https://apac.entrepreneur.com/business-news/thailand-targets-identity-laundering-as-fraud-fight-moves-beyond-bank-accounts

Thailand’s anti-corruption agency has proposed linking civil registration, immigration, hospital and banking records through a central system, potentially widening the country’s anti-fraud push from suspicious financial accounts to the identities used to open them.

The Public Sector Anti-Corruption Commission (PACC) said the proposed system could automatically flag inconsistencies or high-risk records across agencies that currently maintain their information separately. Deputy secretary-general Pol Lt Col Siripong Sritula said on August 18 that fragmented databases make it difficult for authorities to reconstruct a person’s full identity history.

The proposal is not yet an approved national programme.

The PACC announcement did not mention an implementation timeline, technical architecture or rules governing how participating institutions would access and exchange information. But it points to a potentially important shift in Thailand’s response to financial crime: from identifying fraudulent transactions and mule accounts to determining whether the identity behind them is legitimate in the first place.

PACC describes the vulnerability as ‘identity laundering’, where false or manipulated underlying information is used to obtain documents that are genuinely issued by Thai authorities. Siripong identified four methods, including assuming dormant or deceased identities, improperly entering the registration system for non-Thai nationals, falsifying birth records and maintaining overlapping identities for the same person.

That distinction has direct implications for banks and other businesses conducting know-your-customer (KYC) checks. A forged identity document can potentially be rejected as counterfeit. But a genuine, government-issued credential created from corrupted civil-registration records presents a different problem because the document itself may pass conventional authenticity checks.

Thailand’s existing financial-fraud controls rely increasingly on data sharing between institutions. Since August 1, 2024, all banks have used information from the Bank of Thailand-backed Central Fraud Registry to manage risky accounts across institutions, replacing a system where banks could largely act only on accounts identified within their own financial trails. The central bank subsequently required banks to share information on individuals showing suspicious behaviour, even when no victim had yet reported fraud.

Banks also apply enhanced identity verification and customer due diligence when people assessed as high-risk attempt to open accounts, including checks on the purpose of the account and supporting information such as income sources.

The PACC proposal effectively pushes that logic one step further upstream. If the government record underpinning a customer’s identity has itself been manipulated, stronger checks at the bank-account level may still begin with compromised information.

A widening investigation involving Chinese national Sun Mingchen illustrates the problem authorities say they are trying to solve. Sun was arrested in May after police found assault rifles, explosives and grenades at his Pattaya residence. Investigators subsequently linked financial transactions associated with him and an alleged online-scam network to more than 600 bank accounts and estimated losses exceeding THB 815 Mn.

Thai officials accused of forging documents used to establish a front business for him were among those later arrested. The allegations remain subject to legal proceedings.

The PACC separately cited Sun’s case when explaining how allegedly false information could be used to obtain genuine government documentation. Authorities have arrested a district official and an employee accused of falsifying civil-registration records connected with him.

Other investigations suggest the vulnerability is not confined to a single case. On August 4, the PACC joined the Department of Provincial Administration, police and immigration authorities in searches across 25 locations in Mae Sot as part of an investigation into the unlawful issuance of 10-year identification cards for people without civil-registration status.

The PACC said the investigation found that more than 1,000 identification cards had been issued unlawfully. At least 10 recipients were Myanmar nationals who already held valid Myanmar passports but had allegedly been registered as stateless people and issued Thai civil-registration records on that basis. Arrest warrants covered public officials, foreign nationals and others accused of participating in the scheme.

The central-database proposal also comes as Thailand expands its national digital-identity infrastructure separately.

The Electronic Transactions Development Agency’s Digital ID Phase II framework for 2025-2027 includes plans to improve protection against identity forgery and fraud, develop data-sharing mechanisms between businesses and government agencies and build digital-ID infrastructure for foreigners. ETDA expects digital identity to eventually support at least 1,000 government e-services and broader public- and private-sector use.

ETDA has not announced any technical or institutional link between its Digital ID programme and the database proposed by PACC. But both initiatives highlight the growing importance of trusted identity infrastructure as Thailand moves more financial, corporate and government transactions online. ETDA’s own framework identifies foreign identity verification, cross-sector data sharing and fraud prevention as priorities.

Institutional co-ordination around civil-registration fraud had already begun before PACC unveiled the database idea. On August 10, officials from the PACC, the Department of Provincial Administration, the Royal Thai Police, the Department of Special Investigation, the Anti-Money Laundering Office and the National Anti-Corruption Commission met to discuss monitoring, verification and information exchange aimed at preventing civil-registration documents from facilitating illegal activity.

That meeting stopped short of announcing a central database. Eight days later, PACC put one on the table.

Whether the proposal becomes part of Thailand’s national anti-fraud architecture will depend on decisions that have yet to be made, including how far information sharing extends and how access is governed. But the vulnerability exposed by the investigations is more immediate.

A financial system can strengthen its KYC checks, freeze mule accounts and share suspicious-account data across banks. But it may remain exposed if the civil identity those controls depend on has already been compromised.