BANGKOK – Thailand has implemented a new legal framework designed to accelerate the recovery of stolen funds and digital assets from victims of technology-driven crimes, signaling a tightening of the state’s grip on the financial infrastructure used by cyber-fraud syndicates.
The ministerial regulation, published in the Government Gazette on May 14, 2026, establishes a formalized procedural pipeline for the seizure and return of assets. By centralizing the recovery process under the Anti-Money Laundering Office (AMLO), the Thai government aims to bypass previous bureaucratic bottlenecks that often left victims unable to reclaim assets even after fraudulent accounts were identified. The regulation sits alongside Thailand’s core anti-money-laundering statute and builds on years of incremental rulemaking that has pushed banks and other intermediaries into a frontline role against financial crime.
The move comes as Southeast Asia grapples with a surge in transnational organized crime, specifically the proliferation of “call center scams” and “pig butchering” schemes. These operations frequently utilize a network of “mule accounts”-legitimate bank accounts rented or bought from citizens-to layer and move illicit funds across borders. By mandating a streamlined reporting and return mechanism, Thailand is attempting to dismantle the utility of these accounts and increase the financial and legal risk for operators, while signaling to regional partners that its financial system will be less hospitable to cross-border scam networks.
Financial Reporting and Institutional Obligations
Under the new regulation, the burden of surveillance and reporting is shifted heavily toward the private sector. When a deposit account, e-money account, or digital asset wallet is frozen due to suspected technology crime, the managing financial institution or business operator is now legally required to report detailed transaction data to AMLO through a designated electronic system.
To ensure precision in tracking the money trail, the regulation mandates the disclosure of specific data points:
- Account numbers for both senders and receivers
- Full names and identification or passport numbers
- Legal entity registration numbers for corporate accounts
- Phone numbers associated with the accounts
- Remaining balances and the specific amount of damage incurred
- Transaction reference numbers and internal bank case IDs
For Thai banks and payment platforms, this effectively codifies into law the kind of real-time reporting that has often been handled informally or under emergency powers. To reduce redundancy, the government has provided an incentive for platforms already integrated into the information-sharing system established under the existing emergency decree; such institutions are deemed to have satisfied these reporting obligations, easing compliance for early adopters while nudging laggards to connect.
The enforcement mechanism extends to the Royal Thai Police and the Department of Special Investigation (DSI). Upon seizing or freezing assets, these agencies must provide AMLO with comprehensive investigation reports, complaint evidence, and money-trail data to facilitate the eventual return of funds. In practice, this makes AMLO not only the clearinghouse for financial data but also the central coordinator between investigators, prosecutors, and private-sector intermediaries.
The Claims and Verification Process
The recovery process is triggered once the AMLO secretary-general approves a verified report of a technology crime under the new ministerial regulation and Thailand’s anti-money-laundering framework, overseen by the Anti-Money Laundering Office. To ensure transparency and legal due process, the identities of persons connected to the crime will be published in the Government Gazette.
This publication initiates a critical 90-day window. During this period, victims may file claims for their lost assets via AMLO’s electronic system, while individuals whose accounts have been frozen may file objections to prove their funds are unrelated to the criminal activity. The dual-track process is designed to balance victim restitution with protections for innocent account holders who may have been drawn into mule networks or had their credentials compromised.
To reach victims who may not monitor official gazettes, AMLO is required to publish details on electronic media and send registered mail. Under the regulation, such notifications are legally deemed received seven days after dispatch for domestic recipients and 15 days for those abroad, creating a clear legal starting point for subsequent appeals and challenges.
Claims submitted by victims must include:
- Comprehensive identity verification
- The exact amount of financial damage
- A designated refund channel
- Supporting evidence of the fraud
A designated transaction committee will review all claims. Parties dissatisfied with the committee’s decision maintain the right to challenge the ruling in civil court within 30 days, ensuring that decisions made within the administrative process remain subject to judicial oversight. Once a decision becomes final, AMLO coordinates with the police and financial institutions to lift freezes and transfer the funds, closing a loop that in the past could remain open for months or years.
Digital Assets and Systemic Integration
The explicit inclusion of digital asset wallets reflects the evolving nature of cybercrime in the region, where cryptocurrency is increasingly used to obfuscate the movement of funds. By integrating digital asset service providers into the same AMLO framework as traditional banks, Thailand is closing a significant loophole in its asset recovery strategy and aligning its practice more closely with global standards for virtual-asset regulation.
The regulation leverages existing Anti-Money Laundering (AML) infrastructure, effectively turning the AMLO transaction committee into a specialized clearinghouse for technology crime restitution. This systemic integration is intended to reduce the time between the freezing of an account and the restitution of funds, a shift that could influence how other jurisdictions in Southeast Asia redesign their own victim-compensation processes.
Financial institutions, e-money providers, and digital asset firms are now tasked with integrating their internal systems with AMLO’s reporting platform and developing workflows to execute fund transfers within a strict seven-day window following an order to lift a freeze. Compliance officers say this will require upgrades to case-management tools, know-your-customer workflows, and customer-notification processes, but also offers a clearer rulebook than the patchwork of directives that has governed scam-related freezes to date.
The regulation will officially take effect in mid-August 2026, 90 days after its initial publication, giving banks, payment companies, and digital-asset platforms a narrow runway to test their systems before the new rules begin to shape how Thailand’s financial sector responds to the next wave of cyber-enabled crime.
