Thailand Targets Self-Custody as Crypto Firms Face 5-Year Data Storage Rule

By Abhinav Tewari // September 2, 2026 @ 05:20 PM Make AlphaWire Logo preferred on Google News

Share

21 Banks Back a Stablecoin as a 140-Firm Rival Group Moves First

Share

Points of Focus

  • Thailand now requires firms to verify ownership of self-hosted wallets by 2027.
  • The US tried a similar rule in 2020 and withdrew it in 2024.
  • The EU took years to define exactly how wallet verification should work.

 

 

Thailand’s Securities and Exchange Commission issued Travel Rule regulations requiring digital asset operators to verify ownership or control of self-hosted wallets. The requirement applies before transferring assets to or from those wallets and takes effect Feb. 27, 2027.

 

 

The broader rule also covers counterparty verification and five-year record retention. But the self-custody piece is the one with a genuinely unresolved global track record.

 

Why verifying self-hosted wallets is uniquely difficult

A self-hosted wallet has no institution behind it. No bank or exchange can confirm who actually controls it.

Financial Action Task Force (FATF) guidance has recommended this exact verification since 2019. Implementation has accelerated since then, with 83% of surveyed jurisdictions now having passed Travel Rule legislation, up from 73% a year earlier.

But passing a law and enforcing it aren’t the same milestone. FATF’s July 2026 report found that more than half of jurisdictions with Travel Rule legislation on the books haven’t yet conducted a single inspection or enforcement action.

The technical burden still falls entirely on exchanges and DA operators. They have to prove something about a wallet they don’t hold, using whatever verification method their local regulator accepts, assuming that regulator has started checking at all.

 

US tried this exact rule and abandoned it

The clearest cautionary precedent belongs to the United States. In Dec. 2020, the Treasury Department proposed requiring banks and money service businesses to collect counterparty information for unhosted wallet transfers above $3,000.

Industry pushback followed, specifically challenging the technical feasibility of verifying wallets a business doesn’t control. The Treasury formally withdrew the rule in Aug. 2024, without replacement.

That’s not a minor regulatory footnote. The world’s largest crypto market attempted a comparable requirement and abandoned it outright.

 

How the EU eventually made wallet verification work

The European Union’s experience shows a narrower path that did stick. Its Transfer of Funds Regulation requires wallet ownership verification only for self-hosted transfers above €1,000.

The European Parliament originally pushed for stricter measures. That push was scaled back after industry argued the toughest proposals would have been technically impossible for self-hosted wallet software providers to meet. The rule also excludes pure wallet-to-wallet transfers with no exchange on either end.

Even with a narrower scope, the European Banking Authority didn’t publish full operational guidance until July 2024. A transitional allowance for technical gaps didn’t expire until July 2025. Genuine enforcement only tightened within the past year.

The most common compliance method to emerge is the so-called Satoshi Test. It verifies wallet control by having a user send a tiny, precisely specified amount from the address in question.

 

What Thailand hasn’t specified about wallet verification

Thailand’s notification doesn’t specify a risk-based threshold. It also doesn’t include a scope exclusion comparable to the EU’s approach.

It also doesn’t name an accepted verification method, the way the UK’s Financial Conduct Authority does with cryptographic signatures and micro-deposits.

That gap is the genuinely open question. Thailand’s SEC hasn’t yet published the kind of detailed technical guidance the EU took until mid-2024 to finalize after passing a comparable rule.

 

What Thai crypto operators face before 2027

Thai digital asset operators now have roughly six months to build wallet verification systems. No major jurisdiction has fully solved this problem without either narrowing its scope or abandoning the attempt.

Thailand’s SEC has not yet published the technical implementation guidance that took the EU years to finalize after its rule passed. Until that guidance arrives, Thai operators are building toward a February 2027 deadline without the specific answer that determines what compliance actually requires.

Share

Default avatar

Abhinav Tewari

Abhinav is a researcher and author specializing in cryptocurrency, blockchain, and Web3, translating complex protocols into actionable insight for institutions and builders. Drawing on experience across digital marketing, management, and research, he focuses on tokenization, stablecoins and payments, DeFi, and real‑world assets, with rigorous analysis of protocol economics, security, governance, and layer‑2 scalability.

Table of content

Ad

Related Articles