Thailand’s Securities and Exchange Commission has introduced a new Travel Rule framework for digital asset transfers, extending compliance duties to transactions that involve self-custodial wallets. The move is aimed at bringing local oversight closer to international anti-money laundering standards and tightening controls around the movement of crypto assets.
The rules will take effect on Feb. 27, 2027, giving Thai digital asset operators roughly six months to prepare systems for transmitting, receiving and monitoring the required transfer data. The framework also sets recordkeeping obligations and requires firms to verify who controls certain wallets used in customer transfers.
Travel Rule obligations expanded
Under the SEC’s regulations, digital asset operators in Thailand will be required to collect information on the parties involved in crypto transfers. The requirements apply as part of the country’s adoption of a Travel Rule regime for digital assets, a compliance standard commonly tied to anti-money laundering oversight.
The SEC said the framework is intended to reduce the risk that digital asset operators could be used for money laundering or terrorist financing. By formalizing how transfer information must be handled, the regulator is tightening expectations for firms that process digital asset transactions.
Checks for self-custodial wallet transfers
A notable feature of the new rules is the treatment of self-hosted, or self-custodial, wallets. When a customer sends digital assets to such a wallet or receives digital assets from one, the operator must verify ownership or control of that wallet.
This adds a compliance step for transfers that do not involve wallets held by centralized exchanges or other custodians. In self-custodial arrangements, users hold their own private keys directly, rather than relying on a third party to manage access to the assets.
Data retention and supervisory access
The Thai framework also requires operators to keep the information that accompanies every digital asset transaction for at least five years. Those records must be maintained in a way that allows them to be provided for regulatory examination.
That retention requirement means firms will need not only transfer-monitoring systems, but also internal processes for storing and retrieving compliance records over a multi-year period. The rules therefore cover both the collection of transfer information and the ability to demonstrate compliance later.
Implementation timeline for operators
The regulations are scheduled to come into force on Feb. 27, 2027. Based on the SEC’s timeline, crypto businesses in Thailand have nearly six months to develop and implement the systems needed to meet the new obligations.
The next confirmed step is operational preparation by affected firms. Before the effective date, operators will need to put in place tools and procedures for transmitting, receiving and monitoring transfer information, while also building processes to verify self-custodial wallet control and retain records for the required period.
Source: cointelegraph.com