Is crypto legal in South Korea? Rules & regulation (2026)
Crypto is developing in South Korea.
Crypto is legal in South Korea and one of the most active markets globally, but the regulatory framework is being built in phases. Phase 1 — VAUPA (user asset protection, market-abuse rules) and the SFIA/KoFIU VASP registration regime — is fully in force, and a Capital Markets Act amendment enabling security-token offerings was passed by the National Assembly on 15 January 2026 (takes effect January 2027). Phase 2 — the comprehensive Digital Asset Basic Act covering stablecoins, ICOs, disclosure and business-conduct rules — has been repeatedly delayed by disputes between the FSC and the Bank of Korea over stablecoin issuance, and is currently expected to move only in late 2026 or 2027.
Legal framework
Virtual Asset User Protection Act (VAUPA, Act No. 19563, in force 19 July 2024) and the Act on Reporting and Use of Specific Financial Transaction Information (SFIA / VASP registration regime), supervised by the Financial Services Commission (FSC), Financial Supervisory Service (FSS) and Korea Financial Intelligence Unit (KoFIU). A second-phase Digital Asset Basic Act covering stablecoins, disclosure and market structure is still in the National Assembly.
Status by sub-area
Stablecoins
ProposedThere is no in-force stablecoin regime. The Digital Asset Basic Act, which would license stablecoin issuers with 100%+ high-quality reserves, redemption rights and KRW 50 billion (~US$35 million) minimum capital, remains stalled in the National Assembly due to a FSC vs. Bank of Korea dispute over whether only banks may issue KRW-pegged stablecoins.
Still pending: Digital Asset Basic Act stalled on FSC vs. Bank of Korea KRW-pegged stablecoin dispute
Exchanges / VASP
In forceExchanges and other VASPs must register with the Korea Financial Intelligence Unit (KoFIU) under the SFIA, obtain ISMS certification and (for KRW markets) real-name banking arrangements, and comply with VAUPA conduct and reserve rules. FSC amendments effective 20 August 2026 add major-shareholder, financial-condition, social-credibility and capacity screens.
Token Offerings
PartialUtility-token ICOs have been prohibited since a September 2017 FSC blanket ban that remains in effect, though the FSC has signalled a plan to reopen corporate ICOs under structured disclosure rules. Security-token offerings (STOs) received a formal legal foundation on 15 January 2026 through amendments to the Capital Markets Act and Electronic Securities Act, but those amendments only take effect in January 2027.
Still pending: STO regulatory amendments to Capital Markets Act and Electronic Securities Act effective January 2027
Custody
In forceCustody rules under VAUPA and its FSC implementing regulations are fully operational: VASPs must segregate customer crypto from proprietary assets, keep at least 80% of customer holdings in cold wallets, hold customer fiat deposits at licensed Korean banks, and maintain insurance or reserve funds against hacking/incidents.
DeFi
UnclearThere is no dedicated DeFi regime yet. The Korea Institute of Finance (KIF) submitted a report to the FSC in the first half of 2026 recommending that DeFi be classified as an 'unlicensed virtual asset operator', subjected to AML/CFT obligations and — in some cases — blocked from Korean users; the FSC has said it will move to a function-based regulatory model covering exchange, custody, brokerage and asset management activities regardless of technology.
Still pending: FSC function-based regulatory model for DeFi exchange, custody, brokerage, and asset management activities
Tax
ProposedThere is currently no capital-gains tax on individual crypto trading in Korea. A 22% tax (20% national income tax plus 2% local surtax) on annual gains above KRW 2.5 million, originally scheduled for 2021, was postponed successively to 2023, 2025 and now to 1 January 2027 under an agreement reached in December 2024. VAT does not apply to virtual-asset transfers, and airdrops/mining/staking rewards face uncertain treatment pending the new rules.
Still pending: 22% capital gains tax (20% national + 2% local) on crypto gains >KRW 2.5M effective 1 January 2027
How to get a crypto license in South Korea
To provide crypto-asset services in South Korea you need registration as a Virtual Asset Service Provider (VASP), supervised by the Financial Services Commission (FSC) and its Financial Intelligence Unit (FIU), under the Act on Reporting and Using Specified Financial Transaction Information and the Virtual Asset User Protection Act (2024).
- Authority
- the Financial Services Commission (FSC) and its Financial Intelligence Unit (FIU)
- License required
- registration as a Virtual Asset Service Provider (VASP)
- Framework / law
- the Act on Reporting and Using Specified Financial Transaction Information and the Virtual Asset User Protection Act (2024)
- Minimum capital
- no single fixed minimum, but real-name bank accounts, an ISMS security certification and strict AML controls are mandatory
- Timeline
- typically 6+ months; the real-name account and ISMS requirements are the main gating steps
- Cost
- registration costs plus substantial security-certification (ISMS) and compliance expenditure
- Passporting
- No: a South Korean VASP registration is national.
South Korea's regime is strict: exchanges need real-name banking partnerships and ISMS certification, and the User Protection Act adds custody and reserve rules.
Key points: crypto & digital assets in South Korea
Phase 1 law in force (VAUPA)
The Virtual Asset User Protection Act took effect on 19 July 2024, requiring VASPs to segregate customer deposits at banks, hold at least 80% of customer crypto in cold wallets, maintain insurance/reserve funds, and prohibiting insider trading, market manipulation and other unfair trading practices, with FSC/FSS supervisory and sanction powers.
VASP registration under SFIA
Virtual-asset service providers must register with KoFIU under the Specific Financial Information Act, obtain ISMS certification and real-name banking accounts for KRW markets, and comply with CDD/STR/travel-rule obligations; 2026 amendments to the entry rules add major-shareholder, financial-condition, social-credibility and capacity reviews, tightening market access.
Digital Asset Basic Act still pending
The ruling Democratic Party's Digital Asset Basic Act, which would authorize won-pegged stablecoin issuers (100%+ reserves, 50bn KRW capital, redemption rights) and set comprehensive disclosure/market-conduct rules, has been delayed by an FSC vs. Bank of Korea dispute over whether only banks (BOK position) or fintechs (FSC position) may issue stablecoins; passage is not expected before late 2026.
Security tokens legalized, ICOs still banned but under review
On 15 January 2026 the National Assembly passed amendments to the Capital Markets Act and Electronic Securities Act creating a legal foundation for STOs (effective January 2027). The 2017 blanket ban on utility-token ICOs remains in force, but the FSC is preparing to permit corporate ICOs under structured disclosure rules.
Corporate crypto access opened
The FSC ended a nine-year de facto ban on corporate/institutional crypto trading in 2025: listed companies and registered professional investors (~3,500 entities) may invest up to 5% of equity capital in the top-20 crypto assets traded on Korea's five major exchanges, with split-trading and price-limit safeguards.
Cross-border crypto brought under FX law
A revised Foreign Exchange Transactions Act, approved by the Cabinet on 2 June 2026, brings cross-border crypto transfers under FX rules: firms must register with the Ministry of Economy and Finance and report transactions through the Bank of Korea's FX network; effective December 2026.
Crypto license in South Korea: FAQ
Do you need a license to run a crypto business in South Korea?
Yes. To provide crypto-asset services in South Korea you need registration as a Virtual Asset Service Provider (VASP), supervised by the Financial Services Commission (FSC) and its Financial Intelligence Unit (FIU), under the Act on Reporting and Using Specified Financial Transaction Information and the Virtual Asset User Protection Act (2024).
Which authority issues crypto licenses in South Korea?
The Financial Services Commission (FSC) and its Financial Intelligence Unit (FIU).
How much does a crypto license cost in South Korea?
Registration costs plus substantial security-certification (ISMS) and compliance expenditure.
How long does it take to get a crypto license in South Korea?
Typically typically 6+ months; the real-name account and ISMS requirements are the main gating steps.
Timeline of decisions
- Decision
- Decision
- Decision
- Decision
- Decision
- Decision
- Decision
- Decision
- Law
- Law
- Decision
- Decision
- Decision
- Decision
- Decision
- Law
- Decision50,000-Signature Petition Triggers Assembly Debate on Scrapping 22% Crypto Tax
A citizen petition exceeding 50,000 signatures forced South Korea's National Assembly to formally deliberate repealing the planned 22% crypto capital gains tax before its January 2027 start date; the main opposition party introduced a full-repeal bill, leaving the policy's fate unresolved as of May 2026.
The Paypers
- DecisionDigital Asset Basic Act Stalls Over Stablecoin Issuer Deadlock
South Korea's sweeping Digital Asset Basic Act, designed to replace the 'virtual asset' terminology with 'digital asset,' unify issuance and trading rules, and require 100% reserve backing for stablecoins, stalled in parliament as the Bank of Korea and the FSC clashed over whether only bank-majority-owned entities may issue stablecoins, pushing passage into 2026 at the earliest.
CoinDesk
- EnforcementFSS Fines Upbit Approximately $25 Million
South Korea's Financial Supervisory Service issued Upbit, the country's dominant crypto exchange, a roughly $25 million fine, one of the first major enforcement actions under the post-VAUPA supervisory framework; Upbit announced it was assessing an appeal.
CoinDesk
- LawDigital Asset Basic Act (DABA) Introduced to National Assembly
Representative Byung-deok Min introduced the General Act on Digital Assets, proposing a comprehensive umbrella law covering 12 digital-asset business domains with tiered licensing, 100% stablecoin reserve requirements, and unified FSC supervision, designed to replace the current patchwork of VAUPA and AML rules with a single coherent statutory framework.
Shin & Kim Law Firm Newsletter
- Law · officialVirtual Asset User Protection Act Enters Full Force
South Korea's first comprehensive crypto consumer-protection statute took effect after a one-year implementation grace period, requiring exchanges to hold at least 80% of user crypto in cold storage, segregate client cash in licensed bank accounts, maintain insurance or reserve funds against hacks, and criminalising market manipulation and insider trading with penalties up to life imprisonment for large-scale offences.
Library of Congress – Global Legal Monitor
- Law · officialNational Assembly Enacts Virtual Asset User Protection Act
Parliament passed South Korea's first standalone crypto statute, consolidating 19 pending bills, granting the FSC supervisory and penalty powers over all VASPs and establishing enforceable rules on user asset safekeeping, market-manipulation prohibitions, and mandatory suspicious-activity reporting; the legislation was directly fast-tracked in response to the Terra/Luna and FTX collapses.
Financial Services Commission (FSC)
- IncidentTerra/Luna Collapse Erases ~$40 Billion; FSC Launches Emergency Exchange Inspections
The algorithmic stablecoin TerraUSD (UST) lost its peg in May 2022, dragging Luna to near-zero and wiping an estimated $40-45 billion in market value within days; the FSC and FSS immediately launched emergency on-site inspections of all major domestic exchanges and placed comprehensive crypto legislation on a parliamentary fast-track.
Decrypt
- LawFATF Travel Rule Enters Force for All Korean VASPs
Amendments to the Act on Reporting and Using Specified Financial Transaction Information brought South Korea's FATF Travel Rule into operation, requiring VASPs to collect and transmit sender and beneficiary identity data on transfers above ₩1 million (~$750), making Korea one of Asia's earliest Travel Rule jurisdictions.
Notabene – Travel Rule Country Guide (citing FSC/KoFIU directives)
- Law · officialRevised Special Financial Information Act Enters Force, First Statutory VASP AML Regime
Amendments to the Act on Reporting and Using Specified Financial Transaction Information took effect, introducing South Korea's first statutory AML/CFT framework for crypto: VASPs must register with KoFIU, obtain ISMS information-security certification, partner with a real-name-verified bank, and comply with customer identity verification and suspicious-transaction reporting obligations; existing VASPs had until September 24, 2021 to comply or cease operations.
Financial Services Commission (FSC)
- Guidance · officialReal-Name Bank Account System Mandated for All Crypto Trading
Following FSC-directed inspections of six major banks, South Korea required all retail crypto trading to flow exclusively through real-name verified bank accounts, abolishing anonymous 'virtual accounts'; the rule forced every exchange to partner with a single designated bank and gave regulators their first direct AML lever over the crypto market.
Financial Services Commission (FSC)
- DecisionFSC Bans All Initial Coin Offerings
South Korea's Financial Services Commission announced a blanket ban on all ICOs, declaring them violations of capital market law regardless of technical structure and threatening stern penalties; the ban remained in place for nearly eight years, pushing Korean blockchain projects offshore until a disclosure-based framework began emerging in 2025.
Freeman Law (citing FSC announcement)
Sources
- fsc.go.kr/eng/pr010101/82683
- fsc.go.kr/eng/pr010101/81217
- fsc.go.kr/eng/pr010101/79431
- fsc.go.kr/eng/pr010101/84004
- loc.gov/item/global-legal-monitor/2024-07-18/south-korea-act-to-regulate-cryp
- coindesk.com/policy/2026/04/08/south-korea-proposes-cryptocurrency-law-with-bank-s
- coindesk.com/policy/2025/12/30/south-korea-s-long-awaited-crypto-law-stalls-over-w
- crypto.news/south-korea-postpones-digital-asset-law-to-2026/
- seoulz.com/korea-tokenized-securities/
- cryptorank.io/news/feed/f37ca-south-korea-ico-corporate-disclosure
- finance.yahoo.com/news/south-korea-lift-corporate-crypto-073555875.html
- theblock.co/post/385040/south-korea-limit-corporate-crypto-investment
- thepaypers.com/crypto-web3-and-cbdc/news/south-korea-delays-crypto-capital-gains-tax
- en.bloomingbit.io/feed/news/115313
- en.bloomingbit.io/feed/news/115460
- cryptotimes.io/2026/06/19/south-korea-mandates-central-bank-tracking-for-cross-borde
- 21analytics.ch/travel-rule-regulations/south-korea-travel-rule-regulation/
- blog.chakwon.com/2026/04/27/vasp-korea-shrinking-partnership-model/
- kucoin.com/news/flash/south-korea-ends-nine-year-corporate-crypto-investment-ban
- mexc.com/news/1069479
Next for South Korea: Artificial IntelligenceComprehensive law
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 13 Jul 2026. Methodology & how to cite · State of Technology Regulation 2026