- Most violations involved lapses in due diligence and customer identity verification processes.
- This action coincides with reports of a potential majority acquisition by Mirae Asset.
- The case reinforces stricter regulatory expectations for the cryptocurrency sector in South Korea.
South Korea’s year-end enforcement action against Korbit marks a pivotal moment for the country’s digital asset industry, signaling that compliance gaps will carry tangible consequences.
On December 31, the Financial Intelligence Unit (FIU) concluded an on-site investigation into one of the nation’s longest-running exchanges, imposing substantial financial penalties and management-level sanctions.
Based on findings from an October inspection, the enforcement focuses on how exchanges verify users, manage risk, and roll out new services.
The move comes at a sensitive time for Korbit and underscores how regulatory discipline is reshaping the future of South Korea’s cryptocurrency market.
The FIU announced a fine of 2.73 billion won (about $1.88 million) after identifying nearly 22,000 breaches related to anti-money laundering obligations and customer verification.
Those breaches emerged from an inspection conducted October 16–29, 2024, with results later reviewed by the Sanctions Review Committee.
Alongside the fine, the regulator issued an institutional warning and imposed individual accountability measures on senior management.
Inspection findings
A large portion of the violations stemmed from neglect in customer due diligence procedures.
The FIU found approximately 12,800 instances where identity checks were not properly performed.
These included acceptance of unclear or unverifiable identity documents, incomplete address information, and failures to carry out required re-verification processes.
In several cases, users were allowed to continue trading even after their risk profiles increased, without the application of additional controls.
Such practices conflict with regulatory requirements that higher-risk customers receive enhanced scrutiny rather than standard checks.
The review also identified roughly 9,100 instances in which customers were able to trade before identity verification was fully completed.
South Korean rules restrict transactions by unverified users, making these cases direct violations of basic compliance standards.
Accountability at the top
Beyond operational failings, the enforcement actions targeted senior management responsibility.
The FIU issued an institutional warning to Korbit, the exchange’s CEO received a reprimand, and a senior reporting officer was admonished.
This approach reflects a broader regulatory emphasis on corporate governance and internal controls, where responsibility does not stop at automated systems or compliance teams.
Senior leadership is expected to ensure that regulatory requirements are embedded in daily operations and decision-making processes.
Cross-border transfers and new services
Regulators also highlighted weaknesses beyond customer onboarding.
Inspectors reported 19 virtual asset transfers involving three foreign virtual asset service providers that were not properly reported.
South Korean regulations require exchanges to disclose interactions with foreign entities and to limit transactions with unregistered providers.
Additionally, the FIU identified 655 instances where Korbit failed to perform mandatory anti-money-laundering risk assessments before launching new transaction types.
These included services related to non-fungible tokens, an area of rapid growth that remains subject to the same compliance obligations as other digital asset products.
Timing and sector impact
The enforcement action arrived just days after reports that Mirae Asset was considering acquiring a 92% stake in Korbit for up to 140 billion won (about $97 million).
Korbit is currently the fourth-largest exchange among the six registered cryptocurrency platforms in South Korea, placing it squarely within regulators’ purview.
The FIU stated that full details of the sanctions will be disclosed after at least 10 days are provided for the exchange to submit its comments.