (4)** 1. T3 [https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/thailand/](https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/thailand/) retrieved 2026-06-27 2. T? FIM (sentinel.gi) per-JID baseline profile — Thailand — AMLA 1999 (amended) with AMLO as FIU/supervisor; Emergency Decree on Digital Asset Businesses 2018 (SEC-regulated VASPs); 2022 NRA underpins 2022-2027 AML/CFT National Strategy; no beneficial ownership registry; DNFBP (real estate, gold/jewellery, casino) supervision remains weak per FATF follow-up findings. 3. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: absent-field-provenance 4. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: legal-gap ### W12 Correspondent Banking, Settlement & Access Confirmed confirmed 2026-06-27 BAHTNET (launched 24 May 1995) is BOT's RTGS system providing final, irrevocable settlement for high-value interbank transfers, accessible to institutions holding current accounts at BOT and to qualifying juristic persons under defined access criteria; it provides collateralised intraday liquidity and serves as the settlement backbone for PromptPay (via National ITMX). Cross-border PvP links (e.g. HKMA USD CHATS) support FX settlement and correspondent-banking relationships. BAHTNET has migrated to ISO 20022. Standing sub-brief · as of 27 June 2026 201 words · last cycle 2026-06-27 #### Correspondent Banking, Settlement & Access The analytical spine of this module is the bank versus non-bank access asymmetry to settlement infrastructure. BAHTNET, launched 24 May 1995, is BOT's RTGS system providing final, irrevocable settlement for high-value interbank transfers, accessible to institutions with current accounts at BOT and qualifying juristic persons under defined Access Criteria. It provides unlimited collateralised intraday liquidity, settles in central bank money with immediate finality, and has migrated to ISO 20022; it is the settlement backbone for PromptPay via National ITMX, and was assessed against CPSS-IOSCO PFMI as a sound system. Access to central-bank-money settlement is structured around bank and qualifying-institution criteria, leaving non-bank PIs dependent on bank rails for final settlement. On the cross-border layer, a payment-versus-payment link connects Hong Kong's USD RTGS system and Thailand's THB RTGS (BAHTNET), eliminating settlement risk in USD-THB FX transactions and creating correspondent-banking opportunities for Hong Kong banks serving Thai banks — a bank-PSP access enabler. #### Outlook The module is established. The settlement backbone and the USD-THB PvP link are stable, durable infrastructure. The persistent analytical tension is the dependency of non-bank providers on bank-held BOT accounts for final settlement, an asymmetry that the 2026 virtual-bank entrants may begin to reshape. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.bot.or.th/en/our-roles/payment-systems/Payment-systems.html](https://www.bot.or.th/en/our-roles/payment-systems/Payment-systems.html) retrieved 2026-06-27 2. T1 [https://documents1.worldbank.org/curated/en/769411571259925337/pdf/Thailand-Assessment-of-Observance-of-the-CPSS-IOSCO-Principals-for-Financial-Market-Infrastructures-BAHTNET-and-TSD.pdf](https://documents1.worldbank.org/curated/en/769411571259925337/pdf/Thailand-Assessment-of-Observance-of-the-CPSS-IOSCO-Principals-for-Financial-Market-Infrastructures-BAHTNET-and-TSD.pdf) retrieved 2026-06-27 3. T1 [https://www.hkma.gov.hk/eng/news-and-media/press-releases/2014/07/20140728-3/](https://www.hkma.gov.hk/eng/news-and-media/press-releases/2014/07/20140728-3/) retrieved 2026-06-27 4. T1 [https://www.imf.org/external/pubs/ft/scr/2009/cr09149.pdf](https://www.imf.org/external/pubs/ft/scr/2009/cr09149.pdf) retrieved 2026-06-27 ### W13 Commercial Intelligence (M&A, Investment & Product) Probable confirmed 2026-06-27 Three virtual-bank licences awarded 19 Jun 2025 to SCB X (WeBank/KakaoBank), Krungthai (Gulf/AIS/PTT OR) and ACM Holding/Ascend Money (CP/Ant International); operations required within one year. Standing sub-brief · as of 27 June 2026 215 words · last cycle 2026-08-05 #### Commercial Intelligence (M&A, Investment & Product) The dominant commercial event this cycle is the award of Thailand's first virtual-bank licences. On 19 June 2025 the Ministry of Finance approved virtual-bank licences for three consortia — SCB X (with WeBank and KakaoBank), Krungthai Bank (with Gulf, AIS and PTT OR), and ACM Holding/Ascend Money (CP Group, the TrueMoney operator, backed by Ant International) — selected from five applicants, with operations required within one year. This discrete licence-award event reshapes Thai banking and payments structure from 2026, pairing incumbents with regional digital banks and payments players. The deal value is not publicly disclosed; the event is classed as M&A, completed, with an event date of 19 June 2025. A second consolidation event: in 2025 ERX, a Thai-licensed digital token exchange, was rebranded as KuCoin Thailand after being acquired by global exchange KuCoin, continuing its token-issuance and tokenisation focus under the KuCoin banner. This is M&A, completed, acquirer KuCoin, target ERX, value not publicly disclosed and an approximate 2025 event date. #### Outlook The module is active. The virtual-bank consortia are required to commence operations within one year of the June 2025 award, a 2026 milestone. The KuCoin-ERX acquisition signals digital-asset market consolidation, though its precise value, completion date and regulatory-approval status are undisclosed and flagged for future verification. Periodic update · new data 2026-08-11 #### Commercial Intelligence & Fintech Wise's Bank of Thailand-licensed Thai entity gained direct outbound baht remittance capability and PromptPay access, effective on or after 19 May 2026, alongside enhanced KYC verification requirements for account holders [wpm-2026-W13-001]. This is a completed product release; amount not publicly disclosed, as this is a product-access expansion rather than a disclosed-value transaction. The finding rests on a single Tier-4 source this cycle and is held at Low confidence. #### Outlook Watch for whether other non-bank remittance providers pursue comparable direct PromptPay access following Wise's move, and for any Bank of Thailand commentary on the KYC standards applied to non-bank entities gaining direct instant-payment-rail access. **Sources and findings (4)** 1. T3 [https://www.nationthailand.com/business/banking-finance/40051473](https://www.nationthailand.com/business/banking-finance/40051473) retrieved 2026-06-27 2. T3 [https://www.crowdfundinsider.com/2025/04/238662-thailand-picks-krungthai-scbx-and-ascend-money-for-digital-banking/](https://www.crowdfundinsider.com/2025/04/238662-thailand-picks-krungthai-scbx-and-ascend-money-for-digital-banking/) retrieved 2026-06-27 3. T3 [https://aimbangkok.com/crypto-license-thailand/](https://aimbangkok.com/crypto-license-thailand/) retrieved 2026-06-27 4. T3 [https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developments](https://practiceguides.chambers.com/practice-guides/fintech-2026/thailand/trends-and-developments) retrieved 2026-06-27 ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Thailand| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 53 finding(s), 124 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).