South Korea FIU Prepares Major Penalties for Multiple Crypto Exchanges

South Korea's Financial Intelligence Unit (FIU) is set to issue substantial penalties against several domestic cryptocurrency exchanges following a series of inspections that uncovered significant compliance lapses. The enforcement wave comes shortly after the regulator fined Dunamu—operator of Upbit—35.2 billion won in November 2025 for failures related to customer identification and transaction-reporting procedures.

According to industry sources, Korbit, Gopax, Bithumb and Coinone are next in line for sanctions. The FIU is reportedly applying a first-in, first-out approach based on inspection dates, placing Korbit and Gopax at the front of the queue. Bithumb, whose review is expected to require an additional inspection, may face delayed action.

Regulatory documents and inspection findings indicate that the compliance shortcomings mirror those identified at Dunamu. These include weaknesses in KYC and identity-verification processes, insufficient restrictions on transactions when customer information was incomplete, and breaches of South Korea's version of the Travel Rule governing crypto transfers. Penalties for the next group of exchanges are expected to be similarly severe, potentially reaching "tens of billions of won" per platform.

The FIU's tightened stance reflects broader concerns over money-laundering risks, unreported cross-border flows and systemic vulnerabilities associated with large trading venues. The agency has signaled that it intends to push the virtual-asset sector toward stronger institutional discipline and more rigorous internal controls.

For exchanges under scrutiny, financial costs may be only part of the impact. Reputational damage could affect customer acquisition, liquidity and relationships with banking partners. Smaller firms may struggle to keep pace if larger competitors are forced to undertake extensive compliance overhauls, potentially reshaping market-share dynamics.

The enforcement trend also carries implications for derivatives and futures platforms serving Korean users. Tighter oversight on spot-exchange operations may influence liquidity sourcing, counterparty assessments and the broader risk environment. Market participants are being encouraged to review their own KYC and AML frameworks in anticipation of further regulatory tightening.

Observers are watching for formal penalty announcements, as well as responses from Korbit, Gopax, Bithumb and Coinone. The scale of sanctions—and whether they lead to operational restrictions—may determine how significantly the domestic exchange landscape shifts. As one industry source noted, the regulator's actions mark a transition "from guidance to enforcement," establishing a precedent that could influence crypto regulatory strategies beyond South Korea.

The FIU's upcoming decisions are expected to serve as a key benchmark for how virtual-asset compliance failures will be addressed going forward, with industry participants preparing for heightened scrutiny and higher governance expectations.