An older PersonalThailand article warned readers about using internet banking at public computers in Thailand. That warning still has a useful core, but it went too far by portraying Thai banks generally as unprotected and suggesting anyone with a password could simply empty an account. Digital banking security has changed substantially since 2008. Today the sensible approach is to protect your own devices and authentication, recognise scams and follow your bank’s current instructions.
Public computers are not a good place to bank
Shared computers in internet cafés, hotels and public facilities may have unknown software, saved browser sessions or another person’s access to the machine. The Bank of Thailand’s internet-payment guidance advises people not to conduct transactions on public computers, to avoid easily guessed passwords and to protect account details. That recommendation does not mean every computer or bank network in Thailand is compromised.
If you need to check a balance while travelling, use your own updated device and the official app or a website you have reached independently. Avoid entering credentials into a page reached through an unexpected message.
Public Wi-Fi: understand the difference
An open wireless network is not automatically the same as a malicious network, and modern encrypted websites protect much of the content in transit. However, attackers can imitate a hotel or airport network name, present fake sign-in pages, or use phishing to persuade visitors to disclose credentials. Sensitive transactions are easier to control using a trusted mobile connection where available.
If using Wi-Fi is unavoidable, confirm the correct network with the venue, avoid prompts to install unknown certificates or profiles, and check the full website or app identity. Never approve an authentication request you did not initiate.
Make account takeovers harder
- Install updates for your phone, computer, browser and banking app.
- Use a unique, strong account password; a password manager can help.
- Enable the strongest multifactor authentication supported by the service, preferably resistant to phishing.
- Do not share one-time passcodes, PINs, passwords or recovery codes with anyone who contacts you unexpectedly.
- Use a screen lock and avoid handing an unlocked device to strangers.
- Turn on official account transaction alerts when your bank offers them.
The US Cybersecurity and Infrastructure Security Agency has published guidance about multifactor authentication: additional authentication makes account takeover harder even when a password is exposed. An authentication method is not a guarantee, so remain cautious about messages asking you to authorise a transfer.
Spot messages that impersonate banks
A scam can arrive through SMS, email, direct message, a QR code or a phone call. Red flags include pressure to act immediately, threats of account suspension, a request to install remote-control software or instructions to transfer money to a so-called safe account. A realistic logo and familiar sender name do not prove that a message came from the bank.
Thailand’s official ThaiCERT Cyber Scammer Shield provides a preliminary assessment of suspicious messages and links. Its risk check is a helpful signal, not a guarantee that a website is legitimate. Never paste your password, OTP or other sensitive information into an untrusted checking service.
What if you clicked or sent money?
Contact your bank immediately using the phone number inside the official app, on your card, or from a verified website—not the number in a suspicious message. Explain what happened, ask whether credentials or access should be blocked, and follow instructions for reporting unauthorised transactions. Change compromised passwords from a clean device and review recent activity. Preserve screenshots or transaction references for any formal report.
Even when you feel embarrassed, quick reporting is more useful than waiting. Scams depend on silence and delay. A bank, not a blog post, can assess the specific account and payment under its operating rules.
The practical rule for internet banking in Thailand
Banking while travelling can be convenient, but convenience should not override device security and basic verification. Use your own protected device, confirm who is asking for information, and consult the latest instructions from your specific bank. The 2008 warning about shared computers remains worth remembering; the broad allegation that all Thai banks have poor security does not.
Internet security is always at risk, especially if you are not using your own computers when doing something or encoding something or even logging into something very personal. Like the issue laid above, I agree with what has been said that if you can’t afford to buy your own computers, refrain from using Internet banks.