BrokerTH
Thailand’s ก.ล.ต. has set February 27, 2027 as the effective date for the cryptocurrency Travel Rule — the regulatory requirement that licensed operators collect and transmit sender and recipient information alongside crypto transactions. This is not a distant regulatory aspiration. It’s a firm deadline that Thai crypto exchanges, brokers, and custody providers need to be actively implementing now, and that retail users need to understand before the rule changes how their accounts work.
What the Travel Rule Requires
The Financial Action Task Force (FATF) Travel Rule — recommendation 16 — requires that when a Virtual Asset Service Provider (VASP) sends or receives a crypto transaction above a certain threshold, it must pass “travel information” along with the transaction. This information includes the sender’s name, account identifier, and physical address, as well as the recipient’s name and account identifier.
Thailand’s implementation requires licensed operators to:
- Collect and transmit originator information (sender name, account number, and address) for all transactions above ฿5,000 equivalent
- Collect and record beneficiary information (recipient name and account identifier)
- Retain all transaction records for a minimum of five years
- Verify private wallet transfers — when a customer sends crypto to a self-custodied wallet not on an exchange, the operator must now verify that wallet belongs to the customer
The Self-Custody Requirement Is the Biggest Change
The private wallet verification requirement is the most operationally significant change for Thai retail crypto users. Currently, if you withdraw USDT from Bitkub to your personal MetaMask wallet, the exchange asks for a wallet address and sends the funds. Under the Travel Rule, Bitkub will need to verify that the MetaMask address actually belongs to you before completing the withdrawal.
The most common verification method being adopted globally is the “micro-deposit” or signed message approach: you sign a message with your private key (proving ownership of the wallet) and submit that signature to the exchange. Some exchanges will also accept proof of address documentation linked to the wallet. The specific method ก.ล.ต.-licensed operators in Thailand will use hasn’t been finalized, but affected platforms must have systems in place by February 27, 2027.
Five-Year Record Retention: What It Means
All Thai crypto exchanges must retain Travel Rule transaction data for at least five years. This is standard for financial institutions globally — Thai banks already retain transaction records for similar periods under Anti-Money Laundering Office (AMLO) requirements. For crypto, this represents a significant infrastructure investment. Exchanges need secure, auditable transaction record systems that can store counterparty identification data alongside blockchain transaction hashes.
For users, the practical implication is transparency: transactions through licensed Thai exchanges are now permanently associated with verified identities, both on the originator and beneficiary side. This is broadly positive for regulatory legitimacy — it makes Thai crypto exchanges more comparable to traditional financial institutions in terms of AML/KYC standards — but it also means the privacy assumptions of early crypto are no longer valid for licensed-platform transactions.
How This Affects Different Types of Thai Crypto Users
Exchange-to-exchange transfers (Bitkub to another licensed exchange): The Travel Rule applies if both exchanges are licensed and have Travel Rule systems. If the receiving exchange is foreign, the Thai operator must still collect and transmit the information; the foreign exchange’s obligations depend on its own jurisdiction’s rules.
Exchange-to-private wallet transfers: The new self-custody verification requirement applies. You’ll need to demonstrate wallet ownership before withdrawals complete.
DeFi transactions and non-custodial wallets: The Travel Rule does not directly apply to peer-to-peer blockchain transactions or DeFi protocol interactions. However, if you fund a DeFi wallet from a licensed exchange, the exchange-side withdrawal is subject to the rule.
Large institutional transfers: More onerous documentation requirements for transfers above certain thresholds, but institutions with proper compliance infrastructure should already have most of this in place.
What Thai Crypto Platforms Must Do Before February 27, 2027
The to-do list for ก.ล.ต.-licensed operators is substantial: implement a VASP-to-VASP data transmission protocol (most platforms are evaluating TRISA or OpenVASP standards), build self-custody wallet verification flows into withdrawal systems, upgrade record-keeping databases to store Travel Rule data fields, train compliance staff on identification requirements, and prepare audit trails for ก.ล.ต. inspection.
Operators who fail to implement by February 27, 2027 face ก.ล.ต. enforcement action, which can include fines, license suspension, or license revocation. Given the ก.ล.ต.’s increasingly proactive enforcement posture in 2026, this is a credible threat.
What Thai Retail Users Should Do Now
Before February 2027, Thai crypto users should ensure their account KYC is fully up to date on any licensed exchange they use — stale identity documents will create problems when Travel Rule data must be transmitted. Second, if you regularly withdraw to private wallets, expect to complete a one-time wallet ownership verification process for each address you use. Third, understand that transactions through licensed platforms are now part of a permanent, regulatorily-visible record. This doesn’t affect most legitimate users, but it does mean privacy-focused crypto users may need to reconsider which platforms they use for which activities.
