Korbit Slapped with Nearly $2 Million Fine for Systemic AML and KYC Breakdowns

Another crypto exchange learns the hard way—regulators aren't playing around.
Korbit, a major South Korean trading platform, just got hit with a massive penalty. The Financial Services Commission (FSA) dropped the hammer for what it calls 'widespread failures' in anti-money laundering (AML) and know-your-customer (KYC) protocols. The fine? A cool $2 million. That's not just a slap on the wrist; it's a statement.
The Core Violations
The regulators didn't mince words. The investigation uncovered gaping holes in Korbit's compliance framework. We're talking about inadequate customer verification processes, insufficient transaction monitoring, and systemic lapses in reporting suspicious activity. In short, the very systems designed to keep the bad actors out were, by the FSA's account, full of holes.
Why This Matters for the Sector
This isn't an isolated incident. It's part of a global crackdown. Exchanges can't just be fast and sleek anymore—they have to be bulletproof on compliance. The 'move fast and break things' Silicon Valley mantra breaks down spectacularly when you're dealing with financial regulators who have subpoena power and a low tolerance for excuses. For investors, it's a stark reminder: the legitimacy of your chosen platform matters as much as its trading fees.
A Costly Lesson in Compliance 101
Korbit now faces the dual challenge of paying the fine and overhauling its entire compliance operation under the watchful eye of the authorities. The real cost isn't just the $2 million—it's the operational overhaul, the reputational damage, and the lost trust. It's a masterclass in how cutting corners on the 'boring' regulatory stuff can lead to a very exciting—and expensive—headline.
In the end, the market matures one painful, multi-million dollar lesson at a time. Just another day in the wild world of crypto finance—where sometimes, the most volatile thing isn't the price, but a regulator's patience.
The fine shakes up Korbit’s market presence in South Korea
The Financial Intelligence Unit levied the penalties after finding that the company had broken many regulations for monitoring transactions. The FIU gave Korbit a warning along with the fine.
Responsibility was also placed on senior leadership, with the exchange’s CEO receiving a caution and the reporting officer receiving a reprimand.
According to the FIU, around 12,800 cases involved improper identity verification. These included accepting unclear or unverifiable ID documents, incomplete address information, and failures to carry out required re-verification.
Another 9,100 cases involved users being permitted to trade before verification was fully completed, violating rules that restrict transactions by unverified customers.
Regulators also flagged 19 virtual asset transfers involving three overseas virtual asset service providers (VASPs) that were not properly reported. This was a breach of Korea’s rules regarding the handling of unregistered foreign entities.
Additionally, the FIU identified 655 cases where Korbit failed to conduct mandatory money laundering risk assessments before introducing new transaction types, including NFT-related services.
The fine is a major blow for Korbit, as the firm’s average daily trading volume has shrunk to just above the $12 million mark this year, representing a mere 0.5% of the South Korean market. This is below the country’s major exchange, Upbit, which consistently commands a market share of approximately 70% to over 80% of the total trading volume.
At the same time, Korbit is preparing for a potential change in ownership. The exchange is currently majority owned by gaming giant Nexon through its holding firm NXC, with a subsidiary of SK holding about one-third of the shares.
Securities firm Mirae Asset is reportedly in talks to acquire Korbit. A local newspaper, Chosun Ilbo, reported a preliminary memorandum of understanding valued between $68 million and $95 million. However, final terms have not yet been confirmed.
South Korea’s anti-fraud efforts outweigh regulatory clarity, weakening the crypto sector
In their efforts to curb crypto fraud, the South Korean government has nearly $61.4 million worth of digital assets across several crypto trading platforms over the past 6 years, Cryptopolitan reported. This includes $37.4 million worth of crypto assets affected by Bithumb’s 2020 suspension of withdrawals.
They also froze crypto assets worth $18.9 million across 30,106 cases between 2020 and September 2025. The regulator froze another $4.4 million worth of crypto, which was blocked on the Coinone exchange in connection with 755 cases. Nearly $296,000, involving 529 cases, was also frozen on Korbit, while a further $222,000, involving around 280 cases of non-compliance with the region.
Meanwhile, concerns are growing within the domestic virtual asset market as the release of guidelines allowing corporations to open bank accounts for crypto transactions has been delayed beyond its planned timeline.
“The delay in releasing the guidelines for corporate virtual asset accounts stems from the substantial workload involved in drafting the new legislation,” an FSC official said. “While we are reviewing the guidelines in parallel, our limited workforce means resources are concentrated on priority tasks, making it difficult to specify a clear timeline.”
On-chain data showed that the combined 24-hour trading volume of Korea’s five major won-based crypto exchanges, including Upbit, Bithumb, Coinone, Korbit, and Gopax, totaled $2.39 billion as of 1 p.m. Friday. This represented an about 82% drop from the $13 billion recorded on the same day a year earlier.
If you're reading this, you’re already ahead. Stay there with our newsletter.