Personal Data Protection Act (PDPA)
Effective June 2022; PDPC Thailand is supervisory authority.
Personal Data Protection Committee (Thailand)
East Asia & Pacific · GDP rank #27
TH · THB @ 0.0306/USD
Tab 06
Headline fraud totals and typology splits, the rollout of EMV chip, tokenisation, 3DS and biometrics, and the controlling data-protection and payments statutes.
APP fraud continues to surge on PromptPay rails; BOT mandated biometric on mobile-banking transfers > THB 50,000 from January 2024. The Mule Account Crackdown closed ~280,000 suspect accounts in H2 2024.
Reported payment fraud · 2024
Card-not-present share
3DS adoption on CNP
Trend lines
Where a full typology breakdown is not published, the authorities typically disclose year-on-year growth in specific scam categories. Authorised push-payment (APP) scams and account-takeover fraud are the canonical “wallet era” concerns in most markets.
Controlling regulation
Effective June 2022; PDPC Thailand is supervisory authority.
Personal Data Protection Committee (Thailand)
Empowers banks to freeze suspected mule accounts; criminalises account rental to fraudsters.
Royal Gazette of Thailand / Bank of Thailand