You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

October 21, 2024

Fintech Insights: The Bank of Thailand’s Sandbox Framework for Fintech Innovation

Subscribe to Updates

One key component of Thailand’s support for the development of fintech innovations is its sandbox framework, supervised by the Bank of Thailand (BOT). This framework supports business operators in experimenting with new technologies under controlled conditions.

This article explores the structure and significance of the BOT’s sandbox program in driving fintech innovation in Thailand.

The BOT Sandbox Framework

In June 2024, the BOT updated its sandbox framework to provide a more comprehensive and flexible environment for testing fintech innovations. The framework allows participants to experiment with their ideas in a controlled and limited environment, balancing the need for innovation with the imperative of maintaining financial stability and consumer protection.

Three Types of Sandboxes

The BOT’s framework encompasses three distinct types of sandboxes: the Regulatory Sandbox, the Own Sandbox, and the Enhanced Regulatory Sandbox.

Regulatory Sandbox

The Regulatory Sandbox is a mandatory testing ground for certain BOT-licensed financial services to ensure that potentially impactful innovations are tested and evaluated before wide-scale implementation. Participation in this sandbox is a prerequisite for:

  • License applications for specific financial services.
  • Implementation of new technologies or innovations in existing licensed services.
  • Financial services that have the potential to become a structural element or standard of the Thai financial sector.

A prime example of a service requiring participation in the Regulatory Sandbox is the Thai QR code payment via PromptPay system, which involved various banks several years ago until the Bank of Thailand granted permission for these services to be provided to the general public.

Own Sandbox

The Own Sandbox is an optional program that the BOT encourages for financial service providers and fintech operators implementing new technologies. This sandbox provides a more flexible environment for testing innovations that may not require the same level of regulatory scrutiny as those in the Regulatory Sandbox.

Enhanced Regulatory Sandbox

The Enhanced Regulatory Sandbox is a specialized testing environment for new financial products or services that are not yet authorized by the BOT for regulated financial operators. This sandbox operates under the close supervision of the BOT and is conducted under controlled conditions with limitations on how the product or service can be offered and tested.

Benefits of the Sandbox Approach

The BOT’s sandbox framework offers notable benefits to both innovators and the broader financial ecosystem. Perhaps foremost is risk mitigation. By testing new technologies and business models in a controlled environment, potential risks can be identified and addressed before wider implementation. Participants can also gain insights into how their innovations fit within the existing regulatory framework. Additionally, the close monitoring enabled by the sandbox framework empowers the BOT to better safeguard consumer interests in a changing technological environment.

Conclusion

The BOT-supervised sandbox framework represents a significant commitment to fostering fintech innovation in Thailand. By providing structured environments for testing new technologies and business models, the BOT is helping to create a competitive fintech ecosystem while maintaining the stability of the financial sector.

This forward-thinking but responsible approach toward financial innovation has positioned Thailand as a potential leader in fintech development in Southeast Asia. Companies developing new technologies and considering market entry should understand and comply with the requirements and recommendations associated with the BOT-supervised sandbox framework, as this can prevent missteps and possibly even smooth their path launching new products and services in the Thailand market.

Related Professionals

Industries

Fintech

Location

RELATED INSIGHTS​ 

November 24, 2025
A recent warning from the Central Bank of Myanmar (CBM) against cryptocurrency use upholds the country’s ongoing strategy of enforcing strict prohibitions on unauthorized cryptocurrency activities while also promoting the controlled development of a central bank digital currency (CBDC). The CBM’s warning, issued November 16, 2025, reminded the public of announcements in May 2019 and a notification in May 2020 confirming that all online and offline cryptocurrency transactions are strictly prohibited. The CBM also clarified that no financial institution in Myanmar is authorized to deal with digital currencies. The warning highlighted global risks, such as money laundering, scams, tax evasion, hacking, and severe financial losses caused by price volatility and insufficient regulation. The CBM urged the public to use only legitimate banking channels and avoid illegal cryptocurrency activities. The warning comes five months after the CBM issued a notification announcing the formation of the Central Committee for the Issuance of a Central Bank Digital Currency. This committee includes senior CBM officials, representatives from relevant ministries and the banking sector, and technology experts. Its main role is to research CBDC models, test secure digital payment systems, and ensure that any future implementation aligns with Myanmar’s monetary policy and financial stability objectives. Taken together, these two actions illustrate the CBM’s continued pursuit of its dual strategy to promote innovation through CBDC development while prohibiting cryptocurrency use. Businesses should note that while CBDC pilot programs may appear in the future, cryptocurrencies remain off-limits.
Read More
November 7, 2025
Tilleke & Gibbins has contributed the Vietnam chapter to the latest edition of the Global FinTech Guide published by Multilaw. The guide provides a comprehensive overview of the legal and regulatory framework governing financial technology across major jurisdictions around the world. Compiled by experienced practitioners from Multilaw member firms, the Global FinTech Guide examines how technological innovation is transforming financial services and how regulators are adapting to developments such as digital payments, virtual assets, and online financial platforms. The publication offers comparative insights into regulatory regimes and presents detailed, jurisdiction-specific analysis for companies, investors, and entrepreneurs active in the FinTech sector. The Vietnam chapter, prepared by lawyers in Tilleke & Gibbins’ technology, media, and telecommunications team, surveys the key legal and regulatory developments shaping the country’s FinTech ecosystem. It covers the following areas: Payment services Asset and portfolio management Financial advisory and broking services (including robo-advisory and auto-trading) Trading platforms, social trading platforms, and signal following Crowdfunding, crowdinvesting, and crowdlending Distributed ledger technology (DLT) and cryptocurrencies Loan services, factoring, loan broking, and finetrading Identification Online banking services Initial coin offerings (ICOs) and token sales Insurtech Regtech and compliance management Know-your-customer (KYC) requirements Tilleke & Gibbins also contributed the Thailand chapter to the Global FinTech Guide. The full guide is available on the Multilaw website.
Read More
November 7, 2025
Tilleke & Gibbins has contributed the Thailand chapter to the latest edition of the Global FinTech Guide published by Multilaw. The guide offers an overview of the legal and regulatory environment for financial technology across key jurisdictions worldwide. Prepared by leading experts from Multilaw member firms, the Global FinTech Guide explores how innovation is reshaping the financial sector and how governments and regulators are responding to emerging technologies such as digital payment services, cryptocurrencies, and online financial advisory platforms. The publication enables quick comparison of regulatory frameworks and provides detailed country-level insights for investors, startups, and established financial institutions engaging in FinTech activities. The Thailand chapter, authored by lawyers in Tilleke & Gibbins’ technology and financial services teams, outlines the country’s evolving regulatory landscape for fintech operations. It addresses the following topics: Payment services Asset and portfolio management Financial advisory and broking services (including robo-advisory and auto-trading) Trading platforms, social trading platforms, and signal following Crowdfunding, crowdinvesting, and crowdlending DLT and cryptocurrencies Loan services, factoring, loan broking, and finetrading Identification Online banking services Initial coin offerings (ICOs) and token sales Insurtech Regtech and compliance management Know-your-customer (KYC) requirements Tilleke & Gibbins also contributed the Vietnam chapter to the Global FinTech Guide. The full guide is available on the Multilaw website.
Read More
September 24, 2025
On September 12, 2025, the Bank of Thailand (BOT) officially released its AI Risk Management Guidelines for Financial Service Providers, building upon the draft guidelines issued in June 2025. The guidelines reflect a balanced approach, encouraging innovation while safeguarding financial stability and consumer protection. The guidelines are targeted at all financial service providers, including financial institutions and special financial institutions under the Financial Institution Business Act, as well as payment providers under the Payment Systems Act. The guidelines apply to both AI systems developed in-house and those developed by third parties that are adopted for use by financial service providers. AI Risk Management Guidelines The two main pillars in managing AI risk are (1) governance of AI system implementation and (2) AI system development and security controls, consisting of the following key elements: 1. Governance Stakeholder roles and responsibilities. Boards and senior management assume accountability for decisions and operations involving AI systems, and are responsible for defining roles and responsibilities for AI oversight. This includes establishing an AI system usage policy, designating personnel responsible for AI risk management, and building awareness of AI-related risk within the organization. Organizations are expected to foster internal capabilities to use AI securely and avoid overreliance that could compromise business continuity or customer service. AI system usage policy. Policies governing AI usage should align with organizational goals, regulatory obligations, and recognized responsible AI frameworks—such as the FEAT principles (fairness, ethics, accountability, and transparency). These policies should be reviewed regularly to respond to technological advancements and evolving risk profiles. Risk management throughout the AI lifecycle. Risk management should encompass the entire AI lifecycle, from establishing risk appetite to implementing continuous risk assessment and control measures tailored to specific use cases. Financial service providers should assess risks and impacts of AI usage on operations and customer services.
Read More