BrokerTH
Thailand’s SEC announced on September 2 that all digital asset businesses must comply with the crypto travel rule by February 27, 2027. Most of the coverage has focused on what exchanges must do. Less attention has gone to the provision that affects individual Thai crypto holders most directly: what happens when your transaction involves a self-hosted or self-custody wallet—and what your legal exposure looks like under the new rules.
What the Travel Rule Actually Requires
The FATF (Financial Action Task Force) travel rule is an international anti-money laundering standard that Thailand’s SEC has now codified into local law. The core requirement: every crypto transfer must carry information about the originator (sender) and beneficiary (receiver)—full name, account number, and identifying details. This information must “travel” with the transaction from one institution to another, mirroring the data requirements that exist for wire transfers in traditional banking.
For transfers between licensed Thai exchanges—Bitkub to Bitkub, Bitkub to Binance Thailand, or any licensed-to-licensed transfer—compliance is largely automated: the exchanges share data with each other as part of the transfer protocol. The complication arises when one end of a transaction is a self-custody wallet (a wallet where the holder controls their own private keys, not managed by any licensed institution).
The Self-Custody Wallet Problem
Under Thailand’s new rules, if you send crypto from a Bitkub or Binance Thailand account to your own hardware wallet (Ledger, Trezor, etc.) or software wallet, the exchange is required to verify your ownership or control of that self-hosted wallet before processing the transfer. The SEC’s announcement requires operators to verify wallet ownership—but the specific technical methods haven’t been fully standardized yet.
Approaches used internationally for this verification include:
- A small test transaction from the self-hosted wallet back to the exchange (proof of control through movement)
- Signing a specific message with the wallet’s private key (proving control without revealing the key)
- Submitting a formal declaration that you own and control the wallet address
The point is: if you regularly move crypto between a Thai licensed exchange and your own wallet, you will need to prove that wallet is yours. This wasn’t required before February 27, 2027, but exchanges will begin implementing verification procedures ahead of the deadline—possibly well before the end of 2026.
The 5-Year Data Retention Requirement
Transaction records—including all originator and beneficiary data collected under the travel rule—must be kept for at least five years. During the first two years after implementation (February 2027 through approximately February 2029), regulators get immediate access to these records on request. After that initial period, standard legal process applies.
What this means practically: every crypto transfer you make through a Thai-licensed exchange from February 2027 onward is part of a documented, regulator-accessible trail. For Thai investors who have been accustomed to the relative pseudonymity of crypto transfers, this is a material change in how transaction data is stored and accessed.
What Happens If You Don’t Comply
The compliance obligation falls primarily on the licensed digital asset business—the exchange—not the individual user. If Bitkub or Binance Thailand fails to collect required travel rule data, the exchange faces regulatory consequences from ก.ล.ต. The user’s exposure is more indirect: if the exchange cannot verify your self-custody wallet ownership under the new rules, it may refuse to process the transfer until verification is completed. Your funds aren’t seized or lost, but your ability to move them between the exchange and your personal wallet could be blocked pending compliance.
The Broader FATF Context
Thailand’s travel rule implementation isn’t unusual in the global picture. The EU’s Markets in Crypto Assets (MiCA) regulation includes travel rule provisions; Singapore’s MAS has been enforcing similar requirements since 2023; the UK and Hong Kong have both moved in the same direction. The February 2027 deadline gives Thai exchanges approximately 18 months from the September 2026 announcement to build the technical infrastructure. That’s a reasonable runway for well-resourced exchanges, though smaller operators may find it challenging.
The FATF’s underlying concern: crypto’s pseudonymity has been exploited for money laundering and terrorist financing, and the travel rule is designed to bring blockchain transactions into the same AML visibility framework as wire transfers. Whether you agree with the policy or not, it’s becoming a permanent feature of regulated crypto markets globally.
What Thai Holders Should Do Now
- Document your wallet ownership: If you regularly move crypto to a hardware wallet, save the purchase receipt, record the wallet address, and understand how to prove ownership (signing a test message) before you need to do it under regulatory pressure.
- Watch exchange announcements: Bitkub and Binance Thailand will need to communicate their self-custody wallet verification procedures to users before the February 2027 deadline. These announcements will tell you exactly what the process looks like.
- Business users take note: If you operate a business that processes crypto payments, business-to-business crypto transfers will receive higher AML scrutiny than retail transactions. Consider legal advice if your business handles crypto payment flows regularly.
- Don’t wait until January 2027: Exchanges implementing these systems will likely begin testing them months before the deadline. Expect to encounter verification requirements sooner than the official date suggests.
The February 2027 date gives you approximately 17 months from now to prepare. That’s enough time to handle this correctly—but not enough time to ignore it.
