You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

June 27, 2024

Thailand Updates Customer Codes for Heightened Money Laundering Risk

Subscribe to Updates

On May 17, 2024, Thailand’s Anti-Money Laundering Office (AMLO) issued an amended Notification Concerning the Rules for Designating or Reviewing the List of High-Risk Customers Who Require Close Monitoring under the Ministerial Regulation on Customer Due Diligence B.E. 2563 (2020). This notification, which took effect the following day, updates the previous version of the notification from 2022 to cover cybercrimes listed under the Emergency Decree on Measures for the Prevention and Suppression of Technological Crimes B.E. 2566 (2023). The amended notification sets out the steps that all financial institutions in Thailand must take to manage money laundering risks and to comply with the AMLO’s mandatory Guidelines on Customer Due Diligence.

Under the new notification, account holders suspected of engaging in or facilitating technological crimes, as recorded by the Anti Online Scam Operation Center (AOC), are to be classified as “high-risk persons.” The notification includes provisions for listing high-risk customers under two specific codes:

  • HR-03-1: This code applies to individuals who are the subject of either a petition or a complaint related to a predicate offense accepted by the relevant inquiry officer and recorded as a criminal case. It also covers individuals whose bank accounts are suspected of being used to conduct transactions related to crimes under the Emergency Decree on Measures for the Prevention and Suppression of Technological Crimes B.E. 2566 (2023), with victims seeking prosecution. The names of individuals in this category are received from responsible agencies according to the Criminal Procedure Code or the AOC and are documented in a publicly accessible online notification system.
  • HR-03-2: This code is for individuals involved in the commission of a predicate offense or those whose bank accounts are suspected of being used in such offenses, but whose cases have not been accepted or numbered by the relevant inquiry officer. Names under this category are provided by agencies such as the Royal Thai Police, the Financial Investigation Division, the Cooperation and Standard Development Division, banks, or other sources in Thailand.

These updated rules aim to ensure that relevant individuals and their transactions are closely supervised, thus enhancing the efficiency of monitoring high-risk customers and preventing technological crimes.

For more information on this new notification, or on any aspect of Thailand’s anti-money laundering regulations, please contact Chitchai Punsan at [email protected] or Panisara Moleegul at [email protected].

Related Professionals

Practices

Banking and Finance

Compliance and Investigations

Location

RELATED INSIGHTS​ 

March 20, 2023
Thailand has enacted new legislation to counter cybercrime and scams. The Royal Decree on Measures for Protection and Suppression of Technology Crimes B.E. 2566 (2023) (“Cybercrime Decree”) was published in the Government Gazette on March 16, 2023, and took effect the following day. The Cybercrime Decree provides a new legal tool to interrupt the money-laundering process and aims to crack down on cybercrime perpetrators and scammers by providing stronger legal measures applying to certain types of offenders that had not been sufficiently covered by existing laws. This new legislation grants victims the right to have commercial banks and online payment platforms freeze suspicious transactions and obligates these banks and platforms to comply with such requests. It further requires these banks and platforms—as well as other service providers—to share data for the prompt prevention and suppression of cybercrime. The key rights, duties, and offenses established by the Cybercrime Decree are detailed below. Freezing Transactions The Cybercrime Decree requires commercial banks and online payment platforms to temporarily freeze (for 72 hours) any related transactions of their account holders upon receipt of an alert from the account holder that he or she is the victim of cybercrime. Victims can report these illicit transactions by phone or electronic means. If by phone, the relevant bank or platform must document the call. The victim must file a police complaint about the illicit transaction within 72 hours of the freeze being made. A police inquiry officer will then notify the bank or platform about the complaint, and the transaction freeze must be maintained for seven days from the filing of the complaint with the police. The police will then determine whether it is necessary to keep the transaction frozen for longer than seven days. If the seven days lapse without a further order to freeze the
Read More
February 13, 2023
Thailand’s Office of the Prime Minister has issued a new regulation titled Giving or Receiving Gifts of State Officials B.E. 2565 (2022). This regulation, which took effect on January 13, 2023, repeals the previous 2001 version and updates certain provisions to be in sync with Thailand’s primary anticorruption law, the Organic Act on Anti-Corruption B.E. 2561 (2018). The regulation prohibits state officials’ family members from receiving gifts from people who are dealing with the officials’ respective agencies. It also prohibits state officials from giving gifts to their supervisors and their supervisors’ family members. An exception, carried over from the previous version of the regulation, is provided for gifts on limited “customary occasions” valued at THB 3,000 or less. There are some notable revisions in the definitions of the new regulation. The term “gift” is now clearly defined to include “training” or “seminars.” In addition, the term “family members” now includes spouses living together “as husband and wife,” even if not legally married. For example, the common-law spouse of an officer considering a license application is not allowed to receive a gift from or attend an overseas seminar organized by the applicant. The regulation also provides: Guidelines for state officials to self-report in case of violation by a family member; Instructions on how to deal with the gifts received in violation; and Disciplinary actions for violation. Importantly, the regulation continues to prohibit the receipt of gifts by state officials’ family members but does not expressly criminalize the giving of gifts by private parties. However, all who deal with government officials should take note of the updated regulation to avoid creating a situation that might violate the rules.
Read More
February 10, 2023
On January 16, 2023, Thailand’s Securities and Exchange Commission (SEC) prescribed a set of security measures that digital asset business operators must implement if they provide custody of digital assets for their customers. The new security measures are prescribed in two notifications from the SEC and its office on digital asset wallet management systems and cryptographic key management systems, with the aim of safeguarding digital assets in custody against loss, fraud, and cybertheft. The notifications took immediate effect. The new security measures and the management systems are summarized below. Policy and guidelines for managing systems related to digital asset custody Digital asset business operators must have a written risk management policy for all systems relating to digital asset custody, approved by their board of directors and made accessible to all employees. The policy must be reviewed or revised at least once annually, or promptly if any potential risks are identified. Specific procedures must be implemented, such as establishment of a compliance team and internal controls. Management of systems for digital asset wallets and cryptographic keys Digital asset business operators must have policies and procedures for managing all systems relating to digital asset custody. This includes properly designing, developing, and managing digital asset wallets in a safe and secure manner. The same requirement on policies and procedures applies to cryptographic key management as well. Management of incidents that may affect systems related to digital asset custody Digital asset business operators must have measures in place to manage incidents that may impact systems related to digital asset custody. The measures include designating a person responsible for incident management, testing and reviewing the incident management policy annually, reporting any incidents affecting digital asset custody to the designated responsible person and the SEC immediately, and conducting a digital forensic investigation with an independent
Read More
January 26, 2023
On December 30, 2022, the Central Bank of Myanmar (CBM) updated its guidelines on the Thai baht to Myanmar kyat (THB-MMK) direct payment mechanism for Myanmar-Thailand border trade and other flows of capital. The CBM’s guidelines outline an expanded mechanism allowing more trade gates and more designated banks, stipulating banking arrangements for worker remittances, setting out a payment mechanism for exports, clarifying procedures for importing goods via the Myanmar-Thailand border trade, and instituting new reporting procedures. The THB-MMK mechanism came into being on March 3, 2022, as a pilot project for border trade in Myawaddy, Tachileik, and other areas approved by Myanmar’s Central Committee on Ensuring Smooth Flow of Trade and Goods. In this update, Myawaddy, Tachileik, Myeik, Kawthoung, Mawtaung, and other approved border trading zones are identified as open to the THB-MMK mechanism. During 2022, the following banks were approved to provide services for the THB-MMK direct payment mechanism: Approved March 4: Ayeyarwaddy Farmers Development Bank and Kasikornbank Public Company Limited Approved July 29: Myanmar Economic Bank and Bangkok Bank Public Company Limited (Yangon branch) Approved August 12: Kanbawza Bank (KBZ) and Bangkok Bank Public Company Limited (Yangon branch) Approved December 30: Ayeyarwady Bank and Bangkok Bank Public Company Limited (Yangon branch), CB Bank PCL and Bangkok Bank Public Company Limited (Yangon branch), UAB Bank and Krung Thai Public Company Limited, Myanmar Apex Bank and Siam Commercial Bank Myanmar Limited, Yoma Bank and Siam Commercial Bank Myanmar Limited Banking arrangements for workers’ remittances were also stipulated in the new update. In this regard, designated banks can process these remittances by partnering with CBM-permitted international currency transfer businesses, mobile banking service providers, and mobile money service providers after obtaining approval from the CBM. An addition to the direct payment mechanism is a requirement that exporters manage their received export
Read More