BrokerTH
The Thai SEC is not just blocking foreign crypto platforms — it is building a data-driven surveillance system for what happens on licensed ones. In 2026, the regulator’s enforcement priorities include market manipulation, insider trading in digital assets, and the use of mule accounts to obscure fund origins. This is not a warning shot. The SEC has already filed criminal complaints using this surveillance data. Thai crypto investors need to understand what behavior triggers scrutiny and what is simply normal trading.
What the SEC’s Surveillance System Tracks
Transaction monitoring flags large or unusual transfers between wallets, particularly accounts that were dormant and suddenly become active with large inflows. Mule account detection looks for patterns where multiple accounts appear coordinated — same deposit timing, similar transaction sizes, rapid fund flows between connected wallets. Market manipulation flags include spoofing (placing and rapidly canceling large orders to create false price signals), wash trading (trading between accounts you control to generate artificial volume), and pump-and-dump coordination patterns detectable through social media and Telegram activity linked to on-chain movements.
Insider trading signals include unusual buying activity in a specific token before a major announcement, listing event, or partnership disclosure.
The Criminal Complaint Record
In early 2026, the SEC filed a criminal complaint against a licensed Thai digital asset broker, its affiliated overseas platform, and executives of both entities, alleging the parties jointly operated an unlicensed exchange since 2023. The complaint was based on transaction data analysis — not tips or whistleblowers. That establishes a critical fact: the SEC has the technical surveillance capacity to build cases from on-chain and platform data, not just from informants.
The February 2026 complaint was not the first enforcement action of this kind. The SEC escalated its enforcement activity through 2025, including AML-related complaints and suitability violations. The system is being actively used, not just built for show.
The AML and KYC Framework
Anti-money laundering requirements for Thai crypto platforms tightened significantly in 2025. Licensed platforms — Bitkub, Gulf Binance, and others with Thai SEC licenses — are required to file suspicious transaction reports, conduct enhanced due diligence for large transfers, and maintain transaction records for audit. Suitability testing has been introduced: investors must confirm they understand the risk profile of different digital asset categories before trading more volatile tokens.
Foreign nationals and Thai citizens who move large amounts internationally face enhanced scrutiny. Transactions above certain thresholds require documentation of origin and purpose.
Normal Behavior vs What Triggers Attention
Normal: buying 50,000 baht of BTC on Bitkub, holding for three months, selling. No flag. Normal: moving crypto from a licensed Thai platform to a hardware wallet for self-custody. No flag — but keep records of the transfer, as blockchain is fully traceable and regulators can request explanations.
Potential flag: receiving large amounts from wallets with no prior connection to your account, particularly if those wallets have been associated with mixing services or sanctioned addresses. Potential flag: high-frequency trading patterns across multiple accounts tied to the same person, particularly when the pattern generates artificial volume in thinly-traded tokens. Potential flag: participation in Telegram groups that coordinate buy-and-sell timing — even if you are a passive member, the SEC’s surveillance can associate you with the coordinated activity through wallet patterns.
What Thai Crypto Investors Should Do
Use licensed platforms only. Bitkub and Gulf Binance are the main licensed venues post-June 28. Trading on foreign platforms that have not received Thai SEC authorization carries regulatory risk that did not exist before the June 28 enforcement regime.
Maintain transaction records. CSV exports from your platform, hardware wallet transfer logs, and screenshots of large transactions provide documentation if the SEC ever asks for an explanation. Understand that blockchain is public: the SEC can trace token flows between wallets without needing platform data, though platform KYC data helps connect wallets to identities.
Avoid trading groups that coordinate entries and exits. From a surveillance perspective, coordinated buying in a thinly-traded token looks identical to a pump-and-dump whether or not that is the intent. The legal risk is not worth the marginal trading edge.
Consult a Thai legal advisor if you operate a large crypto portfolio with complex cross-platform flows. The rules are increasingly resembling securities law, and the enforcement capacity to pursue violations is real.
