Crypto Overview in South Korea

Regulatory data is for informational purposes only and may not reflect the most current legal developments. Always consult qualified professionals before making decisions.

Legal Classification and Regulatory Framework

Cryptocurrency Status

South Korea classifies cryptocurrencies as “virtual assets” under the Virtual Asset User Protection Act (VAUPA, 가상자산이용자보호법), which took effect on July 19, 2024. The law defines a virtual asset broadly as an electronic certificate with economic value that can be traded or transferred electronically. Cryptocurrencies are not recognized as legal tender or currency.

Different regulatory frameworks apply depending on a token’s function. Tokens meeting the definition of a “financial investment instrument” under the Financial Investment Services and Capital Markets Act (FSCMA) are regulated as securities. Tokens used primarily as payment instruments fall under the Electronic Financial Transactions Act. NFTs are generally excluded from virtual asset regulation unless they are mass-issued or function as payment instruments.

The Digital Asset Basic Act (DABA), filed in the National Assembly in June 2025, is intended as a second legislative layer to address gaps left by VAUPA. As filed, DABA would establish licensing requirements for stablecoin issuers, set reserve and disclosure standards, and extend the regulatory perimeter to NFTs in commercial use, DeFi activities, and tokenized financial instruments. The bill replaces the term “virtual assets” with “digital assets” in its scope and would give the FSC primary authority over issuance-related oversight. As of May 2026, DABA remains under parliamentary consideration, with ongoing inter-agency disagreement between the FSC and the Bank of Korea over which body should govern won-backed stablecoin issuance.

Tax Treatment

South Korea enacted a 22% tax on individual cryptocurrency gains in 2020, calculated as 20% national income tax plus 2% local income tax. Implementation was delayed three times from its original January 2022 start. The Ministry of Economy and Finance confirmed January 1, 2027 as the definitive start date, with first filings expected in May 2028. The National Tax Service began building administrative infrastructure in April 2026.

The tax applies to annual profits above a KRW 2.5 million exemption threshold. Taxable income includes gains from trading, mining, staking, and airdrops. Gifted tokens remain subject to gift tax under existing rules. Corporate income from digital assets is taxable under standard corporate tax rules up to 25%.

Regulatory Oversight

Multiple agencies share oversight. The Financial Services Commission (FSC, 금융위원회) is the primary policymaker, setting VASP licensing rules and consumer protection standards; it established the Virtual Asset Committee in November 2024. The Korea Financial Intelligence Unit (KoFIU, 금융정보분석원), under the FSC, handles VASP registration and AML supervision. The Financial Supervisory Service (FSS, 금융감독원) conducts enforcement, investigating market manipulation and abnormal transactions; it committed in early 2026 to intensify scrutiny of coordinated manipulation and liquidity-gate schemes. The Korea Internet and Security Agency (KISA, 한국인터넷진흥원) issues mandatory Information Security Management System (ISMS) certifications. The Bank of Korea (BOK, 한국은행) oversees monetary policy, foreign exchange, and CBDC development through Project Hangang.

Business Environment

Banking Relationships

South Korea’s banking requirements for crypto businesses are among the most stringent in Asia. Exchanges offering fiat-to-crypto trading must secure a real-name verification bank account partnership, linking users’ exchange accounts directly to personal bank accounts at the partner institution.

As of early 2026, only five exchanges hold active partnerships: Upbit with K-Bank (approximately 69-80% domestic trading volume), Bithumb with KB Kookmin Bank (transition completed March 2025, on a cautious six-month renewable term, approximately 25% share), Coinone with Kakao Bank, Korbit with Shinhan Bank, and Gopax with Jeonbuk Bank. Exchanges without a fiat banking partner can only operate crypto-to-crypto pairs.

The FSC’s February 2025 institutional access roadmap provided a structured opening: nonprofits gained fiat crypto account access in mid-2025, followed by a corporate and professional investor pilot, with broader corporate participation targeted for 2026. Upbit came under direct FSC scrutiny in 2025, with regulators finding over 700,000 compliance violations during a license review process.

Innovation Support

The Busan Blockchain Regulation-Free Zone, designated under the Special Act on Regulation-Free Zones, has been extended to 2027, permitting stablecoin payment experiments within its perimeter. In anticipation of the DABA framework filed in June 2025, four major Korean banks including KB Kookmin, Shinhan, Hana, and Woori are preparing KRW-pegged stablecoin products, pending enactment and finalization of governance regulations.

South Korea participates in BIS Project Agora, a wholesale cross-border CBDC initiative involving seven central banks, since April 2024. The government’s 2026 Economic Growth Strategy explicitly includes the introduction of spot Bitcoin ETFs, with the FSC preparing implementation measures covering custody standards, valuation methodology, and investor protection requirements. Legislative amendments to the Capital Markets Act are required before approval can proceed.

South Korea’s technology sector, including firms such as Kakao, Naver, and LG CNS, is developing blockchain and digital asset products in anticipation of the DABA framework.

Crypto License in South Korea

South Korea operates a mandatory VASP registration regime through the Korea Financial Intelligence Unit (KoFIU). Any entity operating a crypto exchange, custody service, broker, or related virtual asset business targeting Korean users must complete KoFIU registration under the Act on Reporting and Using Specified Financial Transaction Information (SFTIA) before commencing operations. As of December 2025, KoFIU had 27 registered VASPs. Foreign platforms operating without registration are treated as illegal operators: 16 exchanges including Poloniex, CoinEX, KuCoin, and Pionex were formally flagged in December 2025, with domestic access blocked and virtual asset transfers suspended by administrative guidance.

Licensing Requirements

VASP registration with KoFIU requires three core preconditions. First, the applicant must obtain an Information Security Management System (ISMS) certification from the Korea Internet and Security Agency (KISA). ISMS certification covers security controls, incident response, and system reliability; the process typically requires six to eight months. Second, fiat-capable exchanges must establish a real-name verified bank account partnership with a domestic bank, linking user accounts at the exchange to accounts at the partner bank. Third, the applicant must appoint a Money Laundering Reporting Officer (MLRO), maintain comprehensive AML and CFT policies, file Suspicious Transaction Reports with KoFIU, and implement a compliant Travel Rule system.

Under VAUPA (effective July 2024), all registered VASPs must additionally hold at least 80% of customer virtual assets in cold storage, maintain liability insurance covering at least 5% of hot wallet assets (minimum KRW 3 billion for major exchanges), retain transaction records for 15 years, and segregate customer fiat deposits at partner banks. These obligations apply to all registered exchanges regardless of size.

Authorized Activities

Registered VASPs may operate spot exchange services for cryptocurrency pairs and, if holding a real-name bank account, fiat-to-crypto conversion. The VAUPA framework prohibits market manipulation, wash trading, and insider trading, carrying penalties of at least one year imprisonment or fines of three to five times the illicit gain. VASPs are prohibited from transacting with unregistered overseas providers and must verify all counterparty VASP registrations before executing transfers.

Token issuance remains restricted under the ICO ban in place since September 2017. The pending DABA bill is expected to create a formal issuance licensing pathway if enacted and once implementing regulations are finalized, potentially lifting the ban for compliant issuers. Under the DABA as filed, stablecoin issuance would require a separate stablecoin issuer license with reserve backing, disclosure, and audit requirements attached.

Application Process and Timeline

Applicants begin with ISMS certification through KISA, which is the longest-lead element. The ISMS assessment process evaluates over 100 control items across physical, logical, and operational security domains, and typically requires six to eight months from application to certification. While ISMS certification is underway, entities can prepare their KoFIU registration dossier, including legal structure documentation, beneficial ownership disclosure, MLRO appointment, AML policy documentation, and (for fiat-capable exchanges) a letter of intent or agreement from a partner bank.

KoFIU processes completed registration submissions and issues a registration confirmation. Registered entities must file regular suspicious transaction reports and submit periodic compliance reports to KoFIU. Annual ISMS re-certification is required to maintain registration. Violations of VAUP obligations carry administrative fines and may result in registration suspension or criminal referrals.

Market Characteristics

Adoption Patterns

South Korea has one of the most active retail cryptocurrency markets globally, with over 13 million registered virtual asset investors and more than 27% of adults aged 20 to 50 holding digital assets. Domestic trading volumes frequently rival markets of substantially larger economies. The market is characterized by intense retail participation and historically produced the “Kimchi Premium,” where prices on Korean exchanges traded above global averages due to capital controls that limited arbitrage.

Capital outflows have been substantial, with an estimated $110 billion flowing to overseas exchanges in 2025, and KRW 56 trillion leaving the domestic market in the first quarter of 2025 alone. This outflow reflects demand that current regulatory constraints have not fully accommodated. The FSC’s institutional access roadmap and planned spot ETF framework are designed to bring more activity into regulated domestic channels.

Industry Focus

The domestic exchange market is heavily concentrated: Upbit commands approximately 69-80% of trading volume, while Bithumb holds around 25% and Coinone approximately 3%. Coinone posted three consecutive years of operating losses and carried out staff reductions, prompting acquisition speculation. Only Upbit and Bithumb operate profitably at scale. The banking partnership bottleneck reinforces market concentration, as securing real-name verification bank agreements requires extensive bank due diligence and carries reputational risk for incumbent banks.

Project Hangang, the Bank of Korea’s CBDC initiative, completed Phase 1 in June 2025, with 81,000 digital wallets opened, 114,880 transactions processed, and KRW 1.64 billion converted across seven participating banks. Phase 2 launched in March 2026, expanding to nine banks and introducing live government subsidy disbursement, P2P transfers, and biometric approvals. The BOK positions deposit tokens as an intermediate form between a CBDC and stablecoins, linked to potential routing of a portion of the government’s budget through digital payment infrastructure.

Regulatory Evolution

South Korea’s approach has shifted from the 2017 ICO ban and early market skepticism toward a layered statutory framework. VAUPA (July 2024) established the first dedicated user-protection layer; the pending DABA bill (filed June 2025) would extend coverage to issuance, stablecoins, and digital asset categories outside pure exchange activity once enacted.

South Korea was upgraded by FATF from enhanced follow-up to regular follow-up in September 2024, reflecting improvements in AML and CFT controls. The country is compliant or largely compliant on 33 of 40 FATF Recommendations and is not on any FATF watchlist or grey list. In 2025, the Foreign Exchange Transactions Act was amended to bring cross-border virtual asset transfers under formal forex reporting requirements, closing a monitoring gap for capital flows.

Near-term regulatory milestones include progress on the DABA bill in the National Assembly, FSC approval framework for spot Bitcoin ETFs, the January 2027 crypto tax commencement, and resolution of the FSC-BOK governance dispute on won-backed stablecoins. The trajectory is toward gradual institutional opening and alignment with global financial standards, with compliance enforcement intensifying in parallel.