Regulators in South Korea have intensified their crackdown on crypto exchanges, delivering a record 36.8 billion won fine and a six-month partial suspension to Bithumb after a comprehensive AML audit. The Financial Intelligence Unit (FIU) under the Financial Services Commission (FSC) disclosed findings of about 6.65 million AML violations during the inspection, spanning gaps in customer identity verification, transaction restrictions, and record-keeping. In addition, authorities flagged 45,772 crypto transfers tied to 18 unregistered overseas virtual asset service providers (VASPs), underscoring regulatory concerns about cross-border activity in the sector. The penalties were issued following a sanctions deliberation committee’s review of Bithumb’s compliance with the Act on Reporting and Use of Specific Financial Transaction Information, marking the largest fine to date imposed on a South Korean crypto exchange and signaling a broader, ongoing regulatory push across the domestic market.

Key takeaways

Bithumb received a 36.8 billion won penalty and a six-month partial ban on processing external transfers for new customers.
The six-month ban runs from March 27 to September 26; existing users are not restricted, and new customers can still trade, deposit, or withdraw won.
The FIU had repeatedly warned Bithumb to halt dealings with unregistered overseas VASPs, but the exchange did not implement effective blocking measures.
The enforcement wave extends beyond Bithumb, with Upbit previously hit by a three-month ban for new clients and a 35.2 billion won penalty in February 2025.
Korbit later faced AML-related penalties, including a 2.73 billion won fine and an institutional warning in December 2025, illustrating a widening crackdown across major Korean exchanges.

Market context: The Bithumb action sits within a broader Korean initiative to curb AML/CTF risks in digital assets, a trend that has pressed exchanges to tighten know-your-customer and transaction-monitoring controls. The crackdown aligns with ongoing regulatory discussions and enforcement that signal higher compliance costs and operational adjustments for venue operators. In parallel coverage, reports have highlighted government plans to leverage artificial intelligence for crypto tax enforcement, underscoring a shift toward tech-enabled oversight in Korea’s crypto markets. See coverage noting AI-driven tax tracking for crypto gains: South Korea plans to use AI for crypto tax enforcement.

Why it matters

The immediate impact is a clearer demonstration that South Korea intends to enforce AML rules aggressively across its crypto ecosystem. For Bithumb, the sanction will not only affect its balance sheet but could also influence user trust and future licensing discussions as the exchange seeks to restore regulatory alignment. The six-month partial ban specifically restricts a key channel for onboarding new users—external transfers—while allowing ongoing operations for existing customers, a nuance that highlights how regulators tailor penalties to minimize disruption for current users while signaling deterrence for non-compliant practices.

The broader significance lies in the regulatory signal it sends to the global crypto community. As the Korean authorities pursue cross-border compliance more assertively, exchanges operating in the region are compelled to tighten their AML programs, KYC checks, and monitoring systems. The penalties levied on Upbit and Korbit in the preceding months reinforce that this is not a single case but part of a systematic crackdown. The evolving landscape may influence liquidity dynamics, compliance costs, and the strategic decisions of exchanges seeking to balance growth with robust risk controls.

What to watch next

Monitor whether Bithumb completes the required AML remediation steps by the end of the six-month period (March 27 to September 26) and how the regulator assesses ongoing compliance.
Assess subsequent regulatory updates or clarifications from the FIU or FSC regarding procedures to block transactions with unregistered overseas VASPs.
Observe whether other exchange operators adjust their customer onboarding and cross-border transaction policies in response to the Upbit and Korbit penalties.
Track any additional enforcement actions or penalties announced in 2025 and beyond as part of Korea’s broader AML drive against crypto firms.

Sources & verification

Yonhap News Agency reporting on the 6.65 million AML violations and 45,772 transfers involving 18 unregistered overseas VASPs.
Financial Intelligence Unit (FIU) sanctions deliberation committee decisions and related proceedings.
FIU preliminary notice dated March 9, 2025, regarding a six-month partial suspension for Bithumb.
February 2025 reporting on Upbit’s three-month ban for new clients and a 35.2 billion won penalty.
December 2025 updates on Korbit penalties, including a 2.73 billion won fine and an institutional warning.

South Korea’s AML crackdown hits Bithumb: details and implications

The episode surrounding Bithumb reflects a methodical tightening of South Korea’s regulatory grip on crypto exchanges. The FIU’s findings paint a picture of a system grappling with the scale and speed of crypto-enabled activity, particularly when transactions cross national borders. The identified 6.65 million AML violations covered multiple facets of compliance, including know-your-customer verifications that failed to meet standards and gaps in preserving the transactional trails that regulators rely on to detect suspicious activity. In parallel, the revelation of 45,772 transfers involving 18 unregistered overseas VASPs highlights a specific risk area: cross-border liquidity channels that may escape standard domestic oversight without robust cross-border collaboration and verification mechanisms.

From a regulatory design perspective, the sanctions were anchored in the Act on Reporting and Use of Specific Financial Transaction Information, signaling that enforcement will continue to be anchored in established financial-transaction reporting frameworks. The six-month ban on processing external transfers for new Bithumb customers is a staged approach: it curtails onboarding pathways that regulators are most concerned about while allowing ongoing operations to avoid a complete shutdown that could destabilize market access for existing users. The precise window—March 27 through September 26—offers a finite period for Bithumb to demonstrate that its controls have improved to prevent new client onboarding through unregistered cross-border channels.

These measures are not isolated. They sit within a broader pattern of penalties that the FIU has directed at other major Korean exchanges in recent years, including Upbit and Korbit, each facing penalties tied to deficiencies in AML and customer verification. This pattern suggests regulators are signaling that non-compliance will carry meaningful consequences, regardless of exchange size or market share. The resulting regulatory friction could drive consolidation toward platforms that demonstrate stronger AML capabilities, while heightening operational costs for participants who must upgrade KYC systems, transaction monitoring, and regulatory reporting to align with evolving standards.