South Korea Crypto Regulation: The VAUPA

South Korea regulates crypto through the Virtual Asset User Protection Act (VAUPA), which took effect on 19 July 2024 as the country's first dedicated crypto law — focused on protecting users' assets and policing market abuse, under the Financial Services Commission (FSC). For a market as large and active as Korea's, it's a significant step from patchwork rules to a formal framework. Here's what it covers.

A dedicated law, user-protection first

Unlike jurisdictions that stretch existing financial law over crypto, Korea passed a purpose-built act. The FSC announced the Act on the Protection of Virtual Asset Users would take effect from 19 July 2024, establishing rules to safeguard users and bring order to the market (FSC). This first phase deliberately prioritizes user protection and market integrity over a full licensing-and-conduct regime — that broader "second phase" is still developing.

What the VAUPA requires

The Act centers on a few pillars:

• Safeguarding user assets — service providers must protect users' deposits and hold customer virtual assets securely (including cold-storage and segregation requirements).
• Banning unfair trading — price manipulation, use of undisclosed material information, and other market abuse are prohibited and subject to sanction.
• Regulator oversight — the FSC and financial authorities can supervise, inspect, and penalize virtual-asset service providers, and investigate unfair trading.

Central-bank digital currency issued by the Bank of Korea and certain assets regulated under other statutes fall outside the "virtual asset" definition.

What about derivatives?

This is the key nuance for an operator: the VAUPA is primarily a user-protection and anti-market-abuse framework, not a green light for crypto derivatives. Korea has historically restricted crypto derivatives for retail investors, and the first phase of regulation doesn't establish a derivatives-venue licensing regime. Any derivatives strategy in Korea has to be scoped against that reality and current KYC/AML obligations, with qualified local counsel.

Korea in the global picture

South Korea joins the group of Asian markets building formal crypto regimes — compare it against Japan's FSA framework and the broader Global Licensing Guide. As elsewhere, licensing and user-protection rules sit on top of travel-rule and AML obligations, not instead of them.

The takeaway

South Korea's VAUPA gives one of the world's most active crypto markets its first dedicated law — protecting user assets and banning market abuse under FSC oversight, effective July 2024. It's a user-protection foundation rather than a full derivatives-licensing regime, and a broader second phase is still taking shape. For operators, Korea is a large, now-regulated market whose rules are real but not yet complete.

Sources

1. Act on the Protection of Virtual Asset Users to take effect July 19 — FSC (Korea)
2. Financial Services Commission — English portal — FSC (Korea)

This is general information, not legal advice. Korean crypto regulation is evolving and fact-specific; obtain qualified Korean legal counsel before acting. As of 2026.