South Korea
Is crypto legal in South Korea? (2026)
Yes — cryptocurrency is legal in South Korea. The Virtual Asset User Protection Act, in force since July 2024, governs the market, with a second-phase Digital Asset Basic Act in drafting. Oversight sits with the Financial Services Commission (FSC) and KoFIU. Full details — governing law, licensing, tax and enforcement history — follow below (last reviewed 2026-05-03).
Executive summary
South Korea is one of the most active retail cryptoasset markets globally — official FIU and FSS surveys of registered exchanges counted 10.77 million virtual-asset users in the first half of 2025 and 11.13 million user accounts in the second half. The Virtual Asset User Protection Act, promulgated 18 July 2023 and effective 19 July 2024, was the foundational piece of South Korean crypto-specific legislation, completing the framework begun by 2020 amendments to the Specific Financial Information Act (Tokso Geum Yong Geo Rae Beob, the Korean AML statute). The Financial Services Commission (FSC) and its supervisory arm Financial Supervisory Service (FSS) administer the regime alongside the Korea Financial Intelligence Unit (KoFIU). Travel Rule has been in force since March 2022 — earlier than most major jurisdictions. Dozens of virtual asset service providers are registered with KoFIU, but only five — Upbit, Bithumb, Coinone, Korbit and Gopax — hold the real-name bank account contracts required to run a Korean won market. The won-stablecoin debate dominates 2026 policy under the Lee Jae-myung administration's expressed openness to KRW-stablecoin issuance. South Korea's structural advantages are enormous retail demand, sophisticated technology adoption, deep capital markets and world-leading mobile-payment infrastructure; the constraints are real-name banking system requirements, restrictive listing rules and historically tight regulatory posture.
Regulatory architecture overview
South Korean financial regulation centres on the Financial Services Commission (Geum Yung Wee, FSC), an independent commission under the Prime Minister that sets policy and writes Enforcement Decrees, and its supervisory arm the Financial Supervisory Service (Geum Yung Gam Dok Won, FSS) that handles day-to-day supervision and inspection. The Korea Financial Intelligence Unit (KoFIU) is the Korean FIU and AML supervisor, situated under the FSC. The Bank of Korea (BoK) handles monetary authority and runs CBDC research; the BoK ran the first phase of its Project Han River tokenised-deposit pilot with seven commercial banks and about 100,000 users from April 2025, then suspended preparations for phase two in June 2025 after participating banks raised cost and business-model concerns amid the pivot toward won stablecoins. The Ministry of Economy and Finance (MOEF) coordinates fiscal policy. The National Tax Service (Guk Se Cheong, NTS) administers tax. The Korea Communications Commission and Personal Information Protection Commission (PIPC) handle data privacy under PIPA. The Prosecutor's Office and National Police Agency handle financial crime; the Korean prosecutorial service has been particularly active in cryptoasset fraud cases. The Korea Securities Depository (KSD) operates centralised securities depository services. The Korea Internet & Security Agency (KISA) handles cybersecurity. South Korean regulatory style under FSC has historically been characterised by detailed administrative rules, restrictive listing approval, real-name banking infrastructure (every Korean Won deposit/withdrawal at a registered VASP must use a verified bank account in the customer's real name), and substantial coordination with the Korean Bankers Federation through the Korean Federation of Banks for technical implementation.
Crypto-specific framework
The cornerstone is the Virtual Asset User Protection Act (Ga Sang Ja San Yi Yong Ja Bo Ho Beob), promulgated 18 July 2023 after passing the National Assembly, effective 19 July 2024. The Act establishes user protection requirements, virtual-asset service provider obligations, market-abuse prohibitions, and substantive regulatory authority. Key provisions: registered VASPs must segregate customer assets in trust accounts at qualified financial institutions; cold-storage requirements (more than 80% of customer virtual assets held in cold wallets); insurance or reserve requirements covering operational risks; market-abuse prohibitions including price manipulation, fraudulent trading and use of undisclosed material information (imprisonment of at least one year — and potentially life where illicit gains exceed KRW 5 billion — or fines of three to five times the illicit gains); enhanced disclosure requirements for VASP operations. The pre-existing 2020 amendments to the Specific Financial Information Act (Tokso Geum Yong Geo Rae Beob) require VASP registration with KoFIU as a condition for operating in Korea — registration requires demonstrated AML/CFT capability, real-name verified bank account contracts with a Korean financial institution (the most operationally restrictive single requirement in global crypto), Information Security Management System (ISMS) certification, and qualified senior management. Travel Rule has applied since March 25, 2022, requiring transmission of full originator and beneficiary information for transfers above KRW 1 million (~$700) and additional verification for transfers between VASPs and self-hosted wallets. The Lee Jae-myung administration has indicated support for a forthcoming Phase 2 framework expanding cryptoasset issuance regulation, security-token offerings (the FSC published token securities guidelines in February 2023, but the enabling legislative amendments have not yet passed), KRW-stablecoin issuance pathway, and enhanced cross-border arrangements.
Recent enforcement actions
South Korean enforcement on cryptoasset matters is among the most aggressive globally, characterised by extensive prosecutorial action and substantial criminal penalties. The Terra/LUNA collapse in May 2022 produced sustained Korean prosecutorial action against Terraform Labs founder Do Kwon (extradited from Montenegro to the United States on December 31, 2024 after a prolonged extradition battle; he pleaded guilty in SDNY proceedings in August 2025 and was sentenced to 15 years in prison in December 2025). The June 2018 Bithumb hack (about $30M) and the June 2018 Coinrail breach (roughly $37-40M) produced extensive enforcement and platform-failure litigation. The heaviest recent action targeted the market leader: on 25 February 2025 KoFIU ordered a three-month partial business suspension of Upbit over transactions with unregistered overseas VASPs and customer due diligence failures (stayed by a court injunction in March 2025), and in November 2025 fined operator Dunamu 35.2 billion won (about $24M) over roughly 5.3 million alleged customer due diligence violations — a penalty Dunamu is contesting in court. The first unfair-trading case under VAUPA was referred to prosecutors on 1 November 2024, an alleged automated fake-order price manipulation scheme run through a domestic exchange. The Seoul Central District Court has handled much of Korea's cryptoasset litigation, and cross-border coordination with the US Department of Justice was central to the Terra/LUNA proceedings.
Tax treatment
South Korean cryptoasset tax treatment has been one of the most politically contested areas of Korean tax policy. The original cryptoasset capital-gains tax framework under amendments to the Income Tax Act in late 2020 was scheduled to take effect January 2022 with a 20% rate above a KRW 2.5 million annual exemption — but the implementation has been delayed multiple times due to political pressure: postponed to 2023, then to 2025, and most recently in late 2024 the National Assembly delayed implementation again to January 2027 (Lee Jae-myung administration confirmed continuation of the postponement after taking office in 2025). As of mid-2026, individual cryptoasset capital gains remain effectively untaxed for retail investors — the exemption threshold remains KRW 2.5 million (~$1,800) of annual gains, with amounts above taxed as 'other income' at a combined 22% rate (20% income tax plus 2% local surtax) when the tax does eventually take effect. Until then, individual cryptoasset gains are not subject to capital-gains tax; only inheritance/gift tax and limited income tax on receipts characterised as 'other income' apply to certain edge cases. For corporations, cryptoasset gains form part of taxable income subject to corporate income tax at 9-24% depending on the income bracket, plus local surtax. Mining, staking and DeFi activity carried on as a business is taxable. The Korean NTS has issued multiple interpretive rulings on cryptoasset taxation. The National Tax Service has begun preparatory work for the 22% rate on virtual-asset gains scheduled to activate in 2027. South Korea is among the jurisdictions committed to implementing the OECD Crypto-Asset Reporting Framework, with exchanges of information scheduled to begin in 2027; KoFIU and NTS access to VASP transaction data is broad.
Banking and on-ramp infrastructure
South Korean banking access for VASPs is structurally restricted by the real-name banking requirement. As of early 2026 five exchanges held real-name account partnerships: Upbit with K Bank, Bithumb with KB Kookmin Bank, Coinone with Kakao Bank, Korbit with Shinhan Bank and Gopax with Jeonbuk Bank. The K Bank-Upbit relationship is the single most consequential commercial banking relationship in Korean crypto. Each registered VASP must have at minimum one verified-account banking contract; smaller exchanges have struggled to obtain such contracts due to bank risk-management caution, contributing to consolidation toward the five won-market exchanges, and Korea's single-bank-per-exchange policy has itself become a subject of policy debate. The major Korean banks have explored institutional cryptoasset services through equity stakes in custody ventures rather than in-house units: KB Kookmin backs Korea Digital Asset (KODA) and Shinhan Bank backs Korea Digital Asset Custody (KDAC). Korea has no standalone bank custody licence for virtual assets. The 2025 indications from FSC that bank-affiliated cryptoasset custody and possibly stablecoin issuance will be liberalised could materially shift this. Stablecoin on-ramps support USDT (the most-traded cryptoasset on Korean exchanges), USDC, and the developing KRW-stablecoin market — Lee Jae-myung administration policy explicitly supports KRW-stablecoin issuance with regulatory framework expected through 2026. Card programs operate through major Korean credit-card processors. Identity verification operates through the Korean Resident Registration Number system, mobile authentication via NICE/KCB, and emerging mobile-driver's-licence digital identity infrastructure.
Court-tested precedents
Korean civil-law jurisprudence on cryptoassets is detailed and continues to develop. A 2018 Supreme Court of Korea ruling confirmed that Bitcoin is intangible property capable of confiscation where acquired through crime, and a later Supreme Court decision confirmed that Bitcoin held in exchange accounts is seizable in criminal investigations. The 2022-2025 Terra/LUNA proceedings produced extensive Seoul Central District Court litigation on virtual-asset characterisation, market manipulation and platform liability. The Seoul Central District Court has emerged as the de facto commercial court for cryptoasset disputes. The Korean Commercial Arbitration Board (KCAB) handles crypto commercial disputes via arbitration. Civil proceedings over exchange outages and platform failures continue to generate consumer-protection rulings, and Dunamu's challenges to the 2025 KoFIU sanctions are themselves now before the Seoul courts.
Regulatory roadmap
The 2026-2028 Korean roadmap is publicly mapped through FSC Strategic Plans, FSS Supervisory Plans and Lee Jae-myung administration policy statements. The Phase 2 cryptoasset framework — the second-stage legislation building on the Virtual Asset User Protection Act — is expected to be introduced to the National Assembly in 2026. Key elements under FSC consultation include: cryptoasset issuance regulation (currently absent from VAUPA which focuses on user protection rather than issuance); KRW-stablecoin issuance pathway with bank or qualified-issuer authorisation; security-token offering (STO) legislation building on the FSC's February 2023 token securities guidelines, whose enabling amendments have repeatedly failed to pass; cross-border arrangements with FSA Japan, MAS Singapore, FCA UK, FSC Hong Kong; and DeFi regulatory approach. The Lee Jae-myung administration's pro-crypto stance includes campaign commitments on stablecoin liberalisation, cryptoasset ETF approval (spot crypto ETFs are not yet permitted, but the government included them in its 2026 economic growth strategy and plans a Capital Markets Act amendment in the second half of 2026, with the Korea Exchange saying it is ready to list them), and pension fund crypto allocation expansion. Bank of Korea CBDC work is in flux: phase-two preparations for Project Han River were suspended in June 2025, with the central bank subsequently exploring tokenised-deposit use cases for government disbursements. The 2026-2027 cryptoasset capital-gains tax implementation is a major deliverable. The Korean Bankers Federation and KFB technical infrastructure for cryptoasset custody and KRW-stablecoin settlement is developing through 2026. KISA cybersecurity standards for VASPs are being expanded. Cross-border won-stablecoin reciprocal access negotiations with Japan (yen-stablecoin) and other Asian jurisdictions are politically active.
Practical implications for operators
Operating a crypto business in South Korea requires Virtual Asset Service Provider registration with KoFIU under the Specific Financial Information Act and full compliance with the Virtual Asset User Protection Act. The single operational gate is the real-name verified bank account contract — without a contract from a major Korean bank, fiat KRW operations are impossible. Securing a verified-account contract is the most difficult practical step in Korean crypto entry; the existing five contracted relationships are stable and new entrants face substantial bank-side caution. No minimum paid-up capital is prescribed by statute for VASP registration, but VAUPA's customer-asset segregation, cold-storage and insurance or reserve obligations make the practical funding requirement substantial. Substance requirements include Korea-incorporated entity (typically Joo-sik Hoe-sa, Co. Ltd.), Korea-resident senior officers (Representative Director and Compliance Officer with relevant industry experience), ISMS certification (Korean cybersecurity certification, 6-12 month process), AML/CFT programme aligned with KoFIU rules, customer-asset segregation in trust accounts (mandatory under VAUPA), and ongoing audited financial statements. Listing rules under VAUPA and self-regulatory cooperation through Digital Asset eXchange Association (DAXA) — the major exchanges' SRO — substantively limit token whitelisting through detailed listing-review processes. Talent depth in Seoul is excellent for fintech crossover from Naver Pay, Kakao Pay, Toss and the major banks; native crypto-engineering depth at Upbit (Dunamu), Bithumb, Hashed and other Korean operators is substantial. Once authorised, KoFIU registration is a credible Asian credential but does not automatically passport to other jurisdictions. The combination of more than 10 million virtual-asset users at registered exchanges, sophisticated retail demand, world-leading mobile-payment infrastructure, and prospective ETF and KRW-stablecoin liberalisation makes Korea a strategically critical Asian market despite operational entry friction.
Notable licensees
- Upbit (Dunamu)
- Bithumb
- Coinone
- Korbit
- Gopax
- KODA (KB Kookmin-backed custody)
- KDAC (Shinhan-backed custody)
Top regulators
- FSC (Financial Services Commission)
- FSS (Financial Supervisory Service)
- KoFIU (Korea Financial Intelligence Unit)
- Bank of Korea
- NTS (National Tax Service)
- PIPC (Personal Information Protection Commission)
- KISA
Watch points
- Digital Asset Basic Act (phase 2) — FSC targeting passage within 2026
- KRW-stablecoin issuance pathway under Lee Jae-myung administration
- Spot crypto ETFs: Capital Markets Act amendment planned for H2 2026
- Cryptoasset capital-gains tax implementation January 2027
- Bank of Korea Project Han River tokenised-deposit pilot — phase two on hold since June 2025
TL;DR
Asia's most active retail cryptoasset market — VAUPA effective July 2024, real-name banking system, 10M+ virtual-asset users, KRW-stablecoin and ETF liberalisation pending under Lee Jae-myung administration.
Get DeFi Intel research in your inbox
Weekly long-form coverage of papers, incidents, jurisdictions, chains, tokens and the people building them. Free tier covers headlines; Pro adds the analyst-grade breakdowns.