Crypto Wallet Custody License South Korea: Complete Guide for 2026
South Korea has become a major hub for cryptocurrency innovation, but its regulatory environment is strict and evolving. If you plan to offer crypto wallet custody services to South Korean users, you need a specific license from the Financial Services Commission (FSC) under the Act on Reporting and Use of Specified Financial Transaction Information. This guide covers everything you need to know about the crypto wallet custody license in South Korea, including requirements, costs, timeline, and how Consulting24 can help you coordinate the process.
Consulting24 advises and coordinates crypto licensing across multiple jurisdictions, including South Korea. While we do not file directly in South Korea, we work with local partners to ensure your application meets all regulatory standards. Our team has deep experience with the FSC's requirements and can help you avoid common pitfalls. For a faster and more cost-effective option, consider Panama, where we deliver directly at a flat fee of EUR 6,000.
What Is the Crypto Wallet Custody License in South Korea?
The crypto wallet custody license in South Korea is a regulatory approval required for businesses that store, manage, or safeguard private keys and digital assets on behalf of customers. It falls under the broader framework of virtual asset service providers (VASPs) regulated by the Financial Services Commission (FSC) and the Korea Financial Intelligence Unit (KoFIU).
Under the Act on Reporting and Use of Specified Financial Transaction Information, any entity offering custody services must register with the FSC and comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations. The license is mandatory for both domestic and foreign companies targeting South Korean clients.
Key features of the license include:
- Registration with the FSC as a VASP
- Real-name account requirement with a Korean bank
- ISMS (Information Security Management System) certification
- Compliance with Travel Rule (FATF Recommendation 16)
South Korea's approach is one of the most stringent in Asia, reflecting its large and active crypto market. The FSC regularly inspects VASPs and has imposed fines for non-compliance. For example, in 2024, several exchanges faced penalties for inadequate AML controls. This license is not just a formality; it requires ongoing operational discipline.
Who Needs a Crypto Wallet Custody License in South Korea?
Any business that provides custodial wallet services to South Korean residents must obtain this license. This includes:
- Crypto exchanges offering in-house custody
- Third-party custody providers
- Institutional custody services for funds and asset managers
- Wallet providers that hold private keys for users
Non-custodial wallets (where users control their own keys) are generally exempt, but if you offer any managed service, you fall under the VASP definition. Foreign companies serving South Korean users without a local license risk enforcement actions, including fines and criminal penalties. In 2025, the FSC increased penalties for unregistered VASPs, with fines up to 50 million KRW and potential imprisonment.
If you are unsure whether your service requires a license, Consulting24 can review your business model and advise on the best approach. We also help clients compare with simpler jurisdictions like Lithuania, where the custody license is more straightforward.
License Type and Regulator
The crypto wallet custody license in South Korea is a VASP registration under the Financial Services Commission (FSC). The specific regulator is the Korea Financial Intelligence Unit (KoFIU), which handles AML compliance and reporting. The FSC oversees broader financial regulation.
There is no separate "custody license" - custody is treated as a VASP activity. The registration is valid indefinitely, but subject to ongoing reporting and audits. The FSC requires companies to renew their ISMS certification every year and submit periodic transaction reports. The regulator also conducts on-site inspections, which can be triggered by suspicious activity or random audits.
For comparison, other jurisdictions like Estonia have dedicated custody licenses with lower capital requirements, but South Korea's market is larger and more regulated. The FSC's stance is that custody is a high-risk activity, so they apply the same standards as for exchanges.
Cost and Timeline
| Item | Estimated Cost (USD) | Timeline |
|---|---|---|
| Filing fee | $2,000 - $5,000 | 1-2 weeks |
| ISMS certification | $20,000 - $50,000 | 3-6 months |
| Legal and consulting fees | $30,000 - $80,000 | Ongoing |
| Bank account setup | $10,000 - $30,000 | 2-4 months |
| Total estimated cost | $60,000 - $165,000 | 6-12 months |
The timeline can vary significantly depending on the complexity of your business and the readiness of your AML program. The ISMS certification is often the longest step. Consulting24 can help you prepare documentation and coordinate with local partners to expedite the process. For a faster and cheaper alternative, consider Panama where the flat fee is EUR 6,000 and the timeline is 2-4 months.
Capital Requirement
South Korea does not have a statutory minimum capital requirement for VASP registration. However, in practice, the FSC expects companies to have sufficient capital to operate a secure custody service. Most successful applicants have at least $1 million in paid-up capital. This covers operational costs, insurance, and technology infrastructure. The FSC may also require a surety bond or insurance policy to protect customer assets.
For comparison, Panama has no minimum capital requirement, while Lithuania requires EUR 125,000 for custody services. The absence of a fixed minimum in South Korea gives flexibility but also uncertainty. Consulting24 advises clients to prepare a detailed business plan and capital adequacy assessment. We recommend having at least $500,000 in liquid capital to demonstrate financial stability.
Tax Treatment
South Korea taxes virtual asset income as "other income" at a rate of 20% (22% including local surtax) for individuals, with a deduction of 2.5 million KRW. Corporate tax rates apply to companies: 9-24% depending on income bracket. Custody fees are subject to VAT at 10%.
Capital gains from crypto trading are currently taxed at 20% for gains exceeding 2.5 million KRW, but this is under review. For custody providers, the main tax implications are corporate income tax on fees and VAT on services. Foreign companies without a permanent establishment may be exempt from Korean corporate tax, but this is complex and requires a thorough analysis of tax treaties. Consulting24 recommends consulting a local tax advisor to structure your operations efficiently.
Allowed Activities
With a VASP registration for custody, you can:
- Store and manage private keys for customers
- Provide wallet infrastructure and API access
- Offer staking services (subject to additional approval)
- Facilitate asset transfers between wallets
Activities not allowed without separate licenses:
- Exchange trading (requires exchange license)
- Lending or borrowing crypto
- Derivatives and margin trading
- Payment processing (requires e-money license)
If you plan to offer multiple services, you may need multiple registrations. For example, if you want to offer staking as a service, you must apply for a separate license or amendment. Consulting24 can advise on the optimal structure to cover your planned activities while minimizing regulatory burden.
Step-by-Step Application Process
- Pre-application preparation: define business model, prepare AML policy, and engage a local partner.
- ISMS certification: obtain Information Security Management System certification from a designated agency like KISA (Korea Internet & Security Agency).
- Real-name account: open a corporate account with a Korean bank that supports virtual asset transactions. Banks like Kookmin, Shinhan, and Woori are common.
- Submit registration: file with the FSC/KoFIU, including business plan, AML program, and ISMS certificate. The application form requires detailed information on ownership, management, and technology.
- Review and approval: FSC reviews within 3-6 months; may request additional information or clarifications. The regulator may also conduct an interview with key personnel.
- Post-registration compliance: submit transaction reports monthly, undergo audits, and renew ISMS annually. Failure to comply can result in fines or license revocation.
Each step requires careful documentation. Consulting24 coordinates with local legal and compliance experts to ensure your application is complete. We also help with company setup in South Korea if needed, including registering a local entity and obtaining business licenses.
Banking and Payments
One of the biggest challenges for crypto custody providers in South Korea is obtaining a real-name account with a local bank. Major banks like Kookmin, Shinhan, and Woori require VASP registration and ISMS certification before opening accounts. The process can take 2-4 months and involves strict AML due diligence. Banks often ask for detailed business plans, source of funds, and proof of compliance systems.
Without a real-name account, you cannot legally serve Korean customers. Some foreign providers use partnerships with licensed Korean entities, but this carries regulatory risk. Consulting24 can introduce you to banks that are open to crypto businesses, though no guarantees can be made. For payment processing, consider integrating with local payment gateways that support crypto-to-fiat conversions. However, these also require compliance with FSC rules. As an alternative, Panama offers easier banking for crypto businesses.
Benefits of Getting Licensed in South Korea
Despite the high cost and complexity, a South Korean custody license offers significant advantages:
- Access to the world's third-largest crypto market, with high trading volumes and institutional interest.
- Regulatory clarity and investor trust, as the FSC is a respected authority.
- Ability to partner with local exchanges and institutions that require regulated custody.
- Compliance with global standards (FATF), which can facilitate cross-border partnerships.
Licensed providers are seen as more credible, attracting institutional clients who require regulated custody. The license also opens doors to other Asian markets that respect Korean regulation. For example, a Korean-licensed custodian may find it easier to work with Japanese or Singaporean partners.
Compliance and Ongoing Obligations
After obtaining the license, you must maintain ongoing compliance:
- Submit transaction reports to KoFIU monthly, including details of all transfers above a threshold.
- Conduct AML training for staff annually and maintain records.
- Renew ISMS certification annually, which involves a full audit of your security systems.
- Undergo periodic audits by the FSC, which may be announced or unannounced.
- Report any changes in ownership, management, or business model within 30 days.
Failure to comply can result in fines, suspension, or revocation of the license. The FSC has the power to impose penalties up to 100 million KRW for serious violations. Consulting24 offers ongoing compliance support to ensure you meet all requirements. Note: this is general guidance, not legal advice. We recommend retaining a local compliance officer.
Common Mistakes to Avoid
Many applicants face delays or rejections due to these common errors:
- Incomplete AML policy: must include customer due diligence, transaction monitoring, and suspicious activity reporting. The FSC expects policies to be tailored to your business, not generic templates.
- Weak ISMS: security measures must meet Korean standards, often stricter than EU or US. For example, you need to implement multi-factor authentication, encryption at rest and in transit, and regular penetration testing.
- Lack of local presence: the FSC prefers companies with a physical office and local staff. Having a registered address is not enough; you need a substantive presence.
- Underestimating timeline: expect 6-12 months; rushing leads to mistakes. Many applicants fail to account for the ISMS certification time.
- Ignoring Travel Rule: South Korea enforces the FATF Travel Rule for all VASPs, requiring you to collect and share sender/receiver information for transactions above a threshold.
Consulting24 helps you avoid these pitfalls by providing a checklist and reviewing your documentation before submission. We also offer a pre-assessment service to identify gaps early.
Alternatives and Comparison: South Korea vs. Panama, Lithuania, and Singapore
If South Korea's requirements seem daunting, consider other jurisdictions that offer custody licenses with lower barriers:
| Jurisdiction | Capital Requirement | Timeline | Cost (approx.) | Market Access |
|---|---|---|---|---|
| South Korea | No statutory min, but $1M+ expected | 6-12 months | $60,000 - $165,000 | Korean market |
| Panama | None | 2-4 months | EUR 6,000 flat | Global, no local market |
| Lithuania | EUR 125,000 | 3-6 months | EUR 15,000 - EUR 30,000 | EU market |
| Singapore | SGD 250,000 | 6-9 months | SGD 50,000 - 100,000 | Asia-Pacific |
Panama is the cheapest and fastest option, but it does not provide direct access to the Korean market. Lithuania offers EU passporting and is a good middle ground. Singapore is another strong Asian hub with a clear regulatory framework. Consulting24 can help you choose the right jurisdiction based on your target market and budget.
Frequently asked questions
What is the crypto wallet custody license in South Korea?
It is a VASP registration required for businesses that hold private keys and digital assets for customers. It is regulated by the FSC and KoFIU under the Act on Reporting and Use of Specified Financial Transaction Information.
Who needs this license?
Any company offering custodial wallet services to South Korean residents, including exchanges with in-house custody, third-party custodians, and institutional custody providers. Non-custodial wallets are exempt.
What are the costs and timeline for the license?
Total costs range from $60,000 to $165,000, including ISMS certification, legal fees, and bank setup. The timeline is 6-12 months, with ISMS certification taking the longest.
Is there a minimum capital requirement?
No statutory minimum, but the FSC expects sufficient capital to operate securely. Most successful applicants have at least $1 million in paid-up capital. Consulting24 recommends at least $500,000.
What activities are allowed under the license?
You can store and manage private keys, provide wallet infrastructure, offer staking (with additional approval), and facilitate transfers. Exchange trading, lending, and derivatives require separate licenses.
How do I get a real-name bank account in South Korea?
You need VASP registration and ISMS certification first. Then apply to banks like Kookmin, Shinhan, or Woori. The process takes 2-4 months and involves strict AML checks. Consulting24 can introduce you to receptive banks.
What are the ongoing compliance obligations?
Submit monthly transaction reports to KoFIU, conduct AML training, renew ISMS annually, and undergo periodic audits. Report any changes in ownership or management within 30 days.
What are common mistakes in the application?
Incomplete AML policies, weak ISMS, lack of local presence, underestimating timeline, and ignoring the Travel Rule. Consulting24 helps you avoid these with a thorough pre-assessment.
How does South Korea compare to Panama for custody licensing?
Panama is much cheaper (EUR 6,000 flat) and faster (2-4 months), with no capital requirement. However, it does not provide access to the Korean market. South Korea offers a large local market but at higher cost and complexity.
Can Consulting24 help with the South Korea license?
Yes, we advise and coordinate the process with local partners. We do not file directly, but we help with documentation, partner introductions, and compliance setup. For direct delivery, consider our services in Panama or Lithuania.
What is the tax treatment for custody services in South Korea?
Corporate income tax at 9-24%, VAT at 10% on fees, and potentially 20% tax on capital gains. Foreign companies may be exempt from corporate tax if no permanent establishment, but this requires careful analysis.
Is the South Korea license valid indefinitely?
Yes, but subject to ongoing compliance. You must renew ISMS annually and maintain reporting. The FSC can revoke the license for non-compliance.
Official sources
Primary sources
This guide reflects 2026 rules. Verify current requirements with the official regulator:
Related jurisdictions
Talk to a crypto-licensing expert
500+ licenses across Estonia, Lithuania, Panama and beyond. Tell us your model and we'll map the right route — honestly.
💬 Talk to an expertFree consultationGeneral guidance, not legal advice. Rules and fees evolve — we confirm current requirements for your case.