South Korea — License Map

South Korea operates one of the world's largest retail cryptocurrency markets by volume -- domestic exchange trading frequently exceeds that of the United States on a per-capita basis. The regulatory architecture is shaped by two defining features: a dual-statute framework that divides authority across consumer protection and AML mandates, and a real-name banking requirement that functions as the most consequential barrier to market entry in any major crypto jurisdiction. The collapse of the Terra/LUNA algorithmic stablecoin in May 2022 -- originated by a South Korean entity -- catalysed the passage of the Virtual Asset User Protection Act (VAUPA) and continues to shape the country's regulatory posture toward stablecoins.

This page covers two activity types: crypto custody and stablecoin issuance. South Korea does not have a dedicated mining regulatory framework, and mining is not covered here.

1. Regulatory Architecture

South Korea's crypto regulation is administered by a cluster of agencies under the Financial Services Commission (FSC) umbrella, operating through two primary statutes and one pending law:

Virtual Asset User Protection Act (VAUPA) -- enacted 18 July 2023 (Act No. 19563), effective 19 July 2024. South Korea's first comprehensive investor protection statute for virtual assets. Establishes mandatory asset segregation, 80% cold storage, insurance/compensation reserves, market manipulation prohibition with criminal penalties, and disclosure obligations. Applies to all registered VASPs and is the operative law for custody activities.

Special Financial Information Act (SFIA) -- amended March 2021 to require VASP registration with the Korea Financial Intelligence Unit (KoFIU). Provides the AML/KYC registration foundation and imposes the real-name bank account requirement that structurally limits market entry.

Digital Asset Basic Act (DABA) -- formally the General Act on Digital Assets, introduced as a bill to the National Assembly on 10 June 2025 by Democratic Party Rep. Min Byung-deok; it remains a pending bill and has NOT been enacted (re-confirmed 2026-06-06: still off the National Policy Committee agenda, debate not expected to resume until H2 2026 after the 3 June local elections). It would create an authorization regime for asset-linked digital asset (stablecoin) issuance (general digital assets fall under a lighter notification regime). Under the introduced bill text, a stablecoin issuer must be a domestic corporation with a minimum paid-in capital of KRW 500 million (~USD 360,000) and must additionally demonstrate: a feasible redemption method and reserve plan, a feasible business plan, qualified personnel and IT infrastructure, officer qualification standards (disqualification where sanctioned under financial laws within five years), and major-shareholder financial capacity and social credibility. The bill itself does NOT fix the reserve-backing percentage, the reserve holding location, or the segregation/bankruptcy-remoteness mechanics -- those are delegated to subordinate (enforcement) regulations that have not been drafted. Application/annual fees, processing timeline, ongoing capital ratios, and any grandfathering remain NOT VERIFIED (no enacted statute, no fee schedule, no subordinate regulation published). Passage has been stalled since late 2025 by a fundamental dispute between the Bank of Korea (which insists only banks with 51%+ ownership should issue stablecoins) and the FSC/Democratic Party (which argue non-bank fintechs should be eligible). The ruling party re-proposed/consolidated the bill on 8 April 2026, but it was left off the National Policy Committee's final pre-recess agenda on 12 May 2026, pushing review past the 3 June 2026 local elections into the second half of 2026. No stablecoin-specific licences have been issued. (Bill-text provisions: Shin & Kim, "General Act on Digital Assets" introduced to the National Assembly; status: CoinDesk, 8 Apr 2026.)

Key regulators:

The dual VAUPA/SFIA framework for custody is operational and well-established. The stablecoin framework (DABA) exists only as a pending bill -- creating an asymmetry where custody regulation is mature but stablecoin issuance regulation remains in legislative limbo.

Key regulatory instruments across activities:

2. Activity Comparison Table

3. Multi-Activity Licensing

South Korea's regulatory structure does not provide a single unified licence covering both custody and stablecoin issuance. The two activities sit under different statutes with different compliance obligations:

Custody: Requires SFIA registration with KoFIU (AML/KYC layer) plus full VAUPA compliance (operational layer). This is the established pathway that all five major exchanges with KRW access have completed.

Stablecoin issuance: Will require a separate DABA stablecoin issuer licence from the FSC once the bill is enacted and the framework becomes operational (DABA is still a pending bill, with a KRW 500 million minimum paid-in capital in the introduced text). Issuers operating VASP functions (exchanges, wallets) would also need SFIA registration and VAUPA compliance.

Dual compliance architecture: An entity seeking to both custody virtual assets and issue stablecoins would need to satisfy three regulatory layers simultaneously:

1. SFIA registration -- AML/KYC, real-name bank account, fit-and-proper assessment
2. VAUPA compliance -- 80% cold storage, asset segregation, insurance, market surveillance, disclosure
3. DABA licence (pending bill) -- FSC authorization as a domestic corporation, KRW 500M minimum paid-in capital, feasible reserve/redemption plan, qualified personnel/IT, officer fit-and-proper, and major-shareholder capacity; the reserve-backing percentage and segregation mechanics are delegated to (as-yet-undrafted) subordinate regulations rather than fixed in the bill

The bank partnership requirement creates a natural convergence point. KB Financial and Shinhan Bank are already running stablecoin settlement pilots, positioning major banking institutions as likely first-movers in combined custody-and-issuance operations. This aligns with the BOK's preference for bank-led stablecoin issuance -- if the bank-only position prevails in the DABA implementation dispute, stablecoin issuance may be structurally tied to entities that already hold real-name banking partnerships for custody operations.

Practical implication: Until DABA is enacted and implemented, only the custody pathway is available. Firms planning for both activities should secure SFIA registration and VAUPA compliance now, and prepare for DABA licensing requirements once the bill passes and the framework becomes operational. Separately, the FSC reported to the National Assembly on 17 March 2026 that it is reviewing whether to carve custody out into a standalone, separately licensable business line (MiCA-style) under the second-phase legislation -- a change that, if adopted, would unbundle custody from the integrated VASP/exchange model. The introduced DABA bill text already names a digital asset "custody business" as a distinct activity subject to FSC authorization (with "deemed trust status" and user-registry obligations), but the standalone-custody parameters -- minimum capital, asset-segregation rules, bankruptcy-remoteness, and staffing/substance -- remain NOT VERIFIED: no rule text has been published. A re-check of FSC English press releases on 2026-06-06 found no custody-carve-out rule, draft, or fee schedule issued since the 17 March 2026 National Assembly report; the most recent virtual-asset release (KoFIU H2-2025 VASP survey, 25 March 2026) addresses market statistics only. (Shin & Kim bill-text analysis.)

4. The Real-Name Banking Requirement

South Korea's most distinctive regulatory constraint is the real-name bank account requirement under SFIA. This single requirement has shaped the domestic crypto market more profoundly than any other regulatory provision.

How it works:

Every VASP seeking to offer KRW-denominated trading must secure a real-name verified bank account from a willing domestic bank. The bank verifies that each customer's exchange account is linked to a real-name bank account at the same institution. Both the bank and the exchange bear joint responsibility for customer identity verification and AML compliance.

The bottleneck:

Only a handful of banks have agreed to provide real-name accounts to exchanges:

Banks conduct their own due diligence and financial assessments before agreeing to partner. The reputational risk of association with a crypto exchange -- combined with AML liability -- has made banks extremely selective. As a result, only five exchanges hold full KRW-linked registrations: Upbit, Bithumb, Coinone, Korbit, and GOPAX. A larger number operate with crypto-to-crypto only registrations (no KRW on-ramp).

Market concentration effect:

Upbit dominates the Korean market with approximately 80%+ of domestic trading volume. The real-name banking requirement, by limiting the number of exchanges with full KRW access, has reinforced this concentration rather than dispersing it. New entrants face a structural barrier that no amount of capital or technical capability can easily overcome -- they need a bank willing to take the compliance risk.

Stablecoin implications:

For stablecoin issuers, the banking relationship is even more critical. DABA's 100% reserve backing requirement means reserves must be held in bank deposits or government securities at licensed financial institutions. The same banks that gatekeep exchange access will gatekeep stablecoin reserve custody. KB Financial and Shinhan Bank's stablecoin settlement pilots signal that major banks are preparing for this role, but access will likely remain concentrated.

5. Banking Access

Banking access in South Korea is the single most important operational prerequisite for any crypto business seeking to operate with Korean won. Unlike jurisdictions where banking is difficult but achievable through persistence, South Korea's regulatory structure makes banking access a formal legal requirement.

Key dynamics:

• Exclusivity arrangements: Upbit's relationship with K Bank functions as a near-exclusive arrangement that has helped both entities grow. K Bank's IPO valuation was significantly boosted by its Upbit partnership revenue.
• Joint AML liability: Banks share responsibility for customer verification and suspicious transaction reporting. This joint liability model makes banks cautious but also creates a structural consumer protection layer not found in most jurisdictions.
• Interest on deposits: Under VAUPA, VASPs must pay interest on customer KRW deposits held at partner banks -- an unusual requirement that aligns crypto customer protections with traditional banking deposit expectations.

For stablecoin issuers:

Once DABA becomes operational, stablecoin reserve custody will require relationships with licensed financial institutions. The same banks running stablecoin settlement pilots (KB Financial, Shinhan) are the natural candidates. The BOK's insistence on bank-led stablecoin issuance (51%+ bank ownership) would, if adopted, make bank access not merely a requirement but a structural ownership condition.

6. Total Cost

South Korea's cost structure is unusual: there is no single large statutory capital requirement, but the cumulative cost of compliance across SFIA, VAUPA, ISMS, insurance, and banking creates a substantial barrier. Stablecoin issuance costs are largely speculative given DABA's pending status.

Year Zero (Setup)

Insurance and Reserves

Annual Ongoing

Total first-year cost for dual operation (setup + insurance + first year ongoing): approximately KRW 2.8B - 7.6B (~$2M - $5.5M). Stablecoin costs are estimates based on DABA provisions and may change when secondary regulation is finalised.

Note: Exchange rates use approximate KRW 1,390 = USD 1. The real-name bank partnership cost is difficult to quantify precisely -- the direct financial cost is modest, but the difficulty of securing a willing bank partner is the binding constraint.

7. Regulatory Direction

South Korea is on a rapid legislative trajectory with implementation delays -- ambitious laws passed quickly, but operational rollout consistently lags.

Near-Term (2026)

• DABA passage: The central question for 2026 is whether the bank vs. fintech dispute over stablecoin issuance rights will be resolved so the bill can pass. The ruling Democratic Party re-proposed/consolidated DABA on 8 April 2026, but the National Policy Committee left it off its final pre-recess agenda on 12 May 2026, deferring review past the 3 June 2026 local elections into H2 2026. The bill remains unpassed.
• Zero-threshold travel rule: Implemented in early 2026, eliminating the previous KRW 1 million threshold. All VASP transfers, including stablecoins and unhosted wallets, now require real-time surveillance -- one of the most aggressive implementations globally.
• Phase 2 VAUPA amendments: Under consideration to address DeFi oversight, enhanced institutional custody requirements, and additional stablecoin-related provisions.

Medium-Term (2027)

• Crypto capital gains tax: Scheduled for 1 January 2027 after three deferrals (originally 2022, then 2023, then 2025). A 20% tax (plus 2% local income tax = 22% effective) on annual gains exceeding the operative KRW 2.5 million (~$1,800) threshold. A December 2024 proposal to raise the threshold to KRW 50 million (~$35,900) was floated but never enacted; the government's confirmed May 2026 plan retains the KRW 2.5 million threshold. The Ministry of Economy and Finance/NTS publicly confirmed in May 2026 that the rollout will proceed "as scheduled," though a 50,000+ signature repeal petition triggered a parliamentary review. South Korea is building an AI-powered crypto tax system in preparation.
• STO framework maturation: The FSC's regulatory sandbox for Security Token Offerings under FISA is expected to progress toward a comprehensive STO framework with licensed platforms and secondary market rules.

Systemic Signals

The Terra/LUNA collapse remains the defining event in South Korean crypto regulation. Every major legislative action since May 2022 -- VAUPA, DABA, the zero-threshold travel rule -- can be traced back to the political and economic fallout of that collapse. Do Kwon's sentencing to 15 years in federal prison (December 2025) for "fraud on epic, generational scale" reinforced the political mandate for strict regulation.

The BOK paused Project Hangang (digital won CBDC) in 2025 amid rising private-stablecoin momentum, then reversed course and launched Project Hangang Phase 2 in March 2026 (expanding the wholesale-CBDC / deposit-token pilot from seven to nine banks and adding live government-subsidy disbursement). New BOK Governor Shin Hyun-song's first policy address (21 April 2026) prioritised a bank-led CBDC plus bank-issued deposit tokens and notably omitted stablecoins, reiterating that "any stablecoin issuance should begin with regulated banks." This bank-led posture -- CBDC/deposit tokens favoured, private stablecoins kept under bank control -- is the core of the DABA deadlock and aligns with South Korea's broader philosophy of channelling crypto activity through existing financial institutions.

Regulatory Timeline

The pattern is one of rapid legislative ambition followed by implementation friction. South Korea passes laws quickly when political will exists (VAUPA moved from enactment to effect in 12 months) but struggles with operational rollout when competing interests are involved (DABA stalled, crypto tax deferred three times).

8. Tax Reporting Obligations

South Korea's crypto tax framework is enacted but not yet operational. Individual crypto gains remain effectively untaxed as of June 2026, though this is the result of repeated deferrals rather than a deliberate exemption policy. The Ministry of Economy and Finance/NTS confirmed in May 2026 that the tax will proceed "as scheduled" on 1 January 2027.

Key tax characteristics for crypto activities:

• Crypto capital gains tax delayed three times, now targets 1 January 2027 -- a 20% tax on crypto gains (plus 2% local income tax = 22% effective) was legislated in 2020 but has been postponed from 2022, to 2023, to 2025, and most recently to January 2027. The risk of a fourth deferral has declined since the MOEF's May 2026 commitment, but a 50,000+ signature repeal petition is under parliamentary review and definitional gaps persist
• 20% tax on annual gains exceeding the operative KRW 2.5 million threshold (~USD 1,800). A December 2024 proposal to raise the threshold to KRW 50 million (~USD 35,900) -- to align with the (now-abolished) stock/fund investor threshold -- was floated but never enacted; the government's confirmed May 2026 plan retains the KRW 2.5 million threshold. The ~20x disparity is a central grievance driving the May 2026 repeal petition
• Classification as "other income" -- crypto gains are classified under Article 21 of the Income Tax Act as "other income" (gitasodeuk), which prevents loss carryforwards and does not distinguish between short-term and long-term holdings. This classification is widely criticised as inappropriate for continuous investment activity
• Corporate crypto taxation is active -- unlike individual taxation, corporate gains from virtual asset transactions are included in taxable corporate income under existing rules (rates: 9%-24% depending on income bracket)
• Still lacks legal definitions for airdrops, hard forks, staking, and mining income -- the Korea Times reported in November 2025 that the taxation framework has no published guidance or tax standards for these activity types, constituting a core deficiency for the 2027 implementation

Exchange-level reporting requirements:

• Real-name bank account linkage -- all traders must link exchange accounts to real-name bank accounts at the same financial institution; anonymous trading is prohibited
• Suspicious transaction reporting -- exchanges must monitor and report abnormal transactions to KoFIU
• VASP registration with KoFIU -- all VASPs must register, obtain ISMS certification from KISA, and submit company and bank account details
• Record retention -- VASPs must maintain records of virtual asset transactions for 15 years
• Cross-border reporting (from mid-2026) -- businesses handling virtual asset cross-border transactions must register and file monthly reports with the Bank of Korea

CARF adoption:

• South Korea's Ministry of Strategy and Finance signed the OECD CARF Information Exchange Agreement on 2 September 2025. Under the committed timeline, exchanges begin recording reportable transaction data in 2026, with the first international exchange of data in 2027 -- placing South Korea in the 2027 first-exchange cohort alongside the EU, UK, Japan, and Canada
• Foreign investors' transactions on Korean exchanges will be shared with their home tax authorities; Korean residents' overseas trades will be reported to the NTS. A domestic consultation on CARF/CRS reporting rules opened in 2025

9. RWA / Security Token Platform Licensing

South Korea has enacted a dedicated framework for security token offerings (STOs). The enabling amendments to the Financial Services and Capital Markets Act (FSCMA) and the Act on Electronic Registration of Stocks and Bonds (AERSB) were passed by the National Assembly on 15 January 2026 and come into force in January 2027 after a one-year preparation period. On 13 February 2026 the FSC granted preliminary designation to the NXT and KDX consortia to operate OTC fractional-investment / security-token platforms, and six companies have received regulatory sandbox designations for tokenized real estate.

9.1 License Details

9.2 Requirements (Effective January 2027)

9.3 STO Exchange Status

On 13 February 2026 the FSC granted preliminary designation to two consortia to operate OTC fractional-investment / security-token trading platforms: the NXT Consortium (led by alternative trading platform Nextrade; associated with Musicow, a music-royalties platform; topped the external evaluation at 750) and the KDX Consortium (led by the Korea Exchange; scored 725). NXT received only conditional approval -- its final licence review will be suspended if the Korea Fair Trade Commission opens a formal investigation into Lucentblock's technology-misappropriation allegations against Nextrade. Both designees must apply for a full licence within six months after meeting conditions. As of June 2026, full licensing had not been completed and market launch remained subject to these conditions.

9.4 Regulatory Sandbox Designations

Six companies received FSC designation under the special regulatory sandbox program for tokenized real estate trust beneficiary securities, with exemptions from FSCMA and personal information protection regulations. An additional real estate fund beneficiary securities token issuance and trading platform was designated in the Busan Blockchain Regulation-Free Zone.

9.5 Tax Treatment

Security tokens issued under FSCMA are subject to existing securities taxation: securities transaction tax on transfers of listed securities, capital gains tax on gains above thresholds, and financial income tax on interest/dividends (14% withholding on interest, 15.4% on dividends including local surtax). The VAUPA explicitly excludes security tokens from its scope.

9.6 Transition

The STO framework is enacted but pre-operational pending the January 2027 in-force date. No full STO exchange licences have been issued (NXT and KDX hold only preliminary designation), and the specific tax treatment of security tokens issued under regulatory sandboxes has not been comprehensively addressed. The structure separates security tokens (governed by FSCMA) from non-security virtual assets (governed by VAUPA), creating a dual-track regulatory model.

See

South Korea RWA Regulation for full details on FSCMA token securities framework, STO exchange licensing, regulatory sandbox designations, and the transition timeline.

10. DeFi Protocol Licensing

South Korea has no licensing pathway for DeFi protocols. The regulatory framework (VAUPA + SFIA) is designed for centralized VASPs with identifiable operators and real-name banking relationships. DeFi lending, staking, and yield farming services are effectively prohibited in practice -- not by explicit ban, but by the absence of a registration mechanism.

10.1 Licensing Status

There is no available licence type for DeFi operations. The SFIA registration framework requires:

• ISMS certification from KISA (Korea Internet & Security Agency) -- 3--6 months to obtain
• Real-name banking partnership with a domestic commercial bank -- structural impossibility for decentralized protocols
• KoFIU registration -- requires identifiable corporate entity with Korean presence

The real-name banking requirement is the binding constraint: only 5 exchanges (Upbit, Bithumb, Coinone, Korbit, GOPAX) have secured full KRW-linked registrations. DeFi protocols cannot meet this requirement by design.

10.2 Capital Requirements

No explicit statutory capital minimum under SFIA, but de facto barriers include:

• ISMS certification costs: KRW 200M--500M (~USD 145K--360K)
• Insurance/compensation reserves: KRW 500M--2B+ (~USD 360K--1.4M+)
• Bank partnership establishment costs

10.3 DeFi-Specific Regulatory Position

• FSC position: Entities controlling DeFi platforms and providing deposit-like, lending, or staking services fall within virtual asset regulation scope -- but no pathway exists for compliance
• VAUPA Phase 2: Under consideration to address DeFi oversight and enhanced institutional custody requirements
• DABA (Digital Asset Basic Act): Introduced as a bill 10 June 2025 but not enacted -- passage stalled over the bank vs. fintech stablecoin dispute; re-proposed 8 April 2026, deferred to H2 2026; may eventually create broader licensing categories (CoinDesk, 8 Apr 2026)
• Zero-threshold travel rule (2026): All VASP transfers including stablecoins and unhosted wallets require real-time surveillance -- one of most aggressive implementations globally
• No DeFi tax guidance: 22% crypto gains tax deferred to January 2027; no specific guidance for DeFi staking, LP tokens, or yield farming
• Individual access: Korean individuals can access offshore DeFi protocols but with no consumer protection

10.4 Key Enforcement

• First VAUPA enforcement (2025): Pump-and-dump prosecution established precedent for unfair trading provisions
• Korbit AML fine (December 2025): KRW 2.73 billion (USD 1.9M) for multiple AML breaches following an October 2024 on-site inspection
• Dunamu/Upbit fine (November 2025) and court reversal: KoFIU imposed a KRW 35.2 billion (~USD 25M) fine plus a three-month partial business suspension on Dunamu (Upbit operator) for KYC/AML failures. On 9 April 2026 the Seoul Administrative Court cancelled the three-month suspension, finding rules for sub-KRW-1-million transfers insufficiently specific; the parallel Bithumb six-month suspension was stayed on 1 May 2026 -- narrowing KoFIU enforcement latitude pending clearer standards
• Penalties: Operating unregistered VASP: up to 5 years' imprisonment or KRW 50 million fine

10.5 Outlook

DeFi-specific licensing is unlikely before 2027 at the earliest. The FSC's cautious approach -- shaped by the Terra/LUNA collapse and Kim Nam-guk scandal -- prioritizes centralized control. Resolution of the DABA stablecoin dispute and potential opening of institutional market access are the most consequential pending developments.

For comprehensive DeFi regulation analysis, see

South Korea DeFi Regulation.

Insurance / Risk Transfer Licensing

Overview

South Korea has one of the most explicit mandatory insurance requirements for crypto businesses globally. The VAUPA (effective July 2024) requires all registered VASPs to maintain insurance or compensation reserves covering losses from hacking, computer failures, and other operational incidents. The requirement was tested in practice during the 2019 Upbit hack (342,000 ETH stolen, approximately KRW 50 billion at the time), after which Upbit used its own reserves to fully compensate affected users. VAUPA codified this expectation into law.

Regulatory Authority

Insurance Requirements for Crypto Businesses

Estimated Insurance Costs

These figures are self-reported / estimated industry ranges, not official fee schedules.

Regulatory Direction

• Proposed no-fault liability (Dec 2025, not enacted): Following the November 2025 Upbit hack, the FSC proposed bank-style no-fault liability requiring exchanges to compensate users for hack/system-failure losses without proof of negligence, with fines up to 3% of annual revenue. It is a central feature of the pending second-phase DABA bill -- proposed, not enacted as of 4 June 2026
• Operational-resilience package (6 April 2026): After a February 2026 Bithumb ledger error, the FSC ordered the five largest exchanges to adopt five-minute asset reconciliation, automatic "kill switch" trade halts on large mismatches, monthly (vs. quarterly) independent audits, and Chief Risk Officer/Risk Committee structures, with IT upgrades due by May 2026
• The 5% hot wallet insurance / KRW 3 billion minimum was directly tested and validated by the November 2025 Upbit hack recovery
• The DABA stablecoin framework (pending bill) may introduce additional insurance requirements for stablecoin reserve protection

Cross-Reference

See

South Korea Digital Asset Insurance for full details on VAUPA mandatory insurance provisions, 5% hot wallet coverage requirement, KRW 3 billion minimum, Upbit hack case study, and KDIC deposit protection exclusions.

NFT & Digital Collectibles

Activity type: NFT marketplace operation, NFT issuance, fractionalized NFT platforms

Payment / Transfer Service Licensing

Overview

South Korea regulates crypto payment services through KoFIU VASP registration under the Special Financial Information Act (SFIA), supplemented by VAUPA user protection requirements. The real-name bank account verification system is the most consequential barrier to market entry. The pending Digital Asset Basic Act (DABA) would introduce a stablecoin licensing regime.

Payment restrictions: Crypto payment adoption for merchant transactions is negligible. No regulatory framework enables or encourages crypto POS payments. Credit card purchases of crypto are prohibited. Won-denominated trading pairs only.

See

South Korea Crypto Payment Regulation for full details on KoFIU VASP registration, real-name banking system, VAUPA user protection, and DABA stablecoin framework.

11. For Full Details

• South Korea Crypto Payment Regulation -- KoFIU VASP registration, real-name banking, VAUPA, DABA stablecoin framework
• South Korea Custody Regulations -- VAUPA framework, SFIA registration, 80% cold storage, real-name banking, asset segregation, insurance requirements, ISMS certification
• South Korea Stablecoin Regulations -- DABA framework, 100% reserve backing, bank vs. fintech dispute, Terra/LUNA enforcement, zero-threshold travel rule, CBDC suspension
• South Korea DeFi Regulation -- no DeFi licensing pathway, VAUPA/SFIA barriers, real-name banking impossibility for DeFi, DABA stablecoin dispute, zero-threshold travel rule, restrictive stance
• South Korea Digital Asset Taxation -- repeatedly delayed 20% crypto capital gains tax, "other income" classification, enforcement via NTS cold wallet seizures, VAUPA market integrity rules, CARF adoption
• South Korea RWA Regulation -- FSCMA token securities framework, STO exchange licensing, regulatory sandbox designations, KDX/NXT consortia, Busan Blockchain Zone

---

<!-- related-coverage:BEGIN — auto-generated by related_coverage.py; edit via --apply re-run, not by hand -->

Related coverage

South Korea — License Map in other research domains:

• CBDC Frameworks
• DeFi Regulation & Liability Frameworks
• Digital Asset Insurance & Risk Transfer
• Digital Asset Taxation
• Institutional Crypto Custody Regulations
• NFT & Digital Collectibles Regulations
• Payment Services & Crypto Payment Regulation
• Stablecoin Regulations & License Regimes
• Tokenized Real-World Assets (RWA) Regulation

<!-- related-coverage:END -->

Verification Notes

Refreshed 4 June 2026 (prior update 20 March 2026). Operated under verification standard version 2026-06-04 (the targeted gap-closure pass below ran under standard version 2026-06-04).

Targeted gap-closure pass (2026-06-06)

Two register gaps were worked this pass. Operated under verification standard version 2026-06-04.

• DABA licensing dimensions beyond the KRW 500M minimum (Gap 1) — PARTIALLY CLOSED / refined. Status re-confirmed: DABA (General Act on Digital Assets, introduced 10 June 2025) is still a pending bill, not enacted; debate remains deferred to H2 2026 after the 3 June local elections (CoinDesk, 8 Apr 2026; Cryptopolitan, 12 May 2026). The Shin & Kim bill-text analysis (newsletter 2866) established additional qualitative authorization requirements in the introduced text — domestic-corporation status, qualified personnel/IT infrastructure, officer fit-and-proper (5-year financial-law-sanction disqualification), major-shareholder capacity/credibility, and a feasible reserve/redemption + business plan — and clarified that the reserve-backing percentage, reserve holding location, and segregation mechanics are delegated to subordinate regulations not yet drafted, not fixed in the bill. Added these to §1 and §3. The quantified dimensions sought by the gap (application/annual fees, processing timeline, ongoing capital ratios, grandfathering) remain NOT VERIFIED — no enacted statute, no subordinate regulation, no fee schedule. Gap stays substantially open.
• Standalone custody-licence parameters (Gap 2) — NOT CLOSED. Re-checked FSC English press releases on 2026-06-06: no custody-carve-out rule text, draft, or fee schedule has been published since the 17 March 2026 National Assembly report; the most recent virtual-asset release was the KoFIU H2-2025 VASP survey (25 March 2026, statistics only). New nuance added to §3: the introduced DABA bill text already names a digital asset "custody business" as a distinct authorizable activity (with "deemed trust status" and user-registry obligations), but fixes no capital/segregation/bankruptcy-remoteness/staffing parameters. Gap remains open.

Correction (Correction Protocol, 2026-06-06): §3 dual-compliance layer 3 previously listed "100%+ reserve backing" as a fixed DABA licence requirement. The introduced bill text does not fix the reserve percentage (delegated to subordinate regulations); corrected the §3 layer-3 bullet and the §1 paragraph to attribute reserve/segregation mechanics to undrafted subordinate regulation rather than the bill. (The 100% figure persists as the FSC/Democratic-Party policy intent and in the consolidated-proposal commentary, not as enacted bill text.) Licensing facts (licence types, regulators, fees, capital, bond, timelines, effective dates) were reconciled against the nine refreshed deep-research source-domain files for South Korea (all dated 2026-06-04) under content/deep-research/<domain>/regulations/asia-pacific/south-korea.md, then verified against primary/high-authority sources. Cost and timeline figures throughout (setup/annual/insurance estimates, processing windows) are self-reported / estimated industry ranges, not official fee schedules, and are flagged as such.

Corrections made this refresh (Correction Protocol)

1. DABA status — "passed June 2025 by the National Assembly" was INCORRECT. The Digital Asset Basic Act (formally the General Act on Digital Assets) was introduced as a bill on 10 June 2025 by Rep. Min Byung-deok (Democratic Party) and remains pending / not enacted. The ruling party re-proposed/consolidated it on 8 April 2026; it was left off the National Policy Committee's final pre-recess agenda on 12 May 2026, deferring review past the 3 June 2026 local elections into H2 2026. Corrected throughout §1, §2, §3, §6 cost note, §7, §9, §10, the NFT section, and the Payment section. Source of truth: refreshed
   South Korea Stablecoin Regulations; primary corroboration CoinDesk, 8 April 2026; Cryptopolitan, May 2026.
2. DABA minimum paid-in capital added. The introduced bill sets a KRW 500 million (~USD 360,000) minimum paid-in capital for asset-linked-digital-asset (stablecoin) issuers; the prior license-map said only "expected to include minimum capital." Added to §1, §2, §3, and the §2 activity table. Source: refreshed stablecoin domain (Shin & Kim newsletter; CoinDesk 8 April 2026).
3. Tax threshold contradiction resolved. The prior file gave two inconsistent figures — "KRW 50 million annually (~$35,900)" (§7) and "KRW 2.5 million (~USD 1,705)" (§8). The operative threshold is KRW 2.5 million (~USD 1,800); the KRW 50 million figure was a December 2024 proposal never enacted. The MOEF/NTS confirmed in May 2026 the 22% tax proceeds "as scheduled" on 1 January 2027 at the KRW 2.5 million threshold. Corrected in §7 and §8. Source: refreshed
   South Korea Digital Asset Taxation.
4. CARF status updated — "timelines not formally published as of March 2026" was stale. South Korea's Ministry of Strategy and Finance signed the OECD CARF Information Exchange Agreement on 2 September 2025; data recording from 2026, first international exchange in 2027 (2027 first-exchange cohort). Corrected in §8. Source: refreshed taxation domain; OECD commitments list.
5. RWA/STO status updated — "expected to take effect from January 2027" / "final decisions pending as of early 2026" was stale. The FSCMA/AERSB token-securities amendments were passed by the National Assembly on 15 January 2026 and come into force January 2027; the FSC granted preliminary designation to the NXT and KDX consortia on 13 February 2026 (NXT conditional on a possible KFTC probe). Corrected in §9 and the §2 activity table. Source: refreshed
   South Korea RWA Regulation.
6. Project Hangang status updated — "suspended in June 2025" was stale. The BOK paused the pilot in 2025 but relaunched Project Hangang Phase 2 in March 2026 (7→9 banks). New BOK Governor Shin Hyun-song (21 April 2026) prioritised a bank-led CBDC + deposit tokens. Corrected in §7. Source: refreshed stablecoin/CBDC domains; CoinDesk, 21 April 2026.
7. Insurance section refreshed. Added the tiered minimum reserve (KRW 3B for KRW-market exchanges vs. KRW 500M for coin-only exchanges/custodians), the November 2025 Upbit hack (first VAUPA-insurance-covered recovery), the proposed no-fault liability rules (Dec 2025, not enacted), and the 6 April 2026 operational-resilience package. Source: refreshed
   South Korea Digital Asset Insurance.

Developments added (2026-03-20 → 2026-06-04, each dated with primary/high-authority URL)

• 17 March 2026 — FSC reports to the National Assembly it is reviewing a standalone custody-licence carve-out (Bloomingbit).
• 6 April 2026 — FSC operational-resilience package: 5-minute reconciliation, kill switch, monthly audits, CRO/Risk Committee (Seoulz).
• 8 April 2026 — Ruling Democratic Party re-proposes/consolidates DABA with bank-style stablecoin rules (CoinDesk).
• 9 April 2026 — Seoul Administrative Court cancels Dunamu/Upbit three-month suspension (Cointelegraph).
• 21 April 2026 — New BOK Governor Shin Hyun-song prioritises CBDC + deposit tokens, omits stablecoins (CoinDesk).
• 1 May 2026 — Seoul Administrative Court stays Bithumb's six-month suspension (CoinDesk).
• 7 May 2026 — MOEF/NTS confirm the 22% crypto tax will proceed "as scheduled" on 1 January 2027 at the KRW 2.5M threshold (crypto.news).
• 12 May 2026 — DABA left off National Policy Committee agenda; review deferred to H2 2026 (Cryptopolitan).
• 22 May 2026 — Repeal petition crosses 50,000 signatures, triggering parliamentary review of the 2027 crypto tax (BanklessTimes).

Items NOT VERIFIED / sourcing caveats

• DABA licensing dimensions beyond minimum paid-in capital (application/annual fees, processing timeline, ongoing capital ratios, grandfathering): NOT VERIFIED — no statute enacted and no subordinate regulation or fee schedule published. As of the 2026-06-06 re-check, the introduced bill text (per Shin & Kim) names qualitative authorization requirements beyond the KRW 500M minimum paid-in capital — domestic-corporation status, qualified personnel and IT infrastructure, officer fit-and-proper (5-year financial-law-sanction disqualification), major-shareholder financial capacity/social credibility, and a feasible reserve/redemption and business plan — but the quantified dimensions (fees, processing window, ongoing capital, reserve %, segregation mechanics) are delegated to subordinate regulations that have not been drafted. Partially refined this pass; remains substantially open.
• Standalone custody-licence parameters (capital, segregation, bankruptcy-remoteness, staffing): NOT VERIFIED — re-checked 2026-06-06. The introduced DABA bill names a digital asset "custody business" as a distinct authorizable activity (with "deemed trust status" obligations), but no parameters are fixed in the bill and no rule text has been published for the standalone-custody carve-out the FSC reported reviewing on 17 March 2026. An FSC English press-release re-check on 2026-06-06 surfaced no carve-out rule, draft, or fee schedule since that report (most recent VA release: KoFIU H2-2025 VASP survey, 25 March 2026, statistics only).
• Cost figures (Year-Zero setup, annual ongoing, insurance premiums) are self-reported / estimated industry ranges flagged as such; not official regulator fee schedules.
• Bank–exchange real-name pairings in the Payment section (Bithumb/NH, Coinone/Kakao Bank, Korbit/Shinhan, GOPAX/Jeonbuk) are carried from the crypto-payment source and not independently re-verified against each bank's disclosures this cycle.

No Wikipedia, Reddit, X/Twitter, Quora, or Medium sources were used.