<!-- Markdown twin of https://payments.gi/jurisdictions/south-korea/. Same text as the HTML page; the HTML page is canonical. -->
title: South Korea Payments Regulation Monitor | World Payments Monitor
canonical: https://payments.gi/jurisdictions/south-korea/
date_modified: 2026-10-21
publisher: Asymmetric Intelligence

# South Korea

KR schema world-payments-v1

trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 61 sourced findings · 116 sources in the cumulative register

14 Modules baseline.modules[]

61 Findings modules[].findings[]

14 Tier-1 sources run_metadata.t1_source_count

Confidence mix (sums to 14 rendered modules; click to filter)

## Jurisdiction brief

###### Latest update · 18 October 2026

#### Lead Signal

An AI-assisted intrusion wave against major South Korean banks has pushed operational resilience to the forefront of this cycle's payments picture. The Financial Services Commission ordered banks and credit-card issuers to carry out sweeping security reviews on 13 October 2026, following cyberattacks on Shinhan Bank and KB Kookmin Bank. The Commission confirmed on 14 October 2026 that 16 financial firms had been breached since the start of the month, with roughly 100,000 records exposed. The regulatory response is moving beyond incident-specific remediation toward a structural change in supervisory cadence: the FSC is moving to mandate twice-yearly vulnerability checks for larger financial institutions, including crypto exchanges, after a review found security gaps at 130 companies.

#### Other Developments

**Stablecoin legislation remains stalled.** The Digital Asset Basic Act, carrying Korea's Phase 2 stablecoin legislation, remains stalled in the National Assembly with no confirmed submission date, leaving stablecoin issuance and related digital-money rules in continued regulatory limbo.

**Perpetual-futures advisory.** The Financial Services Commission issued user advisories on 16 October 2026 warning against perpetual futures products carrying leverage of ten to two hundred times on virtual assets and stocks, offered through overseas platforms, continuing the regulator's perimeter-policing of unregistered high-leverage digital-asset derivative products.

#### Cross-Monitor Connections

The banking-breach wave underlying this cycle's operational-resilience signal is the same incident set tracked by financial-integrity under its compliance-technology domain and by data-protection under its controller/processor-duties and sectoral-watch coverage of the same institutions' breach-notification obligations. Readers seeking the AML/CFT dimension of Korea's virtual-asset framework should consult financial-integrity's standing coverage directly, consistent with this monitor's practice of subscribing to rather than re-analysing illicit-finance material.

#### Outlook

Whether the FSC's planned twice-yearly vulnerability-audit mandate is formalised into a binding instrument, and whether it is extended in practice to the full range of licensed crypto-exchange and non-bank payment-institution populations, will determine the durability of this cycle's operational-resilience tightening. The continued absence of a confirmed timetable for the Digital Asset Basic Act means stablecoin-related payment innovation in Korea remains constrained by regulatory uncertainty rather than by a settled statutory framework.

_6 earlier updates not shown here._

###### Standing brief · as of 29 June 2026

_Written before the update above. Where they differ, the update is the more recent position._

#### Lead Signal

The Korean payments environment this cycle is defined by a single structural fact and a single forward variable. The structural fact is that Korea operates a non-passporting, statute-by-statute, FSC-centred licensing system with no single EMI/PI regime. The Electronic Financial Transactions Act (EFTA) is the governing instrument for electronic financial transactions in Korea; in force since 1 January 2007, Chapter IV provides for permission/registration of electronic financial business, with the FSC as primary authority entrusting supervision to the FSS Governor. Only electronic-currency issuance is licensed by the FSC; other electronic financial businesses (including PG) must register with the FSC and are supervised/inspected by the FSS; credit-card business requires FSC approval under the Specialized Credit Finance Business Act; foreign providers generally must incorporate locally. For any operator mapping market access, this means a local entity plus minimum-capital, qualified-personnel and local-infrastructure conditions — a material friction relative to an EU passport.

Against this baseline, Korea has codified conduct rules that run tighter than the conduct-led UK/EU trajectory. Effective 15 September 2024, prepayment service providers must separately manage at least 100% of customers' advance payments via trust or payment-guarantee insurance, invested only in safe assets, with refund guaranteed on issuer bankruptcy — a functional analogue to UK/EU safeguarding. The same EFTA revision package brought BNPL within the perimeter at a level similar to credit-card business: only stock companies with a debt ratio of 180% or below may be approved, with a per-customer BNPL limit of KRW 300,000 and a quarterly credit offering capped at 15% of prior-quarter prepayment volumes.

The forward variable is the won-stablecoin framework. There is no enacted stablecoin framework as of late June 2026. The Digital Asset Basic Act (DABA) — which would define stablecoins, authorise won-pegged issuance, require 100% reserves and roughly KRW 5bn minimum issuer capital — has been repeatedly delayed amid a Bank of Korea (favouring a bank-led consortium) versus FSC (favouring fintech admission) dispute, with three competing bills before the National Assembly and debate now pushed past the June elections into H2 2026. Private capital is running ahead of the regime: BDACS launched the KRW1 proof-of-concept in September 2025, backed 1:1 by won held in escrow at Woori Bank, while Naver has earmarked roughly KRW 10tn over five years to build a won-pegged stablecoin platform and an eight-bank consortium develops a shared won-pegged stablecoin in parallel.

#### Other Developments

The defining commercial event is the Naver Financial–Dunamu merger, an all-stock combination confirmed on 26 November 2025 valued at roughly US$10.3bn, issuing about 87.56m new shares to integrate Dunamu (the Upbit operator) as a wholly-owned subsidiary. The deal has since slipped roughly three months — the shareholder meeting moved from 22 May to 18 August and closing from 30 June to 30 September 2026 — amid Korea FTC antitrust review and proposed legislation capping major shareholders' stakes in crypto exchanges. Banks are racing into the same space: Hana Bank agreed on 15 May 2026 to buy a 6.55% stake in Dunamu for roughly KRW 1tn (about US$670m), with plans to jointly develop won-pegged stablecoins, blockchain remittances and tokenised securities.

Overhanging the merger is a live enforcement precedent. The FIU's 'first-in, first-out' inspection campaign fined Dunamu KRW 35.2bn (about US$25m) with a three-month new-customer suspension and a CEO warning in 2025, and fined Korbit KRW 2.73bn, running inspections through GOPAX, Bithumb and Coinone. Dunamu filed a formal objection in Seoul which, under Korean administrative law, automatically suspends enforcement of the penalty pending court review. The litigation posture has hardened in the exchanges' favour: a local judge overturned Bithumb's six-month suspension in May 2026, consistent with the Hanbitco precedent where a Seoul court struck an FIU KYC fine on the basis that the violations did not lead to money laundering.

On cross-border activity, the Ministry of Economy and Finance announced an Integrated Overseas Remittance Management System for real-time unified oversight of no-documentation remittances, with a targeted January 2026 launch that would allow up to US$100,000 no-doc remittance through all financial institutions rather than a designated bank only. In parallel, amendments to the Foreign Exchange Transactions Act (FETA) promulgated 2 June 2026 take effect in December 2026 after a six-month grace period, requiring providers of cross-border digital-asset transfer services to register with the Ministry and report via the BOK foreign-exchange network. On consumer protection, proposed amendments to the Telecommunications Fraud Victim Refund Act would require the financial companies used by both victim and criminal to each cover half of voice-phishing damages, with per-case caps of KRW 10m–50m — a shift from the negligence-based standard that currently yields voluntary bank compensation of only about 10% of reported cases.

#### Cross-Monitor Connections

The AML/CFT surface in this cycle is Sentinel-fed and routes to the Financial Intelligence Monitor (FIM). Korea's framework rests on the Financial Transaction Reports Act, the Proceeds of Crime Act and the terrorism/proliferation-financing prohibition act, administered by KoFIU, with VASPs required to register and apply the crypto travel rule on transfers over KRW 1m; KoFIU launched a taskforce on 29 December 2025 to revamp the FTRA ahead of the 2028 FATF mutual evaluation. The original illicit-finance analysis of this taskforce, the FIU enforcement campaign and the amended FETA cross-border virtual-asset reporting regime is flagged to FIM; the World Payments Monitor carries only the payments and M&A-precedent angle.

#### Outlook

The near-term centre of gravity is the DABA resolution: whether issuance is captured by bank consortia or opened to super-apps such as Naver and Kakao will determine who controls won-stablecoin rails, and that decision is now expected in H2 2026 on T3 sourcing only, without a T1 legislative anchor. Cross-border policy is liberalising on volume while tightening on crypto, with the FETA reporting regime due in force December 2026. The Naver–Dunamu close, now targeted at roughly 30 September 2026, remains conditioned by FTC review, stake-cap legislation and the paused FIU penalty. The card-fee trajectory continues downward, with the FSC's December 2024 proposed cap cut for SME merchants unverified as to enactment as of June 2026.

trust tier: ai_unverified

###### Latest update · 6 October 2026

#### Regulatory Status

South Korea's payments regulatory environment tightened on two fronts this period. First, the Financial Services Commission opened pre-announcement of subordinate-regulation amendments under the Electronic Securities Act and Capital Markets Act concerning token securities, with the comment period running 2 October to 11 November 2026 and the amending Acts scheduled to take effect 4 February 2027. Second, the FSC's Notice 2026-29, issued 15 July 2026 and effective 1 October 2026, now requires prepaid-fund issuers and upper-tier PG operators to carry out risk assessments of lower-tier PG operators at contract formation, renewal, and on a staged ongoing cadence (semi-annual through 30 September 2027, quarterly thereafter). Separately, the proposed Naver Financial/Dunamu share-exchange merger has slipped again, per press reporting, to shareholder meetings on 19 November 2026 and a share-exchange date of 31 December 2026; this remains uncorroborated by primary regulatory or corporate filing.

#### Outlook

Watch the 11 November 2026 close of the token-securities subordinate-regulation comment period and the 4 February 2027 commencement date, alongside the 1 October 2027 step-up to quarterly PG risk-assessment cadence under Notice 2026-29. Primary-source confirmation of the Naver Financial/Dunamu merger timeline would be a useful corroborating development to watch for ahead of the stated 19 November 2026 shareholder meetings.

_4 earlier updates not shown here._

###### Standing brief · as of 29 June 2026

_Written before the update above. Where they differ, the update is the more recent position._

#### Regulatory Status

Korea operates a non-passporting, statute-by-statute, FSC-centred payments regime with no single EMI/PI licence. EFTA is the governing statute, with the FSC as primary authority and the FSS as supervisor; e-currency issuance is licensed, most other electronic financial business is registered, card business is approved under the SCFBA, and foreign providers generally must incorporate locally (W1a). Conduct rules run tighter than the UK/EU conduct-led trajectory: a 100% prepaid safeguarding floor via trust or payment-guarantee insurance has been effective since 15 September 2024, and BNPL has been brought within the perimeter with hard per-customer and quarterly caps (W1b).

The defining forward variable is the absence of an enacted stablecoin framework: the Digital Asset Basic Act is delayed past the June 2026 elections into H2 2026 amid a BOK-versus-FSC bank-led-versus-open dispute, while private won-stablecoin builds run ahead (W2). Cross-border policy is liberalising on volume — the Integrated Overseas Remittance Management System (targeted January 2026) and US$100k no-doc remittance through all financial institutions — while tightening on crypto via the amended FETA cross-border virtual-asset reporting regime in force December 2026 (W5). The card market is structurally distinct (no interchange, no domestic branded switching, regulated MDR returning to issuers), with a proposed Dec 2024 SME fee-cap cut whose enactment is unverified (W4, W8). Litigation is active, with the FIU AML enforcement campaign, Dunamu's penalty-suspending objection and Bithumb's overturned suspension (W7). Consumer protection is shifting toward shared no-fault voice-phishing reimbursement (W10). The AML/CFT surface (W11) is Sentinel-fed and routed to FIM, anchored by the KoFIU taskforce ahead of the 2028 FATF mutual evaluation. Correspondent banking modernises via bank-led blockchain and stablecoin pilots as crypto-exchange remittance volumes rival bank corridors (W12). The defining commercial event is the Naver–Dunamu ~US$10.3bn merger, with a Hana Bank ~US$670m Dunamu stake and a Naver ~KRW 10tn stablecoin commitment (W13).

#### Outlook

Korea's jurisdiction risk is ELEVATED with active reform fragmenting across digital money, corridors, AML and consumer protection. The DABA resolution is the decisive near-term event, expected in H2 2026 but anchored only on T3 sourcing. The Naver–Dunamu close is targeted at roughly 30 September 2026, conditioned by FTC review, stake-cap legislation and the paused FIU penalty. The FETA crypto-transfer reporting regime is due in force December 2026, and the no-fault APP-fraud reform and KoFIU FTRA package are the further forward items. Whether the Integrated Overseas Remittance Management System launched on schedule in January 2026 remains unverified. This is an AI-unverified standing position pending lawyer-diff.

14 of 14 modules

Signal

Density

Selections OR within a group, AND across groups. Press / to search.

### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-06-27

South Korea regulates payment services under the Electronic Financial Transactions Act (EFTA), supervised by the FSC/FSS. A major EFTA amendment tightening the payment-gateway (PG) regime was promulgated 2025-12-16 (in force 2026-12-17), requiring PG services to externally manage 100% of unsettled user funds and scaling capital requirements to quarterly payment volume.

Standing sub-brief · as of 29 June 2026 270 words · last cycle 2026-09-28

#### Licensing, Authorisation & Market Access

Korea has no single EMI/PI regime of the bloc-style kind. The Electronic Financial Transactions Act (EFTA) is the governing instrument for electronic financial transactions in Korea; in force since 1 January 2007, Chapter IV provides for permission/registration of electronic financial business, with the FSC as primary authority entrusting supervision to the FSS Governor. EFTA is the single anchor statute any payments operator must map to in Korea; because there is no bloc-style EMI/PI regime, licensing is statute-by-statute and FSC-centred.

The licensing routes are layered. Only electronic-currency issuance is licensed by the FSC; other electronic financial businesses (including payment-gateway activity) must register with the FSC and are supervised and inspected by the FSS; credit-card business requires FSC approval under the Specialized Credit Finance Business Act; foreign providers generally must incorporate locally. The bank-PSP versus non-bank-PI/EMI distinction matters here: the registration-and-supervision burden falls most heavily on non-bank electronic financial businesses, which carry the qualified-personnel, minimum-capital and local-infrastructure conditions that constitute the core market-access friction. Market access requires a local entity plus those conditions — a material friction for foreign PSPs relative to an EU passport, where a single authorisation passports across the bloc.

This is a standing W1a anchor: e-currency issuance is licensed, while most other electronic financial business is registered, under an FSC-centred pre-approval and post-supervision system.

#### Outlook

The W1a baseline is established and confirmed. No structural change to the licensing architecture is signalled this cycle; the live conduct-and-safeguarding movement sits in W1b, and forward stablecoin licensing depends on the DABA framework tracked in W2. The local-incorporation requirement remains the durable structural feature for foreign entrants.

Periodic update · new data 2026-09-28

#### Licensing, Authorisation & Market Access

South Korea's Electronic Financial Transactions Act (EFTA) has been amended to materially tighten the licensing and fund-safeguarding perimeter for payment-gateway (PG) service entities. The amendment requires PG entities to externally manage 100 percent of unsettled seller and user funds -- a full-segregation model rather than a partial-reserve approach -- with capital requirements scaled to quarterly payment volume, meaning higher-volume PG entities face proportionally higher capital thresholds. This applies to non-bank payment-institution and e-money-institution entities, distinct from bank-operated payment gateways, which sit under a different prudential regime.

The amendment's implementation follows a two-stage timeline. Fund-segregation corrective measures took effect immediately upon the amendment's promulgation on 16 December 2025, indicating the regulator prioritised addressing fund-safeguarding gaps ahead of the amendment's fuller rollout. The amendment's core provisions -- covering the full scope of registration and scope requirements -- become effective 17 December 2026, giving affected entities approximately a year from promulgation to complete their transition to the new capital and segregation requirements.

#### Outlook

PG entities operating in Korea should treat 17 December 2026 as the key compliance deadline for the amendment's core provisions, while noting that fund-segregation corrective measures are already enforceable. Entities with higher quarterly payment volumes should expect correspondingly higher capital requirements under the new scaled framework.

**1 earlier distinct update(s)**

Periodic update · new data 2026-08-11

#### Licensing, Authorisation & Market Access

The amended Electronic Financial Transactions Act is the defining W1a development this cycle. Passed by the National Assembly plenary on 28 November 2025, promulgated 16 December 2025, and entering into force 17 December 2026, the amendment gives both bank and non-bank payment institutions a year-long implementation runway. It was drafted directly in response to the WeMakePrice and TMON payment-gateway failures of August 2024 and the government's September 2024 Plan to Improve the Payment Gateway System, making this a corrective rather than anticipatory reform. Two scope changes carry distinct bank-versus-nonbank implications. First, the amendment institutionalises open-banking continuity and scalability and requires big-tech payment platforms, non-bank entities operating at scale, to route through the designated digital-clearing system, a change applying to both bank and non-bank participants in the clearing architecture. Second, the amendment narrows the payment-gateway definition itself: e-commerce mail-order-brokerage entities that settle payments under the Consumer Protection in Electronic Commerce Act will no longer be classified as PG services, removing a category of non-bank PI/EMI-adjacent entities from PG-specific licensing scope. The practical market-access effect is a redrawing of who counts as a licensed payment-gateway provider versus who falls under e-commerce consumer-protection rules instead, with the digital-clearing obligation simultaneously pulling big-tech non-bank platforms further into bank-grade scheme infrastructure.

#### Outlook

The amendment's 17 December 2026 in-force date is the operative deadline for market participants to complete reclassification under the narrowed PG definition and to integrate with the designated digital-clearing system where the big-tech threshold applies. No primary-regulator implementing text was located this cycle beyond secondary legal-commentary coverage, a gap worth closing before the in-force date.

**Sources and findings (5)**

1. T1 [https://elaw.klri.re.kr/eng_mobile/viewer.do?hseq=44455 (Electronic Financial Transactions Act)](https://elaw.klri.re.kr/eng_mobile/viewer.do?hseq=44455 (Electronic Financial Transactions Act))
2. T3 [https://chambers.com/content/item/4318 (Chambers FinTech, South Korea)](https://chambers.com/content/item/4318 (Chambers FinTech, South Korea))
3. T3 [https://www.lexology.com/library/detail.aspx?g=cfd884b5-7f03-46a8-bf8d-c3fc9d8eb3a7 (Lexology, fintech regulation in South Korea)](https://www.lexology.com/library/detail.aspx?g=cfd884b5-7f03-46a8-bf8d-c3fc9d8eb3a7 (Lexology, fintech regulation in South Korea))
4. T3 [https://iclg.com/practice-areas/fintech-laws-and-regulations/korea (ICLG Fintech 2025-26)](https://iclg.com/practice-areas/fintech-laws-and-regulations/korea (ICLG Fintech 2025-26))
5. T3 [https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/south-korea](https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/south-korea) retrieved 2026-06-27

### W1b Conduct, Safeguarding & Promotions Confirmed confirmed 2026-06-27

FSC amended the Electronic Financial Supervisory Regulations (Notice 2026-29) on 15 July 2026 to require risk assessment of lower-tier PG operators by prepaid-fund issuers and upper-tier PG operators, and clearer merchant-fee disclosure; effective 1 October 2026 (semi-annual assessment for the first year, quarterly from 1 October 2027).

Standing sub-brief · as of 29 June 2026 235 words · last cycle 2026-10-06

#### Conduct, Safeguarding & Promotions

The live W1b item is Korea's prepaid safeguarding rule. Effective 15 September 2024, prepayment service providers must separately manage at least 100% of customers' advance payments via trust or payment-guarantee insurance, invested only in safe assets — Korea Treasury and local-government bonds, bank or Korea Post deposits — with refund guaranteed on issuer bankruptcy. This is Korea's functional analogue to UK/EU safeguarding: a 100% trust/insurance customer-fund-protection floor binding all material prepaid and e-money issuers. The obligation falls on non-bank prepaid/e-money issuers, sharpening the bank-PSP versus non-bank-PI/EMI distinction that runs through Korean conduct regulation.

The same EFTA revision package brought BNPL within the perimeter at a level similar to credit-card business. Only stock companies with a debt ratio of 180% or below may be approved; the per-customer BNPL limit is KRW 300,000; and quarterly credit offering is capped at 15% of prior-quarter prepayment volumes. Korea has therefore codified hard caps on BNPL — a per-customer limit plus a quarterly cap — that are tighter than the conduct-led UK/EU trajectory, which has leaned on conduct standards rather than numeric ceilings.

#### Outlook

The W1b position is strengthening and confirmed. The 100% safeguarding floor and the codified BNPL caps are now standing features of the conduct regime; both were sourced to FSC primary material. No further conduct-package change is signalled this cycle, though the consumer-protection reforms tracked in W10 interact with the broader conduct surface.

Periodic update · new data 2026-10-06

#### Conduct, Safeguarding & Financial Promotions

On 15 July 2026 the Financial Services Commission amended the Electronic Financial Supervisory Regulations under Notice 2026-29 to tighten conduct obligations running through payment-gateway (PG) contracting chains. The amendment requires prepaid-fund issuers and upper-tier PG operators to conduct risk assessments of the lower-tier PG operators they contract with. That assessment obligation attaches at three points: when a contract is concluded, when it is renewed, and on an ongoing basis during the life of the contract.

The amendment took effect 1 October 2026, but the ongoing-assessment cadence is staged rather than fixed from day one. For the first year the rule is in force, from 1 October 2026 to 30 September 2027, assessments during the contract term must be conducted semi-annually. From 1 October 2027 the required cadence steps up to quarterly. The practical effect is a deliberately phased build-up of supervisory intensity: firms have a year to establish the semi-annual assessment infrastructure before the quarterly standard applies, rather than being required to hit the tighter cadence immediately.

This sits on the nonbank PI/EMI side of Korea's payments market specifically, given the Electronic Financial Supervisory Regulations' reach into prepaid-fund issuers and PG operators as distinct from bank-channel payment activity. The obligation creates a standing due-diligence relationship running down the PG contracting chain, where upper-tier operators and prepaid-fund issuers now carry a continuing, dated assessment duty toward the lower-tier operators they rely on, rather than a one-off onboarding check.

#### Outlook

The cadence step-up on 1 October 2027, from semi-annual to quarterly risk assessment, is already fixed under Notice 2026-29 and represents the next compliance inflection point for multi-tier PG arrangements in Korea. Firms operating lower-tier PG relationships should expect the assessment relationship with upper-tier counterparties and prepaid-fund issuers to intensify on that date rather than remain static at the October 2026 baseline.

**1 earlier distinct update(s)**

Periodic update · new data 2026-10-04

#### Conduct, Safeguarding & Financial Promotions

An amendment to the Electronic Financial Transactions Act, promulgated 16 December 2025, requires payment-gateway providers in South Korea to hold merchant-settlement and user-refund funds under external or segregated management. Capital requirements are set proportional to transaction scale, meaning larger PG providers face a correspondingly higher capital bar, and the amendment also requires regulatory approval for any major-shareholder change at a PG provider, introducing an ownership-vetting dimension to the safeguarding regime.

This settlement-fund-protection layer is structurally distinct from the existing settlement backbone that runs through the Foreign Exchange Transactions Act and the Bank of Korea, which governs cross-border and interbank settlement rather than merchant-facing PG fund custody. The EFTA amendment instead addresses the specific risk that a PG provider could commingle or misuse merchant-settlement and consumer-refund funds, a risk distinct from systemic settlement-architecture risk. No primary FSC gazette text for the amendment was retrieved this cycle; the finding rests on trade-press reporting.

#### Outlook

How PG providers across the sector, not only the market-leading firm, adapt their fund-management structures to the segregation and proportional-capital requirements is the item to track. The major-shareholder approval requirement also introduces a new friction point for any PG ownership change or acquisition in the Korean market going forward.

**Sources and findings (4)**

1. T1 [https://www.fsc.go.kr/eng/pr010101/83006 (FSC press release)](https://www.fsc.go.kr/eng/pr010101/83006 (FSC press release))
2. T1 [https://www.fsc.go.kr/eng/pr010101/83006 (FSC press release)](https://www.fsc.go.kr/eng/pr010101/83006 (FSC press release))
3. T3 [https://architectlegal.com/NEWSLETTER (Architect Legal, EFTA prepaid obligations)](https://architectlegal.com/NEWSLETTER (Architect Legal, EFTA prepaid obligations))
4. T3 [https://www.lexology.com/library/detail.aspx?g=2fdd3626-2083-4c6a-a058-5f9ad10ae4fa (Lexology first-step analysis)](https://www.lexology.com/library/detail.aspx?g=2fdd3626-2083-4c6a-a058-5f9ad10ae4fa (Lexology first-step analysis))

### W2 Stablecoins & Digital Money moved Probable confirmed 2026-06-27

FSC pre-announced (1 Oct 2026) subordinate-regulation amendments under the Electronic Securities Act and Capital Markets Act for token securities; notice period 2 Oct-11 Nov 2026; amending Acts scheduled in force 4 Feb 2027.

Movement — CHANGED FSC issued advisory (Oct 16) against high-leverage overseas crypto/stock perpetual-futures products; Digital Asset Basic Act remains stalled with no confirmed submission date._New material stablecoin/digital-money development this cycle._

Horizon · 2026-H2 (±year) Digital Asset Basic Act (won-stablecoin framework)_proposed · T3_

Standing sub-brief · as of 29 June 2026 288 words · last cycle 2026-10-18

#### Stablecoins & Digital Money

There is no enacted stablecoin framework in Korea as of late June 2026. The Digital Asset Basic Act (DABA) — which would define stablecoins, authorise won-pegged issuance, require 100% reserves in bank deposits or government bonds, and set roughly KRW 5bn minimum issuer capital — has been repeatedly delayed amid a dispute between the Bank of Korea (favouring a bank-led consortium of at least 51% bank ownership) and the FSC (favouring admission of fintechs). Three competing bills are before the National Assembly, and a bill is expected in 2026; the legislation was left off the Assembly agenda before the June 3 elections, pushing earliest debate into H2 2026. This is the single largest forward regulatory variable for Korean digital money, since resolution of the bank-led-versus-open issuance question determines whether super-apps such as Naver and Kakao or bank consortia capture won-stablecoin rails.

Private development is running ahead of the regime. BDACS launched KRW1 in September 2025 as a proof-of-concept — the first fully collateralised won-backed stablecoin, on Avalanche, backed 1:1 by won held in escrow at Woori Bank — and it remains a proof-of-concept rather than commercial issuance. It demonstrates technical readiness ahead of any enacted framework, and an eight-bank consortium is developing a shared won-pegged stablecoin in parallel.

#### Outlook

The W2 trajectory is stalled/pending and the standing position is held at Assessed confidence: the current legislative status rests on T3 journalism with no T1 anchor from the FSC, BOK or National Assembly, a gap noted in the register. The standing position must be read as 'not in force, delayed past the June 2026 elections.' Watch for an FSC/BOK/Assembly primary source to anchor DABA status; until then the bank-led-versus-open dispute remains the decisive unresolved question.

Periodic update · new data 2026-10-18

#### Stablecoins & Digital Money

South Korea's stablecoin and digital-money framework remains unsettled this cycle. The Digital Asset Basic Act, which carries the country's Phase 2 stablecoin legislation, has no confirmed submission date to the National Assembly as of 5 October 2026, leaving stablecoin issuance and reserve-asset rules in continued legislative limbo. Alongside this gap, the Financial Services Commission issued user advisories on 16 October 2026 warning against perpetual futures products tied to virtual assets and stocks, carrying leverage of ten to two hundred times and offered through overseas platforms. This advisory activity functions as a perimeter-policing response against unregistered high-leverage digital-asset derivative products in the continued absence of a comprehensive digital-asset statute. The non-bank payment-institution and e-money sector most directly affected by the stalled legislation remains without settled reserve or issuer-eligibility requirements for stablecoin-type instruments pending the Act's progress.

#### Outlook

The trajectory of Korea's stablecoin framework depends entirely on whether the Digital Asset Basic Act advances through the National Assembly; until it does, non-bank payment institutions and digital-money providers operate without a settled stablecoin-specific statutory framework, and the FSC's continued advisory-based approach toward unregistered high-leverage products suggests the regulator will keep relying on supervisory warnings rather than binding rules in the interim.

**2 earlier distinct update(s)**

Periodic update · new data 2026-10-06

#### Stablecoins & Digital Money

The Financial Services Commission opened formal pre-announcement (입법예고) of subordinate-regulation amendments under the Electronic Securities Act and the Capital Markets Act concerning token securities on 1 October 2026, with the public notice period running from 2 October to 11 November 2026. The amending Acts themselves are scheduled to take effect on 4 February 2027.

The move works through Korea's existing securities architecture rather than standing up a separate digital-asset statute: token securities are being folded into the subordinate rulebook beneath the Electronic Securities Act and the Capital Markets Act, which will determine matters such as how token-form securities are registered, issued and traded within the existing capital-markets perimeter. The six-week comment window gives market participants a defined opportunity to respond to the draft subordinate rules before they are finalised ahead of the February 2027 commencement date.

This is a market-structure development for payment and settlement intermediaries with any exposure to token-form instruments in Korea: it signals that token securities will sit inside the established securities regulatory perimeter, with the practical licensing, custody and trading-infrastructure consequences to be set by the subordinate regulations now under consultation rather than by a standalone token regime.

#### Outlook

Two dates anchor the near-term calendar: the close of the subordinate-regulation comment period on 11 November 2026, and the scheduled commencement of the amending Acts on 4 February 2027. Firms with payment or settlement infrastructure touching token-form securities in Korea should treat the comment-period window as the active opportunity to engage with the shape of the subordinate rules before the perimeter is fixed.

Periodic update · new data 2026-08-11

#### Stablecoins & Digital Money

Korea's won-stablecoin framework is being built on two parallel tracks this cycle: a legislative track and a commercial track running ahead of it. On the legislative side, the ruling Democratic Party and the Financial Services Commission agreed on 20 July 2026 to accelerate the Framework Act on Digital Assets through twice-monthly subcommittee reviews, targeting a September 2026 reintroduction, and the FSC confirmed on 29 July 2026 a plan to consolidate ten pending crypto and stablecoin bills into a single government-backed Digital Asset Basic Act spanning industry, market-conduct and user-protection pillars. On the commercial side, Kbank, HashKey Group and BPMG signed a memorandum of understanding on 21 July 2026 to build won-stablecoin payment infrastructure aimed at a Korea-Hong Kong remittance corridor, explicitly ahead of the enabling legislation passing. The sequencing matters: infrastructure is being built commercially before the licensing and AML rules that will govern it are finalised, creating a window in which first-mover commercial positioning is occurring without a settled regulatory perimeter.

#### Outlook

September 2026 is the marker to watch for the Framework Act's reintroduction. Whether the consolidated Digital Asset Basic Act text, once published, requires retrofitting of the Kbank-HashKey-BPMG infrastructure build, or whether that build has been designed to anticipate the pending rules, will determine how much of the current commercial first-mover advantage survives the legislative process.

**Sources and findings (5)**

1. T3 [https://www.dlnews.com/articles/regulation/south-korean-regulator-misses-government-stablecoin-deadline/](https://www.dlnews.com/articles/regulation/south-korean-regulator-misses-government-stablecoin-deadline/) retrieved 2026-06-27
2. T3 [https://koreatechdesk.com/korea-stablecoin-dilemma-digital-asset-cryptocurrency](https://koreatechdesk.com/korea-stablecoin-dilemma-digital-asset-cryptocurrency) retrieved 2026-06-27
3. T3 [https://sumsub.com/media/news/regulatory-deadlock-halts-south-korea-stablecoin-plans/](https://sumsub.com/media/news/regulatory-deadlock-halts-south-korea-stablecoin-plans/) retrieved 2026-06-27
4. T3 [https://www.seoulz.com/korea-won-stablecoin-2026/](https://www.seoulz.com/korea-won-stablecoin-2026/) retrieved 2026-06-27
5. T3 [https://www.koreatimes.co.kr/economy/cryptocurrency/20260414 (Korea Times contribution)](https://www.koreatimes.co.kr/economy/cryptocurrency/20260414 (Korea Times contribution))

### W3 Operational Resilience & Critical Infra moved Confirmed confirmed 2026-06-27

Korea has no single DORA-equivalent instrument; operational resilience for the financial sector is built on the EFTA and its subordinate Regulation on Supervision of Electronic Financial Transactions plus FSC IT-outsourcing and cloud-use guidelines, supervised by the FSS. Cloud use for essential workloads moved from prior-reporting to ex-post reporting (within three months) under reforms targeted for 2023. Network-separation rules and the IT Outsourcing Regulations (risk assessment, BCP, subcontracting, data protection) frame third-party/outsourcing oversight.

Movement — CHANGED FSC ordered sector-wide bank/card-issuer security reviews (Oct 13) and moved to mandate twice-yearly vulnerability audits including crypto exchanges (Oct 16) after AI-assisted breach wave confirmed at 16 financial firms._New material operational-resilience development this cycle._

Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/south-korea/)

Standing sub-brief · as of 29 June 2026 163 words · last cycle 2026-10-18

#### Operational Resilience & Critical Infra

Korean operational resilience is built on EFTA plus the subordinate Regulation on Supervision of Electronic Financial Transactions and FSC IT-outsourcing and cloud guidelines, supervised by the FSS. Essential-work cloud use has shifted from prior reporting to ex-post reporting within three months, and firms must run significance, business-continuity, safety and cloud-service-provider assessments. There is no single DORA-equivalent and no designated critical-third-party regime; this absence is recorded as not-applicable-in-regime rather than a data gap.

The analytical significance is structural divergence: Korea has no DORA-style critical-third-party oversight, so third-party and cloud oversight run through outsourcing rules and network-separation requirements rather than a designated-CTP designation regime as in the EU and UK. The obligation applies to both bank-PSP and non-bank operators.

#### Outlook

The W3 position is stable and confirmed. No new resilience instrument is signalled this cycle. The standing divergence from EU/UK critical-third-party regimes remains the module's defining feature; any future move toward a designated-CTP framework would be the development to watch.

Periodic update · new data 2026-10-18

#### Operational Resilience & Critical Infrastructure

An AI-assisted intrusion wave against major South Korean banks, including Shinhan Bank and KB Kookmin Bank, has prompted a structural regulatory response this cycle. The Financial Services Commission ordered banks and credit-card issuers to carry out sweeping security reviews on 13 October 2026, and confirmed on 14 October 2026 that 16 financial firms had been breached since the start of the month, with roughly 100,000 records exposed. The regulatory response has moved from incident-specific remediation toward a structural change in supervisory cadence: the FSC is moving to mandate twice-yearly vulnerability checks for larger financial institutions, explicitly including crypto exchanges, following a review that found security gaps at 130 companies. This represents a tightening of operational-resilience supervision that extends beyond the bank-PSP population most directly affected by the breach wave into the non-bank crypto-exchange population as well, reflecting a regulatory judgment that the prior inspection cadence had not kept pace with AI-era offensive tooling against externally-facing banking systems.

#### Outlook

Whether the planned twice-yearly vulnerability-audit mandate is formalised into a binding instrument, and the scope of institutions ultimately captured by it, will determine whether this cycle's operational-resilience tightening becomes a durable structural feature of Korea's payments-supervision landscape or remains a cycle-specific regulatory response to the current breach wave.

**1 earlier distinct update(s)**

Periodic update · new data 2026-09-14

#### Operational Resilience & Critical Infrastructure

Bithumb's February 2026 internal-ledger mis-crediting incident is this cycle's defining operational-resilience event in Korea's payment-adjacent digital-asset infrastructure. An internal-ledger error caused a 17% bitcoin price plunge on the exchange and prompted a Financial Supervisory Service probe, exposing asset-matching and account-segregation control weaknesses at one of Korea's largest virtual-asset platforms. In direct response, the FSS committed to investigating high-risk practices — including price manipulation and deposit/withdrawal-suspension-linked trading — deploying real-time AI monitoring tools to detect suspicious trading, introducing punitive fines for IT incidents, and increasing executive accountability for security failures. For bank and non-bank payment infrastructure alike, the episode is a reminder that ledger-integrity and account-segregation controls sit at the operational core of any payment-adjacent custodial service, and that a failure at this level can propagate into market-level price effects within a single trading session. The FSS's response is explicitly framed as a supervisory reaction to a documented failure rather than a pre-existing programme, which means its eventual scope, binding force, and timeline remain to be defined.

#### Outlook

The key question for this domain going into the next cycle is whether the FSS's committed AI-monitoring and punitive IT-incident-fine framework is formalised into binding technical or prudential requirements applicable across payment-adjacent digital-asset infrastructure, or remains a Bithumb-specific supervisory response. Watch for any extension of the announced measures to other large Korean exchanges, and for whether the incident prompts a broader operational-resilience standard for asset-matching and account-segregation controls across the sector.

**Sources and findings (3)**

1. T1 [https://www.fsc.go.kr/eng/pr010101/77676 (FSC press release)](https://www.fsc.go.kr/eng/pr010101/77676 (FSC press release))
2. T3 [https://cloud.google.com/security/compliance/fsc-korea](https://cloud.google.com/security/compliance/fsc-korea) retrieved 2026-06-27
3. T3 [https://d1.awsstatic.com/fs-compliance-center/pdf-summaries/south-korea.pdf](https://d1.awsstatic.com/fs-compliance-center/pdf-summaries/south-korea.pdf) retrieved 2026-06-27

### W4 Scheme & Network Compliance Confirmed confirmed 2026-06-27

Korea's card market is structurally unusual: there is effectively no Western-style interchange and no branded domestic switching network. Merchant discount pricing is regulated by the FSC under the Specialized Credit Finance Business Act, with preferential capped rates skewed to favour small merchants (large merchants pay more). The full regulated merchant discount flows back to the issuer; processors negotiate fees bilaterally with issuers. Visa/Mastercard provide badging but not domestic switching; domestic brands include BC Card, Lotte Card and T-Money. The FSC periodically resets card processing fee rates (most recently proposed amendments released Dec 2024).

Horizon · 2025-H1 (±half_year) FSC proposed card-fee-cap amendment (SCFBA)_proposed · T3_

Standing sub-brief · as of 29 June 2026 220 words · last cycle 2026-06-27

#### Scheme & Network Compliance

The Korean card market has no Western-style interchange and no branded domestic switching network. The FSC caps merchant discount under the Specialized Credit Finance Business Act — roughly 1.5% for small merchants and roughly 2.0% for large merchants — with the full regulated discount returning to the issuer; processors negotiate fees bilaterally with issuers. Visa and Mastercard badge cards but do not switch domestically. The no-interchange, regulated-MDR model is fundamentally different from card economics elsewhere: acquirers and processors cannot rely on interchange-style revenue, and fees are administratively set. Cards account for roughly 70% of private consumption, with graduated preferential rates by merchant size.

The live development is the FSC's proposed card-fee amendment. On 24 December 2024 the FSC announced proposed amendments lowering the preferential fee-rate cap for small and medium merchants from 0.5–1.5% to 0.4–1.45% and aligning large-merchant fee-designation timing with that of SMEs. This further compresses card-issuer and processor economics for the SME merchant band and continues the FSC's repeated downward fee resets.

#### Outlook

The W4 trajectory is tightening, but the proposed amendment is correctly stated as proposed: its enactment status as of June 2026 is unverified, a gap flagged in the register. If enacted, the cut would extend the long downward administrative trajectory on merchant discount. Watch for an FSC confirmation of in-force status.

no periodic updates on record for this sub-brief

** Sources and findings (4)**

1. T3 [https://glenbrook.com/payments_views/the-south-korean-card-markets-fascinating-structure/](https://glenbrook.com/payments_views/the-south-korean-card-markets-fascinating-structure/) retrieved 2026-06-27
2. T1 [https://www.fsc.go.kr/eng/pr010101/22195 (FSC press release)](https://www.fsc.go.kr/eng/pr010101/22195 (FSC press release))
3. T3 [https://www.vixio.com/regulatory-news/pc-daily-dash-south-korea-proposes-new-credit-card-fee-structure](https://www.vixio.com/regulatory-news/pc-daily-dash-south-korea-proposes-new-credit-card-fee-structure) retrieved 2026-06-27
4. T3 [https://www.kansascityfed.org/documents/11143 (Public Authority Involvement in Payment Card Markets, Aug 2025)](https://www.kansascityfed.org/documents/11143 (Public Authority Involvement in Payment Card Markets, Aug 2025))

### W5 Payment Corridor Dynamics Confirmed confirmed 2026-06-27

Cross-border payments are governed by the Foreign Exchange Transactions Act (administered by the Ministry of Economy and Finance, with declarations to the Bank of Korea). Small-value overseas remittance is a registered business under the FETA (small-scale overseas remittance entity), supervised by the FSS. A sweeping overhaul — an Integrated Overseas Remittance Management System for real-time unified oversight of no-documentation remittances — was set to launch January 2026. Fintech MTOs (Sentbe, E9Pay, GLN/Hana) and the super-apps drive corridor flows; crypto-based and stablecoin remittance corridors (e.g. K bank's Korea–Japan Project Pax) are expanding fast, with a cross-border virtual-asset transfer framework effective December under amended FETA.

Horizon · 2026-01 (±half_year) Integrated Overseas Remittance Management System_adopted · T3_

Horizon · 2026-12 (±quarter) Amended FETA cross-border virtual-asset transfer reporting regime_in_force_pending · T3_

Standing sub-brief · as of 29 June 2026 320 words · last cycle 2026-08-06

#### Payment Corridor Dynamics

Cross-border payments are governed by the Foreign Exchange Transactions Act (FETA), administered by the Ministry of Economy and Finance with declarations to the Bank of Korea; most settlement methods are freely permitted but specific methods require declaration, and small-value overseas remittance is a registered professional FX-dealer category under FETA supervised by the FSS. FETA is the gateway statute for all corridor activity, under which fintech money-transfer operators (Sentbe, E9Pay, GLN/Hana) and super-apps operate via small-value remittance registration.

Two forward movements stand out. The Ministry announced an Integrated Overseas Remittance Management System for real-time unified oversight of no-documentation remittances, targeted for January 2026; under current FETA, individuals can remit over US$5,000 a year without documents only through a designated bank, capped at US$100,000. Abolishing the bank-designation system and allowing up to US$100,000 no-doc remittance through all financial institutions would materially open the corridor to non-bank MTOs and intensify bank competition. Separately, amendments to FETA promulgated 2 June 2026 take effect in December 2026 after a six-month grace period, requiring companies providing cross-border digital-asset transfer services to register with the Ministry and report via the BOK foreign-exchange reporting network; this brings crypto and stablecoin remittance corridors — which crypto.news reports grew 380% in three years, surpassing banks in some segments — into the FETA registration-and-reporting perimeter. As a dated corridor item, internet-only K bank completed phase one of 'Project Pax', a stablecoin-based Korea–Japan cross-border remittance proof-of-concept in September 2025 with Shinhan, Nonghyup and Japanese partners, with phase two targeting SWIFT-network interoperability and PvP settlement.

#### Outlook

The W5 trajectory is escalating. Cross-border policy is liberalising on volume while tightening on crypto. Whether the Integrated Overseas Remittance Management System actually launched in January 2026 is unverified six months after the planned date, a gap noted in the register; the FETA crypto-transfer reporting regime is due in force December 2026. The illicit-finance dimension of the FETA crypto-transfer regime is routed to FIM.

Periodic update · new data 2026-08-11

#### Payment Corridor Dynamics

The clearest corridor-specific development this cycle is the Kbank, HashKey Group and BPMG memorandum of understanding, signed 21 July 2026, to build won-stablecoin payment rails explicitly targeting a Korea-Hong Kong remittance corridor. This is an emerging-corridor infrastructure play rather than a completed launch: the parties have not disclosed transaction amounts or a launch date, and the initiative proceeds ahead of the enabling Digital Asset Basic Act that the Financial Services Commission is targeting for September 2026 reintroduction. Separately, the FSS-Customs Service crypto-FX monitoring agreement with nine major credit-card companies, signed 17 March 2026, is corridor-relevant in the opposite direction: it targets illegal cross-border crypto-FX flows linked to voice phishing and concealed remittances rather than facilitating legitimate corridor volume.

#### Outlook

The Korea-Hong Kong corridor build is the item to track for legitimate corridor development; its commercial progress is contingent on the Framework Act's legislative timeline holding. The illegal-FX enforcement side of the corridor picture, evidenced by the KRW7.2 trillion H1-2026 Customs sweep, indicates continuing regulatory attention on informal cross-border crypto-FX channels regardless of the legitimate corridor's progress.

**Sources and findings (5)**

1. T1 [https://www.bok.or.kr/eng/main/contents.do?menuNo=400191 (Bank of Korea)](https://www.bok.or.kr/eng/main/contents.do?menuNo=400191 (Bank of Korea))
2. T3 [https://www.koreatimes.co.kr/business/banking-finance/20251210 (Korea Times)](https://www.koreatimes.co.kr/business/banking-finance/20251210 (Korea Times))
3. T1 [https://elaw.klri.re.kr/eng_mobile/viewer.do?hseq=64673 (Foreign Exchange Transactions Regulations)](https://elaw.klri.re.kr/eng_mobile/viewer.do?hseq=64673 (Foreign Exchange Transactions Regulations))
4. T3 [https://crypto.news/south-korea-crypto-remittances-jump-380-in-three-years-surpassing-banks/](https://crypto.news/south-korea-crypto-remittances-jump-380-in-three-years-surpassing-banks/) retrieved 2026-06-27
5. T3 [https://www.koreaherald.com/article/10576789 (Korea Herald)](https://www.koreaherald.com/article/10576789 (Korea Herald))

### W6 Industry Structure & Commercial Probable confirmed 2026-06-27

The market is dominated by homegrown super-apps (Kakao Pay, Naver Pay, Toss/Viva Republica) and Samsung Pay, alongside three licensed internet-only banks (KakaoBank, K Bank, Toss Bank) and a heavily regulated card-issuer ecosystem. NICE Payments anchors VAN throughput. Open banking covers roughly 58% of adults (~30 million users), but card usage still dominates account-to-account transfers. Strategy is tilting toward vertical integration and tokenisation (Naver–Dunamu stablecoin plan, Kakao deposit-token project). The FSC is weighing a fourth internet-only bank.

Standing sub-brief · as of 29 June 2026 170 words · last cycle 2026-10-06

#### Industry Structure & Commercial

Korea's payments landscape is dominated by homegrown super-apps — Kakao Pay, Naver Pay and Toss/Viva Republica — alongside Samsung Pay, and by three licensed internet-only banks: KakaoBank, K Bank and Toss Bank. NICE Payments anchors VAN throughput at roughly 1.16m merchants as of December 2024, and open banking covers roughly 58% of adults, about 30m users. The FSC is weighing a fourth internet-only bank. Super-app concentration and internet-only-bank profitability define the competitive landscape, with strategy tilting toward vertical integration and tokenisation. Open banking is governed by the Special Act on Financial Innovation Support of 2019.

This structural picture is the backdrop against which the specific commercial events tracked in W13 — the Naver–Dunamu merger, bank stakes in exchanges and won-stablecoin commitments — unfold.

#### Outlook

The W6 trajectory is consolidating, at Assessed confidence on vendor sourcing. Vertical integration and tokenisation are the directional themes; the prospective fourth internet-only bank licence is the structural decision to watch. Specific announced deals are carried as W13 events rather than here.

Periodic update · new data 2026-10-06

#### Industry Structure & Commercial Dynamics

The proposed share-exchange merger between Naver Financial and Dunamu has been delayed again. A 6 July 2026 report states that the companies' shareholder meetings were moved from 18 August to 19 November 2026, and the share-exchange date itself was re-targeted from 30 September to 31 December 2026.

This development is carried on a single Korean business-press source; no Financial Services Commission notice, Korea Fair Trade Commission filing, or corporate disclosure (DART) has been located to corroborate the re-timing. It is treated here as a press-reported data point on the transaction's progress rather than a regulator-confirmed milestone, and the underlying commercial rationale for the repeated delays is not established by the available sourcing.

The re-timing is nonetheless material to Korea's payments and fintech industry structure, given the scale of the two parties: a Naver Financial/Dunamu combination would bring together a major payments and financial-services platform with Korea's largest cryptocurrency exchange operator under one corporate structure, with implications for how payment rails and digital-asset trading infrastructure are commercially organised in Korea going forward.

#### Outlook

The newly stated 19 November 2026 shareholder-meeting date and 31 December 2026 share-exchange date are the next milestones to watch for this transaction. Given that this is already the second reported delay and remains uncorroborated by a primary regulatory or corporate filing, confirmation through an FSC notice, KFTC filing, or DART disclosure would materially upgrade the reliability of the transaction timeline.

**2 earlier distinct update(s)**

Periodic update · new data 2026-10-04

#### Industry Structure & Commercial Dynamics

KG Inicis holds approximately 40 percent of South Korea's payment-gateway market, serving approximately 190,000 merchants. Domestic Korean-card acceptance structurally requires a licensed Korean PG rather than a foreign acquirer, meaning foreign payment providers cannot bypass the domestic PG layer to directly acquire Korean-card transactions. This concentration and structural requirement together describe a market where a small number of licensed domestic PG providers, with KG Inicis as the clear leader, intermediate the large majority of domestic card-acceptance flow.

Separately, Kakao Pay Securities obtained an investment-trading business licence in July 2026 and announced a partnership with Dinari to explore tokenized Korean stocks, while the FSC published a token-securities policy roadmap establishing a phased framework under an Electronic Securities Act amendment taking effect 4 February 2027. Together, these developments describe an industry structure in which the traditional PG-concentration dynamic coexists with an emerging, FSC-sponsored push into tokenized-securities infrastructure, with at least one licensed fintech entity, Kakao Pay Securities, positioning early.

The KG Inicis market-share figure is sourced from a single T4 trade publication with no T1 or T2 corroboration retrieved this cycle, which should be weighted accordingly when assessing the precision of the 40 percent figure.

#### Outlook

Whether the token-securities framework, once its subordinate regulations are published in late September 2026, draws further licensed entities beyond Kakao Pay Securities into early positioning is the item to track. Separately, whether the EFTA fund-safeguarding tightening alters the competitive dynamics between KG Inicis and smaller PG providers, given that proportional capital requirements could weigh more heavily on smaller players relative to the market leader, remains to be seen.

Periodic update · new data 2026-09-14

#### Industry Structure & Commercial Dynamics

The 2026 Commercial Act amendments, promulgated 6 March 2026, introduce mandatory treasury-share cancellation and a 3% voting cap for audit-committee elections, and are described as the most significant governance overhaul since the post-Asian-financial-crisis reforms of 1998-1999. The changes apply across both bank and non-bank issuers, meaning listed payment and fintech companies — regardless of whether they sit within the banking perimeter or operate as non-bank payment institutions or e-money issuers — face the same new governance constraints on treasury-share management and audit-committee voting structure. For foreign investors in Korean payment and fintech issuers, the 3% voting cap for audit-committee elections is a structural change to voting mechanics that alters the practical influence a single large shareholder can exercise over audit-committee composition, an effect that applies uniformly across the industry rather than targeting the payments sector specifically. This is a structural, statute-level development rather than an incident-driven one, and it lands on corporate-governance mechanics rather than on payments licensing or conduct requirements directly.

#### Outlook

Watch how listed payment and fintech issuers adapt their treasury-share and audit-committee-election practices ahead of the amendments taking practical effect, and whether foreign institutional investors in Korean payment-sector issuers adjust voting strategies in response to the new 3% cap. No payments-specific implementing guidance was identified this cycle beyond the general corporate-governance amendment itself.

**Sources and findings (4)**

1. T3 [https://www.mordorintelligence.com/industry-reports/south-korea-payments-market](https://www.mordorintelligence.com/industry-reports/south-korea-payments-market) retrieved 2026-06-27
2. T3 [https://paymentscmi.com/insights/south-korea-2025-payments-ecommerce-trends/](https://paymentscmi.com/insights/south-korea-2025-payments-ecommerce-trends/) retrieved 2026-06-27
3. T3 [https://www.mordorintelligence.com/industry-reports/south-korea-mobile-payment-market](https://www.mordorintelligence.com/industry-reports/south-korea-mobile-payment-market) retrieved 2026-06-27
4. T3 [https://www.kenresearch.com/south-korea-digital-banking-and-open-finance-market](https://www.kenresearch.com/south-korea-digital-banking-and-open-finance-market) retrieved 2026-06-27

### W7 Legal & Litigation limited signal Probable confirmed 2026-06-27

The most consequential payments-adjacent litigation/enforcement is the FIU's 'first-in, first-out' AML/KYC enforcement campaign against the five won-market crypto exchanges. Dunamu (Upbit) received a KRW 35.2bn (~US$25m) fine, a three-month new-customer suspension and a CEO warning in 2025; Dunamu filed a formal objection (automatically suspending the penalty) and is litigating in Seoul, citing the overturned Hanbitco precedent. Korbit drew a smaller KRW 2.73bn penalty; a judge overturned a Bithumb suspension in May 2026. These cases set precedent for VASP supervision and bear directly on the Naver–Dunamu merger.

Standing sub-brief · as of 29 June 2026 258 words · last cycle 2026-08-21

#### Legal & Litigation

The FIU's 'first-in, first-out' inspection campaign is the litigation spine this cycle. Dunamu (Upbit) was fined KRW 35.2bn (about US$25m) with a three-month new-customer suspension and a CEO warning in 2025; Korbit was fined KRW 2.73bn; and inspections ran from Dunamu through Korbit, GOPAX, Bithumb and Coinone. The campaign sets a VASP-supervision precedent bearing on the Naver–Dunamu merger, making AML/KYC liability a live deal-risk factor.

The litigation posture has shifted toward the exchanges. Dunamu filed a formal objection in Seoul against the FIU fine — alleging violations of the Act on Reporting and Using Specified Financial Transaction Information — which under Korean administrative law automatically suspends enforcement of the KRW 35.2bn penalty pending precedent-setting court review; the suspension defers the deal-risk overhang on the merger. A local judge then overturned Bithumb's six-month suspension in May 2026, part of regulators' increased crypto oversight alongside Dunamu's partial suspension and Korbit's penalty, consistent with the Hanbitco precedent where a Seoul court struck an FIU KYC fine on the basis that the violations did not lead to money laundering. Court losses for the FIU weaken the deterrent value of suspension penalties and bolster exchanges' litigation posture across the campaign.

#### Outlook

The W7 trajectory is escalating, held at Assessed confidence. The timing of Dunamu's objection — filed in late 2025 or early 2026, with the penalty paused as of February 2026 — should be specified for complete litigation context, a gap noted in the register. The underlying AML/KYC substance is routed to FIM; WPM carries the payments and M&A-precedent angle.

Periodic update · new data 2026-09-14

#### Legal & Litigation

A Korean court overturned a six-month partial business suspension imposed on Bithumb; the status of an associated $24.6 million fine remains unclear following the ruling. This is a short, dated litigation entry rather than a standalone explainer, consistent with the item's dashboard content tier.

#### Outlook

Watch for clarification of the $24.6 million fine's status and whether Korean authorities appeal or otherwise respond to the suspension reversal.

**Sources and findings (4)**

1. T3 [https://www.coindesk.com/policy/2025/11/25/upbit-considering-appeal-of-usd25m-fine-by-south-korea-regulator](https://www.coindesk.com/policy/2025/11/25/upbit-considering-appeal-of-usd25m-fine-by-south-korea-regulator) retrieved 2026-06-27
2. T3 [https://cryptorank.io/news/feed/055dc-dunamu-fiu-fine-legal-challenge](https://cryptorank.io/news/feed/055dc-dunamu-fiu-fine-legal-challenge) retrieved 2026-06-27
3. T3 [https://www.coindesk.com/policy/2026/05/01/bithumb-scores-a-legal-win-in-south-korea-as-six-month-suspension-is-lifted-by-local-judge](https://www.coindesk.com/policy/2026/05/01/bithumb-scores-a-legal-win-in-south-korea-as-six-month-suspension-is-lifted-by-local-judge) retrieved 2026-06-27
4. T3 [https://www.mexc.com/news/190688](https://www.mexc.com/news/190688) retrieved 2026-06-27

### W8 Merchant Acquiring & Risk limited signal Confirmed confirmed 2026-06-27

Acquiring/merchant onboarding is shaped by the unique no-interchange structure: ~13 card processors enroll merchants for card acceptance via bilateral connections to issuers, with the FSC-regulated merchant discount flowing back to issuers. Payment-fee transparency was institutionalised through an FSS disclosure regime covering 18 e-finance firms; weighted-average fees averaged ~1.98% for card and ~1.74% for prepaid (Sep 2025–Feb 2026), with prepaid operators retaining a far higher share than card. Small/midsize merchants pay lower regulated rates than general merchants.

Standing sub-brief · as of 29 June 2026 161 words · last cycle 2026-10-04

#### Merchant Acquiring & Risk

The institutionalised fee-disclosure regime is the live W8 development. Per the FSS payment-fee disclosure report released 28 February 2026, weighted-average fees for 18 covered e-finance firms were 1.98% for card and 1.74% for prepaid; the operator-retained share averaged 80.6% for prepaid versus 10.6% for card; and fees were lower for small and midsize merchants. Prepaid fees varied by model: delivery-platform 3.00%, shopping-mall 2.38%, dual-business PG 1.63% and dedicated PG 0.30%. Roughly 13 card processors enrol merchants bilaterally, and there is no branded domestic network.

The analytical point is that institutionalised fee transparency exposes the wide prepaid-versus-card margin gap — prepaid operators retain roughly 80% of fees against roughly 10% for card — directly relevant to acquirer and PG economics.

#### Outlook

The W8 position is stable and confirmed on the disclosure data. The fee-disclosure regime is now a recurring transparency surface; the prepaid-versus-card retention gap is the structural feature to track, alongside the card-fee-cap movement carried in W4.

Periodic update · new data 2026-10-04

#### Merchant Acquiring & Risk

KG Inicis partnered with Crypto.com in March 2026 to allow tourist payments via Crypto.com Pay through its existing payment-gateway infrastructure. This represents an emerging crypto-acceptance vector layered onto Korea's traditional card and PG acquiring stack, rather than a replacement for it: the partnership extends KG Inicis's existing merchant-acquiring infrastructure to accept a stablecoin-linked payment method specifically for inbound tourist transactions, a segment where traditional Korean-card rails are less relevant to the payer.

This is a merchant-acquiring-side development distinct from the EFTA fund-safeguarding change tracked under conduct and safeguarding: the Crypto.com partnership is about expanding accepted payment instruments at the point of sale, while the EFTA amendment governs how PG providers manage settlement funds once collected, regardless of instrument. The claim underlying this development rests on a single T4 source with no further corroboration retrieved this cycle.

#### Outlook

Whether this tourist-focused crypto-acceptance partnership expands beyond KG Inicis to other Korean PG providers, or beyond the tourist segment to domestic transactions, is the item to track. Its current scope, tourist payments specifically through Crypto.com Pay, is narrow relative to KG Inicis's overall acquiring volume.

**1 earlier distinct update(s)**

Periodic update · new data 2026-08-11

#### Merchant Acquiring & Risk

Merchant-acquiring risk escalated sharply this cycle through a coordinated FSS enforcement action against six payment-gateway and electronic-payment firms, referred to prosecutors for enabling illegal casino operations, voice-phishing networks and narcotics-related flows, with penalties potentially reaching thirty years' imprisonment. Detection ran through Korea's statutory monthly transaction-data reporting regime and its virtual-account monitoring system, evidencing that existing supervisory infrastructure, not solely new powers, surfaced this enforcement wave. The specific conduct alleged varies by firm: one firm is described as having become a key financial enabler for voice-phishing scams and illicit betting disguised as e-commerce activity, while another's leadership is accused of fabricating credit-card sales data through shell companies to secure fraudulent loans. In response, the FSS has committed to more frequent on-site inspections, tighter data-analytics monitoring, and closer coordination with law enforcement specifically for payment-gateway providers, signalling a durable increase in supervisory intensity for the non-bank PI/EMI segment of the acquiring market rather than a one-off enforcement sweep.

#### Outlook

The FSS's stated commitment to more frequent inspections and tighter monitoring is the item to track for whether this enforcement wave translates into a standing supervisory posture change for payment-gateway providers, or recedes once the current prosecutions conclude.

**Sources and findings (3)**

1. T2 [https://www.ajupress.com/view/20260428173570938 (AJU Press, citing FSS)](https://www.ajupress.com/view/20260428173570938 (AJU Press, citing FSS))
2. T3 [https://glenbrook.com/payments_views/the-south-korean-card-markets-fascinating-structure/](https://glenbrook.com/payments_views/the-south-korean-card-markets-fascinating-structure/) retrieved 2026-06-27
3. T2 [https://www.ajupress.com/view/20260428173570938 (AJU Press, citing FSS)](https://www.ajupress.com/view/20260428173570938 (AJU Press, citing FSS))

### W9 Product Innovation & Market Development Probable confirmed 2026-06-27

Korea is a mature, mobile-first market with strong public-sector innovation infrastructure: an FSC regulatory sandbox under the Special Act on Financial Innovation Support, open banking and a unified national QR-code standard. The BOK has run a CBDC research programme since 2021, announced a CBDC Use-Case Test (Nov 2023) and conducted pilot operations including deposit-token e-wallets between April and June 2025. Private tokenisation (won-stablecoin builds by Naver and Kakao) is now eclipsing the sovereign-CBDC track in commercial momentum; a KRW 500bn Fintech Innovation Fund (2024–2027) is crowding in private investment.

Standing sub-brief · as of 29 June 2026 170 words · last cycle 2026-10-04

#### Product Innovation & Market Development

The Bank of Korea has researched a CBDC since 2021, announced a 'CBDC Use-Case Test' in November 2023 with the FSC and FSS, and conducted pilot operations between April and June 2025, including opening deposit-token e-wallets and executing real transactions. The directional finding is that private won-stablecoin builds by Naver and Kakao now eclipse the sovereign-CBDC track in commercial momentum: the sovereign deposit-token track is being out-paced by private won-stablecoin investment, shifting the centre of gravity in digital-money product development. Supporting innovation infrastructure includes a unified national QR-code standard, with final specification in January 2025, and a KRW 500bn Fintech Innovation Fund running 2024–2027.

#### Outlook

The W9 trajectory is stable, at Assessed confidence. The thematic shift to watch is whether sovereign deposit-token work converges with or is displaced by the private won-stablecoin track; the specific private commitments behind that shift (Naver's KRW 10tn earmark, Kakao's deposit-token project) are carried as commercial events in W13, and the regulatory framework that would govern issuance sits in W2.

Periodic update · new data 2026-10-04

#### Product Innovation & Market Development

The Financial Services Commission published a token-securities policy roadmap at the third Public-Private Joint Token Securities Consultative Body meeting, establishing a phased framework under an Electronic Securities Act amendment that takes effect 4 February 2027. The FSC plans to publish proposed subordinate-regulation amendments to the Capital Markets Act and Electronic Securities Act by late September 2026, meaning the detailed operative rules underpinning the phased framework are still to come even though the framework's effective date and overall structure have been announced.

This is a regulatory product-access development, distinct from any single commercial deal: it describes a structural change in what kinds of token-based securities products can exist under Korean law and under what phased timeline, rather than any particular firm's product launch. The roadmap was announced through a formal public-private consultative mechanism, indicating a degree of industry input into the framework's design ahead of the subordinate-regulation publication.

#### Outlook

Late September 2026, the FSC's planned publication date for proposed subordinate-regulation amendments, is the next concrete milestone. The detail of those proposed amendments will determine how the phased framework translates into an operative licensing and product-approval pathway ahead of the 4 February 2027 effective date.

**2 earlier distinct update(s)**

Periodic update · new data 2026-09-28

#### Product Innovation & Market Development

Korea's mobile-wallet and super-app payment ecosystem continues to scale. Combined prepaid balances held across KakaoPay, Toss and Naver Pay exceeded KRW980 billion (approximately US$670 million) by June 2026, reported at Probable confidence. This figure sits below the module's source floor -- only two sources were located, one of which is Tier 4 -- so it should be read as directionally indicative of continued growth in aggregated prepaid balances rather than a precisely verified market figure. The underlying My Data initiative is understood to underpin aggregator-style products offered by these super-app platforms, though the specific mechanics of that support were not independently verified this cycle.

#### Outlook

The reported prepaid-balance figure would benefit from additional Tier 1 or Tier 2 sourcing in a future cycle to move this finding above the module source floor. If the trend of growing super-app prepaid balances continues, it is a relevant data point for assessing the scale of unsettled funds now subject to the EFTA amendment's new external-segregation requirement described under W1a.

Periodic update · new data 2026-08-11

#### Product Innovation & Market Development

Korea's digital-asset legislative track accelerated materially this cycle. The ruling Democratic Party and the Financial Services Commission agreed on 20 July 2026 to move the Framework Act on Digital Assets to twice-monthly subcommittee review, targeting a September 2026 reintroduction, and on 29 July 2026 the FSC confirmed its intent to merge ten separately pending crypto and stablecoin bills into one government-backed Digital Asset Basic Act, spanning industry-structure, market-conduct and user-protection pillars. This is a legislative-consolidation story distinct from the commercial stablecoin build covered elsewhere: it is the regulatory-product-access theme that will determine what a consolidated licensing and market-conduct regime for digital-asset businesses looks like once enacted.

#### Outlook

September 2026 remains the key legislative marker. Whether the reintroduced bill text matches the strengthened-AML framing currently described only at the policy-commitment level will determine how substantial the consolidation proves once it reaches statute.

**Sources and findings (4)**

1. T3 [https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/south-korea](https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/south-korea) retrieved 2026-06-27
2. T3 [https://www.mordorintelligence.com/industry-reports/south-korea-mobile-payment-market](https://www.mordorintelligence.com/industry-reports/south-korea-mobile-payment-market) retrieved 2026-06-27
3. T3 [https://www.mordorintelligence.com/industry-reports/south-korea-real-time-payments-market](https://www.mordorintelligence.com/industry-reports/south-korea-real-time-payments-market) retrieved 2026-06-27
4. T3 [https://www.futuremarketinsights.com/reports/banking-as-a-service-platform-industry-analysis-in-korea](https://www.futuremarketinsights.com/reports/banking-as-a-service-platform-industry-analysis-in-korea) retrieved 2026-06-27

### W10 Consumer Protection & APP Fraud Confirmed confirmed 2026-06-27

Korea's APP-fraud (voice phishing / vishing) regime currently rests on the Telecommunications Fraud Refund Act (Special Act on the Prevention of Loss Caused by Telecommunications-based Financial Fraud, 2011), enforced by the FSS via account-freeze and 'extinguishment of claims' reimbursement from frozen funds. Voluntary bank compensation has been low (~10% of reported cases in 2025). A major reform is in train: a proposed amendment would impose partial/full no-fault reimbursement on financial firms (victim's and criminal's institutions each covering half, per-case caps of KRW 10–50m), with carve-outs for victim intent/gross negligence — a significant shift from the negligence-based standard. Losses were projected to top KRW 1 trillion in 2025.

Horizon · 2026-H2 (±year) No-fault voice-phishing reimbursement amendment_proposed · T3_

Standing sub-brief · as of 29 June 2026 232 words · last cycle 2026-06-27

#### Consumer Protection & APP Fraud

Korea's APP-fraud (voice-phishing) regime rests on the 2011 Telecommunications Fraud Refund Act, enforced by the FSS via account-freeze and 'extinguishment of claims' reimbursement from frozen funds, with institutions liable where they failed identity-verification duties. Voluntary bank compensation is low — about 10% of reported cases in 2025, 18 of 92 reviewed — and losses were projected to top KRW 1tn in 2025. The current negligence-based standard yields very low reimbursement, which is the gap the proposed reform targets.

The live reform is the no-fault amendment. Proposed amendments to the Telecommunications Fraud Victim Refund Act would require the financial companies used by both victim and criminal to each cover half of voice-phishing damages, with per-case caps of KRW 10m–50m and liability waived for victim intent or gross negligence — a shift from the negligence-based standard, estimated to cost up to roughly KRW 280bn a year. This moves toward shared no-fault reimbursement, analogous in spirit to the UK PSR APP-fraud split-liability model, and materially raises financial-firm liability exposure. The FSS is also reviewing guidance to expand the fraudulent-card-use definition under the SCFBA to cover phishing/smishing-induced cardholder losses.

#### Outlook

The W10 trajectory is escalating. The no-fault shift is the defining forward change; its passage and the final cost-allocation mechanics are the items to watch. The reform falls on bank-PSP institutions, raising their liability exposure relative to the current negligence-based standard.

no periodic updates on record for this sub-brief

** Sources and findings (4)**

1. T3 [https://seoullawgroup.com/voice-phishing-korea/](https://seoullawgroup.com/voice-phishing-korea/) retrieved 2026-06-27
2. T2 [https://www.koreaherald.com/article/10591129 (Korea Herald, citing FSS)](https://www.koreaherald.com/article/10591129 (Korea Herald, citing FSS))
3. T3 [https://en.sedaily.com/finance/2026/04/01/no-fault-voice-phishing-liability-could-cost-financial](https://en.sedaily.com/finance/2026/04/01/no-fault-voice-phishing-liability-could-cost-financial) retrieved 2026-06-27
4. T3 [https://fintech.global/2025/12/11/korea-to-expand-cardholder-payback-for-phishing-losses/](https://fintech.global/2025/12/11/korea-to-expand-cardholder-payback-for-phishing-losses/) retrieved 2026-06-27

### W11 AML/CFT & Financial Crime (Sentinel.gi-fed) [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/south-korea/#sec-dom-D7) Confirmed confirmed 2026-06-27

[Sentinel-fed payments-context position] Korea's AML/CFT framework rests on the Financial Transaction Reports Act (FTRA / Act on Reporting and Using Specified Financial Transaction Information), the Proceeds of Crime Act and the terrorism/proliferation financing prohibition act, administered by KoFIU. VASPs must register with KoFIU (ISMS certification + real-name bank accounts) and apply the crypto travel rule on transfers over KRW 1 million. A KoFIU taskforce (kicked off Dec 2025) is overhauling the framework ahead of the 2028 FATF mutual evaluation — extending the travel rule below KRW 1m, planning UBO transparency, AML rules for lawyers/accountants, and AML-equivalent obligations for stablecoin issuers.

Horizon · 2027 (±multi_year) KoFIU FTRA AML reform package (2028 FATF MEV prep)_proposed · T2_

Horizon · 2027 (±multi_year) KoFIU FTRA AML reform package (2028 FATF MEV prep)_proposed · T2_

Standing sub-brief · as of 29 June 2026 232 words · last cycle 2026-06-27

#### AML/CFT & Financial Crime (Sentinel-fed)

This module is sourced from the Sentinel.gi feed; the intelligence is attributed to Sentinel and the original illicit-finance analysis is routed to FIM. Per Sentinel, Korea's AML/CFT framework rests on the Financial Transaction Reports Act (the Act on Reporting and Using Specified Financial Transaction Information), the Proceeds of Crime Act and the terrorism/proliferation-financing prohibition act, administered by KoFIU; the FTRA establishes KoFIU and mandates customer due diligence, suspicious-transaction reports and currency-transaction reports. VASPs must register with KoFIU — with ISMS certification and real-name bank accounts — and apply the crypto travel rule on transfers over KRW 1m. VASP registration and travel-rule obligations are the binding financial-crime perimeter for Korean digital-money operators.

Per Sentinel, KoFIU launched a taskforce on 29 December 2025 to revamp the FTRA ahead of the 2028 FATF mutual evaluation: extending the travel rule below KRW 1m, building a UBO database, requiring a designated senior AML executive, adding AML rules for attorneys, CPAs and tax accountants, and subjecting stablecoin issuers to AML obligations equivalent to traditional institutions. This forward expansion materially raises the compliance load for VASPs and any future won-stablecoin issuer.

#### Outlook

The W11 trajectory is escalating and Sentinel-confirmed. The 2028 FATF mutual evaluation is the anchoring tracker item, with the sub-KRW1m travel rule and stablecoin-issuer AML equivalence the substantive changes ahead. WPM carries the finding only; detailed illicit-finance analysis is routed to FIM.

no periodic updates on record for this sub-brief

** Sources and findings (7)**

1. T3 sentinel.gi://notabene.id/world/south-korea (Travel Rule Korea)
2. T? FIM (sentinel.gi) per-JID baseline profile — South Korea (Republic of Korea) — AML/CFT governed by the Act on Reporting and Use of Certain Financial Transaction Information (amended 2021 to cover VASPs) and the 2023 Virtual Asset User Protection Act, with KoFIU as FIU and FSC/FSS as prudential and VASP supervisors. A won-backed stablecoin framework (Digital Asset Basic Act) is stalled amid FSC-Bank of Korea disagreement over bank-only vs. tech-firm issuance, leaving a regulatory gap in a market larger than domestic equities trading.
3. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness
4. T2 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-002) — Sanctions: OFAC listing
5. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-004) — Enforcement: Financial Services Commission (FSC) — Bithumb
6. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: regulatory-failure
7. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: legal-gap

### W12 Correspondent Banking, Settlement & Access Confirmed confirmed 2026-06-27

Settlement and FX-bank access run through the Bank of Korea's foreign-exchange reporting network and designated foreign-exchange banks under the FETA; the BOK is the settlement/lender-of-last-resort backbone and issuer of currency. Cross-border correspondent flows are dominated by the five major commercial banks (~KRW 1,590tn / US$1.108tn in 2025). Banks are actively building blockchain/stablecoin settlement alternatives (NH Nonghyup/Hana on Partior; K bank Project Pax with SWIFT-interop goals; Woori–MoonPay), signalling correspondent-rail modernisation. Crypto-exchange remittance volumes (KRW 163.55tn in 2025) now rival bank corridors in some segments.

Standing sub-brief · as of 29 June 2026 199 words · last cycle 2026-08-06

#### Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank versus non-bank access asymmetry. Settlement and cross-border access run through designated foreign-exchange banks and the BOK under the FETA declaration system; the BOK is the settlement and lender-of-last-resort backbone and the currency issuer. That designated-FX-bank gateway gives bank-PSPs privileged access to the settlement core, while non-bank operators reach corridors through registration under FETA's small-value remittance category rather than direct settlement membership.

The asymmetry is narrowing on the corridor side. Overseas transfers via the five major commercial banks reached roughly US$1.108tn (about KRW 1,590tn) in 2025, while remittances via the five largest won-denominated crypto exchanges rose to KRW 163.55tn (about US$125.8bn). Crypto-exchange remittance volumes now rival bank corridors in some segments, pressuring traditional correspondent-banking economics. Bank-led modernisation is also under way: NH Nonghyup and Hana piloted Partior cross-border ledger settlements in December 2025, compressing settlement from days to minutes.

#### Outlook

The W12 trajectory is modernising and confirmed on BOK primary data. The structural question is whether bank-led blockchain and stablecoin pilots (Partior, Project Pax) preserve the banks' settlement-core advantage as crypto-exchange corridor volumes grow. The corridor-side erosion of the bank/non-bank asymmetry is the development to track.

Periodic update · new data 2026-08-11

#### Correspondent Banking, Settlement & Access

This cycle's W12 signal is structural: a widening asymmetry in cross-border settlement access and monitoring between bank-channel and non-bank crypto-FX channels. The FSS and Korea Customs Service signed a coordination agreement on 17 March 2026 with nine major credit-card companies specifically to track and block illegal cross-border crypto-FX flows tied to voice phishing and concealed remittances, extending bank-card-network monitoring into a settlement space historically harder to supervise. A first-half-2026 Customs Service sweep found more than KRW7.2 trillion in illegal foreign-exchange transactions across roughly fifty suspected firms, including crypto-payment and gambling-fund transfer schemes, a scale finding that frames the access-asymmetry problem: informal or crypto-mediated settlement channels have been operating at a volume large enough to require a dedicated card-network-level monitoring agreement to address.

#### Outlook

Whether the FSS-Customs monitoring agreement measurably reduces the scale of illegal cross-border FX flows in the next reporting period, relative to the KRW7.2 trillion H1-2026 baseline, is the clearest quantitative marker to track for this module.

**Sources and findings (4)**

1. T1 [https://www.bok.or.kr/eng/main/contents.do?menuNo=400191 (Bank of Korea)](https://www.bok.or.kr/eng/main/contents.do?menuNo=400191 (Bank of Korea))
2. T3 [https://crypto.news/south-korea-crypto-remittances-jump-380-in-three-years-surpassing-banks/](https://crypto.news/south-korea-crypto-remittances-jump-380-in-three-years-surpassing-banks/) retrieved 2026-06-27
3. T3 [https://www.mordorintelligence.com/industry-reports/south-korea-payments-market](https://www.mordorintelligence.com/industry-reports/south-korea-payments-market) retrieved 2026-06-27
4. T3 [https://www.coindesk.com/business/2026/05/15/hana-bank-to-acquire-usd670-million-stake-in-upbit-operator-dunamu](https://www.coindesk.com/business/2026/05/15/hana-bank-to-acquire-usd670-million-stake-in-upbit-operator-dunamu) retrieved 2026-06-27

### W13 Commercial Intelligence (M&A, Investment & Product) limited signal Probable confirmed 2026-06-27

Trailing-12-month commercial intelligence is dominated by Naver Financial's all-stock acquisition of Dunamu (Upbit operator), valued at ~US$10.3bn, announced November 2025, with the merger delayed to a ~Sept 2026 close pending Korea FTC antitrust review and shareholder-stake-cap legislation. Banks are racing to take stakes in exchanges (Hana Bank's ~US$670m 6.55% Dunamu stake; Woori–MoonPay; securities-firm bids). Kakao Pay's ~KRW 500bn bid for SSG Pay/Smile Pay failed (July 2025). Naver earmarked ~KRW 10tn over five years for a won-pegged stablecoin platform.

Standing sub-brief · as of 29 June 2026 304 words · last cycle 2026-10-12

#### Commercial Intelligence (M&A, Investment & Product)

The lead event is the Naver Financial–Dunamu merger. Naver Financial confirmed an all-stock merger with Dunamu (the Upbit operator) on 26 November 2025 valued at roughly US$10.3bn, issuing about 87.56m new shares (roughly KRW 15.13tn) at 2.5422618 Naver Financial shares per Dunamu share to integrate Dunamu as a wholly-owned subsidiary; the deal status is pending regulatory approval, subject to Korea FTC antitrust review and shareholder-stake-cap legislation. The deal value is publicly disclosed. It vertically integrates the largest won-market crypto exchange into a super-app with won-stablecoin ambitions. The merger was subsequently delayed about three months — the shareholder meeting moved from 22 May to 18 August and closing from 30 June to 30 September 2026 — amid the FTC antitrust review and proposed legislation capping major shareholders' stakes in crypto exchanges.

Two investment events accompany the merger. Hana Bank agreed on 15 May 2026 to buy a 6.55% stake in Dunamu for roughly KRW 1tn (about US$670m), closing 15 June, becoming its fourth-largest shareholder, with plans to jointly develop won-pegged stablecoins, blockchain remittances and tokenised securities; this announced strategic investment signals bank-fintech convergence ahead of any won-stablecoin framework. Separately, following its Dunamu acquisition Naver earmarked roughly KRW 10tn over five years to build a won-pegged stablecoin platform, while Kakao announced a parallel retail-deposit-token project; the won amount is disclosed but the USD figure is not publicly disclosed. Woori Bank also announced an April 2026 MoonPay partnership for stablecoin technology.

#### Outlook

The W13 trajectory is active. The Naver–Dunamu close, now targeted at roughly 30 September 2026, is the pivotal event; completion is conditioned by FTC antitrust review, stake-cap legislation and the live FIU AML-enforcement precedent overhanging Dunamu (carried in W7). Bank stakes in exchanges and the KRW 10tn private stablecoin commitment pre-position for the pending DABA framework tracked in W2.

Periodic update · new data 2026-10-12

#### Commercial Intelligence & Fintech

BTQ Technologies was named security partner for MoonPay Korea's won-denominated stablecoin infrastructure, with the partnership covering post-quantum cryptography across issuance, distribution, self-custody wallets, settlement and merchant delivery. The announcement is dated 9 October 2026. Woori Bank is named as the inaugural member of MoonPay Korea's KRW Stablecoin Consortium. The deal value is not publicly disclosed. This is a discrete, dated commercial event rather than a structural market-wide trend: it names specific parties, a specific announcement date, and a specific technical scope, which places it squarely within commercial-intelligence coverage rather than the structural industry-analysis lens applied elsewhere.

Confidence in this finding is Probable. The sourcing is a single Tier-3 outlet (Basis Desk, citing a press release distributed via PR Newswire), and no corroborating primary announcement from BTQ Technologies, MoonPay, or Woori Bank directly was retrieved this cycle. The commercial-event record captures the parties (BTQ Technologies as partner; MoonPay Korea as partner, domiciled in Korea; Woori Bank as partner, domiciled in Korea), the event type (partnership), and its status (announced).

This event is read alongside a broader pattern noted in the interpreter's domain tracker: Korea's bank-led stablecoin infrastructure build-out is diversifying across multiple vendor and consortium tracks, including an eight-bank consortium separate from the MoonPay Korea/Woori Bank/BTQ grouping. This diversification signals competitive positioning by multiple institutional tracks ahead of any formal stablecoin authorisation regime, rather than coordination around a single infrastructure standard.

#### Outlook

Further consortium or partnership announcements in the Korean stablecoin space are plausible given the current absence of a settled authorisation framework and the apparent competitive motivation driving multiple parallel tracks. Confirmation of the BTQ Technologies/MoonPay Korea/Woori Bank partnership through a primary source — a direct company statement or regulatory filing rather than a single trade-press report — would allow this item's confidence to move from Probable toward Confirmed, and would also clarify commercial terms currently undisclosed, including deal value.

**1 earlier distinct update(s)**

Periodic update · new data 2026-08-11

#### Commercial Intelligence & Fintech

The notable commercial event this cycle is the memorandum of understanding signed 21 July 2026 between Kbank, HashKey Group and BPMG to build won-stablecoin payment infrastructure targeting a Korea-Hong Kong remittance corridor. The event is announced rather than closed, and the financial terms of the partnership have not been publicly disclosed. Its significance lies in timing: the infrastructure build is proceeding ahead of the enabling Digital Asset Basic Act, which the Financial Services Commission is targeting for September 2026 reintroduction, making this a first-mover commercial positioning play against an unsettled legislative backdrop rather than a launch under a completed regulatory framework.

#### Outlook

Whether the Kbank-HashKey-BPMG partnership converts from MOU to operating infrastructure before or after the Digital Asset Basic Act's enactment will determine whether it functions as a template the eventual law accommodates, or as a build that requires retrofitting once the law is settled.

**Sources and findings (5)**

1. T2 [https://www.theblock.co/post/380504/naver-merger-upbit-official](https://www.theblock.co/post/380504/naver-merger-upbit-official) retrieved 2026-06-27
2. T3 [https://en.sedaily.com/news/2026/03/30/naver-dunamu-merger-delayed-three-months-amid-antitrust](https://en.sedaily.com/news/2026/03/30/naver-dunamu-merger-delayed-three-months-amid-antitrust) retrieved 2026-06-27
3. T3 [https://www.coindesk.com/business/2026/05/15/hana-bank-to-acquire-usd670-million-stake-in-upbit-operator-dunamu](https://www.coindesk.com/business/2026/05/15/hana-bank-to-acquire-usd670-million-stake-in-upbit-operator-dunamu) retrieved 2026-06-27
4. T3 [https://www.mordorintelligence.com/industry-reports/south-korea-real-time-payments-market](https://www.mordorintelligence.com/industry-reports/south-korea-real-time-payments-market) retrieved 2026-06-27
5. T3 [https://www.mordorintelligence.com/industry-reports/south-korea-payments-market](https://www.mordorintelligence.com/industry-reports/south-korea-payments-market) retrieved 2026-06-27

** No modules match.**

Filters combine as OR inside a group and AND across groups.

## Editorial metadata

Provenance only. Nothing below gates publication or affects the render.

Editorial metadata for South Korea| Field | Value |
|---|---|
| `trust.lawyer_review.status` | never_reviewed |
| `trust.lawyer_review.reviewer` | no reviewer on record |
| ` trust.content_source` | ai_generated |

## Provenance and declared absence

**Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

**Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

**Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

**Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`.

**Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band.

**Orphan deltas:** 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

**Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 61 finding(s), 116 source(s) in the cumulative register.

**Audit trail**

Machine check Challenged on 6 Oct 2026: not upheld (28 confirmed against the cited source; 1 contradicted by the cited source; 40 could not be checked). An automated, adversarial test run by a second model; no person has assessed the result.

Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).
