The Monetary Authority of Singapore and the Bank of Thailand are tightening their defences against cyberattacks and digital fraud, with both central banks signing a new memorandum of understanding focused on cross-border cooperation.
This is not simply another agreement to “share best practices.” The partnership creates a working framework for exchanging threat intelligence, coordinating during cyber incidents and testing how both financial systems would respond when an attack does not stop at a national border.
The agreement was signed by MAS Managing Director Chia Der Jiun and Bank of Thailand Governor Vitai Ratanakorn during the 31st Executives’ Meeting of East Asia-Pacific Central Banks Governors’ Meeting in Singapore, held from July 22 to 24, 2026.
A Cybersecurity Partnership Built Around Real Threat Sharing
Under the MAS and Bank of Thailand cybersecurity partnership, the regulators will exchange information on cyber incidents, regulatory developments and emerging threats affecting their financial sectors.
That matters because digital fraud networks rarely stay inside one market. A campaign may use infrastructure in one country, compromised accounts in another and victims scattered across several jurisdictions. Regulators working separately are usually reacting with only part of the picture.
Faster intelligence sharing could give both authorities a clearer view of attacks as they develop. It may also help financial institutions act earlier when suspicious tactics, malware or fraud patterns begin appearing across Singapore and Thailand.
The MoU formalises and expands cooperation that was already taking place between the two central banks.
Joint Cyber Crisis Drills Move the Deal Beyond Policy Talk
One of the more practical parts of the agreement is the plan to conduct joint cross-border cybersecurity and crisis-management exercises.
These drills are likely to test the awkward parts of a major incident: who contacts whom, how quickly information can move, which decisions need senior approval and what happens when financial services are disrupted in both markets at once.
A cyber response plan can look convincing on paper and still fall apart under pressure. Exercises expose those cracks. Phone numbers are outdated. Reporting lines overlap. One organisation assumes another has already warned the banks. Small delays pile up.
By running scenarios together, MAS and the Bank of Thailand can test their response channels before a genuine regional incident forces the issue.
Staff Training and Research Are Also Part of the Deal
The cooperation will also include staff training, study visits and the exchange of research and policy insights.
It is a quieter part of the announcement, though potentially an important one. Cybersecurity rules cannot remain static while fraud methods, artificial intelligence tools and attack infrastructure keep changing.
Officials need current technical knowledge, not only regulatory experience. Shared training may help teams develop a common language for assessing threats and coordinating their response. It could also reduce friction when an incident requires action from institutions operating across both markets.
The central banks said these competency-building activities are intended to deepen technical collaboration and strengthen their ability to handle new forms of cyber risk.
Digital Fraud Is Becoming a Regional Regulatory Problem
MAS Managing Director Chia Der Jiun described cyber risks and digital fraud as transnational threats requiring closer regional cooperation.
Bank of Thailand Governor Vitai Ratanakorn also pointed to the combination of increasing financial connectivity and rapid technological change. In his view, closer cooperation should support smoother cross-border intelligence exchange and help both authorities respond to emerging threats.
The language is careful, as central-bank announcements usually are. The concern underneath it is harder to miss.
Payment systems are more connected. Financial services are increasingly digital. Customers can move money instantly, while fraudsters can automate scams, impersonate trusted organisations and shift stolen funds through several accounts before authorities have pieced together what happened.
National defences still matter. They are no longer enough on their own.
The Agreement Builds on Years of Singapore–Thailand Cooperation
MAS and the Bank of Thailand already cooperate across financial regulation, payments, fintech and cybersecurity.
In 2019, the two authorities jointly established the Central Banks, Regulators and Supervisory Entities network, known as CERES. The initiative was designed to support exchanges involving cyber threats, regulatory policies and cybersecurity frameworks among central banks and financial regulators.
Singapore and Thailand have also developed a cross-border payment linkage between their national instant-payment systems, making cooperation on digital resilience increasingly relevant to everyday financial activity.
More recently, MAS and the Bank of Thailand worked with the Bank of England on research into synchronised cross-border foreign-exchange settlement.
The latest cybersecurity MoU fits into that broader relationship. This time, though, the focus is squarely on what happens when connected finance becomes an entry point for connected fraud.
What the MAS and Bank of Thailand Cybersecurity Partnership Means for Fintech
The immediate impact on fintech companies may not arrive as a new compliance rule or reporting form. The agreement is between regulators, and no detailed implementation timetable has been announced.
Still, regulated fintechs, banks, payment providers and financial infrastructure operators should pay attention.
Closer coordination between MAS and the Bank of Thailand could eventually produce more consistent expectations around incident reporting, threat-information sharing and operational resilience. Firms serving customers in both markets may also face greater scrutiny over how quickly they detect, escalate and communicate cross-border cyber incidents.
There is another possibility. Better regulatory coordination could make legitimate regional expansion easier by reducing gaps between how authorities understand cybersecurity risks.
For now, the MoU is a framework rather than a finished system. Its value will depend on how often intelligence is exchanged, how realistic the joint exercises become and whether lessons from those exercises reach the financial institutions handling live transactions.
The paperwork has been signed. The real test comes when something goes wrong.
Sources
- Bank of Thailand — Joint Press Release on the MAS and BOT Cybersecurity Cooperation and Digital Fraud Protection MoU
- FinTech Futures — MAS and Bank of Thailand Forge Cybersecurity Partnership
- Bank of Thailand — Bilateral Cooperation