BANGKOK, THAILAND – New mobile banking transfer limits in Thailand have disrupted everyday payments while aiming to stem a surge in online fraud.
Confusion as new limits hit everyday users
At a Bangkok Bank branch in Pattaya, 67‑year‑old German pensioner Peter Schmidt found his regular rent transfer of 80,000 baht blocked when his smartphone reported that his limit had been exceeded. Since August 2025, new rules have capped certain mobile transfers at 50,000 baht per day for risk‑sensitive users, causing widespread uncertainty among bank customers. The measures, introduced by the Bank of Thailand, were intended to reorganise digital payments rather than impose a blanket cap on all account holders.
Fraud surge prompts three-tier risk system
The reform followed a sharp rise in fraud cases: in June 2025 alone, the central bank recorded 24,500 incidents with total losses of 2.8 billion baht, averaging 114,000 baht per victim, and a single case reaching 4.9 million baht. To respond, the Bank of Thailand classified mobile banking users into three groups: suspected fraudsters, normal users and particularly vulnerable customers, including everyone under 15 and over 65. Daily transfer ceilings now differ by risk level, with under 50,000 baht, up to 200,000 baht and above 200,000 baht per day set as the three main tiers.
Seniors and foreigners most affected
Deputy governor Daranee Saeju highlighted that transfers above 50,000 baht accounted for only 22 percent of fraud cases but 76 percent of total losses. In the first half of 2025, authorities registered 78,468 fraud cases involving minors and 416,453 cases among people over 65, with victims typically reacting only after 19 to 25 hours while criminals needed just three minutes to withdraw half the stolen funds. Many older residents and foreign customers reported difficulty maintaining routine payments as banks placed them in high‑risk categories subject to tighter limits and additional checks.
Biometric checks and device restrictions
The new framework went beyond simple caps, requiring face recognition for any transaction above 50,000 baht and for customers seeking higher daily limits. Devices with root access or jailbreaking were excluded entirely, while apps showing suspicious behaviour were blocked. On operating systems deemed risky, a maximum daily limit of only 5,000 baht applied, sharply constraining higher‑value mobile payments.
How Bangkok Bank implemented the rules
As Thailand’s largest lender, Bangkok Bank applied the central bank’s guidance with its own thresholds. For international transfers via mobile banking, PromptPay International and Western Union, it set a combined cap of 2,000,000 baht per transaction and per day, while transfers between a customer’s own Bangkok Bank accounts and credit card payments were not covered by these mobile limits. The daily cap, however, applied to all other transfers, bill payments, top‑ups and cashless withdrawals through the mobile app, leading many users to reassess how they handled regular obligations.
Panic and clarification in August 2025
On 19 August 2025, the announcement triggered panic as many customers believed every user would be limited to 50,000 baht per day. Two days later, the Bank of Thailand used Facebook to clarify that most customers would receive limits aligned with their transaction history and could continue to transfer larger sums. Only three groups were subject to the strict 50,000‑baht ceiling: potential fraudsters, vulnerable users under 15 and over 65, and new customers without any verified transaction record.
Options for customers needing higher limits
Customers were allowed to request higher limits directly via the mobile app, by telephone with customer service, or in person at a branch. Banks examined each application individually, applying Know‑Your‑Customer rules and rewarding a strong financial history with better chances of approval. Applications from vulnerable groups, including seniors, were reviewed particularly carefully, often requiring additional documentation.
International transfers and foreign currency accounts
For cross‑border payments, Bangkok Bank maintained a separate daily limit of 2,000,000 baht during working hours from 8:30 a.m. to 5:00 p.m. Fees varied by currency, with standard international transfers costing 300 baht if only Bangkok Bank’s charges applied and rising to 1,050 baht when the sender covered the recipient bank’s fees, while transfers in Japanese yen incurred a 2,400‑baht charge. Foreign residents could also open unrestricted foreign currency accounts at authorised banks; Bangkok Bank allowed transfers from such accounts in 14 currencies up to 3 million baht per transaction without a daily cap, although movements from a foreign currency account to a baht account were limited to 1,200,000 baht per day.
Shift from internet banking to mobile apps
From 7 July 2025, Bangkok Bank stopped accepting new registrations for its Bualuang iBanking and internet banking services, while existing users could continue to log in. The bank pushed customers towards its mobile app or branch visits, a move that increased pressure on those uncomfortable with smartphones. For older clients who preferred desktop access, the change added another layer of difficulty on top of the stricter limits and biometric requirements.
Criticism, international comparisons and inclusion
Security specialists viewed the tougher controls as a necessary response to large‑scale fraud but warned that honest clients were bearing much of the burden. Consumer advocates accused the Bank of Thailand of poor communication, arguing that clearer and earlier information could have avoided the August panic. Comparisons with Europe and Singapore showed that while other jurisdictions also demanded strong authentication, they typically relied more on individual risk assessments and user warnings than on blanket age‑based restrictions.
Face recognition and data protection concerns
Mandatory face recognition for higher‑value transfers raised questions about privacy in a country without a comprehensive data protection law comparable to the EU’s GDPR. Experts noted that biometric authentication significantly increased transaction security but also created sensitive databases held by banks. These repositories, they warned, could themselves become attractive targets if not protected with the highest security standards.
Practical impact and long-term outlook
In practice, customers like Peter Schmidt adapted by visiting branches monthly to pay rent or by attempting to raise their limits, often at the cost of extra time and paperwork. Others turned to alternative routes such as in‑branch transfers or services like Wise, which remained constrained by recipient bank rules and system upgrades that sometimes delayed payments to Bangkok Bank by up to 24 hours. With all existing mobile banking users required to comply with the new standards by the end of 2025 and support for older devices ending in early 2026, Thailand’s banks faced a continuing balancing act between fraud prevention, customer convenience and financial inclusion across a diverse and increasingly digital client base.