You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

March 5, 2026

Thai SEC Heightens Enforcement Against Cross-Border Digital Asset Platforms

Thailand’s Securities and Exchange Commission (SEC) has filed a criminal complaint against a licensed digital asset broker, its overseas trading platform, and its executives for allegedly operating an unlicensed digital asset exchange targeting Thai customers. The case marks an escalation in the SEC’s enforcement efforts against unlicensed offshore platforms that attempt to serve Thai users through local licensed entities.

Criminal Complaint

On February 20, 2026, the SEC filed a criminal complaint with the Economic Crime Suppression Division against a local licensed digital asset broker, its overseas global trading platform, and its executives. The SEC alleges that the parties violated the Digital Asset Business Emergency Decree B.E. 2561 (2018) by cooperatively operating a digital asset exchange business on a cross-border basis since 2023 without the required SEC license.

According to the SEC, the local broker promoted the overseas platform’s services to the public through Thai-language posts on social media channels, with services available exclusively to customers residing in Thailand. Access to the global platform was provided through the local broker’s website and mobile application. Customers who registered for the local broker’s services were automatically granted access to the global platform without having to undergo a separate identity verification process. The SEC also found that the local broker provided back-office system support services to the global platform.

The SEC considers these activities to constitute joint operation of an unlicensed digital asset exchange. The former executives of the local broker are being held liable as the responsible persons during the relevant period. The SEC emphasized that the complaint initiates the criminal process, and the decision to prosecute or convict the accused parties will ultimately be made by law enforcement authorities and the criminal courts.

Platform Blocking

The SEC has also coordinated with the Ministry of Digital Economy and Society to block public access to the global platform under the Emergency Decree on Measures for the Prevention and Suppression of Technology Crime (No. 2) B.E. 2568 (2025). Access is expected to be restricted beginning March 22, 2026. The SEC has cautioned current users in Thailand to take appropriate steps regarding their digital assets held on the platform before the blocking date and reiterated its warning against using the services of unlicensed digital asset operators.

Key Takeaway

This enforcement action reflects the SEC’s heightened scrutiny of unlicensed offshore digital asset platforms and demonstrates that such platforms may not rely on local licensed entities to offer cross-border trading services targeting Thai users.

RELATED INSIGHTS​ 

November 7, 2025
Tilleke & Gibbins has contributed the Vietnam chapter to the latest edition of the Global FinTech Guide published by Multilaw. The guide provides a comprehensive overview of the legal and regulatory framework governing financial technology across major jurisdictions around the world. Compiled by experienced practitioners from Multilaw member firms, the Global FinTech Guide examines how technological innovation is transforming financial services and how regulators are adapting to developments such as digital payments, virtual assets, and online financial platforms. The publication offers comparative insights into regulatory regimes and presents detailed, jurisdiction-specific analysis for companies, investors, and entrepreneurs active in the FinTech sector. The Vietnam chapter, prepared by lawyers in Tilleke & Gibbins’ technology, media, and telecommunications team, surveys the key legal and regulatory developments shaping the country’s FinTech ecosystem. It covers the following areas: Payment services Asset and portfolio management Financial advisory and broking services (including robo-advisory and auto-trading) Trading platforms, social trading platforms, and signal following Crowdfunding, crowdinvesting, and crowdlending Distributed ledger technology (DLT) and cryptocurrencies Loan services, factoring, loan broking, and finetrading Identification Online banking services Initial coin offerings (ICOs) and token sales Insurtech Regtech and compliance management Know-your-customer (KYC) requirements Tilleke & Gibbins also contributed the Thailand chapter to the Global FinTech Guide. The full guide is available on the Multilaw website.
November 7, 2025
Tilleke & Gibbins has contributed the Thailand chapter to the latest edition of the Global FinTech Guide published by Multilaw. The guide offers an overview of the legal and regulatory environment for financial technology across key jurisdictions worldwide. Prepared by leading experts from Multilaw member firms, the Global FinTech Guide explores how innovation is reshaping the financial sector and how governments and regulators are responding to emerging technologies such as digital payment services, cryptocurrencies, and online financial advisory platforms. The publication enables quick comparison of regulatory frameworks and provides detailed country-level insights for investors, startups, and established financial institutions engaging in FinTech activities. The Thailand chapter, authored by lawyers in Tilleke & Gibbins’ technology and financial services teams, outlines the country’s evolving regulatory landscape for fintech operations. It addresses the following topics: Payment services Asset and portfolio management Financial advisory and broking services (including robo-advisory and auto-trading) Trading platforms, social trading platforms, and signal following Crowdfunding, crowdinvesting, and crowdlending DLT and cryptocurrencies Loan services, factoring, loan broking, and finetrading Identification Online banking services Initial coin offerings (ICOs) and token sales Insurtech Regtech and compliance management Know-your-customer (KYC) requirements Tilleke & Gibbins also contributed the Vietnam chapter to the Global FinTech Guide. The full guide is available on the Multilaw website.
October 31, 2025
On September 29, 2025, Thailand’s Office of the Personal Data Protection Committee (PDPC Office) published its Regulations on the Review and Certification of Binding Corporate Rules B.E. 2568 (2025) (the Regulations). The Regulations provide clarity on the PDPC Office’s approach to reviewing and certifying binding corporate rules (BCRs) under Section 29 of the Personal Data Protection Act B.E. 2562 (2019) (PDPA), and aim to facilitate international data transfers within a group of undertakings or enterprises (a “corporate group”). In conjunction with this development, the PDPC Office also approved BCRs for two companies operating in Thailand on September 30, 2025. This milestone represents the first concrete progress since the PDPC’s Notification on Criteria for the Protection of Personal Data Sent or Transferred to a Foreign Country pursuant to Section 29 of the PDPA B.E. 2566 (2023) came into effect in March 2024. Some key features of the Regulations are set out below. Categorization of BCRs BCRs are classified into two types: (1) BCRs for Controllers (BCR-C) and (2) BCRs for Processors (BCR-P). The category must be clearly specified when submitting the BCRs to the PDPC Office. Documentation Requirement The applicant must prepare and submit the application (a standard template may be provided by the PDPC Office in the future) along with supporting documents for review and certification in the Thai language. If the supporting documents are in a foreign language, a certified Thai translation should be provided. The translation must be notarized by a notary public or qualified person. Supporting documents may include, among others, a binding instrument such as an intra-group agreement, or a list of entities subject to the BCRs. Expedited Process Requirement Organizations with existing BCR approvals under the EU or UK GDPR, or from countries announced by the PDPC under Section 28, may apply through an
October 26, 2025
AI-generated songs are now making waves in Vietnam on platforms like TikTok, with tracks such as “Say mot doi vi em” quickly gaining popularity and sparking widespread attention. This phenomenon raises a host of legal and ethical questions: Who is the author of these songs? Can they be protected by copyright? Who is responsible if there is an infringement? These questions are becoming increasingly urgent as AI music becomes more mainstream in Vietnam. Copyright Protection for AI-Generated Music in Vietnam Under current Vietnamese law, copyright protection is reserved for works that bear the mark of human creativity. The 2022 amendments to Vietnam’s Intellectual Property Law reaffirm that only works created by humans are eligible for copyright. In practice, if a human meaningfully contributes to the creative process—by providing prompts, making selections, editing, or arranging—their contribution may be protected. However, if a song is generated entirely by AI without significant human input, it is unlikely to qualify for copyright protection. When an AI-generated song does not qualify for copyright protection, the question arises as to whether the person who writes the prompts, edits, or compiles the work can still be considered the owner of an asset under the Vietnamese Civil Code. According to Article 105 of the Civil Code 2015, assets include objects, money, valuable papers, and property rights. While AI-generated music that is not protected by copyright is not considered money or valuable papers, it may be regarded as an object (in the form of a digital file or recording) or as a property right if it can be possessed, used, transferred, or exploited for value. Use of AI-Generated Works Without Copyright Protection If a song is not protected by copyright, does that mean anyone can use it freely? Not necessarily. The absence of copyright does not mean the