Japan’s Financial Services Agency (FSA) has moved against seven cryptocurrency exchanges, ordering two of them to suspend operations as the regulator tightened oversight in the wake of the Coincheck hack. The action underscores Japan’s growing concern that weaknesses in internal controls, customer asset protection, and anti-money-laundering compliance could leave the market exposed to another major security failure.
According to the regulator’s announcement, Bit Station and FSHO were instructed to halt business from March 8 through April 7. Both firms were classified as quasi-operators, meaning they had been allowed to operate while their registration applications were still under review. In addition to the suspension, the FSA required the two exchanges to submit business improvement plans by March 22.
Seven Exchanges Targeted in Broad Regulatory Action
The enforcement action did not stop with the two suspended operators. The FSA also issued business improvement orders to Tech Bureau, GMO Coin, Lemuria Bitcoin Exchange (Bitcrements), Mister Exchange, and Coincheck. Of these, Tech Bureau and GMO Coin were fully licensed exchanges, while the remaining three were quasi-operators still awaiting final registration approval.
The sweep came as Japan’s regulatory framework for digital asset trading continued to evolve under the revised Payment Services Act, which took effect in April of the previous year. Since then, crypto exchanges have been required to register with the FSA. At the time of the report, 16 exchanges had received full licenses, while 16 more were operating as quasi-operators. In addition, reports indicated that more than 100 companies were seeking entry into the sector and hoping to launch their own crypto trading businesses.
That backdrop helps explain why the regulator’s intervention mattered beyond the seven firms directly named. Japan had emerged as one of the most active and closely watched crypto markets in the world, and any sign of weak supervision risked undermining public confidence in the industry’s long-term legitimacy.
Inspections Intensified After the Coincheck Hack
The immediate trigger for the crackdown was the large-scale hack at Coincheck in January. After that incident, the FSA began inspecting crypto exchanges across the country. The inspection campaign reportedly covered several of Japan’s licensed exchanges as well as all operators that had not yet completed formal registration.
What regulators found was troubling. The inspections revealed shortcomings in customer protection measures and anti-money-laundering controls, raising fears that another Coincheck-style breach could occur if the problems were not addressed quickly. According to reports cited in the original coverage, the FSA viewed five of the unregistered operators involved in the review as especially problematic.
Those firms were effectively given two paths forward: meet the agency’s standards and complete registration, or withdraw their applications. The message was clear—continued operation in Japan’s crypto sector would depend not only on market demand, but on the ability to demonstrate governance, risk controls, and operational discipline.
Misuse of Customer Assets Drew Particular Concern
Among the most serious findings was the case of Bit Station. Reuters reported that a senior employee at the exchange had been found to have used customers’ bitcoin holdings for personal purposes. That allegation elevated the issue beyond weak controls and into direct misuse of client assets, one of the most damaging failures for any financial platform.
The report also noted that Bit Station had withdrawn its application to become an authorized exchange. In practical terms, that development suggested the company’s path toward full regulatory approval had collapsed under the weight of the findings.
For regulators, customer asset segregation and custody discipline are foundational requirements. Any breach of those principles can rapidly destroy trust, especially in a sector already under pressure from hacks, operational failures, and uneven compliance practices. The Bit Station case therefore became one of the clearest examples of why the FSA chose to intervene so forcefully.
Coincheck Remains Under Scrutiny, but Repayment Funds Verified
Coincheck, which was also ordered to improve its business practices, remained at the center of the broader regulatory response. In January, the exchange lost 58 billion yen worth of NEM tokens—approximately $550 million at the time—in one of the largest crypto thefts on record. The event shook the wider digital asset market and intensified questions about exchange security across Japan.
Following the hack, the FSA issued Coincheck a business improvement order and demanded that the company strengthen oversight and management of the systems implicated in the breach. Beyond technical failures, the case raised concerns about whether exchanges were scaling faster than their internal controls could support.
One of the market’s biggest questions after the attack was whether Coincheck had the financial capacity to compensate affected users. The FSA said it had verified that the exchange had sufficient funds to repay customers as promised. That confirmation addressed a major uncertainty hanging over the case, even as broader concerns about supervision and risk management remained unresolved.
A Defining Moment for Japan’s Crypto Oversight
The coordinated punishment of seven exchanges marked a significant moment in Japan’s approach to crypto regulation. Rather than treating the Coincheck breach as an isolated failure, the FSA used the aftermath to conduct a wider review of operational practices across the sector. The result was a more aggressive assertion of regulatory authority, especially toward firms seen as weak on consumer safeguards or compliance procedures.
The move also highlighted the challenge facing fast-growing crypto markets: balancing innovation with the discipline expected in mainstream financial services. Japan had already been seen as relatively open to digital assets compared with many other jurisdictions. But the latest enforcement action showed that openness would be matched with rising expectations around accountability.
For exchanges operating in the country, the lesson was unmistakable. Registration status alone would not be enough. Firms would need to prove they could protect customer assets, maintain effective compliance systems, and respond to regulatory scrutiny with credible improvements. For users, the crackdown signaled that authorities were willing to intervene directly when those standards were not met.
In the near term, the FSA’s actions were aimed at restoring confidence after a market-shaking hack. In the longer term, they may be remembered as part of the process by which Japan pushed its crypto industry toward stricter governance and more formalized oversight.