Thailand’s Enhanced KYC/CDD Rules Take Effect for Capital Market Firms

Thailand’s Securities and Exchange Commission (SEC) has brought enhanced Know Your Customer and Customer Due Diligence requirements into effect from 16 August 2026, tightening controls intended to prevent the capital market from being used for money laundering and technology-related crime.

The guidelines were announced by the SEC on 29 May and apply to capital market business operators. They strengthen checks from the account-opening stage and require firms to identify the ultimate beneficial owner (UBO), particularly where the customer is a legal entity, and assess whether the customer’s source of funds is reasonable and consistent with the information provided.

UBO and source-of-funds checks move to the foreground

Under the SEC’s guidance, customer identification cannot stop at the immediate shareholder or named account holder. Firms are expected to establish the natural person who ultimately owns or controls a corporate customer and to examine the legitimacy and reasonableness of the funds used for investment or other transactions.

The measures also require ongoing monitoring of customer transaction behaviour on a risk-sensitive basis. Where activity appears inconsistent with a customer’s profile, financial capacity or expected behaviour, the firm must conduct enhanced CDD. If the circumstances remain suspicious, the information must be considered for submission as a Suspicious Transaction Report to Thailand’s Anti-Money Laundering Office (AMLO) under the applicable reporting criteria.

Same-name account controls target mule-account risks

The SEC has also prescribed controls over incoming and outgoing account transactions to create a clearer audit trail. Deposits and transfers are expected to pass through accounts bearing the same name as the customer, a measure designed to reduce the use of third-party and mule accounts to move illicit funds through securities and investment channels.

The framework was developed with input from AMLO, the Central Investigation Bureau and capital market business operators. The SEC said the objective is to make customer verification, transaction scrutiny and suspicious-activity detection more effective as financial behaviour becomes increasingly complex and technology-enabled crime creates new channels for illicit funds.

The 16 August implementation date marks the point at which these requirements move from announced supervisory guidance into the operational compliance framework for affected firms. For regulated businesses, the practical impact is broader than onboarding: UBO identification, source-of-funds assessment, behavioural monitoring, enhanced due diligence and STR decision-making now need to operate as a connected control process rather than separate checks.