South Korea (KR)

Licensing, Authorisation & Market Access

Korea has no single EMI/PI regime of the bloc-style kind. The Electronic Financial Transactions Act (EFTA) is the governing instrument for electronic financial transactions in Korea; in force since 1 January 2007, Chapter IV provides for permission/registration of electronic financial business, with the FSC as primary authority entrusting supervision to the FSS Governor. EFTA is the single anchor statute any payments operator must map to in Korea; because there is no bloc-style EMI/PI regime, licensing is statute-by-statute and FSC-centred.

The licensing routes are layered. Only electronic-currency issuance is licensed by the FSC; other electronic financial businesses (including payment-gateway activity) must register with the FSC and are supervised and inspected by the FSS; credit-card business requires FSC approval under the Specialized Credit Finance Business Act; foreign providers generally must incorporate locally. The bank-PSP versus non-bank-PI/EMI distinction matters here: the registration-and-supervision burden falls most heavily on non-bank electronic financial businesses, which carry the qualified-personnel, minimum-capital and local-infrastructure conditions that constitute the core market-access friction. Market access requires a local entity plus those conditions — a material friction for foreign PSPs relative to an EU passport, where a single authorisation passports across the bloc.

This is a standing W1a anchor: e-currency issuance is licensed, while most other electronic financial business is registered, under an FSC-centred pre-approval and post-supervision system.

Outlook

The W1a baseline is established and confirmed. No structural change to the licensing architecture is signalled this cycle; the live conduct-and-safeguarding movement sits in W1b, and forward stablecoin licensing depends on the DABA framework tracked in W2. The local-incorporation requirement remains the durable structural feature for foreign entrants.

Conduct, Safeguarding & Promotions

The live W1b item is Korea's prepaid safeguarding rule. Effective 15 September 2024, prepayment service providers must separately manage at least 100% of customers' advance payments via trust or payment-guarantee insurance, invested only in safe assets — Korea Treasury and local-government bonds, bank or Korea Post deposits — with refund guaranteed on issuer bankruptcy. This is Korea's functional analogue to UK/EU safeguarding: a 100% trust/insurance customer-fund-protection floor binding all material prepaid and e-money issuers. The obligation falls on non-bank prepaid/e-money issuers, sharpening the bank-PSP versus non-bank-PI/EMI distinction that runs through Korean conduct regulation.

The same EFTA revision package brought BNPL within the perimeter at a level similar to credit-card business. Only stock companies with a debt ratio of 180% or below may be approved; the per-customer BNPL limit is KRW 300,000; and quarterly credit offering is capped at 15% of prior-quarter prepayment volumes. Korea has therefore codified hard caps on BNPL — a per-customer limit plus a quarterly cap — that are tighter than the conduct-led UK/EU trajectory, which has leaned on conduct standards rather than numeric ceilings.

Outlook

The W1b position is strengthening and confirmed. The 100% safeguarding floor and the codified BNPL caps are now standing features of the conduct regime; both were sourced to FSC primary material. No further conduct-package change is signalled this cycle, though the consumer-protection reforms tracked in W10 interact with the broader conduct surface.

Stablecoins & Digital Money

There is no enacted stablecoin framework in Korea as of late June 2026. The Digital Asset Basic Act (DABA) — which would define stablecoins, authorise won-pegged issuance, require 100% reserves in bank deposits or government bonds, and set roughly KRW 5bn minimum issuer capital — has been repeatedly delayed amid a dispute between the Bank of Korea (favouring a bank-led consortium of at least 51% bank ownership) and the FSC (favouring admission of fintechs). Three competing bills are before the National Assembly, and a bill is expected in 2026; the legislation was left off the Assembly agenda before the June 3 elections, pushing earliest debate into H2 2026. This is the single largest forward regulatory variable for Korean digital money, since resolution of the bank-led-versus-open issuance question determines whether super-apps such as Naver and Kakao or bank consortia capture won-stablecoin rails.

Private development is running ahead of the regime. BDACS launched KRW1 in September 2025 as a proof-of-concept — the first fully collateralised won-backed stablecoin, on Avalanche, backed 1:1 by won held in escrow at Woori Bank — and it remains a proof-of-concept rather than commercial issuance. It demonstrates technical readiness ahead of any enacted framework, and an eight-bank consortium is developing a shared won-pegged stablecoin in parallel.

Outlook

The W2 trajectory is stalled/pending and the standing position is held at Assessed confidence: the current legislative status rests on T3 journalism with no T1 anchor from the FSC, BOK or National Assembly, a gap noted in the register. The standing position must be read as 'not in force, delayed past the June 2026 elections.' Watch for an FSC/BOK/Assembly primary source to anchor DABA status; until then the bank-led-versus-open dispute remains the decisive unresolved question.

Operational Resilience & Critical Infra

Korean operational resilience is built on EFTA plus the subordinate Regulation on Supervision of Electronic Financial Transactions and FSC IT-outsourcing and cloud guidelines, supervised by the FSS. Essential-work cloud use has shifted from prior reporting to ex-post reporting within three months, and firms must run significance, business-continuity, safety and cloud-service-provider assessments. There is no single DORA-equivalent and no designated critical-third-party regime; this absence is recorded as not-applicable-in-regime rather than a data gap.

The analytical significance is structural divergence: Korea has no DORA-style critical-third-party oversight, so third-party and cloud oversight run through outsourcing rules and network-separation requirements rather than a designated-CTP designation regime as in the EU and UK. The obligation applies to both bank-PSP and non-bank operators.

Outlook

The W3 position is stable and confirmed. No new resilience instrument is signalled this cycle. The standing divergence from EU/UK critical-third-party regimes remains the module's defining feature; any future move toward a designated-CTP framework would be the development to watch.

Scheme & Network Compliance

The Korean card market has no Western-style interchange and no branded domestic switching network. The FSC caps merchant discount under the Specialized Credit Finance Business Act — roughly 1.5% for small merchants and roughly 2.0% for large merchants — with the full regulated discount returning to the issuer; processors negotiate fees bilaterally with issuers. Visa and Mastercard badge cards but do not switch domestically. The no-interchange, regulated-MDR model is fundamentally different from card economics elsewhere: acquirers and processors cannot rely on interchange-style revenue, and fees are administratively set. Cards account for roughly 70% of private consumption, with graduated preferential rates by merchant size.

The live development is the FSC's proposed card-fee amendment. On 24 December 2024 the FSC announced proposed amendments lowering the preferential fee-rate cap for small and medium merchants from 0.5–1.5% to 0.4–1.45% and aligning large-merchant fee-designation timing with that of SMEs. This further compresses card-issuer and processor economics for the SME merchant band and continues the FSC's repeated downward fee resets.

Outlook

The W4 trajectory is tightening, but the proposed amendment is correctly stated as proposed: its enactment status as of June 2026 is unverified, a gap flagged in the register. If enacted, the cut would extend the long downward administrative trajectory on merchant discount. Watch for an FSC confirmation of in-force status.

Payment Corridor Dynamics

Cross-border payments are governed by the Foreign Exchange Transactions Act (FETA), administered by the Ministry of Economy and Finance with declarations to the Bank of Korea; most settlement methods are freely permitted but specific methods require declaration, and small-value overseas remittance is a registered professional FX-dealer category under FETA supervised by the FSS. FETA is the gateway statute for all corridor activity, under which fintech money-transfer operators (Sentbe, E9Pay, GLN/Hana) and super-apps operate via small-value remittance registration.

Two forward movements stand out. The Ministry announced an Integrated Overseas Remittance Management System for real-time unified oversight of no-documentation remittances, targeted for January 2026; under current FETA, individuals can remit over US$5,000 a year without documents only through a designated bank, capped at US$100,000. Abolishing the bank-designation system and allowing up to US$100,000 no-doc remittance through all financial institutions would materially open the corridor to non-bank MTOs and intensify bank competition. Separately, amendments to FETA promulgated 2 June 2026 take effect in December 2026 after a six-month grace period, requiring companies providing cross-border digital-asset transfer services to register with the Ministry and report via the BOK foreign-exchange reporting network; this brings crypto and stablecoin remittance corridors — which crypto.news reports grew 380% in three years, surpassing banks in some segments — into the FETA registration-and-reporting perimeter. As a dated corridor item, internet-only K bank completed phase one of 'Project Pax', a stablecoin-based Korea–Japan cross-border remittance proof-of-concept in September 2025 with Shinhan, Nonghyup and Japanese partners, with phase two targeting SWIFT-network interoperability and PvP settlement.

Outlook

The W5 trajectory is escalating. Cross-border policy is liberalising on volume while tightening on crypto. Whether the Integrated Overseas Remittance Management System actually launched in January 2026 is unverified six months after the planned date, a gap noted in the register; the FETA crypto-transfer reporting regime is due in force December 2026. The illicit-finance dimension of the FETA crypto-transfer regime is routed to FIM.

Industry Structure & Commercial

Korea's payments landscape is dominated by homegrown super-apps — Kakao Pay, Naver Pay and Toss/Viva Republica — alongside Samsung Pay, and by three licensed internet-only banks: KakaoBank, K Bank and Toss Bank. NICE Payments anchors VAN throughput at roughly 1.16m merchants as of December 2024, and open banking covers roughly 58% of adults, about 30m users. The FSC is weighing a fourth internet-only bank. Super-app concentration and internet-only-bank profitability define the competitive landscape, with strategy tilting toward vertical integration and tokenisation. Open banking is governed by the Special Act on Financial Innovation Support of 2019.

This structural picture is the backdrop against which the specific commercial events tracked in W13 — the Naver–Dunamu merger, bank stakes in exchanges and won-stablecoin commitments — unfold.

Outlook

The W6 trajectory is consolidating, at Assessed confidence on vendor sourcing. Vertical integration and tokenisation are the directional themes; the prospective fourth internet-only bank licence is the structural decision to watch. Specific announced deals are carried as W13 events rather than here.

Legal & Litigation

The FIU's 'first-in, first-out' inspection campaign is the litigation spine this cycle. Dunamu (Upbit) was fined KRW 35.2bn (about US$25m) with a three-month new-customer suspension and a CEO warning in 2025; Korbit was fined KRW 2.73bn; and inspections ran from Dunamu through Korbit, GOPAX, Bithumb and Coinone. The campaign sets a VASP-supervision precedent bearing on the Naver–Dunamu merger, making AML/KYC liability a live deal-risk factor.

The litigation posture has shifted toward the exchanges. Dunamu filed a formal objection in Seoul against the FIU fine — alleging violations of the Act on Reporting and Using Specified Financial Transaction Information — which under Korean administrative law automatically suspends enforcement of the KRW 35.2bn penalty pending precedent-setting court review; the suspension defers the deal-risk overhang on the merger. A local judge then overturned Bithumb's six-month suspension in May 2026, part of regulators' increased crypto oversight alongside Dunamu's partial suspension and Korbit's penalty, consistent with the Hanbitco precedent where a Seoul court struck an FIU KYC fine on the basis that the violations did not lead to money laundering. Court losses for the FIU weaken the deterrent value of suspension penalties and bolster exchanges' litigation posture across the campaign.

Outlook

The W7 trajectory is escalating, held at Assessed confidence. The timing of Dunamu's objection — filed in late 2025 or early 2026, with the penalty paused as of February 2026 — should be specified for complete litigation context, a gap noted in the register. The underlying AML/KYC substance is routed to FIM; WPM carries the payments and M&A-precedent angle.

Merchant Acquiring & Risk

The institutionalised fee-disclosure regime is the live W8 development. Per the FSS payment-fee disclosure report released 28 February 2026, weighted-average fees for 18 covered e-finance firms were 1.98% for card and 1.74% for prepaid; the operator-retained share averaged 80.6% for prepaid versus 10.6% for card; and fees were lower for small and midsize merchants. Prepaid fees varied by model: delivery-platform 3.00%, shopping-mall 2.38%, dual-business PG 1.63% and dedicated PG 0.30%. Roughly 13 card processors enrol merchants bilaterally, and there is no branded domestic network.

The analytical point is that institutionalised fee transparency exposes the wide prepaid-versus-card margin gap — prepaid operators retain roughly 80% of fees against roughly 10% for card — directly relevant to acquirer and PG economics.

Outlook

The W8 position is stable and confirmed on the disclosure data. The fee-disclosure regime is now a recurring transparency surface; the prepaid-versus-card retention gap is the structural feature to track, alongside the card-fee-cap movement carried in W4.

Product Innovation & Market Development

The Bank of Korea has researched a CBDC since 2021, announced a 'CBDC Use-Case Test' in November 2023 with the FSC and FSS, and conducted pilot operations between April and June 2025, including opening deposit-token e-wallets and executing real transactions. The directional finding is that private won-stablecoin builds by Naver and Kakao now eclipse the sovereign-CBDC track in commercial momentum: the sovereign deposit-token track is being out-paced by private won-stablecoin investment, shifting the centre of gravity in digital-money product development. Supporting innovation infrastructure includes a unified national QR-code standard, with final specification in January 2025, and a KRW 500bn Fintech Innovation Fund running 2024–2027.

Outlook

The W9 trajectory is stable, at Assessed confidence. The thematic shift to watch is whether sovereign deposit-token work converges with or is displaced by the private won-stablecoin track; the specific private commitments behind that shift (Naver's KRW 10tn earmark, Kakao's deposit-token project) are carried as commercial events in W13, and the regulatory framework that would govern issuance sits in W2.

Consumer Protection & APP Fraud

Korea's APP-fraud (voice-phishing) regime rests on the 2011 Telecommunications Fraud Refund Act, enforced by the FSS via account-freeze and 'extinguishment of claims' reimbursement from frozen funds, with institutions liable where they failed identity-verification duties. Voluntary bank compensation is low — about 10% of reported cases in 2025, 18 of 92 reviewed — and losses were projected to top KRW 1tn in 2025. The current negligence-based standard yields very low reimbursement, which is the gap the proposed reform targets.

The live reform is the no-fault amendment. Proposed amendments to the Telecommunications Fraud Victim Refund Act would require the financial companies used by both victim and criminal to each cover half of voice-phishing damages, with per-case caps of KRW 10m–50m and liability waived for victim intent or gross negligence — a shift from the negligence-based standard, estimated to cost up to roughly KRW 280bn a year. This moves toward shared no-fault reimbursement, analogous in spirit to the UK PSR APP-fraud split-liability model, and materially raises financial-firm liability exposure. The FSS is also reviewing guidance to expand the fraudulent-card-use definition under the SCFBA to cover phishing/smishing-induced cardholder losses.

Outlook

The W10 trajectory is escalating. The no-fault shift is the defining forward change; its passage and the final cost-allocation mechanics are the items to watch. The reform falls on bank-PSP institutions, raising their liability exposure relative to the current negligence-based standard.

AML/CFT & Financial Crime (Sentinel-fed)

This module is sourced from the Sentinel.gi feed; the intelligence is attributed to Sentinel and the original illicit-finance analysis is routed to FIM. Per Sentinel, Korea's AML/CFT framework rests on the Financial Transaction Reports Act (the Act on Reporting and Using Specified Financial Transaction Information), the Proceeds of Crime Act and the terrorism/proliferation-financing prohibition act, administered by KoFIU; the FTRA establishes KoFIU and mandates customer due diligence, suspicious-transaction reports and currency-transaction reports. VASPs must register with KoFIU — with ISMS certification and real-name bank accounts — and apply the crypto travel rule on transfers over KRW 1m. VASP registration and travel-rule obligations are the binding financial-crime perimeter for Korean digital-money operators.

Per Sentinel, KoFIU launched a taskforce on 29 December 2025 to revamp the FTRA ahead of the 2028 FATF mutual evaluation: extending the travel rule below KRW 1m, building a UBO database, requiring a designated senior AML executive, adding AML rules for attorneys, CPAs and tax accountants, and subjecting stablecoin issuers to AML obligations equivalent to traditional institutions. This forward expansion materially raises the compliance load for VASPs and any future won-stablecoin issuer.

Outlook

The W11 trajectory is escalating and Sentinel-confirmed. The 2028 FATF mutual evaluation is the anchoring tracker item, with the sub-KRW1m travel rule and stablecoin-issuer AML equivalence the substantive changes ahead. WPM carries the finding only; detailed illicit-finance analysis is routed to FIM.

Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank versus non-bank access asymmetry. Settlement and cross-border access run through designated foreign-exchange banks and the BOK under the FETA declaration system; the BOK is the settlement and lender-of-last-resort backbone and the currency issuer. That designated-FX-bank gateway gives bank-PSPs privileged access to the settlement core, while non-bank operators reach corridors through registration under FETA's small-value remittance category rather than direct settlement membership.

The asymmetry is narrowing on the corridor side. Overseas transfers via the five major commercial banks reached roughly US$1.108tn (about KRW 1,590tn) in 2025, while remittances via the five largest won-denominated crypto exchanges rose to KRW 163.55tn (about US$125.8bn). Crypto-exchange remittance volumes now rival bank corridors in some segments, pressuring traditional correspondent-banking economics. Bank-led modernisation is also under way: NH Nonghyup and Hana piloted Partior cross-border ledger settlements in December 2025, compressing settlement from days to minutes.

Outlook

The W12 trajectory is modernising and confirmed on BOK primary data. The structural question is whether bank-led blockchain and stablecoin pilots (Partior, Project Pax) preserve the banks' settlement-core advantage as crypto-exchange corridor volumes grow. The corridor-side erosion of the bank/non-bank asymmetry is the development to track.

Commercial Intelligence (M&A, Investment & Product)

The lead event is the Naver Financial–Dunamu merger. Naver Financial confirmed an all-stock merger with Dunamu (the Upbit operator) on 26 November 2025 valued at roughly US$10.3bn, issuing about 87.56m new shares (roughly KRW 15.13tn) at 2.5422618 Naver Financial shares per Dunamu share to integrate Dunamu as a wholly-owned subsidiary; the deal status is pending regulatory approval, subject to Korea FTC antitrust review and shareholder-stake-cap legislation. The deal value is publicly disclosed. It vertically integrates the largest won-market crypto exchange into a super-app with won-stablecoin ambitions. The merger was subsequently delayed about three months — the shareholder meeting moved from 22 May to 18 August and closing from 30 June to 30 September 2026 — amid the FTC antitrust review and proposed legislation capping major shareholders' stakes in crypto exchanges.

Two investment events accompany the merger. Hana Bank agreed on 15 May 2026 to buy a 6.55% stake in Dunamu for roughly KRW 1tn (about US$670m), closing 15 June, becoming its fourth-largest shareholder, with plans to jointly develop won-pegged stablecoins, blockchain remittances and tokenised securities; this announced strategic investment signals bank-fintech convergence ahead of any won-stablecoin framework. Separately, following its Dunamu acquisition Naver earmarked roughly KRW 10tn over five years to build a won-pegged stablecoin platform, while Kakao announced a parallel retail-deposit-token project; the won amount is disclosed but the USD figure is not publicly disclosed. Woori Bank also announced an April 2026 MoonPay partnership for stablecoin technology.

Outlook

The W13 trajectory is active. The Naver–Dunamu close, now targeted at roughly 30 September 2026, is the pivotal event; completion is conditioned by FTC antitrust review, stake-cap legislation and the live FIU AML-enforcement precedent overhanging Dunamu (carried in W7). Bank stakes in exchanges and the KRW 10tn private stablecoin commitment pre-position for the pending DABA framework tracked in W2.