By Thailand’s Securities and Exchange Commission has issued a new Travel Rule requiring regulated cryptocurrency businesses to verify customers’ counterparties and establish ownership or control of self-hosted wallets involved in transfers. The SEC announced the final regulations on September 2 following public consultations conducted between March and July. The requirements will take effect on February 27, 2027, giving exchanges and other regulated digital-asset operators almost six months to develop the necessary information-sharing and transaction-monitoring infrastructure.
The framework is designed to align Thailand’s crypto sector more closely with Financial Action Task Force standards while helping authorities combat money laundering, terrorist financing and technology-related financial crime. Unlike conventional blockchain transactions, where an exchange may only know the destination address, the new framework requires regulated operators to collect information capable of identifying the parties involved.
Self-Hosted Wallets Face Ownership Verification
The most consequential provision for individual crypto users concerns self-custody. When customers transfer digital assets from a regulated Thai operator to a self-hosted wallet, or deposit assets from one, the operator must verify ownership of or control over that wallet. The SEC’s announcement does not prescribe one universal technical method exchanges must use for that verification. In practice, compliance systems internationally can use methods including cryptographic message signing, small verification transfers or other evidence linking a wallet address to the claimed owner, depending on the provider and jurisdiction. Thailand’s final rule therefore does not prohibit self-hosted wallets or require users to surrender their private keys.
Instead, it places responsibility on regulated businesses to establish who controls a wallet when that wallet interacts with their platforms. Operators must also conduct due diligence on transaction counterparties and determine whether another crypto service provider involved in a transfer satisfies applicable qualifications. Where intermediary digital-asset operators participate in the transaction route, their status must similarly be checked.
Transaction Information Must Travel With Crypto
For transfers between regulated providers, the ordering operator must transmit information identifying the originator and beneficiary alongside the digital-asset transfer instruction. That is the core principle behind the Travel Rule: identifying information effectively “travels” with a transaction between financial intermediaries even though the cryptocurrency itself moves over a blockchain. Operators must establish formal policies and procedures for managing transfer-related risks and retain information accompanying every digital-asset transaction for at least five years. The SEC said records must be maintained so supervisory authorities can promptly retrieve or inspect them. Thailand developed the rules in coordination with the country’s Anti-Money Laundering Office.
The SEC described its framework as an interim regulatory measure while AMLO prepares related requirements under Thailand’s Anti-Money Laundering Act. Stablecoins are another area receiving increased scrutiny. In August, the SEC and Bank of Thailand met digital-asset businesses to discuss additional supervision of stablecoin transactions, particularly USDT and USDC, because authorities are concerned they could facilitate money laundering, cybercrime or circumvention of international money-transfer regulations. Separate stablecoin-related measures are expected before the end of 2026. Thailand’s approach reflects a broader international shift toward bringing transfers between centralized platforms and private wallets inside regulated transaction-monitoring systems.
The FATF has pushed jurisdictions to implement its Travel Rule for virtual assets, but adoption and enforcement have remained uneven across countries. For Thai crypto users, the practical consequence is straightforward. Self-custody remains permitted, but moving cryptocurrency between a private wallet and a regulated exchange will increasingly resemble transferring money between regulated financial institutions: the blockchain address alone will no longer necessarily provide sufficient information. Beginning February 27, Thai operators will need to know not only where crypto is moving, but who controls the wallet on the other side.