South Korea Eliminates Crypto Travel Rule Threshold, Tightens Self-Custody Rules

South Korea's Cabinet just zeroed out the last operational privacy gap inside its regulated crypto system, and the rules for moving bitcoin to a personal wallet got harder at the same time.

Key takeaways

• South Korea's Cabinet approved removing the 1 million won (~$720) Travel Rule threshold on August 11, 2026; the rule will cover every VASP-to-VASP transfer, regardless of amount, starting February 20, 2027.
• The same decree adds a risk-tiered regime for transfers to overseas exchanges and personal wallets, including an outright ban on transactions with counterparties deemed high-risk.
• Korea's Financial Intelligence Unit has reportedly found that only 3.1% of suspicious transaction reports are forwarded to investigators, raising pointed questions about the real cost-to-yield ratio of the surveillance apparatus being expanded here.

South Korea's Cabinet approved amendments to the Enforcement Decree of the Act on Reporting and Using Specified Financial Transaction Information on August 11, 2026, eliminating the existing 1 million won (~$720) minimum that had exempted small crypto transfers from Travel Rule information-sharing requirements. Under the change, every transfer between registered virtual asset service providers is covered, with no floor. Receiving platforms must obtain sender and recipient information and may reject transactions when required data is unavailable.

The Korea Financial Intelligence Unit reportedly cited a specific circumvention pattern as justification: a user deposited approximately 200 million won into an exchange, purchased USDT, then executed 216 separate withdrawals each just under the 1 million won threshold to avoid triggering the rule. The revised decree closes that window. No English-language government press release for the specific decree was publicly available at time of publication; the decree was first reported in English by Cointelegraph.

The Threshold Was the Last Escape Valve

The 1 million won carve-out was the only remaining operational gap inside the Korean VASP surveillance perimeter. Stacking small amounts on an exchange and moving them in sub-threshold increments was a real, if modest, exit.

That option is now gone. Any bitcoin held on a Korean registered exchange is permanently inside the documentation system, from the first satoshi.

The more consequential piece of the decree is what it does to the path out. The amendments introduce a risk-tiered regime for transfers involving overseas exchanges and personal wallets. Low-risk overseas exchanges remain permitted. Transfers to other foreign exchanges and personal wallets are generally allowed only when the sender and recipient are the same person.

Transfers to counterparties deemed high-risk are prohibited outright. Korean VASPs must also implement suspicious transaction monitoring systems for transfers of at least 10 million won involving foreign exchanges or personal wallets.

For a Korean bitcoiner who wants to move to cold storage, the practical question is how exchanges implement the "same person" rule. If it requires meaningful identity verification and documentation before a withdrawal to a personal wallet clears, that is a direct friction cost on self-custody as an exit. It is not a ban, but it is a wall. The decree also tightens VASP registration standards: financial health, internal controls, staffing, infrastructure, and major shareholder scrutiny are all brought under closer review.

The Math the AML Justification Has to Clear

If the FIU's own data, cited in Korean financial press, reportedly shows only 3.1% of suspicious transaction reports are forwarded to investigative agencies, the arithmetic underlying this entire regulatory project needs scrutiny. The compliance burden imposed on every Korean VASP and every Korean crypto user is 100%. The investigative yield, by the FIU's own accounting, is reportedly 3.1%. That ratio does not tell you the framework is useless, but it does tell you the cost is not being borne where the benefit lands.

South Korea was the first jurisdiction to legally implement the Travel Rule and is now the first to eliminate the de minimis floor entirely. The FATF has been pushing member states in this direction for years. This is a policy template other FATF-compliant jurisdictions are watching. Korea is also running a CBDC pilot in parallel, sitting inside the same architecture: total visibility into who holds what and where it moves.

The thesis here is simple. Once any threshold exists inside a FATF-compliant VASP regime, the state will eventually close it. Korea just confirmed that with a live example. The only durable answer for a Bitcoiner is self-custody, and Korea just made that exit more complicated, not impossible, but more complicated.

The trigger that revises this read: if the "same person" rule for personal wallet withdrawals is implemented with a lightweight self-certification process that requires no meaningful ID upload or waiting period, and if Korean on-chain self-custody volume rises rather than falls in the six months after February 2027 implementation, the friction cost is lower than it appears today.

Industry group DAXA (Digital Asset eXchange Alliance) opposed the mandatory suspicious transaction reporting threshold, calling it an excessive compliance burden. Its objection did not change the outcome.

What to Watch Through February 2027

VASP registration provisions take effect August 20, 2026. Existing providers get up to one additional year to comply with certain financial, staffing, infrastructure, and internal control requirements. The expanded Travel Rule and transfer-related AML requirements take effect six months after promulgation, approximately February 20, 2027.

The interval between now and February matters. How Korean exchanges implement the same-person rule for personal wallet withdrawals will determine whether cold storage remains a practical exit for ordinary users or becomes a compliance process. Watch for exchange-level policy announcements and any guidance from the KoFIU or FSC on implementation standards before year-end.

Sources

• Korea Financial Intelligence Unit (KoFIU), general homepage; no specific press release for this decree was publicly available at time of publication
• Financial Services Commission (FSC) press releases, general press release index; no specific release for this decree was publicly available at time of publication
• First reported in English by Cointelegraph (Yohan Yun, August 11, 2026)