Thailand’s SEC Imposes Strict KYC Rules on P2P Crypto Transfers and Wallets

Thailand just got serious about crypto oversight. The country’s Securities and Exchange Commission rolled out strict new rules targeting peer-to-peer transfers and self-hosted wallets — two corners of the market where anonymity has long been the norm and regulators have struggled to get a grip.

The core requirement is pretty straightforward, even if the execution won’t be: crypto exchanges operating in Thailand must now verify the identities of both the sender and the receiver in any P2P transaction. Not just one side. Both. That’s a meaningful shift from how most platforms have handled things, where the focus was almost entirely on the person initiating the transaction. Self-hosted wallet users face similar scrutiny — operators are now required to run identity checks on anyone using a wallet they control privately, outside of an exchange’s custody. The SEC frames all of this as alignment with Financial Action Task Force standards on anti-money laundering and counter-terrorism financing, the same international benchmarks that have been reshaping crypto compliance rules across Asia and beyond.

What Exchanges Actually Have to Do

Compliance here isn’t a checkbox exercise. Exchanges will need to overhaul their know-your-customer systems, and that’s not a small lift. Most platforms built their P2P infrastructure with speed and low friction in mind. Adding mandatory identity checks on both ends of a transaction changes the architecture of the whole thing. Transaction speeds will probably slow down. Costs will likely go up — both for the platforms absorbing the compliance overhead and, eventually, for users who absorb fee increases down the line.

Industry stakeholders have already flagged concerns. The technical adjustments alone are significant, and the operational costs of building out more robust KYC pipelines are real. Smaller exchanges, in particular, may find it harder to absorb those costs than larger, better-capitalized competitors. It’s not clear yet whether the SEC has any plans to offer a phased compliance timeline or technical guidance to help platforms get there. No details on that front have come out.

And the penalty question is still wide open. The SEC hasn’t disclosed what non-compliance actually looks like in practice — no fine structure, no license revocation framework, nothing concrete. That ambiguity is making some market participants uneasy. They know the rules are coming. They don’t know what happens if they’re late.

Why P2P and Self-Hosted Wallets

It’s worth asking why the SEC zeroed in on these two areas specifically. P2P transfers and self-hosted wallets have historically been the hardest parts of the crypto ecosystem to monitor. When someone moves funds directly between wallets without going through a centralized exchange, there’s no intermediary collecting data, no compliance team running checks, no paper trail in the traditional sense. Law enforcement agencies globally have pointed to these channels as preferred routes for illicit fund movement — not because everyone using them is a bad actor, but because the anonymity is structurally built in.

See also: Thailands New Travel Rule Forces Crypto Operators to Verify Self-Custodial Wallets

Thailand’s crypto market has grown fast. Faster than the regulatory infrastructure around it, probably. So the SEC is basically playing catch-up, trying to bring the informal edges of the market into the same accountability framework that governs traditional finance. That’s a hard thing to do without creating friction for ordinary users who have legitimate reasons to use P2P transfers or manage their own wallets.

The FATF alignment angle matters here too. Countries that don’t meet FATF standards risk being placed on watchlists that can complicate their access to international banking and financial systems. Thailand has clear incentives to get this right, beyond just domestic crypto market integrity.

Market Watching Closely

The broader crypto industry across Southeast Asia is watching Thailand’s move carefully. Regulatory approaches to P2P and self-hosted wallets vary wildly across the region — some jurisdictions barely touch them, others have tried and pulled back after pushback from the industry. Thailand going this far, and tying it explicitly to FATF compliance, could push neighboring markets to revisit their own frameworks.

For exchanges already operating in Thailand, the immediate priority is figuring out what “promptly” actually means in practice. The SEC used that word. It’s vague. Compliance teams are probably not sleeping great right now.

See also: Grayscale, a16z, and CCI Demand SEC Reconsider Broad ETF Rules Now

Users, meanwhile, are left wondering how much slower and more expensive their P2P transactions will get once the new checks are fully operational. Some may shift behavior. Some may move to platforms outside Thai jurisdiction. That’s a real risk the SEC’s framework will need to account for — tighter rules that push activity offshore don’t actually solve the problem they’re designed to address.

No penalty details. No compliance timeline specifics. Just the rules, and the expectation that exchanges figure it out.