Unregistered Virtual Asset Service Providers in Korea: Registration Requirements and Penalties
Frequent trading of virtual assets does not, by itself, mean that you are required to register as a Virtual Asset Service Provider (VASP) in Korea.
However, if you repeatedly buy, sell, exchange, transfer, broker, arrange, or facilitate virtual asset transactions for others and receive compensation for doing so, you may be considered a VASP subject to registration requirements under Korea’s Act on Reporting and Using Specified Financial Transaction Information (the “Specified Financial Information Act”).
1. What Is an Unregistered Virtual Asset Service Provider in Korea?
A person or entity may be treated as an unregistered VASP if it conducts regulated virtual asset activities as a business without completing the required registration with the Korea Financial Intelligence Unit (KoFIU).
The Specified Financial Information Act regulates businesses engaged in activities involving virtual assets, including the purchase and sale of virtual assets, exchanges between virtual assets, certain transfers, custody or management, and the brokerage, arrangement, or agency of virtual asset transactions.
Accordingly, the rules are not limited to large centralized exchanges. Depending on the actual structure of the business, an individual or smaller operator may also fall within the scope of a VASP.
Specified Financial Information Act, Article 7 ↗
2. How Is VASP Status Determined?
The key issue is not simply whether virtual assets were traded, but whether the relevant activities were carried out “as a business.”
The Supreme Court of Korea has held that VASP status should be determined by considering the circumstances as a whole, including:
- the purpose and type of the transactions;
- the scale and frequency of the transactions;
- the period over which the transactions were conducted; and
- the manner in which the transactions were carried out.
In particular, an ordinary exchange user who repeatedly buys or exchanges virtual assets solely for his or her own account and benefit will generally not be regarded as a VASP, absent special circumstances.
By contrast, a person who repeatedly conducts virtual asset transactions for the benefit of an unspecified number of customers or users and receives compensation in return may, in principle, be regarded as a VASP.
Supreme Court Decision 2024Do10710, Dec. 12, 2024 ↗
3. How Are Personal Crypto Trading and VASP Activities Distinguished?
The amount or frequency of trading is not the decisive factor. What matters more is for whom the transactions are conducted and how the business operates.
| Factor | More Likely to Be Personal Trading | May Require VASP Review |
|---|---|---|
| Purpose | Personal investment or profit | Providing transaction services to customers |
| Funds | Trader’s own funds | Funds connected to customers or third parties |
| Counterparty | Trading through an exchange for one’s own account | Transactions involving multiple customers |
| Compensation | No separate fee | Fees, spreads, or other compensation received |
| Transaction method | Trading based on one’s own decisions | Buying, selling, exchanging, or transferring at a customer’s request |
| Continuity | Trading as part of personal investment activity | Activities performed repeatedly as a business |
A high transaction volume or a large number of trades does not automatically make a person an unregistered VASP.
Conversely, even if transactions are conducted through a personal bank account or wallet, VASP status may need to be reviewed where the person repeatedly provides transaction services to customers and earns fees or other compensation.
4. Can OTC, P2P, or Crypto Transaction Services Require VASP Registration?
Yes. OTC or P2P transactions are not automatically subject to VASP registration, but the actual business model may fall within the regulated scope.
For example, VASP issues may arise where an operator repeatedly:
- receives Korean won from customers and transfers USDT or other virtual assets in return;
- buys, sells, or exchanges virtual assets at a customer’s request;
- earns fees or profits through transaction spreads; or
- solicits customers through Telegram, open chat rooms, or similar online channels.
The absence of a formal exchange platform or physical business location does not, by itself, exclude the activity from VASP regulation.
In June 2026, KoFIU specifically identified private exchange operators that buy and sell stablecoins and other virtual assets in exchange for fiat currency as a type of unregistered virtual asset business activity requiring regulatory attention.
KoFIU / Financial Services Commission – Official Source ↗
5. Can an Overseas Virtual Asset Business Be Required to Register in Korea?
Yes. An overseas business may be subject to Korean VASP registration requirements if it conducts business activities targeting users in Korea.
KoFIU considers various factors when assessing whether an overseas virtual asset business is conducting business in Korea, including:
- whether a Korean-language website or service is provided;
- whether payments in Korean won are supported;
- whether customer acquisition campaigns target Korean users; and
- whether marketing activities are directed at users in Korea.
In June 2026, KoFIU announced that it had identified eight illegal OTC operators and four overseas exchanges conducting business in Korea, referred the cases to the police, and requested domestic access restrictions for the relevant websites and applications.
Accordingly, the fact that a company is incorporated or headquartered outside Korea does not, by itself, exempt it from Korean VASP regulations.
KoFIU / Financial Services Commission – Official Source ↗
6. What Are the Consequences of Operating as an Unregistered VASP?
Operating a virtual asset business without the required registration may result in criminal liability under the Specified Financial Information Act.
Under Article 17(1) of the Act, a person who conducts virtual asset transactions as a business without filing the registration required under Article 7(1) may be subject to imprisonment for up to five years or a fine of up to KRW 50 million.
Specified Financial Information Act, Article 17(1) ↗
In addition, amendments to the Specified Financial Information Act scheduled to take effect on August 20, 2026 will strengthen the entry and registration requirements applicable to VASPs. The amended framework expands the review of matters such as the financial condition and social credibility of the VASP and its major shareholders, as well as organizational, personnel, IT infrastructure, and internal control requirements.
Financial Services Commission – Official Source ↗
KoFIU has also taken measures against unregistered operators, including referrals to investigative authorities, requests to restrict domestic access to websites and mobile applications, and restrictions involving transactions with registered VASPs.
KoFIU / Financial Services Commission – Official Source ↗
If you have already conducted transactions that may fall within the scope of VASP activities, it is advisable to organize the relevant transaction records, bank account and wallet flows, communications with customers, fee or spread structures, and the specific role you performed before assessing the applicable regulatory and legal risks.
7. Frequently Asked Questions (FAQ)
Q1. If I frequently buy and sell USDT, am I automatically considered a VASP?
No. Frequent trading alone does not automatically make you a VASP.
It is necessary to consider whether you were trading with your own funds for your own benefit or conducting transactions for customers in return for fees or other compensation.
Q2. Do I need to register if I occasionally buy crypto on behalf of a friend?
Not necessarily. An isolated transaction performed at the request of a friend does not, by itself, determine VASP status.
The analysis may change depending on factors such as the number and range of counterparties, transaction frequency and duration, whether compensation was received, and whether the activity was carried out continuously or repeatedly.
Q3. Am I outside the VASP rules if I do not have a registered business?
No. The absence of a Korean business registration does not, by itself, determine whether you are a VASP under the Specified Financial Information Act.
Even an individual operating through a personal account or wallet may need to consider VASP registration requirements if the person repeatedly provides virtual asset-related services to customers for profit.
8. Key Takeaways
Whether a person or business constitutes an unregistered VASP in Korea depends not simply on the volume of crypto trading, but primarily on whether virtual asset-related services are repeatedly provided to customers as a business.
For OTC, P2P, or transaction-facilitation arrangements in particular, the purpose of the transactions, counterparties, flow of funds, fee structure, and the operator’s actual role should be reviewed together.
Decent Law Firm advises clients on whether their virtual asset business models fall within Korea’s VASP regulatory framework, including registration requirements under the Specified Financial Information Act and legal risks associated with unregistered operations.
