Anonymity-enhancing assets or unattributed transfers are barred outright, or barred for regulated firms.
What Thailand actually says
Thailand is the jurisdiction most often cited as having banned privacy coins, and the claim does not survive reading the instrument. Notification No. Kor Thor. 18/2564 prohibits four categories (meme tokens, fan tokens, NFTs and exchange-issued tokens) and stops there. Anonymity is never mentioned. The exclusion is real but it works through market architecture instead: exchanges may list only what the SEC has approved, the approved list is short, and anonymity-enhancing assets simply never reach it. Combined with the ban on using digital assets for payment since April 2022 and the 2025 extension of the perimeter to offshore operators targeting Thai users, the practical result is closed access rather than illegal holding. The distinction matters, and almost every secondary source erases it.
The instruments that matter
- Notification No. Kor Thor. 18/2564, effective 11 June 2021
- bars exchanges from listing meme tokens, fan tokens, NFTs and exchange-issued tokens; those four categories are the complete scope, and privacy coins are not among them
- Positive listing approval
- exchanges may list only assets the SEC accepts, which has been a short list
- Digital assets barred as a means of payment from 1 April 2022
- Emergency Decree amendments, 13 April 2025
- extended obligations to offshore operators targeting Thai users, with criminal penalties and platform blocking
What this means for confidential transactions
Bubble is built for exactly this shape of obligation: amounts and balances live on chain as ciphertexts, computation happens without decryption, and the only disclosure path is an on-chain access list through which an authorized party - an auditor, a supervisor, a counterparty - can request scoped decryption. That is confidentiality from the public, not from the regulator.
Related entries
- TaiwanAsia-Pacific · The travel rule that has never come into force
- GeorgiaEurope · The one place where privacy oversight went backwards
- IndiaAsia-Pacific · No crypto statute, regulated through AML and tax
- JapanAsia-Pacific · Untraceability barred by self-regulation, now moving into ordinance
- South KoreaAsia-Pacific · Identity-maximalist, and exporting the model
- AustraliaAsia-Pacific · Travel rule without a threshold, no coin ban
Compliant by default.
See how selective disclosure satisfies a supervisor without publishing your book to the world.