Cryptoassets Regulatory Intelligence

South Korea Crypto & Digital Asset Regulation

KR schema crypto-v2.0.0 trajectory: not yet assessed in transition overlaps: Sentinel (AML/CFT), World Payments

Last updated · 9 categories · 54 sourced findings · 52 sources in the cumulative register

Evidence re-verified: ·Position last changed: ·
Record history & provenance ▾

Methodology & record provenance: Module confidence is derived from the underlying claims (source tier and primary excerpt retention), while statutory legal force is tracked independently.

Review status: AI-synthesised · Tier-1/2 verified · As-of date: 2026-10-26

Framework postureIn transition8 of 9 modules populated · AI-synthesised · Tier-1/2 verified
Lead supervisory authorityKorea Financial Intelligence Unit (FIU)Primary statutory & supervisory perimeter
Next milestone (> 2026-10-26)2026-11Digital Asset Basic Act (Phase 2) expected National Assembly submission
Module coverage & confidence8 / 9 modules assessed0 Confirmed · 8 Probable · 0 Uncertain · 1 Not yet assessed

Jurisdiction lead brief

Latest update · 4 November 2026

Lead Signal

South Korea's treatment of cross-border crypto flows is tightening on two tracks at once, and the two should not be read as one development. A registration requirement for firms conducting cross-border virtual-asset transfers, built into an amendment of the Foreign Exchange Transactions Act, passed the National Assembly on 7 May 2026 and is reported to take effect in early December 2026, with unregistered operation reported to carry criminal exposure. That amendment is distinct from, though legislatively adjacent to, a separate strand of work under the same statute: the Bank of Korea and the government are pursuing a further amendment that would classify stablecoins as payment instruments for cross-border transfers, with a draft decree open for comment to roughly 26 October 2026. The first strand is enacted and awaiting effect; the second is still at the consultation stage. Firms moving value into or out of Korea through virtual-asset channels face a registration obligation arriving on a fixed near-term date, while the question of how a stablecoin itself is characterised for foreign-exchange purposes remains open.

Key regulatory facts for South Korea
Regulatory DimensionSouth Korea Standing Position
JurisdictionSouth Korea (KR)
Regulatory ScopeCrypto & Digital Asset Regulation (9 modules, 54 sourced findings)
Crypto LicensingSouth Korea's baseline VASP registration and conduct-of-business regime under the FTRA and VAUPA is firmly in force and enforced, including bank real-name partnership and ISMS certification requirements that now also...
Token ClassificationSecurity tokens are governed by the FSC's 2023 Token Securities Guidelines and, prospectively, by Capital Markets Act/Electronic Securities Act amendments enacted 15 January 2026 but not effective until approximately...
On-Chain Activity RegimeOnly centralized-exchange crypto lending is directly regulated, via an FSC/DAXA guideline capping interest at 20% and banning leveraged lending beyond collateral value for top-20 assets.
Stablecoin RegimeSouth Korea has no binding stablecoin issuance framework; KRW-pegged pilots remain non-circulating proof-of-concept deployments.
Primary Instruments CitedKorea Financial Intelligence Unit (FIU), Google Play, Digital Asset Basic Act (DABA) proposal, FSC / ruling party negotiators, Naver Financial / Dunamu
Last Confirmed / Updated2026-11-04 (52 sources in cumulative register)

#

South Korea's baseline VASP registration and conduct-of-business regime under the FTRA and VAUPA is firmly in force and enforced, including bank real-name partnership and ISMS certification requirements that now also condition continued Korean Google Play listing for exchange apps. A comprehensive second-tier licensing overlay under the proposed Digital Asset Basic Act (DABA), covering trading, brokerage, custody, advisory and a provisionally-agreed 20% ownership cap on exchange shareholders, remains unenacted with H2 2026 as the next plausible checkpoint.

Open gap — crypto-int-3Whether the consolidated Digital Asset Basic Act bill has been formally filed/introduced to the National Assembly as of November 2026 is unresolved.Thin-evidence module; FR-1261 new scope not yet researched for KR.
Horizon · 2026-Q4 (± six months)KR Digital Asset Basic Act (DABA) parliamentary reviewProposed · Tier 3 source
Horizon · 2026-11 (± a quarter)Digital Asset Basic Act (Phase 2) expected National Assembly submissionProposed · Tier 3 source
Horizon · 2026-Q4 (± six months)Digital Asset Basic Act (Phase 2) National Assembly review expectedProposed · Tier 3 source
Standing sub-brief · as of 3 August 2026 305 words · last cycle 2026-10-06

Crypto Licensing

South Korea's baseline licensing architecture rests on the Act on Reporting and Use of Specified Financial Transaction Information (FTRA) and the Virtual Asset User Protection Act (VAUPA), both firmly in force and actively enforced. VASP registration with the Korea Financial Intelligence Unit (FIU) requires a bank real-name account partnership and ISMS security certification (CLM-KR-a1c4e8b2); this baseline conduct regime has real market-access consequences beyond domestic enforcement -- Google Play now requires demonstration of FIU VASP registration for exchange apps to remain listed on the Korean store, effective 28 January 2026 (CLM-KR-b3f7d21a).

Periodic update · new data 2026-10-06

Crypto Licensing

The proposed share-exchange merger between Naver Financial and Dunamu, Korea's largest cryptocurrency exchange operator, has been delayed again according to a 6 July 2026 press report. Shareholder meetings, originally set for 18 August 2026, have been moved to 19 November 2026, and the share-exchange date, originally 30 September 2026, has been re-targeted to 31 December 2026.

This development is sourced to a single Korean business-press outlet (Hankyung). No DART corporate filing, FSC notice, or Korea Fair Trade Commission filing has been located to corroborate the re-timing, so it is treated as a press-reported data point on the transaction's progress rather than a regulator-confirmed milestone. The underlying reasons for the repeated delay are not established by the available sourcing.

The transaction is material to Korea's crypto-licensing landscape because Dunamu operates Korea's largest cryptocurrency exchange, and a completed share exchange would bring that exchange under the same corporate structure as a major payments and financial-services platform, with implications for how exchange licensing and corporate ownership interact going forward.

Outlook

The newly stated 19 November 2026 shareholder-meeting date and 31 December 2026 share-exchange date are the next milestones to track for this transaction. Given that this is already a second reported delay, uncorroborated by any primary regulatory or corporate filing, confirmation through a DART disclosure or FSC/KFTC filing would materially strengthen confidence in the transaction timeline.

Sources and findings (10)
  1. T4 · CoinDeskKorea Financial Intelligence Unit (FIU) — VASP registration with bank real-name partnership and ISMS security certification retrieved M5 binding in force new
  2. T4 · The BlockGoogle Play — demonstration of FIU VASP registration to remain listed on the Korean Google Play store retrieved M2 binding in force new
  3. T4 · CoinDeskDigital Asset Basic Act (DABA) proposal — licensing, registration and reporting requirements for digital asset trading, brokerage, custody and advisory businesses retrieved M4 non-binding proposed new
  4. T4 · The BlockFSC / ruling party negotiators — 20% cap on major-shareholder stakes in crypto exchanges under forthcoming DABA, with exceptions to 34% and a 3-year grace period for incumbents retrieved M3 non-binding proposed new
  5. T2Naver Financial / Dunamu — Shareholder meetings moved from 18 August to 19 November 2026; share-exchange date re-targeted from 30 September to 31 December 2026. retrieved M2 non-binding
  6. T3Virtual Asset User Protection Act (VAUPA) — VASPs must register with KoFIU and comply with VAUPA's user-asset-protection, custody-segregation and unfair-trading-prohibition duties, in force since 2024-07-19. retrieved M5 binding in force updated
  7. T3Financial Services Commission (Korea) — Domestic access restriction or service termination ordered for 27 websites operated by unregistered crypto businesses, announced 2026-10-13. retrieved M3 binding in force
  8. T3Digital Asset Basic Act (Phase 2) — Consolidated government-ruling-party bill introducing positive authorisation (licensing) for exchanges and re-legalising ICOs under conditions remains under inter-party negotiation; National Assembly review reportedly expected November 2026. retrieved M5 non-binding in force
  9. T3Digital Asset Basic Act — Remains under consultation; FSC expected submission to National Assembly bill-review panel in November 2026. retrieved M5 non-binding in force updated
  10. T3Virtual Asset User Protection Act — KR has entered the first prosecutorial wave under VAUPA, alongside expanded regulatory surveillance over algorithmic trading. retrieved M3 binding in force

#

Security tokens are governed by the FSC's 2023 Token Securities Guidelines and, prospectively, by Capital Markets Act/Electronic Securities Act amendments enacted 15 January 2026 but not effective until approximately February 2027 (corrected this cycle from an initial in_force mislabeling). NFT classification remains case-by-case based on fungibility, fractionalizability and payment capability, and the classification of tokenized stocks as securities versus virtual assets remains unresolved pending FSC concurrence with the Ministry of Economy and Finance.

Horizon · 2027-02-04 (± a quarter)Token securities subordinate-regulation amendments in forceConsultation · Tier 1 source
Periodic update · new data 2026-10-06

Token Classification

The Financial Services Commission has opened formal pre-announcement (입법예고) of subordinate-regulation amendments under the Electronic Securities Act and the Capital Markets Act concerning token securities. The notice period runs from 2 October to 11 November 2026, and the amending Acts themselves are scheduled to take effect on 4 February 2027. This confirmed development corrects an earlier, unverified placement of the pre-announcement in late September 2026.

The approach works through Korea's existing securities-law architecture rather than creating a standalone digital-asset classification regime: token securities are being addressed through subordinate regulations beneath the Electronic Securities Act and the Capital Markets Act, which will set out how token-form securities are registered, issued and traded within the established capital-markets framework. This signals that Korea is extending its existing securities perimeter to capture token securities specifically, rather than classifying tokens generally through a separate crypto-asset statute.

As the amendments are presently at the pre-announcement/comment stage, the precise classification boundaries, including which token structures fall within the token-securities definition being targeted by the subordinate rules, are not yet settled. The six-week comment period to 11 November 2026 is the formal opportunity for stakeholders to respond before the rules are finalised ahead of the 4 February 2027 commencement date.

Outlook

Two dates anchor the near-term classification picture: the close of the comment period on 11 November 2026 and the scheduled commencement of the amending Acts on 4 February 2027. The content of the finalized subordinate regulations, once published after the comment period closes, will be the next material development to establish the actual classification boundary for token securities under Korean law.

C2 · Token Classification — Full Module Record0 sub-modules · 180 words · 7 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

Only centralized-exchange crypto lending is directly regulated, via an FSC/DAXA guideline capping interest at 20% and banning leveraged lending beyond collateral value for top-20 assets. Staking, DeFi, mining, node operation and validator activity remain wholly unaddressed by Korean statute, a persistent gap pending DABA implementation.

C3 · On-Chain Activity — Full Module Record0 sub-modules · 180 words · 2 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

South Korea has no binding stablecoin issuance framework; KRW-pegged pilots remain non-circulating proof-of-concept deployments. The proposed DABA stablecoin-issuer authorization regime -- covering capital, reserve custody, redemption rights and disclosure standards -- remains deadlocked over a Bank of Korea demand for majority-bank ownership of issuers versus the FSC's more flexible stance, with no systemic-designation regime for large stablecoins yet drafted.

Horizon · 2026-Q4 (± six months)FETA stablecoin-as-payment-instrument amendment and decreeConsultation · Tier 3 source
Periodic update · new data 2026-10-25

Stablecoin Regime

South Korea's stablecoin regime remains in a holding pattern defined by an unresolved institutional disagreement rather than by enacted law. Domestic stablecoin issuance is not currently permitted, a consequence of the operative ICO ban that predates the current legislative effort, and the government is reported to be weighing a narrower interim path that would permit circulation, though not domestic issuance, of overseas-issued stablecoins, conditioned on the issuer being licensed to international standards and maintaining a domestic branch. This interim approach, if adopted, would effectively import foreign-regulated stablecoins into the Korean market ahead of any domestic issuance framework coming into force, a sequencing that is itself notable given how many jurisdictions have approached stablecoin regulation by establishing domestic issuance rules first.

The structural obstacle to a fuller domestic regime continues to be the standoff between the Bank of Korea and the Financial Services Commission over who should be permitted to issue a won-denominated stablecoin. The Bank of Korea favours a model requiring majority bank ownership of any issuer, consistent with its institutional interest in maintaining monetary-policy transmission and payment-system stability through regulated depository institutions. The Financial Services Commission favours broader fintech participation, reflecting its mandate to encourage competition and innovation in the digital-asset space. This disagreement is reported as the principal reason the Digital Asset Basic Act's stablecoin provisions remain delayed, and it has now persisted long enough to be the single most consequential open variable for the eventual shape of South Korea's stablecoin-issuance market.

A further structural tightening indicator from the regulatory side is the Bank of Korea's 24 October 2026 disclosure that it is building, jointly with the government, an international cooperation framework to monitor and combat illegal cross-border virtual-asset flows. While this initiative is framed primarily as a cross-border monitoring and enforcement-coordination measure, it is directly relevant to the stablecoin regime because stablecoins are among the most commonly used instruments for cross-border virtual-asset movement, and any monitoring framework targeting such flows will necessarily touch on stablecoin transactions moving into and out of Korean won. The Financial Services Commission Chairman's confirmation of the initiative the day before the Bank of Korea's own announcement indicates at least surface-level institutional alignment on this particular initiative, even as the deeper stablecoin-issuer-eligibility disagreement between the two bodies remains unresolved.

A previously reported proposal, traceable to a January 2026 government growth-strategy announcement rather than to current bill text, would require stablecoin issuers to maintain reserve assets at or above 100% of outstanding issuance, paired with a redemption right and issuance-licensing capital requirements. This proposal has not been enacted and its current status within the Digital Asset Basic Act's Phase 2 drafting process was not established, but a 100% reserve requirement, if it survives into enacted law, would place South Korea's prudential stablecoin standard at the stricter end of comparable international approaches.

The Digital Asset Basic Act's Phase 2 is expected to be submitted to the National Assembly's bill-review panel in November 2026, with the Financial Services Commission targeting completion of the overall framework by the end of 2026. Ten related bills are already pending before the Assembly, which signals substantial legislative appetite but also raises the practical question of how a consolidated framework will reconcile those pending proposals with the Bank of Korea / Financial Services Commission ownership-structure disagreement that has not yet been resolved at the policy level.

Outlook

The clearest marker to track is whether the Digital Asset Basic Act's Phase 2 bill, once submitted to the National Assembly's bill-review panel as expected in November 2026, resolves the Bank of Korea / Financial Services Commission disagreement over stablecoin-issuer ownership in favour of one institution's preferred model, adopts some hybrid structure, or leaves the question open for further rulemaking. A second marker is whether the reported 100% reserve-requirement proposal, still untethered from bill text, is formally incorporated into the Phase 2 bill or dropped in favour of a different prudential standard. A third marker, tied closely to the cross-border transfer domain, is whether the Bank of Korea's international cooperation framework for monitoring illegal cross-border virtual-asset flows is extended with specific reference to stablecoin transaction types, which would signal that stablecoin-specific cross-border monitoring is being treated as a priority within the broader framework.

Periodic update · new data 2026-10-18

Stablecoin Regime

South Korea's stablecoin regime sits in an unresolved legislative gap. The Act on the Protection of Virtual Asset Users (VAUPA) does not directly regulate the structure of stablecoin issuance; comprehensive second-phase legislation intended to govern the issuance and distribution of stablecoins, including reserve-asset requirements, remains under discussion between the Financial Services Commission and the National Assembly, with no confirmed timeline for submission or passage as of 5 October 2026. In the absence of a dedicated statutory framework, the Financial Services Commission has instead relied on supervisory advisory tools: on 16 October 2026 it issued user advisories warning against perpetual futures products carrying leverage of ten to two hundred times, tied to virtual assets and stocks and offered through overseas platforms. This advisory activity illustrates the regulator's current posture toward unregistered or offshore high-leverage digital-asset products in a period where the underlying legislative framework for stablecoins and comparable instruments has not yet been settled. The gap between the in-force VASP/VAUPA user-protection baseline and the still-pending Phase-2 stablecoin-specific legislation means that stablecoin issuers, reserve requirements and issuer-eligibility criteria remain unsettled matters for market participants operating in or targeting the Korean market.

Outlook

The stablecoin regime's near-term trajectory is tied entirely to the progress of the Phase-2 Digital Asset Basic Act through the National Assembly; without confirmed submission and passage, reserve-asset and issuer-eligibility requirements for stablecoins will remain unsettled. In the interim, the Financial Services Commission's advisory-based approach to perimeter-policing high-leverage derivative products suggests continued reliance on supervisory warnings rather than binding rules for stablecoin-adjacent product categories until the legislative gap closes.

C4 · Stablecoins & EMTs — Full Module Record0 sub-modules · 180 words · 13 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Red), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

Core VAUPA custody segregation (80% cold storage), bank-delegated cash custody, and insurance/reserve-fund protections are in force and enforced. An April 2026 mandatory withdrawal-delay order targets voice-phishing fraud, while a drafted 5%-of-equity institutional crypto-allocation cap remains at guideline stage.

Standing sub-brief · as of 3 August 2026 261 words · last cycle 2026-10-12

Consumer Protection

Korea's core consumer-protection framework, the Virtual Asset User Protection Act (VAUPA), has been in force since 19 July 2024 and is actively enforced. It requires exchanges to keep at least 80% of user crypto deposits in segregated cold storage (CLM-KR-f2b9d6a5), to delegate cash-deposit custody to a licensed local bank while maintaining cryptocurrency reserves matched to customer deposits (CLM-KR-a3c7e4f9), and to enroll in adequate insurance or establish a reserve fund against hacking or liquidity-crisis losses (CLM-KR-b4d8f1e6). This baseline has been supplemented rather than replaced: in April 2026 the FSC and Financial Supervisory Service ordered all domestic exchanges to adopt a unified mandatory withdrawal-delay system specifically to counter voice-phishing fraud (CLM-KR-c5e9a2d3), extending the consumer-protection perimeter into fraud-prevention mechanics rather than custody or capital adequacy.

Periodic update · new data 2026-10-12

Consumer Protection

Korea's consumer-protection framework for virtual-asset users rests on the Virtual Asset User Protection Act's (VAUPA) requirements for custody segregation and information-security standards, which VASPs must maintain alongside their KoFIU registration. This cycle's signal in this module is an escalating enforcement trajectory: the Financial Intelligence Unit found KYC and custody-adjacent compliance failures at three of Korea's largest exchanges during 2025-2026, resulting in fines and partial-suspension sanctions at each. Bithumb was fined approximately $24 million with a six-month partial suspension, disclosed 16 March 2026, following an on-site inspection; this is the most recent and highest-profile of the three actions, and it is Probable-confidence given its Tier-3 sourcing.

A structurally significant absence in Korea's current consumer-protection framework is the lack of a dedicated market-abuse or market-integrity regime comparable to MiCA's Title VI. Market-abuse-type provisions for digital assets are expected only via the pending Digital Asset Basic Act; under current law, no equivalent framework is in force. This is treated as a negative finding with Uncertain confidence, since the absence is inferred from commentary discussing DABA's prospective scope rather than confirmed against a specific statute that defines the current gap. The custody-segregation and information-security obligations that are in force represent baseline user protection; the market-abuse and broader conduct-of-business rules that would typically accompany those baseline protections in a comprehensive regime remain pending.

The pattern across Upbit, Bithumb and Korbit — repeated KYC and custody-adjacent findings resulting in sanctions across a roughly twelve-month period — indicates that Korea's existing consumer-protection enforcement machinery is active and is identifying real compliance gaps at scale, even while the more comprehensive market-conduct framework contemplated under DABA remains unenacted.

Outlook

Continued enforcement activity against Korea's major exchanges is likely to persist under the existing VAUPA framework regardless of DABA's legislative timeline, since custody-segregation and KYC obligations are already in force and already being actively supervised. The market-abuse gap, by contrast, will persist until DABA or an equivalent instrument is enacted; no interim market-abuse measure under current law was identified this cycle.

Sources and findings (7)
  1. T4 · The BlockVirtual Asset User Protection Act (VAUPA) — safekeeping of at least 80% of user crypto deposits in segregated cold storage retrieved M5 binding in force new
  2. T4 · The BlockVirtual Asset User Protection Act (VAUPA) — exchanges to delegate cash-deposit custody to a licensed local bank and maintain cryptocurrency reserves matched to customer deposits retrieved M4 binding in force new
  3. T4 · The BlockVirtual Asset User Protection Act (VAUPA) — crypto service providers to enroll in adequate insurance or establish a reserve fund against hacks or liquidity crises retrieved M4 binding in force new
  4. T4 · CoinDeskFSC / Financial Supervisory Service (FSS) — all domestic cryptocurrency exchanges to adopt a unified mandatory withdrawal-delay system to counter voice-phishing fraud retrieved M4 binding in force new
  5. T4 · CoinDeskFinancial Services Commission (FSC) — guidelines capping listed-company and professional-investor crypto allocations at 5% of equity capital annually, limited to the top 20 cryptocurrencies by market value retrieved M3 non-binding proposed new
  6. T3Virtual Asset User Protection Act (VAUPA) — VASPs must keep customer deposits at banks, segregate customer assets, and carry insurance or reserves against hacking incidents, in force since 2024-07-19. retrieved M4 binding in force
  7. T3Virtual Asset User Protection Act — Comprehensive market-conduct regime in force since 19 July 2024, introducing custody segregation and unfair-trading prohibitions; pinpoint article/paragraph not located this cycle. M4 binding in force

#

The 2027 crypto income tax (20%/22% 'other income' above a 2.5 million won deduction) is enacted but not yet effective, and faces an active repeal bill referred to a National Assembly subcommittee on 29 July 2026 -- the third such delay effort since 2022. A separate, unresolved question is whether tokenized stocks will be taxed as securities under the Capital Markets Act pending FSC concurrence with the Ministry of Economy and Finance.

C6 · Tax Treatment — Full Module Record0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

The FTRA Travel Rule (in force since March 2022, threshold 1,000,000 won) is set for possible threshold removal per FSC plans. A May 2026 Foreign Exchange Transactions Act amendment adds a cross-border virtual-asset-transfer-business registration requirement, enacted but with an effective date not yet established from available sourcing; the Bank of Korea has separately planned (not yet in force) monthly cross-border transaction reporting.

Horizon · 2026-12-01 (± a quarter)FETA cross-border virtual-asset transfer-firm registration takes effectAdopted, not yet in force · Tier 4 source
Periodic update · new data 2026-10-25

Cross-Border Transfer

The Bank of Korea's 24 October 2026 disclosure marks the most significant development in South Korea's cross-border virtual-asset transfer regime. The central bank announced it is building, jointly with the government, an international cooperation framework to monitor and combat illegal cross-border digital-asset and stablecoin flows. The stated mechanism for implementing this framework is a planned revision of the Foreign Exchange Transactions Act, which the Bank of Korea indicates would introduce real-time information-sharing and enforcement-coordination arrangements with foreign authorities. The Financial Services Commission Chairman, Lee Eog-weon, separately confirmed the initiative on 23 October 2026, the day before the Bank of Korea's own disclosure, indicating a degree of coordinated messaging between the two institutions on this specific initiative.

What remains unestablished, and is flagged as a research gap, is whether the Foreign Exchange Transactions Act revision has progressed beyond the announcement stage into formal drafting. No draft legislative text, proposed thresholds for reportable cross-border virtual-asset transactions, or an expected effective date has been located. This places the initiative squarely at the announcement stage of the regulatory-development lifecycle: the policy direction and the responsible institutions are clear, but the operative legal mechanics are not yet public.

The current legal baseline against which this revision would operate is the existing Foreign Exchange Transactions Act, which already governs cross-border capital-flow reporting in South Korea generally, but which was not designed with virtual-asset-specific cross-border flows as its primary subject. The planned revision, as described, would adapt this existing framework specifically to address virtual-asset and stablecoin cross-border movement, rather than creating an entirely new standalone instrument. This is a meaningful distinction: amending an existing, well-established foreign-exchange law is likely to proceed on a different, potentially faster, legislative track than introducing new primary legislation, though the precise procedural path for this particular revision was not established.

The framing of the initiative, explicitly directed at combating illegal cross-border flows rather than at establishing a general reporting regime for all cross-border virtual-asset transfers, suggests the revision is likely to be targeted at enforcement and monitoring capability rather than at creating new compliance burdens for routine, lawful cross-border virtual-asset activity. That said, without visibility into draft text, this characterisation should be treated as an inference from the Bank of Korea's own framing rather than as an established feature of the eventual legal instrument.

Outlook

The principal marker to track for this domain is whether the Bank of Korea's Foreign Exchange Transactions Act revision moves from announcement to a formally published draft, at which point its scope, reportable-transaction thresholds, and proposed effective date would become assessable. A second marker is whether the cross-border monitoring framework described by the Bank of Korea is extended or cross-referenced within the Digital Asset Basic Act's Phase 2 legislative process, which would indicate the two workstreams, cross-border transfer monitoring and the core stablecoin-issuance framework, are being coordinated at the drafting stage rather than developed on separate, potentially inconsistent timelines.

Periodic update · new data 2026-10-12

Cross-Border Transfer

Korea's cross-border virtual-asset transfer regime is tightening structurally under an Enforcement Decree amendment to the Act on Reporting and Using Specified Financial Transaction Information. The amendment establishes a risk-tiered framework for transfers from domestic VASPs to overseas counterparties: transfers to overseas VASPs classified as low-risk are permitted without further restriction; transfers to other overseas VASPs, or to self-hosted wallets, are permitted only where the sender and recipient are confirmed to be the same person; and transfers to high-risk counterparties are prohibited outright. This risk-tiered structure commences alongside the zero-threshold domestic Travel Rule change, approximately six months after the decree's promulgation on 18 August 2026, placing the effective date around 19-20 February 2027.

A related provision requires domestic VASPs to apply internal suspicious-transaction monitoring for cross-border transfers of KRW 10 million or more to overseas VASPs or self-hosted wallets. Notably, an earlier draft of this provision reportedly contained a mandatory suspicious-transaction-report trigger at this threshold, but the final decree softened this to a provider-operated monitoring-system requirement rather than an automatic reporting obligation. This softening is a meaningful detail: it indicates the final rule gives VASPs more operational discretion in how they structure their cross-border monitoring systems than the mandatory-STR approach initially contemplated.

Confidence in both the risk-tiered structure and the monitoring threshold is Probable, since no direct primary fsc.go.kr or kofiu.go.kr notice for the Enforcement Decree amendment was retrieved this cycle; coverage instead relies on multiple Tier-3 crypto-compliance trade-press sources that corroborate each other on the substance of the change.

Outlook

The period to February 2027 is the implementation window for VASPs to build the risk-tiering and KRW 10 million monitoring-threshold systems this regime requires. The same-person-confirmation requirement for self-hosted-wallet transfers in particular represents an operationally demanding compliance burden, since it requires VASPs to verify counterparty identity for an entire category of transfers that previously required no such verification under the de minimis exemption.

C7 · Cross-Border & Travel Rule — Full Module Record0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

This module is intentionally unpopulated with original claims. AML/CFT surface coverage for Korea -- including Travel Rule administration and FIU KYC/STR enforcement -- is subscribed from the financial-integrity monitor pending fleet-wide consolidation, and is carried here as a placeholder only.

Horizon · 2027-02-19 (± a quarter)KR crypto Travel Rule zero-threshold transfer provisions commenceAdopted, not yet in force · Tier 3 source
C8 · AML/CFT Regime — Full Module Record0 sub-modules · 180 words · 4 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Green), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

## Commercial Activity Three distinct commercial developments mark an escalating pattern of consolidation and infrastructure investment in Korea's crypto sector this cycle. Hana Bank disclosed what is reported as an acquisition of an approximately $670 million stake in Dunamu, the operator of the Upbit exchange; the stage is announced/disclosed, with the amount reported in press coverage rather than confirmed via a company filing, and confidence is accordingly Uncertain. Separately, Kiwoom Securities reportedly entered negotiations — at the rumoured stage — to acquire a stake in Bithumb Korea Co., Ltd. via third-party new-share allocation; neither the investment size nor the resulting stake percentage has been disclosed, and this item carries Uncertain confidence given its rumoured status. The third development is BTQ Technologies' naming as security partner for MoonPay Korea's won-stablecoin infrastructure, applying post-quantum cryptography across issuance, distribution, self-custody wallets, settlement and merchant delivery; Woori Bank is the inaugural member of MoonPay Korea's KRW Stablecoin Consortium. This was announced 9 October 2026, with deal value not disclosed; confidence is Probable, reflecting press-release-sourced reporting via a trade outlet. Taken together, these three items show capital and infrastructure commitments flowing into Korea's crypto sector from multiple directions simultaneously: a major bank taking an equity position in an established exchange, a securities brokerage reportedly pursuing a stake in a second major exchange, and a stablecoin-infrastructure security partnership backed by a third bank. This is well-sourced, active commercial consolidation activity, even though two of the three items (the Hana Bank/Dunamu stake and the Kiwoom/Bithumb negotiation) rest on press reporting rather than confirmed company filings. — Outlook: Further disclosure or confirmation of deal terms for the Hana Bank/Dunamu stake and the Kiwoom Securities/Bithumb negotiation would be the natural next development to watch, given that both currently rest on unconfirmed or rumoured reporting. The broader pattern of traditional-finance entry into crypto-exchange ownership and stablecoin infrastructure is likely to continue given the multiple parallel tracks already visible this cycle.

Open gap — crypto-int-2No material KR crypto-sector commercial event (M&A, investment, JV, partnership, product launch) located this cycle; no dedicated deal-data vendor search was run.no under-indexing note recorded

No periodic updates recorded in this cycle

Sources and findings (5)
  1. T3Hana Bank / Dunamu — Commercial event: Hana Bank disclosed a reported acquisition of a ~$670 million stake in Dunamu (Upbit operator); stage = announced/disclosed; amount reported, not confirmed via a company filing. retrieved M4 non-binding (2× uses collapsed)
  2. T3Kiwoom Securities / Bithumb — Commercial event: Kiwoom Securities entered negotiations (reported, stage = rumoured/in talks) to acquire a stake in Bithumb via third-party new-share allocation; investment size and resulting stake percentage undisclosed. retrieved M3 non-binding
  3. T3BTQ Technologies / MoonPay Korea — Commercial event: BTQ Technologies (incorporated outside KR) named security partner for MoonPay Korea's won-stablecoin infrastructure (post-quantum cryptography); Woori Bank (KR) is the inaugural member of MoonPay Korea's KRW Stablecoin Consortium; announced 9 Oct 2026; deal value not disclosed. retrieved M3 non-binding
  4. T3Dunamu (Upbit) and Visa — Dunamu and Visa formed a strategic alliance to build new payment and financial products at the intersection of stablecoins, cross-border transfers and AI, presented as a joint roadmap at a Visa global event; announced partnership, no disclosed contract value. retrieved M3 non-binding in force new
No categories match.

Filters combine as OR inside a group and AND across groups.

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light. Not shown on this page.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-11-04. A year-precision row is never promoted into a tighter band.

Orphan deltas: 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 9 module(s), 54 finding(s), 52 source(s) in the cumulative register.

Audit trail

Machine checkChallenged on 24 Oct 2026: not settled (2 could not be checked). An automated, adversarial test run by a second model; no person has assessed the result.

Think something on this page is wrong? Report an error.