top of page
Image by Jakub Żerdzicki

Thailand Scorecard

Thailand is a high-exposure, high-scam-pressure cyber environment with decent, improving cyber maturity. The Cybersecurity Act, NCSA, PDPA, CII rules, and recent website security standards put Thailand above the lower-tier ASEAN states in structure and policy. At the same time, online fraud is explosive: hundreds of thousands of scam complaints, tens of billions of baht lost, and a surge in AI/deepfake-enhanced scams.

 

Thailand is also tightly entangled with the borderland scam-compound ecosystem in Myanmar/Laos/Cambodiahosting victims, suspects, financial flows, and law-enforcement responses, even if the worst compounds sit just outside its borders.

Overall Position : Big, highly connected digital economy with solid-but-not-elite cyber maturity, very high scam/fraud pressure, and a messy mix of: borderland scam ecosystems, deepfake/AI scams, and aggressive new anti-scam laws.

                                                      Cyber Maturity                                           7/10                                        Good laws and agencies (NCSA, Cybersecurity Act, PDPA); still maturing in practice.

​​

                                                     Threat Activity                                             8/10                                                                    Very high scam & fraud volume, plus growing technical cyber threats.

​

                                                     Digital Exposure                                          8/10                                                       63M+ internet users, 88% penetration, massive e-payments & mobile banking.

​

                                                     Law Enforcement Capability                        6/10                                                   Active anti-scam ops, new AI law, mass account freezes—but still overwhelmed.

​

                                                     Geopolitical Risk                                          6/10                                                  Borderland to Myanmar’s war & scam zones; regional player but not frontline SCS.

​

                                                    Scam/Fraud/Trafficking                               5/10                                                   Huge scam losses; victim & conduit, and tightly linked to border scam ecosystems.

 CYBER MATURITY ASSESSMENT

Thailand has a real cyber governance stack: the Cybersecurity Act B.E. 2562 (2019), the National Cyber Security Agency (NCSA), and the PDPA data law.

There are updated standards for critical infrastructure, incident tiers, and even mandatory website security rules in 2025, but it still doesn’t hit Singapore-level maturity yet.

​

  • Cybersecurity Act 2019 sets the framework for national security, CII protection, incident reporting, and minimum standards.

  • NCSA under MDES coordinates national cyber policy, standards, and CII support.

  • Draft amendments (2025) add clearer incident tiers (non-severe / severe / critical) and stricter reporting rules. 

  • New website security standard (2025) forces SSL/TLS, MFA, monitoring, etc., for gov & CII. 

  • PDPA 2019 is the omnibus data protection law with extraterritorial effect.

7/10

DIGITAL EXPOSURE

Thailand is highly connected: ~63.2M internet users and ~88% penetration as of early 2024, plus one of the most advanced digital payment ecosystems in the region (PromptPay, mobile banking, QR pay).

​

  • 63.21M internet users; 88% penetration at start of 2024.

  • Digital payments & e-commerce have boomed for nine consecutive years; PromptPay has 76M+ registrations (around 80% of bank account holders). 

  • World Bank: Thailand’s digital transformation is central to its future growth strategy.

8/10

GEOPOLITICAL & ECONOMIC DRIVERS

Thailand isn’t a South China Sea frontline like PH/VN and isn’t in civil war like Myanmar, but it is bordering Myanmar’s lawless scam zones and playing a central role in regional crackdowns and cross-border pressure.

​

  • Border with Myanmar puts Thailand right next to KK Park / Myawaddy scam ecosystems, with Thai police involved in repatriations and pressure campaigns. 

  • UNODC & IISS describe a region-wide crisis where scam compounds in Myanmar/Cambodia/Laos spill over into Thai territory and politics. 

  • Thailand balances relations with China, the US, and ASEAN; it’s not a direct kinetic flashpoint but is deeply involved in transnational crime, border security, and human trafficking issues. 

6/10

CURRENT THREAT ACTIVITY

Threat activity is very high, dominated by online fraud, scams, and deepfake/AI-enhanced social engineering, with around 700 online scam cases reported per day and huge scam communications volume.

​

  • Cyber Crime Investigation Bureau reports 700 online fraud/scam cases daily. 

  • Anti-Online Scam Operation Center & Safer Internet Lab show large-scale use of phishing, fake loan/investment, parcel scams, etc. 

  • 2024: 168 million scam calls + SMS (112% YoY surge) detected; attackers using AI to scale. 

  • UNODC & others flag Thailand as a key impacted country as scam syndicates evolve into “criminal service providers.”

8/10

LAW ENFORCEMENT & CYBERCRIME CONTROL

Thailand is not passive. It’s building specialized anti-scam units, AI-powered blocking, and joint crackdowns. But the raw scale of fraud (hundreds of thousands of complaints; tens of billions in losses) shows enforcement is still outpaced by the problem.

​​

  • Anti-Online Scam Operation Center (AOC) coordinates banks, telcos, and police for rapid freezing and response. 

  • From Mar 2022–Nov 2024: 739,494 complaints & 77.36B baht in scam damages; 560,000 bank accounts frozen. 

  • New AI-powered “scam block” law reportedly prevented ~6B baht of potential losses in its first 3 months. 

  • Recent cyber police crackdown netted 300+ suspects (many foreigners) under new royal decree on online fraud.

6/10

SCAM / HUMAN TRAFFICKING / FRAUD 

Thailand is heavily victimized by scams and plays a big role as a financial, logistical, and border hub in the scam-compound ecosystem even if most walled compounds sit over the border in Myanmar/Cambodia/Laos.

​

  • Safer Internet Lab: ~700 online fraud cases reported per day; patterns include fake investments, fake loans, parcel scams, job scams. 

  • Royal Thai Police: 77.36B baht in scam losses Mar 2022–Nov 2024; over 739k complaints.

  • Anti-Cybercrime Center: 21.3B baht lost to scams Jan–Oct 2025 alone. 

  • ISEAS & UNODC research highlight borderland scam centres and Thai towns as staging points/ transit nodes tied to Chinese syndicates and Myanmar compounds.

8/10

bottom of page