Thailand Enacts Crypto Travel Rule with Five-Year Data Retention Mandate
Thailand's Securities and Exchange Commission has finalized its version of the crypto Travel Rule, requiring every digital asset business operator in the country to collect, transmit, and verify detailed information about both senders and receivers of crypto transfers. The rules take effect on February 27, 2027, giving the industry roughly 18 months to get its compliance infrastructure in order.
The regulation also imposes a five-year data retention mandate on all transaction records. For the first two years, that data must be immediately accessible to regulators on demand.
Under Thailand's new framework, VASPs must collect originator and beneficiary details for every digital asset transfer. That means names, account numbers, and other identifying data travel alongside the crypto itself.
The regulations were developed in partnership with Thailand's Anti-Money Laundering Office (AMLO), following public consultations held in March and April 2026. A draft notification was released in June 2026 before the final rules were issued on September 1, 2026.