Cyber Decree Fails: Fake Apps and Mule Accounts Persist

File photo for reference only

Thailand's second Royal Decree on cyber protection, effective since April 2025, has not successfully reduced online fraud as hoped. Despite aims for improved accountability and mechanisms against cybercrime, fake apps and mule accounts remain prevalent. This ongoing issue has prompted calls for faster responsive measures and enhanced safeguards such as shared liability and delayed-transfer systems.

The decree was expected to address issues like phishing and spoofing scams, but challenges persist in cases where victims are deceived into transferring money, such as investment fraud. Calls to implement delayed transactions to reduce losses remain unheeded, leaving significant loopholes. Saree Ongsomwang of the Thailand Consumers Council highlights that the fraud landscape has only grown more complex, citing inadequate verification of apps across major platforms and the Electronic Transactions Development Agency's inability to enforce platform accountability effectively.

While the Bank of Thailand (BOT) has made progress, gaps exist, notably in shared liability concerning mule accounts, which still facilitate fraudulent transactions. Saree highlights the BOT's inadequate definition of vulnerable groups, leaving many, particularly those over 60, without necessary protection. Concerns also extend to the telecom sector, where new rules complicate scam SIM takedowns, and identity verification remains insufficient, allowing the resurgence of fraudulent apps and pages.

Consumers often find themselves needing to file lawsuits—an arduous and costly process—due to the lack of effective legal measures. Saree criticizes the fragmented approach and calls for a quicker response time to tackle false content, stressing the need for automatic liability systems and delayed transfers to mitigate cyber losses. The Thailand Consumers Council reports receiving 18,687 cyber risk complaints within a year, reflecting systemic weaknesses and a need for responsibility consolidation among agencies.

Looking forward, calls for the implementation of clear penalties and compensation mechanisms continue. The push for a delayed-transfer system mirrors successful practices in countries like Singapore, but action remains pending. As cyber threats evolve, advocates urge for stronger consumer protections and enforcement to keep pace with modern challenges, reported The Nation.

Key Takeaways

• Thailand's new cyber decree has not effectively reduced online fraud.

• Challenges include fake apps, mule accounts, and insufficient safeguards.

• Calls for stronger pre-transaction measures and shared liability persist.

Related story links:

Thailand Moves to Standardise Electronic Evidence for Cybercrime

PM Anutin Declares ‘War on Scammers’ in Cybercrime Crackdown

Adapted by ASEAN Now from The Nation 2026-01-02