BitcoinLibertySecurity

Buying Bitcoin in Korea and Walking It Out of the Exchange

A practical guide for South Korean residents on buying Bitcoin - real-name account requirements, comparison of Upbit, Bithumb, Coinone, and Korbit, KYC and Travel Rule navigation, tax obligations under the 2025 framework, and the essential final step of moving Bitcoin off the exchange to your own wallet. The exchange is the on-ramp, not the destination.

· 19min

Buying Bitcoin in Korea is more constrained than in almost any other developed market. The combination of real-name banking rules, the Travel Rule, mandatory exchange KYC, restrictive deposit and withdrawal policies, and the 2025 cryptocurrency tax framework has produced an environment where a Korean resident cannot simply walk into the international market the way a US, Japanese, or European resident can. Every Korean Bitcoin holder navigates these rails on the way in. The question is whether they also stay on those rails - or whether they treat the Korean exchange as what it is, an on-ramp, and move their Bitcoin to a wallet they actually control.

This guide walks through the practical mechanics of buying Bitcoin in Korea: choosing among Upbit, Bithumb, Coinone, and Korbit; satisfying the real-name account requirement; clearing KYC and the Travel Rule; understanding the 2025 tax framework; and then doing the one thing that separates owning Bitcoin from holding an IOU on a regulated entity - moving it off the exchange to a wallet only you control.

If you only read one section of this article, read the last one.

The Korean Exchange Landscape

Korea has four exchanges authorized to operate fiat (KRW) on/off ramps under partnerships with named banks. Other crypto-only exchanges exist but cannot accept won deposits directly. The four real-name partnered exchanges as of 2026 are:

Upbit - Partnered with K Bank. Largest by Korean volume. Cleanest UX. Highest international integration. Default choice for most retail buyers.

Bithumb - Partnered with NH Bank. Second largest. Long history (one of Korea's earliest exchanges). Has had multiple security incidents and regulatory issues but remains popular.

Coinone - Partnered with Kakao Bank. Smaller, more conservative listing policy. Tends to focus on major coins rather than long-tail altcoins.

Korbit - Partnered with Shinhan Bank. The smallest of the four by volume but among the oldest. Acquired by NXC (Nexon's holding company) and operates more like a financial institution than a crypto-native exchange.

Each exchange's identity is shaped less by what they do differently and more by which bank they pair with - because the bank-paired real-name account is the only way to fund the exchange with won, and switching exchanges generally means switching banks.

For a first-time Korean buyer, the question of which exchange is largely a question of which bank you already have or are willing to open. There is no compelling product differentiation among the four for routine Bitcoin buying. Pick the one whose partner bank fits your existing financial life.

The Real-Name Account Requirement

Korea's "real-name verification system" (실명확인 입출금계정 서비스) requires that every won deposit and withdrawal at a virtual asset exchange go through a bank account verified to be in the same person's name as the exchange account, at the exchange's specific partner bank.

Practically, this means:

  1. You open a personal account at the exchange's partner bank (K Bank for Upbit, NH for Bithumb, Kakao Bank for Coinone, Shinhan for Korbit) if you don't already have one.
  2. You complete KYC at the exchange - government ID, phone number verification, residence verification.
  3. The exchange links your bank account to your exchange account through the bank's API.
  4. Won deposits and withdrawals can only flow between this paired bank account and the exchange.

You cannot deposit won from a different bank, send won to a friend's account, or receive won from someone else's account. Foreign residents face additional friction; non-Koreans need an Alien Registration Card and meet stricter verification requirements, and several exchanges restrict or refuse non-Korean accounts entirely.

This system was introduced after the 2017-2018 boom to combat money laundering and price manipulation through "ghost accounts." It has succeeded at that goal at the cost of making the on-ramp narrower and more surveilled than in any major Western market.

Buying Your First Bitcoin: Step by Step

Once you have an exchange account paired with the matching bank, the actual purchase is straightforward.

Step 1: Deposit won. Transfer KRW from your real-name bank account to the exchange. The first deposit may have a holding period (typically 24-72 hours) before you can withdraw the resulting Bitcoin off the exchange. This is a regulatory holdback designed to slow money laundering and is unavoidable.

Step 2: Place the order. Each of the four exchanges has a market order option (instant fill at best available price) and a limit order option (specify your price). For small purchases, market orders are fine. For larger purchases, limit orders avoid slippage and the "kimchi premium" effect of buying into a domestic price spike.

Step 3: Verify the trade. The Bitcoin sits in your exchange wallet. You now own Bitcoin in a legal sense - but practically, you own a balance in a database controlled by the exchange. The exchange holds the actual Bitcoin in its custody. This distinction matters more than almost anything else in this guide.

Step 4: Wait out the holdback. New users typically have a 24-72 hour or 7 day holdback before they can withdraw the Bitcoin. Use this time to set up your self-custody wallet (see below).

Step 5: Withdraw to your own wallet. This is the step that converts a Bitcoin balance on a Korean exchange into actual Bitcoin that you control. Most Korean buyers skip this step and leave their Bitcoin on the exchange indefinitely. This is a mistake that we will address at length.

Costs: Fees, Spread, and the Kimchi Premium

The visible fees on Korean exchanges are competitive: typically 0.05% to 0.25% per trade, with maker/taker variations and discounts for paying with the exchange's loyalty token. These are not the main cost.

The hidden costs are:

Kimchi premium. Korean Bitcoin prices have historically traded at a premium to global prices, sometimes by 5-10% during retail buying frenzies. This is structural - capital flows out of Korea are restricted, so the won-denominated Bitcoin price cannot easily arbitrage to the global price when Korean demand surges. When the kimchi premium is positive, you are paying more than international price; when it is negative (which happens during outflow-driven panics), you are paying less. Long-term, the average should approximate zero, but at any given moment it can be material.

Withdrawal fees. When you withdraw Bitcoin from a Korean exchange to your own wallet, the exchange charges a flat Bitcoin fee that is typically 1.5-3x the actual on-chain miner fee. This is one of the operational costs of self-custody and is a one-time charge per withdrawal.

Spread on illiquid pairs. For Bitcoin specifically, spreads are tight. For altcoins or smaller cap tokens, spreads can be much wider than visible fees suggest.

The total cost of buying 1 BTC and withdrawing it to a hardware wallet is typically 0.3-1% above the global price, with most of that being the kimchi premium.

The Travel Rule: 100만원 and What It Means

Under Korean Financial Intelligence Unit (KoFIU) regulations effective March 2022, transfers of cryptocurrency valued at 1 million KRW or more between virtual asset service providers (VASPs) require the sending VASP to collect, verify, and transmit information about the sender and recipient to the receiving VASP. This is Korea's implementation of the FATF Travel Rule.

Practically, this means:

  • A withdrawal of 1 million KRW or more (about $750 USD) from your Korean exchange to another exchange (Korean or international) requires the destination exchange to be in Korean exchanges' approved Travel Rule partner list, OR you need to provide additional KYC details that the destination supports collecting and reporting.
  • A withdrawal to a personal wallet (your own hardware wallet) is generally treated differently. Under most Korean exchange policies, withdrawing 1 million KRW or more to a personal (non-VASP) wallet requires you to declare the wallet as your own and may require additional verification (such as proof that the wallet belongs to you, sometimes through a small test transaction).

The Travel Rule has been used by Korean exchanges to restrict withdrawals in ways that go beyond the literal regulation. Some exchanges have at various times refused to process withdrawals to specific destinations, required burdensome verification, or held withdrawals for extended manual review. This friction is a feature from the regulator's perspective and a bug from the user's perspective. Plan around it.

The practical implication: you may want to register your personal hardware wallet address with the exchange before attempting a withdrawal. Each exchange has a process for this. Doing it once cleanly avoids repeated friction on every withdrawal.

Taxes: The 2025 Framework

After multiple postponements, Korea's cryptocurrency tax framework took effect on January 1, 2025. The key provisions:

  • Gains from cryptocurrency exceeding 2.5 million KRW per year are taxed at 20% (plus 2% local tax for an effective 22%).
  • Losses can offset gains within the same tax year but cannot be carried forward.
  • Cryptocurrency is classified as "other income" (기타소득) rather than capital gains.
  • Domestic exchanges report transactions automatically; foreign exchanges and personal wallets require self-declaration.
  • Holdings on foreign exchanges exceeding 500 million KRW must be reported separately to the tax authority.

For a buyer who acquires Bitcoin on a Korean exchange and holds it (regardless of whether on the exchange or in their own wallet), no tax event occurs at purchase. Tax only arises on disposal - a sale, an exchange for another asset, or use to pay for goods or services.

A complete record of cost basis is essential. The Korean exchanges' transaction histories are the starting point but should be exported and stored independently because exchanges are not required to retain records indefinitely. For Bitcoin moved to self-custody, the cost basis travels with you and must be tracked in your own records.

Why You Must Move Bitcoin Off the Exchange

Now we arrive at the part that most Korean Bitcoin buyers skip and that most articles about buying Bitcoin in Korea fail to emphasize.

Bitcoin held on a Korean exchange is not Bitcoin you own. It is a database entry on a regulated intermediary. The exchange has custody. The exchange controls withdrawal. The exchange can be hacked, can be ordered to freeze your account, can suffer a regulatory action that halts withdrawals, can go insolvent. None of these are theoretical.

Lessons from the global record

Mt. Gox. Once the largest Bitcoin exchange in the world, headquartered in Japan. Lost 850,000 BTC in 2014. Customers spent the next decade in bankruptcy proceedings. Some have recovered partial amounts; many have not.

FTX. A nominally regulated US-adjacent exchange that collapsed in November 2022 with billions in customer funds missing. Founder convicted of fraud. The customers who had withdrawn their assets to self-custody before the collapse kept their Bitcoin. The customers who trusted the exchange did not.

Celsius, Voyager, BlockFi. A wave of yield platforms that turned out to be lending customer funds against their own books. All three failed, freezing customer assets for months or years.

QuadrigaCX. A Canadian exchange whose CEO died with the exchange's wallet keys, leaving customers without recourse to their funds.

These were not isolated incidents. They were the predictable outcome of trusting custodial intermediaries with bearer instruments. Bitcoin's design exists specifically to remove that trust requirement. Holding Bitcoin on an exchange voluntarily reintroduces every counterparty risk that Bitcoin was designed to eliminate.

Korea-specific exchange risks

Korean exchanges have not escaped this pattern, and several risks are uniquely heightened by Korean regulation.

Government can compel asset freezing. Under Korean financial regulations, the FIU and tax authorities can compel an exchange to freeze accounts under suspicion of money laundering, tax evasion, or other offenses. Self-custodied Bitcoin is much harder for any party to seize without due process and often impossible without your cooperation.

Exchanges face ongoing regulatory upheaval. The Virtual Asset User Protection Act (가상자산이용자보호법) took effect in July 2024. The framework continues to evolve. An exchange that is compliant today may face new requirements that disrupt operations, restrict listings, or impose extended withdrawal holds.

Bank partnership dependencies. Each Korean exchange depends on its single banking partner for the on/off-ramp. If that bank ends the partnership (it has happened), the exchange's customers face a forced migration with all the accompanying friction. If you have already moved to self-custody, you have nothing on the exchange to migrate.

KRW-only treasury. When you hold Bitcoin on a Korean exchange, your effective ability to convert it back to fiat is locked to KRW through that single banking partner. This is fine for most use cases but disastrous in any scenario where you want to move value internationally without going through Korean banking surveillance.

Domestic price isolation. The kimchi premium that benefits buyers when negative also harms sellers when negative. Bitcoin held on a Korean exchange can only be sold at the Korean price. Bitcoin held in self-custody can be sold or used anywhere.

Tax surveillance is easier. Bitcoin on a Korean exchange is fully visible to the tax authority through the exchange's mandated reporting. This is not a reason to evade taxes - which carries severe consequences - but it is a reason to understand that the exchange custody model maximizes visibility while self-custody gives you control over disclosure timing within legal limits.

Setting Up Self-Custody

Self-custody means you hold the private keys to your Bitcoin. Without your keys, no transaction can be signed. The keys exist on hardware you control. The exchange does not have them. The government does not have them. Only you can authorize a transaction.

Hardware Wallets

For amounts above a few hundred dollars, a hardware wallet is the standard self-custody approach. Hardware wallets store private keys in a dedicated secure chip that never reveals the keys to a connected computer, signs transactions internally, and is designed to remain secure even when used with a malware-infected machine.

The major options as of 2026:

Coldcard (USA, made by Coinkite) - Bitcoin-only, air-gapped option, considered the most security-focused. Premium price.

Trezor (Czech Republic, made by SatoshiLabs) - Open-source firmware, mature ecosystem, supports many coins. Two main models (Safe 3 and Safe 5).

Ledger (France) - Largest installed base. Has had a controversial customer database breach in the past. Closed-source firmware. Wide feature set.

Foundation Passport (USA) - Bitcoin-only, air-gapped via QR codes, premium build quality.

BitBox (Switzerland, made by Shift Crypto) - Open-source, simple UX, strong Swiss privacy positioning.

Jade (made by Blockstream) - Open-source, lower price point, runs Liana firmware.

For a Korean buyer, the practical considerations are:

  1. Order from the manufacturer directly, never from a third-party reseller. Tampered hardware wallets have been documented. The price difference is small. The risk of a tampered device is total.
  2. Consider customs delivery time. Korean customs is generally efficient but can add 1-3 weeks for international hardware orders.
  3. Verify the device on receipt. Each manufacturer publishes a verification procedure. Follow it.

Setting Up the Wallet

The first time you set up a hardware wallet, the device generates a seed phrase - typically 12 or 24 words drawn from a standard wordlist. This seed phrase is the master backup. Anyone who has the seed phrase can recreate the wallet on any compatible device and spend the Bitcoin. Anyone who loses the seed phrase and the original device loses access to the Bitcoin permanently.

The seed phrase must be:

  • Written down on paper or stamped into metal (never typed into a computer, photographed, or stored in a cloud service)
  • Stored somewhere physically secure
  • Backed up to a second location for redundancy (a fire or theft at one location should not eliminate access)
  • Never shared with anyone, including support staff of the wallet manufacturer

For amounts that constitute meaningful wealth, a metal backup (Cryptosteel, Blockstream's CapsuleMX, or similar) is strongly preferred over paper.

Receiving the Bitcoin

Once the wallet is set up and verified, the wallet generates a receive address. This is what you send your Bitcoin to from the Korean exchange.

The procedure:

  1. In your wallet software (Sparrow, Specter, Bitcoin Core, or the manufacturer's app), generate a fresh receive address.
  2. Verify the address on the hardware wallet's screen. This step protects against malware that could substitute an attacker's address on your computer.
  3. Copy the address to your Korean exchange's withdrawal page.
  4. Send a small test amount first. $20-50 worth. Confirm receipt in your wallet.
  5. Send the bulk transaction.
  6. Wait for confirmations (typically 1-6).
  7. Verify in your wallet that the Bitcoin has arrived.

The Korean exchange will require you to register the destination address before allowing the withdrawal under Travel Rule provisions. Follow their process. Some exchanges require a small verification deposit; others accept a self-attestation that the wallet belongs to you.

Common Pitfalls

Leaving Bitcoin on the exchange "just for now." "Just for now" becomes years. Years become forever. The exchange you trust today is not necessarily the exchange that exists in five years. Move it off.

Buying altcoins instead of Bitcoin. Korean exchanges aggressively list altcoins because they generate trading volume and fees. Most altcoins underperform Bitcoin over any meaningful timeframe and add operational complexity. If your goal is Bitcoin, buy Bitcoin.

Falling for the "easy" custodial wallet apps. A wallet app that does not give you a seed phrase you can write down is not self-custody. It is custodial dressed up as a wallet. If the company behind the app fails, your funds are at risk.

Storing the seed phrase digitally. Photographs, cloud backups, password managers, encrypted notes - all are bad. The seed phrase must be physical and offline. Anyone with malware on your computer can find a digital seed.

Not testing recovery. Every six to twelve months, practice restoring your wallet from the seed phrase to a different device (a hardware wallet you don't normally use, or wallet software like Sparrow in watch-only mode). Confirm the addresses match. A backup you have not tested is not a backup.

Sending to an exchange address as a "test." Test by sending to your own wallet address. Do not test by sending money back to the exchange.

Falling for fake support representatives. No real support representative from any exchange or hardware wallet company will ever ask for your seed phrase. Anyone who does is a thief.

Holding all Bitcoin in a single wallet on a single device. For very large amounts, multisignature setups (where signing requires multiple devices, e.g., 2-of-3) provide protection against the loss or compromise of any single device. This adds complexity but is appropriate for large balances.

A Specific Recommendation

For a Korean resident new to Bitcoin, the path that minimizes mistakes:

  1. Open an Upbit account (paired with K Bank if you don't already have a K Bank account). Upbit's UX is the cleanest among the four and the international integration is the strongest if you ever need to move.
  2. Complete real-name verification and KYC.
  3. Order a hardware wallet from the manufacturer directly. For Bitcoin-only focus and high security, Coldcard or Foundation Passport. For broader feature support and lower friction, Trezor Safe 3 or BitBox.
  4. While waiting for the hardware wallet to arrive, deposit a small amount to Upbit and place a test buy of 50,000-100,000 KRW worth of Bitcoin. Verify the trade settles correctly. Familiarize yourself with the interface.
  5. Set up the hardware wallet on receipt. Generate the seed phrase. Stamp it into metal (not paper, for amounts you would regret losing). Store the metal backup in a secure location. Make a second backup at a separate location.
  6. Register your hardware wallet's first receive address with Upbit's withdrawal whitelist.
  7. Send a small test amount (50,000 KRW worth of BTC) from Upbit to your hardware wallet. Confirm receipt.
  8. From this point, every additional purchase follows the same flow: deposit KRW, buy Bitcoin, withdraw to hardware wallet within a few days. The exchange holds your Bitcoin only for the time required by the regulatory holdback and the transaction settlement.

This is the workflow that keeps Bitcoin in your control. It is not the workflow that the exchanges advertise, because exchanges make money from Bitcoin sitting on their platforms - more trading, more fees, more captive customers. Your interest is the opposite.

The Final Point

Most Korean Bitcoin buyers, having gone through the friction of real-name verification, exchange KYC, the Travel Rule, and the won deposit holdback, view their Korean exchange account as the destination. They check the price, they think about whether to add more, and the Bitcoin sits in the exchange's database for years.

This is a misunderstanding of what Bitcoin is. The whole point of Bitcoin is that it does not require trust in an intermediary. A user who holds Bitcoin on an exchange has chosen to opt out of Bitcoin's primary innovation. They are holding a Bitcoin-denominated balance with a regulated entity, which is functionally similar to holding a Bitcoin ETF, with all the same counterparty exposure and none of the actual sovereignty.

The exchange is the on-ramp. It is not the destination. The destination is a wallet whose private keys you control, on hardware you own, with a backup you have personally tested. Until you reach that destination, you do not own Bitcoin in the sense that Bitcoin was designed to be owned. You own an IOU on a Korean financial intermediary that happens to be denominated in Bitcoin.

Every cycle leaves a trail of customers who learned this distinction the hard way - through an exchange failure, a regulatory freeze, a hack, a frozen account during inheritance, a lost claim in bankruptcy. The lesson is always the same. The customers who had withdrawn to self-custody before the event kept their Bitcoin. The customers who had not, did not.

The cost of self-custody is a few hours of setup, a one-time hardware wallet purchase of $50-200, and the discipline to maintain a backup. The benefit is that you actually own the Bitcoin you bought.

Buy on the exchange. Move it to your wallet. Repeat.

Disclaimer

This article is for educational purposes only and does not constitute financial, tax, or legal advice. Korean cryptocurrency regulation continues to evolve and may have changed since publication. Tax obligations vary by individual circumstance. Hardware wallet recommendations are based on the author's read of the current market and may shift as products evolve. Consult appropriate Korean professionals (a 세무사 for tax matters, a security-conscious technical advisor for setup) for your specific situation, especially for larger amounts.

For more on the underlying principles, see Self-Custody, Bitcoin Wallets, Cold Storage vs Hot Wallet, and Bitcoin Seed Phrase Explained. For tax specifics, see Korea Crypto Tax 2027 and Bitcoin Tax Guide.

Related