South Korea has enacted comprehensive cryptocurrency regulations following Cabinet approval of key enforcement modifications on August 11. The changes come as South Korea continues tightening oversight of one of the world's largest retail cryptocurrency markets, where trading volume has at times rivaled that of the national stock exchange. The regulatory package eliminates the previous 1 million won Travel Rule minimum and expands oversight of international transfers and private wallet transactions. The framework also introduces more rigorous registration criteria, shareholder vetting procedures, capital requirements, personnel standards, technology infrastructure obligations, and internal governance systems for cryptocurrency businesses.

Enhanced Travel Rule Applies to All VASP Transactions

South Korea has mandated that the Travel Rule apply to all transactions between registered virtual asset service providers (VASPs), removing any minimum transaction value. The previous regulatory framework required compliance only for transfers exceeding 1 million won—approximately $700—between registered entities. Korean authorities determined that market participants were circumventing disclosure obligations by splitting larger transactions into multiple smaller transfers below the threshold.

The measure implements the Financial Action Task Force's Recommendation 16, which requires virtual asset service providers to transmit originator and beneficiary information for transfers. While the FATF standard has been adopted internationally, South Korea's removal of any minimum threshold places it among the strictest enforcement regimes globally.

The Financial Intelligence Unit documented a case in which approximately 200 million won was deposited into a domestic cryptocurrency platform. The account holder purchased Tether (USDT) and then executed 216 separate withdrawals, each strategically kept under 1 million won. The expanded Travel Rule aims to close such loopholes used to evade anti-money laundering (AML) oversight within domestic cryptocurrency exchanges.

Under the updated rules, recipient platforms must obtain complete sender and recipient details before processing regulated transfers and are authorized to decline transactions lacking proper information. South Korea has also mandated substantially enhanced risk assessment procedures for transfers involving international exchanges, personal cryptocurrency wallets, and receiving parties. Cryptocurrency operators must actively monitor transfers exceeding 10 million won that involve foreign platforms or wallet addresses for potentially suspicious patterns.

Stricter Registration Requirements for Virtual Asset Providers

Through the revised decree, South Korea has broadened its examination of significant shareholders associated with registered VASPs. The regulations cover shareholders capable of appointing representatives or controlling a majority of board positions, including beneficial owners operating through corporate shareholder structures. Authorities will assess financial stability, criminal history, corporate governance practices, reputational standing, and connections to distressed financial entities.

A registered VASP must typically maintain a debt-to-equity ratio at or below 200% under the updated reporting qualification standards. Organizations must also employ qualified personnel, deploy appropriate technology systems, implement security infrastructure, establish incident prevention protocols, and maintain robust internal oversight mechanisms for operational activities. Current service providers will receive a one-year adjustment period to satisfy the various financial, staffing, technological, and governance obligations.

The registration requirements become operative on August 20, 2026, following prior modifications to the foundational financial legislation. South Korea will implement the expanded Travel Rule and associated transfer protocols six months after official publication. Together, these measures establish a more comprehensive regulatory environment for domestic cryptocurrency enterprises and cross-border virtual asset operations, building on the Virtual Asset User Protection Act that took effect in July 2024. Market participants will be watching how smaller exchanges and VASPs adapt to the tightened capital and governance thresholds, which may accelerate consolidation within the sector.