You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

September 2, 2026

Thailand Proposes Crypto ETF Framework and Stricter Custodian Rules for Digital Asset Funds

On August 21, 2026, Thailand’s Securities and Exchange Commission (SEC) published two consultation papers that would broaden regulated access to crypto assets while tightening custody standards. The first proposes a framework for establishing crypto exchange-traded funds (crypto ETFs) in Thailand. The second proposes enhanced qualification requirements for foreign digital asset custodians serving mutual funds and private funds that invest in digital assets.

The proposals seek to expand regulated access to crypto assets while strengthening custody, governance, disclosure, and investor protection, and they affect fund managers, trustees, and licensed digital asset operators. Comments on both papers are due by September 20, 2026, and the SEC expects the resulting rules to take effect later in 2026.

Elevating Foreign Custodian Standards

Under current rules in effect since January 16, 2025, mutual funds and private funds investing in digital assets may use foreign custodians that meet qualifications similar to those set for domestic digital asset business operators. The SEC now proposes that foreign digital asset custodians satisfy two cumulative requirements:

  • Compliance with the existing baseline qualifications: demonstrated expertise, robust cybersecurity measures, segregation of client assets, controls preventing unauthorized asset transfers, and sound financial standing.
  • Supervision by a regulator that is either (1) an IOSCO Signatory A member under the Multilateral Memorandum of Understanding, the international arrangement through which securities regulators share information and cooperate on enforcement, or (2) a regulator in a jurisdiction that the Thai SEC designates as having adequate supervisory and investor protection standards.

The SEC is initially considering 11 jurisdictions for the approved-country list: France, Germany, Hong Kong SAR, Ireland, Japan, Liechtenstein, Luxembourg, Malaysia, Singapore, South Korea, and the United States. The SEC may expand this list over time based on its assessment of other jurisdictions’ regulatory frameworks governing custodian licensing, asset segregation, secure custody practices, client rights in insolvency, and custody agreement terms. Designation of a jurisdiction does not, however, automatically qualify every custodian based there; fund managers and trustees will still have to conduct case-by-case due diligence on each service provider, evaluating its regulatory scope, risk profile, and alignment with fund and investor interests.

The enhanced requirements would apply to foreign custodians used by mutual funds and private funds investing in digital assets and, if permitted by the SEC, by crypto ETFs. Existing funds would have 120 days from the proposed rules’ effective date to comply. Fund managers using foreign custodians may therefore wish to begin reassessing provider due diligence and monitoring, contractual protections, audit and information rights, and transition arrangements prior to the rules taking effect later in 2026.

Crypto ETF Framework: Prioritizing Thai Custodians

The SEC’s companion consultation addresses crypto ETF establishment and oversight, building on the previous hearing held during April and May 2026. The Capital Markets Committee approved the framework principles on June 16, 2026, and the SEC Board followed on July 2, 2026.

Under the proposed rules, crypto ETFs must use Thai-licensed digital asset custodians as a primary route. The SEC may permit foreign custodians when necessary and appropriate to market conditions, applying the same elevated qualification criteria detailed above. Each fund would be structured as a passive, single-crypto ETF and would generally be required to maintain an average annual net exposure of at least 80% of its net asset value to the relevant crypto asset, without using derivatives to obtain that exposure.

Fund managers must demonstrate readiness in personnel, systems, risk management, and investment strategy, and must identify service providers, including custodians, participant dealers, and market makers, before receiving approval.

The rules would permit digital asset custodians and certain other digital asset business operators—such as exchanges and brokers—to serve as trustees for crypto ETFs, subject to applicable financial, personnel, independence, and systems requirements. A digital asset custodian acting as trustee could hold the crypto assets itself, while another category of digital asset operator acting as trustee would need to appoint a licensed digital asset custodian. These distinctions will affect operating models, outsourcing arrangements, conflicts management, and the allocation of regulatory responsibility.

Thai Market Implications for Fund Managers and Digital Asset Operators

Requiring crypto ETFs to rely primarily on Thai-licensed custodians is likely to concentrate initial demand among a limited pool of qualified local providers. This may create capacity, pricing, counterparty, and business-continuity considerations for fund managers, while also creating opportunities for licensed custodians and other qualified digital asset operators to expand into fund-related services.

Fund managers launching crypto ETFs or managing funds with digital asset exposure should begin identifying and evaluating Thai-licensed custodians and other critical service providers. Where existing arrangements involve foreign custodians, managers should verify whether those providers meet the proposed dual-qualification test and assess whether contractual amendments or a change of provider may be required within the 120-day transition period. Because fund operations depend heavily on these providers, fund managers should also confirm that due diligence, incident-response protocols, contingency plans, and ongoing monitoring are documented and in place before the rules take effect.

For digital asset business operators, the framework opens pathways to expand services: custodians can position themselves to serve the anticipated crypto ETF market, while exchanges and brokers may develop trustee or execution capabilities. Opportunities may also arise for participant dealers, market makers, index and pricing providers, technology vendors, and specialist compliance and cybersecurity providers. Whether these roles prove commercially viable will depend on custody costs, liquidity, and market-making capacity, alongside valuation methodology, creation and redemption arrangements, tracking performance, operational resilience, and distribution reach. Operators seeking trustee registration will also need systems appropriate for asset oversight, transaction monitoring, fiduciary duties, and conflicts management.

Next Steps

Fund managers and trustees should assess current custodian arrangements against the proposed foreign-custodian criteria and evaluate domestic alternatives, while digital asset operators interested in trustee, custody, or execution roles should review their licensing scope and their readiness requirements for capital, personnel, systems, governance, and contractual arrangements.

In addition, stakeholders may also wish to comment on the availability and capacity of Thai-licensed custodians, implementation timeframes, and the sequencing of licensing and fund-approval processes, and safeguards that could support competition and operational resilience without weakening investor protection. If there are concerns on the above implications, comments should be submitted by September 20, 2026.

RELATED INSIGHTS​ 

October 10, 2023
The Royal Decree issued under the Revenue Code B.E. 2481 (1938) on the Exemption from Taxes (No. 779) B.E. 2566 (Royal Decree No. 779), which came into force on August 16, 2023, provides exemptions from corporate income tax (CIT) and value-added tax (VAT) for qualifying transfers of digital tokens for investment. Transfers of these digital investment tokens—as opposed to securities transfers—have been subject to taxes. By establishing CIT and VAT exemptions, Royal Decree No. 779 introduces incentives in order to promote digital investment tokens as a new alternative tool for fundraising. The authorities hope that this will stimulate investment in the country’s economic system and elevate the standards for digital assets in Thailand. The key points of Royal Decree No. 779 are summarized below. Digital Investment Token Definition Royal Decree No. 779 and relevant digital asset regulations define “digital investment tokens” as a type of digital tokens that grant the holder the right to invest in a project or business, with the holders of the digital investment tokens receiving a share of revenue or profits as a return on their investment. In this way, digital investment tokens resemble securities. Tax Exemptions Primary Market Royal Decree No. 779 exempts companies and registered partnerships that legally issue and offer digital investment tokens for sale to the public (i.e., the primary market) from CIT and VAT on income or the value of the tax base earned from the sale. These exemptions apply to all primary market issuance from May 14, 2023, onward. However, the relevant notifications of Thailand’s Securities and Exchange Commission only allow limited companies (private and public) incorporated under Thai law to offer digital tokens for sale. Therefore, registered partnerships will not yet be able to benefit from the tax exemptions in Royal Decree No. 779. If a digital token
July 26, 2023
Thailand’s Electronic Transactions Development Agency (ETDA) held a briefing session on July 20, 2023, laying out the changes and new requirements in draft sublaws under the Royal Decree on Digital Platform Services. These sublaws are expected to be announced in August 2023. The key changes and new requirements are listed below. The ETDA has drafted guidelines on the methods for identifying active users to give digital platform service operators a better understanding of the calculation methods. The definition of “users” for calculating annual monthly active users (AMAUs) has been reduced in scope to cover only users in Thailand. E-marketplace digital platform services that will suspend or terminate operations for specific users must inform the affected users and provide a period for them to challenge the suspension or termination. Digital platform service operators cannot use the requirements to identify their active users as a legal basis for processing users’ personal data, especially for profiling and tracking activities. The sublaws on announcement of terms and conditions (T&Cs) and changes to T&Cs, once issued, will take effect on January 3, 2024, while the other sublaws will take effect immediately (i.e., August 21, 2023). This shows that the ETDA has acknowledged the private sector’s feedback that the requirements on T&Cs will take more time for operators to comply with. The requirements for changing T&Cs have been adjusted. Under the current draft, the required advance notification period can be exempted if a change in the T&Cs is for the purpose of, for example, rolling out new products or services and improving the platform. Required submissions under the Royal Decree for Digital Platform Services and its sublaws will be made through the ETDA’s online portal. There will likely be no extensions granted for compliance with the Royal Decree for Digital Platform Services and its sublaws
July 14, 2023
The Bank of Thailand (BOT) has issued new notifications amending regulations for payment businesses that fall under the Payment Systems Act B.E. 2560 (2017) to promote transparency and good governance in the payment industry. Notification No. SorKorChor 2/2566 (“Notification 2”) increases the required qualifications for applicants seeking a license to provide payment services designated as being under the BOT’s supervision, and Notification No. SorKorChor 4/2566 (“Notification 4”) stipulates additional duties and exemptions for certain types of business operators. The notifications were published in the Government Gazette on July 7, 2023, and came into effect the following day. Additional Qualifications Notification 2 expands the list of prohibited characteristics for business operators applying for a license or registration to engage in a designated payment service, and their directors. For example, applicants must not have been ordered to suspend or cease their operations, and their registration or license to engage in financial business or operate a designated payment system or service must not have been revoked. The notification defines “financial business” as including financial institutions, credit card business, personal loan business, securities business, and so on. In addition, applicants’ directors and management must not have prohibited characteristics, such as being involved in the management of a financial business or designated payment system or service that was ordered to suspend or cease its operations. The applicable registration or license also must not have been revoked. Reporting Requirements During the application process, Notification 2 requires applicants to disclose information on shareholders and related parties (including spouses) who hold an aggregate 10 percent or more of the total paid-up shares. Notification 4 imposes this same reporting duty regarding shareholders and related parties but applies it to licensed operators in an ongoing manner. Existing payment service operators must make their first report of this information to
March 20, 2023
Thailand has enacted new legislation to counter cybercrime and scams. The Royal Decree on Measures for Protection and Suppression of Technology Crimes B.E. 2566 (2023) (“Cybercrime Decree”) was published in the Government Gazette on March 16, 2023, and took effect the following day. The Cybercrime Decree provides a new legal tool to interrupt the money-laundering process and aims to crack down on cybercrime perpetrators and scammers by providing stronger legal measures applying to certain types of offenders that had not been sufficiently covered by existing laws. This new legislation grants victims the right to have commercial banks and online payment platforms freeze suspicious transactions and obligates these banks and platforms to comply with such requests. It further requires these banks and platforms—as well as other service providers—to share data for the prompt prevention and suppression of cybercrime. The key rights, duties, and offenses established by the Cybercrime Decree are detailed below. Freezing Transactions The Cybercrime Decree requires commercial banks and online payment platforms to temporarily freeze (for 72 hours) any related transactions of their account holders upon receipt of an alert from the account holder that he or she is the victim of cybercrime. Victims can report these illicit transactions by phone or electronic means. If by phone, the relevant bank or platform must document the call. The victim must file a police complaint about the illicit transaction within 72 hours of the freeze being made. A police inquiry officer will then notify the bank or platform about the complaint, and the transaction freeze must be maintained for seven days from the filing of the complaint with the police. The police will then determine whether it is necessary to keep the transaction frozen for longer than seven days. If the seven days lapse without a further order to freeze the