Thailand is tightening oversight of cryptocurrency transfers, including transactions involving self-custodial wallets, as part of its effort to align with global Anti-Money Laundering (AML) standards.

The country's Securities and Exchange Commission (SEC) announced Wednesday that it has issued new Travel Rule regulations requiring digital asset operators to collect information on the parties involved in crypto transfers.

The rules take effect on Feb. 27, 2027, giving crypto businesses nearly six months to build systems for transmitting, receiving and monitoring transaction information.

Thailand is joining a broader global push to track who sends and receives crypto. The Travel Rule stems from the Financial Action Task Force (FATF), the intergovernmental body that sets AML standards, which extended its Recommendation 16 — originally applied to wire transfers — to virtual assets in 2019. The FATF estimated that 83% of surveyed jurisdictions had passed Travel Rule legislation as of 2026. Enforcement, however, has varied widely across countries, and compliance has posed practical challenges because crypto transfers move on public blockchains rather than through traditional banking rails, requiring operators to attach identity data through separate channels.

Self-custodial wallets face ownership checks

Under the new framework, Thai digital asset operators must verify the ownership or control of self-hosted, or self-custodial, wallets whenever customers send crypto to or receive it from those wallets.

Unlike wallets managed by centralized exchanges (CEXs) or custodians, self-custodial wallets give users direct control over the private keys needed to access their crypto. That design has long made them a focal point of AML debates, because no intermediary holds identity records that regulators can compel — which is why the burden of verifying ownership falls on the licensed operators on each side of a transfer. In other jurisdictions that have adopted similar rules, exchanges have used methods such as blockchain analytics and small test transfers, known as "Satoshi tests," to confirm wallet control.

Operators must also retain the information accompanying every digital asset transaction for at least five years and make those records available for regulatory examination.

The requirements place greater responsibility on crypto companies to identify the parties behind transfers, including transfers involving self-custodial wallets. Pornanong Budsaratragoon, secretary-general of Thailand's SEC, said the rules aim to "reduce the risk of digital asset operators being used for money laundering and terrorist financing."

Thailand moves from consultation to final rules

The final rules follow two rounds of public consultation held this year, beginning with proposed principles in March and a draft notification in June. The SEC said most stakeholders supported the proposals.

The Travel Rule arrives as Thailand weighs expanding access to other regulated crypto products, a combination that points to a regulatory strategy of tightening anti-crime controls while opening the door to broader retail participation. On Monday, the SEC proposed allowing intermediaries to offer retail investors access to certain crypto derivatives traded on regulated overseas exchanges.

Days earlier, the regulator advanced draft rules for spot Bitcoin and Ether exchange-traded funds (ETFs), while also seeking feedback on requirements for foreign digital asset custodians used by funds investing in crypto.