Japan vs South Korea: Crypto Regulation Comparison

Japan and South Korea are the two most regulated crypto markets in Asia, each with a distinct legal architecture that shapes how exchanges, token issuers and institutional investors operate. Japan treats crypto assets as a recognised payment instrument under the Payment Services Act, while South Korea governs virtual asset service providers through the Act on Reporting and Using Specified Financial Transaction Information. For international founders choosing between the two, the differences in licensing timelines, tax treatment and ongoing compliance obligations are material. This guide compares both frameworks across the dimensions that matter most: licensing, taxation, AML obligations, operational costs and strategic fit.

Japan';s framework is built on two pillars. The Payment Services Act classifies crypto assets as a legal means of exchange and requires all crypto exchange businesses to register as Crypto Asset Exchange Service Providers (CAESPs) with the Financial Services Agency (FSA). The Financial Instruments and Exchange Act (FIEA) governs security token offerings and crypto derivatives. Together, these statutes give Japan one of the most comprehensive and longest-standing crypto legal frameworks in the world, having been substantially amended following the Mt. Gox and Coincheck incidents.

South Korea';s primary instrument is the Act on Reporting and Using Specified Financial Transaction Information, commonly called the SPTF Act, which was amended to bring virtual asset service providers (VASPs) under a formal registration regime. The Financial Intelligence Unit (FIU), operating under the Financial Services Commission (FSC), is the competent authority for VASP registration. South Korea also introduced the Virtual Asset User Protection Act, which came into force recently and added investor protection obligations - including mandatory segregation of user assets and insurance requirements - that go beyond what most jurisdictions demand.

A key structural difference is philosophy. Japan';s FSA takes a licensing approach with detailed pre-approval scrutiny. South Korea';s FIU takes a registration approach, but the conditions attached to that registration - particularly the requirement to hold a real-name bank account issued by a Korean bank - create a de facto barrier that is arguably more restrictive in practice than Japan';s formal licensing process.

In Japan, the CAESP registration process is conducted by the FSA and typically takes between six and twelve months from submission of a complete application. The FSA reviews the applicant';s internal governance, cybersecurity systems, AML/CFT policies, financial soundness and the qualifications of key personnel. A minimum net asset requirement applies, though the precise threshold varies by business model. Applicants must maintain a physical presence in Japan, appoint a compliance officer and implement a cold wallet policy under which a defined proportion of user assets must be held offline.

A common mistake made by foreign founders is underestimating the documentation burden. The FSA expects detailed internal rulebooks, system audit reports and evidence of operational readiness before granting registration. Many applications are returned for supplementation, which can add months to the timeline. In practice, founders should consider engaging a Japanese legal counsel and a certified public accountant familiar with FSA submissions from the outset.

In South Korea, VASP registration with the FIU requires the applicant to satisfy two conditions that are difficult to meet simultaneously. First, the business must obtain an Information Security Management System (ISMS) certification from the Korea Internet and Security Agency (KISA). This certification process alone typically takes three to six months and involves an on-site audit of IT infrastructure. Second, the business must secure a real-name verified account from a Korean bank - a requirement that, in practice, only the four major banks (KB, Shinhan, Woori, NongHyup) issue, and they do so selectively and at their own discretion.

The bank account requirement has effectively limited the number of registered VASPs in South Korea to a small group of established domestic exchanges. Foreign-owned entities have found it extremely difficult to obtain bank partnerships, making South Korea a challenging jurisdiction for new market entrants. Japan, by contrast, has registered a broader range of domestic and foreign-affiliated operators, though the FSA';s scrutiny remains rigorous.

Japan taxes crypto gains as miscellaneous income under the Income Tax Act. For individuals, this means gains are added to other income and taxed at the applicable progressive rate, which can reach a combined national and local rate in the upper range for high earners. This is a significant disadvantage compared to jurisdictions that apply a flat capital gains rate. Crypto-to-crypto swaps are treated as taxable events, meaning each trade triggers a potential tax liability even without a fiat conversion. Businesses holding crypto on their balance sheet are subject to mark-to-market taxation at year-end under corporate tax rules, which creates volatility in taxable income.

South Korea has taken a different path. After several delays, South Korea introduced a crypto gains tax framework, but the implementation date has been pushed back more than once through legislative amendments. Under the current framework, individual gains above a defined annual threshold are subject to a flat rate, which is considerably lower than Japan';s top marginal rate. Corporate holders are taxed under general corporate income tax rules. South Korea does not currently apply mark-to-market treatment to corporate crypto holdings in the same way Japan does.

For institutional investors and high-volume traders, South Korea';s tax structure is more favourable on paper. However, the practical difficulty of obtaining VASP registration and a banking relationship offsets this advantage for most new entrants. Japan';s tax burden is heavier, but the regulatory pathway is at least navigable with proper preparation.

Many founders underestimate the impact of Japan';s crypto-to-crypto taxation on trading businesses. A business running an active market-making or arbitrage operation will generate taxable events continuously, requiring robust accounting systems capable of tracking cost basis across thousands of transactions. This is a non-obvious operational cost that should be factored into the business case before choosing Japan.

If you are evaluating both jurisdictions and need a structured comparison tailored to your specific business model, contact info@vlolawfirm.com. We can help structure the setup correctly the first time.

Both Japan and South Korea have implemented the Financial Action Task Force (FATF) Travel Rule, which requires VASPs to transmit originator and beneficiary information when transferring virtual assets above a defined threshold. Japan implemented the Travel Rule through amendments to the Act on Prevention of Transfer of Criminal Proceeds, with the FSA issuing detailed guidance on technical standards. South Korea implemented the Travel Rule through the SPTF Act framework, with the FIU specifying the threshold and data requirements.

In Japan, registered CAESPs must file suspicious transaction reports, conduct customer due diligence, maintain transaction records for a defined period and submit annual compliance reports to the FSA. The FSA conducts on-site inspections and has the authority to issue business improvement orders or suspend operations. Recent enforcement actions have demonstrated that the FSA takes a hands-on supervisory approach, particularly regarding cybersecurity incidents and customer asset protection.

In South Korea, registered VASPs must file reports with the FIU, implement AML programmes and comply with the Virtual Asset User Protection Act';s requirements on asset segregation, insurance and disclosure. The user protection law introduced obligations that are more prescriptive than Japan';s equivalent rules in certain areas, including mandatory deposit insurance arrangements and restrictions on the use of user assets for proprietary purposes.

Practical compliance costs are substantial in both jurisdictions. In Japan, maintaining the required cold wallet infrastructure, conducting annual system audits and staffing a compliance function represent ongoing expenditures that typically run into the mid-to-high hundreds of thousands of dollars annually for a mid-sized exchange. South Korea';s ISMS certification must be renewed periodically, adding a recurring cost and audit burden. Both jurisdictions require local staff and physical offices, which adds to the cost base.

A non-obvious requirement in Japan is the obligation to maintain a reserve of liquid assets sufficient to cover user deposits, subject to FSA review. This capital tie-up can be significant for exchanges with large retail user bases and should be modelled carefully in financial projections.

The total cost of entry differs meaningfully between the two jurisdictions. In Japan, professional fees for legal, accounting and compliance advisory services during the registration process typically start from the low hundreds of thousands of USD, depending on the complexity of the business model and the state of the applicant';s existing compliance infrastructure. Ongoing annual compliance costs add a further material sum. State registration fees are modest relative to professional costs.

In South Korea, the ISMS certification process involves both direct fees to KISA and the cost of preparing IT systems to meet certification standards, which can be substantial for businesses without existing ISO-equivalent infrastructure. Legal and advisory fees for the registration process are broadly comparable to Japan. The hidden cost in South Korea is the time and resource spent attempting to secure a banking relationship - a process that may ultimately be unsuccessful for foreign-owned entities, making the entire investment unrecoverable.

Consider two practical scenarios. A well-capitalised Japanese fintech group seeking to launch a regulated exchange in Asia will likely find Japan the more accessible path, given the FSA';s established process and the availability of local counsel with FSA experience. The tax burden is higher, but the regulatory certainty and the depth of the Japanese retail crypto market offer compensating advantages.

A Korean-founded startup with existing relationships with a major Korean bank and a domestic IT team capable of achieving ISMS certification will find South Korea a viable option, particularly given the more favourable tax treatment and the large domestic user base. The same startup without those pre-existing relationships would face a near-impossible path to registration.

For token issuers rather than exchanges, Japan';s FIEA framework for security tokens is well-developed and offers a clear pathway for compliant issuance, though it requires registration as a Type I or Type II Financial Instruments Business Operator. South Korea';s framework for token issuance is less mature and has been subject to regulatory uncertainty, making Japan the stronger choice for security token projects.

What is the single biggest practical difference between Japan and South Korea for a foreign crypto business?

The most significant practical difference is market access. In Japan, a foreign-affiliated entity can navigate the FSA registration process with sufficient preparation, local presence and professional support. In South Korea, the requirement to obtain a real-name bank account from a major Korean bank creates a structural barrier that most foreign entities cannot overcome regardless of their compliance quality. This means Japan is, paradoxically, the more accessible jurisdiction for international operators despite having a more demanding formal licensing process. The South Korean market is effectively reserved for domestic players with established banking relationships.

How long does it realistically take to become operational in each jurisdiction?

In Japan, from the decision to apply to receiving FSA registration and commencing operations, founders should plan for a minimum of twelve to eighteen months, accounting for preparation, submission, FSA review and any supplementation requests. In South Korea, the ISMS certification alone takes three to six months, and the banking relationship process runs in parallel with no guaranteed outcome. If a banking relationship is secured, total time to registration is broadly similar to Japan. If not, the process stalls indefinitely. Operational readiness in either jurisdiction also requires building out local compliance infrastructure, which adds further time.

Is Japan or South Korea better for a crypto fund or institutional investor rather than an exchange?

For institutional investors holding crypto assets rather than operating an exchange, neither jurisdiction requires VASP registration simply for holding or trading on one';s own account. The relevant consideration shifts to tax treatment and fund structuring rules. Japan';s mark-to-market corporate tax treatment of crypto holdings creates balance sheet volatility that many institutional investors find unattractive. South Korea';s corporate tax treatment is less prescriptive in this regard. However, fund managers distributing to retail investors in either jurisdiction will trigger securities regulation, and both countries have active enforcement in this area. Professional legal advice specific to the fund structure is essential before choosing either domicile.

Japan and South Korea represent the two most structured crypto regulatory environments in Asia, but they suit different business profiles. Japan offers a navigable licensing pathway with strong legal certainty, at the cost of a heavier tax burden and rigorous ongoing compliance. South Korea offers a potentially more favourable tax environment but imposes structural barriers that make market entry difficult for foreign operators.

VLO Law Firms advises international clients on crypto regulation matters across Japan, South Korea and other key jurisdictions. We can assist with VASP and CAESP registration strategy, compliance programme design, tax structuring and cross-border operational setup. To request a consultation, contact: info@vlolawfirm.com