Korea Crypto Regulation in 2026: One-Account-One-Exchange, KYC Upgrades and New Fiat Rules
Korea is one of the most finely regulated crypto jurisdictions in Asia — huge retail base and the originator of the one-account-one-exchange real-name bank account, strict KYC and tax look-back package. The Virtual Asset User Protection Act (VAUPA) came into force on 1 July 2024 and through 2025–2026 secondary rules filled in the details. This piece pulls together the latest as of May 2026 across five angles — real-name accounts, KYC, fiat on-ramps, the new corporate window, stablecoins and spot ETFs. For Asian context see Strictest Crypto Regulation Globally.

One-Account-One-Exchange and Real-Name Banking: Still the Core
Korea’s retail crypto framework has rested since 2018 on one rule — to trade on a major Korean exchange a retail user must open a real-name crypto account at a partner bank, can have only one such account per exchange, and the account is bound to exactly one venue. VAUPA did not rewrite this; if anything, 2025 enforcement made it tighter.
By May 2026 the partner-bank-plus-exchange map still shows the same five pairs:
| Exchange | Partner bank | Live since |
|---|---|---|
| Upbit | K Bank | 2020 |
| Bithumb | NH Nonghyup Bank | 2018 |
| Coinone | Kakao Bank | 2022 |
| Korbit | Shinhan Bank | 2018 |
| GOPAX | Jeonbuk Bank | 2023 |
These five carry over 99 percent of Korean fiat crypto volume. 2025 rumours of a sixth or seventh pair (Hanwha and KB-affiliated banks with new exchanges) produced no approved pairing by May 2026. The FSC says new pairings wait for VAUPA Phase Two finalisation, expected H2 2026.
VAUPA Phase Two: KYC, Market Abuse and Disclosure
VAUPA’s first phase in July 2024 covered client asset protection (segregated custody, 80 percent cold storage, reserve fund) and unfair-trading prohibitions (insider trading, wash trades, manipulation). The FSC published the second-phase plan in November 2025, effective Q3 2026, covering:
- KYC two-factor upgrade: withdrawals over 10 million KRW (about US$7,300) per transaction or activity over 50 million KRW (US$36,500) per day require face plus device verification
- Mandatory market-abuse monitoring: all licensed venues must feed into a central FSS surveillance database with real-time suspicious-trade reporting
- Large-holding disclosure: a single holder above 5 percent of circulating supply for a listed token must disclose, similar to traditional securities
- Explicit ban on unlicensed services: venues without ISMS certification and FSC registration cannot market to Korean users
- Stablecoin issuers brought inside the regime for the first time: stablecoin issuance is defined as a regulated business, with a separate issuer licence
Item five is the biggest addition. Korea has so far neither explicitly allowed nor banned stablecoins — no domestic KRW issuer exists; USDT and USDC circulate on chain but the five licensed venues offer only KRW spot pairs. Phase Two opens a door for domestic KRW stablecoin issuance, with a high bar — issuers must be financial institutions or joint ventures with one, 1:1 reserves and monthly audits.
Fiat On-Ramps: Limits, Source Review and the Two-Year Tax Look-Back
By 2026 Korean fiat on-ramps are generous on limits but strict on source review:
- Daily fiat on-ramp ceiling: 300 million KRW (about US$220,000), loose enough for retail
- Bank-side source checks: transfers above 10 million KRW must be tagged “crypto trading”; monthly cumulative deposits above 50 million KRW trigger automatic bank risk controls
- Retail enquiries: a single deposit above 50 million KRW prompts a source-of-funds form and may pause the account for human review
- Corporate accounts: long banned, loosened from 2025 (next section)
Bank-side review is stricter than exchange-side — a Korean feature. Most retail experience: day-to-day buying and selling is smooth, but a single large deposit will get a proactive call from the bank. This pairs with the two-year crypto tax look-back in force since January 2025 — any suspicious transaction flagged by tax authorities can pull two years of on-chain history for assessment. Full filing approach: see NFT and Crypto Tax Reporting Guide.
Corporate Accounts: The Landmark 2025 Loosening
The most symbolic 2025 change is that corporate entities can finally open real-name crypto accounts in Korea.
Until then Korea was among the strictest “natural-person-only” jurisdictions. In June 2025 the FSC published the corporate-account framework, opening in three phases:
| Phase | Eligible entities | Effective |
|---|---|---|
| Phase 1 | Listed companies, financial institutions, government bodies | From Jun 2025 |
| Phase 2 | Unlisted firms with revenue above 10 billion KRW | From Jan 2026 |
| Phase 3 | General SMEs and non-profits | Expected Oct 2026 |
Conditions are demanding — full governance, independent audit and explicit use-case justification (supplier payment, customer settlement, hedging). By May 2026 close to 600 corporate accounts have opened, mostly listed companies and tech subsidiaries of large groups. The direct effect: a notable rise in Korean OTC block-trade volume, with all five venues expanding B2B desks in H2 2025.
Stablecoins and Spot ETFs: Still Pending
Two strands retail watchers care about most are domestic KRW stablecoins and spot BTC/ETH ETFs — both still pending.
On KRW stablecoins, KB Kookmin, Shinhan and Woori each published concept proposals in 2025 but sit in informal review pending Phase Two. Once Phase Two takes effect, these three are the expected first applicants.
On spot ETFs, the FSC stated in December 2024 that “spot ETFs are not yet in scope” — effectively no for retail BTC ETFs. The stance softened in late 2025: the FSC’s November 2025 medium-term roadmap lists “crypto-asset ETF rule research” as 2026–2027 priority work. Consensus puts the earliest retail crypto ETF in 2027; 2026 is off the table.
Both point at the same thing — Korean regulation moves “strict but stable”, not rushing because the US or neighbours move, but following its own VAUPA phase one, two, three sequence. Predictability is high; innovation pace lags Hong Kong and Dubai by half a step.
What Users and Corporates Should Actually Do in 2026
For users in Korea, the 2026 operational checklist:
- Trading on non-licensed venues gets materially riskier as VAUPA Phase Two’s explicit ban kicks in
- Pre-notify the bank for large deposits — smoother than post-hoc review
- Watch the KYC two-factor activation timeline — face plus device binding will re-verify on cross-device login
- Corporates with crypto treasury needs: 2026 is a good window to open a corporate account
- Watch Phase Two stablecoin issuer licensing — it determines whether Korea has a domestic KRW stablecoin from 2027
Macro tracking pairs well with the regulation news roundup.
Predictability As a Competitive Asset
The distinctive feature of Korean regulation is not strictness but stability. Phase One to Two took two years and Phase Two to Three is expected to take another two; the five-fiat-exchange map has lasted almost eight years unchanged; corporate accounts follow an explicit three-phase roadmap. The asset this tempo creates is predictability — participants can compute what supervisors will do, when, and with what result.
Predictability is itself competitive advantage. In fast-moving jurisdictions participants hedge policy risk; in Korea they optimise within already-fixed rules. That difference compounds — Korea is set on a “stability plus depth” trajectory diverging from faster-moving hubs over time.