You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

November 29, 2017

Thailand’s Payment Systems Act 2017: Electronic Payments and Bankruptcy

Informed Counsel

In October 2017, the Thai government published the Payment Systems Act in the Government Gazette, setting out the framework for a new licensing and registration regime to regulate electronic payment business operators and putting in place several provisions for a stable and reliable e-payment ecosystem. The Act is expected to facilitate the offering of many new and innovative payment services in Thailand. Operation of the new regime will depend on forthcoming regulations, which are yet to be issued, and it is necessary to await those regulations before offering any actionable commentary on that aspect of the Act. However, some other aspects of the Act, which have drawn less attention, have a significant effect and are very worthy of attention.

Electronic payments have been governed under multiple laws and layers of regulations which, until now, have lacked statutory provisions for finality of payment. This raises a concern that if a payment system participant enters into receivership or reorganization, transactions involving that participant could be canceled or reversed, which can affect other participants in the payment system; for example, where a recorded transfer is not funded or settlement fails. If the payments are for a large amount of money, this problem could spread even more broadly to other payment systems and other participants in them. In extreme scenarios, cancellations or reversals of high-value payments could present serious risks to the entire financial system affecting both banks and non-banks.

Protecting “Important” Payment Systems

The Act sets out provisions for dealing with this issue, which are applicable to participants in “important” payment systems, the security or stability of which can have an impact on the financial institution system or the financial system of Thailand. To be regarded as an important payment system, a system must:

  1. be part of the main infrastructure of the country, trouble with or disruption of which would have a broad effect on the continuity of its participants’ business; and
  2. be a system that supports high-value transfers or that is used for clearing or settlement among its members.

Any payment systems established or operated by the Bank of Thailand (e.g., BAHTNET and the imaged check clearing system) are deemed to be important payment systems. Beyond those, the Minister of Finance has the authority, on the recommendation of the Bank of Thailand, to specify important payment systems in secondary legislation. Therefore, private-sector payment systems could also be designated as important, if specified in ministerial regulations, meaning that these provisions would also be applicable to their participants.

The Act provides that, where a court accepts a reorganization petition in respect of a participant in an important payment system, or orders the participant into receivership, any of the participant’s transfers, clearing, and settlement that were pending before the court order must continue until completion under the payment system rules, but not beyond the end of the date of the court order. The law makes it clear that such transactions cannot be reversed, modified, stopped, or suspended, and that statutory provisions for revocation of a fraudulent act or other act under the Civil and Commercial Code or the Bankruptcy Act cannot affect the validity of such a payment system’s operations. Further, any cash, securities, or instruments that such a participant maintains in the payment system, must be protected, and must not be distributed to the participant’s creditors without the Bank of Thailand’s approval. Each of these measures is important to ensure that instructed transfers are made, and that settlement successfully occurs, despite a participant’s bankruptcy. In that sense, it can help to contain what could otherwise be a contagion.

Protecting Customers of “Payment Service Providers”

For a similar purpose, the Act also sets out provisions for payment service providers that hold customer funds. “Payment service providers” under the Act will include providers of: (1) credit, debit, and ATM cards; (2) e-money; (3) electronic payment services to a seller, service provider, or creditor; (4) electronic money transfer services; and (5) other payment services that may affect the financial system or public interest, and others that may be specified by royal decree.

While current regulations already require certain categories of electronic payment business operators to establish separate bank accounts for holding customer funds, the Act  expands on them.

Specifically, the Act protects customer funds held by a payment service provider from disposal or transfer under a court order, in the following circumstances:

  1. where the service provider suspends its operations under the Payment Services Act or another law;
  2. if a petition for reorganization is filed in respect of the payment service provider;
  3. if a petition is filed in bankruptcy court in respect of the payment service provider; or
  4. if the court orders the payment service provider into receivership.

Further, if a payment service provider is a judgment debtor in a civil case or is ordered into receivership, any customer funds that it holds will not be subject to attachment or execution, and will not be distributed to the payment service provider’s creditors.

In the case of receivership, the Act provides that the Bank of Thailand will return customer funds to the customers, transfer the accounts to another payment service provider, and/or take other actions necessary to conclude business with the customer funds. Customers unrelated to the payment service provider will have priority over those that are related. Any remaining compensation due would be subject to regular bankruptcy proceedings.

The new Payment Services Act offers the possibility of many innovative services for customers in Thailand to enjoy. From a legal standpoint, however, perhaps the greatest achievement of the Act is the security and stability of payment finality and the protection of customer funds.

RELATED INSIGHTS​ 

December 26, 2025
The Bank of Thailand (BOT) has released the Guidelines for Digital Fraud Management, which took effect on December 17, 2025, incorporating certain amendments to the draft guidelines issued in March 2025. These official guidelines aim for end-to-end digital fraud prevention, with a particular focus on mule accounts, to enhance trust and security in Thailand’s financial system. The guidelines apply to “financial service providers,” including: Financial institutions and special financial institutions under the Financial Institution Business Act; and Operators of Inter-institutional Fund Transfer System e-money services and e-fund transfer services under the Payment Systems Act. Besides commercial banks and e-money operators that offer fund-transfer services, other providers may adopt requirements based on risk proportionality and baseline standards set out in the guidelines (for instance, an e-money operator that does not offer e-fund transfer services could consider implementing a fraud monitoring and detection system according to the risk level of its service). The guidelines establish the following key requirements: Policy and oversight. Directors and senior executives of financial service providers must adopt appropriate “end-to-end” fraud management policies and KPIs to manage digital fraud, covering prevention, monitoring, detection, management, resolution, and support for affected customers. The fraud management policy must be regularly reviewed, and whenever there is a situation or change that significantly affects the efficiency of the fraud management. Any significant update to the policy must first be approved by the board of the financial service provider. The BOT also encourages providers to collaborate in establishing industry standards aligned with applicable laws and regulations to ensure consistency and best practices across the sector. Fraud management processes. Financial service providers must establish a clear framework for managing digital fraud throughout the customer lifecycle—from customer onboarding to service termination—covering at least the following processes: Know your customer (KYC) and customer due diligence (CDD):
December 15, 2025
Thailand is taking steps to energize its startup scene by drafting the Startup Promotion Law. This draft law aims to remove obstacles, open new funding opportunities, and provide coordinated government support. The goal is to make it easier for Thailand-based startups to grow and compete on a global stage. Why Is This Law Needed? For many years, Thai startups have operated under traditional company law frameworks that were not designed with high-growth businesses or with fundraising opportunities in mind. Restrictions on issuing bonds, offering shares to outside investors, and repurchasing shares for employee incentive programs made it challenging for emerging companies to access capital and accelerate their growth. The draft Startup Promotion Act seeks to remove these obstacles and foster a more competitive, entrepreneur-friendly environment in Thailand. Who’s in Charge? Two main organizations will oversee the startup ecosystem: Startup Promotion Committee: This group, to be appointed by the National Science, Research, and Innovation Policy Council, will set national strategies, policies, and budget; design promotional campaign and incentives; and propose further legislative amendments to promote startups. National Innovation Agency (NIA): Under the draft act, the NIA will be the main contact for startups and will serve as the secretariat office of the Startup Promotion Committee, coordinating data, advising startups, maintaining the public registry, and providing funding and investment (grants, repayable grants, loans, and equity) under committee criteria and, where applicable, cabinet approval. What Startups Are Eligible for Benefits? To be officially recognized and access benefits, a company must: Be a private limited company less than 10 years old at the time of application. Existing companies that already exceed the 10-year threshold may still apply for startup statues within one year of the law’s enactment, as long as they otherwise still qualify for the new regime. Have average annual revenue not
December 12, 2025
Tilleke & Gibbins has updated the Cambodia, Myanmar, Thailand, and Vietnam chapters in Multilaw’s Global Data Protection Guide, which collects expert advice from Multilaw member firms in 90 jurisdictions around the world (including a Laos chapter, which is also authored by Tilleke & Gibbins). The guide provides answers to key issues concerning the fast-developing data protection and privacy laws around the world, and helps data protection officers and in-house counsel understand how the regulatory regime for data protection can affect their organizations in various jurisdictions. Each section of the guide identifies the main laws that govern data protection in that jurisdiction, and gives a detailed overview of the legal principles in place as well as the enforcement authorities responsible for overseeing compliance. The guide also covers issues related to data subject rights, data protection officers, impact assessments, data breach notification requirements, and cross border data transfers. The use of personal data in marketing is also considered, with specific information on electronic marketing rules, cookies, and marketing to businesses and consumers. Multilaw, of which Tilleke & Gibbins is a longtime member, is a global network of carefully selected independent law firms able to provide expert legal advice in complex environments around the globe. The full guide is available for free on the Multilaw website.
December 11, 2025
On December 10, 2025, the National Assembly of Vietnam passed a new Cybersecurity Law, which will take effect on July 1, 2026. The new Cybersecurity Law was developed based on the consolidation of the 2018 Cybersecurity Law and the 2015 Law on Network Information Security. While the final approved version of the new Cybersecurity Law has not yet been published, according to official reports, the following notable requirements are confirmed to be included: The new Cybersecurity Law dedicates a specific article to prohibited acts related to cybersecurity, under which it strictly prohibits posting or disseminating information online that propagandizes against the Socialist Republic of Vietnam. The law also prohibits, among other things, (i) the appropriation, trading, seizure, or intentional disclosure of information classified as state secrets, work secrets, business secrets, personal secrets, family secrets, and private life; (ii) intentionally eavesdropping, recording, or filming online conversations without authorization; and (iii) the use of artificial intelligence (AI) or new technologies to conduct prohibited acts. The Ministry of Public Security (MPS) has the authority to require enterprises providing telecommunications, internet, and online services, as well as system administrators, to remove information violating cybersecurity laws from systems under their management. The MPS is also assigned responsibility for ensuring information security in cyberspace and data security, establishing mechanisms for IP address identity management, verifying digital account registration information, and issuing warnings and sharing information on cybersecurity threats. Information systems are classified into five levels (similar to the 2015 Law on Network Information Security) based on the degree of harm to national security and social order if an incident occurs. The MPS is the lead agency assisting the government in state management of cybersecurity. The Ministry of National Defense is responsible for managing military information systems, and the Government Cipher Committee manages cryptographic and cipher