Thailand’s Securities and Exchange Commission has issued a Travel Rule framework for digital-asset transfers, setting a February 27, 2027 effective date. The measure requires digital-asset operators to collect information about customers and counterparties, conduct due diligence, and retain transfer records.
According to the published summary of the Thai SEC rules, the framework also covers transfers involving self-hosted wallets. Operators will need to verify that a customer owns or controls the wallet involved instead of treating an externally supplied address as sufficient on its own.
What the new requirements cover
The rule brings identity and recordkeeping obligations into the operational flow of crypto transfers. In practice, regulated operators will need processes for gathering originator and counterparty details, checking the information, and associating it with the relevant transaction. The requirement applies alongside customer due diligence rather than replacing existing onboarding controls.
Self-hosted wallets are a central part of the framework. Because these wallets do not have another regulated exchange or custodian standing behind them, an operator must establish a reasonable basis for concluding that its customer controls the address. That focus echoes the compliance questions raised by crypto custody rule changes in other markets, although Thailand’s rule has its own scope and timetable. For directly relevant background, see Hyperliquid Policy Center and trade[XYZ] Urge SEC to Establish Pre-IPO Perpetuals Framework.
Operators must keep transaction information for at least five years and make it available for regulatory examination. That retention period means implementation will involve more than a transfer-screening interface. Firms will also need durable records, retrieval procedures, access controls, and a clear audit trail connecting wallet verification to customer and transaction data.
Why Thailand is introducing the rule
Thai SEC Secretary-General Pornanong Budsaratragoon said the framework is intended to reduce the risk that digital-asset operators are used for money laundering, terrorist financing, and technology-related crime. The extended implementation window gives operators time to adapt compliance systems before the rule becomes effective.
The measure places Thailand within a broader crypto regulatory reform trend in which authorities are translating financial-crime controls into requirements for on-chain transfers. The practical challenge is to collect enough verified information to satisfy the rule while preserving a usable transfer process for customers.
What operators need to prepare
Before February 2027, affected businesses will need to map which transfers fall within the rule, define the information required at each stage, and establish escalation procedures when wallet control cannot be verified. They will also need policies for handling incomplete counterparty data and for responding to regulatory requests.
The publication of a firm effective date reduces uncertainty, but the operational work is significant. Exchanges and other covered operators now have a timetable for integrating customer checks, self-hosted wallet verification, transaction retention, and examination-ready records into a single compliance workflow.
