You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

November 29, 2017

Thailand’s Payment Systems Act 2017: Electronic Payments and Bankruptcy

Informed Counsel

In October 2017, the Thai government published the Payment Systems Act in the Government Gazette, setting out the framework for a new licensing and registration regime to regulate electronic payment business operators and putting in place several provisions for a stable and reliable e-payment ecosystem. The Act is expected to facilitate the offering of many new and innovative payment services in Thailand. Operation of the new regime will depend on forthcoming regulations, which are yet to be issued, and it is necessary to await those regulations before offering any actionable commentary on that aspect of the Act. However, some other aspects of the Act, which have drawn less attention, have a significant effect and are very worthy of attention.

Electronic payments have been governed under multiple laws and layers of regulations which, until now, have lacked statutory provisions for finality of payment. This raises a concern that if a payment system participant enters into receivership or reorganization, transactions involving that participant could be canceled or reversed, which can affect other participants in the payment system; for example, where a recorded transfer is not funded or settlement fails. If the payments are for a large amount of money, this problem could spread even more broadly to other payment systems and other participants in them. In extreme scenarios, cancellations or reversals of high-value payments could present serious risks to the entire financial system affecting both banks and non-banks.

Protecting “Important” Payment Systems

The Act sets out provisions for dealing with this issue, which are applicable to participants in “important” payment systems, the security or stability of which can have an impact on the financial institution system or the financial system of Thailand. To be regarded as an important payment system, a system must:

  1. be part of the main infrastructure of the country, trouble with or disruption of which would have a broad effect on the continuity of its participants’ business; and
  2. be a system that supports high-value transfers or that is used for clearing or settlement among its members.

Any payment systems established or operated by the Bank of Thailand (e.g., BAHTNET and the imaged check clearing system) are deemed to be important payment systems. Beyond those, the Minister of Finance has the authority, on the recommendation of the Bank of Thailand, to specify important payment systems in secondary legislation. Therefore, private-sector payment systems could also be designated as important, if specified in ministerial regulations, meaning that these provisions would also be applicable to their participants.

The Act provides that, where a court accepts a reorganization petition in respect of a participant in an important payment system, or orders the participant into receivership, any of the participant’s transfers, clearing, and settlement that were pending before the court order must continue until completion under the payment system rules, but not beyond the end of the date of the court order. The law makes it clear that such transactions cannot be reversed, modified, stopped, or suspended, and that statutory provisions for revocation of a fraudulent act or other act under the Civil and Commercial Code or the Bankruptcy Act cannot affect the validity of such a payment system’s operations. Further, any cash, securities, or instruments that such a participant maintains in the payment system, must be protected, and must not be distributed to the participant’s creditors without the Bank of Thailand’s approval. Each of these measures is important to ensure that instructed transfers are made, and that settlement successfully occurs, despite a participant’s bankruptcy. In that sense, it can help to contain what could otherwise be a contagion.

Protecting Customers of “Payment Service Providers”

For a similar purpose, the Act also sets out provisions for payment service providers that hold customer funds. “Payment service providers” under the Act will include providers of: (1) credit, debit, and ATM cards; (2) e-money; (3) electronic payment services to a seller, service provider, or creditor; (4) electronic money transfer services; and (5) other payment services that may affect the financial system or public interest, and others that may be specified by royal decree.

While current regulations already require certain categories of electronic payment business operators to establish separate bank accounts for holding customer funds, the Act  expands on them.

Specifically, the Act protects customer funds held by a payment service provider from disposal or transfer under a court order, in the following circumstances:

  1. where the service provider suspends its operations under the Payment Services Act or another law;
  2. if a petition for reorganization is filed in respect of the payment service provider;
  3. if a petition is filed in bankruptcy court in respect of the payment service provider; or
  4. if the court orders the payment service provider into receivership.

Further, if a payment service provider is a judgment debtor in a civil case or is ordered into receivership, any customer funds that it holds will not be subject to attachment or execution, and will not be distributed to the payment service provider’s creditors.

In the case of receivership, the Act provides that the Bank of Thailand will return customer funds to the customers, transfer the accounts to another payment service provider, and/or take other actions necessary to conclude business with the customer funds. Customers unrelated to the payment service provider will have priority over those that are related. Any remaining compensation due would be subject to regular bankruptcy proceedings.

The new Payment Services Act offers the possibility of many innovative services for customers in Thailand to enjoy. From a legal standpoint, however, perhaps the greatest achievement of the Act is the security and stability of payment finality and the protection of customer funds.

RELATED INSIGHTS​ 

July 24, 2025
Vietnam’s Ministry of Public Security recently released a draft version of the 2025 Cybersecurity Law, which is intended to replace both the existing 2018 Cybersecurity Law and the 2015 Law on Network Information Security (LNIS). This consolidation reflects a broader effort by the Vietnamese government to streamline and centralize the legal framework governing cybersecurity, data protection, and information security to be under the sole authority of the Ministry of Public Security, moving away from the previous sharing of responsibility with the former Ministry of Information and Communications (which ceased operations earlier this year and merged with the Ministry of Science and Technology). This shift aims to eliminate overlaps and improve enforcement efficiency. The draft law is built upon the foundation of principles and provisions of both the 2018 Cybersecurity Law and the 2015 LNIS, while also introducing a wide range of amendments and new regulations. By merging the two laws, the government seeks to reduce legal fragmentation and ensure consistency in definitions, obligations, and enforcement mechanisms across related domains like data protection, IT system classification, and cybercrime prevention. The newly introduced amendments include enhanced obligations for service providers, stricter controls on information transmission, classification of IT systems, designation and protection of nationally important information systems, and sector-specific violations and compliance requirements. Highlights of the draft law are discussed below. Definition and Obligations of Service Providers The draft law clearly defines and significantly broadens the scope of entities considered “service providers” under its jurisdiction. This now includes businesses and individuals offering products or services in cyberspace, including both infrastructure and content online services, such as: Internet service providers (ISPs) and providers of telecommunications, hosting, servers, domain names, VPNs, proxy services, and cloud computing; Providers of social networks, websites, and online gaming; Financial institutions, banks, foreign bank branches in Vietnam, e-wallet
July 23, 2025
On July 4, 2025, Thailand’s Electronic Transactions Development Agency (ETDA) issued two significant notifications that introduce new compliance requirements for ride-hailing platforms operating in the country. The notifications formally designate these platforms as high-impact digital services under section 18(3) of the Royal Decree on Digital Platform Service Businesses and impose a comprehensive set of additional operational obligations. These measures are designed to address regulatory gaps and enhance oversight of digital platforms providing public passenger vehicle or motorcycle ride-hailing services. First, the Notification on the Designation of Ride-Hailing Platforms under section 18(3) formally designates all ride-hailing platforms that have notified the ETDA of their operations as high-impact digital platform services under section 18(3) of the royal decree. Unlike high-risk marketplace platforms, which are named individually, any ride-hailing platform that has notified the ETDA of its operations is automatically subject to these new requirements. Next, the Notification on Additional Obligations for Ride-Hailing Platforms imposes further obligations on ride-hailing platforms, supplementing the general requirements under section 21 of the royal decree. These notifications will come into force 90 days from their publication in the Government Gazette. New Compliance Obligations The new regulatory framework introduces a range of operational, technical, and reporting requirements for ride-hailing platforms, particularly concerning the issues described below. Vehicle and Driver Compliance Operators must: Ensure that all vehicles used on the platform are registered as public vehicles in accordance with Department of Land Transport requirements Verify all drivers hold valid public driving licenses Collect service fees in compliance with applicable fare regulations under the Vehicle Law Digital Platform Features and User Verification Operators must implement robust digital platform features for both drivers and riders, including: Comprehensive identity verification and confirmation processes for drivers and riders, utilizing both face-to-face and non-face-to-face methods, including biometric and digital ID checks Real-time GPS
July 17, 2025
On July 9, 2025, Thailand issued a notification that introduces comprehensive operational requirements for digital platform service providers operating as goods marketplaces, effective December 31, 2025 (i.e., 180 days after its publication in the Government Gazette). The regulation’s official name is Notification of the Electronic Transactions Committee Re: Other Actions for Digital Platform Service Operators in the Category of Marketplace for Goods with Specific Characteristics under Section 18(2) of the Royal Decree on the Operation of Digital Platform Service Businesses that are Subject to Prior Notification B.E. 2565 (2022), B.E. 2568 (2025). Scope of Application The notification applies exclusively to goods marketplace operators formally designated by the Electronic Transactions Development Agency (ETDA), which on the same day designated 19 platforms that had previously notified the ETDA of their operations. The goods requiring enhanced oversight by these operators are limited to those regulated by the Thai Food and Drug Administration (FDA) and the Thai Industrial Standards Institute (TISI). Development from Earlier Draft An earlier draft of the notification had included a requirement for offshore platforms to establish a local entity, but this requirement was removed from the final notification. Key Obligations Despite the removal of the local entity requirement, the notification imposes a range of additional obligations on designated goods marketplace operators: Transparency. Operators must implement robust transparency measures, including clear, accessible, and understandable disclosures to users in Thai. These disclosures must cover all relevant terms and conditions, comprehensive product information, and complaint management procedures. Operators must also submit an annual compliance report to the ETDA within 60 days after the end of their accounting period, including statistics on regulated goods. Business user registration and identity verification. Before permitting the sale or advertisement of regulated goods, operators must collect and verify business user information, including contact details, identification documents, registration
July 15, 2025
Thailand has established new safe harbor rules that require social media platforms to remove specified content within 24 hours of government notification. On July 5, 2025, the Notification of the Electronic Transactions Commission on Measures to Prevent Technological Crimes for Social Media Service Providers was issued and took effect. This followed a hearing in May 2025 where only a select group of social media and online communication platform operators were invited to attend and comment on draft rules that could exempt social media platform operators from joint liability under the amended Emergency Decree on Measures for the Prevention and Suppression of Technological Crimes in cases involving victims of technological crimes. Safe Harbor Rules The notification stipulates procedures that must be followed in order to receive the protection of the safe harbor rules. Upon being notified by the Division of Prevention and Suppression of Cybercrime, Office of the Permanent Secretary of the Ministry of Digital Economy and Society (MDES) of the presence of false or misleading information that may lead to the commission of a technological crime, social media service providers must immediately take down the specified content, with a maximum allowable turnaround time of 24 hours from the time of receiving the notification. Social media service providers are required to promptly report the outcome of each takedown to the MDES Division of Prevention and Suppression. This shift in Thailand’s regulatory approach to social media content moderation establishes clear government oversight mechanisms while providing platforms with liability protection for compliance. As the new rules took immediate effect, social media platforms need to ensure that they have adequate systems and processes in place to comply with the requirements.