South Korea
Is crypto legal in South Korea? (2026)
Yes — cryptocurrency is legal in South Korea. The Virtual Asset User Protection Act, in force since July 2024, governs the market, with a second-phase Digital Asset Basic Act in drafting. Oversight sits with the Financial Services Commission (FSC) and KoFIU. Full details — governing law, licensing, tax and enforcement history — follow below (last reviewed 2026-05-03).
Executive summary
South Korea is one of the most active retail cryptoasset markets globally — over 7 million Korean adults hold cryptoassets according to Financial Services Commission data, more than 13% of the population. The Virtual Asset User Protection Act, enacted October 2023 and effective July 19, 2024, was the foundational piece of South Korean crypto-specific legislation, completing the framework begun by 2020 amendments to the Specific Financial Information Act (Tokso Geum Yong Geo Rae Beob, the Korean AML statute). The Financial Services Commission (FSC) and its supervisory arm Financial Supervisory Service (FSS) administer the regime alongside the Korea Financial Intelligence Unit (KoFIU). Travel Rule has been in force since March 2022 — earlier than most major jurisdictions. Upbit, Bithumb, Coinone, Korbit and Gopax are the FSC-registered Virtual Asset Service Providers; smaller exchange consolidation has accelerated post-LK99 (the LK99 superconductor token frenzy of mid-2023). The won-stablecoin debate dominates 2026 policy under the Lee Jae-myung administration's expressed openness to KRW-stablecoin issuance. South Korea's structural advantages are enormous retail demand, sophisticated technology adoption, deep capital markets and world-leading mobile-payment infrastructure; the constraints are real-name banking system requirements, restrictive listing rules and historically tight regulatory posture.
Regulatory architecture overview
South Korean financial regulation centres on the Financial Services Commission (Geum Yung Wee, FSC), an independent commission under the Prime Minister that sets policy and writes Enforcement Decrees, and its supervisory arm the Financial Supervisory Service (Geum Yung Gam Dok Won, FSS) that handles day-to-day supervision and inspection. The Korea Financial Intelligence Unit (KoFIU) is the Korean FIU and AML supervisor, situated under the FSC. The Bank of Korea (BoK) handles monetary authority and runs CBDC research; BoK's Phase 2 CBDC pilot involving multiple commercial banks and the central bank concluded successful technical testing in late 2024 with retail expansion under consideration. The Ministry of Economy and Finance (MOEF) coordinates fiscal policy. The National Tax Service (Guk Se Cheong, NTS) administers tax. The Korea Communications Commission and Personal Information Protection Commission (PIPC) handle data privacy under PIPA. The Prosecutor's Office and National Police Agency handle financial crime; the Korean prosecutorial service has been particularly active in cryptoasset fraud cases. The Korea Securities Depository (KSD) operates centralised securities depository services. The Korea Internet & Security Agency (KISA) handles cybersecurity. South Korean regulatory style under FSC has historically been characterised by detailed administrative rules, restrictive listing approval, real-name banking infrastructure (every Korean Won deposit/withdrawal at a registered VASP must use a verified bank account in the customer's real name), and substantial coordination with the Korean Bankers Federation through the Korean Federation of Banks for technical implementation.
Crypto-specific framework
The cornerstone is the Virtual Asset User Protection Act (Ga Sang Ja San Yi Yong Ja Bo Ho Beob), enacted by the National Assembly in July 2023, signed October 2023, effective July 19, 2024. The Act establishes user protection requirements, virtual-asset service provider obligations, market-abuse prohibitions, and substantive regulatory authority. Key provisions: registered VASPs must segregate customer assets in trust accounts at qualified financial institutions; cold-storage requirements (at least 80% of customer crypto in cold storage); insurance or reserve requirements covering operational risks; market-abuse prohibitions including manipulation, insider dealing on cryptoasset disclosures and use of undisclosed material information (penalties up to 20 years imprisonment plus disgorgement of three-to-five-times illicit profit); enhanced disclosure requirements for VASP operations. The pre-existing 2020 amendments to the Specific Financial Information Act (Tokso Geum Yong Geo Rae Beob) require VASP registration with KoFIU as a condition for operating in Korea — registration requires demonstrated AML/CFT capability, real-name verified bank account contracts with a Korean financial institution (the most operationally restrictive single requirement in global crypto), Information Security Management System (ISMS) certification, and qualified senior management. Travel Rule has applied since March 25, 2022, requiring transmission of full originator and beneficiary information for transfers above KRW 1 million (~$700) and additional verification for transfers between VASPs and self-hosted wallets. The Lee Jae-myung administration has indicated support for a forthcoming Phase 2 framework expanding cryptoasset issuance regulation, security-token offerings (the STO framework was finalised by FSC in February 2024), KRW-stablecoin issuance pathway, and enhanced cross-border arrangements.
Recent enforcement actions
South Korean enforcement on cryptoasset matters is among the most aggressive globally, characterised by extensive prosecutorial action and substantial criminal penalties. The Terra/LUNA collapse in May 2022 produced sustained Korean prosecutorial action against Terraform Labs founder Do Kwon (extradited from Montenegro to the United States on December 31, 2024 after a prolonged extradition battle; he pleaded guilty in SDNY proceedings in August 2025 and was sentenced to 15 years in prison in December 2025). The 2017 Bithumb hack (~$30M) and the 2018 Coincheck-comparable Coinrail breach produced extensive enforcement and platform-failure litigation. The 2023 LK99 superconductor token frenzy produced rapid market-manipulation enforcement. FSS supervision has resulted in multiple administrative measures against VASPs through 2024-2025 including operational improvement orders. The 2024 Hashed Tribe and FSC investigations of OG Korean crypto venture funds produced AML-related findings. KoFIU and FSC published a Comprehensive Investigation Plan for 2025 focusing on cross-border, illicit and unlicensed VASP activity — over 100 investigations launched. The 2024-2025 prosecutorial focus on cryptoasset Ponzi and unauthorised-securities cases produced multiple convictions with sentences of 7-15 years for major fraud schemes. The Seoul Central District Court has emerged as a specialised commercial court for cryptoasset disputes; the Supreme Court of Korea ruled in 2024 on cryptoasset characterisation in tax and inheritance contexts. Cross-border coordination with US DOJ (extensively in Terra/LUNA), Singapore MAS, FSA Japan and Hong Kong SFC is active. KoFIU 2024 reports show approximately 89,000 cryptoasset-related Suspicious Transaction Reports.
Tax treatment
South Korean cryptoasset tax treatment has been one of the most politically contested areas of Korean tax policy. The original cryptoasset capital-gains tax framework under amendments to the Income Tax Act in late 2020 was scheduled to take effect January 2022 with a 20% rate above a KRW 2.5 million annual exemption — but the implementation has been delayed multiple times due to political pressure: postponed to 2023, then to 2025, and most recently in late 2024 the National Assembly delayed implementation again to January 2027 (Lee Jae-myung administration confirmed continuation of the postponement after taking office in 2025). As of April 2026, individual cryptoasset capital gains remain effectively untaxed for retail investors — the exemption threshold remains KRW 2.5 million (~$1,800) of annual gains, with amounts above taxed as 'other income' at a combined 22% rate (20% income tax plus 2% local surtax) when the tax does eventually take effect. Until then, individual cryptoasset gains are not subject to capital-gains tax; only inheritance/gift tax and limited income tax on receipts characterised as 'other income' apply to certain edge cases. For corporations, cryptoasset gains form part of taxable income subject to corporate income tax at 9-25% depending on income brackets plus local taxes. Mining, staking and DeFi activity carried on as a business is taxable. The Korean NTS has issued multiple interpretive rulings on cryptoasset taxation. The 2025 Tax Law Reform Bill under National Assembly consideration includes proposals classifying cryptoasset gains as 'other income' taxed at a combined 22% rate (with a KRW 2.5 million exemption) when the regime activates in 2027. South Korea implemented the OECD CARF reporting through 2025 amendments with reporting cycles beginning 2027 for 2026 data; KoFIU and NTS access to VASP transaction data is broad.
Banking and on-ramp infrastructure
South Korean banking access for VASPs is structurally restricted by the real-name banking requirement. The Korean Won-VASP banking ecosystem is dominated by five banks with verified-account contracts with the major exchanges: KB Kookmin Bank (Coinone, Korbit), NH Nonghyup Bank (Bithumb, formerly), Shinhan Bank (Korbit historically, Gopax), Woori Bank, and Industrial Bank of Korea. K Bank (a digital bank) has the contract with Upbit, the dominant Korean exchange — the K Bank-Upbit relationship is the single most consequential commercial banking relationship in Korean crypto. Each registered VASP must have at minimum one verified-account banking contract; smaller exchanges have struggled to obtain such contracts due to bank risk-management caution, contributing to consolidation toward the top four-five exchanges. The major Korean banks — KB Kookmin, Shinhan, Hana, Woori, NH Nonghyup, IBK — have explored institutional cryptoasset services through subsidiaries with KB and Shinhan operating cryptoasset custody licenses. KB Kookmin Bank operates KB Kookmin Bank Cryptoasset Custody. Shinhan operates parallel custody. The 2025 indications from FSC that bank-affiliated cryptoasset custody and possibly stablecoin issuance will be liberalised could materially shift this. Stablecoin on-ramps support USDT (the most-traded cryptoasset on Korean exchanges), USDC, and the developing KRW-stablecoin market — Lee Jae-myung administration policy explicitly supports KRW-stablecoin issuance with regulatory framework expected through 2026. Card programs operate through major Korean credit-card processors. Identity verification operates through the Korean Resident Registration Number system, mobile authentication via NICE/KCB, and emerging mobile-driver's-licence digital identity infrastructure.
Court-tested precedents
Korean civil-law jurisprudence on cryptoassets is detailed and continues to develop. The Supreme Court of Korea ruling in 2018 in case 2017Do14333 confirmed cryptocurrency as property capable of seizure under Korean criminal procedure. The 2021 Supreme Court ruling addressed cryptoasset characterisation in tax contexts. The 2022-2024 Terra/LUNA proceedings have produced extensive Seoul Central District Court rulings on virtual-asset securities characterisation, market manipulation, and platform liability. The 2023 Constitutional Court of Korea consideration of constitutional questions related to the Specific Financial Information Act framework upheld FSC regulatory authority. The 2024 Supreme Court ruling in inheritance-tax case confirmed cryptoasset inclusion in inheritance tax base at fair-market value at death. The Seoul Central District Court has emerged as the specialised commercial court for cryptoasset disputes with judges including Judge Park-related panels developing specialised expertise. The 2025 Court of Appeals ruling in Bithumb-customer civil class action produced detailed reasoning on platform-customer contractual obligations and operational-failure liability. The Korean Commercial Arbitration Board (KCAB) handles many crypto commercial disputes via arbitration. The 2024 Supreme Court ruling on cryptoasset trust characterisation under Korean trust law (Sin-tak Beob) provided foundational guidance on customer-asset segregation arrangements that VAUPA now mandates. Class-action proceedings for VASP failures and platform breaches produce ongoing rulings on consumer protection.
Regulatory roadmap
The 2026-2028 Korean roadmap is publicly mapped through FSC Strategic Plans, FSS Supervisory Plans and Lee Jae-myung administration policy statements. The Phase 2 cryptoasset framework — the second-stage legislation building on the Virtual Asset User Protection Act — is expected to be introduced to the National Assembly in 2026. Key elements under FSC consultation include: cryptoasset issuance regulation (currently absent from VAUPA which focuses on user protection rather than issuance); KRW-stablecoin issuance pathway with bank or qualified-issuer authorisation; security-token offering (STO) framework expansion building on the February 2024 STO Framework; cross-border arrangements with FSA Japan, MAS Singapore, FCA UK, FSC Hong Kong; and DeFi regulatory approach. The Lee Jae-myung administration's pro-crypto stance includes campaign commitments on stablecoin liberalisation, cryptoasset ETF approval (currently prohibited in Korea — spot Bitcoin ETF and spot Ether ETF approval is widely anticipated through 2026), and pension fund crypto allocation expansion. The Bank of Korea CBDC research moved from pilot Phase 2 to expanded testing in 2025; retail CBDC issuance is under consideration. The 2026-2027 cryptoasset capital-gains tax implementation is a major deliverable. The Korean Bankers Federation and KFB technical infrastructure for cryptoasset custody and KRW-stablecoin settlement is developing through 2026. KISA cybersecurity standards for VASPs are being expanded. Cross-border won-stablecoin reciprocal access negotiations with Japan (yen-stablecoin) and other Asian jurisdictions are politically active.
Practical implications for operators
Operating a crypto business in South Korea requires Virtual Asset Service Provider registration with KoFIU under the Specific Financial Information Act and full compliance with the Virtual Asset User Protection Act. The single operational gate is the real-name verified bank account contract — without a contract from a major Korean bank, fiat KRW operations are impossible. Securing a verified-account contract is the most difficult practical step in Korean crypto entry; the existing five-six contracted relationships are stable and new entrants face substantial bank-side caution. VASP registration timelines under KoFIU have averaged 6-12 months but the bank-contract bottleneck typically extends total launch time to 18-30 months for new entrants. Initial paid-up capital is not specifically prescribed but practical capital expectation including operating runway is KRW 30 billion-KRW 100 billion ($22M-$73M) for credible candidates — substantially higher than most jurisdictions due to Korean retail-market scale and operational requirements. Substance requirements include Korea-incorporated entity (typically Joo-sik Hoe-sa, Co. Ltd.), Korea-resident senior officers (Representative Director and Compliance Officer with relevant industry experience), ISMS certification (Korean cybersecurity certification, 6-12 month process), AML/CFT programme aligned with KoFIU rules, customer-asset segregation in trust accounts (mandatory under VAUPA), and ongoing audited financial statements. Realistic ongoing compliance cost is KRW 10 billion-KRW 50 billion annually for a major operation. Listing rules under VAUPA and self-regulatory cooperation through Digital Asset eXchange Association (DAXA) — the major exchanges' SRO — substantively limit token whitelisting through detailed listing-review processes. Talent depth in Seoul is excellent for fintech crossover from Naver Pay, Kakao Pay, Toss and the major banks; native crypto-engineering depth at Upbit (Dunamu), Bithumb, Hashed and other Korean operators is substantial. Once authorised, KoFIU registration is a credible Asian credential but does not automatically passport to other jurisdictions. The combination of 7M+ cryptoasset holders, sophisticated retail demand, world-leading mobile-payment infrastructure, and prospective ETF and KRW-stablecoin liberalisation makes Korea a strategically critical Asian market despite operational entry friction.
Notable licensees
- Upbit (Dunamu)
- Bithumb
- Coinone
- Korbit
- Gopax
- KB Kookmin Bank Custody
- Shinhan Custody
Top regulators
- FSC (Financial Services Commission)
- FSS (Financial Supervisory Service)
- KoFIU (Korea Financial Intelligence Unit)
- Bank of Korea
- NTS (National Tax Service)
- PIPC (Personal Information Protection Commission)
- KISA
Watch points
- Phase 2 cryptoasset framework legislation expected 2026
- KRW-stablecoin issuance pathway under Lee Jae-myung administration
- Spot Bitcoin and Ether ETF approval expected 2026
- Cryptoasset capital-gains tax implementation January 2027
- Bank of Korea CBDC retail expansion consideration
TL;DR
Asia's most active retail cryptoasset market — VAUPA effective July 2024, real-name banking system, 7M+ cryptoasset holders, KRW-stablecoin and ETF liberalisation pending under Lee Jae-myung administration.
Get DeFi Intel research in your inbox
Weekly long-form coverage of papers, incidents, jurisdictions, chains, tokens and the people building them. Free tier covers headlines; Pro adds the analyst-grade breakdowns.