Japan's FSA Keeps Its Unregistered Firms Warning List Current
Japan's Financial Services Agency (FSA) refreshed its public register of unregistered financial instruments operators on 23 October 2026, adding newly warned entities to both its domestic and overseas lists. For accounting firms, auditors, and CFOs whose clients touch Japanese capital markets or crypto-asset products, the update is a direct compliance signal, not background noise. Transacting with a named operator can expose a client to criminal liability under the Financial Instruments and Exchange Act (FIEA), and the professional adviser who failed to spot that risk faces its own accountability questions.
What the FSA Warning List Actually Is
The FSA has maintained a public disclosure of unregistered financial instruments businesses since January 2010, acting under its supervisory powers across the FIEA. When the regulator or one of Japan's Regional Finance Bureaus identifies an operator conducting financial instruments business without the required registration, it issues a formal warning letter. The operator's name, and where relevant its address, is then published on the FSA website.
Scope of the register
The register covers three distinct categories of operator. First, domestic unregistered businesses, those operating from within Japan without holding a valid FIEA registration. Second, overseas unregistered businesses, foreign entities soliciting Japanese investors or otherwise conducting regulated activity directed at Japan without registration. Third, operators who submitted a Qualified Institutional Investor special business notice under Article 63(2) of the FIEA but who have still been issued a warning, indicating they exceeded the permitted scope or otherwise breached their notification obligations.
The FSA is explicit that inclusion on the list reflects the position at the time the warning letter was issued. An operator may subsequently cease operations, obtain registration, or change its name. Equally, operators not yet named may already be acting in breach. The register is a floor, not a ceiling, for due diligence.
How the list is maintained and searched
The FSA publishes the data in three formats: a PDF, an Excel file, and a searchable HTML page. The October 2026 update covers both domestic and overseas categories. The regulator notes that when searching the PDF or Excel files, users should try both full-width and half-width versions of any alphabetical name, since data entry conventions can vary. The HTML version consolidates both lists but omits address detail; for address verification, the individual PDF or Excel files are the definitive source.
Why the October 2026 Update Matters for Accounting and Audit Practices
The FSA updates this list periodically rather than in real time, so each refresh represents a batch of enforcement activity that has crystallised since the previous publication. A newly named entity may have been actively soliciting clients, processing transactions, or appearing in a client's portfolio for months before the warning letter was issued and published.
Counterparty risk in client portfolios
For accounting firms running crypto bookkeeping software or digital asset accounting software to record client positions, the practical question is whether any of those positions involve an entity now named on the list. An investment routed through an unregistered operator carries classification uncertainty: is it a genuine financial asset, a claim of uncertain recovery, or a potential fraud-loss write-down? IFRS 9 and Japanese GAAP both require management to assess recoverability. If the counterparty is unregistered and the subject of a regulatory warning, the impairment case becomes difficult to rebut.
AML and KYC obligations
Japan's Act on Prevention of Transfer of Criminal Proceeds (the anti-money-laundering framework) requires covered entities to conduct enhanced due diligence where there are elevated risk indicators. An FSA-warned counterparty is precisely such an indicator. Accounting practices acting as reporting entities, or advising clients who are, need to consider whether existing customer due diligence files remain adequate in light of the updated list. Where a client has ongoing dealings with a newly named operator, a Suspicious Transaction Report may be warranted.
Audit trail implications
External auditors signing off on financial statements that include assets linked to an unregistered operator face a specific challenge. The FSA's public register is freely accessible; an auditor who did not consult it has a harder time demonstrating that their risk assessment procedures were adequate. Firms relying on crypto accounting software to generate audit-ready ledgers should build a documented counterparty-status check into their workflow, cross-referencing the FSA list at each reporting period.
The Legal Framework Behind the Warnings
Registration as a financial instruments business operator is required under Article 29 of the FIEA. Operating without that registration is a criminal offence, carrying the possibility of imprisonment and fines. The FIEA's reach extends to overseas operators who solicit Japanese investors or conduct regulated transactions directed at Japan, which is why the FSA maintains a separate overseas list.
Article 63 and the special business notice regime
Article 63 of the FIEA provides a narrower pathway for certain operators, specifically those dealing exclusively with qualified institutional investors, to conduct financial instruments business by filing a notification rather than obtaining full registration. The FSA has repeatedly warned that this regime is sometimes misused. Operators file the notification to gain a veneer of apparent legitimacy while actually dealing with a broader retail or semi-retail audience. Warning letters issued to Article 63 notifiers appear on a separate section of the FSA list, updated most recently in August 2016 for that category specifically, though the domestic and overseas unregistered lists themselves were updated on 23 October 2026.
Practical Steps for Firms with Japan-Connected Clients
The update creates a clear action sequence for compliance and client-service teams.
Immediate counterparty screen
Download the current PDF or Excel files from the FSA website and run each Japan-market counterparty, platform, and fund manager appearing in client records against both the domestic and overseas lists. Document the search date, the file version used, and the outcome. This creates an auditable record that due diligence was performed against the most current available data.
Client communication where a match is found
If a match appears, the client relationship team and compliance officer need to be involved immediately. Depending on the nature of the exposure, options range from enhanced monitoring and a written notification to the client, through to considering whether a Suspicious Transaction Report is required. Continuing to record and report positions in an unregistered operator's product without flagging the regulatory status would be a governance failure.
Updating onboarding and periodic review processes
The FSA's list is a living document. Firms should build a periodic check, at minimum quarterly, into their Japan-market client onboarding and review procedures. This is particularly relevant for firms using crypto accounting software or digital asset accounting software to manage client portfolios containing Japanese-market crypto-asset products, since new operators enter and exit the market between FSA update cycles.
Coordination with the SESC
The FSA page also references the Securities and Exchange Surveillance Commission (SESC), which can apply to courts for injunctions to halt activity by unregistered operators. Where a firm identifies ongoing activity by a named operator that appears to continue post-warning, it can report this to the SESC's information window. Doing so, and documenting that report, can itself form part of a firm's AML compliance record.
Broader Context: Japan's Enforcement Posture on Crypto and Digital Assets
This list update sits within a wider pattern of active FSA engagement with digital asset markets. Japan was among the first jurisdictions to introduce a crypto-asset exchange registration regime, and the FSA has progressively tightened supervision of both domestic and cross-border operators. The inclusion of overseas entities on the warning list reflects the regulator's position that geographic distance does not insulate an operator from Japanese law where Japanese investors are being solicited.
For firms tracking the FSA's evolving approach, the Japan's FSA digital and decentralised finance study group provides important context on the direction of travel for future regulatory requirements. And for a concrete illustration of what unregistered-counterparty exposure can look like in practice, the analysis of how the Italian mafia crypto-laundering bust illustrates unregistered counterparty risk offers useful parallels on the audit and AML dimensions.
The FSA's contact channels for reporting suspicious activity or seeking guidance remain operational on weekdays between 10:00 and 17:00 Japan time, with a 24-hour web submission option also available.
Frequently Asked Questions
Does the FSA warning list only cover crypto-asset businesses?
No. The list covers all financial instruments businesses operating without registration under the FIEA, which includes securities dealers, investment advisers, collective investment scheme operators, and crypto-asset businesses where those activities fall within the FIEA's definition of financial instruments business. Crypto-specific exchange registration sits under a separate regime (the Payment Services Act), but products that constitute securities or derivatives are squarely within the FIEA and therefore this list.
Is a firm automatically in breach if a client holds an investment through a listed entity?
The client's own liability depends on their specific activity, but the accounting or advisory firm's obligation is clear: it must identify, document, and assess the risk. Continuing to manage or report on assets linked to an FSA-warned operator without any enhanced due diligence would be hard to defend in a regulatory review or audit inspection.
How often does the FSA update these lists?
The domestic and overseas unregistered operator lists are updated periodically; the most recent update shown on the FSA page is 23 October 2026. There is no fixed schedule, so firms should check at regular intervals rather than assuming a predictable cadence.
What should a firm do if it cannot find a definitive match but a counterparty's details are similar to a listed entity?
The FSA specifically notes that operators may change their names and that the list reflects position at the time of warning. A near-match or name variation should trigger escalation to compliance and, where appropriate, a direct enquiry to the FSA's financial services consumer consultation office or the SESC information window.
Does the Article 63 notifier sub-list have the same legal weight as the main warning list?
Yes. A warning letter issued to an Article 63 notifier indicates that the operator has been found to be acting outside the permitted scope of the notification regime, which is itself a FIEA breach. The legal consequences and counterparty-risk implications are materially equivalent to those for fully unregistered operators.