Pooled-account settlement exists because it is faster and cheaper than the alternative, and fintech operators across Southeast Asia have built their cross-border business around it for exactly that reason. A live enforcement case in Thailand is now testing whether that same infrastructure can expose operators to risk they never priced in.
That popularity is well earned. Pooled settlement lets an operator move large volumes of cross-border transfers without the delay and cost of routing every transaction through traditional correspondent banking, which is exactly why operators have spent years building diligence around the risks the model does carry: who their counterparties are, whether transactions look clean, and whether the intermediaries they settle through are properly regulated. That work is necessary and it is well understood.
A less familiar exposure has come into view more recently, and none of those controls respond to it. This risk traces back to the settlement infrastructure the transaction passes through, and to the conduct of entirely unrelated parties routing money through that same pool, rather than to who a firm actually transacts with.
The Rails Most Regional Flows Actually Use
A substantial share of the cross-border money entering Thailand from neighbouring countries never passes through correspondent banking at all. It arrives instead through pooled-account settlement operated by regulated currency exchange providers. A single clearing account handles many unrelated transfers each day, and the recipient is credited from the operator’s pool rather than from an identified upstream sender.
Industry estimates suggest that 40 to 55 percent of cross-border funds entering Thailand from neighbouring Southeast Asian countries move this way. As Global Banking and Finance has documented, the assumption that regional cross-border money predominantly moves through banks does not reflect how the flows are actually structured. The model persists because it is faster and cheaper than traditional wire transfer for the corridors it serves, and because it is the infrastructure regional commerce has developed around.
As previously explained on FXStreet, the allocation of compliance responsibility in this model is deliberate: the regulated operator conducts due diligence on those feeding the pool, because it is the only party with visibility into it.
Where the Exposure Sits
Backward-tracing enforcement methodology inverts that allocation. Where authorities trace funds back through a co-mingled clearing account and treat every downstream recipient as connected to suspicious upstream deposits, a firm’s exposure becomes a function of who else used its operator’s pool.
This is hard to manage for a straightforward reason: the information needed to do so simply is not available. A fintech operator can verify that its settlement partner is properly regulated, maintain complete records of its own transactions, and evidence the commercial purpose of every flow. It cannot audit the other users of that partner’s pooled account, because no mechanism exists for it to do so.
The result is a category of regulatory risk that sits outside the perimeter of ordinary diligence, attaching to participation in standard infrastructure rather than to any specific decision a firm has made. As FinTech News SG has set out, this is what happens when pooled payments become a liability for the end recipient.
The Case Defining the Question
Thailand’s largest-ever asset forfeiture proceeding is where this is currently being tested. The Anti-Money Laundering Office has stated that it has identified links to criminal activity. More than 20 billion baht, equivalent to more than USD 600 million, has been frozen in assets connected to Cambodian businessman Yim Leak and his wife. No criminal charges have been filed. That is a freeze-to-transaction ratio of approximately 4,000 to 1.
According to his legal team at Dentons Pisut and Partners, one of the largest international law firms, the contested transaction at the origin of the case was a currency exchange transfer worth approximately USD 150,000, processed through a regulated operator’s pooled clearing account, with no visibility into the upstream origins of the pooled funds. The legal team says the outcomes appear factually wrong as well as disproportionate, and points to a 2024 AMLO investigation that reviewed substantially the same assets connected to the same party, found no connection to criminal activity, and returned them.
For operators, the significant feature of the Yim Leak case is not its scale but its mechanism. The exposure originated in a transaction that would look unremarkable in any payment firm’s records: a modest currency exchange, executed through a regulated intermediary, using the standard settlement route for that corridor.
What Operators and Investors Can Reasonably Do
There is no control that eliminates this exposure, and firms should be sceptical of vendors suggesting otherwise. There are, however, several measures that improve a firm’s position if questions arise.
Operators should be able to identify, corridor by corridor, which settlement structures their flows actually use. Many firms find this less visible than expected once they look. They should document the regulatory status of every intermediary in the chain and keep that documentation current. They should retain settlement records with enough granularity to demonstrate the commercial basis of individual transactions rather than aggregate flows. Where a single corridor depends heavily on one pooled operator, that concentration is worth understanding as a risk position rather than purely a commercial arrangement.
For investors and acquirers conducting diligence on payment businesses, corridor and settlement-structure exposure belongs in the assessment alongside regulatory status and counterparty risk. A firm with concentrated dependence on pooled settlement in an aggressive enforcement jurisdiction carries a risk profile that a review of regulatory permissions alone will not surface.
The Direction That Matters
In similar cases, two Thai criminal courts have already ruled that shared use of an authorised currency exchange and pooled accounts is insufficient to establish liability without evidence of intent or knowledge. Those decisions align with FATF Recommendation 3, which treats intent or knowledge as essential elements of a money laundering offence.
Whether that reasoning carries into civil forfeiture proceedings is the question the Yim Leak case will help answer. As the International Business Times has reported, the outcome will shape how enforcement risk is priced across the region.
For the fintech sector, the stakes are practical. Efficient cross-border payments in Southeast Asia depend on pooled settlement infrastructure. If participation in that infrastructure carries unmanageable regulatory exposure, the operators serving these routes will reprice, restructure, or withdraw from them, and the cost of that adjustment will fall on the businesses and individuals who depend on those corridors. That is the outcome worth watching, and it will be determined by enforcement methodology rather than by technology.
