You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

September 19, 2016

Regulation of Domestic Debit Card Transactions in Thailand

Asian Banking & Finance

Back in 2012, Thailand’s Electronic Transactions Commission issued regulations that mandated domestic processing of domestic debit card transactions with debit cards issued in Thailand. It granted a grace period of one year for service providers to meet the new requirements. This was a policy goal that had been discussed and pursued for some time, with policymakers highlighting the cost savings that would be yielded by domestic processing, rather than offshore processing.

New regulations were issued in March 2016, which were published in the Government Gazette  in April. The changes in those regulations in relation to processing domestic debit card transactions mainly provided greater specificity and rules around outsourcing and requests for temporary exemptions from parts of the regulations.

More recently, in July, amendments were made to the regulations, and these were published in the Government Gazette  in August. Among other things, the new regulations refer to a chip card standard for debit cards, and they state that the standard is to be issued and imposed by the Bank of Thailand through discussions with the Thai Bankers’ Association, the Association of International Banks in Thailand, and the Council of State-Owned Financial Institutions.

Financial institutions that issue debit cards will be required to issue cards meeting this chip card standard, and the cards must be issued to use debit card networks in Thailand, unless an issuer utilizes its own system for processing the transactions. The regulations also affect consumer protection, in that they require issuers to provide users with information and details about the costs of each type of debit card that is sufficient, clear, and correct, so that users can use the service properly for their own purposes.

Where an issuer issues a card that is accepted on more than one network, at least one of those networks must be a domestic debit card network. In working with multiple networks, regulations require an issuer to observe its agreements and take account of the principle of equality.

The regulations also impose new obligations on acquirers. Specifically, they are required to have equipment and systems to accept debit cards that meet the aforementioned chip card standard and that utilize local debit card networks. Importantly, acquirers are prohibited from restricting the rights of merchants to use any debit card networks. They are also required to provide merchants with clear and accurate information on fees and services. In addition, where multi-network cards are processed, an acquirer must not charge any additional fees other than those for the network that is actually used.

Aside from issuers and acquirers, the regulations also set out additional requirements for service providers that provide switching service, clearing service, and settlement service. These service providers are required to arrange their systems to support debit cards on all debit card networks or to connect their systems with those of other service providers that provide switching, clearing, and settlement. In relation to cards that can be accepted on multiple networks, a service provider must not interfere with a merchant’s right to select a debit card network.

The new requirements are to be enforced from February next year. Consistent with earlier regulations, if an issuer or acquirer is unable to meet the new requirements, it can apply to the Bank of Thailand for additional time to come into compliance—up to an additional 180 days.  Also, for those cards issued prior to enforcement of the new requirements, they can continue to be used, but the issuer will eventually need to replace them with cards meeting the chip card standard by December 31, 2019.

These regulations follow an earlier announcement by the Bank of Thailand in May of this year that commercial banks in Thailand would, from May 16 onward, issue cards in conformity with the “Thai Bank Chip Card Standard,” which was established by the Thai Bankers’ Association. Last year, China UnionPay issued press releases about entering into a Chip Card Standard License Agreement with the Thai Bankers’ Association, which contemplated the adoption of China UnionPay’s chip card standard as “the standard of Thailand’s banking industry.” China UnionPay became a member of EMVCo in 2013, thus joining Visa, MasterCard, American Express, JCB, and Discover in the consortium that manages EMV standards (the technical standard for such chips). However, much has also been written about the compatibility problems between China UnionPay’s version of EMV, and the versions of EMV used by other card schemes such as MasterCard and Visa.

In referring to the chip card standard, the new regulations do not make specific reference to the China UnionPay standard, or any particular standard, for that matter. Moreover, in referring to the development of the chip card standard, the regulations make reference not only to discussions with the Thai Bankers’ Association, but also to the Association of International Banks in Thailand and the Council of State-Owned Financial Institutions, which is quite broad consultation.

China UnionPay is a major shareholder in Thailand Payment Network Co., Ltd. (TPN), established in 2014, which is one of the small number of companies that have been granted licenses necessary for providing switching and clearing services for domestic debit card transactions in Thailand. One can now see some debit cards issued by Bangkok Bank—the other major shareholder in TPN—that bear TPN branding, together with China UnionPay branding. In essence, TPN will compete with National ITMX Co., Ltd., which is owned by ten major banks in Thailand and has been providing local debit card switching services for some years.

As it now stands, most banks in Thailand issue Visa and MasterCard debit cards, each with EMV chips. It remains to be seen whether TPN and China UnionPay will become popular.  Customers like Visa and MasterCard because of their ease of acceptance, particularly when traveling overseas. In contrast, TPN has positioned itself as a low-cost provider for local transactions, which it says should enable merchants to accept TPN branded-cards for small transactions. Ultimately, more competition in the processing of domestic debit card transactions is good for merchants. Indeed, this has already prompted several banks to reduce their fees for debit card transactions. Thailand’s electronic payments landscape continues to excite.

RELATED INSIGHTS​ 

June 19, 2025
The Bank of Thailand (BOT) has released draft guidelines establishing principles for managing artificial intelligence (AI) risks in the financial sector. The draft guidelines provide a structured framework for the responsible adoption of AI technologies. Financial service providers will be able to use the guidelines as a reference to appropriately manage their risks in a manner that aligns with internationally recognized best practices. The BOT is accepting public comments on the draft guidelines until June 30, 2025. Scope and Application The draft guidelines apply to all financial service providers, including financial institutions and special financial institutions under the Financial Institution Business Act, as well as payment providers under the Payment Systems Act. These guidelines supplement existing BOT risk management guidelines covering IT risk management, third-party risk management, data governance, and market conduct. The guidelines define AI systems as systems that mimic human intelligence, including machine learning, deep learning, generative AI (such as large language models), and agentic AI. This definition specifically excludes rule-based automation systems like robotic process automation and condition matching. Key Risk Management Principles The guidelines lay out two main principles in managing AI risk. Governance: Financial service providers should define and establish clear roles and responsibilities for their personnel and AI system supervision structures to uphold FEAT (fairness, ethics, accountability, and transparency) principles as follows: Stakeholder roles and responsibilities. Financial service providers should define roles and responsibilities for boards and executives on AI risk oversight. Responsibilities include establishing an AI system usage policy, designating personnel responsible for AI risk management, and building awareness of AI-related risk within the organization. AI system usage policy. The AI system usage policy should be aligned with organizational objectives, regulatory requirements, and FEAT principles. These policies should be reviewed regularly to respond to technological advancements and evolving risk profiles. Risk management
June 12, 2025
Thailand’s Ministry of Finance has issued a royal decree placing the business of hire purchase and leasing of cars and motorcycles under the scope of the Financial Institution Business Act B.E. 2551 (2008), effective December 2, 2025. This is to ensure appropriate regulatory oversight of these business activities, as they function similarly to credit granting and serve as a source of funding for the public with a broad impact on the overall economic system and consumers at large. The business operators that this royal decree applies to include corporate entities engaging regularly in the business of hire purchase or leasing of cars or motorcycles, currently excluding: Financial institutions and specialized financial institutions. Individuals operating such businesses (noncorporate entities). Cooperatives. Key regulatory obligations of this royal decree include the following: Business operators must disclose interest rates, service fees, and other relevant business information to the public and report to the Bank of Thailand (BOT). Business operators must display how the annual percentage rate (APR), including all annual charges covering interest and service fees, is calculated. Business operators must maintain accurate accounting records in accordance with recognized accounting standards. The BOT may issue warnings or suspend operations if business operators fail to comply with this royal decree or act unfairly in a way that may result in serious harm to customers. Directors, managers, and responsible persons of any business operator that violates this royal decree may also be subject to the prescribed penalties. Before the royal decree takes effect, business operators should conduct internal assessments and engage with counsel to prepare for regulatory implementation. The BOT is expected to issue further subordinate regulations and guidance regarding: Interest, service fees, deposits, collateral, benefits, and penalties that may be charged by business operators. Contract content, methods of benefit calculation, and format in conducting
May 28, 2025
Tilleke & Gibbins attorneys in Vietnam have contributed the 2025 edition of Doing Business in Vietnam, a comprehensive Q&A-style resource from Thomson Reuters Practical Law that provides essential insights for companies navigating business operations in Vietnam. The guide presents a detailed overview of the country’s legal framework and regulatory environment, reflecting recent updates in Vietnamese legislation and practice. This annually updated guide offers key information on the following areas: Legal system: Structure of the Vietnamese judiciary and the role of codified law. Foreign investment: Conditions for market access, licensing requirements, foreign ownership restrictions, and investment incentives. Business vehicles: Formation and operation of legal entities, including limited liability companies, joint-stock companies, and representative offices. Employment: Employment contracts, social insurance, labor rights, and procedures for hiring foreign nationals. Tax: Overview of corporate income tax, personal income tax, value-added tax, and other tax obligations. Intellectual property: Procedures for protecting and enforcing patents, trademarks, copyrights, and other IP rights. Data protection: Compliance requirements under Vietnam’s data privacy laws, including the Personal Data Protection Decree. Competition law: Antitrust rules and regulatory oversight under the Law on Competition. Anti-bribery and corruption: Legal framework and enforcement practices aimed at curbing corrupt activities. E-commerce and digital business: Regulations governing online platforms, digital content, and cross-border services. Marketing and advertising: Laws and guidelines on advertising standards and consumer protection. Product regulation and liability: Safety requirements, product liability issues, and roles of relevant authorities. Doing Business in Vietnam is part of Practical Law’s global series of legal guides designed to support international practitioners and businesses. To access the most recent edition of the Vietnam guide, visit the Practical Law website and sign up for a free trial.
May 5, 2025
On April 29, 2025, the government of Vietnam promulgated Decree No. 94/2025/ND-CP with regulations on a controlled “sandbox” for innovative fintech solutions in the banking sector (Decree 94). The decree aims to promote innovation, modernize banking, and enhance financial inclusion while assessing risks and benefits of fintech solutions in a controlled testing environment. Fintech Sandbox Currently, the fintech sandbox focuses on three specific areas: Credit scoring Open API data sharing Peer-to-peer (P2P) lending Eligible participants for the fintech sandbox include: Credit institutions and foreign bank branches (except for P2P lending) Fintech companies operating in Vietnam Cross-border supply by foreign providers is not included in the sandbox framework. Eligible participants are permitted to provide fintech solutions only within the scope specified in the Certificate of Sandbox Participation issued by the State Bank of Vietnam in consultation with other ministries. P2P lending companies face specific restrictions within the fintech sandbox, including prohibitions against: Providing security for customer loans Operating as a customer (i.e., P2P lender or borrower) Providing P2P lending solutions to pawn shops The maximum sandbox period is two years, with the possibility of extension as permitted by law. The outcomes of the fintech sandbox will serve as a practical basis for authorities to develop and refine future fintech regulations. It is worth noting that participation in the sandbox does not guarantee that participants will meet relevant business and investment conditions that may be stipulated in future regulations. Decree 94 will take effect on July 1, 2025, signaling that the Vietnamese government intends to take a proactive approach to fostering fintech development. Implications Parties interested in participating in the fintech sandbox should begin preparing now to be ready to apply for a Certificate of Sandbox Participation when the decree takes effect.