Business SMS in Thailand: NBTC, the Dual-Channel Reality, and Why Thai Hospitality Programs Need Two Messaging Strategies

A hotel group operating in Phuket, Koh Samui, and Chiang Mai has a messaging problem that most platforms do not design for. Its Thai guests expect to hear from it on LINE, Thailand's dominant super-app with approximately 56 million monthly active users and an open rate for business messages that exceeds 90%. Its international guests, arriving from Europe, Australia, China, the Middle East, and North America, expect WhatsApp, the app that was on their phone long before they landed in Thailand. SMS sits underneath both as the guaranteed-delivery layer for OTPs, booking confirmations, and critical operational alerts. And since October 2025, the National Broadcasting and Telecommunications Commission (NBTC) has required operators to flag international SMS with an alert symbol before delivery, which means unregistered international SMS increasingly arrives looking like a potential scam warning rather than a trusted hotel confirmation.

Business SMS in Thailand is regulated by the NBTC under a framework requiring sender ID pre-registration, one-way A2P messaging only (standard A2P channels do not support inbound replies), and sending hours between 9 AM and 9 PM ICT. Thailand's Personal Data Protection Act (PDPA), effective June 2022, governs how personal data including phone numbers is collected and processed. Since October 2025, the NBTC has required carriers to flag international SMS traffic with alert indicators before delivery, increasing the urgency of local sender ID registration for any international organization messaging Thai recipients. LINE dominates domestic Thai messaging at approximately 85% of internet users. WhatsApp is the primary channel for international visitor and business communications, growing by 208% in Thailand in 2024.

Thailand is not a market where SMS-first design makes sense for most programs. Understanding what SMS does well in Thailand, and what it cannot do, is the precondition for designing a program that actually works.

The carrier landscape: a post-merger duopoly

Thailand's mobile market is dominated by two entities following the 2023 merger of True Move H and DTAC. True Corporation now serves approximately 54% of subscribers and AIS (Advanced Info Service) serves approximately 45%. NT (National Telecom, the former state-owned CAT and TOT networks) accounts for the remainder. For most practical purposes, Thailand SMS planning centers on True Corporation and AIS as the two coverage priorities.

Sender ID registration is required before sending business SMS in Thailand. Alphanumeric sender IDs are supported and preserved as registered on major Thai carrier networks. Registration typically takes approximately two weeks from submission of complete documentation. Unregistered sender IDs are generally replaced with numeric codes or blocked, which eliminates brand recognition in the sender field and increases the likelihood of recipients dismissing the message.

International long codes are generally not recommended for business SMS in Thailand as they are typically overwritten at delivery and provide no sender recognition. Short codes are reserved for domestic entities. For international organizations, a pre-registered alphanumeric sender ID through a provider with direct Thai carrier connections is the practical architecture for reliable delivery.

The NBTC's 2025 anti-fraud framework and what it means for international senders

Thailand has experienced a significant surge in SMS-based fraud and scam traffic in recent years, with NBTC officials reporting that carriers block more than one million inbound scam SMS daily. In response, the NBTC announced in October 2025 a set of new measures specifically targeting international A2P traffic.

The measures require carriers to categorize and register A2P senders separately for domestic and overseas origin, deploy SMS firewalls to screen international traffic in real time, and prepend an alert symbol to international messages that have passed the filter but still originate from outside Thailand. In parallel, a new regulation effective from mid-2025 requires that all A2P messages carry registered sender names, that carriers verify the authenticity of links before delivery, and that SIM boxes supporting four or more SIM cards be registered with the NBTC before connecting to the network.

The practical implication for international organizations sending SMS to Thai recipients is significant. An international message without a locally registered sender ID now arrives with a visual alert that signals potential fraud to the recipient, regardless of whether the message is legitimate. For a hotel sending a guest a booking confirmation, a logistics company notifying a client of a delivery, or an NGO coordinating field participants, that alert undermines the trust the message is intended to create. Local sender ID registration through a NBTC-compliant provider is no longer optional for programs where recipient trust matters.

Two-way SMS: the unavailable interaction

Standard A2P SMS channels in Thailand do not support inbound replies. This is a regulatory restriction enforced by the NBTC, not simply a carrier-level routing limitation. Businesses can send messages through A2P channels but recipients cannot reply to them through those channels. This is the same structural constraint documented in Rwanda, Uganda, Bangladesh, and Japan, and it has the same design implication: any workflow built around reply-based opt-outs, acknowledgment logging, survey responses, or inbound keyword capture needs to be designed around a different channel from the outset.

For programs where two-way interaction is genuinely required, LINE's messaging API supports full two-way conversation within the LINE Official Account framework. WhatsApp Business API supports two-way messaging for international audiences. For SMS-based two-way workflows where neither LINE nor WhatsApp is appropriate for the specific use case, the Telerivet Android Gateway routes through a local Thai SIM as P2P traffic, which operates outside the A2P restriction. Organizations should discuss their specific interactive workflow requirements with the Telerivet team to confirm the appropriate architecture.

Thailand's PDPA: consent in a young data protection regime

Thailand's Personal Data Protection Act became fully effective in June 2022, making it one of the more recently enacted comprehensive data protection laws in Southeast Asia. The PDPA is modeled on GDPR principles: it requires a lawful basis for personal data processing, mandates explicit consent for marketing communications, and grants data subjects rights of access, correction, and deletion. Phone numbers collected for SMS programs are personal data under the PDPA.

The PDPA established the Personal Data Protection Committee as the enforcement authority. Enforcement posture is still developing as the regime matures, but organizations should not treat the PDPA's relative youth as a reason to defer compliance. The principle that marketing SMS requires explicit, documented opt-in consent applies regardless of enforcement maturity. For programs collecting contact data through tourism touchpoints, hotel check-in forms, tour booking flows, or app registrations, the consent architecture should specify that the contact may receive SMS communications, what type, and how frequently.

Data subjects can request deletion of their personal data, and organizations must have a process for honoring those requests. Suppression lists should treat deletion requests as opt-outs that are checked before every subsequent promotional send.

LINE and WhatsApp: the two-channel architecture that Thailand actually requires

LINE is the dominant messaging platform in Thailand with approximately 56 million monthly active users, representing roughly 85% of Thai internet users as of 2025. LINE's penetration is near-universal in Bangkok, Phuket, Chiang Mai, Pattaya, and Chonburi, and LINE Official Accounts for businesses produce open rates that consistently exceed 90%, substantially higher than email or international push notification benchmarks. LINE has evolved into a full super-app ecosystem with LINE Shopping, LINE Pay, LINE TV, and LINE Man (delivery services), which means Thai consumers are accustomed to conducting commercial interactions directly within the platform.

For Thai domestic audiences, LINE is not just preferred. For many consumer segments, it is the expected channel for all business communication from customer service to promotional offers to appointment reminders. An organization that communicates with its Thai guests or customers primarily through SMS while ignoring LINE is communicating through a channel those recipients treat as secondary.

WhatsApp tells the opposite story. Thailand's WhatsApp user base grew by 208% in 2024, driven primarily by international business communication and the country's massive inbound tourism sector. International visitors from Europe, Australia, the Middle East, China, and North America arrive in Thailand with WhatsApp installed and active. They do not have Thai LINE accounts. For a hotel, resort, tour operator, or transportation service communicating with international guests, WhatsApp is the channel where those guests will actually see and respond to messages.

The result is a dual-channel architecture that is specific to Thailand and to markets with significant international tourism or expatriate populations. The same hotel property needs LINE for its Thai guests and WhatsApp for its international guests, with SMS as the guaranteed-delivery fallback for critical transactional messages that must reach all audiences regardless of which messaging apps they use.

Thai characters require Unicode encoding, which reduces the per-segment character limit from 160 to 70 characters per segment, the same constraint as Japanese text in the Japan compliance post. SMS programs targeting Thai-speaking audiences need to budget for and test message length before launch.

The tourism and hospitality operational layer

Thailand receives approximately 30 million international visitors annually, with hospitality, tour operations, ground transportation, and related services representing a substantial share of GDP. The operational messaging requirements for this sector are genuinely distinct from marketing SMS programs.

A resort coordinating pre-arrival guest communications, in-stay service requests, and post-departure follow-up needs a channel for each audience type. Thai guests throughout the booking-to-departure journey: LINE Official Account. International guests pre-arrival and in-stay: WhatsApp Business API. Booking confirmations and OTPs for all guests regardless of nationality: SMS, through a locally registered sender ID so the message does not arrive with a fraud alert symbol.

Staff coordination across housekeeping teams, concierge, front desk, and management adds a further layer. Thai staff predominantly communicate via LINE personally and expect it professionally. Management layers with international colleagues may use WhatsApp or email. Emergency and safety notifications, where guaranteed delivery matters more than engagement, belong on SMS precisely because it reaches every mobile number regardless of what apps are installed or whether the recipient has data connectivity at a given moment.

Communication orchestration across these channels is what makes Thailand programs operationally defensible. The same workflow logic that routes a booking confirmation to SMS while routing a promotional offer to LINE and a pre-arrival upsell to WhatsApp should sit in a single platform layer above the channels themselves. That way the channel selection is a configuration decision, not a rebuilding decision, when the guest's profile or the use case changes.

Frequently asked questions

Is two-way SMS available in Thailand? No. Standard A2P channels in Thailand do not support inbound replies. This is a regulatory restriction enforced by the NBTC. Businesses can send messages but recipients cannot reply through A2P routes. Programs requiring two-way interaction should be designed around LINE, WhatsApp, or, for SMS-specific interactive workflows, the Telerivet Android Gateway routing through a local SIM.

Why is my SMS arriving with an alert flag to Thai recipients? Since October 2025, the NBTC has required carriers to prepend an alert indicator to international SMS traffic before delivery, as part of anti-fraud measures targeting scam SMS from overseas. A locally registered sender ID through a NBTC-compliant provider with direct Thai carrier connections is the practical solution. International SMS without a registered sender ID now carries a visual signal that may undermine recipient trust regardless of message content.

Should I use SMS or LINE for a Thai audience? For Thai domestic audiences, LINE is the primary engagement channel with approximately 85% penetration among Thai internet users and business open rates exceeding 90%. SMS is the appropriate channel for guaranteed-delivery transactional messages such as OTPs, booking confirmations, and critical alerts that must reach recipients regardless of which apps they use. For international audiences such as tourists and expatriates, WhatsApp is generally the primary alternative given LINE's low adoption outside Thailand.

Does the PDPA apply to my organization if I am based outside Thailand? Organizations processing personal data of individuals in Thailand should assess whether the PDPA applies to their activities regardless of where they are established. Phone numbers collected for Thailand SMS programs are personal data under the PDPA, and organizations should ensure their consent documentation, purpose specification, and data handling practices are consistent with the Act's requirements.

What are the sending hours for promotional SMS in Thailand? Promotional SMS should generally be sent between 9 AM and 9 PM Indochina Time (ICT, UTC+7). Thailand does not observe daylight saving time. The Buddhist calendar includes a number of national holidays and auspicious dates that are worth accounting for when scheduling campaigns, both for compliance posture and audience receptivity.

This article provides general operational information and should not be considered legal advice. Organizations should consult qualified legal or data protection professionals regarding their specific compliance obligations under Thai law.

Talk to our team about building a compliance-ready multi-channel messaging program for Thailand and across your Asia-Pacific markets from one platform.

« Blog