# South Korea

> South Korea (FSC · FSS · KoFIU · PIPC): Identity-maximalist, and exporting the model. Region: Asia-Pacific. Attribution required: A regulated firm must be able to attribute activity to an identified person, and assets or accounts that make that impossible are barred at the licensed perimeter. This is a rule about attribution, not about whether amounts are public.

Part of the Soda Labs Privacy Hub regulation map, which reads the instruments
themselves rather than summarising the summaries: https://www.sodalabs.xyz/privacy-hub/regulation

## Key facts

- Entry type: Jurisdiction
- Region: Asia-Pacific
- Subject: Identity-maximalist, and exporting the model
- Authority: FSC · FSS · KoFIU · PIPC
- Stance on on-chain confidentiality: Attribution required. A regulated firm must be able to attribute activity to an identified person, and assets or accounts that make that impossible are barred at the licensed perimeter. This is a rule about attribution, not about whether amounts are public.
- Tags: dark coin bar, real-name accounts, zero threshold, unhosted wallet limits
- Canonical page: https://www.sodalabs.xyz/privacy-hub/regulation/jur-south-korea

## What it actually says

The most identity-maximalist regime covered here, and the only one actively trying to export it. Untraceable assets have been barred from Korean platforms since 2021, layered on top of a real-name bank account requirement that makes the won on-ramp a chokepoint. The August 2026 amendments go further than anything else in this section: the travel rule threshold is abolished outright so it applies to transfers of any size, and transfers to personal wallets are permitted only where the destination is low-risk or the two ends are confirmed to be the same person, with outright prohibition where the counterparty is high-risk. Accommodation exists but sits entirely on the institutional access axis (corporate accounts, tokenised securities) and not on confidentiality.

## The instruments that matter

- **Dark coin restriction**: the FSC announced in November 2020 that virtual assets whose transaction records are hard to trace could not be handled, with enforcement from March 2021; exchanges had already delisted Monero, Zcash, Dash and Zcoin in September 2019 citing FATF
- **Virtual Asset User Protection Act, from 19 July 2024**: deposit custody at banks, asset segregation, mandatory surveillance systems and unfair-trading reporting to the FSS
- **Cabinet approval, 11 August 2026**: abolishes the travel rule threshold entirely, so it applies to transfers of all sizes; transfers of KRW 10m or more to overseas providers must be reported to KoFIU
- **Unhosted wallet transfers restricted**: permitted only where the destination is low-risk or sender and recipient are confirmed to be the same person, and prohibited outright where the counterparty is high-risk

## Sources

- [FSC on the August 2026 enforcement decree amendments](https://www.fsc.go.kr/eng/pr010101/87500)
- [FSC on the Virtual Asset User Protection Act](https://www.fsc.go.kr/eng/pr010101/82683)

## Related entries

- [Singapore](https://www.sodalabs.xyz/privacy-hub/regulation/jur-singapore): Regulates anonymity by risk assessment, not prohibition
- [Monetary Authority of Singapore](https://www.sodalabs.xyz/privacy-hub/regulation/reg-mas): The regulator that priced the risk instead of banning it
- [Bangladesh](https://www.sodalabs.xyz/privacy-hub/regulation/jur-bangladesh): Barred through exchange control, not a crypto law
- [Bermuda](https://www.sodalabs.xyz/privacy-hub/regulation/jur-bermuda): A travel rule with no minimum, reaching self-hosted wallets
- [China](https://www.sodalabs.xyz/privacy-hub/regulation/jur-china): Crypto banned, and a state currency designed for anonymity
- [India](https://www.sodalabs.xyz/privacy-hub/regulation/jur-india): No crypto statute, regulated through AML and tax