Payment processors and gateways are essential to Thailand’s digital economy, but operating one is highly regulated. The legal framework is based on the Payment Systems Act B.E. 2560 (2017), supported by a series of Bank of Thailand (BOT) notifications and Ministry of Finance (MoF) regulations. Because these services involve managing customer funds, they are classified as financial services that require a Designated Payment Service License issued by the MoF, based on BOT recommendations.
This article updates previous summaries to include regulatory changes after 2018 and supervisory trends for 2023–25. It emphasizes important ownership limits, capital requirements, the licensing process, and current compliance duties for investors and fintech firms entering the Thai market.
Regulatory Developments Since the 2017 Act
Since the Payment Systems Act came into effect, the BOT has issued several follow-up notifications that refine licensing procedures, corporate governance, and IT-risk standards. Notable developments include:
- BOT Notification No. Sor Nor Chor. 16/2561, which addresses requirements for foreign branches and cross-border payment operators, with related provisions under Notification 17/2561 applying to licensing procedures.
- In 2023, the BOT introduced enhancements to AML-focused due diligence (See https://fosrlaw.com/2025/thailand-digital-assets-regulation-2025/), extending requirements to directors, shareholders, and transactional risk management, while strengthening IT security and outsourcing oversight within the fintech sector.
- In 2025, the BOT circulated draft guidelines on digital fraud prevention, proposing real-time fraud reporting and increased oversight of third-party integrations.
These updates raise standards for applicants, especially concerning financial stability, governance, and risk management systems.
Licensing Authority and Scope
Under the Payment Systems Act, the BOT oversees entities that accept or process payments on behalf of sellers or creditors, facilitate transactions, issue or manage e-money (See https://fosrlaw.com/2025/thailand-touristdigipay-e-wallet/), or operate clearing or settlement systems. All such services are covered by the Designated Payment Service License regime, issued by the Ministry of Finance after BOT review. This ensures that payment systems align with Thailand’s goals for financial stability, resilience, and AML compliance.
Foreign Ownership Restrictions
While the Payment Systems Act does not impose ownership restrictions, the Foreign Business Act (FBA) does. Payment processing is categorized as a service business under List 3(21). Companies with over 49% foreign ownership need to secure a Foreign Business License (FBL) from the Department of Business Development (DBD). Additionally, the BOT mandates at least one Thai national director living in Thailand.
Minimum Capitalization Requirements
| Type of Payment Service | Minimum Paid-Up Capital (THB) |
| Payment Facilitating / Receiving Payment on Behalf | 10 million |
| Merchant Acquiring | 50 million |
| E-Money Issuance | 100 million |
If multiple service categories are combined, the company must maintain the highest capital requirement. At least 75% of that capital must remain intact throughout operations.
Note: These thresholds are based on BOT notifications as of 2024. In practice, the BOT may impose higher capital for high-risk or high-volume services.
Application Process
The licensing process generally follows four stages:
- Preliminary Consultation – Meet the BOT’s Financial Technology Department to present the business model and governance structure.
- Document Submission – File a comprehensive Thai-language dossier per the BOT’s Required Document List.
- BOT Review – The BOT assesses suitability and forwards recommendations to the Ministry of Finance.
- Final Approval – The MoF issues the license, published in the Royal Gazette.
A typical processing period is 4–6 months once the application is deemed complete.
Ongoing Compliance Obligations
Licensees must sustain required capital, regularly report operations, adhere to AML/CFT and PDPA standards, and swiftly notify the BOT of key corporate or system changes. As of the 2023–25 updates, operators are also required to prepare for fraud-incident reporting and strengthened oversight of outsourcing.
Board of Investment (BOI) Promotion: Limited Applicability
Since payment processors handle customer funds, they are considered financial intermediaries and usually do not qualify for the BOI promotion (See https://fosrlaw.com/2025/securing-boi-privileges-in-thailand/).
However, software development or R&D entities within the same group may qualify under Activity 5.10 (Digital Business – Software, Platform, or Digital Services) (See https://fosrlaw.com/2025/thailand-boi-concessions-smes-new-tech-green-economy/) if their revenue comes from digital licensing rather than fund management.
Document Submission Checklist
| Category | Document / Content | What BOT Evaluates |
| Corporate & Ownership | Incorporation certificate, MoA, shareholder registry | Company objectives, ownership structure |
| Business & Strategy | 3–5 year plan, transaction flow diagrams | Feasibility, business model clarity |
| IT & Security | System architecture, cybersecurity plan, BCP | Data security, recovery, risk control |
| Compliance | AML/CFT procedures, KYC framework | Alignment with AMLO and FATF standards |
| Financials | Audited statements, capital proof | Liquidity and adequacy for risk profile |
Summary and Outlook
Operating a payment processor in Thailand remains a financial licensing project rather than just a technological one. Applicants need to prepare for dual oversight (BOT/MoF and DBD), significant capital, and strong governance. Upcoming BOT frameworks on digital fraud and transaction monitoring are expected to increase compliance requirements further.
Regulatory Note: Information is current as of October 2025. Applicants should verify the latest BOT notifications and MoF regulations before applying.
About the Authors
John P. Formichella is a founding partner of Formichella & Sritawat Attorneys at Law and a leading advisor in Thailand’s fintech, telecommunications, and digital infrastructure space. Over more than 25 years, he has guided foreign and Thai firms through complex licensing, regulatory, and compliance matters—from NBTC spectrum allocations to fintech and payment service licensing. His deep experience in fintech strategy and cross-border investment has earned recognition in regional legal rankings.
Naytiwut Jamallsawat is a partner at Formichella & Sritawat, focusing on technology-driven industries like fintech, digital payments, and platform regulation. With advanced legal training and practical experience advising payment gateway operators, e-wallet issuers, and new financial service entrants, he helps clients with BOT licensing, AML/CFT compliance, and adapting to changing digital regulations.
Formichella & Sritawat Attorneys at Law is a Bangkok-based boutique law firm specializing in telecommunications, data protection, fintech, and regulatory strategy. The firm supports both domestic and international clients in structuring, licensing, and compliance for Thailand’s digital economy.
The comments herein are for discussion and information purposes only and are not guaranteed to be up to date. Nothing herein should be or can be relied on as legal advice.
For any questions, you may contact Formichella & Sritawat at [email protected]
© 2025 Formichella & Sritawat Attorneys at Law