News South Korea
South Korea FSC VASP Licensing Framework Strengthens Registration Rules
Key points
South Korea’s Financial Services Commission has finalized amendments to VASP registration requirements under the Special Financial Information Act.
South Korea’s Financial Services Commission and the Korea Financial Intelligence Unit completed amendments to the Enforcement Decree of the Special Financial Information Act in August 2026. The changes took effect on 20 August 2026 and apply to all virtual asset service providers seeking or holding registration.
South Korea FSC VASP Licensing Requirements Expand Scrutiny
The updated rules require deeper review of major shareholders, including the largest shareholder, chief executive, and representatives of corporate owners. Applicants must maintain a debt ratio at or below 200 percent, show no defaults in the prior three years, and demonstrate no history of insolvency or license revocation.
Operators must also prove adequate expertise, maintain cybersecurity and IT systems inside South Korea, and establish internal controls for anti-money laundering and user asset protection. Criminal-record checks now cover a wider range of offenses, though limited exemptions remain for minor violations.
These measures build directly on the 2021 registration regime and the 2024 Virtual Asset User Protection Act. As of 30 June 2026, 28 VASPs had completed registration with KoFIU under FSC oversight. The framework stays registration-based rather than a full licensing system.
Existing registered entities received a revised VASP Registration Manual on 13 August 2026. They must file supplementary reports by approximately 20 November 2026 to confirm compliance with the new shareholder and operational standards.
AML Enhancements and Future Regulatory Steps
Travel-rule obligations now extend to every transfer amount between registered VASPs. Transfers exceeding KRW 10 million to overseas counterparties require mandatory reporting, and enhanced customer due diligence applies in high-risk situations. These AML provisions become mandatory six months after promulgation, around 19 February 2027.
Authorities continue to monitor compliance through industry associations. A separate Digital Asset Framework Act that may introduce stablecoin rules and sandbox mechanisms remains under fast-track preparation. Tokenized securities guidelines are in consultation with a target implementation date of February 2027.
Cross-border VASP registration obligations under the Foreign Exchange Transactions Act are scheduled to start in December 2026. Market participants can expect ongoing inquiries from KoFIU and the FSC as supervision intensifies.
Impact on Registered Operators and Market Structure
The amendments raise the operational bar for both new entrants and the 28 already registered VASPs. Domestic infrastructure requirements and expanded fitness tests may slow new applications while prompting existing firms to strengthen governance and reporting processes.
Industry briefings held after the 13 August 2026 manual release provided guidance on documentation and timelines. Operators that fail to meet the November 2026 supplementary filing deadline risk regulatory action, including potential restrictions on new services.
The updates maintain South Korea’s registration model while aligning it more closely with international standards for shareholder transparency and financial soundness. Market participants continue to prepare for the additional AML deadlines and the forthcoming Digital Asset Framework Act.
Frequently asked questions
When did the South Korea FSC VASP licensing amendments take effect?
The amendments to the Enforcement Decree were approved by Cabinet on 11 August 2026 and became effective on 20 August 2026. Existing registered VASPs must submit supplementary reports by around 20 November 2026.
What new financial criteria apply to VASP applicants?
Applicants must keep a debt ratio of 200 percent or lower, demonstrate no defaults in the previous three years, and show no record of insolvency or prior license revocation. Major shareholders face expanded background checks.
When do the expanded AML rules for VASPs start?
Travel-rule obligations for all transfer amounts and stricter overseas transfer reporting begin around 19 February 2027. Enhanced customer due diligence for high-risk cases applies from the same date.
How many VASPs are currently registered in South Korea?
Twenty-eight virtual asset service providers held registration with KoFIU as of 30 June 2026. All must meet the updated standards through supplementary filings.
Comments
No comments yet. Be the first!