Thailand has adopted a crypto Travel Rule requiring digital asset operators to verify control of self-custodial wallets and retain transaction records for five years, effective Feb. 27, 2027.
The Travel Rule itself is not new to Thailand. Regulators globally have been implementing versions of the standard, which mirrors a decades-old requirement in traditional banking that institutions collect sender and recipient information for wire transfers above certain thresholds. The Thailand mandate extends this principle to crypto by forcing operators to confirm that users actually control the wallets they claim to before processing transactions, a check that has proven technically and operationally difficult because many users hold coins in wallets they do not personally manage.
The Financial Action Task Force, an intergovernmental body focused on anti-money-laundering standards, has pushed Travel Rule adoption across its member jurisdictions since 2019. Thailand's implementation follows similar rules adopted or in process across the United States, the European Union, Japan, Singapore and Hong Kong. The U.S. Securities and Exchange Commission issued final Travel Rule guidance on Feb. 27, 2027, according to reporting on the measure.
Operators in Thailand must now verify that a user initiating a transaction from a self-custodial wallet actually controls that wallet. This creates a practical problem: many retail users store crypto on hardware wallets or software keys that operators do not manage, making verification difficult. Operators typically cannot prove control without asking users to sign messages or perform other technical steps that most retail users do not understand.
The five-year record retention requirement applies to all transaction data collected. Operators must build or license compliance infrastructure to store and retrieve records on demand for regulatory audits. Smaller exchanges and wallet providers have flaged the cost of compliance as a barrier to operating in jurisdictions with strict Travel Rule enforcement.
Thailand's Securities and Exchange Commission and the Bank of Thailand have joint authority over crypto regulation. The Feb. 27, 2027 effective date aligns Thailand's compliance timeline with other major markets, though enforcement details and technical standards remain subject to guidance updates from the regulators.
Operators in Thailand now face compliance costs comparable to those in the U.S. and Europe. If operators do not meet the self-custody verification requirement by Feb. 27, they risk administrative penalties or license revocation under Thai securities law.
