Money laundering compliance in Thailand has changed faster in the last 18 months than in the previous decade. The Anti-Money Laundering Office is now openly auditing real estate brokers, digital asset operators and accounting firms; the 2025 amendments to the Anti-Money Laundering Act expanded the predicate offence list and tightened the obligations of reporting entities; and the Department of Business Development started cross-referring nominee files to police and to AMLO. For any business operating in Thailand in 2026, AML is no longer a paper compliance checklist. It is an enforcement reality that touches incorporation, banking, real estate, cross-border payments and digital assets.

This guide walks through the Thai AML framework as it stands in 2026, with the actual statutes, the reporting thresholds, the customer due diligence requirements, the penalties, and the practical steps a Thai company or its directors should take this quarter. It is written for foreign investors, founders, banks, real estate brokers, digital asset operators, accountants, lawyers and anyone whose business in Thailand crosses one of the AML reporting triggers.

The Thai AML legal framework: where the rules actually come from

The Anti-Money Laundering Act B.E. 2542 (1999) at the centre

The cornerstone of Thai AML law is the Anti-Money Laundering Act B.E. 2542 (1999) ("AMLA"), as amended several times since. The AMLA does three things at once. It defines the offence of money laundering and the predicate offences that feed it (Section 3); it imposes reporting, record-keeping and customer due diligence obligations on financial institutions and certain professionals (Sections 13, 16, 20 and 21); and it creates the Anti-Money Laundering Office and gives it investigative, supervisory and asset-tracing powers (Sections 25 onwards).

The current consolidated text reflects amendments No. 1 to No. 6, with the most recent set of changes adopted by the Cabinet in 2025 to extend Thailand's compliance with Financial Action Task Force ("FATF") recommendations. The full text is published in English on AMLO's official website at amlo.go.th.

The CTPFA B.E. 2559 (2016) and the proliferation pillar

The AMLA is paired with the Counter-Terrorism and Proliferation of Weapons of Mass Destruction Financing Act B.E. 2559 (2016) ("CTPFA"). The CTPFA implements Thailand's obligations under United Nations Security Council Resolutions, including the targeted financial sanctions regime, asset freezes and the obligation to screen against the AMLO designated persons list published at aps.amlo.go.th. In practice, every Thai reporting entity must screen its customers and counterparties against this list before onboarding and on an on-going basis.

Ministerial regulations and AMLO Notifications fill in the operational detail

Above the AMLA sits a layer of secondary legislation that the day-to-day compliance officer cares about even more than the Act itself. The most important pieces in 2026 are:

• The Ministerial Regulation on Customer Due Diligence B.E. 2563 (2020), in force since 14 August 2020, which sets out the CDD steps, identifies the higher-risk categories and prescribes Enhanced Due Diligence ("EDD") triggers.
• The Ministerial Regulation on the Designation of Other Businesses Required to Report, which extends reporting duties to certain non-financial businesses and professions ("DNFBPs").
• AMLO Notifications on the form of CTRs, STRs and property transaction reports, on record-retention periods and on internal controls expected of reporting entities.
• Joint AMLO and Bank of Thailand notifications on mule account detection and on trade-based money laundering.

The 2025 amendments and where Thailand is heading

The Cabinet approved a substantial AMLA amendment package on 25 February 2025, which entered into force later that year. The package: (i) expanded the predicate offence list to capture, in particular, nominee shareholding under the Foreign Business Act and offences under the digital asset legislation; (ii) added new categories of reporting entities, including agricultural cooperatives with capital from THB 100 million, antique dealers, automobile leasing companies and non-profit organisations receiving large foreign funding; and (iii) clarified AMLO's authority to issue compliance instructions and conduct on-site inspections.

The 2025 amendments are best understood as Thailand's continued FATF alignment exercise. Thailand was placed on the FATF grey list in 2010 because of weaknesses in its AML/CFT regime, exited the list in 2013 after substantial reforms, and has since invested heavily in keeping its evaluation rating intact through the Asia/Pacific Group on Money Laundering ("APG") follow-up process.

AMLO: Thailand's Financial Intelligence Unit and AML supervisor

What AMLO does that other agencies cannot

The Anti-Money Laundering Office is an independent agency under the Office of the Prime Minister, established by the AMLA. It has a dual mandate. As Thailand's Financial Intelligence Unit, it receives, analyses and disseminates Currency Transaction Reports ("CTRs"), property transaction reports and Suspicious Transaction Reports ("STRs"). As an investigative authority, it has the power, after a Transaction Committee resolution, to provisionally seize and freeze assets believed to be linked to predicate offences for an initial period of up to 90 days, even before any criminal conviction (Section 48 AMLA).

How AMLO works with BOT, SEC, DBD, RTP and the OAG

AMLO does not operate alone. Banks and finance companies are supervised for prudential matters by the Bank of Thailand; capital markets and digital asset operators by the Securities and Exchange Commission; insurance companies by the Office of Insurance Commission; and Thai limited companies by the Department of Business Development. Predicate-offence investigations are typically handled by the Royal Thai Police or specialised units (the Cyber Crime Investigation Bureau for online fraud, the Department of Special Investigation for major economic crime), with the Office of the Attorney General prosecuting. AMLO sits at the centre of this network because it can provisionally freeze assets while the criminal case is being built elsewhere.

International cooperation: FATF, APG and Egmont Group

AMLO is a member of the Egmont Group of Financial Intelligence Units, which today includes more than 160 jurisdictions, and exchanges intelligence through that network. Thailand is a member of the FATF-style regional body, the Asia/Pacific Group on Money Laundering (APG), and is bound by the FATF 40 Recommendations. In practice, this means a suspicious transaction reported in Bangkok can trigger a parallel inquiry in another jurisdiction within days, and a freezing order issued abroad can be mirrored in Thailand under the framework of mutual legal assistance.

Who has to file AML reports in Thailand

Financial institutions

The first and broadest group of reporting entities is the financial institutions defined in Section 3 of the AMLA. This includes commercial banks, finance companies, credit foncier companies, securities companies, derivatives operators, futures brokers, asset management companies, life and non-life insurance companies, electronic money operators, payment service providers, the Government Savings Bank, the Bank for Agriculture and Agricultural Cooperatives, the Government Housing Bank, the Export-Import Bank of Thailand, the Small and Medium Enterprise Development Bank, the Islamic Bank of Thailand and the cooperatives registered under the Cooperatives Act with assets above the prescribed threshold.

Designated non-financial businesses and professions (DNFBPs)

Section 16 AMLA, expanded by ministerial regulation, brings a long list of non-financial businesses into the reporting net. The most exposed in practice are:

• Real estate brokers and developers, on the sale, purchase, lease or transfer of real property.
• Dealers in precious metals, precious stones, gems and jewellery.
• Antique dealers (added expressly by the 2025 amendments).
• Automobile leasing and hire-purchase companies (added expressly by the 2025 amendments).
• Casinos that may be authorised under any future entertainment complex legislation.
• Lawyers and notaries when they perform certain transactions on behalf of clients (such as buying and selling real estate, managing client money, organising contributions to a company or creating a legal entity).
• Auditors, accountants and tax advisors in similar circumstances.
• Trust and company service providers.
• Non-profit organisations receiving significant foreign donations.

Digital asset businesses and the 2025 extraterritorial reach

Digital asset operators were brought into the AML perimeter by the Royal Decree on Digital Asset Businesses B.E. 2561 (2018), which integrated them into the AMLA reporting regime. The Royal Decree on Digital Asset Businesses (No. 2) B.E. 2568 (2025), in force from 13 April 2025, went further. It created an extraterritorial licensing requirement: a digital asset operator established outside Thailand that "targets" Thai users (for instance through a Thai-language interface, Thai-based marketing, Thai customer support or local payment options) must obtain a licence from the Minister of Finance, on SEC advice. Operating without a licence is now a criminal offence punishable by imprisonment of two to five years and fines of THB 200,000 to 500,000, with a daily fine of up to THB 10,000 per day of continued violation. On 28 June 2025 the SEC blocked Thai access to five major exchanges that had not obtained Thai licences.

The three reports every reporting entity must understand

Section 13 AMLA imposes three core reporting duties on financial institutions, mirrored by Section 16 for DNFBPs. Every compliance officer in Thailand should know these by heart.

CTR: cash transactions of THB 2 million or more

A reporting entity must file a Currency Transaction Report whenever a cash transaction of THB 2,000,000 or more is conducted, whether in Thai baht or in foreign currency converted at the prevailing rate. The threshold applies to a single transaction and to closely linked transactions in a short period of time conducted to avoid the threshold (so-called "structuring" or "smurfing"). The CTR must be filed using AMLO's prescribed form within seven days of the transaction.

Property transaction report: THB 5 million or more

For property transactions, including real estate transfers, the threshold is THB 5,000,000 or more. The reporting duty falls on the financial institution involved, on the real estate broker or agent, and (in some sale-and-purchase chains) on the developer. The Land Department now coordinates with AMLO on transactions above this threshold.

STR: suspicious transactions, any amount

The third and most demanding report is the Suspicious Transaction Report. It is required regardless of amount whenever the reporting entity has reasonable grounds to suspect that a transaction may be linked to money laundering, terrorism financing, proliferation financing or an underlying predicate offence, or whenever the customer's identification information appears unreliable. Common red flags include unexplained third-party funding, structured cash deposits below CTR thresholds, complex layering of corporate ownership, transactions inconsistent with the customer's profile, and customers refusing to provide standard CDD information.

The summary table below consolidates the three reports for a quick reference.

All four obligations apply on top of each other. A single transaction can simultaneously trigger a CTR, an STR and a property transaction report.

KYC and Customer Due Diligence under Thai law

The five steps every reporting entity must complete

The Ministerial Regulation on Customer Due Diligence B.E. 2563 (2020) gives reporting entities a structured CDD process. In substance, every reporting entity must:

• Identify the customer, using government-issued identification (Thai national ID card, passport for foreign nationals, certificate of incorporation and affidavit for legal entities).
• Verify the identity, using credible source documents, electronic verification, or both.
• Identify the Ultimate Beneficial Owner (UBO) for legal entities and arrangements, looking through holding structures until a natural person controlling the customer is identified.
• Understand the purpose and intended nature of the business relationship.
• Conduct on-going monitoring of the relationship, including periodic refresh of CDD data and transaction screening.

Identifying the Ultimate Beneficial Owner

The UBO is the natural person who ultimately owns or controls the customer, directly or indirectly, typically through a 25% or more ownership or voting threshold or through other means of control such as appointment of directors. Identifying the UBO is the area where most enforcement findings now concentrate, because shell companies and multi-layer holding structures are the laundering vehicles of choice.

This duty is reinforced at the corporate registration level by Department of Business Development Order No. 1/2569, dated 16 March 2026, which requires foreign nationals acting as partners or authorised signatories of Thai companies to submit an investment confirmation letter affirming legitimate capital investment, the absence of nominee arrangements and an understanding of liability under Section 36 of the Foreign Business Act. False statements in such letters constitute a criminal offence and create immediate AML exposure if the funds are channelled through Thai bank accounts.

Enhanced Due Diligence and Politically Exposed Persons

Enhanced Due Diligence applies whenever the customer or the transaction is higher-risk. The standard EDD triggers in Thailand are:

• The customer is a Politically Exposed Person ("PEP"), including senior public officials, members of parliament, judges, senior military officers, senior executives of state-owned enterprises, intimate partners and close family members of these persons, and persons known to maintain close business relationships with them.
• The customer or beneficial owner is from a higher-risk jurisdiction (typically a FATF grey or blacklisted country).
• The transaction is unusually complex, lacks an obvious economic purpose, or is structured to avoid reporting thresholds.
• The customer is a non-resident, a cash-intensive business, a non-profit organisation receiving large foreign funds, or a digital asset operator.

Where EDD applies, the reporting entity must obtain senior management approval to enter or continue the business relationship, take reasonable measures to establish the source of funds and the source of wealth, and conduct enhanced on-going monitoring.

On-going monitoring and record-keeping

Section 22 AMLA requires reporting entities to retain CDD records and transaction records for at least five years from the date the relationship ends or the transaction is completed, whichever is later. AMLO can compel production of those records during inspections. In practice, that means a serious AML programme is built on a document repository that is searchable by customer, by date, by transaction type and by counterparty.

Predicate offences: what generates dirty money under Thai law

Section 3 AMLA: the original list

Money laundering is an accessory offence. It only exists where the funds derive from another underlying crime called a "predicate offence". Section 3 AMLA lists those predicate offences, including, in summary:

• Narcotics offences under the Narcotics Code.
• Trafficking in persons and offences against women and children.
• Public sector corruption, embezzlement and malfeasance offences.
• Fraud, public deception and offences against creditors.
• Tax evasion offences of a serious nature.
• Customs offences relating to smuggling.
• Currency exchange and capital markets offences.
• Gambling offences and illegal lotteries.
• Counterfeiting and intellectual property offences.
• Environmental crime.
• Terrorism financing under the CTPFA.
• Organised crime offences.

The 2025 expansion: nominee shareholding, digital asset offences and bribery of public officials

The 2025 amendments expanded the predicate offence list in three meaningful ways. First, nominee shareholding offences under Section 36 of the Foreign Business Act are now expressly captured, which means proceeds derived from a business operated through Thai nominees on behalf of foreigners can themselves be laundered proceeds for AMLA purposes. Second, offences under the Royal Decree on Digital Asset Businesses (including unlicensed exchange operation and unlicensed token offerings) have been added. Third, active bribery of Thai or foreign public officials and officials of international organisations is now a stand-alone predicate offence, in line with the OECD Anti-Bribery Convention and the United Nations Convention against Corruption.

The practical effect is significant. A foreign investor who runs a restaurant or a tour business through Thai nominees in violation of the Foreign Business Act now faces not only Section 36 FBA exposure but also AMLA exposure on the revenue, the bank balances and any property bought with that revenue. AMLO can move to provisionally freeze those assets independently of the FBA criminal proceedings.

Penalties: what businesses, directors and shareholders actually risk

Money laundering itself

Section 60 AMLA punishes the offence of money laundering with imprisonment from one to ten years and / or a fine of THB 20,000 to 200,000. Where the offence is committed by a juristic person, the directors, managers or persons responsible who consented to the offence are liable to the same penalty (Section 61). Conspiracy and attempt are also expressly punishable.

Failure to report or to conduct CDD

Failure to file a CTR, STR or property transaction report, failure to conduct CDD as prescribed, or filing false information attracts administrative and criminal sanctions under the AMLA. The standard fine for serious reporting failures by a reporting entity is up to THB 1,000,000 (one million baht), with a daily fine of up to THB 10,000 per day of continued violation. The 2025 amendments hardened these penalties, in particular for failures to identify the Ultimate Beneficial Owner of legal entity customers, where fines can reach THB 500,000 per failure and individual criminal exposure attaches to the responsible officer.

Asset seizure and provisional freezing under Section 48

Section 48 AMLA gives AMLO, on a Transaction Committee resolution, the power to provisionally seize or freeze assets believed to be connected to a predicate offence, even before a conviction. The Civil Court may then order definitive forfeiture of the assets to the State if the persons interested fail to prove the lawful origin of the funds. This is one of the most powerful AML tools in Asia, because the burden effectively shifts to the asset-holder to show legitimate origin.

Reputational and banking consequences

The legal sanction is often only the start. A formal AMLO notice triggers immediate consequences across the banking system: bank account freezes, refusal of correspondent banks to process transactions, termination of credit lines, refusal of insurance cover, and, for foreign nationals, possible visa cancellation, work permit revocation and entry into the Immigration blacklist following overstays or detention. For listed companies and regulated entities, AML findings also trigger SEC and BOT scrutiny that often outlasts the AMLA process itself.

Practical AML compliance: what to do this quarter

Step 1: Map your obligations

The first practical step is to know exactly which AMLA category applies. A real estate developer, a residential agent, a hotel buying-side broker, an antique dealer and an accounting firm have overlapping but not identical obligations. Confirm which provisions cover your business, what reporting forms apply, and which AMLO Notification governs your record formats.

Step 2: Build a written AML policy and risk assessment

Every reporting entity must adopt a written AML/CFT policy approved by senior management or the board, supported by a documented risk assessment that maps customer risk, geographic risk, product risk, transaction risk and channel risk. AMLO inspections systematically ask for both documents at the opening of an audit.

Step 3: Update KYC records and identify UBOs

Run a CDD refresh on the entire customer base. Make sure every legal-entity customer has an identified UBO with supporting documentation, that PEP screening is up to date, and that customers from higher-risk jurisdictions have a documented EDD file. Many AML inspections fail at this single point because legacy customer files were never refreshed after the 2020 CDD regulation.

Step 4: Train staff and appoint a compliance officer

The AMLA assumes that a reporting entity has at least one designated AML compliance officer with the authority to file STRs and to delay or refuse transactions. Ongoing staff training, with attendance records, is required. AMLO inspections typically request training logs covering at least the previous 24 months.

Step 5: Test, document, and re-test

Internal testing is the difference between a programme that exists on paper and one that actually works. Run sample transaction reviews, sample CDD reviews and red-flag detection tests every quarter, document the findings, and feed remediation back into the policy and the training. The same approach is what AMLO inspectors will replicate when they walk into the office.

What to do if AMLO contacts you

AMLO may contact a Thai business in three different ways: a request for documents under Section 38 AMLA, an on-site inspection of a reporting entity, or a Section 48 freezing order against a customer's account. Each one carries its own response logic, but the common rules are the same. Acknowledge receipt promptly, compute the response deadline carefully (the deadline is short, often 7 to 15 days), preserve all records relevant to the request, do not alter or destroy any document mentioned in the notice, and consider engaging Thai AML counsel before responding. The first response sets the tone for the entire matter, and an inadequate or late response can itself become an offence under Section 38 or Section 65 of the AMLA.

If the contact is a freezing order against a customer or counterparty, the reporting entity must comply with the freeze immediately and report compliance to AMLO. Customers whose accounts are frozen have a defined window to challenge the freeze before the Civil Court, and the burden then falls on them to establish the lawful origin of the funds.

How Juslaws & Consult helps with AML compliance

Juslaws & Consult advises Thai and foreign-controlled businesses on the full AML compliance lifecycle. That includes mapping reporting obligations under the AMLA and the CTPFA; drafting AML policies, risk assessments and CDD procedures; running UBO verification on Thai and offshore corporate structures; preparing investment confirmation letters under DBD Order No. 1/2569; defending clients in AMLO inspections, Section 38 production requests and Section 48 freezing proceedings; structuring digital asset operations to fit the 2025 extraterritorial licensing regime; and, where necessary, representing companies and individuals before the Civil Court in forfeiture proceedings and the criminal courts in money laundering cases.

For foreign investors, the most valuable single intervention is often early. Reviewing a corporate structure, a real estate transaction or a digital asset operation before it is launched is far more effective than trying to retro-fit AML controls after AMLO has already issued a notice.

‍

Frequently asked questions

What is the legal basis of anti-money laundering law in Thailand?

The cornerstone is the Anti-Money Laundering Act B.E. 2542 (1999), as amended through 2025. It is paired with the Counter-Terrorism and Proliferation of Weapons of Mass Destruction Financing Act B.E. 2559 (2016), the Ministerial Regulation on Customer Due Diligence B.E. 2563 (2020), and a series of AMLO Notifications. The official consolidated text is published at amlo.go.th.

Who has to file Currency Transaction Reports in Thailand?

All financial institutions defined in Section 3 AMLA, plus designated non-financial businesses and professions covered by Section 16 and the relevant ministerial regulation. This includes commercial banks, finance and securities companies, insurance companies, payment service providers, digital asset operators, real estate brokers and developers, dealers in precious metals and stones, antique dealers, automobile leasing companies and certain professionals when they conduct specified activities for clients.

What are the AML reporting thresholds in Thailand in 2026?

Cash transactions of THB 2,000,000 or more must be reported as a CTR; property transactions of THB 5,000,000 or more must be reported as a property transaction report; and any suspicious transaction must be reported as an STR regardless of amount. Wire transfer information thresholds are set by ministerial regulation, typically from THB 100,000.

What is the Ultimate Beneficial Owner (UBO) and why does it matter under Thai AML law?

The UBO is the natural person who ultimately owns or controls a customer, directly or indirectly, usually through a 25% or more ownership or voting interest or through other means of control. The Ministerial Regulation on Customer Due Diligence B.E. 2563 (2020) requires every reporting entity to identify and verify the UBO of every legal entity customer. UBO failures are now one of the leading reasons for AMLO findings against banks, real estate brokers and accounting firms.

Are nominee shareholders a money laundering issue in Thailand?

Yes. The 2025 AMLA amendments brought nominee shareholding offences under Section 36 of the Foreign Business Act into the predicate offence list. Revenue and assets of a business operated through Thai nominees on behalf of foreigners can therefore be treated as proceeds of crime, with AMLO able to provisionally freeze those assets under Section 48 AMLA in addition to the FBA prosecution.

Do digital asset and crypto businesses have AML obligations in Thailand?

Yes, and the obligations are now extraterritorial. Under the Royal Decree on Digital Asset Businesses (No. 2) B.E. 2568 (2025), in force from 13 April 2025, even an exchange or token issuer established outside Thailand must obtain a licence and comply with Thai AML obligations if it targets Thai users. Operating without a licence is punishable by imprisonment of two to five years and fines of THB 200,000 to 500,000, plus a daily fine of up to THB 10,000.

What are the penalties for the offence of money laundering in Thailand?

Section 60 AMLA punishes money laundering with imprisonment from one to ten years and a fine from THB 20,000 to 200,000. The directors, managers or persons responsible for a juristic person committing the offence are liable to the same penalty under Section 61. Failure to report or to perform CDD attracts administrative and criminal sanctions, with fines up to THB 1,000,000 and a daily fine of up to THB 10,000 per day of continued violation.

Can AMLO freeze my bank account before any criminal conviction?

Yes. Section 48 AMLA empowers AMLO, by Transaction Committee resolution, to provisionally seize or freeze assets believed to be linked to a predicate offence, for an initial period of up to 90 days, with possible extension. Civil Court forfeiture follows in a separate proceeding in which the burden effectively rests on the asset-holder to establish the lawful origin of the funds.

How long must AML records be kept in Thailand?

At least five years from the end of the business relationship or the date of the transaction, whichever is later, under Section 22 AMLA. Some sectoral regulations require longer retention. Records must be kept in a form retrievable on request by AMLO and the supervisory authorities.

Is Thailand on the FATF grey list in 2026?

No. Thailand was placed on the FATF grey list in 2010 and exited it in 2013 after substantial reform. It is now monitored through the Asia/Pacific Group on Money Laundering follow-up process and remains compliant with most FATF Recommendations, with the 2025 AMLA amendments addressing the remaining technical gaps.

What should a business do if AMLO sends a Section 38 production request?

Acknowledge receipt promptly, compute the deadline carefully (typically 7 to 15 days), preserve every relevant document, identify the right legal entity and individuals authorised to respond, and consider engaging Thai AML counsel before any substantive disclosure. Late or incomplete responses can themselves attract sanctions under Sections 38 and 65 AMLA, and the first response often shapes the entire matter.

Do lawyers and accountants have to file STRs in Thailand?

Yes, in defined circumstances. Section 16 AMLA, expanded by ministerial regulation, requires lawyers, notaries, auditors, accountants and tax advisors to file STRs when they prepare or carry out, on behalf of clients, transactions involving real estate, the management of client funds, the organisation of contributions to a company or the creation, operation or management of legal entities. Outside those activities, classic legal privilege applies.

Can a foreign investor still operate safely in Thailand under the new AML rules?

Yes. The new rules do not target legitimate foreign investment. They target undisclosed beneficial ownership, nominee shareholding, undocumented sources of funds and unlicensed digital asset operations. Foreign investors who structure their Thai business with proper documentation, transparent UBO disclosure, lawful sources of capital and a real operational footprint remain perfectly able to operate, and indeed benefit from clearer rules and a more predictable enforcement environment.