You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

December 7, 2020

Bank of Thailand Introduces Digital Personal Loans

Subscribe to Updates
Informed Counsel

With technological advancements, business operators are able to access more varieties of data than ever before, and are able to use that data to assess the terms on which loans are provided. This means that they can provide services to consumers more efficiently and with lower operating costs. More importantly, however, it allows them to provide financial services to a broader range of consumers who would otherwise not be able to access vital funds.

To facilitate this, on September 15, 2020, the Bank of Thailand (BOT) introduced a new type of personal loan—the digital personal loan—under BOT Circular Re: Rules, Procedures and Conditions for the Undertaking of Digital Personal Loan Business. Sometimes known as “quick loans” or “easy loans” in other jurisdictions, this new type of loan instrument is intended to promote Under the circular, a digital personal loan is defined as a personal loan for which business operators utilize digital technology and alternative data (e.g., utility and mobile phone bill payment records) to assess the borrower’s ability and willingness to repay. The digital personal loans do not include loans for which car registration is used as collateral.

The key requirements for undertaking a digital personal loan business are as follows:

  1. Business operators are expected to use technology and alternative data to determine the customer’s risk profile, based on their ability or willingness to repay. The alternative data that is used must be from a trusted source and use a sensible hypothesis in assessing the customer’s credit profile. Such business operators may comply with the BOT’s information-based lending guidelines.
  2. Business operators must use electronic channels for both the provision and repayment of the loans. This may include disbursing and repaying by bank transfer, direct debit, or e-money to create a digital footprint in the financial sector for the customers.
  3. Business operators must disclose relevant information to customers, including interest rates, fines, service fees, operating fees, outstanding loan tables, and any other fees relating to the Digital Personal Loan. This information must also be easily accessible for customers through electronic means (for example, by being hosted and easily accessible on the loan providers website).
  4. The maximum loan amount is THB 20,000 with a tenure of not more than six months.
  5. Business operators are prohibited from charging additional interest rates, fines, service fees, operating fees, or any other fees to customers for early repayment of a loan.
  6. Business operators are required to have IT security risk management measures in place. This includes measures to protect data from unlawful collection, processing, use, and destruction. Business operators also have an obligation to business continuity management, which they must satisfy by having a business continuity plan and an IT Disaster Recovery Plan. If the business operator will outsource their IT systems or connect their IT systems to third party services in a way that will involve the transfer of sensitive data (e.g. by using a cloud computing service), the third party must also have risk management and cybersecurity processes in place to the same standards.

Personal loan license holders that wish to offer digital personal loans must submit an application and supporting documents, including information on their minimum viable product, for BOT consideration at least 30 business days prior to the date on which they plan to begin offering digital personal loans. However, this application requirement is waived if the provision of digital personal loans only uses traditional methods of assessing customers’ ability or willingness to repay their loans (such as the National Credit Bureau).

Business operators who would like to issue digital personal loans but do not currently have a personal loan license must first apply for one from the BOT in accordance with the requirements of BOT Notification SorNorSor. 12/2563 Re: Regulations, Procedures and Conditions for Undertaking Business of Personal Loan under Supervision. In practice, these business operators may apply for a personal loan license and simultaneously apply for BOT approval of their plan to issue digital personal loans.

While digital personal loans look set to become a major offering in Thai consumer banking, they are also of particular interest to non-traditional loan operators—especially e-money operators, large-scale casual employers (such as ride-share operators and delivery services), and even retailers, as has been the case with similar “quick loan” systems in other jurisdictions.

Download Full Article
Related Professionals

Industries

Technology

Practices

Banking and Finance

Location

RELATED INSIGHTS​ 

March 13, 2025
Vietnam’s Ministry of Finance has released a draft Decree on Tax Administration for E-Commerce and Digital Platforms (“Draft Decree”), introducing significant tax compliance obligations that could reshape how digital platforms, and individuals and business households conducting business through the platforms, manage their tax responsibilities. Aimed at strengthening tax enforcement, the Draft Decree requires e-commerce and digital platforms to actively track and withhold taxes from business households and individual sellers, and remit payments to tax authorities. While it has not yet been promulgated, the Draft Decree is expected to take effect on April 1, 2025, leaving platforms with a limited window to prepare for compliance. Who Is Affected by the New Tax Rules? The Draft Decree significantly broadens the tax administration scope beyond traditional e-commerce platforms to cover a wide range of digital economy participants. Specifically, the Draft Decree places direct tax-related responsibilities on two major categories (collectively, “Regulated Operators”): E-commerce and digital platforms with payment functions (e.g., platforms that process buyer payments via e-wallets, bank transfers, cards, or cash-on-delivery); and Other digital-economy players that enable e-commerce transactions, including (i) intermediary service platforms connecting service providers with consumers, (ii) digital content platforms, (iii) online advertising providers, (iv) cloud computing and data storage providers, (v) social media platforms engaged in business activities (e.g., live-stream, in-app transactions), (vi) online education, gaming, and digital entertainment platforms generating revenue from digital transactions, (vii) Vietnam-based partners of foreign digital service providers facilitating local payments for overseas platforms, and (viii) intermediary payment service providers handling financial transactions for e-commerce activities. Under the Draft Decree, Regulated Operators will be required to track, report, and enforce tax compliance for both resident and nonresident individuals and households conducting business through their platforms (“Sellers”). What New Tax Obligations Do Platforms Face? Onshore platforms For the first time, Regulated Operators will
Read More
March 10, 2025
Thailand’s Securities and Exchange Commission (SEC) will officially add USD Coin (USDC) and Tether (USDT) to its list of approved cryptocurrencies for use in digital asset transactions on March 16, 2025. The addition is a significant move that expands Thailand’s digital asset market, aiming to enhance market flexibility and provide more payment options for investors and traders in Thailand’s digital asset ecosystem. Under the SEC regulations, digital asset operators, including digital token issuers, ICO portals, and digital asset exchanges, are only permitted to accept, conduct transactions with, and use “approved cryptocurrencies” as trading pairs. After the addition of USDC and USDT, the full list of approved cryptocurrencies will include: Bitcoin (BTC) Ethereum (ETH) Ripple (XRP) Stellar (XLM) Tether (USDT) USD Coin (USDC) Other cryptocurrencies used for testing programmable payments under the enhanced regulatory sandbox in accordance with the Bank of Thailand’s rules and conditions. For more information on these new additions, or on any aspect of digital assets and cryptocurrency in Thailand, please contact Kobkit Thienpreecha at [email protected], Pornpan Wichawut at [email protected], Napassorn Lertussavavivat at [email protected], or Rujaporn Paritsantik at [email protected].
Read More
February 28, 2025
Vietnam’s Decree No. 163/2024/ND-CP (Decree 163), which has been in full effect since January 1, 2025, provides crucial guidance on the implementation of Vietnam’s 2023 Telecom Law. Decree 163 replaced Decree No. 25/2011/ND-CP dated April 6, 2011 (Decree 25), which guided the implementation of the previous 2009 Telecom Law, and introduces many notable changes to the regulations on telecom service provision. Some key changes that will impact businesses engaged in the telecom sector in Vietnam are detailed below. 1. Classification of Telecom Services The classification of telecom services into “basic telecom services” and “value-added telecom services” has been retained, in alignment with Vietnam’s WTO commitments in the telecom sector. However, Decree 163 expands the scope of both categories, as follows: Basic telecom services: “Transmission services for machine-to-machine (M2M) communication” and “leasing services of all or part of the telecom network” are added. “Image transmission services” is changed to “transmission services for radio and television.” Value-added telecom services: “Data center services,” “cloud computing services,” and “basic telecom services over the internet” (also known as over-the-top (OTT) telecom services) are added. 2. M2M Communication Services Since M2M communication services are classified as basic telecom services, without exception, they are subject to the same regulatory framework. Specifically: Cross-border provision: M2M communication services provided across borders must be conducted through a commercial agreement with a Vietnamese telecom enterprise licensed to provide telecom services with an international communication scope. Onshore provision: Onshore M2M communication services will require a telecom license. 3. New Telecom Services (Data Center, Cloud, and OTT Telecom Services) The 2023 Telecom Law adopted a light-touch management approach for data center, cloud, and OTT telecom services by not requiring the same licensing as previously regulated value-added telecom services, but instead mandating registration or notification before service provision. Decree 163 offers clearer guidance
Read More
February 26, 2025
Tilleke & Gibbins has contributed the Vietnam chapter to Data Protection 2025, a comprehensive comparative guide in the Law Over Borders series from Global Legal Post. This Q&A-style resource offers detailed insights into data protection regulations across multiple jurisdictions, serving as an essential reference for organizations managing personal data in today’s global business environment. The Vietnam chapter examines the evolving data protection landscape in Vietnam, including analysis of relevant provisions in the Cybersecurity Law, the Law on Information Technology, and the upcoming Personal Data Protection Decree. The chapter addresses key aspects of data protection through the following topics: Regulatory framework: Analysis of national laws regulating personal data, jurisdictional scope, application to different entities, and regulated data processing activities. Data categories and processing: Overview of regulated personal data types, special categories requiring enhanced protection, and lawful processing requirements. Compliance requirements: Explanation of controller and processor obligations, technical and organizational measures, and data subject rights. Commercial communications and international transfers: Rules governing direct marketing and cross-border data flows. Regulatory oversight: Details on enforcement powers, investigation procedures, sanctions, and remedies for noncompliance. Tilleke & Gibbins also contributed the Thailand chapter to Data Protection 2025. Readers can access the complete Data Protection 2025 guide through Global Legal Post’s Law Over Borders platform.
Read More