🇨🇾 Cyprus vs 🇰🇷 South Korea: crypto licensing compared
Decision context and regulator route
On paper, Cyprus's MiCA CASP Authorisation granted by CySEC; existing Cyprus Investment Firms (CIFs) can extend their licence to cover crypto-asset services under a simplified process and South Korea's VASP registration (not a discretionary licence) under the Act on Reporting and Using Specified Financial Transaction Information (the 'FTRA'/AML Reporting Act, amended effective 25 Mar 2021), which requires: (1) ISMS certification from KISA (Korea Internet & Security Agency); (2) for KRW fiat on/off-ramp services, a bank-issued real-name verified account; plus fit-and-proper/AML program requirements. Layered on top since 19 July 2024 is the Act on the Protection of Virtual Asset Users (VAUPA), which adds customer-asset segregation, insurance/reserve, and market-abuse rules but does not replace the underlying FTRA registration. answer the same question; in practice the detail decides it. The two regimes differ on 9 of 9 tracked decision dimensions, including capital requirement and timeline to authorisation. This page compares the two side by side: the identity columns are free, the decision figures are one pass away, and every cell shows when it was last checked.
Cyprus: verified 2026-08-15 · South Korea: verified 2026-08-15
| Dimension |
🇨🇾 Cyprus
partly open
Verified 2026-08-15
|
🇰🇷 South Korea
partly open
Verified 2026-08-15
|
|---|---|---|
| Licence type | MiCA CASP Authorisation granted by CySEC; existing Cyprus Investment Firms (CIFs) can extend their licence to cover crypto-asset services under a simplified process | VASP registration (not a discretionary licence) under the Act on Reporting and Using Specified Financial Transaction Information (the 'FTRA'/AML Reporting Act, amended effective 25 Mar 2021), which requires: (1) ISMS certification from KISA (Korea Internet & Security Agency); (2) for KRW fiat on/off-ramp services, a bank-issued real-name verified account; plus fit-and-proper/AML program requirements. Layered on top since 19 July 2024 is the Act on the Protection of Virtual Asset Users (VAUPA), which adds customer-asset segregation, insurance/reserve, and market-abuse rules but does not replace the underlying FTRA registration. |
| Regulator | Cyprus Securities and Exchange Commission (CySEC) - sole National Competent Authority for MiCA in Cyprus | Financial Services Commission (FSC), Korea's top financial policymaker; Korea Financial Intelligence Unit (KoFIU, also referred to as FIU), an FSC-subordinate unit established 2001 under the FTRA that receives and processes VASP registrations and AML reporting; day-to-day supervision/inspection is delegated to the Financial Supervisory Service (FSS), which set up dedicated Virtual Asset Supervision/Investigation bureaus (announced 29 Nov 2023). FSC retains final sanctioning authority. |
| Capital requirement | Cyprus capital requirement is included in the £349 pass. | South Korea capital requirement is included in the £349 pass. |
| Timeline to authorisation | Cyprus timeline to authorisation is included in the £349 pass. | South Korea timeline to authorisation is included in the £349 pass. |
| Local substance | Cyprus local substance is included in the £349 pass. | South Korea local substance is included in the £349 pass. |
| Application cost | Cyprus application cost is included in the £349 pass. | South Korea application cost is included in the £349 pass. |
| Ongoing cost | Cyprus ongoing cost is included in the £349 pass. | South Korea ongoing cost is included in the £349 pass. |
| Passporting | Cyprus passporting is included in the £349 pass. | South Korea passporting is included in the £349 pass. |
| MiCA CASPs approved | Cyprus mica casps approved is included in the £349 pass. | South Korea mica casps approved is included in the £349 pass. |
| Key restrictions | Cyprus key restrictions is included in the £349 pass. | South Korea key restrictions is included in the £349 pass. |
| Recent changes | CySEC set a hard 27 February 2026 deadline for existing national-regime CASPs to submit MiCA applications; preliminary assessment phase opened 13 Nov 2024, formal applications from 1 Jan 2025; national transitional regime and full MiCA regime now running in parallel toward the 1 July 2026 EU-wide cutover | The 20 Aug 2026 tightening is now identifiable as Act No. 21358 (amendment to the FTRA/AML Reporting Act), promulgated 19 Feb 2026 and taking effect 20 Aug 2026. It removes the KRW 1,000,000 Travel Rule de minimis threshold and separately expands VASP entry screening: adds a statutory definition of major shareholders, extends fit-and-proper disqualification checks to major shareholders, adds financial condition, social credibility, organisational, staffing and IT review factors, and authorises KoFIU to attach conditions when accepting a VASP report. Existing registered VASPs must re-report under the amended Article 7 within 3 months of the effective date (by approximately 20 Nov 2026). Separately, a Foreign Exchange Transactions Act amendment creating cross-border VASP registration passed 7 May 2026 (effective date disputed, 2 Aug vs 2 Dec 2026). The FSC's implementing-decree package (public comment 30 March to 11 May 2026) adds entry screening for VASP re-reports: a debt-ratio ceiling of 200 per cent excluding customer deposits, a three-year clean default record, fit-and-proper tests for officers and major shareholders, and AML staffing requirements; it removes the KRW 1,000,000 Travel Rule de minimis entirely and treats cross-border transfers of KRW 10,000,000 or more to foreign VASPs or private wallets as automatically suspicious. |
| Difficulty rating | Cyprus difficulty rating is included in the £349 pass. | South Korea difficulty rating is included in the £349 pass. |
The two regimes differ on 9 of 9 tracked decision dimensions, including capital requirement and timeline to authorisation. Unlock the pass to see each figure with its source and verification date.
What changed recently
🇨🇾 Cyprus (verified 2026-07-02): CySEC set a hard 27 February 2026 deadline for existing national-regime CASPs to submit MiCA applications; preliminary assessment phase opened 13 Nov 2024, formal applications from 1 Jan 2025; national transitional regime and full MiCA regime now running in parallel toward the 1 July 2026 EU-wide cutover
🇰🇷 South Korea (verified 2026-08-01): The 20 Aug 2026 tightening is now identifiable as Act No. 21358 (amendment to the FTRA/AML Reporting Act), promulgated 19 Feb 2026 and taking effect 20 Aug 2026. It removes the KRW 1,000,000 Travel Rule de minimis threshold and separately expands VASP entry screening: adds a statutory definition of major shareholders, extends fit-and-proper disqualification checks to major shareholders, adds financial condition, social credibility, organisational, staffing and IT review factors, and authorises KoFIU to attach conditions when accepting a VASP report. Existing registered VASPs must re-report under the amended Article 7 within 3 months of the effective date (by approximately 20 Nov 2026). Separately, a Foreign Exchange Transactions Act amendment creating cross-border VASP registration passed 7 May 2026 (effective date disputed, 2 Aug vs 2 Dec 2026). The FSC's implementing-decree package (public comment 30 March to 11 May 2026) adds entry screening for VASP re-reports: a debt-ratio ceiling of 200 per cent excluding customer deposits, a three-year clean default record, fit-and-proper tests for officers and major shareholders, and AML staffing requirements; it removes the KRW 1,000,000 Travel Rule de minimis entirely and treats cross-border transfers of KRW 10,000,000 or more to foreign VASPs or private wallets as automatically suspicious.
Quick answers
Who regulates crypto licensing in Cyprus and South Korea?
Cyprus: Cyprus Securities and Exchange Commission (CySEC) - sole National Competent Authority for MiCA in Cyprus. South Korea: Financial Services Commission (FSC), Korea's top financial policymaker; Korea Financial Intelligence Unit (KoFIU, also referred to as FIU), an FSC-subordinate unit established 2001 under the FTRA that receives and processes VASP registrations and AML reporting; day-to-day supervision/inspection is delegated to the Financial Supervisory Service (FSS), which set up dedicated Virtual Asset Supervision/Investigation bureaus (announced 29 Nov 2023). FSC retains final sanctioning authority..
What licence do you need in Cyprus compared with South Korea?
In Cyprus the authorisation route is MiCA CASP Authorisation granted by CySEC; existing Cyprus Investment Firms (CIFs) can extend their licence to cover crypto-asset services under a simplified process; in South Korea it is VASP registration (not a discretionary licence) under the Act on Reporting and Using Specified Financial Transaction Information (the 'FTRA'/AML Reporting Act, amended effective 25 Mar 2021), which requires: (1) ISMS certification from KISA (Korea Internet & Security Agency); (2) for KRW fiat on/off-ramp services, a bank-issued real-name verified account; plus fit-and-proper/AML program requirements. Layered on top since 19 July 2024 is the Act on the Protection of Virtual Asset Users (VAUPA), which adds customer-asset segregation, insurance/reserve, and market-abuse rules but does not replace the underlying FTRA registration.. The comparison table on this page lines the two up dimension by dimension.
Where can I see the full Cyprus vs South Korea comparison?
The interactive benchmark lets you pin either jurisdiction and add up to five peers; a Founder Pass or Pro subscription unlocks every gated figure with its source and verification date. This page stays free at /crypto/compare/cyprus-vs-south-korea.
Informational only, not legal advice. Every open figure carries its own verification date; verify with qualified counsel before acting.