Korea's Travel Rule Drops Its Won 1 Million Floor

One line was struck from the enforcement decree that cleared Korea's cabinet on August 11, 2026. It was the threshold above which a virtual asset service provider must hand over sender and receiver details when it transfers assets to another provider: one million won. With the amount gone, the duty attaches to every transfer regardless of size.

The Financial Services Commission pointed to one user's record as the reason. Over roughly three months that user bought about 200 million won of tether, then sent it out 216 times in amounts under one million won each. Under a rule with a threshold, splitting a transfer below the threshold is not a crime. It is arithmetic.

For someone who keeps bitcoin in their own wallet, though, the more consequential clause in this amendment is not about the amount. It is about personal wallets.

The Rule Came From Banking

The name goes back to a United States Bank Secrecy Act provision from the 1990s. Send 3,000 dollars or more and the originator and beneficiary details must accompany the money to the next institution. The information travels with the funds, hence the name.

The Financial Action Task Force extended the rule to virtual assets in June 2019. It added definitions of virtual assets and virtual asset service providers to the interpretive note to Recommendation 15, and confirmed that Recommendation 16, written for banks, applies to providers too. The threshold it proposed was USD or EUR 1,000.

A common misreading follows. Below the threshold does not mean no information. Above it the recommendation asks for address and date of birth as well; below it the required set shrinks to the names of both parties and their wallet identifiers. What disappears in small transfers is the number of fields, not the obligation.

Korea brought the rule into force on March 25, 2022 with the threshold set at one million won. Article 10-10 of the enforcement decree requires the sending provider to pass along both parties' names and both virtual asset addresses, and, if the Financial Intelligence Unit or the receiving provider asks, to supply identifiers such as the resident registration number within three business days. This amendment removes only the amount condition from that article.

A Blockchain Has No Field for a Name

In bank transfers the rule is easy to implement. You fill in one more field in the message. A bitcoin transaction has no such field. It consists of inputs, outputs and locking scripts, and the design has nowhere to record who sent it.

So the rule built a separate network alongside the chain. Before an exchange sends coins it passes customer details to the counterparty exchange out of band, and the transfer proceeds once the receiving side confirms. The coins travel on the chain; the names travel beside it.

In Korea that network split in two. Bithumb, Coinone and Korbit founded one, CODE. Lambda256, a Dunamu subsidiary, built the other, VerifyVASP. They launched on different specifications, so at first withdrawals were blocked even between exchanges in the same country, and only after the two interoperated on April 25, 2022 were the major domestic venues connected. CODE now reports links to more than 350 providers across some 60 countries, and interoperability with VerifyVASP, Notabene and Sygna among others.

The difficulty is the counterparty who joined nothing. Jurisdictions adopted the rule at different times and with different force, which the industry calls the sunrise issue, after the way dawn arrives in one time zone before another. If the receiving exchange sits outside the rule there is nowhere to send the information, and a transfer whose information cannot be sent gets refused. That is one reason a few percent of kimchi premium survives.

The Whitelist Was Never Ordered by Law

A distinction matters here. The travel rule as written applies between providers. The article speaks of a provider transferring to another provider, and an individual's wallet is not a provider.

What, then, is the procedure that makes you register an address and declare it your own before withdrawing to a hardware wallet? That is not the travel rule article. It is a policy exchanges adopted for their own risk management and suspicious transaction judgments. This is why the steps differ from exchange to exchange, and why the same exchange has changed them over time.

The amended decree lifts that practice into law.

Personal Wallets Enter the Rule

When a registered domestic provider transfers assets to or from an overseas provider or a personal wallet, the permitted scope now splits three ways according to the counterparty's assessed risk.

Transfers to an overseas exchange assessed as low risk are allowed. Other overseas exchanges and personal wallets are allowed only where the sender and the receiver are the same person. A counterparty classified as high risk is off limits. The exchange performs the assessment, and the supervisory regulations set out what it must look at: whether the counterparty implements anti money laundering measures, whether it holds a licence in its jurisdiction, and similar criteria.

For anyone practising self custody the clause reads in two directions. Moving coins from your exchange account to your own hardware wallet keeps sender and receiver identical, so it sits inside the permitted scope. Sending to another person's wallet falls outside it. Paying for something, sending money to family, tipping a developer: all of it lands under the same sentence.

Transfers of 10 million won or more carry a separate duty. The draft published for comment would have treated any transfer above that line as a suspicious transaction report regardless of risk. After industry comment it was rewritten so that providers must instead build and operate their own monitoring systems. The blanket report is gone; the number stayed.

The dates differ by clause. Provider registration and sanctions provisions took effect on August 20, 2026. The travel rule expansion and the rules on overseas transfers apply six months after promulgation, which fell in mid August, so February 2027.

Europe Asked for Verification, Korea Set a Scope

Europe answered the same problem differently. The Transfer of Funds Regulation, applicable since December 30, 2024, sets no threshold at all for transfers between providers. Korea is arriving where Europe already stood two years ago.

Self hosted wallets are where the two part. The European rule says that when more than EUR 1,000 goes to or comes from a customer's self hosted address, the provider must verify by at least one reliable method that the customer owns or controls that address. Verify it and the transfer proceeds.

The Korean amendment sets a permitted scope instead of demanding verification. Where sender and receiver are not the same person, the question is no longer whether you can prove something. For a self custody holder that difference is not small. One regime is a door that opens when you prove who you are. The other includes doors that stay shut after you have proved it.

How You Prove a Wallet Is Yours

A rule that turns on sameness of person raises the question of proving ownership. There are three ways: a small test transfer, a self declaration, and a signature over a message with the private key, which shows mathematically that you control the address.

The third is the cleanest technically. It was also tried once on the bitcoin side and abandoned. When the Swiss supervisor required proof of ownership for withdrawals to self hosted addresses, a protocol appeared that let the wallet produce that proof in one step, and in January 2022 Trezor shipped support for it. Support was withdrawn within days. BlueWallet and Sparrow dropped it too.

The objection was not about convenience. Once a wallet carries a signing button as a standard feature, linking an address to a legal name moves from inference to certainty, and a certainty like that spreads to every past and future transaction touching that address. The technology existed; what did not exist was agreement on how far to use it. The sameness clause puts that question back in front of Korean users.

What Is Not Settled Yet

The numbers above are regulation, not practice. How risk gets scored, how each exchange publishes the result, which methods count as establishing that a personal wallet is yours: supervisory regulations and industry guidance have to fill that in. The months until February 2027 are the time allotted for the work.

The Digital Asset Basic Act is a separate bill and still in the National Assembly. It deals with issuance, disclosure and stablecoin licensing, so it moves alongside the won stablecoin debate. The travel rule is already fixed by decree, whatever happens to that bill.

On the tax side a different rule is moving the same way. Under the reporting framework built by the Organisation for Economic Cooperation and Development, Korea begins automatic cross border exchange of virtual asset transaction data in 2027. If the travel rule attaches a name at the moment of transfer, this one gathers a year of transfers and hands them between tax authorities. Anyone preparing for taxation in 2027 should count on both rules landing in the same year.

What to Do Before It Takes Effect

Register your withdrawal addresses early. The procedure differs by exchange, and doing it under time pressure means waiting out the review. Skipping this step while buying bitcoin on a Korean exchange only means returning to it later.

Sort out whose name holds what. An arrangement where coins leave a family member's account for your wallet is treated differently under a sameness clause. It may work today and stop working after February 2027.

Keep records. You should be able to explain which address belongs to whom and why assets moved. A suspicious transaction judgment is the exchange's to make, and once made it turns into deposit and withdrawal limits.

What the Rule Governs Is the Counter

The travel rule does not prohibit bitcoin. The bitcoin network does not read the decree. What the rule governs is the nature of the counter you stand at.

The practical meaning of this amendment, then, is that the gap between the two sides of that counter widens. Inside, every amount carries a name and the list of permitted destinations is managed. Outside, none of it reaches. This is where self custody shows most clearly what it changes. Bitcoin you hold the keys to and a balance written in an exchange database display the same number, yet they already differ in where they can go.

The counter still has to be crossed. Anyone buying and selling in won passes through that door. Knowing the rules at the moment of crossing, and deciding where to keep what you carried through, are two separate choices.