You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

August 26, 2016

New e-Payment Service Regulations for SFIs: A Boon for Customer Confidence?

Subscribe to Updates
Informed Counsel

In today’s digital economy, financial technology (FinTech) is a major economic driving force. FinTech has transformed the private sector, resulting in a drastic shift in the way customers use financial services. Financial institutions, in particular, have taken significant strides to implement innovative platforms to facilitate financial transactions and payment methods for goods and services. As electronic services become more sophisticated and prevalent, however, greater regulatory scrutiny needs to be paid to the industry in order to protect end-users and prevent damage to the country’s economy.

Background

Commercial banks are veterans in the e-Payment service market. They are governed by the Royal Decree Regulating Electronic Payment Services B.E. 2551 (2008); relevant Notifications of the Electronic Transaction Commission (ETC); and applicable Notifications of the Bank of Thailand (BOT), which also closely monitors their business activities.

Specialized Financial Institutions (SFIs), which were established by the government to provide financial services to various sectors that are not sufficiently served by commercial banks, are also engaged in the e-Payment service market. Thailand’s regulatory authorities determined that the laws and regulations surrounding SFIs and their engagement in e-Payment service businesses were insufficient, and further regulations were needed.

The Royal Decree on e-Payment Services

On March 30, 2016, the government promulgated the Royal Decree Governing the Control and Supervision of Electronic Payment Service Businesses of Specialized Financial Institutions B.E. 2559 (2016). It took effect on July 28.

As with commercial banks, the Royal Decree of 2016 designates the BOT to control and supervise the e-Payment service businesses of the following SFIs: Government Savings Bank, Bank for Agriculture and Agricultural Cooperatives, Government Housing Bank, Islamic Bank of Thailand, Export-Import Bank of Thailand, Small and Medium Enterprise Development Bank of Thailand, Thai Credit Guarantee Corporation, and Secondary Mortgage Corporation.

The Royal Decree aims to standardize supervisory provisions and measures enforced on both private and state service providers. This should help ensure financial and commercial stability, prevent damage caused to the public, and build trust and credibility in the e-Payment system among the public.

In terms of substantive provisions, the Royal Decree categorizes e-Payment service business into three lists, which resemble the categories for commercial banks in the Royal Decree Regulating Electronic Payment Services B.E. 2551 (2008), as follows:

  • List A: e-Money services used for purchasing specific goods or services as specified in advance from an entrepreneur, excluding e-Money services used only for customers’ convenience without the procurement of any profit from issuing the card, as prescribed by the BOT with the approval of the ETC. These services require notification before business operations commence.
  • List B: Credit card network services, electronic draft capture services, transaction switching services for payments in one system, and e-Money services used for purchasing specific goods or services as specified in advance at a place which uses the same system for distributing and providing these goods or services. These services require registration before business operations commence.
  • List C: Clearing services, settlement services, e-Payment services through any devices or networks, transaction switching services for payment through several systems, payment service provider services, and e-Money services used for purchasing specific goods or services as specified in advance in which the place where the services were used was not limited and the system for distributing or providing the services is not the same. These services require a license before business operations commence. The license lasts for ten years.

The Royal Decree also empowers the ETC to set methods and service conditions on: (1) custody and disclosure of customers’ personal information; (2) examining and maintaining system security for consistent reliability; (3) express prescribing of any service fees; (4) receiving and the process to ratify customers’ complaints or disputes; and (5) accounting and reporting, among others.

In addition, depending on the type of business, the BOT may prescribe additional rules on: (1) issuing evidence for payment; (2) keeping money which will be sent; (3) prescribing the finality of transferred money which may be unconditionally and promptly utilized by the beneficiary; and (4) arranging an independent auditor for security.

Any service providers in List A and List B that fail to comply with these rules will be subject to an administrative fine and/or an order of the ETC to take appropriate corrective action. Any service providers in List C that fail to comply with these rules can be subject to corrective measures, suspension, or license revocation.

Implementation

Even though the Royal Decree came into force on July 28, its transitional provisions allow SFIs which have operated an e-Payment service business prior to this date to continue their operation until November 24, 2016. The SFIs that want to continue their business need to notify, register, or apply for a license in accordance with this Royal Decree from August 26 to September 25, 2016.

If the Royal Decree is effectively enforced, and both the BOT and the ETC undertake their supervisory authority properly, information technology systems and electronic platforms will be much safer for customers who interact with these SFIs. Improved security and protection will lead to greater credibility with customers, and this will entice considerably more people to use e-Payment services.

Download Full Article
Related Professionals

Practices

Banking and Finance

Location

RELATED INSIGHTS​ 

February 10, 2023
On January 16, 2023, Thailand’s Securities and Exchange Commission (SEC) prescribed a set of security measures that digital asset business operators must implement if they provide custody of digital assets for their customers. The new security measures are prescribed in two notifications from the SEC and its office on digital asset wallet management systems and cryptographic key management systems, with the aim of safeguarding digital assets in custody against loss, fraud, and cybertheft. The notifications took immediate effect. The new security measures and the management systems are summarized below. Policy and guidelines for managing systems related to digital asset custody Digital asset business operators must have a written risk management policy for all systems relating to digital asset custody, approved by their board of directors and made accessible to all employees. The policy must be reviewed or revised at least once annually, or promptly if any potential risks are identified. Specific procedures must be implemented, such as establishment of a compliance team and internal controls. Management of systems for digital asset wallets and cryptographic keys Digital asset business operators must have policies and procedures for managing all systems relating to digital asset custody. This includes properly designing, developing, and managing digital asset wallets in a safe and secure manner. The same requirement on policies and procedures applies to cryptographic key management as well. Management of incidents that may affect systems related to digital asset custody Digital asset business operators must have measures in place to manage incidents that may impact systems related to digital asset custody. The measures include designating a person responsible for incident management, testing and reviewing the incident management policy annually, reporting any incidents affecting digital asset custody to the designated responsible person and the SEC immediately, and conducting a digital forensic investigation with an independent
Read More
January 26, 2023
On December 30, 2022, the Central Bank of Myanmar (CBM) updated its guidelines on the Thai baht to Myanmar kyat (THB-MMK) direct payment mechanism for Myanmar-Thailand border trade and other flows of capital. The CBM’s guidelines outline an expanded mechanism allowing more trade gates and more designated banks, stipulating banking arrangements for worker remittances, setting out a payment mechanism for exports, clarifying procedures for importing goods via the Myanmar-Thailand border trade, and instituting new reporting procedures. The THB-MMK mechanism came into being on March 3, 2022, as a pilot project for border trade in Myawaddy, Tachileik, and other areas approved by Myanmar’s Central Committee on Ensuring Smooth Flow of Trade and Goods. In this update, Myawaddy, Tachileik, Myeik, Kawthoung, Mawtaung, and other approved border trading zones are identified as open to the THB-MMK mechanism. During 2022, the following banks were approved to provide services for the THB-MMK direct payment mechanism: Approved March 4: Ayeyarwaddy Farmers Development Bank and Kasikornbank Public Company Limited Approved July 29: Myanmar Economic Bank and Bangkok Bank Public Company Limited (Yangon branch) Approved August 12: Kanbawza Bank (KBZ) and Bangkok Bank Public Company Limited (Yangon branch) Approved December 30: Ayeyarwady Bank and Bangkok Bank Public Company Limited (Yangon branch), CB Bank PCL and Bangkok Bank Public Company Limited (Yangon branch), UAB Bank and Krung Thai Public Company Limited, Myanmar Apex Bank and Siam Commercial Bank Myanmar Limited, Yoma Bank and Siam Commercial Bank Myanmar Limited Banking arrangements for workers’ remittances were also stipulated in the new update. In this regard, designated banks can process these remittances by partnering with CBM-permitted international currency transfer businesses, mobile banking service providers, and mobile money service providers after obtaining approval from the CBM. An addition to the direct payment mechanism is a requirement that exporters manage their received export
Read More
January 24, 2023
The Contract Committee of Thailand’s Consumer Protection Board has issued new requirements and prohibitions for consumer loan agreements. The Notification of the Contract Committee Re: Stipulation of Loan Business for Consumers as a Contract-Controlled Business B.E. 2565 (2022) was published in the Government Gazette on December 13, 2022, and will take effect after 90 days (i.e., on March 13, 2023). The notification repeals and replaces the Contract Committee’s previous notifications regarding the same subject matter, which were issued in 2001 (Nos. 1–2), 2002 (No. 3), and 2015 (No. 4). The notification enhances protection for consumers by extending the scope of application and stringently regulating the content of agreements for loans to individual consumers. Key Definitions The scope of the notification is largely indicated by its definitions of a few key terms: “Loan business for consumers” refers to a business in which the operator enters into an agreement to grant a loan to a consumer (i.e., not a juristic person) or to allow the consumer to borrow money from the business operator, whereby the consumer will spend money for a purpose other than their occupation or business to earn income. This includes granting loans to consumers through an electronic channel. The notification can also apply to personal loan businesses, digital loan businesses, and peer-to-peer lending businesses regulated by the Bank of Thailand. “Business operators” include financial institutions under the law relating to financial institutions; banks established under specific laws; individuals who carry out a loan business in their ordinary course of business; and juristic persons that engage in loan business, securitization business, or asset management of rights to monetary claim. Certain types of businesses and organizations—such as cooperatives—are excluded from the scope of this notification. “Interest” means legal interest in accordance with the Civil and Commercial Code, and it includes
Read More
December 8, 2022
The rapidly growing middle class in Southeast Asia is bringing with it increased household wealth, increased consumption, and increased investment. As a result, the commercial banking sector has seen a boom in the more economically developed countries of the region—especially in Thailand. A select few foreign banks have also been very successful in Cambodia, Laos, Myanmar, and Vietnam for many years, but as other banks seek to replicate their Thai success in these new markets, the field looks likely to become much more crowded in coming years. Six major Thai banks are active in at least one other jurisdiction in mainland Southeast Asia, with some already operating across them all, and many larger international banks also beginning to take note. Amid that background, this guide examines the legal frameworks for foreign banks seeking to operate in these jurisdictions, and addresses some current and upcoming developments that investors should note. The full guide is available as a PDF through the button below.
Read More