Is Crypto Legal in Thailand?
Yes — with a handful of bright lines you shouldn't cross. This page turns the SEC, Bank of Thailand and AMLO rulebooks into plain English, with links to the primary sources so you can verify everything.
- Every claim linked to official sources
- Covers the 2025–2026 changes
- Written for humans, not lawyers
Last verified: 20 October 2026
The framework: who regulates what
The backbone is the Emergency Decree on Digital Asset Businesses B.E. 2561 (2018), which defines cryptocurrencies and digital tokens as regulated assets and requires every intermediary business — exchanges, brokers, dealers, custodians, advisors, fund managers — to hold a Ministry of Finance licence granted on the SEC's recommendation. The Bank of Thailand owns the payment-system and financial-stability angles, and AMLO sets anti-money-laundering standards — digital-asset operators count as "financial institutions" under the AML Act.
The major 2025 update (amendments effective 13 April 2025) added the power to block foreign platforms serving Thai users without licences and created serious liability for lending out bank or crypto accounts — the "mule account" offence. That's the moment enforcement grew real teeth.
The legality map
✓ Legal
- Buying, selling, holding, transferring crypto as an investment
- Trading on licensed platforms (Thai or foreign-licensed)
- Self-custody wallets
- Mining (ordinary taxes apply; electricity obtained lawfully)
- Receiving crypto as gifts/inheritance/compensation (taxable)
✗ Illegal / restricted
- Running an exchange/brokerage without a licence
- Operators facilitating crypto payments
- Renting or selling your bank/crypto account (mule accounts)
- Platforms on the blocking list
- Investment solicitation with guaranteed returns
"Invest, don't pay" — the most misunderstood rule
Since 1 April 2022, an SEC notification developed with the Bank of Thailand bars digital-asset businesses from providing or promoting crypto-payment services — from advertising "we accept BTC" to building payment wallets. The official rationale: protecting payment-system stability and consumers from volatility.
Read the fine print carefully, though: the rule binds operators, not individuals. A noodle shop voluntarily accepting bitcoin from a customer commits no crime — that's the space where the small Lightning scenes in Chiang Mai and Koh Phangan live. What can't exist is mainstream, intermediated crypto payments. The official outlet for visitors is TouristDigiPay: convert to baht first, pay by QR.
Blocked platforms: the June 2025 lesson
On 29 May 2025 the SEC named five unlicensed platforms for ISP-level blocking from 28 June 2025 — Bybit, OKX, CoinEx, XT.COM and 1000X — alongside criminal complaints for unlicensed operation. Users got about a month to withdraw. That episode is the standing answer to "can I just use an offshore exchange?": yes, until the day you can't, and then you're evacuating funds on a deadline.
Bybit, OKX, CoinEx and XT.COM have been blocked in Thailand since 28 June 2025.
KYC, AML, and the travel rule on the horizon
Every licensed platform runs full identity verification under AMLO standards — Thai ID with NDID or dip-chip for nationals, passport with liveness scan for foreigners — plus suspicious-transaction reporting. The next layer is the travel rule: a 2026 SEC notification requires operators to transmit sender and recipient information with transfers, effective 27 February 2027. Self-hosted wallets stay allowed, but platforms must verify you control the wallet — expect more questions around deposits and withdrawals from that date.
Your rights as a user
On a licensed venue you get client-asset segregation rules, an SEC complaints channel (hotline 1207) and dispute mechanisms. On an unlicensed offshore platform you get none of the above. Add the tax exemption through 2029 for licensed-venue trades, and the economics point the same direction as the law.
The latest regulatory timeline: second half of 2026
2026 is the year Thailand's framework visibly shifted from "containing risk" to "building new products inside the system". The key events in order:
- Apr 2026 — the KuCoin TH conclusion: after suspension and a failed capital raise, users got a hard withdrawal deadline of 22 April and the company returned its licence to the Ministry of Finance on 25 April — the first full demonstration of an orderly, in-system wind-down.
- Jul 2026 — BOT's draft digital-channel security notification: proposing to extend face-scan and anti-spoofing requirements to internet banking and to phase out SMS OTP (consultation closed Aug 2026 — not yet final as of our verification date).
- Aug 2026 — the travel rule, finalised: SEC Notification 9/2026 requires originator and beneficiary data on all transfers with no de-minimis threshold, record-keeping of at least 5 years, and verification of self-hosted wallet ownership — effective 27 Feb 2027.
- Oct 2026 — Bitcoin/Ether ETFs unlocked: eleven notifications effective 16 October allow SET-listed spot digital-asset ETFs, under passive management, ≥80% exposure to the underlying, and SEC-supervised custody.
One more thread to watch: the G-Token — the government's pilot digital investment token (฿5 billion, cabinet-approved mid-2025), designed to let retail citizens buy into state borrowing from a few hundred baht, tradable only on licensed platforms and explicitly barred from payment use. Whether the issuance has actually completed remains publicly unconfirmed as of October 2026 — we'll update when an official announcement lands. Every line of this timeline points the same way: Thailand is building a digital-asset ecosystem that is simultaneously more open and more auditable.
Legal FAQ
The one-line answer: is crypto legal in Thailand?
Yes. Buying, selling, holding and investing are fully legal. What’s restricted: using crypto as a means of payment, running a digital-asset business without a licence, and accessing the specific offshore platforms Thailand has blocked.
Is it legal for foreigners specifically?
Yes — the Digital Asset Decree doesn’t distinguish by nationality. Foreigners can open accounts on some Thai licensed exchanges with a passport, and self-custody is unrestricted. What differs in practice is service access (some venues require Thai NDID) and tax treatment by residence status.
Why are payments banned but TouristDigiPay allowed?
Because TouristDigiPay isn’t crypto payment — it’s "sell crypto for baht first, then pay in baht" through a regulated e-money wallet. Merchants always receive baht, which keeps the scheme inside the current rules.
Is mining legal?
Mining itself needs no digital-asset licence (it’s not an intermediary business), but general law applies: income tax on mined coins (outside the trading exemption), lawful electricity use, and factory/zoning rules at farm scale. Thai police periodically bust farms stealing power — that’s the usual legal trouble, not the mining per se.
Where do I verify a platform’s licence?
Two official channels: the SEC website (sec.or.th, Digital Asset section) and the "SEC Check First" app. The SEC also maintains an Investor Alert list of unlicensed operators. We keep a readable summary on our licensed exchange list.
Can I be prosecuted for using a blocked exchange via VPN?
The blocking orders and criminal complaints target the operators, not retail users, and we’re not aware of user prosecutions. But you’d be using a platform that can’t lawfully serve you, with no Thai investor protection, no tax exemption, and the practical risk of frozen access. The legal risk is low; the practical risk is the real cost.
Sources: Digital Asset Business Decree B.E. 2561 and 2025 amendments — Royal Gazette · payment ban notification (Mar 2022) — SEC/BOT · platform blocking announcement (May 2025) — SEC · travel rule notification (Aug 2026, effective Feb 2027) — SEC · KYC/CDD standards — AMLO. General information, not legal advice.