Korea Crypto Law: Complete Legal Guide for Foreign Businesses & Investors

Korea has one of the world’s most developed crypto regulatory frameworks. If you are a foreign business operating a virtual asset service, a blockchain project targeting Korean users, or an investor navigating Korean crypto markets, understanding Korea’s crypto law is essential.

This guide provides a structured overview of Korean crypto regulation, updated for 2026.

The Legal Framework: What Governs Crypto in Korea

Korea regulates crypto primarily through two statutes:

1. The Act on Reporting and Using Specified Financial Transaction Information (“SFTIA”)
Enacted in 2020 and amended in 2021, this law introduced mandatory VASP (Virtual Asset Service Provider) registration with the Korea Financial Intelligence Unit (KoFIU). It established AML/CFT obligations for exchanges, wallet providers, and other crypto businesses.

2. The Virtual Asset User Protection Act (“VAUPA”)
Enacted in 2023 and effective from July 2024, this law introduced investor protection rules: segregation of user assets, prohibition of unfair trading practices, and oversight by the Financial Services Commission (FSC).

Together, these two laws form the backbone of Korean crypto regulation.

Key Compliance Areas

VASP Registration

Any business providing crypto exchange, custody, or transfer services to Korean users must register with KoFIU. Requirements include:

ISMS (Information Security Management System) certification
Real-name verified bank account with a Korean partner bank
Clean AML compliance record for executives and major shareholders

Foreign businesses serving Korean users from abroad must assess whether their activities trigger registration obligations under Korean law.

→ KoFIU AML Reporting Requirements for VASPs in Korea
→ Multi-sig Crypto Companies and VASP Scope

→ Korea’s VASP Numbers Are Shrinking: Why Foreign Crypto Businesses Are Choosing Partnership Over Direct Entry

→ Opening a Corporate Account at a Korean Crypto Exchange: What Foreign Companies Need to Know

CARF Compliance

Korea has committed to implementing the OECD’s Crypto-Asset Reporting Framework (CARF), requiring VASPs to report user transaction data to tax authorities. Foreign crypto businesses with Korean users face cross-border reporting obligations.

→ CARF Compliance for Foreign Crypto Exchanges in Korea

Security Token Offerings (STO)

Korea passed STO legislation in 2024, creating a regulated pathway for tokenized securities. Issuers must comply with the Capital Markets Act and FSC guidelines for tokenized asset offerings.

→ Korea Passes STO Legislation — What It Means for Issuers
→ Korea Security Token Regulation: Legal Analysis

→ Digital Asset Basic Act Delayed: How Stablecoin and STO Tracks Are Moving Separately

→ Korea’s Digital Asset Basic Act: What’s In and What’s Still Being Debated (Part 2 of Series)

Virtual Asset Classification

Korean regulators distinguish between securities tokens (regulated under the Capital Markets Act) and non-securities virtual assets (regulated under SFTIA/VAUPA). Misclassification carries significant legal risk.

→ How Korean Authorities Classify Virtual Assets

AML/CFT Obligations

KoFIU requires VASPs to implement:

Customer due diligence (CDD) and enhanced due diligence (EDD)
Transaction monitoring and suspicious transaction reporting (STR)
Travel Rule compliance for cross-border transfers

→ KoFIU VASP Reporting Manual — AML Obligations
→ Korea Crypto Law: Clean Criminal Records Required for VASPs

Unregistered Overseas VASPs and Korean Referral Structures

One of the most critical — and frequently overlooked — compliance issues involves overseas crypto exchanges that acquire Korean users indirectly through domestic Korean referral or marketing companies.

Under Korean law, a foreign VASP that actively solicits or services Korean users is required to register with KoFIU, regardless of where the exchange is incorporated. Operating without registration exposes both the overseas exchange and its Korean referral partners to significant legal risk, including:

Criminal liability under the SFTIA for unregistered VASP activity
Regulatory action by KoFIU and the FSC
Potential liability for Korean referral companies acting as de facto intermediaries

Korean authorities have increasingly focused enforcement attention on this structure. Foreign exchanges that use domestic marketing partners, affiliate programs, or referral networks to reach Korean retail investors cannot rely on their offshore incorporation as a compliance shield.

Key questions for overseas exchanges with Korean exposure:

Does the referral or marketing activity constitute VASP activity under Korean law?
Does the Korean referral company itself trigger VASP registration obligations?
What contractual and compliance measures are required between the overseas exchange and its Korean partners?

Cha & Kwon advises overseas exchanges and their Korean business partners on structuring compliant referral arrangements and, where required, navigating the KoFIU registration process.

→ Virtual Asset Referral Marketing Compliance Advisory

Crypto Trading Bots and Automated Trading in Korea

Automated trading strategies and crypto trading bots raise distinct legal issues under Korean law. Three risk areas require specific analysis for bot operators or platforms serving Korean users.

First, if a bot transfers or manages virtual assets on behalf of third parties, the operator may qualify as a VASP under the SFTIA — requiring KoFIU registration. Second, providing discretionary crypto investment management as a service requires a Capital Markets Act license for discretionary investment business; operating without one is a separate regulatory violation. Third, certain automated strategies — wash trading, layering, spoofing — are expressly prohibited as market manipulation under the Virtual Asset User Protection Act (VAUPA), with criminal penalties of up to five years imprisonment or KRW 50 million in fines.

→ Crypto Trading Bots in Korea: Legal Risks Around VASP Registration and Market Manipulation

Crypto Investment Advisory

Under current Korean law, providing virtual asset investment advisory services — recommending which cryptocurrencies to buy or sell — may not require a Financial Services Commission (FSC) license. Korea’s Capital Markets Act licenses “investment advisory businesses,” but that regime applies exclusively to “financial investment products,” a statutory category that does not currently include virtual assets.

The pending Digital Asset Basic Act is expected to close this gap by introducing a separate licensing framework for crypto advisors. Until that legislation is enacted, the licensing position remains unsettled — and other liabilities (fraud, VAUPA market manipulation, and discretionary management rules) continue to apply regardless.

→ Is Crypto Investment Advisory Legal in Korea Without a License?

Taxation of Crypto in Korea

Korea taxes crypto gains as “other income” at 20% above an annual exemption threshold. The implementation timeline has been revised multiple times. As of 2025, crypto taxation is scheduled to take effect in 2027.

Korean residents must also report crypto proceeds when used in real estate transactions.

→ South Korea Mandates Reporting of Crypto Proceeds in Real Estate

Corporate Crypto Investment

The FSC has introduced guidelines limiting listed Korean companies to a 5% cap on corporate crypto investment. This affects treasury management strategies for Korean-listed companies.

→ South Korea Sets 5% Cap for Corporate Crypto Investment

Exchange Delisting and Legal Remedies for Token Issuers

When a Korean exchange announces it will delist a token, the primary legal remedy available to the token issuer is an emergency injunction (가처분 신청). Korean courts apply a two-prong standard: the applicant must prove a legally recognized right to preserve (피보전권리) and the necessity for preservation (보전의 필요성). Courts approach these cases conservatively, and advance preparation—including formalized listing agreements—significantly affects outcomes.

→ When a Korean Exchange Delists Your Token: Legal Options and How to Prepare

How Cha & Kwon Can Help

Cha & Kwon Law Offices is a Seoul-based law firm specializing in Korean crypto and blockchain law. Our practice covers:

VASP registration and KoFIU compliance advisory
CARF and cross-border tax reporting obligations
STO structuring and Capital Markets Act compliance
Virtual asset classification opinions
Crypto-related criminal defense and regulatory investigations
Contract drafting for token economies, NFT platforms, and DeFi projects

We advise domestic and foreign clients on navigating Korea’s fast-evolving crypto legal landscape.

Contact: contact@chakwon.com
Website: chakwon.com

Legal Opinion Letters for Crypto Businesses

Korean exchanges and app stores require formal legal opinion letters before listing tokens or approving crypto applications. This article explains what these letters contain, when they are required, and how bilingual (Korean-English) delivery works under Korean law.

→ Legal Opinion Letters for Crypto Businesses in Korea

Criminal Liability: Fraud and Breach of Trust

When crypto projects collapse or exchange operators misappropriate customer funds, Korean criminal law provides remedies through fraud (사기죄, Article 347) and breach of trust (배임죄, Articles 355–356). This guide explains which charges apply, why embezzlement charges routinely fail for crypto, and how to file an effective criminal complaint with Korean police and prosecutors.

→ Crypto Fraud and Breach of Trust in Korea — Criminal Law Guide for Foreign Investors

Legislative Discussion: Blockchain Framework Act

Korea’s existing crypto statutes—the Virtual Asset User Protection Act, the Electronic Securities Act, and the Specific Financial Transaction Information Act—each borrow distributed ledger concepts without defining them. Industry, academic, and policy circles are debating a dedicated Blockchain Framework Act to give distributed ledger records, smart contracts, and DID a unified legal foundation. This article walks through the tiered legal-effect structure being discussed.

→ Korea’s Blockchain Framework Act Discussion: An Industry View on Distributed Ledger, Smart Contracts, and DID

Related Practitioner Guide for Foreign Operators

If you are a foreign exchange, custodian, fintech, OTC desk, asset manager, or fund evaluating Korean market entry, our practical entry guide assembles the topics above through the lens of an offshore operator’s journey — from access pathways to entity setup, ongoing compliance, dispute risk, and commercial use of virtual assets.

→ Foreign Companies Entering Korea’s Crypto Market: Practical Legal Guide