You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

September 19, 2016

Regulation of Domestic Debit Card Transactions in Thailand

Asian Banking & Finance

Back in 2012, Thailand’s Electronic Transactions Commission issued regulations that mandated domestic processing of domestic debit card transactions with debit cards issued in Thailand. It granted a grace period of one year for service providers to meet the new requirements. This was a policy goal that had been discussed and pursued for some time, with policymakers highlighting the cost savings that would be yielded by domestic processing, rather than offshore processing.

New regulations were issued in March 2016, which were published in the Government Gazette  in April. The changes in those regulations in relation to processing domestic debit card transactions mainly provided greater specificity and rules around outsourcing and requests for temporary exemptions from parts of the regulations.

More recently, in July, amendments were made to the regulations, and these were published in the Government Gazette  in August. Among other things, the new regulations refer to a chip card standard for debit cards, and they state that the standard is to be issued and imposed by the Bank of Thailand through discussions with the Thai Bankers’ Association, the Association of International Banks in Thailand, and the Council of State-Owned Financial Institutions.

Financial institutions that issue debit cards will be required to issue cards meeting this chip card standard, and the cards must be issued to use debit card networks in Thailand, unless an issuer utilizes its own system for processing the transactions. The regulations also affect consumer protection, in that they require issuers to provide users with information and details about the costs of each type of debit card that is sufficient, clear, and correct, so that users can use the service properly for their own purposes.

Where an issuer issues a card that is accepted on more than one network, at least one of those networks must be a domestic debit card network. In working with multiple networks, regulations require an issuer to observe its agreements and take account of the principle of equality.

The regulations also impose new obligations on acquirers. Specifically, they are required to have equipment and systems to accept debit cards that meet the aforementioned chip card standard and that utilize local debit card networks. Importantly, acquirers are prohibited from restricting the rights of merchants to use any debit card networks. They are also required to provide merchants with clear and accurate information on fees and services. In addition, where multi-network cards are processed, an acquirer must not charge any additional fees other than those for the network that is actually used.

Aside from issuers and acquirers, the regulations also set out additional requirements for service providers that provide switching service, clearing service, and settlement service. These service providers are required to arrange their systems to support debit cards on all debit card networks or to connect their systems with those of other service providers that provide switching, clearing, and settlement. In relation to cards that can be accepted on multiple networks, a service provider must not interfere with a merchant’s right to select a debit card network.

The new requirements are to be enforced from February next year. Consistent with earlier regulations, if an issuer or acquirer is unable to meet the new requirements, it can apply to the Bank of Thailand for additional time to come into compliance—up to an additional 180 days.  Also, for those cards issued prior to enforcement of the new requirements, they can continue to be used, but the issuer will eventually need to replace them with cards meeting the chip card standard by December 31, 2019.

These regulations follow an earlier announcement by the Bank of Thailand in May of this year that commercial banks in Thailand would, from May 16 onward, issue cards in conformity with the “Thai Bank Chip Card Standard,” which was established by the Thai Bankers’ Association. Last year, China UnionPay issued press releases about entering into a Chip Card Standard License Agreement with the Thai Bankers’ Association, which contemplated the adoption of China UnionPay’s chip card standard as “the standard of Thailand’s banking industry.” China UnionPay became a member of EMVCo in 2013, thus joining Visa, MasterCard, American Express, JCB, and Discover in the consortium that manages EMV standards (the technical standard for such chips). However, much has also been written about the compatibility problems between China UnionPay’s version of EMV, and the versions of EMV used by other card schemes such as MasterCard and Visa.

In referring to the chip card standard, the new regulations do not make specific reference to the China UnionPay standard, or any particular standard, for that matter. Moreover, in referring to the development of the chip card standard, the regulations make reference not only to discussions with the Thai Bankers’ Association, but also to the Association of International Banks in Thailand and the Council of State-Owned Financial Institutions, which is quite broad consultation.

China UnionPay is a major shareholder in Thailand Payment Network Co., Ltd. (TPN), established in 2014, which is one of the small number of companies that have been granted licenses necessary for providing switching and clearing services for domestic debit card transactions in Thailand. One can now see some debit cards issued by Bangkok Bank—the other major shareholder in TPN—that bear TPN branding, together with China UnionPay branding. In essence, TPN will compete with National ITMX Co., Ltd., which is owned by ten major banks in Thailand and has been providing local debit card switching services for some years.

As it now stands, most banks in Thailand issue Visa and MasterCard debit cards, each with EMV chips. It remains to be seen whether TPN and China UnionPay will become popular.  Customers like Visa and MasterCard because of their ease of acceptance, particularly when traveling overseas. In contrast, TPN has positioned itself as a low-cost provider for local transactions, which it says should enable merchants to accept TPN branded-cards for small transactions. Ultimately, more competition in the processing of domestic debit card transactions is good for merchants. Indeed, this has already prompted several banks to reduce their fees for debit card transactions. Thailand’s electronic payments landscape continues to excite.

RELATED INSIGHTS​ 

August 11, 2026
On July 27, 2026, the State Bank of Vietnam (SBV) released a draft decree proposing amendments to Decree No. 52/2024/ND-CP dated May 15, 2024, on non-cash payments (Decree 52). The draft decree would amend 17 of Decree 52’s 38 articles, with several key changes directly affecting providers of intermediary payment service (IPS). The key proposed changes affecting IPS providers are outlined below. Streamlining IPS Licensing Procedures A central objective of the draft decree is to simplify regulatory procedures for IPS providers. Notably, it would significantly reduce IPS licensing documentation requirements by removing the need to submit enterprise registration certificates, investment registration certificates, and documents evidencing the qualifications of the legal representative and general director. Instead, the SBV would retrieve this information directly from national business registration and other specialized databases, requesting additional documents only where the relevant information cannot be verified electronically or is incomplete. The draft decree also removes the current limit of two rounds for dossier supplementation and shortens processing timelines for several IPS licensing procedures such as issuance, amendment, and reissuance of IPS licenses. The processing time for new IPS license applications would be thereby reduced from 90 to 60 working days. In addition, several continuing IPS business conditions would be removed. For example, IPS providers would no longer be required to maintain certain representations relating to corporate restructuring or the legality of contributed capital. Likewise, the IPS project plan (đề án) would become a one-time application document rather than an ongoing licensing condition. If retained in the final decree, this change could provide IPS providers with significantly greater flexibility to implement post-licensing technology upgrades, system integrations, and corporate restructuring transactions without needing to revisit the originally approved project plan. The draft decree also removes the requirement for the SBV to consult the Ministry of Public
August 3, 2026
On July 23, 2026, the Bank of Thailand (BOT) released for public comment its draft Notification on Digital Channel Security, which would significantly expand the scope and stringency of Thailand’s existing mobile banking security framework. If finalized in its current form, the draft notification would extend mandatory security requirements to credit card providers and credit providers, cover internet banking in addition to mobile applications, phase out SMS one-time passwords (OTPs) for transaction authentication, and introduce biometric verification requirements for high-value transactions. The public comment period is open through August 24, 2026. Background The BOT’s existing Mobile Banking Security Notification, issued in 2024, sets minimum security standards for financial institutions, specialized financial institutions (SFIs), and e-money providers, significantly reducing “money-draining app” fraud. However, fraudsters have since shifted to nonbank providers and internet banking channels, prompting the BOT to propose broader security requirements. Expanded Scope of Regulated Entities and Channels The existing Mobile Banking Security Notification covers only financial institutions, SFIs, and e-money providers offering mobile banking services. The draft expands coverage in two key areas: entities and channels. On the entity side, it adds credit card providers and credit providers that offer fund transfers to third parties at other financial service providers or that provide cash withdrawal services to individual retail customers. On the channel side, it broadens coverage to include internet banking in addition to mobile banking. Strengthened Customer Authentication The draft introduces enhanced authentication requirements in three areas: Service enrollment and device changes. Providers must implement rigorous identity verification, notify customers of enrollment results through out-of-band communication channels, and adopt risk-mitigation measures such as cooling-off periods and temporary transaction limits. Transaction-level authentication. Providers must use two-factor authentication for fund transfers, cardless ATM withdrawals, and transaction limit increases. Secure authentication factors. Key requirements include the following: “What-you-know” factors must
July 27, 2026
A new decree on penalties for violations related to the crypto asset market creates compliance risks for offshore crypto asset exchanges in Vietnam that do not hold, and practically cannot obtain, a Vietnamese license, and for Vietnamese users who continue to transact on those platforms. Decree No. 284/2026/ND-CP (Decree 284), issued by the government of Vietnam on July 16, 2026, formally establishes an administrative penalty framework for violations related to crypto assets and the crypto asset market. The decree takes effect on September 1, 2026, and will remain in force for the duration of the five-year pilot program under Resolution No. 05/2025/NQ-CP, which is scheduled to end in September 2030. Direct Penalties on Vietnamese Users The most immediate commercial risk to offshore platforms is that their Vietnamese users now face direct personal liability for using their exchanges. Vietnamese users who trade crypto assets outside of a Ministry of Finance-licensed service provider face fines of up to VND 50 million (approximately USD 1,900). Vietnamese users trading in crypto assets that are offered or issued to foreign users face higher penalties of up to VND 100 million (approximately USD 3,800). It is expected that Vietnamese users will be more willing to migrate away from offshore platforms now that there is a risk of real enforcement against them. Penalties on Unlicensed Service Providers Violations of providing crypto asset services or advertising crypto-related services without a license face fines of up to VND 200 million (approximately USD 7,700). Operating a crypto asset trading market without proper authorization falls within the same highest penalty bands. Organizations that violate issuance, provision, or disclosure rules may face fines of up to VND 200 million. Although the maximum administrative fine per violation is capped at VND 200 million for organizations and VND 100 million for individuals, these
July 17, 2026
On July 11, 2026, media reports conveyed key messages from Bank of Thailand (BOT) Governor Vitai Ratanakorn’s announcement of a sweeping regulatory crackdown on grey capital activities. The measures target high-value cash transactions, gold trading, and stablecoin flows, with new requirements set to take effect in the fourth quarter of 2026. The initiative aims to prevent financial institutions from facilitating shadow economy activity, money laundering—particularly through stablecoins—and capital flight, through enhanced compliance obligations on commercial banks across multiple transaction channels. Expanded Cash Controls Close the Deposit–Withdrawal Circuit New fourth-quarter guidelines will require individuals depositing THB 5 million or more in cash to formally verify the source of their funds. This builds on restrictions introduced in April 2026, which required anyone withdrawing 5 million baht or more in cash to provide their bank with verified commercial justification for why electronic transfers or checks could not be used. That initial measure caused high-value physical cash withdrawals to drop by 35 percent nationwide. The upcoming deposit-side requirement closes the circuit on large cash movements. The BOT is also assessing tracking mechanisms for high-value banknote swaps, specifically targeting individuals seeking to exchange large volumes of THB 1,000 notes into smaller THB 100 or THB 500 denominations without clear business justification. Governor Vitai emphasized that these measures require continuous deployment of multiple parallel strategies rather than short-term fixes. Tightened Bullion Reporting Frameworks Restrict Money Laundering Channels The BOT has also tightened reporting frameworks for gold trading to close money laundering loopholes and shield the Thai baht from speculative bullion volatility. Regulators identified a recurring pattern in which buyers purchased large quantities of gold through digital applications in the morning and then made same-day physical withdrawals from retail gold shops in the afternoon. Gold shops are reminded of their duties to flag and report cash