You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

September 10, 2020

Thailand Prepares to Amend Laws on Anti-Money Laundering and Counter-Terrorism Financing

Subscribe to Updates

By recommendation of the Financial Action Task Force (FATF), Thailand is preparing to amend the Anti-Money Laundering Act B.E. 2542 (1999) (AMLA) and the Counter Terrorism and Proliferation of Weapons of Mass Destruction Financing Act B.E. 2559 (2016) in order to be consistent with international standards. The public hearing on the draft acts was completed on June 15, 2020, and the laws will now continue through the cabinet and parliament.

Key Draft Amendments to the Anti-Money Laundering Act

  • The definition of “financial institution” is expanded to include operators of many financial technology services, including:
    • asset management and digital asset businesses;
    • trustees in capital market trusts;
    • derivatives businesses;
    • authorized juristic persons under foreign exchange controls;
    • personal loan businesses;
    • nano- and pico-finance businesses;
    • peer-to-peer lending businesses;
    • crowdfunding platforms;
    • regulated e-payment systems and services;
    • non-bank credit card service providers; and
    • additional businesses related to financial services or financial technology services at risk for money laundering (by further announcement in ministerial regulations).
  • The definition of “professions” (formerly known as “section-16 professions”) is expanded to include additional occupations and businesses, such as accounting, auditing, auto trading and leasing, legal consulting, and additional professions at risk for money laundering (by further announcement in ministerial regulations).
  • Measures for customer identity verification—commonly known as know-your-customer (KYC)—and customer due diligence (CDD) measures are consolidated into a single measure.
  • For cash transactions exceeding the prescribed threshold, parties in the listed professions are assigned recordkeeping duties in addition to their current reporting duties.
  • The authority and power of the Anti-Money Laundering Office are expanded to include acting as a central financial intelligence agency to regulate, check, and rate the operations of companies and branches both within and outside of Thailand.

Key Draft Amendments to the Counter Terrorism and Proliferation of Weapons of Mass Destruction Financing Act

  • A channel is established for section-6 designated persons to submit a petition for reconsideration and delisting to the U.N. Security Council via Thailand’s Ministry of Foreign Affairs.
  • If a designated person’s funds and assets are frozen, qualifying financial institutions and professions are given an exemption that enables them to deposit funds (e.g., due payments, interest, etc.) earned prior to the freeze into the frozen account.

Additional Updates to CDD Regulation

In addition to the above draft amendments, the new Ministerial Regulation on Customer Due Diligence B.E. 2563 (2020) came into force on August 12, 2020. This repealed and replaced the former version from 2013 (as amended), and contains the following key updates:

  • The definition of “politically exposed person” (PEP) has been amended for clarity and ease of compliance according to the FATF recommendations. Also, certain new definitions have been added, such as “senior management,” “family member,” “intimate person,” “business relationship,” “risk,” and “reliable source of information.”
  • The measures to assess, manage, and relieve risks have been streamlined for consistency with international standards. For example, reduction of a customer’s risk level now requires approval from senior management. Foreign PEPs and customers from any country in the FATF list of high-risk jurisdictions are to be treated as high-risk customers, whereas domestic PEPs are subject to CDD for risk assessment.
  • CDD and KYC measures have been enhanced for certain types of customers, such as juristic persons, trusts, and so on.
  • Reporting entities are excused from identifying the beneficial owners of certain types of customers, such as governmental authorities, special financial institutions, listed companies, mutual funds, and so on.
  • For international electronic transfer of funds below THB 50,000 (approximately USD 1,600), the transferring financial institution must also transmit information about the transferor and transferee to the receiving financial institution.

For more information on this development, or on any aspect of anti-money laundering law, please contact Kobkit Thienpreecha at [email protected] or +66 2056 5534, or Teelada Rujirawanichtep at [email protected] or +66 2056 529.

Related Professionals

Practices

Banking and Finance

Compliance and Investigations

Location

RELATED INSIGHTS​ 

December 3, 2025
Recent high-profile corporate fraud and accounting scandals have brought increased scrutiny to governance, compliance, and enforcement practices in Thailand, highlighting the legal and practical challenges facing companies operating in the country. As regulators and law enforcement authorities sharpen their focus on financial misconduct, cybercrime, and corruption, businesses must navigate a complex and evolving investigative landscape. Tilleke & Gibbins’ investigations and compliance team examines these issues in the Thailand chapter of The Practitioner’s Guide to Global Investigations – Tenth Edition, published by Global Investigations Review (GIR). The chapter provides a detailed overview of Thailand’s legal framework for corporate investigations, offering practical guidance for companies and counsel responding to regulatory and criminal scrutiny. The Thailand chapter covers key topics including corporate criminal liability, enforcement priorities, internal investigations, data protection considerations, dawn raids, whistleblowing, cyber-related investigations, and cross-border cooperation. It also addresses emerging issues such as cybersecurity enforcement, economic sanctions compliance, and anticipated developments affecting investigations in Thailand. The chapter is authored by John Frangos, Chitchai Punsan, Alongkorn Tongmee, Michael Ramirez, Piyawat Vitooraporn, and Michelle McLeod. The Thailand chapter is available as a PDF below, and the full guide can be accessed on the GIR website.
Read More
November 24, 2025
A recent warning from the Central Bank of Myanmar (CBM) against cryptocurrency use upholds the country’s ongoing strategy of enforcing strict prohibitions on unauthorized cryptocurrency activities while also promoting the controlled development of a central bank digital currency (CBDC). The CBM’s warning, issued November 16, 2025, reminded the public of announcements in May 2019 and a notification in May 2020 confirming that all online and offline cryptocurrency transactions are strictly prohibited. The CBM also clarified that no financial institution in Myanmar is authorized to deal with digital currencies. The warning highlighted global risks, such as money laundering, scams, tax evasion, hacking, and severe financial losses caused by price volatility and insufficient regulation. The CBM urged the public to use only legitimate banking channels and avoid illegal cryptocurrency activities. The warning comes five months after the CBM issued a notification announcing the formation of the Central Committee for the Issuance of a Central Bank Digital Currency. This committee includes senior CBM officials, representatives from relevant ministries and the banking sector, and technology experts. Its main role is to research CBDC models, test secure digital payment systems, and ensure that any future implementation aligns with Myanmar’s monetary policy and financial stability objectives. Taken together, these two actions illustrate the CBM’s continued pursuit of its dual strategy to promote innovation through CBDC development while prohibiting cryptocurrency use. Businesses should note that while CBDC pilot programs may appear in the future, cryptocurrencies remain off-limits.
Read More
September 24, 2025
On September 12, 2025, the Bank of Thailand (BOT) officially released its AI Risk Management Guidelines for Financial Service Providers, building upon the draft guidelines issued in June 2025. The guidelines reflect a balanced approach, encouraging innovation while safeguarding financial stability and consumer protection. The guidelines are targeted at all financial service providers, including financial institutions and special financial institutions under the Financial Institution Business Act, as well as payment providers under the Payment Systems Act. The guidelines apply to both AI systems developed in-house and those developed by third parties that are adopted for use by financial service providers. AI Risk Management Guidelines The two main pillars in managing AI risk are (1) governance of AI system implementation and (2) AI system development and security controls, consisting of the following key elements: 1. Governance Stakeholder roles and responsibilities. Boards and senior management assume accountability for decisions and operations involving AI systems, and are responsible for defining roles and responsibilities for AI oversight. This includes establishing an AI system usage policy, designating personnel responsible for AI risk management, and building awareness of AI-related risk within the organization. Organizations are expected to foster internal capabilities to use AI securely and avoid overreliance that could compromise business continuity or customer service. AI system usage policy. Policies governing AI usage should align with organizational goals, regulatory obligations, and recognized responsible AI frameworks—such as the FEAT principles (fairness, ethics, accountability, and transparency). These policies should be reviewed regularly to respond to technological advancements and evolving risk profiles. Risk management throughout the AI lifecycle. Risk management should encompass the entire AI lifecycle, from establishing risk appetite to implementing continuous risk assessment and control measures tailored to specific use cases. Financial service providers should assess risks and impacts of AI usage on operations and customer services.
Read More
September 12, 2025
On September 10, 2025, Vietnam’s National Credit Information Center (CIC) reported to the Vietnam Cybersecurity Emergency Response Team (VNCERT) a suspected significant cybersecurity incident involving unauthorized access to the CIC’s credit information database. A hacker group has claimed responsibility and allegedly posted over 160 million records for sale, including sensitive personal and financial data. Implications for Banks and Financial Institutions Companies that share customers’ or potential customers’ personal data with the CIC for credit scoring or other purposes—and continue to act as a data controller for such data—may be obligated under Vietnam’s Personal Data Protection Decree (PDPD) and related regulations to: Notify A05 (Department of Cybersecurity and High-Tech Crime Prevention) and the State Bank of Vietnam without delay. Inform affected individuals if their personal data is at risk. Recommended Actions Companies that could be impacted by this data breach should take the following actions: Conduct an internal review of CIC-related data in their systems, and identify whether and how the systems have been affected by this incident. Assess whether to notify regulators and customers/potential customers. Enhance cybersecurity controls, monitor for suspicious activity, and implement additional safeguards to prevent secondary breaches.
Read More