Thailand mandates social media advertiser verification by November 2026

Thailand is tightening the rules around who can advertise on social media. Starting November 1st, 2026, every platform that accepts advertising money will have to verify who is actually behind those ads—whether they're individuals, companies based in Thailand, or operations running from somewhere overseas. The requirement comes from a regulation issued by Thailand's Electronic Transactions Committee on May 5th, 2026, part of a broader effort to crack down on online scams and fraud schemes that have plagued the region.

The regulation itself sits within a larger legal framework known colloquially as the anti-mule account law, formally the Emergency Decree on Prevention and Suppression of Technological Crimes from 2023, which was amended in 2025. The Electronic Transactions Committee, after taking public input earlier in the year, finalized what's called the Notification on Measures to Prevent Technology-Related Crimes for Social Media Service Providers. It's a mouthful, but the practical effect is straightforward: platforms need to know who is paying to advertise on their services.

The verification requirement has a built-in grace period of sorts. Platforms don't need to re-verify an advertiser if that advertiser was already verified within the previous twelve months. But for new advertisers or those whose verification has lapsed, the check must happen before any ad goes live. The verification process itself needs to be tailored to the type of advertiser—individual users will require different documentation than corporate entities, and offshore advertisers will present their own complications. The regulation doesn't spell out exactly which documents or methods qualify as sufficient verification, leaving platforms to develop their own compliant procedures.

Once an ad campaign ends, platforms must hold onto the advertiser's information—and if a third party paid for the ads, that third party's details too—for a minimum of ninety days. This retention window creates an audit trail that authorities can follow if they're investigating fraudulent activity. The regulation casts a wide net in defining what counts as a social media service provider. The Electronic Transactions Development Agency indicated during the consultation period that the term should align with how the Computer Crime Act from 2007 defines social media: essentially any service that lets users interact, create content, or communicate online. That means not just the obvious platforms like Facebook or TikTok, but potentially messaging apps, community forums, or any business with social features built into its product.

The stakes for non-compliance are substantial. Platforms that fail to implement these requirements lose their safe harbor protections under the Emergency Decree—legal shields that normally protect them from liability for user-generated content and criminal activity on their platforms. More than that, they could face joint liability for damages if technology-related crimes occur on their services. For a platform operating in Thailand or serving Thai users, that's a meaningful legal and financial exposure.

The practical implication is that social media companies and any business with advertising capabilities need to audit their current processes now. Advertiser onboarding procedures, know-your-customer protocols, and data retention systems all need to be reviewed and likely overhauled to meet the November deadline. The regulation is less than three months away, and compliance isn't optional—it's the price of operating legally in Thailand's digital advertising space.