South Korea Payments & Fintech Regulation

KR schema world-payments-v1 trajectory: not yet assessed

Last updated · 14 modules · 117 sourced findings · 136 sources in the cumulative register

Jurisdiction brief

Latest update · 3 November 2026

Lead Signal

South Korea is converging on two fronts toward tighter oversight of how payment intermediaries hold and move value. An Electronic Financial Transactions Act amendment, triggered by the TMON-WeMakePrice settlement-fund failure, requires payment gateway operators to externally manage the full amount of unsettled merchant and consumer funds — phased from 60 percent to 100 percent — with a fixed legal effective date of 17 December 2026. The same amendment raises minimum capital requirements for PG, escrow and electronic-bill-payment operators crossing a KRW 30 billion quarterly transaction-value threshold, with the Financial Services Commission's own proposal setting the floor at KRW 2 billion against the statute's KRW 1 billion minimum. This is the most concrete near-term compliance event in the market: the deadline is fixed, the obligation is drafted into primary legislation, and only implementing-regulation detail remains to be finalised.

Key regulatory facts for South Korea
Regulatory DimensionSouth Korea Standing Position
JurisdictionSouth Korea (KR)
Regulatory ScopePayments & Fintech Regulation (14 modules, 117 sourced findings)
Licensing, Authorisation & Market AccessSouth Korea regulates payment services under the Electronic Financial Transactions Act (EFTA), supervised by the FSC/FSS.
Conduct, Safeguarding & PromotionsKorea's Electronic Financial Transactions Act (EFTA) amendment, promulgated 2025-12-16 and taking effect 2026-12-17, requires payment-gateway (PG) operators to externally manage 100% of unsettled merchant/user...
Stablecoins & Digital MoneyBank of Korea announced (24 Oct 2026) it is building an international cooperation framework to monitor and combat illegal cross-border digital-asset/stablecoin flows, including a planned Foreign Exchange Transactions...
Operational Resilience & Critical InfraFSC ordered sweeping security reviews across banks and credit-card issuers following AI-assisted cyberattacks on Shinhan Bank and KB Kookmin Bank, exposing weaknesses in peripheral systems; at least seven major...
Primary Instruments CitedSouth Korea Official Instrument (elaw.klri.re.kr viewer-do-hseq-44455-Electronic-), South Korea Official Instrument (chambers.com 4318-Chambers-FinTech-South-Kore), South Korea Official Instrument (lexology.com detail-aspx-g-cfd884b5-7f03-46a8), South Korea Official Instrument (iclg.com korea-ICLG-Fintech-2025-26), South Korea Official Instrument (practiceguides.chambers.com south-korea)
Last Confirmed / Updated2026-11-04 (136 sources in cumulative register)

#

South Korea regulates payment services under the Electronic Financial Transactions Act (EFTA), supervised by the FSC/FSS. A major EFTA amendment tightening the payment-gateway (PG) regime was promulgated 2025-12-16 (in force 2026-12-17), requiring PG services to externally manage 100% of unsettled user funds and scaling capital requirements to quarterly payment volume.

Horizon · 2026-12-17 (± a quarter)EFTA amendment core provisions take effectAdopted, not yet in force · Tier 1 source
Horizon · 2026-12-17 (± a quarter)KR Electronic Financial Transactions Act (EFTA) amendment (PG services) in forceAdopted, not yet in force · Tier 3 source
Horizon · 2026-12-17 (± a quarter)EFTA PG amendment commencementAdopted · Tier 3 source
Standing sub-brief · as of 29 June 2026 270 words · last cycle 2026-09-28

Licensing, Authorisation & Market Access

Korea has no single EMI/PI regime of the bloc-style kind. The Electronic Financial Transactions Act (EFTA) is the governing instrument for electronic financial transactions in Korea; in force since 1 January 2007, Chapter IV provides for permission/registration of electronic financial business, with the FSC as primary authority entrusting supervision to the FSS Governor. EFTA is the single anchor statute any payments operator must map to in Korea; because there is no bloc-style EMI/PI regime, licensing is statute-by-statute and FSC-centred.

Periodic update · new data 2026-09-28

Licensing, Authorisation & Market Access

South Korea's Electronic Financial Transactions Act (EFTA) has been amended to materially tighten the licensing and fund-safeguarding perimeter for payment-gateway (PG) service entities. The amendment requires PG entities to externally manage 100 percent of unsettled seller and user funds -- a full-segregation model rather than a partial-reserve approach -- with capital requirements scaled to quarterly payment volume, meaning higher-volume PG entities face proportionally higher capital thresholds. This applies to non-bank payment-institution and e-money-institution entities, distinct from bank-operated payment gateways, which sit under a different prudential regime.

The amendment's implementation follows a two-stage timeline. Fund-segregation corrective measures took effect immediately upon the amendment's promulgation on 16 December 2025, indicating the regulator prioritised addressing fund-safeguarding gaps ahead of the amendment's fuller rollout. The amendment's core provisions -- covering the full scope of registration and scope requirements -- become effective 17 December 2026, giving affected entities approximately a year from promulgation to complete their transition to the new capital and segregation requirements.

Outlook

PG entities operating in Korea should treat 17 December 2026 as the key compliance deadline for the amendment's core provisions, while noting that fund-segregation corrective measures are already enforceable. Entities with higher quarterly payment volumes should expect correspondingly higher capital requirements under the new scaled framework.

1 earlier distinct update(s)
Periodic update · new data 2026-08-11

Licensing, Authorisation & Market Access

The amended Electronic Financial Transactions Act is the defining W1a development this cycle. Passed by the National Assembly plenary on 28 November 2025, promulgated 16 December 2025, and entering into force 17 December 2026, the amendment gives both bank and non-bank payment institutions a year-long implementation runway. It was drafted directly in response to the WeMakePrice and TMON payment-gateway failures of August 2024 and the government's September 2024 Plan to Improve the Payment Gateway System, making this a corrective rather than anticipatory reform. Two scope changes carry distinct bank-versus-nonbank implications. First, the amendment institutionalises open-banking continuity and scalability and requires big-tech payment platforms, non-bank entities operating at scale, to route through the designated digital-clearing system, a change applying to both bank and non-bank participants in the clearing architecture. Second, the amendment narrows the payment-gateway definition itself: e-commerce mail-order-brokerage entities that settle payments under the Consumer Protection in Electronic Commerce Act will no longer be classified as PG services, removing a category of non-bank PI/EMI-adjacent entities from PG-specific licensing scope. The practical market-access effect is a redrawing of who counts as a licensed payment-gateway provider versus who falls under e-commerce consumer-protection rules instead, with the digital-clearing obligation simultaneously pulling big-tech non-bank platforms further into bank-grade scheme infrastructure.

Outlook

The amendment's 17 December 2026 in-force date is the operative deadline for market participants to complete reclassification under the narrowed PG definition and to integrate with the designated digital-clearing system where the big-tech threshold applies. No primary-regulator implementing text was located this cycle beyond secondary legal-commentary coverage, a gap worth closing before the in-force date.

Sources and findings (9)
  1. T1https://elaw.klri.re.kr/eng_mobile/viewer.do?hseq=44455 (Electronic Financial Transactions Act)
  2. T3https://chambers.com/content/item/4318 (Chambers FinTech, South Korea)
  3. T3https://www.lexology.com/library/detail.aspx?g=cfd884b5-7f03-46a8-bf8d-c3fc9d8eb3a7 (Lexology, fintech regulation in South Korea)
  4. T3https://iclg.com/practice-areas/fintech-laws-and-regulations/korea (ICLG Fintech 2025-26)
  5. T3https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/south-korearetrieved
  6. T1Electronic Financial Transactions Act (EFTA) amendment — Electronic Financial Transactions Act (EFTA) amendment — PG services must externally manage 100% of unsettled seller/user funds; capital requirements scaled to quarterly payment volume.retrieved
  7. T3Financial Services Commission (FSC) — Financial Services Commission (FSC) — Foreign PSPs must partner with a local licensed entity or establish a Korean branch subject to FSC approval under EFTA; no new instrument identified this cycle.retrieved
  8. T1Electronic Financial Transactions Act (EFTA) — Electronic Financial Transactions Act (EFTA) — Electronic financial transactions in Korea; in force since 1 Jan 2007, Chapter IV provides for permission/registration of electronic financial business, FSC as primary authority entrusting supervision to the FSS Governor.
  9. T3FSC / EFTA licensing routes — FSC / EFTA licensing routes — Only electronic-currency issuance is licensed by the FSC; other electronic financial businesses (incl. PG) must register with the FSC and are supervised/inspected by the FSS; credit-card business requires FSC approval under the Specialized Credit Finance Business Act; foreign providers generally must incorporate locally.

#

Korea's Electronic Financial Transactions Act (EFTA) amendment, promulgated 2025-12-16 and taking effect 2026-12-17, requires payment-gateway (PG) operators to externally manage 100% of unsettled merchant/user settlement funds (phased 60%->80%->100%) and raises minimum capital to KRW 2 billion for PG operators whose quarterly electronic-financial-transaction value exceeds KRW 30 billion, following the TMON-WeMakePrice settlement-fund crisis.

Horizon · 2027-10-01 (± a quarter)PG operator risk-assessment cadence tightens to quarterlyAdopted, not yet in force · Tier 1 source
Horizon · 2026-12-17 (± a quarter)EFTA PG settlement-fund and capital amendment in forceAdopted, not yet in force · Tier 1 source
Standing sub-brief · as of 29 June 2026 235 words · last cycle 2026-11-01

Conduct, Safeguarding & Promotions

The live W1b item is Korea's prepaid safeguarding rule. Effective 15 September 2024, prepayment service providers must separately manage at least 100% of customers' advance payments via trust or payment-guarantee insurance, invested only in safe assets — Korea Treasury and local-government bonds, bank or Korea Post deposits — with refund guaranteed on issuer bankruptcy. This is Korea's functional analogue to UK/EU safeguarding: a 100% trust/insurance customer-fund-protection floor binding all material prepaid and e-money issuers. The obligation falls on non-bank prepaid/e-money issuers, sharpening the bank-PSP versus non-bank-PI/EMI distinction that runs through Korean conduct regulation.

Periodic update · new data 2026-11-04

Conduct, Safeguarding & Financial Promotions

South Korea's rules on how payment-gateway operators hold customer and merchant money are being rewritten in direct response to a recent settlement-fund crisis. Under an amendment to the Electronic Financial Transactions Act that takes legal effect on 17 December 2026, payment-gateway operators must move from partial protection of unsettled merchant and user funds to full external management of that money, with the obligation phased in from 60 percent, to 80 percent, and finally to 100 percent. The Financial Services Commission has confirmed this requirement directly, and the change is explicitly linked to the TMON-WeMakePrice episode, in which gaps in settlement-fund protection left merchants and users exposed when a platform group ran into financial difficulty.

Alongside the funds-handling change, the same amendment raises the capital bar for the larger operators in this space. Payment-gateway operators, payment-deposit (escrow) operators and e-bill operators whose quarterly transaction value exceeds 30 billion won will need to hold minimum capital of at least 2 billion won once the amendment takes effect, up from the statutory floor of 1 billion won that currently applies under Article 30(3)(3) of the Act. This detail comes from a law-firm account of the Financial Services Commission's enforcement-decree proposal advanced through a June 2026 advance notice, so it carries less certainty than the settlement-fund duty itself, but it points the same direction: a higher bar for operators doing meaningful transaction volume, with the threshold set deliberately above the general registration floor rather than at it.

Taken together, the two changes describe a conduct and safeguarding regime pivoting away from the lighter protections that applied when electronic payment-settlement agency business was treated as a comparatively low-risk registration category. Full external management of unsettled funds removes the operator's ability to commingle or make interim use of money awaited by merchants or refundable to users, closing precisely the gap that the 2026 settlement-fund episode exposed. The raised capital threshold works alongside this by ensuring operators handling the transaction volumes large enough to create real settlement-fund risk also carry a larger capital buffer against operational failure. Because both elements of the amendment are specifically scoped to payment-gateway, escrow and e-bill operators rather than the full population of registered electronic financial businesses, the practical effect concentrates on the merchant-acquiring and e-commerce settlement layer of Korea's payments market, which is also where non-bank payment institutions, rather than banks, predominate.

Outlook

The near-term marker is the 17 December 2026 commencement date itself, at which point the external-management duty and the revised capital requirement both become operative obligations rather than drafted ones, with the 60/80/100 percent fund-protection phasing then running on its own schedule from that commencement point. Supervisors have already signalled, through the enforcement-decree advance notice issued by the Commission, that implementing detail at the decree and supervisory-regulation level will accompany the statutory change, which means the precise mechanics of how the thresholds are measured and audited remain to be finalised even though the headline obligations are settled. Given that the amendment was drafted in direct response to a specific market failure, continued supervisory attention to how the external-management duty is actually enforced against mid-sized and smaller payment-gateway operators is a reasonable expectation for the period following commencement.

3 earlier distinct update(s)
Periodic update · new data 2026-11-03

Conduct, Safeguarding & Financial Promotions

Korea's live safeguarding story is the Electronic Financial Transactions Act amendment bearing on payment gateway operators, and it follows directly from the TMON-WeMakePrice settlement-fund failure, where unsettled merchant and consumer balances were not kept separate from a platform's own funds. The amendment imposes a duty on PG operators to manage the total amount — 100 percent — of unsettled funds externally, with a phased ramp from 60 percent through 80 percent before reaching full segregation. The Financial Services Commission's advance notice of the implementing Enforcement Decree and Supervisory Regulation changes, issued 19 June 2026, fixes the legal effective date at 17 December 2026, giving PG operators a defined runway to restructure how they hold settlement balances rather than requiring immediate compliance.

The same amendment package raises the bar on capital. PG operators, payment-deposit (escrow) operators and electronic bill presentment and payment operators whose quarterly electronic-financial-transaction value exceeds KRW 30 billion must now hold capital of at least KRW 1 billion under the statute, with the Commission's own proposal setting a higher figure of KRW 2 billion. The threshold is transaction-value based rather than universal, so it reaches the larger PG and escrow operators processing high volumes while leaving smaller players outside its immediate scope — though any operator growing past KRW 30 billion in quarterly value in the future would cross into the obligation. Both the segregation duty and the capital floor are tied to the same 17 December 2026 effective date, and both apply only to operators already authorised under the existing licensing regime, not to new entrants seeking to test the market unlicensed.

Taken together, the external-management duty and the capital increase represent a structural tightening of how Korea expects payment intermediaries to hold other people's money, rather than an isolated response to a single platform failure. The segregation requirement addresses the precise failure mode that caused consumer and merchant losses — commingled funds used for purposes other than settlement — while the capital increase is aimed at ensuring the larger operators have a buffer of their own resources behind that segregation duty. Because the reform is drafted into the Act itself with a fixed effective date, it carries more certainty than a discretionary guideline would; what remains open is only the fine-grained implementing detail the Commission has yet to finalise in its Enforcement Decree and Supervisory Regulation.

Periodic update · new data 2026-10-06

Conduct, Safeguarding & Financial Promotions

On 15 July 2026 the Financial Services Commission amended the Electronic Financial Supervisory Regulations under Notice 2026-29 to tighten conduct obligations running through payment-gateway (PG) contracting chains. The amendment requires prepaid-fund issuers and upper-tier PG operators to conduct risk assessments of the lower-tier PG operators they contract with. That assessment obligation attaches at three points: when a contract is concluded, when it is renewed, and on an ongoing basis during the life of the contract.

The amendment took effect 1 October 2026, but the ongoing-assessment cadence is staged rather than fixed from day one. For the first year the rule is in force, from 1 October 2026 to 30 September 2027, assessments during the contract term must be conducted semi-annually. From 1 October 2027 the required cadence steps up to quarterly. The practical effect is a deliberately phased build-up of supervisory intensity: firms have a year to establish the semi-annual assessment infrastructure before the quarterly standard applies, rather than being required to hit the tighter cadence immediately.

This sits on the nonbank PI/EMI side of Korea's payments market specifically, given the Electronic Financial Supervisory Regulations' reach into prepaid-fund issuers and PG operators as distinct from bank-channel payment activity. The obligation creates a standing due-diligence relationship running down the PG contracting chain, where upper-tier operators and prepaid-fund issuers now carry a continuing, dated assessment duty toward the lower-tier operators they rely on, rather than a one-off onboarding check.

Outlook

The cadence step-up on 1 October 2027, from semi-annual to quarterly risk assessment, is already fixed under Notice 2026-29 and represents the next compliance inflection point for multi-tier PG arrangements in Korea. Firms operating lower-tier PG relationships should expect the assessment relationship with upper-tier counterparties and prepaid-fund issuers to intensify on that date rather than remain static at the October 2026 baseline.

Periodic update · new data 2026-10-04

Conduct, Safeguarding & Financial Promotions

An amendment to the Electronic Financial Transactions Act, promulgated 16 December 2025, requires payment-gateway providers in South Korea to hold merchant-settlement and user-refund funds under external or segregated management. Capital requirements are set proportional to transaction scale, meaning larger PG providers face a correspondingly higher capital bar, and the amendment also requires regulatory approval for any major-shareholder change at a PG provider, introducing an ownership-vetting dimension to the safeguarding regime.

This settlement-fund-protection layer is structurally distinct from the existing settlement backbone that runs through the Foreign Exchange Transactions Act and the Bank of Korea, which governs cross-border and interbank settlement rather than merchant-facing PG fund custody. The EFTA amendment instead addresses the specific risk that a PG provider could commingle or misuse merchant-settlement and consumer-refund funds, a risk distinct from systemic settlement-architecture risk. No primary FSC gazette text for the amendment was retrieved this cycle; the finding rests on trade-press reporting.

Outlook

How PG providers across the sector, not only the market-leading firm, adapt their fund-management structures to the segregation and proportional-capital requirements is the item to track. The major-shareholder approval requirement also introduces a new friction point for any PG ownership change or acquisition in the Korean market going forward.

Sources and findings (9)
  1. T1https://www.fsc.go.kr/eng/pr010101/83006 (FSC press release)
  2. T1https://www.fsc.go.kr/eng/pr010101/83006 (FSC press release)
  3. T3https://architectlegal.com/NEWSLETTER (Architect Legal, EFTA prepaid obligations)
  4. T3https://www.lexology.com/library/detail.aspx?g=2fdd3626-2083-4c6a-a058-5f9ad10ae4fa (Lexology first-step analysis)
  5. T1Financial Services Commission (FSC) — Financial Services Commission (FSC) — On 15 July 2026 the FSC amended the Electronic Financial Supervisory Regulations (Notice 2026-29) to require risk assessment of lower-tier PG operators by prepaid-fund issuers and upper-tier PG operators, and clearer merchant-fee disclosure; effective 1 October 2026, with assessment conducted semi-annually for the first year and quarterly thereafter.retrieved
  6. T1Revised EFTA prepaid safeguarding rule — Revised EFTA prepaid safeguarding rule — Effective 15 September 2024, prepayment service providers must separately manage >=100% of customers' advance payments via trust or payment-guarantee insurance, invested only in safe assets (Korea Treasury/local-govt bonds, bank/Korea Post deposits), with refund guaranteed on issuer bankruptcy.
  7. T1BNPL (Korea) — BNPL (Korea) — BNPL regulated at a level similar to credit-card business: only stock companies with debt ratio <=180% may be approved, per-customer BNPL limit KRW 300,000, quarterly credit offering capped at 15% of prior-quarter prepayment volumes.
  8. T1Financial Services Commission (Korea) / Electronic Financial Transactions Act — Financial Services Commission (Korea) / Electronic Financial Transactions Act — PG operators must externally manage 100% (phased 60%->80%->100%) of unsettled merchant/user settlement funds, effective 2026-12-17.retrieved
  9. T3Electronic Financial Transactions Act (Korea), Art 30(3)(3) — Electronic Financial Transactions Act (Korea), Art 30(3)(3) — PG operators, payment-deposit (escrow) operators and e-bill operators with quarterly transaction value exceeding KRW 30 billion must meet capital requirements of at least KRW 2 billion, effective 2026-12-17.retrieved

#

Bank of Korea announced (24 Oct 2026) it is building an international cooperation framework to monitor and combat illegal cross-border digital-asset/stablecoin flows, including a planned Foreign Exchange Transactions Act revision; FSC confirmed the initiative 23 Oct 2026; the Digital Asset Framework Act (Phase 2) is expected before the National Assembly's bill-review panel in November 2026, with 10 related bills pending.

Open gap — wpm-int-1W1a, W3-W13 (except W1b, W2) were not actively re-researched this cycle due to pooled union search budget constraints.Stablecoin-framework currency depends on T3 journalism; an FSC/BOK/National Assembly T1 source should anchor the current DABA status.
Open gap — wpm-int-2No T1 Bank of Korea primary text was reached for the planned FETA stablecoin amendment this cycle.Merchant-acquiring and Gibraltar/Crown Dependencies are structurally under-indexed per methodology bias corrections.
Horizon · 2026-H2 (± a year)Digital Asset Basic Act (won-stablecoin framework)Proposed · Tier 3 source
Horizon · 2027-02-04 (± a quarter)Token securities subordinate-regulation amendments in forceConsultation · Tier 1 source
Horizon · 2027-Q1 (± a year)FSC three-stage plan to connect stablecoins as payment instrumentsProposed · Tier 2 source
Horizon · 2026-11 (± a quarter)Digital Asset Framework Act (Phase 2) expected before National Assembly bill-review panelProposed · Tier 3 source
Horizon · 2026-12-03 (± a quarter)FETA virtual asset transfer business commencementAdopted · Tier 3 source
Horizon · 2026-Q4 (± six months)FETA stablecoin-as-payment-instrument amendment expectedConsultation · Tier 3 source
Standing sub-brief · as of 29 June 2026 288 words · last cycle 2026-11-01

Stablecoins & Digital Money

There is no enacted stablecoin framework in Korea as of late June 2026. The Digital Asset Basic Act (DABA) — which would define stablecoins, authorise won-pegged issuance, require 100% reserves in bank deposits or government bonds, and set roughly KRW 5bn minimum issuer capital — has been repeatedly delayed amid a dispute between the Bank of Korea (favouring a bank-led consortium of at least 51% bank ownership) and the FSC (favouring admission of fintechs). Three competing bills are before the National Assembly, and a bill is expected in 2026; the legislation was left off the Assembly agenda before the June 3 elections, pushing earliest debate into H2 2026. This is the single largest forward regulatory variable for Korean digital money, since resolution of the bank-led-versus-open issuance question determines whether super-apps such as Naver and Kakao or bank consortia capture won-stablecoin rails.

Periodic update · new data 2026-11-04

Stablecoins & Digital Money

South Korea's central bank and government are working on a change to the Foreign Exchange Transactions Act that would, for the first time, classify stablecoins as payment instruments for cross-border transfers. Reporting from late October 2026 describes the Bank of Korea and the government planning to amend the Act within 2026 so that stablecoins used in cross-border flows would be brought inside the foreign-exchange reporting and information-network framework that currently governs other cross-border payment instruments. A separate, earlier account from a cryptocurrency-focused outlet similarly describes the amendment as following the National Assembly's passage of related Foreign Exchange Transactions Act changes, with the broader direction being to extend foreign-exchange oversight to virtual-asset-related transfers. No primary Bank of Korea text on this specific amendment was available, so the description here rests on these secondary accounts rather than on the draft legislative language itself.

A related but distinct development concerns who would need to register with the Financial Services Commission to provide stablecoin-related services. A practitioner review describes an amended Electronic Financial Transactions Act framework under which payment and transfer of stablecoins, together with discretionary management, advisory, order-transmission and agency services relating to them, would require Commission registration. This point rests on a single practitioner source rather than an enacted text, and should be read as describing a framework still taking shape rather than one already in force.

The two threads point in a consistent direction: Korean authorities are working to bring stablecoins, particularly in their cross-border use, inside existing payment and foreign-exchange perimeters rather than leaving them in a gap between the Electronic Financial Transactions Act and the Foreign Exchange Transactions Act. The foreign-exchange classification addresses the movement of value across the border; the registration framework addresses who may provide the underlying services. Separately, broader digital-asset legislation, a second-phase Digital Asset Basic Act, remains under negotiation, with the Financial Services Commission's chairman telling lawmakers in a parliamentary hearing in late October that consultations on the bill were nearing completion, though this sits in the wider digital-asset track rather than being itself a payments-instrument classification.

Outlook

The Foreign Exchange Transactions Act amendment is targeted for passage within 2026, which would make the final quarter of the year the period in which the classification of stablecoins as cross-border payment instruments either firms up or slips. Because no Bank of Korea primary text has yet been reached on this specific change, the precise mechanics, including how the foreign-exchange information network would capture stablecoin transfers, remain to be confirmed once the draft or enacted text becomes available. The registration requirement for stablecoin payment and advisory services carries materially more uncertainty, resting on a single secondary account of a framework not yet enacted, so its scope and timing should be treated as provisional pending a clearer legislative or regulatory text.

5 earlier distinct update(s)
Periodic update · new data 2026-11-03

Stablecoins & Digital Money

Korea's stablecoin posture moved during the current window with the Bank of Korea's statement to the National Assembly's parliamentary audit on 22 October 2026 that it is working with the government on an amendment to the Foreign Exchange Transactions Act to classify stablecoins as payment instruments. The stated purpose is to route cross-border stablecoin transfers through the existing foreign-exchange information network for reporting purposes, bringing stablecoin flows into the same visibility regime that already covers conventional cross-border payments. The amendment is targeted for completion within 2026, but as of the audit statement it had not yet been drafted into statutory text, so neither the precise reporting mechanics nor the provision that would carry them exist in public form yet.

A second, related signal comes from a fintech-practice review of the broader amended Electronic Financial Transactions Act framework, which reports that Financial Services Commission registration would be required for a defined set of stablecoin-related activities: payment and transfer of stablecoins, discretionary management, advisory services, order transmission, and agency services built around stablecoin activity. This would extend Korea's existing registration-based approach to payment intermediaries into the stablecoin space specifically, rather than leaving stablecoin payment and transfer services outside the perimeter that already applies to conventional electronic payment instruments. The review frames this as part of the amended EFTA framework, but whether the obligation lands on banks, non-bank payment institutions, or both has not been settled in what is publicly available, and no effective date has been confirmed.

The two developments sit on different legal tracks — one a Bank of Korea-led foreign-exchange reporting initiative under FETA, the other an FSC-led registration regime under EFTA — but they point in the same direction: Korea is moving to bring stablecoins used as payment instruments inside its existing payments-oversight architecture rather than leaving them in a separate, lighter-touch category. Both tracks are still at the proposal or practitioner-interpretation stage rather than enacted law, so the shape of the eventual obligations — reporting thresholds, registration categories, and effective dates — remains to be fixed. The direction of travel is nonetheless consistent with the tightening already visible in Korea's payment-gateway safeguarding reforms: closer oversight of how value, whether fiat or tokenised, moves through regulated payment channels.

Periodic update · new data 2026-10-25

Stablecoins & Digital Money

South Korea's stablecoin and digital-money regime moved on two parallel tracks. The Bank of Korea disclosed on 24 October 2026 that it is building, in coordination with the government, an international cooperation framework aimed at monitoring and combating illegal cross-border flows of virtual assets and stablecoins. This includes a planned revision of the Foreign Exchange Transactions Act, intended to introduce real-time information-sharing and enforcement coordination with foreign authorities. The Financial Services Commission Chairman confirmed the initiative the day before the Bank of Korea's own announcement, indicating the two institutions are at least aligned on the existence and direction of the initiative, even if the underlying legislative text has not yet been drafted or disclosed.

Running alongside the Bank of Korea's cross-border initiative is the continuing progress of the Digital Asset Framework Act's second phase, which is expected to be submitted to the National Assembly's bill-review panel in November 2026. Ten related bills are already pending before the Assembly, underscoring both the legislative appetite for a comprehensive framework and the degree of fragmentation that a consolidated bill will need to resolve. This is a continuation of a previously established timeline rather than a new development in itself, but the approaching submission date makes it the single most consequential near-term marker for the stablecoin regime.

The structural tension underlying both tracks is the institutional division of labour between the Bank of Korea and the Financial Services Commission. The Bank of Korea's interest in cross-border monitoring sits naturally within its payment-system and foreign-exchange mandate, while the Financial Services Commission's role in the Digital Asset Framework Act centres on token and issuer regulation more broadly. How these two tracks reconcile, particularly on questions of stablecoin-issuer eligibility, will determine whether South Korea arrives at a coherent domestic stablecoin-issuance regime or a patchwork of cross-border monitoring rules layered atop an unresolved issuance framework.

For payment-service providers and financial institutions with cross-border settlement exposure involving Korean won or Korean counterparties, the practical implication is that a new layer of foreign-exchange and cross-border-flow monitoring is being actively built, even though its legislative form and effective date remain undisclosed. Institutions relying on stablecoin rails for cross-border settlement into or out of South Korea should treat the Bank of Korea's announced framework as a signal of coming change to reporting or monitoring obligations, rather than as itself a binding new requirement.

Outlook

The clearest marker to track is whether the Digital Asset Framework Act, in its second phase, is in fact submitted to the National Assembly's bill-review panel as expected in November 2026, and whether the bill as filed addresses the stablecoin-issuer eligibility question that has been a point of institutional friction. Separately, whether the Bank of Korea's Foreign Exchange Transactions Act revision progresses from an announced cooperation framework to actual drafted legislative text, with disclosed thresholds and an effective date, is the second marker worth tracking. Until primary legislative or regulatory text is available, the current picture remains one of two coordinated but still largely conceptual initiatives rather than an enacted cross-border stablecoin-monitoring regime.

Periodic update · new data 2026-10-18

Stablecoins & Digital Money

South Korea's stablecoin and digital-money framework remains unsettled this cycle. The Digital Asset Basic Act, which carries the country's Phase 2 stablecoin legislation, has no confirmed submission date to the National Assembly as of 5 October 2026, leaving stablecoin issuance and reserve-asset rules in continued legislative limbo. Alongside this gap, the Financial Services Commission issued user advisories on 16 October 2026 warning against perpetual futures products tied to virtual assets and stocks, carrying leverage of ten to two hundred times and offered through overseas platforms. This advisory activity functions as a perimeter-policing response against unregistered high-leverage digital-asset derivative products in the continued absence of a comprehensive digital-asset statute. The non-bank payment-institution and e-money sector most directly affected by the stalled legislation remains without settled reserve or issuer-eligibility requirements for stablecoin-type instruments pending the Act's progress.

Outlook

The trajectory of Korea's stablecoin framework depends entirely on whether the Digital Asset Basic Act advances through the National Assembly; until it does, non-bank payment institutions and digital-money providers operate without a settled stablecoin-specific statutory framework, and the FSC's continued advisory-based approach toward unregistered high-leverage products suggests the regulator will keep relying on supervisory warnings rather than binding rules in the interim.

Periodic update · new data 2026-10-06

Stablecoins & Digital Money

The Financial Services Commission opened formal pre-announcement (입법예고) of subordinate-regulation amendments under the Electronic Securities Act and the Capital Markets Act concerning token securities on 1 October 2026, with the public notice period running from 2 October to 11 November 2026. The amending Acts themselves are scheduled to take effect on 4 February 2027.

The move works through Korea's existing securities architecture rather than standing up a separate digital-asset statute: token securities are being folded into the subordinate rulebook beneath the Electronic Securities Act and the Capital Markets Act, which will determine matters such as how token-form securities are registered, issued and traded within the existing capital-markets perimeter. The six-week comment window gives market participants a defined opportunity to respond to the draft subordinate rules before they are finalised ahead of the February 2027 commencement date.

This is a market-structure development for payment and settlement intermediaries with any exposure to token-form instruments in Korea: it signals that token securities will sit inside the established securities regulatory perimeter, with the practical licensing, custody and trading-infrastructure consequences to be set by the subordinate regulations now under consultation rather than by a standalone token regime.

Outlook

Two dates anchor the near-term calendar: the close of the subordinate-regulation comment period on 11 November 2026, and the scheduled commencement of the amending Acts on 4 February 2027. Firms with payment or settlement infrastructure touching token-form securities in Korea should treat the comment-period window as the active opportunity to engage with the shape of the subordinate rules before the perimeter is fixed.

Periodic update · new data 2026-08-11

Stablecoins & Digital Money

Korea's won-stablecoin framework is being built on two parallel tracks this cycle: a legislative track and a commercial track running ahead of it. On the legislative side, the ruling Democratic Party and the Financial Services Commission agreed on 20 July 2026 to accelerate the Framework Act on Digital Assets through twice-monthly subcommittee reviews, targeting a September 2026 reintroduction, and the FSC confirmed on 29 July 2026 a plan to consolidate ten pending crypto and stablecoin bills into a single government-backed Digital Asset Basic Act spanning industry, market-conduct and user-protection pillars. On the commercial side, Kbank, HashKey Group and BPMG signed a memorandum of understanding on 21 July 2026 to build won-stablecoin payment infrastructure aimed at a Korea-Hong Kong remittance corridor, explicitly ahead of the enabling legislation passing. The sequencing matters: infrastructure is being built commercially before the licensing and AML rules that will govern it are finalised, creating a window in which first-mover commercial positioning is occurring without a settled regulatory perimeter.

Outlook

September 2026 is the marker to watch for the Framework Act's reintroduction. Whether the consolidated Digital Asset Basic Act text, once published, requires retrofitting of the Kbank-HashKey-BPMG infrastructure build, or whether that build has been designed to anticipate the pending rules, will determine how much of the current commercial first-mover advantage survives the legislative process.

Sources and findings (14)
  1. T3https://www.dlnews.com/articles/regulation/south-korean-regulator-misses-government-stablecoin-deadline/retrieved
  2. T3https://koreatechdesk.com/korea-stablecoin-dilemma-digital-asset-cryptocurrencyretrieved
  3. T3https://sumsub.com/media/news/regulatory-deadlock-halts-south-korea-stablecoin-plans/retrieved
  4. T3https://www.seoulz.com/korea-won-stablecoin-2026/retrieved
  5. T3https://www.koreatimes.co.kr/economy/cryptocurrency/20260414 (Korea Times contribution)
  6. T3Korea National Assembly / FSC — Korea National Assembly / FSC — Digital Asset Basic Act (Phase 2 stablecoin legislation) remains stalled with no confirmed submission dateretrieved
  7. T3Financial Services Commission (Korea) — Financial Services Commission (Korea) — User advisories warning against perpetual futures products (10x-200x leverage) tied to stocks/virtual assets on overseas platformsretrieved
  8. T1Financial Services Commission (FSC) — Financial Services Commission (FSC) — Pre-announcement (입법예고) of subordinate-regulation amendments under the Electronic Securities Act and Capital Markets Act for token securities; notice period 2 Oct - 11 Nov 2026; amending Acts scheduled in force 4 Feb 2027.retrieved
  9. T3Digital Asset Basic Act (DABA) — Digital Asset Basic Act (DABA) — NO enacted stablecoin framework as of late June 2026. DABA (would define stablecoins, authorise won-pegged issuance, require 100% reserves in bank deposits/government bonds, ~KRW 5bn minimum issuer capital) repeatedly delayed amid a BOK (>=51% bank-led consortium) vs FSC (admit fintechs) dispute. Three competing bills before the National Assembly; bill expected in 2026.
  10. T3KRW1 (BDACS won-backed stablecoin PoC) — KRW1 (BDACS won-backed stablecoin PoC) — BDACS launched KRW1 in September 2025 as a proof-of-concept — first fully collateralised won-backed stablecoin (on Avalanche), backed 1:1 by won held in escrow at Woori Bank; remains a PoC, not commercial issuance.
  11. T3Bank of Korea (BOK) — Bank of Korea (BOK) — BOK is building an international cooperation framework to monitor and combat illegal cross-border digital-asset/stablecoin flows, including a planned Foreign Exchange Transactions Act revision, with real-time information-sharing and enforcement coordination with foreign authorities.retrieved
  12. T3Digital Asset Framework Act (Phase 2) — Digital Asset Framework Act (Phase 2) — Expected to be submitted to the National Assembly's bill-review panel in November 2026; 10 related bills already pending in the Assembly.retrieved
  13. T3Bank of Korea / Foreign Exchange Transactions Act — Bank of Korea / Foreign Exchange Transactions Act — FETA amendment to classify stablecoins as payment instruments for cross-border transfers, planned within 2026.retrieved
  14. T3Financial Services Commission (Korea) — Financial Services Commission (Korea) — FSC registration required for payment and transfer of stablecoins, discretionary management, advisory, order-transmission and agency services under the amended EFTA framework.retrieved

#

FSC ordered sweeping security reviews across banks and credit-card issuers following AI-assisted cyberattacks on Shinhan Bank and KB Kookmin Bank, exposing weaknesses in peripheral systems; at least seven major financial institutions affected, prompting Korea Fintech Industry Association coordination.

Standing sub-brief · as of 29 June 2026 163 words · last cycle 2026-10-25

Operational Resilience & Critical Infra

Korean operational resilience is built on EFTA plus the subordinate Regulation on Supervision of Electronic Financial Transactions and FSC IT-outsourcing and cloud guidelines, supervised by the FSS. Essential-work cloud use has shifted from prior reporting to ex-post reporting within three months, and firms must run significance, business-continuity, safety and cloud-service-provider assessments. There is no single DORA-equivalent and no designated critical-third-party regime; this absence is recorded as not-applicable-in-regime rather than a data gap.

Periodic update · new data 2026-10-25

Operational Resilience & Critical Infrastructure

South Korea's Financial Services Commission instructed banks and credit-card issuers to conduct bank-wide security reviews following a wave of AI-powered cyberattacks that struck Shinhan Bank and KB Kookmin Bank. The reported significance of the attacks is not merely that they occurred, but what they exposed: weaknesses in systems that sit outside the core banking network itself, meaning the vulnerable surface was in peripheral or ancillary infrastructure rather than in the primary transaction-processing systems that typically receive the most concentrated security investment.

This regulator-ordered review is a direct supervisory response to a live incident rather than a proactive resilience initiative, and it illustrates a recurring pattern in operational-resilience oversight: incidents that demonstrate a gap in peripheral-system security tend to produce broad, sector-wide review mandates rather than institution-specific remediation orders, on the logic that a vulnerability exploited at one major bank is likely to exist, in some form, across the sector's shared technology patterns and vendor relationships. The involvement of AI-powered attack techniques specifically is also notable, suggesting the threat actors behind this wave of incidents are using tooling sophisticated enough to probe for exactly the kind of peripheral-system weakness that traditional core-banking security reviews have not historically prioritised.

For payment-service providers and banks operating in South Korea, the practical implication is that the regulatory expectation for security review has now explicitly extended beyond core banking infrastructure to the full operational perimeter, including systems that may not have previously been considered within the scope of a standard resilience review. Institutions with technology or vendor relationships overlapping with Shinhan Bank or KB Kookmin Bank, or with similar peripheral-system architectures, should expect their own security posture to come under comparable scrutiny as the sector-wide review mandate is implemented.

Outlook

The key marker to watch is whether the Financial Services Commission's bank-wide security review surfaces further vulnerabilities at institutions beyond Shinhan Bank and KB Kookmin Bank, which would confirm the sector-wide rather than institution-specific nature of the underlying weakness. A second marker is whether any additional AI-powered attacks are reported against South Korean financial institutions during the review period, which would indicate the threat actors behind this wave are continuing to actively probe for the same class of peripheral-system vulnerability the Financial Services Commission's review is now trying to close.

2 earlier distinct update(s)
Periodic update · new data 2026-10-18

Operational Resilience & Critical Infrastructure

An AI-assisted intrusion wave against major South Korean banks, including Shinhan Bank and KB Kookmin Bank, has prompted a structural regulatory response this cycle. The Financial Services Commission ordered banks and credit-card issuers to carry out sweeping security reviews on 13 October 2026, and confirmed on 14 October 2026 that 16 financial firms had been breached since the start of the month, with roughly 100,000 records exposed. The regulatory response has moved from incident-specific remediation toward a structural change in supervisory cadence: the FSC is moving to mandate twice-yearly vulnerability checks for larger financial institutions, explicitly including crypto exchanges, following a review that found security gaps at 130 companies. This represents a tightening of operational-resilience supervision that extends beyond the bank-PSP population most directly affected by the breach wave into the non-bank crypto-exchange population as well, reflecting a regulatory judgment that the prior inspection cadence had not kept pace with AI-era offensive tooling against externally-facing banking systems.

Outlook

Whether the planned twice-yearly vulnerability-audit mandate is formalised into a binding instrument, and the scope of institutions ultimately captured by it, will determine whether this cycle's operational-resilience tightening becomes a durable structural feature of Korea's payments-supervision landscape or remains a cycle-specific regulatory response to the current breach wave.

Periodic update · new data 2026-09-14

Operational Resilience & Critical Infrastructure

Bithumb's February 2026 internal-ledger mis-crediting incident is this cycle's defining operational-resilience event in Korea's payment-adjacent digital-asset infrastructure. An internal-ledger error caused a 17% bitcoin price plunge on the exchange and prompted a Financial Supervisory Service probe, exposing asset-matching and account-segregation control weaknesses at one of Korea's largest virtual-asset platforms. In direct response, the FSS committed to investigating high-risk practices — including price manipulation and deposit/withdrawal-suspension-linked trading — deploying real-time AI monitoring tools to detect suspicious trading, introducing punitive fines for IT incidents, and increasing executive accountability for security failures. For bank and non-bank payment infrastructure alike, the episode is a reminder that ledger-integrity and account-segregation controls sit at the operational core of any payment-adjacent custodial service, and that a failure at this level can propagate into market-level price effects within a single trading session. The FSS's response is explicitly framed as a supervisory reaction to a documented failure rather than a pre-existing programme, which means its eventual scope, binding force, and timeline remain to be defined.

Outlook

The key question for this domain going into the next cycle is whether the FSS's committed AI-monitoring and punitive IT-incident-fine framework is formalised into binding technical or prudential requirements applicable across payment-adjacent digital-asset infrastructure, or remains a Bithumb-specific supervisory response. Watch for any extension of the announced measures to other large Korean exchanges, and for whether the incident prompts a broader operational-resilience standard for asset-matching and account-segregation controls across the sector.

Sources and findings (10)
  1. T1https://www.fsc.go.kr/eng/pr010101/77676 (FSC press release)
  2. T3https://cloud.google.com/security/compliance/fsc-korearetrieved
  3. T3https://d1.awsstatic.com/fs-compliance-center/pdf-summaries/south-korea.pdfretrieved
  4. T3Financial Services Commission (Korea) — Financial Services Commission (Korea) — Ordered banks and credit card issuers to carry out sweeping security reviews after cyberattacks on Shinhan and KB Kookmin Bankretrieved
  5. T3Financial Services Commission (Korea) — Financial Services Commission (Korea) — 16 financial firms confirmed breached since start of October 2026, roughly 100,000 records exposedretrieved
  6. T3Financial Services Commission (Korea) — Financial Services Commission (Korea) — Mandatory twice-yearly vulnerability checks for larger financial institutions, including crypto exchanges, after a review found security gaps at 130 firmsretrieved
  7. T3Bithumb — Bithumb — February 2026 internal-ledger mis-crediting incident caused a 17% bitcoin price plunge on the exchange and prompted an FSS probe, exposing asset-matching and account-segregation control weaknesses.retrieved
  8. T3Financial Supervisory Service (FSS) — Financial Supervisory Service (FSS) — FSS will investigate high-risk practices (price manipulation, deposit/withdrawal-suspension-linked trading), deploy real-time AI monitoring, plan punitive IT-incident fines, and increase executive security accountability.retrieved
  9. T1Regulation on Supervision of Electronic Financial Transactions (cloud/outsourcing) — Regulation on Supervision of Electronic Financial Transactions (cloud/outsourcing) — Operational resilience built on EFTA + subordinate Regulation plus FSC IT-outsourcing/cloud guidelines, supervised by FSS. Essential-work cloud use shifted from prior reporting to ex-post reporting within three months; firms must run significance/BCP/safety/CSP assessments. No single DORA-equivalent or designated critical-third-party regime.
  10. T2Financial Services Commission (FSC) — Financial Services Commission (FSC) — FSC instructed banks and credit-card issuers to carry out bank-wide security reviews after AI-powered cyberattacks hit Shinhan Bank and KB Kookmin Bank, exposing weaknesses in systems outside core banking networks.retrieved

#

Korea's card market is structurally unusual: there is effectively no Western-style interchange and no branded domestic switching network. Merchant discount pricing is regulated by the FSC under the Specialized Credit Finance Business Act, with preferential capped rates skewed to favour small merchants (large merchants pay more). The full regulated merchant discount flows back to the issuer; processors negotiate fees bilaterally with issuers. Visa/Mastercard provide badging but not domestic switching; domestic brands include BC Card, Lotte Card and T-Money. The FSC periodically resets card processing fee rates (most recently proposed amendments released Dec 2024).

Horizon · 2025-H1 (± six months)FSC proposed card-fee-cap amendment (SCFBA)Proposed · Tier 3 source
Standing sub-brief · as of 29 June 2026 220 words · last cycle 2026-06-27

Scheme & Network Compliance

The Korean card market has no Western-style interchange and no branded domestic switching network. The FSC caps merchant discount under the Specialized Credit Finance Business Act — roughly 1.5% for small merchants and roughly 2.0% for large merchants — with the full regulated discount returning to the issuer; processors negotiate fees bilaterally with issuers. Visa and Mastercard badge cards but do not switch domestically. The no-interchange, regulated-MDR model is fundamentally different from card economics elsewhere: acquirers and processors cannot rely on interchange-style revenue, and fees are administratively set. Cards account for roughly 70% of private consumption, with graduated preferential rates by merchant size.

no periodic updates on record for this sub-brief

Sources and findings (6)
  1. T3https://glenbrook.com/payments_views/the-south-korean-card-markets-fascinating-structure/retrieved
  2. T1https://www.fsc.go.kr/eng/pr010101/22195 (FSC press release)
  3. T3https://www.vixio.com/regulatory-news/pc-daily-dash-south-korea-proposes-new-credit-card-fee-structureretrieved
  4. T3https://www.kansascityfed.org/documents/11143 (Public Authority Involvement in Payment Card Markets, Aug 2025)
  5. T3Korean card market structure — Korean card market structure — No Western-style interchange and no branded domestic switching network. FSC caps merchant discount under the Specialized Credit Finance Business Act (~1.5% small merchants, ~2.0% large), with the full regulated discount returning to the issuer; processors negotiate fees bilaterally with issuers. Visa/Mastercard badge but do not switch domestically.
  6. T3FSC proposed card-fee amendment (Dec 2024) — FSC proposed card-fee amendment (Dec 2024) — On 24 December 2024 the FSC announced proposed amendments lowering the preferential fee-rate cap for small/medium merchants from 0.5–1.5% to 0.4–1.45% and aligning large-merchant fee designation timing with SMEs.

#

Cross-border payments are governed by the Foreign Exchange Transactions Act (administered by the Ministry of Economy and Finance, with declarations to the Bank of Korea). Small-value overseas remittance is a registered business under the FETA (small-scale overseas remittance entity), supervised by the FSS. A sweeping overhaul — an Integrated Overseas Remittance Management System for real-time unified oversight of no-documentation remittances — was set to launch January 2026. Fintech MTOs (Sentbe, E9Pay, GLN/Hana) and the super-apps drive corridor flows; crypto-based and stablecoin remittance corridors (e.g. K bank's Korea–Japan Project Pax) are expanding fast, with a cross-border virtual-asset transfer framework effective December under amended FETA.

Horizon · 2026-01 (± six months)Integrated Overseas Remittance Management SystemAdopted · Tier 3 source
Horizon · 2026-12 (± a quarter)Amended FETA cross-border virtual-asset transfer reporting regimeAdopted, not yet in force · Tier 3 source
Standing sub-brief · as of 29 June 2026 320 words · last cycle 2026-08-06

Payment Corridor Dynamics

Cross-border payments are governed by the Foreign Exchange Transactions Act (FETA), administered by the Ministry of Economy and Finance with declarations to the Bank of Korea; most settlement methods are freely permitted but specific methods require declaration, and small-value overseas remittance is a registered professional FX-dealer category under FETA supervised by the FSS. FETA is the gateway statute for all corridor activity, under which fintech money-transfer operators (Sentbe, E9Pay, GLN/Hana) and super-apps operate via small-value remittance registration.

Periodic update · new data 2026-08-11

Payment Corridor Dynamics

The clearest corridor-specific development this cycle is the Kbank, HashKey Group and BPMG memorandum of understanding, signed 21 July 2026, to build won-stablecoin payment rails explicitly targeting a Korea-Hong Kong remittance corridor. This is an emerging-corridor infrastructure play rather than a completed launch: the parties have not disclosed transaction amounts or a launch date, and the initiative proceeds ahead of the enabling Digital Asset Basic Act that the Financial Services Commission is targeting for September 2026 reintroduction. Separately, the FSS-Customs Service crypto-FX monitoring agreement with nine major credit-card companies, signed 17 March 2026, is corridor-relevant in the opposite direction: it targets illegal cross-border crypto-FX flows linked to voice phishing and concealed remittances rather than facilitating legitimate corridor volume.

Outlook

The Korea-Hong Kong corridor build is the item to track for legitimate corridor development; its commercial progress is contingent on the Framework Act's legislative timeline holding. The illegal-FX enforcement side of the corridor picture, evidenced by the KRW7.2 trillion H1-2026 Customs sweep, indicates continuing regulatory attention on informal cross-border crypto-FX channels regardless of the legitimate corridor's progress.

Sources and findings (9)
  1. T1https://www.bok.or.kr/eng/main/contents.do?menuNo=400191 (Bank of Korea)
  2. T3https://www.koreatimes.co.kr/business/banking-finance/20251210 (Korea Times)
  3. T1https://elaw.klri.re.kr/eng_mobile/viewer.do?hseq=64673 (Foreign Exchange Transactions Regulations)
  4. T3https://crypto.news/south-korea-crypto-remittances-jump-380-in-three-years-surpassing-banks/retrieved
  5. T3https://www.koreaherald.com/article/10576789 (Korea Herald)
  6. T1Foreign Exchange Transactions Act (FETA) — Foreign Exchange Transactions Act (FETA) — Cross-border payments governed by FETA (administered by Ministry of Economy and Finance, with declarations to the Bank of Korea); most settlement methods freely permitted but specific methods require declaration. Small-value overseas remittance is a registered professional FX-dealer category under FETA, supervised by the FSS.
  7. T3Integrated Overseas Remittance Management System — Ministry of Economy and Finance announced an Integrated Overseas Remittance Management System for real-time unified oversight of no-documentation remittances, targeted launch January 2026; under the current FETA individuals can remit over US$5,000/year without documents only through a designated bank, capped at US$100,000.
  8. T3Amended FETA cross-border virtual-asset transfer regime — Amended FETA cross-border virtual-asset transfer regime — Amendments to the FETA promulgated 2 June 2026 take effect in December 2026 after a six-month grace period; companies providing cross-border digital-asset transfer services must register with the Ministry of Economy and Finance and report via the BOK foreign-exchange reporting network.
  9. T3K bank Project Pax (Korea–Japan stablecoin remittance PoC) — K bank Project Pax (Korea–Japan stablecoin remittance PoC) — Internet-only K bank completed phase one of 'Project Pax', a stablecoin-based Korea–Japan cross-border remittance PoC (Sept 2025) with Shinhan, Nonghyup and Japanese partners; phase two targets SWIFT-network interoperability and PvP settlement.

#

The market is dominated by homegrown super-apps (Kakao Pay, Naver Pay, Toss/Viva Republica) and Samsung Pay, alongside three licensed internet-only banks (KakaoBank, K Bank, Toss Bank) and a heavily regulated card-issuer ecosystem. NICE Payments anchors VAN throughput. Open banking covers roughly 58% of adults (~30 million users), but card usage still dominates account-to-account transfers. Strategy is tilting toward vertical integration and tokenisation (Naver–Dunamu stablecoin plan, Kakao deposit-token project). The FSC is weighing a fourth internet-only bank.

Standing sub-brief · as of 29 June 2026 170 words · last cycle 2026-10-06

Industry Structure & Commercial

Korea's payments landscape is dominated by homegrown super-apps — Kakao Pay, Naver Pay and Toss/Viva Republica — alongside Samsung Pay, and by three licensed internet-only banks: KakaoBank, K Bank and Toss Bank. NICE Payments anchors VAN throughput at roughly 1.16m merchants as of December 2024, and open banking covers roughly 58% of adults, about 30m users. The FSC is weighing a fourth internet-only bank. Super-app concentration and internet-only-bank profitability define the competitive landscape, with strategy tilting toward vertical integration and tokenisation. Open banking is governed by the Special Act on Financial Innovation Support of 2019.

Periodic update · new data 2026-10-06

Industry Structure & Commercial Dynamics

The proposed share-exchange merger between Naver Financial and Dunamu has been delayed again. A 6 July 2026 report states that the companies' shareholder meetings were moved from 18 August to 19 November 2026, and the share-exchange date itself was re-targeted from 30 September to 31 December 2026.

This development is carried on a single Korean business-press source; no Financial Services Commission notice, Korea Fair Trade Commission filing, or corporate disclosure (DART) has been located to corroborate the re-timing. It is treated here as a press-reported data point on the transaction's progress rather than a regulator-confirmed milestone, and the underlying commercial rationale for the repeated delays is not established by the available sourcing.

The re-timing is nonetheless material to Korea's payments and fintech industry structure, given the scale of the two parties: a Naver Financial/Dunamu combination would bring together a major payments and financial-services platform with Korea's largest cryptocurrency exchange operator under one corporate structure, with implications for how payment rails and digital-asset trading infrastructure are commercially organised in Korea going forward.

Outlook

The newly stated 19 November 2026 shareholder-meeting date and 31 December 2026 share-exchange date are the next milestones to watch for this transaction. Given that this is already the second reported delay and remains uncorroborated by a primary regulatory or corporate filing, confirmation through an FSC notice, KFTC filing, or DART disclosure would materially upgrade the reliability of the transaction timeline.

2 earlier distinct update(s)
Periodic update · new data 2026-10-04

Industry Structure & Commercial Dynamics

KG Inicis holds approximately 40 percent of South Korea's payment-gateway market, serving approximately 190,000 merchants. Domestic Korean-card acceptance structurally requires a licensed Korean PG rather than a foreign acquirer, meaning foreign payment providers cannot bypass the domestic PG layer to directly acquire Korean-card transactions. This concentration and structural requirement together describe a market where a small number of licensed domestic PG providers, with KG Inicis as the clear leader, intermediate the large majority of domestic card-acceptance flow.

Separately, Kakao Pay Securities obtained an investment-trading business licence in July 2026 and announced a partnership with Dinari to explore tokenized Korean stocks, while the FSC published a token-securities policy roadmap establishing a phased framework under an Electronic Securities Act amendment taking effect 4 February 2027. Together, these developments describe an industry structure in which the traditional PG-concentration dynamic coexists with an emerging, FSC-sponsored push into tokenized-securities infrastructure, with at least one licensed fintech entity, Kakao Pay Securities, positioning early.

The KG Inicis market-share figure is sourced from a single T4 trade publication with no T1 or T2 corroboration retrieved this cycle, which should be weighted accordingly when assessing the precision of the 40 percent figure.

Outlook

Whether the token-securities framework, once its subordinate regulations are published in late September 2026, draws further licensed entities beyond Kakao Pay Securities into early positioning is the item to track. Separately, whether the EFTA fund-safeguarding tightening alters the competitive dynamics between KG Inicis and smaller PG providers, given that proportional capital requirements could weigh more heavily on smaller players relative to the market leader, remains to be seen.

Periodic update · new data 2026-09-14

Industry Structure & Commercial Dynamics

The 2026 Commercial Act amendments, promulgated 6 March 2026, introduce mandatory treasury-share cancellation and a 3% voting cap for audit-committee elections, and are described as the most significant governance overhaul since the post-Asian-financial-crisis reforms of 1998-1999. The changes apply across both bank and non-bank issuers, meaning listed payment and fintech companies — regardless of whether they sit within the banking perimeter or operate as non-bank payment institutions or e-money issuers — face the same new governance constraints on treasury-share management and audit-committee voting structure. For foreign investors in Korean payment and fintech issuers, the 3% voting cap for audit-committee elections is a structural change to voting mechanics that alters the practical influence a single large shareholder can exercise over audit-committee composition, an effect that applies uniformly across the industry rather than targeting the payments sector specifically. This is a structural, statute-level development rather than an incident-driven one, and it lands on corporate-governance mechanics rather than on payments licensing or conduct requirements directly.

Outlook

Watch how listed payment and fintech issuers adapt their treasury-share and audit-committee-election practices ahead of the amendments taking practical effect, and whether foreign institutional investors in Korean payment-sector issuers adjust voting strategies in response to the new 3% cap. No payments-specific implementing guidance was identified this cycle beyond the general corporate-governance amendment itself.

Sources and findings (7)
  1. T3https://www.mordorintelligence.com/industry-reports/south-korea-payments-marketretrieved
  2. T3https://paymentscmi.com/insights/south-korea-2025-payments-ecommerce-trends/retrieved
  3. T3https://www.mordorintelligence.com/industry-reports/south-korea-mobile-payment-marketretrieved
  4. T3https://www.kenresearch.com/south-korea-digital-banking-and-open-finance-marketretrieved
  5. T2Naver Financial / Dunamu — Naver Financial / Dunamu — On 6 July 2026 Naver Financial and Dunamu disclosed a further delay: shareholder meetings moved from 18 August to 19 November 2026 and the share-exchange date from 30 September to 31 December 2026.retrieved
  6. T32026 Commercial Act amendments — 2026 Commercial Act amendments — Introduce mandatory treasury-share cancellation and a 3% voting cap for audit-committee elections, promulgated 6 March 2026; the most significant governance overhaul since 1998-1999.retrieved
  7. T3Korean payments market structure (super-apps & internet-only banks) — Korean payments market structure (super-apps & internet-only banks) — Homegrown super-apps (Kakao Pay, Naver Pay, Toss/Viva Republica) and Samsung Pay alongside three licensed internet-only banks (KakaoBank, K Bank, Toss Bank); NICE Payments anchors VAN throughput (~1.16m merchants, Dec 2024); open banking covers ~58% of adults (~30m users). FSC is weighing a fourth internet-only bank.

The most consequential payments-adjacent litigation/enforcement is the FIU's 'first-in, first-out' AML/KYC enforcement campaign against the five won-market crypto exchanges. Dunamu (Upbit) received a KRW 35.2bn (~US$25m) fine, a three-month new-customer suspension and a CEO warning in 2025; Dunamu filed a formal objection (automatically suspending the penalty) and is litigating in Seoul, citing the overturned Hanbitco precedent. Korbit drew a smaller KRW 2.73bn penalty; a judge overturned a Bithumb suspension in May 2026. These cases set precedent for VASP supervision and bear directly on the Naver–Dunamu merger.

Standing sub-brief · as of 29 June 2026 258 words · last cycle 2026-08-21

Legal & Litigation

The FIU's 'first-in, first-out' inspection campaign is the litigation spine this cycle. Dunamu (Upbit) was fined KRW 35.2bn (about US$25m) with a three-month new-customer suspension and a CEO warning in 2025; Korbit was fined KRW 2.73bn; and inspections ran from Dunamu through Korbit, GOPAX, Bithumb and Coinone. The campaign sets a VASP-supervision precedent bearing on the Naver–Dunamu merger, making AML/KYC liability a live deal-risk factor.

Periodic update · new data 2026-09-14

Legal & Litigation

A Korean court overturned a six-month partial business suspension imposed on Bithumb; the status of an associated $24.6 million fine remains unclear following the ruling. This is a short, dated litigation entry rather than a standalone explainer, consistent with the item's dashboard content tier.

Outlook

Watch for clarification of the $24.6 million fine's status and whether Korean authorities appeal or otherwise respond to the suspension reversal.

Sources and findings (8)
  1. T3https://www.coindesk.com/policy/2025/11/25/upbit-considering-appeal-of-usd25m-fine-by-south-korea-regulatorretrieved
  2. T3https://cryptorank.io/news/feed/055dc-dunamu-fiu-fine-legal-challengeretrieved
  3. T3https://www.coindesk.com/policy/2026/05/01/bithumb-scores-a-legal-win-in-south-korea-as-six-month-suspension-is-lifted-by-local-judgeretrieved
  4. T3https://www.mexc.com/news/190688retrieved
  5. T3Bithumb — Korean court overturned a six-month partial business suspension imposed on Bithumb; $24.6 million fine status unclear.retrieved
  6. T3FIU AML/KYC enforcement campaign vs won-market exchanges — FIU AML/KYC enforcement campaign vs won-market exchanges — FIU 'first-in, first-out' inspection campaign: Dunamu (Upbit) fined KRW 35.2bn (~US$25m) with a three-month new-customer suspension and CEO warning (2025); Korbit KRW 2.73bn; inspections ran from Dunamu through Korbit, GOPAX, Bithumb and Coinone. Sets VASP-supervision precedent bearing on the Naver–Dunamu merger.
  7. T3Dunamu formal objection to FIU fine — Dunamu formal objection to FIU fine — Dunamu filed a formal objection in Seoul against the FIU fine — alleging violations of the Act on Reporting and Using Specified Financial Transaction Information — which under Korean administrative law automatically suspends enforcement of the KRW 35.2bn penalty pending precedent-setting court review.
  8. T3Bithumb suspension overturned — Bithumb suspension overturned — A local judge overturned Bithumb's six-month suspension in May 2026, part of regulators' increased crypto oversight alongside Dunamu's partial suspension/fine and Korbit's penalty; consistent with the Hanbitco precedent where a Seoul court struck an FIU KYC fine on the basis the violations did not lead to money laundering.

#

Acquiring/merchant onboarding is shaped by the unique no-interchange structure: ~13 card processors enroll merchants for card acceptance via bilateral connections to issuers, with the FSC-regulated merchant discount flowing back to issuers. Payment-fee transparency was institutionalised through an FSS disclosure regime covering 18 e-finance firms; weighted-average fees averaged ~1.98% for card and ~1.74% for prepaid (Sep 2025–Feb 2026), with prepaid operators retaining a far higher share than card. Small/midsize merchants pay lower regulated rates than general merchants.

Standing sub-brief · as of 29 June 2026 161 words · last cycle 2026-10-04

Merchant Acquiring & Risk

The institutionalised fee-disclosure regime is the live W8 development. Per the FSS payment-fee disclosure report released 28 February 2026, weighted-average fees for 18 covered e-finance firms were 1.98% for card and 1.74% for prepaid; the operator-retained share averaged 80.6% for prepaid versus 10.6% for card; and fees were lower for small and midsize merchants. Prepaid fees varied by model: delivery-platform 3.00%, shopping-mall 2.38%, dual-business PG 1.63% and dedicated PG 0.30%. Roughly 13 card processors enrol merchants bilaterally, and there is no branded domestic network.

Periodic update · new data 2026-10-04

Merchant Acquiring & Risk

KG Inicis partnered with Crypto.com in March 2026 to allow tourist payments via Crypto.com Pay through its existing payment-gateway infrastructure. This represents an emerging crypto-acceptance vector layered onto Korea's traditional card and PG acquiring stack, rather than a replacement for it: the partnership extends KG Inicis's existing merchant-acquiring infrastructure to accept a stablecoin-linked payment method specifically for inbound tourist transactions, a segment where traditional Korean-card rails are less relevant to the payer.

This is a merchant-acquiring-side development distinct from the EFTA fund-safeguarding change tracked under conduct and safeguarding: the Crypto.com partnership is about expanding accepted payment instruments at the point of sale, while the EFTA amendment governs how PG providers manage settlement funds once collected, regardless of instrument. The claim underlying this development rests on a single T4 source with no further corroboration retrieved this cycle.

Outlook

Whether this tourist-focused crypto-acceptance partnership expands beyond KG Inicis to other Korean PG providers, or beyond the tourist segment to domestic transactions, is the item to track. Its current scope, tourist payments specifically through Crypto.com Pay, is narrow relative to KG Inicis's overall acquiring volume.

1 earlier distinct update(s)
Periodic update · new data 2026-08-11

Merchant Acquiring & Risk

Merchant-acquiring risk escalated sharply this cycle through a coordinated FSS enforcement action against six payment-gateway and electronic-payment firms, referred to prosecutors for enabling illegal casino operations, voice-phishing networks and narcotics-related flows, with penalties potentially reaching thirty years' imprisonment. Detection ran through Korea's statutory monthly transaction-data reporting regime and its virtual-account monitoring system, evidencing that existing supervisory infrastructure, not solely new powers, surfaced this enforcement wave. The specific conduct alleged varies by firm: one firm is described as having become a key financial enabler for voice-phishing scams and illicit betting disguised as e-commerce activity, while another's leadership is accused of fabricating credit-card sales data through shell companies to secure fraudulent loans. In response, the FSS has committed to more frequent on-site inspections, tighter data-analytics monitoring, and closer coordination with law enforcement specifically for payment-gateway providers, signalling a durable increase in supervisory intensity for the non-bank PI/EMI segment of the acquiring market rather than a one-off enforcement sweep.

Outlook

The FSS's stated commitment to more frequent inspections and tighter monitoring is the item to track for whether this enforcement wave translates into a standing supervisory posture change for payment-gateway providers, or recedes once the current prosecutions conclude.

Sources and findings (5)
  1. T2https://www.ajupress.com/view/20260428173570938 (AJU Press, citing FSS)
  2. T3https://glenbrook.com/payments_views/the-south-korean-card-markets-fascinating-structure/retrieved
  3. T2https://www.ajupress.com/view/20260428173570938 (AJU Press, citing FSS)
  4. T2FSS payment-fee disclosure regime — FSS payment-fee disclosure regime — Per the FSS payment-fee disclosure report (released 28 Feb 2026), weighted-average fees for 18 covered e-finance firms were 1.98% (card) and 1.74% (prepaid); operator-retained share averaged 80.6% for prepaid vs 10.6% for card; fees lower for small/midsize merchants. Prepaid varied by model: delivery-platform 3.00%, shopping-mall 2.38%, dual-business PG 1.63%, dedicated PG 0.30%.
  5. T4KG Inicis — KG Inicis partnered with Crypto.com in March 2026 to allow tourist payments via Crypto.com Pay through its existing PG infrastructure.retrieved

#

Korea is a mature, mobile-first market with strong public-sector innovation infrastructure: an FSC regulatory sandbox under the Special Act on Financial Innovation Support, open banking and a unified national QR-code standard. The BOK has run a CBDC research programme since 2021, announced a CBDC Use-Case Test (Nov 2023) and conducted pilot operations including deposit-token e-wallets between April and June 2025. Private tokenisation (won-stablecoin builds by Naver and Kakao) is now eclipsing the sovereign-CBDC track in commercial momentum; a KRW 500bn Fintech Innovation Fund (2024–2027) is crowding in private investment.

Horizon · 2027-02-04 (± a quarter)Token-securities framework phases in under Electronic Securities Act amendmentAdopted · Tier 1 source
Horizon · 2026-Q3 (± a quarter)FSC to publish proposed subordinate-regulation amendments for token securitiesProposed · Tier 1 source
Standing sub-brief · as of 29 June 2026 170 words · last cycle 2026-10-04

Product Innovation & Market Development

The Bank of Korea has researched a CBDC since 2021, announced a 'CBDC Use-Case Test' in November 2023 with the FSC and FSS, and conducted pilot operations between April and June 2025, including opening deposit-token e-wallets and executing real transactions. The directional finding is that private won-stablecoin builds by Naver and Kakao now eclipse the sovereign-CBDC track in commercial momentum: the sovereign deposit-token track is being out-paced by private won-stablecoin investment, shifting the centre of gravity in digital-money product development. Supporting innovation infrastructure includes a unified national QR-code standard, with final specification in January 2025, and a KRW 500bn Fintech Innovation Fund running 2024–2027.

Periodic update · new data 2026-10-04

Product Innovation & Market Development

The Financial Services Commission published a token-securities policy roadmap at the third Public-Private Joint Token Securities Consultative Body meeting, establishing a phased framework under an Electronic Securities Act amendment that takes effect 4 February 2027. The FSC plans to publish proposed subordinate-regulation amendments to the Capital Markets Act and Electronic Securities Act by late September 2026, meaning the detailed operative rules underpinning the phased framework are still to come even though the framework's effective date and overall structure have been announced.

This is a regulatory product-access development, distinct from any single commercial deal: it describes a structural change in what kinds of token-based securities products can exist under Korean law and under what phased timeline, rather than any particular firm's product launch. The roadmap was announced through a formal public-private consultative mechanism, indicating a degree of industry input into the framework's design ahead of the subordinate-regulation publication.

Outlook

Late September 2026, the FSC's planned publication date for proposed subordinate-regulation amendments, is the next concrete milestone. The detail of those proposed amendments will determine how the phased framework translates into an operative licensing and product-approval pathway ahead of the 4 February 2027 effective date.

2 earlier distinct update(s)
Periodic update · new data 2026-09-28

Product Innovation & Market Development

Korea's mobile-wallet and super-app payment ecosystem continues to scale. Combined prepaid balances held across KakaoPay, Toss and Naver Pay exceeded KRW980 billion (approximately US$670 million) by June 2026, reported at Probable confidence. This figure sits below the module's source floor -- only two sources were located, one of which is Tier 4 -- so it should be read as directionally indicative of continued growth in aggregated prepaid balances rather than a precisely verified market figure. The underlying My Data initiative is understood to underpin aggregator-style products offered by these super-app platforms, though the specific mechanics of that support were not independently verified this cycle.

Outlook

The reported prepaid-balance figure would benefit from additional Tier 1 or Tier 2 sourcing in a future cycle to move this finding above the module source floor. If the trend of growing super-app prepaid balances continues, it is a relevant data point for assessing the scale of unsettled funds now subject to the EFTA amendment's new external-segregation requirement described under W1a.

Periodic update · new data 2026-08-11

Product Innovation & Market Development

Korea's digital-asset legislative track accelerated materially this cycle. The ruling Democratic Party and the Financial Services Commission agreed on 20 July 2026 to move the Framework Act on Digital Assets to twice-monthly subcommittee review, targeting a September 2026 reintroduction, and on 29 July 2026 the FSC confirmed its intent to merge ten separately pending crypto and stablecoin bills into one government-backed Digital Asset Basic Act, spanning industry-structure, market-conduct and user-protection pillars. This is a legislative-consolidation story distinct from the commercial stablecoin build covered elsewhere: it is the regulatory-product-access theme that will determine what a consolidated licensing and market-conduct regime for digital-asset businesses looks like once enacted.

Outlook

September 2026 remains the key legislative marker. Whether the reintroduced bill text matches the strengthened-AML framing currently described only at the policy-commitment level will determine how substantial the consolidation proves once it reaches statute.

Sources and findings (6)
  1. T3https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/south-korearetrieved
  2. T3https://www.mordorintelligence.com/industry-reports/south-korea-mobile-payment-marketretrieved
  3. T3https://www.mordorintelligence.com/industry-reports/south-korea-real-time-payments-marketretrieved
  4. T3https://www.futuremarketinsights.com/reports/banking-as-a-service-platform-industry-analysis-in-korearetrieved
  5. T3KakaoPay/Toss/Naver Pay — KakaoPay/Toss/Naver Pay — Combined prepaid balances exceeded KRW980bn (~$670m) by June 2026.retrieved
  6. T3BOK CBDC programme — BOK CBDC programme — The BOK has researched a CBDC since 2021, announced a 'CBDC Use-Case Test' in Nov 2023 with the FSC and FSS, and conducted pilot operations between April and June 2025 including opening deposit-token e-wallets and executing real transactions. Private won-stablecoin builds (Naver, Kakao) now eclipse the sovereign-CBDC track in commercial momentum.

#

Korea's APP-fraud (voice phishing / vishing) regime currently rests on the Telecommunications Fraud Refund Act (Special Act on the Prevention of Loss Caused by Telecommunications-based Financial Fraud, 2011), enforced by the FSS via account-freeze and 'extinguishment of claims' reimbursement from frozen funds. Voluntary bank compensation has been low (~10% of reported cases in 2025). A major reform is in train: a proposed amendment would impose partial/full no-fault reimbursement on financial firms (victim's and criminal's institutions each covering half, per-case caps of KRW 10–50m), with carve-outs for victim intent/gross negligence — a significant shift from the negligence-based standard. Losses were projected to top KRW 1 trillion in 2025.

Horizon · 2026-H2 (± a year)No-fault voice-phishing reimbursement amendmentProposed · Tier 3 source
Standing sub-brief · as of 29 June 2026 232 words · last cycle 2026-06-27

Consumer Protection & APP Fraud

Korea's APP-fraud (voice-phishing) regime rests on the 2011 Telecommunications Fraud Refund Act, enforced by the FSS via account-freeze and 'extinguishment of claims' reimbursement from frozen funds, with institutions liable where they failed identity-verification duties. Voluntary bank compensation is low — about 10% of reported cases in 2025, 18 of 92 reviewed — and losses were projected to top KRW 1tn in 2025. The current negligence-based standard yields very low reimbursement, which is the gap the proposed reform targets.

no periodic updates on record for this sub-brief

Sources and findings (6)
  1. T3https://seoullawgroup.com/voice-phishing-korea/retrieved
  2. T2https://www.koreaherald.com/article/10591129 (Korea Herald, citing FSS)
  3. T3https://en.sedaily.com/finance/2026/04/01/no-fault-voice-phishing-liability-could-cost-financialretrieved
  4. T3https://fintech.global/2025/12/11/korea-to-expand-cardholder-payback-for-phishing-losses/retrieved
  5. T2Special Act on the Prevention of Loss Caused by Telecommunications-based Financial Fraud (voice-phishing regime) — Special Act on the Prevention of Loss Caused by Telecommunications-based Financial Fraud (voice-phishing regime) — Korea's APP-fraud (voice phishing) regime rests on the 2011 Telecommunications Fraud Refund Act, enforced by the FSS via account-freeze and 'extinguishment of claims' reimbursement from frozen funds; institutions liable where they failed identity-verification duties. Voluntary bank compensation low (~10% of reported cases in 2025; 18 of 92 reviewed). Losses projected to top KRW 1tn in 2025.
  6. T3No-fault voice-phishing reimbursement amendment — No-fault voice-phishing reimbursement amendment — Proposed amendments to the Telecommunications Fraud Victim Refund Act would require the financial companies used by both victim and criminal to each cover half of voice-phishing damages, with per-case caps of KRW 10m–50m and liability waived for victim intent or gross negligence — a shift from the negligence-based standard. Estimated cost up to ~KRW 280bn/year.

#

[Sentinel-fed payments-context position] Korea's AML/CFT framework rests on the Financial Transaction Reports Act (FTRA / Act on Reporting and Using Specified Financial Transaction Information), the Proceeds of Crime Act and the terrorism/proliferation financing prohibition act, administered by KoFIU. VASPs must register with KoFIU (ISMS certification + real-name bank accounts) and apply the crypto travel rule on transfers over KRW 1 million. A KoFIU taskforce (kicked off Dec 2025) is overhauling the framework ahead of the 2028 FATF mutual evaluation — extending the travel rule below KRW 1m, planning UBO transparency, AML rules for lawyers/accountants, and AML-equivalent obligations for stablecoin issuers.

Horizon · 2027 (± more than a year)KoFIU FTRA AML reform package (2028 FATF MEV prep)Proposed · Tier 2 source
Horizon · 2027 (± more than a year)KoFIU FTRA AML reform package (2028 FATF MEV prep)Proposed · Tier 2 source
Standing sub-brief · as of 29 June 2026 232 words · last cycle 2026-06-27

AML/CFT & Financial Crime (Sentinel-fed)

This module is sourced from the Sentinel.gi feed; the intelligence is attributed to Sentinel and the original illicit-finance analysis is routed to FIM. Per Sentinel, Korea's AML/CFT framework rests on the Financial Transaction Reports Act (the Act on Reporting and Using Specified Financial Transaction Information), the Proceeds of Crime Act and the terrorism/proliferation-financing prohibition act, administered by KoFIU; the FTRA establishes KoFIU and mandates customer due diligence, suspicious-transaction reports and currency-transaction reports. VASPs must register with KoFIU — with ISMS certification and real-name bank accounts — and apply the crypto travel rule on transfers over KRW 1m. VASP registration and travel-rule obligations are the binding financial-crime perimeter for Korean digital-money operators.

no periodic updates on record for this sub-brief

Sources and findings (10)
  1. T3sentinel.gi://notabene.id/world/south-korea (Travel Rule Korea)
  2. T?FIM (sentinel.gi) per-JID baseline profile — South Korea (Republic of Korea) — AML/CFT governed by the Act on Reporting and Use of Certain Financial Transaction Information (amended 2021 to cover VASPs) and the 2023 Virtual Asset User Protection Act, with KoFIU as FIU and FSC/FSS as prudential and VASP supervisors. A won-backed stablecoin framework (Digital Asset Basic Act) is stalled amid FSC-Bank of Korea disagreement over bank-only vs. tech-firm issuance, leaving a regulatory gap in a market larger than domestic equities trading.
  3. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness
  4. T2FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-002) — Sanctions: OFAC listing
  5. T2FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-004) — Enforcement: Financial Services Commission (FSC) — Bithumb
  6. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: regulatory-failure
  7. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: legal-gap
  8. T2FIM (sentinel.gi) regulatory_horizon_register — Travel Rule threshold elimination
  9. T2FIM (sentinel.gi) regulatory_horizon_register — New cross-border/self-custody SAR monitoring duty
  10. T3FIM (sentinel.gi) enforcement_action_register — Enforcement action

#

Settlement and FX-bank access run through the Bank of Korea's foreign-exchange reporting network and designated foreign-exchange banks under the FETA; the BOK is the settlement/lender-of-last-resort backbone and issuer of currency. Cross-border correspondent flows are dominated by the five major commercial banks (~KRW 1,590tn / US$1.108tn in 2025). Banks are actively building blockchain/stablecoin settlement alternatives (NH Nonghyup/Hana on Partior; K bank Project Pax with SWIFT-interop goals; Woori–MoonPay), signalling correspondent-rail modernisation. Crypto-exchange remittance volumes (KRW 163.55tn in 2025) now rival bank corridors in some segments.

Standing sub-brief · as of 29 June 2026 199 words · last cycle 2026-08-06

Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank versus non-bank access asymmetry. Settlement and cross-border access run through designated foreign-exchange banks and the BOK under the FETA declaration system; the BOK is the settlement and lender-of-last-resort backbone and the currency issuer. That designated-FX-bank gateway gives bank-PSPs privileged access to the settlement core, while non-bank operators reach corridors through registration under FETA's small-value remittance category rather than direct settlement membership.

Periodic update · new data 2026-08-11

Correspondent Banking, Settlement & Access

This cycle's W12 signal is structural: a widening asymmetry in cross-border settlement access and monitoring between bank-channel and non-bank crypto-FX channels. The FSS and Korea Customs Service signed a coordination agreement on 17 March 2026 with nine major credit-card companies specifically to track and block illegal cross-border crypto-FX flows tied to voice phishing and concealed remittances, extending bank-card-network monitoring into a settlement space historically harder to supervise. A first-half-2026 Customs Service sweep found more than KRW7.2 trillion in illegal foreign-exchange transactions across roughly fifty suspected firms, including crypto-payment and gambling-fund transfer schemes, a scale finding that frames the access-asymmetry problem: informal or crypto-mediated settlement channels have been operating at a volume large enough to require a dedicated card-network-level monitoring agreement to address.

Outlook

Whether the FSS-Customs monitoring agreement measurably reduces the scale of illegal cross-border FX flows in the next reporting period, relative to the KRW7.2 trillion H1-2026 baseline, is the clearest quantitative marker to track for this module.

Sources and findings (5)
  1. T1https://www.bok.or.kr/eng/main/contents.do?menuNo=400191 (Bank of Korea)
  2. T3https://crypto.news/south-korea-crypto-remittances-jump-380-in-three-years-surpassing-banks/retrieved
  3. T3https://www.mordorintelligence.com/industry-reports/south-korea-payments-marketretrieved
  4. T3https://www.coindesk.com/business/2026/05/15/hana-bank-to-acquire-usd670-million-stake-in-upbit-operator-dunamuretrieved
  5. T1Korea settlement & FX-bank access — Korea settlement & FX-bank access — Settlement and cross-border access run through designated foreign-exchange banks and the BOK under the FETA declaration system; the BOK is settlement/lender-of-last-resort backbone and currency issuer. Overseas transfers via the five major commercial banks reached ~US$1.108tn (~KRW 1,590tn) in 2025, while remittances via the five largest won-denominated crypto exchanges rose to KRW 163.55tn (~US$125.8bn).

#

Trailing-12-month commercial intelligence is dominated by Naver Financial's all-stock acquisition of Dunamu (Upbit operator), valued at ~US$10.3bn, announced November 2025, with the merger delayed to a ~Sept 2026 close pending Korea FTC antitrust review and shareholder-stake-cap legislation. Banks are racing to take stakes in exchanges (Hana Bank's ~US$670m 6.55% Dunamu stake; Woori–MoonPay; securities-firm bids). Kakao Pay's ~KRW 500bn bid for SSG Pay/Smile Pay failed (July 2025). Naver earmarked ~KRW 10tn over five years for a won-pegged stablecoin platform.

Standing sub-brief · as of 29 June 2026 304 words · last cycle 2026-10-25

Commercial Intelligence (M&A, Investment & Product)

The lead event is the Naver Financial–Dunamu merger. Naver Financial confirmed an all-stock merger with Dunamu (the Upbit operator) on 26 November 2025 valued at roughly US$10.3bn, issuing about 87.56m new shares (roughly KRW 15.13tn) at 2.5422618 Naver Financial shares per Dunamu share to integrate Dunamu as a wholly-owned subsidiary; the deal status is pending regulatory approval, subject to Korea FTC antitrust review and shareholder-stake-cap legislation. The deal value is publicly disclosed. It vertically integrates the largest won-market crypto exchange into a super-app with won-stablecoin ambitions. The merger was subsequently delayed about three months — the shareholder meeting moved from 22 May to 18 August and closing from 30 June to 30 September 2026 — amid the FTC antitrust review and proposed legislation capping major shareholders' stakes in crypto exchanges.

Periodic update · new data 2026-10-25

Commercial Intelligence & Fintech

Two discrete commercial events marked South Korea's payments and fintech landscape. The Korea Fintech Industry Association held a digital-finance cooperation meeting with the Bank of England, covering stablecoin trade settlement, AI-agent payments, and tokenisation. The meeting was announced on 20 October 2026 as a cooperation and partnership discussion between the two institutions; no contract value was disclosed, and the event is best characterised as an exploratory dialogue on shared interests rather than a concluded transaction or binding commercial arrangement. The breadth of the topics covered, stablecoin settlement, AI-agent payments, and tokenisation, indicates both institutions are scanning a similar set of emerging payment themes, though the practical outcome of the meeting, if any, was not disclosed.

Separately, Gwangju Bank and the fintech firm Toss completed a proof-of-concept for stablecoin QR-code payments. The event was reported as completed on 9 October 2026, with a second phase planned to extend the pilot to actual merchants in the Jeonnam and Gwangju regions. As with the Korea Fintech Industry Association meeting, no contract value or financial terms were disclosed for this partnership; it is reported purely as a product-development milestone. The bank-fintech structure of the partnership, combining a regional bank's payment-settlement infrastructure with a fintech firm's consumer-facing application layer, is a common pairing in South Korea's domestic stablecoin product-development activity, and the planned move to actual merchant testing in the second phase marks a meaningful step from proof-of-concept toward real-world deployment.

Both events are discrete, specific commercial developments rather than indicators of a broader structural shift in South Korea's payments industry; they should be read as individual data points in a continuing pattern of fintech-sector experimentation with stablecoin payment rails, rather than as evidence of a market-wide trend in themselves.

Outlook

The principal marker to watch for the Gwangju Bank and Toss partnership is whether the planned second phase, involving actual merchants in the Jeonnam and Gwangju regions, proceeds as described and what transaction volumes or merchant-adoption figures, if any, are disclosed once that phase begins. For the Korea Fintech Industry Association's cooperation discussion with the Bank of England, the marker to watch is whether the exploratory dialogue produces any concrete joint initiative, pilot, or memorandum of understanding in a subsequent cycle, or whether it remains at the level of a one-time cooperation meeting with no further disclosed follow-through.

2 earlier distinct update(s)
Periodic update · new data 2026-10-12

Commercial Intelligence & Fintech

BTQ Technologies was named security partner for MoonPay Korea's won-denominated stablecoin infrastructure, with the partnership covering post-quantum cryptography across issuance, distribution, self-custody wallets, settlement and merchant delivery. The announcement is dated 9 October 2026. Woori Bank is named as the inaugural member of MoonPay Korea's KRW Stablecoin Consortium. The deal value is not publicly disclosed. This is a discrete, dated commercial event rather than a structural market-wide trend: it names specific parties, a specific announcement date, and a specific technical scope, which places it squarely within commercial-intelligence coverage rather than the structural industry-analysis lens applied elsewhere.

Confidence in this finding is Probable. The sourcing is a single Tier-3 outlet (Basis Desk, citing a press release distributed via PR Newswire), and no corroborating primary announcement from BTQ Technologies, MoonPay, or Woori Bank directly was retrieved this cycle. The commercial-event record captures the parties (BTQ Technologies as partner; MoonPay Korea as partner, domiciled in Korea; Woori Bank as partner, domiciled in Korea), the event type (partnership), and its status (announced).

This event is read alongside a broader pattern noted in the interpreter's domain tracker: Korea's bank-led stablecoin infrastructure build-out is diversifying across multiple vendor and consortium tracks, including an eight-bank consortium separate from the MoonPay Korea/Woori Bank/BTQ grouping. This diversification signals competitive positioning by multiple institutional tracks ahead of any formal stablecoin authorisation regime, rather than coordination around a single infrastructure standard.

Outlook

Further consortium or partnership announcements in the Korean stablecoin space are plausible given the current absence of a settled authorisation framework and the apparent competitive motivation driving multiple parallel tracks. Confirmation of the BTQ Technologies/MoonPay Korea/Woori Bank partnership through a primary source — a direct company statement or regulatory filing rather than a single trade-press report — would allow this item's confidence to move from Probable toward Confirmed, and would also clarify commercial terms currently undisclosed, including deal value.

Periodic update · new data 2026-08-11

Commercial Intelligence & Fintech

The notable commercial event this cycle is the memorandum of understanding signed 21 July 2026 between Kbank, HashKey Group and BPMG to build won-stablecoin payment infrastructure targeting a Korea-Hong Kong remittance corridor. The event is announced rather than closed, and the financial terms of the partnership have not been publicly disclosed. Its significance lies in timing: the infrastructure build is proceeding ahead of the enabling Digital Asset Basic Act, which the Financial Services Commission is targeting for September 2026 reintroduction, making this a first-mover commercial positioning play against an unsettled legislative backdrop rather than a launch under a completed regulatory framework.

Outlook

Whether the Kbank-HashKey-BPMG partnership converts from MOU to operating infrastructure before or after the Digital Asset Basic Act's enactment will determine whether it functions as a template the eventual law accommodates, or as a build that requires retrofitting once the law is settled.

Sources and findings (13)
  1. T2https://www.theblock.co/post/380504/naver-merger-upbit-officialretrieved
  2. T3https://en.sedaily.com/news/2026/03/30/naver-dunamu-merger-delayed-three-months-amid-antitrustretrieved
  3. T3https://www.coindesk.com/business/2026/05/15/hana-bank-to-acquire-usd670-million-stake-in-upbit-operator-dunamuretrieved
  4. T3https://www.mordorintelligence.com/industry-reports/south-korea-real-time-payments-marketretrieved
  5. T3https://www.mordorintelligence.com/industry-reports/south-korea-payments-marketretrieved
  6. T3BTQ Technologies / MoonPay Korea — BTQ Technologies / MoonPay Korea — BTQ Technologies named security partner for MoonPay Korea's won-denominated stablecoin infrastructure (post-quantum cryptography across issuance, distribution, self-custody wallets, settlement and merchant delivery); Woori Bank is inaugural member of MoonPay Korea's KRW Stablecoin Consortium.retrieved
  7. T2Naver Financial–Dunamu merger — Naver Financial–Dunamu merger — Naver Financial confirmed an all-stock merger with Dunamu (Upbit operator) on 26 Nov 2025 valued ~US$10.3bn, issuing ~87.56m new shares (~KRW 15.13tn) at 2.5422618 Naver Financial shares per Dunamu share to integrate Dunamu as a wholly-owned subsidiary.
  8. T3Naver–Dunamu merger delay — Naver–Dunamu merger delay — The Naver Financial–Dunamu merger was delayed ~three months — shareholder meeting moved from 22 May to 18 Aug, closing from 30 June to 30 Sept 2026 — amid Korea FTC antitrust review and proposed legislation capping major shareholders' stakes in crypto exchanges.
  9. T3Hana Bank stake in Dunamu — Hana Bank stake in Dunamu — Hana Bank agreed (15 May 2026) to buy a 6.55% stake in Dunamu for ~KRW 1tn (~US$670m), closing 15 June, becoming its fourth-largest shareholder, with plans to jointly develop won-pegged stablecoins, blockchain remittances and tokenised securities.
  10. T3Naver won-pegged stablecoin platform investment — Naver won-pegged stablecoin platform investment — Following its Dunamu acquisition, Naver earmarked ~KRW 10tn over five years to build a won-pegged stablecoin platform, while Kakao announced a parallel retail-deposit-token project.
  11. T4Kakao Pay Securities — Kakao Pay Securities obtained an investment-trading business licence in July 2026 and announced a partnership with Dinari to explore tokenized Korean stocks.retrieved
  12. T2Korea Fintech Industry Association / Bank of England — Korea Fintech Industry Association / Bank of England — Korea Fintech Industry Association held a digital-finance cooperation meeting with the Bank of England covering stablecoin trade settlement, AI-agent payments and tokenisation.retrieved
  13. T3Gwangju Bank / Toss — Gwangju Bank / Toss — Gwangju Bank and fintech Toss completed a proof-of-concept for stablecoin QR-code payments, with a second phase planned involving actual merchants in the Jeonnam/Gwangju regions.retrieved
No modules match.

Filters combine as OR inside a group and AND across groups.

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light. Not shown on this page.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-11-04. A year-precision row is never promoted into a tighter band.

Orphan deltas: 2 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 14 module(s), 117 finding(s), 136 source(s) in the cumulative register.

Audit trail

Machine checkChallenged on 6 Oct 2026: not upheld (28 confirmed against the cited source; 1 contradicted by the cited source; 40 could not be checked). An automated, adversarial test run by a second model; no person has assessed the result.

Think something on this page is wrong? Report an error.