South Korea's FSC approves tightened VASP registration and

Cresthaven AnalyticsIntelligence Brief

Headline

South Korea's FSC approves tightened VASP registration and AML enforcement decree covering travel rule and CDD obligations

Executive Summary

South Korea's Financial Services Commission announced on August 11 that the cabinet approved a revised Enforcement Decree under the Act on Reporting and Using Specified Financial Transaction Information. The revision raises registration thresholds, expands scrutiny of major shareholders, adds financial soundness conditions, and strengthens travel-rule AML and customer due diligence requirements for all virtual asset service providers.

Bottom Line

The revised Enforcement Decree converts VASP registration in South Korea from a disclosure-based process into a substantive fitness-and-propriety gate, with quantitative financial thresholds, expanded ownership-chain disclosure, and executive qualification standards drawn from financial-company governance law. VASPs that cannot demonstrate a debt ratio at or below 200 percent, a clean three-year default record, and compliant executive credentials face non-acceptance of registration under the new framework. Travel-rule and CDD obligations are simultaneously elevated, placing the full compliance burden on VASPs processing cross-platform virtual asset transfers and maintaining existing customer relationships.

Key Regulatory Signals

Shareholder Scrutiny Reaches the Corporate Chain: The revised decree expands the definition of major shareholders subject to VASP registration review to include the chief executive officer, the controlling shareholder, and, where the largest shareholder is itself a corporate entity, that entity's largest shareholder and company representative. VASPs with layered ownership structures must now map and disclose a broader set of principals to satisfy entry requirements.
Financial Soundness Becomes a Registration Gate: VASPs must maintain a debt ratio at or below 200 percent, must not have defaulted within the past three years, and must not have had an operating license or registration revoked for violation of financial laws. Failure to meet any condition results in non-acceptance of registration, not merely a remediation notice.
Executive Qualification Standards Imported from Financial-Company Governance Law: Chief executive officers and all executive officers of VASPs must satisfy the qualification criteria prescribed under the Act on Corporate Governance of Financial Companies. This aligns VASP leadership standards with those applied to licensed banks and securities firms.
Travel Rule AML Obligations Tightened: The decree strengthens AML duties specifically for virtual asset transfers subject to the travel rule, requiring enhanced originator and beneficiary information handling. VASPs processing cross-platform transfers bear the direct compliance burden of the new transaction-information standards.
CDD Requirements Elevated Across the Sector: Customer due diligence obligations are enhanced sector-wide under the revised decree. All registered VASPs must update onboarding and ongoing monitoring procedures to reflect the new CDD standard, with no carve-out for existing customer relationships stated in the release.
Sanctions Notification for Retired Employees Codified: The decree introduces a formal notification mechanism for sanctions imposed on employees who have since left the firm. This closes a gap under which post-departure disciplinary outcomes were not systematically reported, extending the FSC's supervisory visibility into personnel conduct beyond active employment.

Regulatory Delta

South Korea's 2021 amendment to the Act on Reporting and Using Specified Financial Transaction Information first brought virtual asset service providers under the AML registration framework. This decree revision materially raises that bar by adding financial soundness gates and expanded ownership-chain scrutiny that were absent from the initial registration regime.

The 200 percent debt-ratio ceiling and three-year default lookback are quantitative thresholds new to VASP registration. Together, they convert what had been a qualitative fitness assessment into a measurable financial screen.

The revision moves South Korea closer to the FATF Recommendation 16 travel-rule standard and the 2023 updated guidance on virtual assets, consistent with FATF's June 2023 targeted update on VASP supervision.

Materiality Classification

HIGH — A final binding decree approved at cabinet level restructures the VASP registration baseline and AML compliance obligations sector-wide in South Korea, with quantitative financial thresholds and executive qualification standards that require immediate assessment by every registered or prospective VASP operating in the jurisdiction.

Intelligence Outlook

Monitor the Financial Services Commission for the official promulgation date of the revised Enforcement Decree, any implementing guidelines on travel-rule transaction-information standards, and FSC supervisory communications setting examination timelines for existing VASP registrants.