Enhanced Due Diligence Thailand: What the New Illicit-Finance Framework Changes
Enhanced Due Diligence Thailand is entering a more intelligence-led phase as the Bank of Thailand and major financial-sector associations strengthen controls against fraud, money laundering and other illicit financial activity.
On 10 September 2026, the Bank of Thailand announced a new Framework for Safeguarding the Financial Sector from Illicit Activities, developed with 11 financial-sector bodies.
The framework calls for stronger KYC, customer due diligence and enhanced due diligence processes, closer scrutiny of high-risk cash transactions, improved detection of unusual activity, information sharing and a database of high-risk individuals linked to the Central Fraud Registry.
Read the Bank of Thailand framework
The practical change is significant.
Traditional due diligence often focuses heavily on the moment a customer opens an account or enters a commercial relationship.
The new direction is broader:
identify the customer, monitor behaviour, share intelligence, reassess the risk and restrict activity where necessary.
Table of Contents
- What Thailand’s New Framework Introduces
- Why Enhanced Due Diligence Thailand Is Becoming Continuous
- Behaviour Matters as Much as Identity
- High-Risk Cash and Gold Transactions Face Greater Scrutiny
- Information Sharing Changes the Risk Picture
- Automated Alerts Still Need Investigation
- What Companies Should Review
- How Compliancia Can Support Enhanced Due Diligence
What Thailand’s New Illicit-Finance Framework Introduces
The Bank of Thailand says the framework is intended to prevent the financial system from being misused for digital fraud, corruption and other illegal activity.
Participating institutions are expected to strengthen:
- Know Your Customer procedures
- Customer Due Diligence
- Enhanced Due Diligence
- Monitoring of high-risk cash transactions
- Detection of unusual transactions
- High-risk customer databases
- AML/CFT operational guidance
- Information sharing
- Merchant risk controls
The framework also links high-risk intelligence with the Central Fraud Registry, giving financial institutions a broader information base when assessing customers and transactions.
Independent reporting by The Nation described the initiative as a coordinated effort to block illicit money flows and accelerate action against suspicious accounts and transactions.
Why Enhanced Due Diligence Thailand Is Becoming Continuous
The most important shift is that Enhanced Due Diligence Thailand is moving beyond static onboarding.
A customer may appear low risk when an account is opened.
Their behaviour six months later may tell a different story.
The Bank of Thailand’s own earlier consultation on customer-risk management described a model in which financial institutions continuously monitor customer transactions and apply enhanced due diligence where abnormal activity is identified.
This changes the practical meaning of due diligence.
The question is no longer only:
Who is this customer?
It also becomes:
Does their financial behaviour still make sense?
That distinction matters for banks, payment providers, digital-asset businesses and other financial-sector participants.
1. Enhanced Due Diligence Thailand Must Explain Behaviour
Automated systems are good at detecting anomalies.
They are less good at explaining them.
For example, a monitoring system may identify:
- sudden large cash deposits
- unusual withdrawals
- rapid movement between accounts
- transactions inconsistent with declared income
- payments involving high-risk counterparties
- unexpected digital-asset activity
The alert is only the beginning.
A proper investigation may need to determine:
- where the money came from
- why the transaction occurred
- who actually controls the funds
- whether the activity matches the customer’s business
- whether related companies or individuals are involved
This is where Enhanced Due Diligence Thailand increasingly overlaps with investigative intelligence.
Compliancia’s company due diligence services examine ownership, directors, litigation, business history and hidden relationships when database checks alone do not provide enough context.
2. High-Risk Cash Transactions Will Receive Greater Attention
Cash remains difficult to trace once it leaves the formal financial system.
The Bank of Thailand therefore intends to strengthen controls over high-value cash activity.
Its implementation material describes additional rules covering cash deposits or banknote exchanges of THB 5 million or more.
The central bank’s broader implementation page also describes controls requiring verification of purpose and supporting documentation for certain high-value cash withdrawals.
This does not mean every THB 5 million transaction automatically becomes suspicious.
The relevant question is whether the activity is reasonable in light of the customer’s known profile.
An established cash-intensive business may have a legitimate explanation.
A newly created company with little visible activity may require much deeper scrutiny.
3. Gold and Other Hard-to-Trace Assets Are Part of the Same Risk Picture
The framework also focuses on the conversion of potentially illicit funds into assets that are harder to trace.
The Bank of Thailand specifically identifies:
- cash
- gold
- digital assets
as areas requiring additional controls.
Its framework implementation page describes prospective restrictions on cash-settled gold transactions exceeding THB 10 million.
This is important because financial investigations increasingly need to follow value rather than one specific payment method.
Illicit proceeds may move from:
bank account → cash → gold → digital assets → another financial account
The investigation therefore becomes a question of understanding the entire transaction lifecycle.
Important implementation caveat
The September 10 announcement combines existing commitments with additional or forthcoming measures.
The THB 5 million and THB 10 million controls should therefore not be described as though every threshold became an immediate blanket legal prohibition on September 10.
The Bank of Thailand itself presents several of these measures as future or additional regulatory steps.
That distinction is important for accurate reporting.
4. Information Sharing Changes Customer Risk
One of the strongest elements of the new framework is the emphasis on connected intelligence.
A financial institution may understand only the activity occurring within its own systems.
But fraud and money laundering frequently move across:
- multiple banks
- payment providers
- merchant accounts
- digital wallets
- securities businesses
- other financial channels
A shared high-risk database can therefore reveal patterns that one institution might miss.
The Bank of Thailand says participating institutions will develop a database of high-risk individuals linked to the Central Fraud Registry and improve information sharing around suspicious activity.
This creates a more dynamic risk model.
A customer considered acceptable today may require reassessment tomorrow if credible new information emerges elsewhere in the financial system.
5. Corporate Customers Require More Than Registration Checks
Corporate accounts create another challenge.
A company may be legally registered while still being used for purposes that differ from its stated business.
The Bank of Thailand already describes stronger corporate KYC and CDD expectations for high-risk customers.
These can include additional information concerning:
- business activity
- source of income
- source of assets
- transaction purpose
- evidence relating to business premises
For higher-risk corporate customers, investigators may also need to examine:
Ultimate beneficial ownership
Who really controls the company?
Related entities
Are several companies connected through common directors, shareholders or addresses?
Operating reality
Does the business actually function as represented?
Transaction behaviour
Does the movement of money match the company’s stated operations?
Compliancia’s investigation services include UBO identification, nominee detection, corporate mapping and business-partner investigations.
Automated Screening Still Needs Human Investigation
The framework rightly places greater emphasis on technology.
But technology identifies patterns.
It does not always explain them.
A customer may generate an unusual-transaction alert for a legitimate reason.
Another may remain below automated thresholds while participating in a coordinated network.
That is why the most effective risk process combines:
screening + intelligence + investigation
rather than relying on screening alone.
An investigator may need to connect:
- corporate records
- shareholder relationships
- transaction behaviour
- litigation history
- adverse media
- source intelligence
- physical business activity
This creates a fuller picture than any one database can provide.
An Investigative Observation: The Real Shift Is From Customer Identification to Customer Explanation
The most interesting part of Thailand’s framework is not any single transaction threshold.
It is the underlying intelligence model.
Traditional KYC asks:
Who are you?
Modern enhanced due diligence increasingly asks:
Can we explain who you are, who you are connected to and why your behaviour makes sense?
That is a much higher standard.
It also means financial institutions need processes capable of reassessing customers when new information appears.
The risk lifecycle increasingly becomes:
Identify
Establish the customer and ownership structure.
Monitor
Understand behavioural and transaction patterns.
Share
Combine internal information with wider fraud intelligence.
Reassess
Increase or reduce risk as new information emerges.
Restrict
Escalate or limit activity when risks cannot be adequately explained.
That is the real significance of Thailand’s new framework.
What Companies Should Review Now
Financial institutions and businesses exposed to higher-risk customers should consider whether their current due-diligence process can answer several practical questions.
Can we identify the ultimate beneficial owner?
A corporate registration alone may not be enough.
Can we explain unusual transactions?
Alerts should lead to structured fact-finding.
Can we verify source of funds?
Documentation should make commercial sense.
Do we monitor customers after onboarding?
Risk changes over time.
Can we connect adverse information to related entities?
One customer may sit within a much larger network.
Can we escalate beyond automated screening?
Complex cases require investigative judgement.
How Compliancia Supports Enhanced Due Diligence Thailand
Compliancia supports businesses, financial institutions and legal teams with enhanced due diligence and investigative intelligence across Southeast Asia.
Relevant capabilities include:
- enhanced corporate due diligence
- beneficial-ownership analysis
- high-risk customer reviews
- counterparty investigations
- adverse-media research
- corporate mapping
- source enquiries
- fraud investigations
- asset discovery
- transaction-related intelligence
Our company due diligence services can help clients understand ownership, management, litigation and hidden corporate relationships.
For complex matters requiring deeper fact-finding, our investigation team can conduct source enquiries, corporate intelligence and on-the-ground verification.
Where suspicious activity raises questions around assets or recoverability, Compliancia also provides asset discovery services.
Enhanced Due Diligence Thailand Is Moving Beyond the Checklist
Thailand’s new financial-sector framework signals a broader change in how illicit-finance risk is managed.
The future is not simply stronger onboarding.
It is continuous evaluation.
Customers will increasingly be assessed against their ownership, behaviour, transaction patterns, related parties and emerging intelligence.
For compliance teams, the challenge will be distinguishing genuinely suspicious activity from behaviour that can be reasonably explained.
That requires more than automated alerts.
It requires investigation.
Identify the customer.
Understand the behaviour.
Connect the network.
Reassess when the facts change.
That is where Enhanced Due Diligence Thailand is heading.
Need Support With Enhanced Due Diligence or High-Risk Customer Reviews?
Compliancia supports companies, financial institutions and legal counsel with enhanced due diligence, corporate intelligence and investigative enquiries throughout Thailand and Southeast Asia.
Contact wecare@compliancia.com for a confidential discussion.