Thailand AMLA Compliance: CDD, EDD, and Suspicious Transaction Reporting

TL;DR

Thailand's Anti-Money Laundering Act B.E. 2542 (1999) (พระราชบัญญัติป้องกันและปราบปรามการฟอกเงิน) — administered by the Anti-Money Laundering Office (AMLO) — requires reporting entities to perform Customer Due Diligence (CDD), escalate to Enhanced Due Diligence (EDD) for higher-risk customers, and file Suspicious Transaction Reports (STRs) and threshold-based Cash Transaction Reports (CTRs). Penalties for non-compliance reach THB 1 million in administrative fines per violation plus criminal liability.

Who Are Reporting Entities

Customer Due Diligence (CDD) Tiers

EDD Triggers

• Politically Exposed Persons (PEPs) — domestic, foreign, and international organisation PEPs.
• High-risk countries per FATF lists.
• Customer complexity: opaque ownership structures, shell-company indicators.
• Transaction risk: unusual volumes, cross-border, inconsistent with profile.
• Non-face-to-face onboarding in higher-risk contexts.

Suspicious Transaction Reports (STRs)

An STR must be filed when the entity has reasonable grounds to suspect a transaction relates to predicate offences under AMLA Section 3 (drug offences, corruption, fraud, terrorist financing, etc.). Filing:

• To AMLO via the electronic portal.
• Within the timeframe specified by AMLO regulations (typically prompt — days after detection).
• Maintain tipping-off prohibition under Section 26 — do not inform the customer.

Cash Transaction Reports (CTRs)

AMLO Supervision

AMLO conducts on-site inspections, off-site reviews, and thematic reviews. Reporting entities must:

• Designate a Compliance Officer.
• Maintain records for 5 years minimum.
• Conduct annual risk assessment.
• Train staff annually.

Penalties

• Administrative fines up to THB 1 million per violation (Section 62).
• Criminal penalties for failure to file STR with knowledge: imprisonment up to 2 years and/or fines.
• Tipping-off violations: imprisonment up to 1 year and/or fines.
• Predicate offence-related: full AMLA criminal exposure including asset seizure.

Common Mistakes

Avoid these traps:

• Generic CDD policies not tailored to actual customer base risk profile.
• Treating PEP screening as one-time onboarding rather than ongoing.
• Failing to record CDD decisions and rationale.
• Bundling STRs in delayed batches — each suspicious transaction warrants timely individual analysis.
• Inadequate training — frontline staff missing red flags.
• Tipping-off through "polite explanations" to customers — strict liability.

FAQs

1. Does AMLA apply to my SME?

Depends on the sector. Most non-financial SMEs are not reporting entities, but cash-intensive businesses (real estate, gold, jewellery) may be. Confirm with AMLO's reporting entity registration.

2. What if the customer refuses to provide CDD info?The entity must decline the transaction or terminate the relationship and assess STR filing.

3. Can lawyers report on clients?Lawyers are reporting entities for specific transactions (real estate, company formation, asset management) under Notification of the Council of Ministers 2563. Privileged communications are protected.

4. Are crypto exchanges supervised?

Yes — digital asset operators registered with SEC are reporting entities. Additional crypto-specific guidance from AMLO and SEC.

5. What is the difference between AMLO and the Office of the Attorney General?AMLO supervises and investigates money laundering; the OAG prosecutes criminal cases. Civil asset forfeiture is initiated by AMLO and decided by the Civil Court.

Related Reading

• Anti-Money Laundering Law Hub
• Beneficial Ownership Reporting