Thailand’s Securities and Exchange Commission has finalized the Travel Rule for Digital Assets, setting February 27, 2027 as the mandatory enforcement deadline for local digital asset service providers. From that date, exchanges and custodians must verify receiving parties before processing transfers and attach identifying details for both originators and beneficiaries to every transaction.
The framework introduces four core operational obligations: firms must draft risk management policies, collect counterparty details, attach originator and beneficiary records to each transfer, and retain transaction files for at least five years. Regulators will also require that transaction records from the first two years be maintained in formats enabling on-demand access by competent authorities.
A particularly demanding requirement concerns self-custody wallets. Licensed operators will need to verify that clients maintain effective control over the private keys tied to external addresses, likely forcing exchanges to integrate cryptographic proof-of-ownership protocols before completing transfers. SEC Thailand Secretary-General Pornanong Budsaratragoon said the rules aim to curb money laundering and terrorist financing risks across the domestic digital asset ecosystem.
The final framework was formalized on September 2, 2026, following public consultations between March and July 2026. It received backing from Thailand’s Anti-Money Laundering Office and a government subcommittee focused on suspicious transactions. The measure is aligned with Recommendation 16 of the Financial Action Task Force, and FATF data shows that 83% of jurisdictions had already enacted Travel Rule regulations by the end of 2026. Thailand’s timeline parallels South Korea’s expanded Travel Rule framework, also expected in February 2027. Operators have until the deadline to upgrade infrastructure before non-compliant services face a nationwide ban.
