Thailand’s Crypto Travel Rule Puts Self-Custody to the Test
Thailand is giving crypto businesses until February 27, 2027 to build a new compliance layer around digital asset transfers.
Summary:
- Personal wallets remain accessible, but exchanges will need evidence of ownership or control.
- Thailand’s licensed exchanges will need new systems for sharing and monitoring transfer data.
- The biggest unanswered question is how wallet verification will work in practice.
Under SEC Notification Sor Thor. 9/2026, licensed operators must collect counterparty information, transmit originator and beneficiary data between service providers, keep transaction records for at least five years and verify ownership or control when customers interact with self-hosted wallets.
What changes when a Thai user withdraws crypto?
For customers, the most visible change is likely to appear at the withdrawal screen.
Today, sending BTC or another supported asset from an exchange to a personal wallet is primarily an address-based process. Under the new regime, a licensed operator must also verify ownership or control of a self-hosted wallet when transferring assets to or receiving assets from it.
The SEC has not specified a mandatory verification technology in its September 2 announcement. That matters because there are several ways the industry already handles this problem.
Travel Rule compliance providers use methods such as:
- Cryptographic signatures: the user signs a message with the wallet’s private key, demonstrating control without transferring assets.
- Micro-transactions: a small amount is transferred from or to the wallet to establish control, sometimes called a Satoshi test.
- Self-declaration: the customer confirms that they control the destination wallet.
- Supporting evidence: some systems can use screenshots or information supplied by the wallet’s beneficiary.
These are examples from existing compliance infrastructure, not methods mandated by Thailand’s SEC. Providers such as Notabene support several approaches because wallet types and regulatory requirements differ between jurisdictions.
That distinction will become important before February. A signature-based system could make verification nearly invisible for compatible wallets, while manual declarations or evidence requests could add considerably more friction.
Bitkub, Binance TH and other licensed platforms are in scope
The regulation applies to Thailand’s regulated digital asset operators rather than to one particular exchange.
The SEC’s current register includes Bitkub Online, Gulf Binance, Orbix Trade, Upbit Exchange Thailand, GMO-Z.com Cryptonomics, WAAN Exchange and Thai Digital Assets Exchange across its licensed crypto and digital-token exchange categories.
For these businesses, compliance goes beyond adding another KYC field.
Operators must establish transfer-risk procedures, collect information on customers and counterparties, perform due diligence on counterparty service providers and assess intermediary operators when one participates in the transfer route.
When crypto moves from one regulated operator to another, the sending business must also transmit information identifying the originator and beneficiary alongside the transfer order.
In effect, the blockchain transaction and the compliance information surrounding it become two connected but separate flows.
The real challenge is interoperability
Thailand is entering a Travel Rule environment that is already global but still technically fragmented.
FATF reported in July that 83% of surveyed jurisdictions had passed legislation implementing the Travel Rule, up from 73% in 2025.
Yet the organization continues to identify practical implementation and cross-border compliance gaps.
That creates a problem for Thai platforms.
An exchange can build its own compliant database, but international transfers require different VASPs to exchange information securely and interpret it consistently.
READ MORE: Singapore Proposes Stablecoin License With 100% Reserve Rule
One industry response has been IVMS101, a standardized data model for transmitting Travel Rule identity information. TRISA, for example, uses IVMS101 for originator and beneficiary data and provides encrypted communication between participating VASPs.
Thailand’s SEC announcement does not require IVMS101 specifically. But the existence of standards such as IVMS101 illustrates what operators need beyond ordinary blockchain infrastructure: a way for institutions to understand each other’s compliance data.
That may ultimately be more technically demanding than recording the blockchain transfer itself.
Self-custody is where Thailand goes beyond exchange-to-exchange messaging
The distinction between a regulated exchange and a personal wallet is central to the rule.
FATF does not explicitly place ordinary peer-to-peer transfers between two people using their own unhosted wallets under the same AML controls. Once a regulated VASP becomes one side of the transaction, however, FATF expects appropriate originator and beneficiary information to be collected and risks to be managed.
Thailand is translating that principle into an explicit requirement to verify wallet ownership or control.
This means the regulation is not a registration system for every private wallet in Thailand. Two individuals transacting directly onchain are different from a customer moving assets through a licensed operator.
The compliance checkpoint appears when the regulated financial gateway enters the transaction.
Why Thailand is doing this now
The regulation was developed with Thailand’s Anti-Money Laundering Office after consultations held between March and July 2026.
It is an interim framework while AMLO prepares related rules under the Anti-Money Laundering Act.
SEC Secretary-General Pornanong Budsaratragoon said the objective is to reduce the risk that digital asset operators become channels for money laundering and terrorist financing while improving Thailand’s connection with international markets.
The international context has also changed.
FATF’s March 2026 work highlighted growing concern about illicit finance moving through stablecoins and unhosted wallets. Its analysis nevertheless recognizes that jurisdictions commonly continue allowing transfers involving personal wallets, with controls applied according to risk rather than through a universal prohibition.
Thailand has chosen that route: verify the connection to regulated businesses rather than outlaw self-custody itself.
February will reveal how much friction users actually face
The regulatory requirement is now clear. The user experience is not.
Between now and February 27, Thai exchanges need to decide how they will prove wallet control, exchange customer information with domestic and foreign VASPs, screen counterparties and retain records in a form regulators can retrieve.
For customers, three details are worth watching: which wallet-verification methods exchanges adopt, whether verification must be repeated for previously approved addresses, and how platforms handle transfers involving foreign services that cannot exchange compatible Travel Rule data.
Those implementation decisions will determine whether Thailand’s Travel Rule becomes mostly invisible compliance infrastructure or something users encounter every time crypto moves between an exchange and self-custody.
The regulation itself answers the legal question. The next six months will answer the more practical one: how much additional friction Thailand is willing to place between a regulated exchange account and a wallet controlled by its owner.
The information presented in this article is intended for informational purposes only and should not be interpreted as financial, investment, or trading advice. Coinspress.com does not promote or advocate for any particular investment strategy, asset, or cryptocurrency project. Cryptocurrency markets are highly volatile and unpredictable – always perform your own research and seek guidance from a qualified financial professional before making any investment decisions.
Alexander Zdravkov
Reporter at CoinsPress
Alexander Zdravkov is a market analyst and crypto journalist with interests in economics, broader financial markets and digital assets. His journey into crypto began more than four years ago, driven by a fascination with the rapid evolution of blockchain technology and the transformative potential of decentralized finance. He began analyzing market cycles and identifying emerging trends before they reach the mainstream. He holds a degree in International Relations - a background that helped shape his broader perspective on global economics, geopolitics, and the interconnected nature of modern financial markets. Whether covering the latest developments in the crypto sector or exploring broader macroeconomic themes, Alexander focuses on giving readers context rather than simply repeating headlines. During his career, he has authored more than 10,000 articles covering cryptocurrencies, traditional finance, and global market developments. His work spans everything from Bitcoin and altcoins to macroeconomic trends influencing risk assets worldwide.
