South Korea Compliance Report

Generated 2026-09-22

Comprehensive Framework

Regulatory Overview

Regulatory Status: Dedicated crypto/VA legislation, licensing regime, active enforcement
Key Regulator(s): Financial Services Commission, Security Agency
Risk Level: low
Primary Legislation: Act on Reporting and Using Specified Financial Transaction Information (amended) (2021), Virtual Asset User Protection Act (VAUPA) (2024)
Travel Rule: Adopted — Threshold: Implemented
Tax Reporting: 20% tax on crypto gains above KRW 2.5M (implementation deferred, effective 2025). Individuals: Must track acquisition costs, sales, and fees; NTS plans dedicated crypto monitoring units for data collection and evasion prevention pre-2027. Blockchain traceability aids enforcement.. Businesses: Similar tracking required; virtual asset service providers (VASPs) face heightened reporting to NTS.. 2026 Tax Reform Bill (enacted Dec 31, 2024): Defers tax to 2027; applies to fiscal years from Jan 1, 2026, but gains tax starts 2027.. Digital Asset Basic Act: Supports framework for oversight and taxation (20% on gains >$35,900).

Key Facts

aml Act on Reporting and Use of Specific Financial Transaction Information: Requires VASPs to register with KoFIU and comply with AML/CTF standards. Digital Asset Basic Act: Imposes ownership caps (e.g., 20% max per shareholder) and governance rules to enhance transparency and AML. Financial Services Commission (FSC): Primary regulator for VASPs, enforces consumer protection and investigates unfair practices. (Official site: fsc.go.kr) Financial Supervisory Service (FSS): Investigates abnormal transactions and develops guidelines. (Official site: fss.or.kr) Financial Services Commission (FSC): Oversees VASPs, enforces consumer protection, investigates unfair practices, and issues guidelines; gained expanded supervisory powers under recent acts. Financial Supervisory Service (FSS): Supports FSC by probing abnormal transactions and clarifying rules (e.g., on NFTs). Korea Financial Intelligence Unit (KoFIU): Manages VASP registrations, enforces KYC/AML, and handles suspicious transaction reports. Korea Internet & Security Agency (KISA): Issues mandatory Information Security Management System (ISMS) certifications for exchanges.
general Electronic Securities Act (Act on Electronic Registration of Stocks and Debentures): Amended to recognize tokenized securities using blockchain technology for recording issuance and distribution information Capital Markets Act (Act on Capital Markets and Financial Investment Business): Amended to allow investment contract securities to circulate through securities companies and other intermediaries Investment contract securities (including non-standardized products tied to real estate, art, or livestock projects) Issuers must notify and apply for registration with the Korea Securities Depository (KSD), which maintains oversight of security tokens beyond just listed securities Crypto exchanges and other intermediaries handling security tokens must obtain securities-related licenses; firms without current securities licenses are required to obtain one Unlicensed intermediaries cannot engage in security token transactions Integrate distributed ledger operational efficiency with established investor protection frameworks Enable distributed ledger-based securities account management
licensing FSC — Financial policy and regulation KoFIU — Financial intelligence, VASP registration Act on Reporting and Using Specified Financial Transaction Information (amended) (2021) — VASP registration, AML/CFT Virtual Asset User Protection Act (VAUPA) (2024) — Investor protection, unfair trading/insider trading prohibition, mandatory insurance/reserves, KRW 3B minimum equity capital for exchanges VASP: VASP registration with KoFIU + ISMS certification mandatory. KRW 3B (~$2.2M USD) minimum equity capital for exchanges under VAUPA. Real-name verified bank account partnership required (critical bottleneck — only 5 exchanges achieved this: Upbit, Bithumb, Coinone, Korbit, Gopax). CUSTODY: Included under VASP registration; 100% cold storage for reserves required. Compensation reserves mandatory under VAUPA. EXCHANGE: VASP registration + real-name bank account partnership. Upbit dominates ~80% market share. ICOs effectively banned since 2017 (administrative guidance). Token listing requires exchange self-assessment.
securities The South Korean government has implemented a comprehensive regulatory framework for cryptocurrencies and digital assets, aiming to balance innovation with investor protection. South Korea classifies certain digital tokens as securities if they meet specific criteria, such as being issued by a company and representing an investment contract. Companies issuing digital tokens as securities must obtain a license from the FSC, ensuring compliance with financial regulations. The licensing process involves assessing the firm's financial soundness and adherence to AML/KYC protocols. All digital asset exchanges and wallet providers are mandated to implement robust AML/KYC procedures to prevent illicit activities. These requirements include verifying the identity of users, monitoring transactions for suspicious activity, and reporting to relevant authorities. The FSC has conducted several enforcement actions against non-compliant entities, imposing fines and suspending operations. Recent actions target platforms that fail to adhere to licensing and AML/KYC standards, emphasizing the government's commitment to market integrity.
stablecoin Stablecoins are proposed to be treated as foreign exchange payment vehicles, subjecting cross-border transactions to oversight by foreign exchange authorities without new licensing categories. This integrates them into existing financial regulations rather than classifying them as securities or e-money; tokenized real-world assets (RWAs) linked to stablecoins require trust custody under the Capital Markets Act. Domestic small-scale payments (e.g., for goods/services) may be exempt from foreign exchange reporting. Issuers must maintain full or over-collateralized reserves, stored in regulated financial institutions, mirroring bank-style rules. For KRW-pegged stablecoins, requirements cover collateral management and internal controls; major banks are developing a KRW stablecoin with launch targeted for late 2025/early 2026. No separate licensing yet; proposals require strict licensing and compliance akin to banks, with operations under FSC oversight, but bank-related issuer requirements remain unresolved. Part of the Virtual Asset User Protection Act (phase 2), with a government bill planned for National Assembly submission around October 2025. Not explicitly detailed in proposals; focus is on reserves ensuring 1:1 redeemability, with prohibitions preventing investment-like features.
status South Korea regulatory status: comprehensive
tax 20% tax on crypto gains above KRW 2.5M (implementation deferred, effective 2025) Individuals: Must track acquisition costs, sales, and fees; NTS plans dedicated crypto monitoring units for data collection and evasion prevention pre-2027. Blockchain traceability aids enforcement. Businesses: Similar tracking required; virtual asset service providers (VASPs) face heightened reporting to NTS. 2026 Tax Reform Bill (enacted Dec 31, 2024): Defers tax to 2027; applies to fiscal years from Jan 1, 2026, but gains tax starts 2027. Digital Asset Basic Act: Supports framework for oversight and taxation (20% on gains >$35,900). Income Tax Act amendments proposed; opposition (People Power Party) bill seeks to scrap 22% tax entirely.
travel rule Travel Rule adopted — threshold: KRW 1,000,000 Adoption and Effective Date: Adopted and in force since March 25, 2022. Expansion announced February 5, 2025, with a six-month grace period for upgrades, targeting full effect around August 2025, though further revisions continue into 2026. Threshold Amounts: Originally 1 million KRW; expansions lower it to cover smaller transactions, aiming for zero-threshold transparency to close smurfing gaps. VASPs Covered: All registered VASPs must comply with FATF Recommendation 16, including identity sharing for sender/recipient data in VA transfers; now extends to stablecoins and blocks non-compliant offshore exchanges. Technical Implementation Requirements: VASPs require system upgrades for data collection/sharing (e.g., originator/beneficiary info); FSC provides workshops, technical guidance, and a support desk during transitions. No specific protocol mandated, but aligns with global interoperability challenges. Act on Reporting and Using Specified Financial Transaction Information (effective 2022). FSC announcements (February 2025 expansion). Ongoing FSC/KoFIU AML overhauls (2026).

Sources

This report is AI-generated from publicly available regulatory sources. Last updated: 2026-09-10. View full profile