South Korea Fines Korbit $1.88 Million for Major Compliance Failures

South Korea’s Financial Intelligence Unit (FIU) has imposed a fine of 2.73 billion won (approximately $1.88 million) on the cryptocurrency exchange Korbit for significant failures in its anti-money laundering (AML) and customer verification processes. The decision follows an inspection that uncovered nearly 22,000 compliance violations, raising concerns over Korbit’s adherence to regulations designed to prevent financial crime.

This enforcement action is particularly noteworthy as it comes at a time of increasing regulatory scrutiny for Korbit, which is one of South Korea’s longest-operating exchanges. The FIU announced the penalty on December 31, 2024, signaling a stern warning to the broader cryptocurrency industry as it faces intensified oversight.

Inspection Uncovers Widespread Violations

The compliance violations were identified during an FIU inspection conducted from October 16 to 29, 2024. Following this on-site review, the Sanctions Review Committee evaluated the findings, leading to the issuance of the fine and an institutional warning to Korbit. The exchange’s senior leadership is also held accountable; the CEO received a caution, while the reporting officer was reprimanded.

Most of the violations stemmed from deficiencies in Korbit’s customer due diligence (CDD) protocols. According to the FIU, approximately 12,800 cases involved inadequate identity verification. These failures included accepting ambiguous or unverifiable identification documents, incomplete address details, and neglecting to perform necessary re-verifications. In some instances, users were allowed to continue trading despite their risk levels increasing, without undergoing additional checks.

Additionally, another 9,100 cases involved users trading before completing the verification process, which contravened regulations prohibiting transactions by unverified individuals.

Regulatory Concerns Extend Beyond Verification

The FIU also highlighted 19 virtual asset transfers associated with three overseas virtual asset service providers (VASPs) that Korbit failed to report properly. This breach violates South Korean laws concerning transactions with unregistered foreign entities. Furthermore, the FIU identified 655 cases where Korbit did not conduct mandatory money laundering risk assessments before introducing new transaction types, including services related to non-fungible tokens (NFTs).

This enforcement action arrives shortly after reports indicated that Mirae Asset is in discussions to acquire a 92% stake in Korbit for approximately 140 billion won (around $97 million). Currently, Korbit ranks as the fourth-largest exchange among South Korea’s six registered cryptocurrency platforms.

The FIU has stated that comprehensive details regarding the sanctions will be made public following a mandatory 10-day period for opinion submissions. This indicates that regulatory bodies are setting a firm precedent for oversight in South Korea’s evolving cryptocurrency sector.