South Korea is raising the bar for anyone who wants to run a crypto business inside its borders. The Financial Services Commission has approved rule changes to strengthen the registration and anti-money-laundering requirements for virtual asset service providers, or VASPs, with the core changes taking effect on 20 August 2026. Together, they tighten who can own a crypto operator, how financially sound it must be, and how it tracks the money that moves through it.
Tougher vetting of who owns a crypto operator
The headline change is closer scrutiny of the people and entities behind a VASP. The FSC has expanded vetting of major shareholders to cover criminal records and credit and default history, so a firm can no longer clear registration without regulators closely examining who controls it. The aim is to keep operators with a history of financial crime or serious payment default out of a sector that handles large volumes of customer funds.
New financial soundness tests
Applicants must also show they are financially stable before they can register. The rules introduce a set of soundness conditions that a VASP must meet:
- A debt-to-equity ratio of no more than 200 percent.
- No default on obligations within the past three years.
- No recent record, under financial law, of insolvency as a financial institution or of a revoked operating licence or registration.
These familiar prudential-style gates, borrowed from mainstream finance, signal that the FSC now expects crypto operators to maintain the kind of balance-sheet discipline it demands of regulated financial firms. Existing operators are given an extra year to meet the debt-to-equity requirement, a grace period that runs beyond the general re-filing deadline.
Registration reviews and the travel rule
On supervision, the FSC and the Korea Financial Intelligence Unit keep their existing authority to inspect and oversee registered VASPs. Rather than creating a schedule of mandatory audits, the amendments allow the regulator to pause a registration review while a criminal investigation or inspection of the applicant is underway, and to attach conditions to a registration.
The rules also tighten transfer tracking. The KRW 1 million threshold that previously exempted smaller transfers from the crypto travel rule is being abolished for transfers between registered Korean VASPs, so those exchanges must exchange full originator and beneficiary information on transfers of any size. Transfers to overseas exchanges or to private, unhosted wallets fall under a separate and stricter regime: they are allowed only for low-risk counterparties and generally only where the sender and the recipient are the same person, with high-risk transfers blocked, and any transfer of KRW 10 million or more to an overseas provider must be reported to the Korea Financial Intelligence Unit.
Unlike the registration and soundness rules, this travel-rule change takes effect later, around 20 February 2027, roughly six months after the amendment is promulgated. It sits within Korea’s anti-money-laundering regime under the Specified Financial Transaction Information Act.
What VASPs need to do now
The changes are not only for new entrants. Existing VASPs must refile under the strengthened requirements by 20 November 2026, giving incumbents a defined window to recheck their ownership structures, prove their financial soundness, and upgrade their travel-rule handling. For a market that has grown quickly, the FSC's message is that continued access to Korean customers now depends on meeting a higher, more clearly defined standard.
Full details are set out in the FSC’s English announcement and its original Korean release.
