BANGKOK, THAILAND – From 14 February 2026, millions of people in Thailand using older smartphones will be locked out of mobile banking as lenders enforce stricter software requirements.
Valentine’s Day deadline for outdated phones
From 14 February 2026, mobile banking apps in Thailand were set to run only on devices using iOS 14 or Android 10 and above, according to the Thai Bankers’ Association (TBA). On that date, users with older operating systems would be excluded from digital financial services as banks moved to end support for outdated software. The decision followed what the association described as an escalating, invisible battle between banking systems and cybercriminals exploiting older devices.
Escalating cyber risks and vulnerable devices
Thailand had become one of the most digitalised countries in Southeast Asia, with almost the entire population using mobile banking for everyday transactions. At the same time, the country had turned into a hotspot for cybercrime, with banks recording thousands of attempted attacks on customer accounts every day. Methods such as phishing, malware infections and man-in-the-middle attacks increasingly targeted devices running outdated operating systems that no longer received current security patches.
Why iOS 14 and Android 10 became the cutoff
The TBA’s threshold was based on security advances introduced with iOS 14 and Android 10. Apple’s 2020 mobile system added stronger privacy features, including tighter app-tracking transparency, stricter access controls and enhanced encryption mechanisms. Google’s Android 10 brought measures such as scoped storage to limit file access by apps, MAC address randomisation to hinder tracking and a redesigned permissions model that gave users more control over their data.
Checking phones and hitting the update wall
Users were advised to check their operating system versions via the settings menus on Android and iOS devices, and to install any available updates. However, many popular phones could no longer be upgraded to the required versions, including all iPhones released before the iPhone 6s, which supported at most iOS 12 or 13. Numerous budget Android smartphones from 2018 and earlier, often shipped with Android 8 or 9 and never updated to Android 10, left owners facing the prospect of replacement instead of an upgrade.
Millions affected and social concerns
Experts estimated that between 3 and 5 million people in Thailand used smartphones that did not meet the new criteria, with older people and residents of rural areas particularly affected. Entry-level smartphones cost at least 3,000 to 5,000 baht, a burden that many lower-income users struggled to afford. Critics argued that requiring iOS 14 or Android 10 amounted to digital dispossession for poorer groups who tended to use devices until they wore out.
Limited alternatives beyond mobile banking
Those still using outdated phones on 14 February 2026 were expected to lose not just an app but what had become a central part of their digital lives, including transfers, balance checks and bill payments. Banks planned to keep offering internet banking via desktop computers, but only under stricter conditions such as up-to-date browsers, modern antivirus software and secure home networks. For many Thais who primarily went online via smartphones, these alternatives were seen as impractical.
Security versus inclusion: a growing rift
Consumer advocates condemned the banks’ ultimatum as excessive and socially unjust, warning that people unable to buy new devices would be cut off from the modern financial system. They called for transitional solutions such as simplified banking functions for older phones, higher ATM transaction limits or free basic smartphones for financially vulnerable customers. Banks rejected these proposals, arguing that every exception would create fresh security gaps and that a two-tier system with differing standards would be technically complex and ultimately more expensive.
Banks defend strict line on cyber protection
The TBA indicated there would be no room for negotiation, citing the scale of potential losses from cyberattacks exploiting old devices. Banks pointed to past cases in which customers had lost hundreds of thousands of baht because of security flaws on outdated smartphones.
“We are not only protecting individual customers, but the entire financial system. A massive hacker attack could jeopardise the stability of Thai banks.”
said a senior banking representative.
Part of a global tightening of standards
The Thai move formed part of a broader international shift towards tougher digital security requirements in the financial sector. Similar minimum standards had already been introduced in Singapore in 2024, and European banks were debating comparable steps. The European Central Bank had repeatedly warned of systemic risks from outdated banking technology, noting that a successful large-scale attack could wipe out billions within hours and inflict lasting damage on trust in the financial system.
Stronger operating systems and new banking tools
Security improvements in modern operating systems included features such as App Clips and privacy reports on iOS 14, which reduced the attack surface and increased transparency over data access. Android 10 added Google’s Project Mainline to push critical security updates directly via the Play Store, along with a standardised biometric prompt API to make biometric authentication more secure. Banks planned to build on these platforms with enhanced biometric methods, behavioural analytics for fraud detection and AI-based systems to flag suspicious transactions in real time.
No grace period as apps enforce the cutoff
From the cutoff date, banking apps were expected to tighten compatibility checks so that, on launch, the operating system would be verified and the app would close with an error message if requirements were not met. There would be no emergency logins or transitional access for users on older versions. The TBA urged customers to check their software versions, install updates where possible and, if necessary, budget for new devices well before the 2026 deadline.
A decisive date in Thailand’s digital banking shift
The 14 February 2026 deadline was framed as the start of a new chapter in Thailand’s banking history, promising greater security and confidence in digital services for some and exclusion and frustration for others. The debate over whether absolute security or digital participation should take precedence remained unresolved, highlighting deep income disparities in the country. Banks insisted that the digital transition would not wait, sending a clear message to users: update existing phones or upgrade to new ones before the deadline closes the digital doors.