Thailand's Securities and Exchange Commission has begun enforcing its crypto Travel Rule, requiring licensed digital asset businesses to verify self-custodial wallet ownership and retain transfer records for five years. The regulation requires every digital asset business operator to collect, verify and transmit detailed information about both parties in a crypto transfer, effectively making crypto transfers behave more like traditional wire transfers on the compliance side. The six-month transition period that began with the effective date of February 27, 2027 has now concluded, with the final version issued on September 2, 2026 after two rounds of public feedback and stakeholder consultation. The rule takes effect after a 180-day implementation period from publication in the Royal Gazette, providing operators time to prepare systems for exchanging transfer data, checking transactions, and requesting required information from customers.
Under the finalized framework, transaction records must be retained for at least five years, with immediate regulatory access required during the first two years. Operators must verify ownership or control of self-hosted wallets and conduct checks on counterparties and service providers. For the first two years of the retention period, transaction information must remain in a format that allows supervisory authorities to retrieve or inspect it immediately. The SEC said the proposed controls are designed to mitigate the potential for digital asset operators to facilitate money laundering and the financing of terrorism, placing the regulation squarely within Thailand's broader anti-money laundering push. The regulations specifically target P2P transfers and self-hosted wallets, addressing concerns about partial anonymity in crypto transactions that make them attractive for criminal elements.
The most contentious requirement targets self-hosted wallets, where users hold their own private keys instead of relying on exchanges or custodians. Under the new enforcement framework, exchanges must confirm that individuals sending or receiving transfers have actual ownership of or authority over the relevant self-custodial wallets through proof-of-ownership steps: signing messages from the wallet, micro-deposits, or similar cryptographic checks before funds move. For transfers above 30,000 baht, customers must provide recipient's province or city and country, while legal entities require registration numbers. When coins arrive at regulated-platform wallets from self-hosted wallets, platforms must collect sender information and verify wallet ownership if the transaction exceeds 30,000 baht. The verification process is significantly more complex than checking identity on centralized platforms, since self-custodial wallet verification has no built-in intermediary to confirm ownership.
For Thai exchanges, the immediate effect is operational costs including verification tooling, message-signing flows, and long-term data storage. Smaller platforms tend to feel the weight more than large ones with existing compliance stacks. Bitcoin was trading around $76,782 as of September 2, 2026, down 1.6%, with Ether near $2,381 (down 3.0%) and XRP at $1.32 (down 4.0%), according to CoinMarketCap market data. The rule affects crypto card markets where many cards run on top-up models, with longer onboarding paths for self-custody spending options. Withdrawals to unverified third-party wallets are the transactions most likely to get held up or blocked, while cards that top up from regulated exchange accounts face fewer new hurdles since identity links already exist. The rule excludes order-book trades and Thai baht transfers, though high-value transfers, cases with missing data, or transactions requiring added wallet checks may take longer to process.
The Travel Rule follows the Financial Action Task Force's Recommendation 16, with roughly 83% of jurisdictions surveyed by FATF having already enacted some version of Travel Rule legislation as of early 2026. Thailand's Subcommittee on Financial Data Connectivity to Enhance Monitoring of Suspicious Financial Transactions previously resolved that the SEC and AMLO should prepare guidance for digital asset businesses. The SEC coordinated with AMLO when setting the proposed requirements, ensuring that information would accompany digital asset transfers and could be used for transaction monitoring. The framework requires covered crypto service providers to collect, share and retain identifying information about senders and recipients, extending anti-money laundering controls originally developed for traditional financial transfers to digital assets. Notably, the European Union has similar crypto AML plans by mid-2027, while South Africa has already activated strict exchange capital controls linked to crypto funds. These developments are part of a global anti-money laundering campaign driven by FATF, with the best way to trace P2P transfers and DeFi flows being to time enforcement when users want to cash out via exchanges or licensed virtual asset service providers.
