You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

August 18, 2026

Thailand Proposes Expanded KYC and Due Diligence for Cash-related Transactions

The Bank of Thailand (BOT) is seeking public comment on proposed amendments that would significantly expand know-your-customer (KYC) and customer due diligence (CDD) requirements for cash-related transactions at financial institutions (FIs) and specialized financial institutions (SFIs). Released on August 5, 2026, the proposed regulation would supersede BOT Notification No. 16/2569, which focused primarily on cash withdrawal transactions. The public comment period is open through September 3, 2026.

The amendments reflect concerns that FIs and SFIs may be used to facilitate the movement, concealment, and conversion of criminal proceeds, potentially damaging institutional operations and public confidence in the financial system.

Expanded Scope of Covered Transactions

The most significant change is the broadening of the definition of “cash-related transactions.” Previously, the regulation covered only cash withdrawals and uncrossed check withdrawals. The amended regulation extends coverage to include:

  • Cash deposits, check deposits, or receipt of funds from the public not in the form of deposit accounts;
  • Thai baht (THB) banknote exchange (different denominations);
  • Receipt of cash for issuing checks and drafts; and
  • Purchase, sale, or exchange of foreign banknotes.

Mandatory Identity Verification and Risk Management

For all cash-related transactions, FIs and SFIs must require customers, or authorized or delegated persons, to present identification or verify their identity before every transaction, including one-time (walk-in) transactions. Specific identification requirements vary by transaction type, customer nationality, and channel (branch vs. electronic).

FIs and SFIs must also establish comprehensive risk management processes and procedures for cash-related transactions. These requirements include identifying customers or authorized representatives in accordance with transaction-specific verification standards, analyzing customer behavior, implementing risk-management measures proportionate to the customer’s risk profile, and recording abnormal behavior in relevant systems. The BOT also encourages institutions to proactively guide customers toward transaction channels that offer greater traceability than cash.

For corporate customers in high-risk business sectors—including foreign exchange, real estate, gems, gold and other precious metals, and high-value luxury goods—FIs and SFIs must request additional information on the source of funds, assets, income, or wealth of the persons whose cash the entity is depositing.

Enhanced Due Diligence Threshold

When an unusual transaction is detected, or when a customer’s cash-related transactions across all channels—including branches, electronic branches/devices, and banking agents—total THB 5 million or more (or equivalent) within one day, the FI or SFI must take the following actions depending on the transaction type:

  • Withdrawals or uncrossed checks: Request information on the transaction purpose.
  • Deposits: Request information on the source of funds (and purpose, if conducted by an authorized person).
  • Money exchange: Request both the source of funds and the transaction purpose.

The institution must also assess whether the transaction is consistent with the customer’s profile and normal behavior. If inconsistencies, unreasonableness, or grounds for suspicion are found, the transaction must be classified as high-risk, triggering enhanced due diligence (EDD).

Refusal of Transactions and Escalation

If EDD cannot be completed but the customer provides a reasonable justification or demonstrates necessity for the cash-related transaction, the FI or SFI may proceed under its risk management framework, provided that a senior manager above the branch manager level approves and the customer is closely monitored. If the customer cannot demonstrate reasonable necessity, the institution must refuse the transaction and report it to the Anti-Money Laundering Office (AMLO) as required by law.

Monitoring, Reporting, and Customer Care

FIs and SFIs must establish processes to monitor, detect, and review customer cash-related transaction behavior, set appropriate risk levels, and regularly update these processes. They must also maintain records relating to customer identification, transaction purposes, source-of-funds information, transaction behavior, and information obtained through EDD reviews for regulatory, audit, and internal control purposes. Institutions must prepare and submit reports on abnormal financial behavior or cash-related transactions in the format prescribed by the BOT. Additionally, FIs and SFIs must have appropriate, prompt, and fair processes to assist customers adversely affected by cash-related transaction risk management measures where a transaction is later found not to be abnormal.

Proposed Effective DatesThe BOT has proposed an effective date of October 15, 2026, for the main provisions. Additional EDD requirements for specified legal entities would become effective on April 15, 2027. For SFIs, the timeline will be determined following Ministry of Finance consent.

Next Steps

FIs and SFIs should assess their cash-related transaction risk management frameworks for compliance gaps given the expanded scope. Corporate clients in high-risk industries—including real estate, gems and precious metals, foreign exchange, and luxury goods—should prepare for heightened source-of-funds due diligence. Comments may be submitted through September 3, 2026.

RELATED INSIGHTS​ 

November 14, 2024
In recent years, Thailand has taken significant steps to regulate and integrate digital assets into its financial ecosystem. This article explores the regulatory framework governing digital asset businesses in Thailand, focusing on the key legislation, regulated activities, and recent developments in this rapidly evolving sector. Regulatory Environment In 2018, Thailand enacted the Emergency Decree on Digital Asset Businesses, marking a pivotal moment in the country’s approach to cryptocurrencies and digital tokens. This decree, supervised by the Securities and Exchange Commission (SEC) and the Ministry of Finance, provides a comprehensive regulatory framework for both the primary and secondary markets of digital assets. For the primary market, the decree regulates the issuance and sale of digital assets through initial coin offerings (ICOs). A key feature of this regulation is the requirement for ICOs to be conducted through SEC-approved ICO portals. This approach aims to provide a structured and supervised environment for companies seeking to raise funds through digital token sales. In the secondary market, the decree outlines the regulatory framework for various digital asset intermediaries, including digital asset exchanges, brokers, dealers, advisory services, fund managers, and custodians. In implementing its digital asset-related policies, the SEC imposes ongoing obligations on licensed digital asset intermediaries. These include restrictions on the listing of certain digital assets on digital asset exchanges, and limitations on intermediaries facilitating digital assets as a means of payment. Regulatory Trends and Outlook The SEC has demonstrated a commitment to regularly revising its digital asset regulations to keep pace with global trends and market developments. A notable example of this approach is the SEC’s efforts to refine the classification of nonregulated ready-to-use utility tokens by dividing these tokens into two groups: Group 1: Ready-to-use utility tokens issued for consumption purposes or as a digital representation of a certificate (e.g., NFTs with
November 4, 2024
Crowdfunding has emerged as a promising option for raising capital, particularly for startups and small businesses. In Thailand, investment-based crowdfunding falls primarily under the regulatory purview of the Securities and Exchange Commission (SEC). The SEC is responsible for licensing and overseeing crowdfunding portals, ensuring compliance with regulatory requirements while ensuring investor protection and market integrity. The crowdfunding regulations in Thailand allow non-publicly traded companies to raise funds by offering equity and debentures for sale through SEC-licensed crowdfunding portals. This framework opens new possibilities for businesses seeking alternative funding sources and for investors looking for new opportunities.  Crowdfunding Portals Under Thai regulations, “crowdfunding portals” are defined as websites, mobile phone applications, or other similar electronic media developed for offering securities for sale. To operate a crowdfunding portal in Thailand, applicants must meet several key requirements: Incorporation: The applicant must be incorporated in Thailand. This requirement ensures that the portal operator has a significant local presence and is subject to Thai law. Minimum capital: A minimum paid-up registered capital of THB 5 million is required. This capital requirement helps ensure that portal operators have sufficient financial resources to maintain their operations. Operational readiness: The applicant must have crowdfunding portal systems ready for use upon applying to the SEC for approval to operate. This requirement demonstrates the applicant’s technical capability and readiness to provide crowdfunding services. These requirements are designed to ensure that crowdfunding portal operators are well-capitalized, technologically prepared, and committed to operating within the Thai market. Business and Investment Implications The regulatory framework for crowdfunding in Thailand offers non-publicly traded companies with an additional avenue for raising funds, as licensed crowdfunding portals provide a structured and regulated environment for fundraising. However, companies must ensure compliance with SEC regulations when offering securities through these platforms. For investors, crowdfunding offers new investment
October 21, 2024
One key component of Thailand’s support for the development of fintech innovations is its sandbox framework, supervised by the Bank of Thailand (BOT). This framework supports business operators in experimenting with new technologies under controlled conditions. This article explores the structure and significance of the BOT’s sandbox program in driving fintech innovation in Thailand. The BOT Sandbox Framework In June 2024, the BOT updated its sandbox framework to provide a more comprehensive and flexible environment for testing fintech innovations. The framework allows participants to experiment with their ideas in a controlled and limited environment, balancing the need for innovation with the imperative of maintaining financial stability and consumer protection. Three Types of Sandboxes The BOT’s framework encompasses three distinct types of sandboxes: the Regulatory Sandbox, the Own Sandbox, and the Enhanced Regulatory Sandbox. Regulatory Sandbox The Regulatory Sandbox is a mandatory testing ground for certain BOT-licensed financial services to ensure that potentially impactful innovations are tested and evaluated before wide-scale implementation. Participation in this sandbox is a prerequisite for: License applications for specific financial services. Implementation of new technologies or innovations in existing licensed services. Financial services that have the potential to become a structural element or standard of the Thai financial sector. A prime example of a service requiring participation in the Regulatory Sandbox is the Thai QR code payment via PromptPay system, which involved various banks several years ago until the Bank of Thailand granted permission for these services to be provided to the general public. Own Sandbox The Own Sandbox is an optional program that the BOT encourages for financial service providers and fintech operators implementing new technologies. This sandbox provides a more flexible environment for testing innovations that may not require the same level of regulatory scrutiny as those in the Regulatory Sandbox. Enhanced Regulatory
October 20, 2024
Following the U.S. Securities and Exchange Commission’s approval of spot Bitcoin ETFs, Thailand’s Securities and Exchange Commission (SEC) is reassessing regulations on the investments of mutual funds and private funds (collectively “Funds”). The SEC has launched a public consultation on new draft notifications introducing  the new asset classes that can be held by Funds, and aims to bring these rules into effect on January 1, 2025. The highlights of these changes are set out below. Eligible New Asset Classes The new asset classes that can be held by Funds can be categorized into two types—investment tokens and crypto assets—and the determination will focus on substance over form. Investment tokens: If the substance involves raising funds, regardless of what the assets are called, and they are legally issued and offered or approved by home regulators that are members of the International Organization of Securities Commissions (IOSCO), Funds can invest in these types of assets as transferable securities within the permitted ratio. Crypto assets: The eligible crypto assets which Funds are entitled to hold focus on crypto ETFs or offshore funds investing in crypto assets, and they are subject to investment limits. Funds can hold crypto assets directly, but only temporarily, and only for the purpose of purchasing, selling, or exchanging the crypto assets, not speculative purposes. The notifications state that Funds may hold Bitcoin/Ethereum for no longer than five business days and USDT/USDC for no more than one month. Investment Limits Typically, the rules segregate investment limits into listed and non-listed digital assets, and the limits depend on the sophistication of the investors in the Funds. In general, UI Funds (mutual funds offered to institutional investors or ultra-high net worth investors) can invest in these new asset classes without any limitations, although net exposure to other crypto assets  –  which