‹

Appendix B — The Thailand File

EN

Appendix B — The Thailand File

Everything verified about Thai online-fraud enforcement, with the window each figure covers and the body that issued it. Conflicts are recorded as conflicts. Absences are recorded as absences.

All retrieved 2026-08-29. This appendix is the reference to take into a meeting; the rule is that you can defend every line in it, including the lines that say nobody knows.


1 · Volume and losses

FigurePeriodIssued byGrade
121,921 cases · THB 7.48bn lost1 Jan – 30 Apr 2026ACSC, announced 11 May 2026 by Pol. Gen. Thana Chuwong[ESTABLISHED]
— of which goods/services fraud 85,215 cases (69.9%), avg THB 15,727samesame[ESTABLISHED]
— of which investment fraud: THB 5,997.7m = 80.2% of all losses, avg THB 166,449/casesamesame[ESTABLISHED]
— of which technical attacks (ransomware, hacking) 673 cases (0.55%), avg THB 211,686; ransomware subset THB 50.6msamesame[ESTABLISHED]
>170,000 cases · ~THB 9bn lost · avg >THB 52,000/case · Facebook >61% of casesJan – Jun 2026Thailand Consumers Council, reported 9 Aug 2026[ESTABLISHED]
7,845 cases · THB 428.3mweek of 1–7 Feb 2026ThaiPoliceOnline[ESTABLISHED]
5,716 complaints · >THB 177mweek of 19–25 Jul 2026ThaiPoliceOnline[ESTABLISHED]
1,176,512 calls to 1441 · 348,006 accounts frozen · ~THB 19bn damage1 Nov 2023 – 31 Oct 2024AOC 1441 / DES Ministry[ESTABLISHED]
851,495 calls (avg 3,519/day) → 966,125 calls (avg 3,992/day); account suspensions 355,381 → 362,472Feb–Sep 2025 vs Oct 2025–May 2026AOC 1441[ESTABLISHED]
~887,000 complaints · losses passing THB 89bn, ~45% rise on 2024Jan – Nov 2025government figures via press aggregation[CLAIMED]
THB 60bn in economic lossesfull year 2024Royal Thai Police, cited in Kyoto Review[CLAIMED]
GASA survey: 72% of Thai adults encountered scam attempts; 60% were scammed in 12 months; 14% lost money; avg USD 408 per victim2025Global Anti-Scam Alliance[ESTABLISHED] as survey output

Sources: ACSC via The Standard · Nation Thailand, Aug 2026 · Nation Thailand, Feb 2026 · Pattaya News, Jul 2026 · PRD, AOC one-year report · Kyoto Review

Conflicts, unresolved

  1. Daily loss rate, 2026. The ACSC 120-day figure implies ~THB 62m/day. A March 2026 report

citing police put it at ~THB 70m/day. Both recorded; not reconciled. Likely a difference in which case types and reporting channels are counted. [CONTESTED] (Thai Examiner)

  1. Full-year 2025 total losses. Reported as both THB 115.3bn and ~THB 89bn (Jan–Nov). Not

reconciled. Do not average them. [CONTESTED]

Case counts across sources agree reasonably well at roughly 1,000/day. Loss totals do not agree. If you must quote one number in a room, quote a case count with its window.


2 · Enforcement results

FigurePeriodIssued byGrade
351,000+ mule accounts closed · THB 3.6bn (~USD 107.74m) frozen · >29,000 suspects arrested · warrants for >70 ringleaders · 862 victims assisted · >THB 82m in prevented lossesOct 2025 – Jun 2026Government spokesperson via Xinhua, 13 Jul 2026[CLAIMED]
189,887 personal + 10,672 corporate mule accounts uncovered · >1.1m linked transactions traced · personal mule accounts −76.9%, corporate −88.4%, fraudulent transaction volume −66.1%Oct 2025 – May 2026Government spokesperson via Nation Thailand, 13 Jun 2026[CLAIMED]
AMLO temporary seizure of 102 premium assets from one transnational syndicate: THB 20,392m, including THB 7,720m cash and equitiesreported by Jun 2026AMLO[CLAIMED]
AOC blacklisting: THB 180.09m restricted across 4,129 listingsMar – May 2026AOC[CLAIMED]
Large cash withdrawals down ~35% following the THB 5m reporting rulethrough mid-2026Bank of Thailand / government[CLAIMED]
135,000+ mule accounts suspended · 869 arrestsQ1 2025via Thai financial press[CLAIMED]

Every figure in this table is an agency reporting its own performance. I found no independent audit of any of them. [ABSENT]


3 · The three absences

These are the most important entries in the appendix.

A. No clearance rate for online fraud is published. [ABSENT] Searched in Thai and English across police, ACSC, AOC and ministry channels. What exists is general, non-cyber: the Metropolitan Police Bureau reported nearly 90% case clearance for Bangkok in 2025 across 76,744 reported criminal cases, with serious violent crime at 237 cases and a 91% arrest rate [ESTABLISHED]; and a national year-end headline claiming 93% of more than 500,000 cases in 2024, which I could not verify past the headline [CLAIMED]. Neither is a cyber-fraud number and substituting one would be a misrepresentation.

B. No aggregate conviction count or conviction rate. [ABSENT] The record holds statutory penalties — up to 3 years and THB 300,000 for selling or renting an account; 2–5 years and THB 200,000–500,000 for recruiting mules — and isolated sentencings, such as eight people including four bank employees jailed over a network that took more than THB 100m. It holds no total. Arrests are published; outcomes are not.

C. No current investigator headcount, and no published backlog statement. [ABSENT] The most recent figure located is 333 officers, October 2020, at CCIB's founding, with the bureau describing itself as understaffed. AOC's hotline capacity is published — 100 lines, 24 hours, roughly ten minutes to freeze a flagged account — but that is triage throughput, not investigative capacity, and the two must not be conflated.


4 · The legal framework

InstrumentDateSubstance
​พระราชกำหนด​มาตรการป้องกัน​และ​ปราบปราม​อาชญากรรม​ทางเทคโนโลยี พ.ศ. 2566 — Emergency Decree on Measures for the Prevention and Suppression of Technological Crimes B.E. 2566Royal Gazette 16 Mar 2023, effective 17 Mar 2023Created the legal committee that established AOC 1441. [ESTABLISHED] (Royal Gazette text)
Amendment No. 2, B.E. 2568effective 13 Apr 2025Makes digital-asset businesses, mobile network operators and financial institutions jointly liable for damages arising from crimes on their platforms where specified duties are unmet. [ESTABLISHED] in substance; exact liability wording should be re-verified against the article text before quoting. (iLaw)
Central Fraud Registry (CFR)operational, expanding through 2026Unified interbank database: a person flagged at one bank has all accounts at all banks suspended and is blocked from opening new ones. [ESTABLISHED]
Cash ruleswithdrawal rule in force; deposit rule from Oct 2026Cash deposits over THB 5m require a declared source of funds; large denomination exchanges require justification. [ESTABLISHED]
SIM restrictionin forceMaximum 5 SIM registrations per person, registration at physical service centres; SIM-box devices outlawed. [ESTABLISHED]
Victim refund mechanismministerial regulation effective 12 Aug 2026Victims may request refunds through AMLO's system without a court order. [ESTABLISHED]
PDPAeffective 1 Jun 2022Personal Data Protection Act; enforced by the PDPC; penalties include up to one year's imprisonment attaching personally to a responsible individual. Its application to individual, non-commercial investigators is not addressed in any source found. [ABSENT] — see Chapter 8.

The 2025 amendment is, in my assessment, the most consequential item in this appendix. Shifting liability onto banks and telecommunications operators converts a policing problem into a business-risk problem for organisations with vastly more staff than the police have.


5 · Cross-border

FactDateGrade
~260 workers from 19 countries freed from Myawaddy scam compounds by an ethnic armed militia and handed to Thai authoritiesFeb 2025[ESTABLISHED] (IJM)
Thai measures: electricity, internet and fuel cut to Myanmar border areas; military deployment; DSI arrest warrants sought for three Border Guard Force leadersFeb 2025 onward[ESTABLISHED] (USIP)
More than 5,300 people still held in Myanmar scam centres near the Thai borderas of 23 Jun 2026[ESTABLISHED] (Al Jazeera)
Regional cyber-fraud workforce across Cambodia, Myanmar and Laos estimated above 350,000 people; syndicate revenue estimated USD 50–75bn annuallyundated estimate, cited 2026[CLAIMED] — analyst estimate, no stated method
Cambodia: 190 locations sealed, 173 arrested, ~11,000 workers deportedas of Feb 2026[CLAIMED]
Thailand records ~1,000 scam cases/day nationally, down ~10% since Cambodian compound operations beganmid-2026[CLAIMED] — though the case count is consistent with ACSC's own 120-day figure of ≈1,016/day

6 · What Thai authorities have said about AI

StatementDateGrade
DES Ministry developing a centralised AI-powered data management system for AOC, budgeted THB 200 million, targeted to launch Q3 2026; links agencies onto shared data against fake calls, phishing links and mule accountsreported through 2026[CLAIMED] — summary level, primary document not fetched (Siam Legal)
Royal Thai Police "SHIELD" database linking cross-border financial and intelligence datacited 2025–26[CLAIMED] — capabilities not verified beyond a summary
"Intelligent Bird Eye Operation Centre" (IBOC) — AI surveillance for real-time incident detection in tourist and economic zonescited 2025–26[CLAIMED] — not verified against any primary government source
Central Fraud Registry — real-time cross-bank data sharing to auto-suspend accounts nationallyoperational[ESTABLISHED] — the best-sourced automated linkage mechanism found, and note that it links financial records, not investigative case files
Thailand Consumers Council proposal that platforms use AI to detect fraudulent investment solicitation languageAug 2026[ESTABLISHED] as a proposal — civil society, not police capability

The most important line in this table is the Q3 2026 AI system at THB 200 million. Anyone proposing AI work to a Thai agency should assume a procurement is already in motion and position accordingly — as a layer on top, not a replacement, and ideally as the part that budget does not cover: the free-text narrative, which the Central Fraud Registry does not touch.


7 · Bangkok Post pieces not fetched

Two articles were located by headline but not read in full, and both are the highest-value next fetch if direct quotes from police leadership on AI adoption are needed: Cops digitise war against cybercrime · Govt deploying AI to combat fraud. [ABSENT] as to their contents.

บทถัดไป · 17 / 19Appendix C — Explaining This to Someone Who Is Not Technical
Size
Page
Font

After Sherlock

❦
1How to Read This Book2Chapter 1 — The Man Who Was Never Wrong3Chapter 2 — The Invention of the Crime Rate4Chapter 3 — The Trace and What It Can Bear5Chapter 4 — Reading the Pile6Chapter 5 — Linking7Chapter 6 — Where the Machine Has Been Wrong8Chapter 7 — Following Money9Chapter 8 — Open Source, Lawfully10Chapter 9 — Custody11Chapter 10 — Fabrication12Chapter 11 — People13Chapter 12 — Thailand14Chapter 12 — The Protocol15Appendix A — The World's Investigators16Appendix B — The Thailand File17Appendix C — Explaining This to Someone Who Is Not Technical18Appendix D — The Fourth Value19Appendix E — What This Book Cannot Certify