South Korea Abolishes Mandatory Reporting for Large Crypto Transfers

The South Korean Financial Intelligence Unit (FIU) has announced a significant shift in its regulatory framework by abolishing the mandatory reporting requirement for virtual asset transfers exceeding 10 million Korean won. This move, which amends the Enforcement Decree of the Act on Reporting and Using Specified Financial Transaction Information, marks a transition from rigid state-mandated reporting to a self-regulated risk management model. By transferring oversight responsibilities to individual cryptocurrency exchanges, the authorities aim to streamline operations while maintaining high standards of financial integrity within the domestic digital asset market.

Shift Toward Internal Risk Management Systems

Under the previous regulatory proposal, domestic virtual asset service providers (VASPs) were required to report all transfers to overseas entities surpassing the 10 million won threshold, regardless of the perceived risk level. However, following extensive industry feedback, the FIU opted to eliminate this blanket obligation. Instead, crypto companies are now required to establish and maintain their own internal risk management systems to identify and mitigate potential financial crimes. This change reflects a growing trend in South Korean policy to allow the private sector more autonomy in assessing transactional risks.

Expanded Travel Rule and Compliance Adjustments

While some reporting thresholds have been removed, the FIU has simultaneously tightened other compliance measures to ensure alignment with international standards. These adjustments impact how blockchain transactions are monitored and how small businesses manage their financial health.

• The Travel Rule scope has been expanded from transactions over 1 million won to include all transfer amounts.
• Enhanced customer authentication for high-risk transactions is no longer strictly mandatory for all cases; it will now be executed when a company deems the risk level to be exceptionally high.
• Small businesses have been granted a one-year grace period to meet the reporting condition requiring a debt-to-equity ratio of no more than 200%.
• Regulations requiring anti-money laundering (AML) computer equipment to be located within South Korea have been relaxed to permit the use of overseas cloud services.

Implications for the South Korean Crypto Market

These legislative updates suggest a strategic effort by South Korean regulators to balance strict anti-money laundering protocols with the operational realities of modern financial technology. The inclusion of overseas cloud services, for instance, acknowledges the global nature of server infrastructure in the digital age. By allowing exchanges to lead their own risk assessments, the FIU is prioritizing efficiency and technical flexibility over centralized administrative hurdles.

In conclusion, the decision to abolish mandatory reporting for large-scale transfers signals a maturing regulatory environment in South Korea. While the responsibility for risk management now rests more heavily on the shoulders of exchange operators, the overall framework provides a more nuanced approach to monitoring digital asset flows. Market participants must now focus on strengthening their internal compliance protocols to meet these new institutional expectations.