South Korea is moving to give its Financial Intelligence Unit sharper teeth against unregistered crypto firms, especially overseas operators that have been hard to pin down through the usual referral chain.
- FIU direct powers could replace slow police handoffs
- 23 of 25 referred cases were reportedly suspended
- Overseas operators remain the main enforcement headache
- Cross-border transfer rules are also getting tougher
Lawmakers filed a bill on Thursday that would amend the Act on Reporting and Using Specified Financial Transaction Information, better known as the Specific Financial Information Act. The proposal, introduced by People Power Party lawmaker Eom Tae-young and nine other lawmakers, would let the Financial Intelligence Unit (FIU) investigate suspected unregistered crypto businesses directly.
That matters because the current setup leaves the FIU dependent on other agencies to do much of the heavy lifting. Under the bill, anyone could report a suspected violation directly to the FIU. The agency could then investigate and analyze the conduct, file complaints with relevant authorities, request criminal investigations, and hand over the information it gathered.
The bill is only an introduction for now. It still has to pass the National Assembly before it becomes law.
The push comes after enforcement appears to have hit a wall. According to Yonhap, police suspended investigations or preliminary inquiries into 23 of the 25 unregistered virtual asset service providers referred by the FIU between August 2022 and August 2025. The companies and people involved were reportedly located outside South Korea, and that is exactly where enforcement gets messy: different jurisdictions, limited leverage, and more excuses than results.
The FIU said in June that only 28 virtual asset service providers were registered, while about 40 suspected illegal operators had already been referred to investigative authorities. In South Korea, a virtual asset service provider is not just any crypto project with a website and a loud Telegram channel. Firms serving residents are required to register with the FIU, including foreign companies targeting South Korean customers, and they must meet local compliance requirements such as Information Security Management System certification.
The regulator says some of the operators under scrutiny are not subtle about how they find customers. The FIU warned that overseas services have used Telegram and KakaoTalk open chat rooms to recruit users, often with English-language customer support aimed at international students, tourists, foreign workers, and people seeking transactions without revealing their identity. Some businesses reportedly exchange digital assets directly for Korean won or other fiat currencies.
Promoters were also paid to advertise foreign crypto services through YouTube channels, Telegram groups and online communities, according to the FIU. That is not exactly the high-minded future of finance. It is more like old-fashioned market spam with blockchain branding and a compliance problem stapled to it.
The FIU has been blunt about the risk. It said unregistered services can expose users to fraud, hacking and personal data leaks, and that users may struggle to recover funds if an operator fails to deliver the assets they paid for. The agency also warned that unauthorized crypto platforms and private exchange services can be used to conceal criminal proceeds or move money without the checks applied to registered financial firms.
That is the real point here. South Korea is not trying to ban crypto into the ground. It is trying to make access to Korean users conditional on basic rules, real registration, and actual accountability. Novel concept, apparently.
The enforcement fight is not limited to offshore operators, either. Earlier this year, domestic exchanges objected to a proposed rule that would require them to report overseas-linked crypto transfers worth at least 10 million won as suspicious transactions. A May proposal drew objections from the Digital Asset Exchange Alliance (DAXA), which said the rule could increase annual suspicious transaction reports at Upbit, Bithumb, Coinone, Korbit and Gopax from about 63, 000 to more than 5.4 million.
That is a gigantic jump. If DAXA’s estimate is anywhere near right, the concern is not just compliance cost. It is overload. At that point, you risk burying useful alerts under a mountain of paperwork and congratulating yourself for “more oversight” while drowning the signal in noise.
South Korean exchanges have also been fighting their own regulatory battles. In April, a Seoul court overturned a three-month partial suspension imposed on Dunamu, the operator of Upbit, after the FIU alleged 44, 948 transactions involving 19 unregistered overseas platforms. Bithumb separately secured a court stay against a six-month partial suspension after regulators accused it of customer verification failures and dealings with unregistered foreign companies. Coinone also obtained temporary court relief tied to anti-money laundering and customer verification requirements.
Those court wins matter. They show the FIU is not operating in a vacuum, and they also show why Seoul wants a cleaner enforcement path. If cases keep stalling after referral, regulators will keep running into the same wall: activity they can spot, but not always quickly stop.
There is a broader framework tightening up around all of this. Under amendments to the Foreign Exchange Transactions Act, companies handling cross-border virtual asset transfers will have to register with the Ministry of Economy and Finance when the framework takes effect in December. The government promulgated the revised law on June 2 and gave it a six-month grace period.
Once implemented, virtual asset transfers involving South Korea and another country will fall under the country’s regulated foreign exchange system. Companies offering the service will need to register with the finance ministry and report qualifying overseas transfers through the Bank of Korea’s foreign exchange reporting network. Applicants must first complete VASP registration, connect their systems to institutions that transmit foreign exchange and digital asset transaction data, and satisfy requirements covering facilities and qualified personnel.
That is a lot of hoops, but that is also the point. South Korea is building a regime where crypto can keep operating, but not as if the rules are optional decor.
The upside is obvious: stronger tools against fraud, laundering, and offshore services that ignore local safeguards. The downside is just as clear: if reporting thresholds are too broad or enforcement becomes too bureaucratic, legitimate activity can get buried in compliance sludge. Both things can be true at once, and regulators are always one bad rule away from turning “oversight” into paperwork theater.
For now, the message from Seoul is straightforward. If you want to serve South Korean users, you do not get to freeload on the system and call it decentralization. That word has been abused enough already.
Key takeaways
-
Why is South Korea changing the law?
Because suspected unregistered crypto operators, especially overseas ones, have been difficult to pursue through the current referral-based process. -
What would the FIU gain?
Direct authority to investigate, analyze, file complaints, request criminal investigations, and pass evidence to other authorities. -
How bad has enforcement been?
According to Yonhap, police suspended investigations or preliminary inquiries into 23 of 25 FIU-referred cases between August 2022 and August 2025. -
Why are exchanges pushing back?
DAXA says the proposed overseas-transfer reporting rule could push annual suspicious transaction reports from about 63, 000 to more than 5.4 million. -
Are South Korean exchanges also under pressure?
Yes. Upbit, Bithumb and Coinone have all faced enforcement action or court disputes tied to AML and customer verification issues. -
What changes in December?
Cross-border virtual asset transfers are set to fall under South Korea’s foreign exchange regime after the June 2 law and six-month grace period. -
Is the FIU bill already law?
No. It has only been introduced and still needs approval from the National Assembly.
Further reading
A few useful background pieces on South Korea’s tightening crypto rules and the institutions behind them:
