Crypto-funded debit card in South Korea
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in South Korea with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VASP registration with KoFIU mandatory under the Act on Reporting and Use of Specific Financial Transaction Information (2021 amendment)
- Real-name verified bank account partnership required for any fiat-crypto conversion (critical bottleneck)
- ISMS (Information Security Management System) certification from KISA mandatory
- Suspicious Transaction Reporting (STR) to KoFIU under AML/CFT obligations
- KYC/AML compliance enforced under KoFIU guidelines for all cardholders
- Under VAUPA (2024), mandatory compensation reserves and 100% cold storage for virtual asset reserves
- Gain tracking for Korean tax purposes — 20% tax on crypto gains above KRW 2.5M per year (effective 2025/2027)
- Real-name customer identification at onboarding required for all fiat on/off-ramp transactions
Key Restrictions
- Crypto-to-fiat conversion requires a real-name bank partnership — only 5 exchanges (Upbit, Bithumb, Coinone, Korbit, Gopax) have achieved this, creating a severe operational bottleneck
- No separate e-money or payment-institution license category exists for crypto-funded debit cards; the issuer must operate via a licensed exchange-VASP with bank partnership
- VASP registration requires minimum KRW 3B (~$2.2M USD) equity capital if operating as an exchange
- Stablecoin usage is nascent — KRW-pegged stablecoins under development by major banks (target late 2025/early 2026); no separate licensing framework yet
- Stablecoin issuers must maintain full or over-collateralized reserves in regulated financial institutions; interest-bearing stablecoins banned nationwide
- Cross-border stablecoin transactions may be subject to foreign exchange oversight
- A local entity incorporation is strictly required — VASP registration requires a Korean-incorporated entity
Key Risks
- Real-name bank account partnership is the binding constraint — without it, fiat rails are impossible; the bottleneck limits viable card programs to the 5 major exchange ecosystems
- Regulatory framework for crypto debit cards is not explicitly defined — the operating model must be structurally embedded within an existing licensed VASP/exchange
- Tax implementation has been deferred multiple times (currently effective 2027) creating uncertainty in reporting obligations
- Upcoming Digital Asset Basic Act (proposed early 2026) could substantially alter the regulatory landscape for stablecoins, custody, and card programs
- Bank of Korea has warned KRW stablecoins could impact capital flows — potential FX stability scrutiny
- High enforcement risk: FSC/FSS actively investigate abnormal transactions; VAUPA imposes severe penalties (up to life imprisonment for gains over 5B KRW)
- Only a small number of Korean banks are willing to partner with crypto VASPs for real-name accounts, leaving most operators locked out of the market
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Act on Reporting and Using Specified Financial Transaction Information (amended) (2021) — VASP registration, AML/CFT
Virtual Asset User Protection Act (VAUPA) (2024) — Investor protection, unfair trading/insider trading prohibition, mandatory insurance/reserves, KRW 3B minimum equity capital for exchanges
VASP: VASP registration with KoFIU + ISMS certification mandatory. KRW 3B (~$2.2M USD) minimum equity capital for exchanges under VAUPA. Real-name verified bank account partnership required (critical bottleneck — only 5 exchanges achieved this: Upbit, Bithumb, Coinone, Korbit, Gopax).
CUSTODY: Included under VASP registration; 100% cold storage for reserves required. Compensation reserves mandatory under VAUPA.
EXCHANGE: VASP registration + real-name bank account partnership. Upbit dominates ~80% market share. ICOs effectively banned since 2017 (administrative guidance). Token listing requires exchange self-assessment.
Act on Reporting and Use of Specific Financial Transaction Information: Requires VASPs to register with KoFIU and comply with AML/CTF standards.
Evidence fact kr.aml.act-on-the-protection-of-virtual-asset-users-2024 not found (may have been renamed).
Korea Financial Intelligence Unit (KoFIU): Handles VASP registration, AML reporting, and guidelines. (Official site: kofiu.go.kr)
Korea Internet & Security Agency (KISA): Issues mandatory Information Security Management System (ISMS) certifications for exchanges.
Act on the Reporting and Use of Specific Financial Transaction Information (March 2020 Amendment): Effective March 2021; legalized crypto, mandated VASP registration, real-name accounts, ISMS certification, and AML/KYC.
Act on the Protection of Virtual Asset Users (2024): Focuses on user protection, prohibits unfair practices like market manipulation, and enforces AML protocols.
Upcoming Digital Asset Basic Act: Proposed for early 2026 by National Assembly to consolidate regulations on exchanges, token issuance, custody, stablecoins, and ETFs.
Stablecoins are proposed to be treated as foreign exchange payment vehicles, subjecting cross-border transactions to oversight by foreign exchange authorities without new licensing categories.
This integrates them into existing financial regulations rather than classifying them as securities or e-money; tokenized real-world assets (RWAs) linked to stablecoins require trust custody under the Capital Markets Act.
Domestic small-scale payments (e.g., for goods/services) may be exempt from foreign exchange reporting.
Issuers must maintain full or over-collateralized reserves, stored in regulated financial institutions, mirroring bank-style rules.
For KRW-pegged stablecoins, requirements cover collateral management and internal controls; major banks are developing a KRW stablecoin with launch targeted for late 2025/early 2026.
No separate licensing yet; proposals require strict licensing and compliance akin to banks, with operations under FSC oversight, but bank-related issuer requirements remain unresolved.
Part of the Virtual Asset User Protection Act (phase 2), with a government bill planned for National Assembly submission around October 2025.
Not explicitly detailed in proposals; focus is on reserves ensuring 1:1 redeemability, with prohibitions preventing investment-like features.
No specific rules mentioned; all stablecoins (including potentially algorithmic) fall under general reserve and foreign exchange oversight, with a nationwide ban on interest-bearing or yield-generating stablecoins to position them solely as transaction mediums.
Evidence fact kr.tax not found (may have been renamed).
Individuals: Must track acquisition costs, sales, and fees; NTS plans dedicated crypto monitoring units for data collection and evasion prevention pre-2027. Blockchain traceability aids enforcement.
2026 Tax Reform Bill (enacted Dec 31, 2024): Defers tax to 2027; applies to fiscal years from Jan 1, 2026, but gains tax starts 2027.
Digital Asset Basic Act: Supports framework for oversight and taxation (20% on gains >$35,900).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card is not a recognized standalone license category in Korea; it can only be operated by embedding the card program within a licensed VASP (exchange) that has secured a real-name bank partnership, which is a severe market bottleneck limited to 5 major exchanges.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?