AMLA Compliance for Thai Businesses: CDD, EDD, and Suspicious Transaction Reporting

TL;DR

Thailand's AML/CFT regime sits on two principal statutes: the Anti-Money Laundering Act B.E. 2542 (1999) (พระราชบัญญัติป้องกันและปราบปรามการฟอกเงิน พ.ศ. 2542) and the Counter-Terrorism Financing Act B.E. 2556 (2013) (พระราชบัญญัติป้องกันและปราบปรามการสนับสนุนทางการเงินแก่การก่อการร้ายและการแพร่ขยายอาวุธที่มีอานุภาพทำลายล้างสูง พ.ศ. 2556). Both are administered by the Anti-Money Laundering Office (สำนักงานป้องกันและปราบปรามการฟอกเงิน / AMLO). Financial institutions, professionals, and Designated Business Entities (DBEs) — including real-estate brokers, jewellery and gold traders, motor-vehicle dealers, life insurers, and certain accountants and lawyers — must conduct Customer Due Diligence (CDD) at the THB 700,000 transaction threshold, apply Enhanced Due Diligence (EDD) to Politically Exposed Persons (PEPs) and high-risk customers, identify beneficial owners under Section 21, file Suspicious Transaction Reports (STRs) within 7 days, file Cash Transaction Reports (CTRs) for cash ≥ THB 2,000,000 and property transactions ≥ THB 5,000,000, retain records for 5 years, and conduct staff training. Reports are filed via the AMLO ePAANG online system. Administrative fines, criminal liability for wilful breaches, and asset-seizure powers all apply.

The Twin Statutes

Sector regulators add layers: BOT for banks, SEC for capital markets, OIC for insurers, and DOPA's Land Department interfaces for real-estate transactions.

Who Is Covered: Financial Institutions, DBEs, and Professionals

Financial Institutions (Section 13)

• Banks and finance companies licensed by the BOT.
• Securities companies, asset management companies, and futures intermediaries supervised by the SEC.
• Life insurance companies (OIC).
• Money changers and money transfer operators.
• Cooperatives accepting deposits.

Designated Business Entities (DBEs) (Section 16)

• Real-estate brokers and developers (transactions ≥ THB 5M).
• Jewellery and gold traders.
• Motor vehicle dealers.
• Antique and art dealers.
• Casinos (only legal in specific contexts; the prospective casino-resort regime adds further scope).
• Personal-loan operators and digital-asset business operators.

Professional Gatekeepers (Section 16/1 and subsequent amendments)

• Lawyers performing client account, real-estate, or corporate-formation services.
• Accountants and auditors performing equivalent services.
• Trust and company service providers.

CDD: The THB 700,000 Threshold and Beyond

Customer Due Diligence is required at customer onboarding and at the transaction threshold of THB 700,000 (or equivalent in foreign currency). CDD components:

• Identification: National ID (Thai), passport (foreigner), corporate documents (juristic person).
• Verification: against an independent source; for documents, photograph and retention.
• Purpose and nature of relationship: stated and recorded.
• Beneficial-owner identification (Section 21): natural persons who ultimately own ≥25% or control the customer.
• Ongoing monitoring: transaction patterns reviewed against the customer profile.

EDD for High-Risk and PEPs

Enhanced Due Diligence applies where:

• Customer is a Politically Exposed Person (PEP) — current or former senior public official, judiciary, military, executive of state enterprise — or a family member or close associate.
• Customer is from a high-risk jurisdiction listed by FATF or AMLO.
• Customer profile is opaque (complex ownership, nominee patterns, shell-company structures).
• Transaction is unusually large, complex, or has no apparent economic or lawful purpose.

EDD adds: senior-management approval for the relationship, source-of-funds and source-of-wealth verification, enhanced ongoing monitoring, and shorter review cycles.

Reporting Obligations

Reports are filed through the AMLO ePAANG portal. Tipping off the customer about the report is a separate offence under the AMLA.

Record Keeping and Training

• 5-year retention of CDD documents, transaction records, and report filings from the end of the relationship or transaction.
• Compliance officer designated by the entity, with reporting line to senior management.
• Annual staff training covering AMLA / CTF Act updates, red flags, and reporting procedures.
• Independent audit of the AML programme (annual for higher-risk entities).

Penalties

AMLO Powers

AMLO investigators have powers including: account freezing for up to 90 days extendable; asset seizure and civil forfeiture under Section 49 onwards; cooperation with foreign FIUs through the Egmont Group; criminal referrals to the police and prosecutor; and supervisory enforcement against DBEs and FIs.

Common Mistakes

Avoid these traps:

• Onboarding without CDD because "the client is a friend". The regime is volume
• and threshold-based; relationship history does not waive CDD.
• No beneficial-owner identification on corporate customers. Section 21 requires it; ownership transparency aligns with the e-BOR regime at DBD.
• Treating STR as optional after a busy quarter. The 7-day clock starts at suspicion; backlogged filings are themselves a violation.
• Tipping off — "I have to file something, please explain". This is a separate criminal offence.
• Splitting transactions just under THB 700K or THB 2M. Structuring is itself an offence and a red flag for STR.
• No record of the CDD reasoning. AMLO inspectors want to see the analysis, not just the documents.
• Outdated PEP screening list. Watchlists must be refreshed continuously, not annually.

FAQs

1. Are SME real-estate agents really covered?

Yes — DBE status attaches to the activity, not the entity size. A small brokerage handling THB 5M+ transactions is a reporting entity.

2. Do lawyers really file STRs on clients?

Yes, where the lawyer is performing covered activities (client account, real-estate, corporate formation). Privilege does not exempt the AML filing obligation under current Thai practice; specific scope is set by regulation.

3. What is the cross-border cash declaration?

Carrying ≥ USD 20,000 equivalent across the Thai border requires Customs declaration; failure can lead to seizure and AMLA investigation.

4. How long does AMLO take to act on an STR?

Routine STRs go into intelligence triage; high-priority cases can trigger account freezes within days. Reporters do not receive an "investigation outcome" disclosure.

5. Do digital-asset operators have AML duties?

Yes — licensed under the Emergency Decree on Digital Asset Businesses B.E. 2561 (2018), they are also AMLA reporting entities with full CDD/STR/CTR obligations.

Related Reading

• PDPA Implementation: DPO, DPA, and 72-Hour Breach Notification
• Beneficial Ownership Reporting to the DBD
• Foreign Currency Transaction Reporting (BOT)
• Crypto and Digital Asset Regulations
• Nominee Company Prosecution and FBA Enforcement