← Regulations / Thailand / Operating Models / DeFi frontend

DeFi protocol frontend in Thailand

Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.

Conditional AI-Generated · Unreviewed

DeFi frontend is conditionally permitted in Thailand with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Mandatory AML/KYC under the Anti-Money Laundering Act, supervised by AMLO — includes customer due diligence, ongoing transaction monitoring, and annual audits
  • Operators are treated as 'financial institutions' for AML purposes under Thai law
  • Geofencing / IP-blocking of US persons likely required to avoid extraterritorial reach of US securities/AML laws
  • If the frontend charges fees or exercises any discretion, it may constitute a Digital Asset Broker or Exchange under the Emergency Decree, triggering full SEC licensing AML requirements
  • Transaction monitoring and suspicious transaction reporting to AMLO required if licensed as a Digital Asset Business

Key Restrictions

  • Must be a Thai-registered legal entity with qualified directors/executives, compliance officer, and local management
  • If fee-taking or order-routing occurs, the operator likely requires a Digital Asset Operator License (Broker or Dealer category) from SEC Thailand under the Emergency Decree B.E. 2561
  • Crypto payments banned per joint SEC + BOT 2022 guidance — cannot facilitate use of crypto as payment for goods/services
  • Capital requirements apply if licensed: THB 25M (Broker) or THB 5M (Dealer) minimum paid-up capital, deposited in a Thai bank
  • Must consult with and comply with BOT-overseen risks including settlement, money laundering, cybersecurity, and consumer protection
  • IT/cybersecurity obligations under the Cybersecurity Act and PDPA apply

Key Risks

  • Significant regulatory ambiguity: a pure, non-custodial, non-fee-taking frontend to permissionless DeFi protocols may fall outside the Emergency Decree's definitions of exchange/broker/dealer, but SEC Thailand has not issued clear guidance on this
  • If SEC Thailand interprets the frontend as 'facilitating' digital asset trading, unlicensed operation risks enforcement action under the Emergency Decree (criminal penalties possible)
  • Fee-taking (e.g., routing fees, swap fees, frontend fees) increases risk of classification as a Digital Asset Broker or Exchange requiring a license
  • Tax complexity: if unlicensed, crypto gains via the frontend remain taxable for users under PIT (progressive 0%-35%), and 2025-2029 exemption only applies to transactions via licensed operators
  • No clear DeFi-specific sandbox or exemption exists in Thailand for permissionless protocol frontends

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 30% confidence

SEC Thailand — Digital asset operator licensing (5 subcategories), enforcement

licensing 20% confidence

Emergency Decree on Digital Asset Business B.E. 2561 (2018) — Digital asset exchange, broker, dealer, fund manager, advisory licensing

licensing 20% confidence

VASP: Digital Asset Operator License from SEC Thailand — 5 categories: Exchange (THB 50M), Broker (THB 25M), Dealer (THB 5M), Fund Manager (THB 5M), Advisory (THB 5M). ~15 licensed operators. Bitkub dominant exchange. ICO portal licensing separate. 6-12 months.

licensing 20% confidence

EXCHANGE: Digital Asset Exchange license — THB 50M (~$1.4M USD) minimum capital. Crypto payments banned (2022, SEC + BOT joint guidance). Utility tokens and investment tokens have different regulatory treatments.

licensing 60% confidence

Capital: Minimum paid-up capital deposited in a Thai bank, varying by license type and custody model (e.g., THB 100M for custodial exchanges).

licensing 60% confidence

AML/KYC: Mandatory under the Anti-Money Laundering Act (supervised by AMLO); requires internal procedures, customer due diligence, ongoing transaction monitoring, and annual audits. Operators are "financial institutions" for AML purposes.

licensing 60% confidence

Local Presence: Must be a Thai-registered legal entity with qualified directors/executives, a compliance officer, and local management.

licensing 60% confidence

Incorporate as a Thai entity and prepare documents: business plan, financials, IT security/risk policies, AML/KYC framework, team qualifications.

licensing 60% confidence

Submit full package to SEC for review (within 90 days).

licensing 60% confidence

SEC forwards recommendation to MOF, which approves/rejects within 60 days.

licensing 60% confidence

Total timeline: Several months; post-license, ongoing supervision by SEC.

licensing 60% confidence

Other: Accurate accounting, regular audits, IT/cybersecurity (per Cybersecurity Act and PDPA), risk management, business plan, professional liability insurance, and client fund protections.

licensing 20% confidence

Consult with the BOT before beginning operations

licensing 20% confidence

Comply with BOT-overseen risks including settlement, money laundering, cybersecurity, and consumer protection

licensing 60% confidence

Emergency Decree on Digital Asset Businesses B.E. 2561 (2018) (primary law): Unofficial English translation at SEC website - https://www.sec.or.th/ (search "Emergency Decree").

licensing 60% confidence

2025-2029 exemption: Ministerial Regulation No. 399 (B.E. 2568), published September 5, 2025, exempts PIT on qualifying capital gains via licensed operators under the 2018 Emergency Decree on Digital Asset Businesses; offshore or unlicensed trades remain taxable.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a DeFi protocol frontend serving Thai residents likely falls under SEC Thailand's Digital Asset Business licensing framework if it charges fees or exercises any discretion over transactions; a purely non-fee-taking, non-custodial informational frontend may operate in a gray area, but SEC guidance is lacking, and the safe approach requires a Thai entity, AML/KYC compliance, and a Digital Asset Operator License (Broker or Dealer).

Questions this verdict aims to answer

  • Is operating the frontend a regulated activity even if the protocol is decentralized?
  • What geofencing or KYC obligations apply?
  • Does fee-taking change classification?