Thailand keeps fintech innovation on a short regulatory leash

Thailand’s fintech sector has reached real maturity in payments and digital lending, even as newer areas like digital assets and InsurTech are still finding their footing. 

That’s according to a legal guide from International Comparative Legal Guides (ICLG), prepared by lawyers at Weerawong, Chinnavat & Partners.

  • Three regulators split the work. The Bank of Thailand (BOT) covers banking, payments and virtual banks. The Securities and Exchange Commission (SEC) handles capital markets and digital assets. The Office of Insurance Commission (OIC) oversees InsurTech. There’s no single fintech law, each regulator applies its own risk-based rules.
  • Crypto rules are strict. Algorithmic stablecoins pegged to the baht are banned outright — only the central bank can issue currency. Baht-backed stablecoins for payments are allowed, but need prior BOT approval first. Only licensed firms can run crypto exchanges, brokerages or ICO portals. And cryptocurrency still isn’t legal tender in Thailand — it’s classified purely as a digital asset.
  • Funding comes from several channels: venture capital, bank loans, and licensed crowdfunding platforms. Thailand’s Board of Investment sweetens the deal with up to eight years of corporate tax exemption for qualifying fintech firms, plus import duty relief and easier foreign ownership rules. A separate tax break, Royal Decree No. 779, exempts transfers of investment tokens to boost liquidity in the digital asset market. Big exits are still rare, though. Sabuy Technology (now WSOL) and Forth Smart Service remain the go-to examples of fintechs that made it to Thailand’s stock exchange.
  • All three regulators run sandbox programmes, letting firms test new products (from programmable payments to InsurTech pilots) under supervision. Foreign fintechs face a harder path here: the Foreign Business Act generally requires a local licence or a Thai partner to serve customers directly. On top of that, firms must comply with data protection law that applies even to foreign companies, plus cybersecurity rules, anti-money-laundering checks, and a 2023 decree aimed squarely at online scams and fraud.

Source: iclg.com