You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

September 2, 2026

Thailand Proposes Crypto ETF Framework and Stricter Custodian Rules for Digital Asset Funds

On August 21, 2026, Thailand’s Securities and Exchange Commission (SEC) published two consultation papers that would broaden regulated access to crypto assets while tightening custody standards. The first proposes a framework for establishing crypto exchange-traded funds (crypto ETFs) in Thailand. The second proposes enhanced qualification requirements for foreign digital asset custodians serving mutual funds and private funds that invest in digital assets.

The proposals seek to expand regulated access to crypto assets while strengthening custody, governance, disclosure, and investor protection, and they affect fund managers, trustees, and licensed digital asset operators. Comments on both papers are due by September 20, 2026, and the SEC expects the resulting rules to take effect later in 2026.

Elevating Foreign Custodian Standards

Under current rules in effect since January 16, 2025, mutual funds and private funds investing in digital assets may use foreign custodians that meet qualifications similar to those set for domestic digital asset business operators. The SEC now proposes that foreign digital asset custodians satisfy two cumulative requirements:

  • Compliance with the existing baseline qualifications: demonstrated expertise, robust cybersecurity measures, segregation of client assets, controls preventing unauthorized asset transfers, and sound financial standing.
  • Supervision by a regulator that is either (1) an IOSCO Signatory A member under the Multilateral Memorandum of Understanding, the international arrangement through which securities regulators share information and cooperate on enforcement, or (2) a regulator in a jurisdiction that the Thai SEC designates as having adequate supervisory and investor protection standards.

The SEC is initially considering 11 jurisdictions for the approved-country list: France, Germany, Hong Kong SAR, Ireland, Japan, Liechtenstein, Luxembourg, Malaysia, Singapore, South Korea, and the United States. The SEC may expand this list over time based on its assessment of other jurisdictions’ regulatory frameworks governing custodian licensing, asset segregation, secure custody practices, client rights in insolvency, and custody agreement terms. Designation of a jurisdiction does not, however, automatically qualify every custodian based there; fund managers and trustees will still have to conduct case-by-case due diligence on each service provider, evaluating its regulatory scope, risk profile, and alignment with fund and investor interests.

The enhanced requirements would apply to foreign custodians used by mutual funds and private funds investing in digital assets and, if permitted by the SEC, by crypto ETFs. Existing funds would have 120 days from the proposed rules’ effective date to comply. Fund managers using foreign custodians may therefore wish to begin reassessing provider due diligence and monitoring, contractual protections, audit and information rights, and transition arrangements prior to the rules taking effect later in 2026.

Crypto ETF Framework: Prioritizing Thai Custodians

The SEC’s companion consultation addresses crypto ETF establishment and oversight, building on the previous hearing held during April and May 2026. The Capital Markets Committee approved the framework principles on June 16, 2026, and the SEC Board followed on July 2, 2026.

Under the proposed rules, crypto ETFs must use Thai-licensed digital asset custodians as a primary route. The SEC may permit foreign custodians when necessary and appropriate to market conditions, applying the same elevated qualification criteria detailed above. Each fund would be structured as a passive, single-crypto ETF and would generally be required to maintain an average annual net exposure of at least 80% of its net asset value to the relevant crypto asset, without using derivatives to obtain that exposure.

Fund managers must demonstrate readiness in personnel, systems, risk management, and investment strategy, and must identify service providers, including custodians, participant dealers, and market makers, before receiving approval.

The rules would permit digital asset custodians and certain other digital asset business operators—such as exchanges and brokers—to serve as trustees for crypto ETFs, subject to applicable financial, personnel, independence, and systems requirements. A digital asset custodian acting as trustee could hold the crypto assets itself, while another category of digital asset operator acting as trustee would need to appoint a licensed digital asset custodian. These distinctions will affect operating models, outsourcing arrangements, conflicts management, and the allocation of regulatory responsibility.

Thai Market Implications for Fund Managers and Digital Asset Operators

Requiring crypto ETFs to rely primarily on Thai-licensed custodians is likely to concentrate initial demand among a limited pool of qualified local providers. This may create capacity, pricing, counterparty, and business-continuity considerations for fund managers, while also creating opportunities for licensed custodians and other qualified digital asset operators to expand into fund-related services.

Fund managers launching crypto ETFs or managing funds with digital asset exposure should begin identifying and evaluating Thai-licensed custodians and other critical service providers. Where existing arrangements involve foreign custodians, managers should verify whether those providers meet the proposed dual-qualification test and assess whether contractual amendments or a change of provider may be required within the 120-day transition period. Because fund operations depend heavily on these providers, fund managers should also confirm that due diligence, incident-response protocols, contingency plans, and ongoing monitoring are documented and in place before the rules take effect.

For digital asset business operators, the framework opens pathways to expand services: custodians can position themselves to serve the anticipated crypto ETF market, while exchanges and brokers may develop trustee or execution capabilities. Opportunities may also arise for participant dealers, market makers, index and pricing providers, technology vendors, and specialist compliance and cybersecurity providers. Whether these roles prove commercially viable will depend on custody costs, liquidity, and market-making capacity, alongside valuation methodology, creation and redemption arrangements, tracking performance, operational resilience, and distribution reach. Operators seeking trustee registration will also need systems appropriate for asset oversight, transaction monitoring, fiduciary duties, and conflicts management.

Next Steps

Fund managers and trustees should assess current custodian arrangements against the proposed foreign-custodian criteria and evaluate domestic alternatives, while digital asset operators interested in trustee, custody, or execution roles should review their licensing scope and their readiness requirements for capital, personnel, systems, governance, and contractual arrangements.

In addition, stakeholders may also wish to comment on the availability and capacity of Thai-licensed custodians, implementation timeframes, and the sequencing of licensing and fund-approval processes, and safeguards that could support competition and operational resilience without weakening investor protection. If there are concerns on the above implications, comments should be submitted by September 20, 2026.

RELATED INSIGHTS​ 

April 4, 2024
On March 18, 2024, the president of the Supreme Court of Thailand announced the establishment of a specialized Technology Crime Division within the Criminal Court of Thailand. This represents a significant commitment to cybercrime within the Thai judiciary and a step forward in Thailand’s ability to investigate cybercrime. The rise in cybercrime investigations in recent years has made it increasingly difficult for Thailand’s traditional criminal courts to consider and issue enforcement orders in support of ongoing investigations in a timely manner. The new Technology Crime Division addresses this challenge. This new division has jurisdiction over cybercrime and technology-related crime, fraud or extortion using computers, and criminal offenses relating to personal data protection laws. In addition, this new division has jurisdiction over all requests from competent law enforcement officers seeking court orders under the Computer Crimes Act B.E. 2550, the Personal Data Protection Act B.E. 2562, and the Cybersecurity Act B.E. 2562. The Technology Crime Division will have trainees and judges with expertise in technology and cybercrime—not only to facilitate expert prosecution of cybercrime but also to offer critical and time-sensitive support to law enforcement investigations of alleged cybercrime. The Technology Crime Division is not yet operational. The president of the Supreme Court is expected to announce the division’s opening date in the coming months. For more details on Thailand’s measures for dealing with cybercrime, please contact Michael Ramirez at [email protected] or Piyawat Vitooraporn at [email protected].
March 27, 2024
The Bank of Thailand (BOT) has opened a public comment period on their consultation paper titled “Criteria for Supervising Virtual Banks” from March 19, 2024, to April 17, 2024. The consultation paper reveals that the BOT intends to apply traditional commercial bank supervisory standards to virtual banks. However, the BOT also explains that the wholly digital nature of the services offered by virtual banks necessitates additional regulatory supervision. Additional Supervisory Criteria for Virtual Banks Financial business group: If a virtual bank is within the same financial business group as other financial institutions, its parent company must structure the virtual bank to be under its own sole consolidated financial business group. After the virtual bank has undergone the “restricted phase” in its initial years of operation (see below), other financial institutions within the group are prohibited from extending credit to or engaging in transactions similar to lending activities with the virtual bank. Shareholding structure: If the increase in the financial institution system capital is higher than the actual capital injection resulting from the bank’s shareholding structure, the BOT aims to issue an additional regulation to supervise the capital of the virtual bank and financial institution system to prevent double counting. Operational risk: Virtual banks must not use a trademark or logo that bears resemblance to or implies association with other financial institutions or financial institution groups. Governance: Virtual banks must have at least one director and chief technology officer (CTO) with at least three years of experience in IT or digital service. Additionally, the CTO must work full-time for the virtual bank and may not be an employee of another legal entity. Restriction on related lending and related-party transactions: Virtual banks must obtain prior unanimous approval from their boards of directors before engaging in transactions with major shareholders or businesses
March 12, 2024
Thailand’s Ministry of Finance has issued the Notification re: Criteria, Methods and Conditions for Applying for and Issuing Licenses to Operate Virtual Bank Business, which was published in the Government Gazette on March 4, 2024. This notification opens an opportunity for qualified experts in technology, digital services, and diverse data usage fields to apply for virtual bank licenses to provide financial services through new digital channels. The main goal is to serve the financial needs of target groups that may not have received sufficient or tailored financial services from the traditional banking system. Licensing Timeline Application submission period: 6 months (March 20–September 19, 2024). Announcement of successful applicants: Mid-2025 (approx. 9 months–1 year from the end of the submission period) After the announcement, successful licensees must demonstrate their readiness to commence virtual bank operations within 1 year (extendable for up to 1 additional year) via the following: Having paid-up registered capital of THB 5 billion and plans to increase the paid-up registered capital to at least THB 10 billion after the initial business period; Establishment or adjustment of a financial business group; Procurement of human resources, IT systems, and relevant risk management tools. Number of Licenses to be Issued No written or specified limit, subject to the discretion of the Bank of Thailand (BOT). Key Qualifications Applicants must have the following: Experience and resources to support virtual banking operations according to the business model and plan. Expertise and experience in conducting business that utilizes technology and provides services through digital channels. Experience demonstrating the ability to obtain, access, manage, and utilize data, including development of systems or data connections to facilitate user activities, allowing them to use their data to conduct transactions with other providers. Criteria In assessing applicants’ qualifications for a virtual bank license, the BOT will consider
January 30, 2024
Thailand has made its draft Platform Economy Act (the “Draft PEA”) available to relevant entities in certain industries. The Draft PEA aims to regulate and standardize digital platform service business operations and protect consumers and other stakeholders. Once the Draft PEA becomes law, the Royal Decree on the Operation of Digital Platform Service Businesses that are subject to Prior Notification B.E. 2565 (2022) and the relevant provisions under the Electronic Transactions Act B.E. 2544 (2001), as amended, will cease to have effect. The key provisions of the Draft PEA are summarized below. Definitions The definitions of the key terms under the Draft PEA are substantially similar to the definitions of the key terms under the royal decree mentioned above. According to the Draft PEA, “digital platform services” refers to the provision of electronic intermediary services that manage data to facilitate connection, through computer networks, between business users, consumers, or users, regardless of whether remuneration is charged. Exemption The Draft PEA does not apply to digital platform services (DPSs) that are regulated by specific laws and have rules guaranteeing transparency and fairness, or that follow operational standards no less stringent than those required in the Draft PEA. Nonetheless, the Electronic Transactions Development Agency (ETDA) can request or link data relating to exempted DPSs from the relevant supervisory authorities. Extraterritorial Effect Offshore DPSs with certain characteristics are also subject to the obligations under the Draft PEA and will have to appoint a coordinating person in Thailand. However, offshore DPSs will not have to establish a business in Thailand. General Responsibilities and Obligations The Draft PEA sets out the following requirements: DPSs with (1) at least THB 100 million (approx. USD 2.8 million) in annual revenue from providing the DPSs in Thailand before deducting expenses, or (2) more than 10,000 monthly users