Thailand's FATF Travel Rule and stablecoin framework are reshaping digital asset compliance. Find out what KYC and KYB obligations mean for your operations, and what to do now.
Thailand’s compliance environment for digital assets is changing. Two regulatory developments are reshaping what fintechs, payment providers and digital asset operators need to have in place, and the window to prepare is narrowing.
What Is Changing in Thailand
The Bank of Thailand (BOT) has expanded its Enhanced Regulatory Sandbox, enabling financial institutions, fintechs and technology providers to test programmable payments and Thai baht-referenced stablecoins under controlled conditions. A formal framework for baht-backed stablecoins is in development, with a public consultation expected before the end of 2026.
In parallel,
Thailand has finalised its FATF Travel Rule framework for digital assets. The Securities and Exchange Commission (SEC) issued the final rules on 2 September 2026 (Notification No. Sor Thor. 9/2026, dated 25 August 2026), with compliance required from 27 February 2027.
The proposed Travel Rule would require digital asset operators to:
- Collect and transmit information about the parties involved in transfers
- Verify relevant counterparties and service providers
- Retain transaction records for at least five years
- For transfers involving self-hosted wallets, verify that customers own or control the wallet in question
Taken together, these developments signal a clear direction: Thailand is moving from controlled experimentation to a more formal, compliance-driven digital asset environment.
What This Means for Firms Operating in Thailand
For fintechs, payment providers and digital asset firms, these developments have direct implications for verification workflows.
The Travel Rule strengthens the requirement to identify and verify the individuals involved in digital asset transfers. But individual verification addresses only one part of the compliance picture. Firms also need to understand the businesses and service providers they transact with, including their registration and regulatory status and, where relevant, the individuals who ultimately own or control them.
Compliance processes increasingly need to connect three areas:
- Verify: Confirming that individuals and businesses are who they say they are
- Understand: Identifying the ownership structures and ultimate beneficial owners behind business counterparties
- Monitor: Tracking changes to registered information, ownership, and status on an ongoing basis
Why KYC and KYB Need to Work Together
KYC and KYB address different parts of the same compliance risk.
KYC establishes who an individual is. KYB establishes what a business is, whether it is legitimately registered, and who owns or controls it. Individual verification does not substitute for checks on the business behind a transaction. Equally, confirming a company’s registration does not replace identifying the person acting on its behalf.
For firms responding to Thailand’s Travel Rule and stablecoin developments, this isn’t a theoretical distinction. The proposed Travel Rule strengthens individual-level verification requirements for digital asset transfers, but a self-hosted wallet check or a national ID verification only closes one part of the compliance picture. The businesses and service providers on the other side of a transaction still need to be verified, understood, and monitored in their own right.
The two layers reinforce each other rather than compete: strong individual verification tells you who’s acting; strong business verification tells you what they’re acting for, and who’s really behind it. Firms that have one without the other are compliant on paper but still exposed at the counterparty level. That is the gap the Travel Rule is designed to close.
What Firms Should Be Reviewing Now
The SEC issued the final rules on 2 September 2026 (Notification No. Sor Thor. 9/2026, dated 25 August 2026), with compliance required from 27 February 2027. The Bank of Thailand’s regulatory sandbox has been running THB stablecoin use cases since 2024. An initial cohort of eight private-sector participants has been testing use cases, with three having advanced to a second phase of testing by April 2026, and further applicants accepted on a rolling basis. Test cases span escrow payments, programmable payments and the settlement of tokenised assets. The results are intended to inform Thailand’s future policy and regulatory framework.
Firms do not need to wait for every rule to be finalised before reviewing their readiness.
Practical steps include:
- Reviewing current KYC and AML procedures against the proposed Travel Rule requirements, particularly around counterparty data collection and self-hosted wallet verification
- Assessing whether existing processes verify business customers, merchants and counterparty operators, not just individuals. A verified individual doesn’t tell you whether the business behind them is legitimately registered
- Confirming that transaction records can meet the proposed five-year retention requirement
- Reviewing whether beneficial ownership checks are in scope for entities being onboarded and monitored, and whether that sits alongside, rather than instead of individual identity checks
- Considering how changes to business registration, ownership and key individuals are identified after onboarding
- Tracking AMLO’s parallel rulemaking under the Anti-Money Laundering Act alongside the SEC notification
Verifying the Business Behind the Transaction
AsiaVerify provides the business verification layer these developments call for. AsiaVerify verifies Thai businesses using data sourced in real time from Thailand’s Department of Business Development (DBD) registry, covering private limited companies, public companies, general partnerships and limited partnerships registered in Thailand — supporting the counterparty verification obligations the Travel Rule introduces.
Where ownership transparency is required, UBO checks identify the individuals who ultimately own or control a business, closing the visibility gap that individual verification alone can’t reach. And because registration, ownership and key individuals can all change after onboarding, Monitoring tracks those changes on an ongoing basis rather than leaving firms to re-check manually.
Verify the business. Understand who’s behind it. Monitor it as Thailand’s framework develops. Explore AsiaVerify’s Thailand coverage.
