Thailand Crypto License: SEC Digital Asset Business Licensing

Thailand operates a real, codified crypto licensing regime. A Thailand crypto license is a digital asset business licence granted under the Emergency Decree on Digital Asset Businesses B.E. 2561 (2018). The Securities and Exchange Commission of Thailand reviews and recommends each application, and the Minister of Finance grants the licence across six regulated business categories.

This guide sets out, from primary-grade sources, who issues the licence, the six categories, the Thai baht capital tiers, the eligibility tests, the 150-day statutory clock, the AML and custody obligations, the reported fees, and the 2025 TouristDigiPay sandbox. It corrects two errors common to older write-ups: the licence is granted by the Minister of Finance on the SEC's recommendation, not by the SEC or the Bank of Thailand alone, and there are six licence categories, not four.

Does Thailand have a crypto license? (the SEC digital asset regime in brief)

Yes. Thailand has had a comprehensive digital asset licensing framework since the Emergency Decree on Digital Asset Businesses B.E. 2561 (2018) took effect in May 2018. The decree created a licensing regime covering six distinct business categories, supervised by the Securities and Exchange Commission (SEC) of Thailand, with the Minister of Finance granting the actual licence. Operators must be Thai-incorporated companies meeting category-specific capital tiers.

Unlike jurisdictions that merely register virtual asset service providers, Thailand runs a full authorization process: an applicant incorporates a Thai company, submits a detailed application, undergoes SEC review, and receives a licence on the Minister of Finance's approval. Digital asset business operators are also classified as "financial institutions" under Thai anti-money-laundering law, which pulls them fully into the country's AML and CFT supervision by the Anti-Money Laundering Office (AMLO). For operators evaluating Asia, Thailand sits alongside neighbours such as the Singapore MAS DPT licence within the regional cluster of codified digital asset regimes.

What counts as a digital asset business under Thai law

The Emergency Decree defines two asset categories: cryptocurrencies and digital tokens, with digital tokens further split into investment tokens and utility tokens. A parallel initial coin offering (ICO) and digital-token offering regime, including ICO portals, sits under the same decree, so token issuance and digital asset intermediation share a single statutory home. Anyone carrying on one of the regulated activities, exchange, brokerage, dealing, fund management, advisory, or custodial wallet provision, falls within the licensing perimeter and must hold the corresponding licence before operating. This is consistent with the broader principle of licensing by activity and business model that defines most modern crypto regimes.

Who issues the Thailand digital asset license: SEC or the Ministry of Finance?

The SEC of Thailand reviews the application and makes a recommendation, and the Minister of Finance grants the licence on that recommendation. This is a two-step authority: SEC review and recommendation, followed by Ministry of Finance (MOF) approval. The Bank of Thailand's role sits on the payment side, such as e-money under the TouristDigiPay sandbox, and not in granting the digital asset licence itself.

Getting the authority chain right matters, because older descriptions of the regime wrongly implied the SEC or the Bank of Thailand granted the licence. In practice, the SEC is the gatekeeper and technical assessor, while the formal grant is a ministerial act. Separately, because operators are treated as financial institutions under AML law, the AMLO supervises their KYC, customer due diligence, and suspicious-transaction reporting once they are live.

The role of the SEC, the Minister of Finance, AMLO and the Bank of Thailand

Four bodies share the regulatory map. The SEC of Thailand supervises digital asset businesses and reviews licence applications. The Minister of Finance grants the licence on the SEC's recommendation. The AMLO supervises anti-money-laundering compliance, since operators are "financial institutions" under Thai AML law. The Bank of Thailand regulates the payment and e-money side, which is why it appears in the TouristDigiPay sandbox but never grants a digital asset licence.

The six Thailand digital asset license types

The Emergency Decree establishes six regulated digital asset business categories, not four. The full set is digital asset exchange, broker, dealer, fund manager, advisor, and custodial wallet provider. Each category carries its own minimum paid-up registered capital, scaled to whether the operator holds or controls customer assets ("asset-keeping") or does not ("non-asset-keeping"). The custodial wallet provider was added as a regulated category on 13 July 2022, which is why earlier four-category lists are now out of date.

Exchange, broker and dealer licences

These are the high-volume operator categories. A digital asset exchange matches buy and sell orders for digital assets; a broker executes orders on behalf of clients; a dealer trades on its own account. The exchange category carries the highest capital requirement because exchanges typically hold customer assets, while brokers and dealers sit at lower tiers. Detailed exchange-specific requirements, technology, market integrity, and client-asset rules, are covered in our guide to exchange licensing requirements, which apply in substance wherever an exchange is licensed.

Fund manager, advisor and custodial wallet provider licences

These three categories are the ones older summaries omitted. A digital asset fund manager manages portfolios of digital assets for clients; a digital asset advisor provides investment advice on digital assets. The digital asset custodial wallet provider became a regulated category on 13 July 2022, defined as a person providing services that manage customers' cryptographic keys or secret material for authorising digital asset transfers. Existing operators had to apply within a 90-day window, with a deadline around 11 October 2022. The exact minimum capital for the custodial wallet category is not confirmed from a primary source, and the often-cited THB 1,000,000 figure applies to lower-risk services generally.

Capital requirements for a Thai digital asset license

Minimum paid-up registered capital depends on both the licence category and whether the operator is asset-keeping. The figures below are denominated in Thai baht (THB) and are corroborated across Watson Farley & Williams and Belaws.

A standard asset-keeping exchange requires THB 50,000,000 paid-up, and its shareholders' equity must also be at least THB 50,000,000. Brokers scale from THB 25,000,000 down to THB 1,000,000, dealers sit at THB 5,000,000, and advisors at THB 1,000,000.

Asset-keeping vs non-asset-keeping capital tiers

Capital scales with custody risk. An operator that holds or controls customer assets, or can access and transfer them, must hold materially more capital than one that cannot. That is why a standard asset-keeping exchange needs THB 50,000,000, while a non-asset-keeping exchange needs THB 10,000,000, and a broker with no ability to access or transfer customer assets without approval needs THB 5,000,000 rather than THB 25,000,000. The logic mirrors prudential thinking across regulated finance: the more client value you can touch, the more loss-absorbing capital you must carry.

Ongoing net capital and shareholders' equity

Entry capital is only the starting point. Exchanges, brokers, dealers, fund managers and advisors must also maintain ongoing net capital as prescribed by SEC regulation, in addition to the paid-up registered capital. For the standard exchange, broker and dealer tiers, shareholders' equity must be at least equal to the paid-up capital figure (THB 50m, THB 25m and THB 5m respectively). Founders should budget for sustained capital adequacy, not just a one-time injection at incorporation.

Eligibility and fit-and-proper requirements

Eligibility is assessed against the entity, its capital, and the people behind it. The criteria are set by the SEC and the decree, and an applicant must clear all of them before the Minister of Finance grants the licence.

• The applicant must be a Thai-incorporated legal entity, either a Company Limited or a Public Company Limited.
• No financial difficulty: the SEC must have no reason to believe the applicant has financial problems, and the applicant must meet the minimum paid-up plus ongoing net capital.
• Fit-and-proper directors and executives, with no prohibited characteristics or disqualifications under the decree and SEC rules.
• Major shareholders holding more than 10% must also have no prohibited characteristics.
• Operational and IT readiness: adequate work systems, IT security, risk-management and internal-control systems must be in place.

Thai company incorporation requirement

There is no route to a Thailand crypto license without a Thai company. The applicant must be incorporated in Thailand as a Company Limited (Co., Ltd.) or a Public Company Limited (PLC), and that company must be capitalised to the tier required for the chosen licence category before applying. In practice, incorporation, capitalisation, and systems readiness are sequenced ahead of the application so that the SEC reviews a complete, fundable applicant rather than a shell.

Can foreign-owned companies apply?

Yes, foreign founders can pursue a Thailand crypto license through a Thai-incorporated entity that meets all SEC criteria. The licence attaches to the Thai company, not to a foreign parent directly. Current foreign-shareholding limits should be confirmed against the Foreign Business Act and any SEC-specific carve-outs, because the available sources did not specify a fixed foreign-ownership ceiling for digital asset operators. Treat foreign-ownership structuring as a point to verify with Thai counsel before committing to a holding structure.

How long does the Thailand crypto license process take?

The statutory clock is about 150 days from a complete application, split into roughly 90 days of SEC review plus 60 days for Minister of Finance approval. That 150-day figure is the sourced regulatory clock, and it begins only once the application is complete. Practical end-to-end timelines, including incorporation, systems build, and document preparation, run longer. Older guidance citing a flat "3 to 6 months" predates today's readiness-of-systems scrutiny, so the 150-day statutory clock is the more reliable anchor.

Step-by-step: incorporate, prepare, SEC review, MOF approval

The pipeline runs in two regulatory stages on top of preparatory work:

1. Incorporate a Thai company (Co., Ltd. or PLC) meeting the capital tier for the chosen licence.
2. Prepare the application: business plan, articles of association, shareholder and director details, AML/KYC manual, IT-security and risk-management systems, and proof of capital and financial standing.
3. SEC review, approximately 90 days.
4. Minister of Finance approval, approximately 60 days after the SEC's recommendation.
5. Total statutory processing of about 150 days from a complete application.

Regulatory clock (150 days) vs realistic end-to-end timeline

The 150-day clock measures only the regulatory phases (SEC review plus MOF approval) and assumes a complete, well-documented application. The realistic end-to-end timeline is longer because incorporation, capital funding, building the IT-security and risk-management stack, and drafting the AML/KYC manual all happen before the clock starts. Founders planning launch dates should treat 150 days as the regulatory minimum, not the total project duration, and build a buffer for systems readiness and any SEC follow-up requests.

Have questions about your specific situation? Book a free 15-minute discovery call with our licensed advisers, no commitment. Book a Call

AML, KYC and custody obligations

Compliance depth is central to the Thai regime. Because operators are "financial institutions" under Thai AML law, they carry a full anti-money-laundering programme from day one, and asset-keeping operators face additional custody security requirements. These obligations sit alongside the regional norm; see our broader guide to building an AML and KYC compliance program for the cross-jurisdiction baseline.

"Financial institution" status under Thai AML law

Classification as a "financial institution" under Thai anti-money-laundering law means digital asset operators must run mandatory KYC and customer due diligence (CDD), transaction monitoring, and suspicious-transaction reporting to the AMLO, the Anti-Money Laundering Office. This is not optional add-on compliance: it is a structural part of being licensed. Operators should design their onboarding, monitoring, and reporting workflows to AMLO expectations before applying, because the SEC reviews the AML/KYC manual as part of the application.

Custody security-measure requirements

The SEC has issued security-measure requirements for digital asset custody, covering matters such as cold and hot wallet ratios, cryptographic key management, and segregation of customer assets. Higher capital tiers apply to operators that can access or transfer customer assets, reinforcing the asset-keeping logic in the capital table. Any operator holding client crypto, an exchange, an asset-keeping broker, or a custodial wallet provider, must demonstrate these controls to the SEC as part of its operational and IT-readiness assessment.

License and annual fees

The fee figures below come from a single secondary source and are reported as indicative. Confirm them against the official SEC fee schedule before relying on them.

According to Belaws, the initial application fee is around THB 30,000 for any service type, with per-type licence fees and recurring annual fees layered on top. Because these come from one source, they should be treated as indicative and verified against the SEC's official fee notification. Note also that licence and annual fees are distinct from the paid-up capital requirement and from operating tax treatment; for tax, see our crypto tax by country overview rather than assuming Thai rates from a licensing page.

2025 developments: the TouristDigiPay sandbox

The standout freshness signal is TouristDigiPay, a national crypto-for-tourists sandbox unveiled on 18 August 2025 by Deputy Prime Minister and Finance Minister Pichai Chunhavajira. It runs for 18 months, extendable, before any potential nationwide expansion, and it builds on the earlier Phuket sandbox concept. Crucially, direct crypto payment remains prohibited: tourists convert digital assets to Thai baht through SEC-licensed operators, then load baht into e-money or e-wallets for QR-code payments.

Reported limits, from a single source and still to be confirmed, include an individual cap of THB 500,000 per month and a per-transaction limit of THB 100,000. Unverified small merchants are reportedly capped at THB 50,000 per month, with verified merchants permitted up to THB 500,000. Whether the sandbox is live for participating operators by mid-2026 should be confirmed against the official announcement.

How TouristDigiPay works and who oversees it

The mechanics keep crypto out of the payment leg. A tourist converts digital assets into Thai baht via an SEC-licensed digital asset operator or exchange, then spends that baht through e-money or e-wallet QR payments at merchants. Four bodies share oversight, per the Bangkok Post: the SEC supervises the digital asset platforms, the Bank of Thailand the e-payment layer, the AMLO the KYC and CDD, and the Ministry of Tourism and Sports the merchant onboarding. The design isolates digital asset risk to a licensed, monitored conversion gateway.

What it means for licensed operators

For SEC-licensed exchanges and operators, TouristDigiPay creates a defined role as the crypto-to-baht conversion gateway in a regulated tourist-payment flow, a concrete commercial use case that did not exist under the original regime. Separately, the Thai SEC has signalled an intention to broaden the digital asset framework toward crypto ETFs and futures. That direction is press-stage and directional only, so specifics should be verified before relying on them, but it points to a regime that is widening rather than retrenching.

How Crypto Valley Partners AG helps you get a Thai digital asset license

From our practice advising founders and operators on cross-border crypto licensing, the Thai regime rewards preparation: a Thai company correctly capitalised to the right tier, a complete application, and an AML/KYC and IT-security stack built to SEC expectations before submission. We help clients choose the correct licence category (exchange, broker, dealer, fund manager, advisor, or custodial wallet provider), structure the Thai entity and capital, prepare the application pack, and sequence the work so the 150-day regulatory clock starts on a complete file.