BrokerTH
On August 21, Thailand’s Securities and Exchange Commission (ก.ล.ต.) published a consultation paper proposing enhanced qualification requirements for foreign digital asset custodians. Public comments close September 20. This is the fourth major crypto regulatory move ก.ล.ต. has made in a single quarter — and it’s arguably the most structurally significant one for investors who hold assets on offshore platforms.
What the Consultation Paper Proposes
The core proposal: tighter minimum standards for overseas entities that serve as custodians of Thai investors’ digital assets. The key proposed requirements include minimum capital adequacy ratios, mandatory insurance or surety bond coverage for client assets, independent security audit requirements at defined intervals, and specific cybersecurity standards aligned with international frameworks.
This applies to foreign custodians — Thai-licensed entities (like Bitkub and Upbit Thailand) already operate under domestic requirements. The target is the overseas platforms where Thai investors store substantial crypto holdings: Binance, OKX, Bybit, and similar exchanges acting in a custodial role for Thai clients.
Why This Matters in September 2026
Thailand’s crypto regulatory stack has been assembled systematically this quarter. The Travel Rule was finalized September 2 — exchanges must share sender and receiver information for transactions above a threshold, effective February 27, 2027. The stablecoin framework was approved September 3 — new principles for USDT/USDC oversight. The ETF consultation was published August 21 — covering Bitcoin and Ethereum ETF structures. And now the foreign custodian requirements consultation also published August 21, with comments due September 20.
The Bitkub hack-related criminal complaint filed earlier in 2026 was a catalyst. ก.ล.ต. recognized that custody risk — specifically, the risk of losing client assets due to exchange failure, hacking, or insolvency — was underregulated relative to the size of Thai retail crypto exposure. These four moves together represent a coherent regulatory architecture, not four separate policy notes.
What “Enhanced” Actually Means
The specific thresholds aren’t final yet — that’s what the consultation process is for. But the direction is clear: ก.ล.ต. wants demonstrable proof that foreign custodians can cover client losses.
Insurance requirements: Platforms would need to demonstrate coverage for hot wallet holdings — the crypto assets actively accessible online (and therefore most exposed to hacking). Cold storage requirements may also tighten.
Capital adequacy: Similar in concept to what traditional custodian banks maintain — a minimum buffer of liquid assets against operational and custody losses. The exact ratio will matter significantly for which offshore platforms can feasibly comply.
Reporting and disclosure: Periodic publication of assets-under-custody figures and security audit results — bringing transparency to what has historically been opaque.
Implications for Thai Investors Using Offshore Platforms
If you hold significant crypto on Binance, OKX, Bybit, or any other offshore platform: the relevant question isn’t whether the proposal is finalized yet — it’s whether those platforms are actively working toward Thai compliance. Some major exchanges have dedicated regulatory teams; others don’t prioritize small-market compliance until forced.
Assets on Thai-regulated exchanges (Bitkub, Upbit Thailand) are within the domestic framework already. The Travel Rule, stablecoin rules, and custodian requirements all apply to these domestic entities first.
The combined effect of Travel Rule + enhanced custodian requirements creates a two-layer compliance environment: exchanges must know who is transacting (Travel Rule) and must prove they can protect what’s transacted (custodian requirements). Both together move Thailand meaningfully toward the standards maintained in Singapore, Japan, and parts of the EU.
What to Do Before September 20
For investors and retail traders: no immediate action required. But it’s worth reviewing which platforms you use and checking whether those platforms have public statements about ก.ล.ต. compliance or Thai regulatory engagement. Platforms that acknowledge and engage with Thai regulation are less likely to exit the market abruptly when final rules publish.
For crypto businesses and fintech firms operating in Thailand: submit formal comments to ก.ล.ต. before September 20. The consultation process is public and input shapes the final rules. If the proposed capital adequacy thresholds are operationally unworkable for your business model, this is the moment to say so on record.
Watch for ก.ล.ต.’s formal response to submissions, expected in Q4 2026. Final custodian rules will likely include a 6-12 month implementation window, consistent with the Travel Rule’s 6-month grace period from finalization to effective date.
