South Korea’s financial regulators—the Financial Services Commission (FSC), Financial Supervisory Service (FSS), and the Digital Asset Exchange Association (DAXA)—announced on April 8, 2026, the immediate implementation of unified and stricter internal regulations for the “Virtual Asset Withdrawal Delay System”. The move aims to close loopholes exploited by voice phishing syndicates to launder criminal proceeds through cryptocurrency exchanges.
Background: Loopholes in the Withdrawal Delay System
The withdrawal delay system was originally launched in May 2025 to prevent money mules from instantly moving stolen funds. However, a recent regulatory review revealed a critical vulnerability: individual exchanges were setting their own criteria for who could bypass these delays. According to a media statement from the FSC, data from June to September 2025 showed that 1,490 out of 2,526 fraudulent accounts (59%) were exempt from withdrawal delays. Total damages linked to these exemptions reached approximately $124 million (170.5 billion won), accounting for 75.5% of all voice phishing losses through cryptocurrencies during that period. Criminals found it easy to bypass security by meeting low-threshold criteria, such as maintaining an account for a short period or conducting a few small “wash trades” to fabricate a trading history.
New Unified Standards
Under the new mandate, all exchanges must follow a unified and stricter standard. These mandatory factors require exchanges to strictly analyze transaction frequency, total duration of the account, and cumulative deposit and withdrawal amounts. The FSC has also specified conditions under which an exception can never be granted, regardless of trading history. Simulations conducted by the FSC suggest these unified rules will slash the number of customers eligible for withdrawal exceptions by more than 99% by the end of 2025. Customers who still qualify for exceptions will face intensive monitoring, including a mandatory annual verification process to review the source of funds for all high-volume traders. Additionally, a new tracking system will be established to collect and analyze withdrawal data, allowing regulators to identify patterns of “smurfing” or rapid asset conversion that suggest criminal activity.
Ongoing Oversight and Penalties
South Korean authorities will continue to allow immediate withdrawals in cases where the need is unrelated to financial crime. The FSS and DAXA plan to conduct regular audits to ensure exchanges are not circumventing the new standards, with immediate penalties for firms found to have vague internal controls. This comprehensive regulatory tightening marks a significant step in South Korea’s efforts to combat crypto-related financial crimes, setting a precedent for other jurisdictions facing similar challenges.