The Korea Financial Intelligence Unit (KoFIU) announced on August 18 that it has notified illegal business activities of 16 unregistered Virtual Asset Service Providers (VASPs) to the investigative authority. The KOFIU urged virtual asset users to practice extra caution in order to avoid incurring damages that may result from their transactions with unregistered VASPs.
I. Unregistered Operation of Foreign-based VASPs in Domestic Market
The KoFIU has notified the investigative authority about the violation of unregistered business activities of 16 foreign-based VASPs* carrying out business activities intended for domestic consumers pursuant to the Act on Reporting and Using Specified Financial Transaction Information (“the Act” hereinafter).
* KuCoin, MEXC, Phemex, XT.com, Bitrue, ZB.com, Bitglobal, CoinW, CoinEX, AAX, ZoomEX, Poloniex, BTCEX, BTCC, DigiFinex, Pionex
The 16 foreign-based VASPs were found to have been engaged in business activities targeting domestic consumers by offering Korean-language websites, having promotional events targeting Korean consumers and providing a payment option that supports the purchase of virtual assets using credit cards. On July 22, 2021, the KoFIU notified foreign-based VASPs that have business operations targeting Koreans about their obligation to register their business with the authority pursuant to the Act. However, the 16 aforementioned entities were found to have business operations targeting Koreans without obtaining a registration and thus the authorities plan to take necessary measures.
II. Actions Taken on Unregistered VASPs
a) The KoFIU has notified the investigative authority about the violation of registration duties (under the Act) of 16 unregistered VASPs, and plans to inform FIUs in their respective countries about their violation. For illegal business activities of unregistered entities, maximum 5 years of imprisonment or up to KRW50 million of fine can be imposed with a restriction for registering as a VASP in domestic market for certain period of time.
b) The KoFIU has requested the Korea Communications Commission and the Korea Communications Standards Commission to block domestic access to the websites of unregistered VASPs to prevent the use of virtual asset services provided by unregistered entities.
c) Credit card companies will inspect and block credit card-based virtual asset purchase and payment services offered by foreign-based VASPs to disable their use in domestic market.
d) Transfers of virtual assets to and from the 16 unregistered entities will be made impossible as the authorities have issued an administrative guidance requiring suspension of transactions between the registered and unregistered entities.
III. User Caution and Further Plan
Virtual asset users should check whether the VASPs that they are dealing with are legitimately registered with the authority according to the Act. Unregistered VASPs lack registration qualifications such as the certification for information security management system (ISMS) which leaves them vulnerable to risks of personal information breach and hacking. Moreover, unregistered entities are outside the purview of management and supervision for AML activities which leaves them prone to be used as a venue for money laundering. In addition, authorities are urging for cooperation in preventing domestic dissemination of false information which intends to entice the use of virtual asset services offered by unregistered entities.
The KoFIU will continue to closely monitor illegal business activities carried out by unregistered entities (those other than the ones specified here) and maintain close cooperation with relevant authorities in taking necessary measures by immediately reporting to the investigative authority. Upon finding illegal business activities of unregistered VASPs, virtual asset users are advised to immediately contact the KoFIU (+82.2.736.1748), FSS (+82.2.3145.7543) or police (+82.112).
* Please refer to the attached PDF for details.