South Korea Blocks Unlicensed Crypto Sites After DAXA Enforcement Sweep
South Korea's Financial Services Commission (FSC) has ordered domestic internet access to be cut off for websites operated by unregistered virtual asset service providers (VASPs), extending a crackdown that previously focused on removing illegal apps from Google and Apple stores. The trigger was a June 2026 joint investigation led by the Digital Asset Exchange Alliance (DAXA) alongside registered exchanges, which found fee structures at unlicensed platforms running at up to 62 times the rate charged by the country's five regulated won-denominated exchanges. For accounting firms, auditors, and CFOs with Korean clients or counterparty exposure, this enforcement escalation carries direct AML, recordkeeping, and digital asset accounting software implications.
What the FSC Has Actually Done
Under Korea's Act on Reporting and Using Specified Financial Transaction Information (commonly called the "SFTIA" or "Specified Financial Information Act," known domestically as the Special Financial Transactions Act or "teuk-geum-beop"), virtual asset businesses operating in Korea must register with the Financial Intelligence Unit (KoFIU). Businesses that skip registration are operating illegally regardless of whether they serve Korean residents via an app, a website, or both.
Until now, the FSC's enforcement toolkit against unregistered platforms was largely limited to requesting app-store removals from Apple and Google. The new measure adds website-level blocking, meaning Korean internet users who attempt to access a flagged platform's domain will be denied a connection at the network level by domestic internet service providers.
How the Blocking Mechanism Works
The FSC submits a review request to the Korea Communications Standards Commission (KCSC), which is the statutory body responsible for ordering ISPs to block access to specific URLs. Once an order is issued, Korean ISPs are required to prevent domestic connections to the flagged domain. This process already exists for illegal gambling and other prohibited content; virtual asset sites are now subject to the same pipeline.
Why the Regulator Moved Now
The June 2026 DAXA investigation provided the evidentiary basis. Working alongside registered exchanges, DAXA conducted a concentrated joint review of platforms operating without SFTIA registration. The findings were striking: average transaction fees at unlicensed operators ranged from 1.5% to 10%, compared with an average of 0.16% across the five major regulated won-denominated exchanges. That puts the top end of the unlicensed fee range at roughly 62 times the regulated benchmark. Regulators treat inflated fees as a marker of platforms exploiting users who may not know they are dealing with an unregistered, unsupervised entity.
Fee Data in Context
The fee disparity uncovered by DAXA is not just a consumer-protection issue. From an AML standpoint, unusually high fees can indicate that a platform is absorbing the cost of operating outside the regulated system and passing that cost to users, or that it is deliberately targeting less financially sophisticated customers who cannot easily compare rates. Both patterns are consistent with typologies that financial intelligence units flag when assessing VASP risk.
| Platform Category | Average Transaction Fee |
|---|---|
| Unlicensed operators (DAXA sweep, June 2026) | 1.5% to 10% |
| Five major regulated KRW exchanges (average) | 0.16% |
The table above uses figures reported directly by the FSC. No adjustment or interpolation has been applied.
Penalties for Non-Compliant Operators
The SFTIA gives regulators meaningful financial teeth. Each individual violation can attract a fine of up to 100 million Korean won. Critically, the fine is assessed per violation, not per platform, so an operator running multiple unlicensed services, or committing repeated breaches, faces cumulative exposure that can escalate quickly. Administrative sanctions can also be imposed on the business itself and on individual officers and employees, meaning that personal liability for executives is a live risk, not a theoretical one.
Ongoing Monitoring and URL Migration Risk
The FSC explicitly acknowledged a limitation of website blocking in its announcement: operators are likely to respond by shifting to new domain names or mirror sites. The regulator has committed to continuous monitoring for replacement URLs and will submit additional review requests to the KCSC as new addresses are identified. This is a standard cat-and-mouse dynamic seen in other jurisdictions that have pursued web-level blocking of unlicensed financial services, and it means that a single block order should be read as the opening of an ongoing enforcement program rather than a one-time action.
AML and Compliance Implications for Firms
Accounting firms, auditors, and CFOs should treat this enforcement action as a signal to revisit client and counterparty due diligence processes that touch Korean virtual asset activity.
Counterparty Screening
If your firm or a client has transacted with or through a Korean-facing exchange, confirming that the platform holds valid KoFIU registration is now a baseline AML obligation. The FSC's enforcement activity means that previously tolerated ambiguity about VASP registration status carries regulatory risk. A useful starting point is KoFIU's published list of registered virtual asset business operators, which is publicly accessible and updated as new registrations are granted or revoked.
Transactions routed through unregistered VASPs may need to be flagged in suspicious activity reporting workflows. Understanding how high-quality crypto SARs are structured for AML reporting is increasingly relevant as Korean regulators expand enforcement beyond app stores to the web layer.
Transaction Monitoring Flags
For firms running transaction monitoring on digital asset flows, the fee data from the DAXA sweep provides a useful calibration point. Fee rates in the 1.5% to 10% range for a Korean counterparty should trigger at minimum an enhanced due diligence review. Fee levels this far above the regulated-market average are a quantifiable anomaly that can be documented in a monitoring alert and assessed against known typologies for unlicensed VASP exposure.
Digital Asset Accounting Software Considerations
When platforms are blocked and subsequently change URLs, the chain of transaction records associated with the original platform identity can fragment. Digital asset accounting software used to reconcile client portfolios needs to maintain a stable internal mapping of exchange identifiers that does not depend solely on a live domain connection. Firms should verify that their crypto bookkeeping software handles platform identifier continuity correctly when a counterparty exchange migrates addresses, to avoid gaps in the audit trail.
This is particularly relevant for firms servicing Korean clients who may have historical transactions on platforms that are now blocked. The blocking of a site does not retroactively erase the tax or accounting obligations attached to past trades. Cost-basis records, disposal calculations, and any deductible fees paid to the unlicensed platform all still need to be captured accurately in the relevant accounting period.
Broader Regulatory Trajectory in Korea
This action fits a clear pattern in Korean virtual asset regulation. The country introduced mandatory VASP registration under the SFTIA and has progressively tightened enforcement, moving from exchange-level registration requirements to travel rule implementation, and now to active suppression of unregistered operators across multiple distribution channels. The July 2024 enactment of the Virtual Asset User Protection Act added investor-protection obligations to the compliance stack, and regulators have signalled that AML enforcement will intensify alongside those obligations.
For firms with regional APAC exposure, Korea's trajectory is worth watching as a leading indicator. It is one of the most active virtual asset markets in the world by trading volume, and its regulatory architecture is maturing rapidly. The FSC's willingness to use infrastructure-level tools such as ISP blocking reflects a determination to enforce registration requirements with the same seriousness applied to unlicensed banking or securities activity.
Firms advising Korean clients on stablecoin AML obligations for financial institutions should also note that unlicensed stablecoin-adjacent services operating in Korea face the same blocking exposure as spot exchanges.
Frequently Asked Questions
Which law gives the FSC authority to block crypto websites in Korea?
The authority flows from the Act on Reporting and Using Specified Financial Transaction Information (the SFTIA), which requires virtual asset businesses to register with KoFIU. Platforms operating without registration are in breach of the Act. The FSC can then request that the Korea Communications Standards Commission issue blocking orders to domestic ISPs under existing internet content regulation powers.
What is DAXA and what role did it play in this enforcement?
DAXA, the Digital Asset Exchange Alliance, is the self-regulatory body representing Korea's registered cryptocurrency exchanges. In June 2026 it conducted a joint concentrated investigation alongside registered member exchanges, identifying unlicensed operators and documenting the fee data that the FSC cited in its announcement.
Does blocking a site erase the accounting or tax obligations from past trades?
No. Blocking is a prospective technical measure. Any trades executed on a now-blocked platform before the block was imposed still need to be accounted for in the relevant tax year. Cost basis, disposal proceeds, and fees paid must all be recorded. Firms should ensure client records from these platforms are preserved even after the platform becomes inaccessible.
How should compliance teams respond if a client has used an unregistered Korean VASP?
The first step is to verify whether the platform held KoFIU registration at the time of use. If it did not, the transactions should be reviewed under enhanced due diligence procedures, and a SAR may be required depending on the jurisdiction and the nature of the activity. The firm's AML officer should assess whether the transaction pattern meets any known typologies for unlicensed VASP exposure.
What happens if a blocked platform simply changes its domain name?
The FSC has stated it will continue monitoring for new URLs operated by blocked entities and will submit additional review requests to the KCSC for any replacement domains identified. This means the enforcement program is ongoing, not a single event. Compliance teams should not assume that a platform that appears to have migrated to a new domain has resolved its registration status.