🇰🇷 South Korea vs 🇪🇸 Spain: crypto licensing compared
Decision context and regulator route
Choosing between South Korea and Spain for a crypto licence starts with who you will answer to: Financial Services Commission (FSC), Korea's top financial policymaker; Korea Financial Intelligence Unit (KoFIU, also referred to as FIU), an FSC-subordinate unit established 2001 under the FTRA that receives and processes VASP registrations and AML reporting; day-to-day supervision/inspection is delegated to the Financial Supervisory Service (FSS), which set up dedicated Virtual Asset Supervision/Investigation bureaus (announced 29 Nov 2023). FSC retains final sanctioning authority. on one side, Comisión Nacional del Mercado de Valores (CNMV) - lead CASP authority; Banco de España co-supervises stablecoin issuers on the other, via the VASP registration (not a discretionary licence) under the Act on Reporting and Using Specified Financial Transaction Information (the 'FTRA'/AML Reporting Act, amended effective 25 Mar 2021), which requires: (1) ISMS certification from KISA (Korea Internet & Security Agency); (2) for KRW fiat on/off-ramp services, a bank-issued real-name verified account; plus fit-and-proper/AML program requirements. Layered on top since 19 July 2024 is the Act on the Protection of Virtual Asset Users (VAUPA), which adds customer-asset segregation, insurance/reserve, and market-abuse rules but does not replace the underlying FTRA registration. and the MiCA CASP Authorisation granted by the Comisión Nacional del Mercado de Valores (CNMV); Banco de España separately supervises stablecoin (ART/EMT) issuance respectively. The two regimes differ on 9 of 9 tracked decision dimensions, including capital requirement and timeline to authorisation. Every figure behind the comparison carries a last-verified date and a primary source.
South Korea: verified 2026-08-01 · Spain: verified 2026-08-01
| Dimension |
🇰🇷 South Korea
partly open
Verified 2026-08-01
|
🇪🇸 Spain
partly open
Verified 2026-08-01
|
|---|---|---|
| Licence type | VASP registration (not a discretionary licence) under the Act on Reporting and Using Specified Financial Transaction Information (the 'FTRA'/AML Reporting Act, amended effective 25 Mar 2021), which requires: (1) ISMS certification from KISA (Korea Internet & Security Agency); (2) for KRW fiat on/off-ramp services, a bank-issued real-name verified account; plus fit-and-proper/AML program requirements. Layered on top since 19 July 2024 is the Act on the Protection of Virtual Asset Users (VAUPA), which adds customer-asset segregation, insurance/reserve, and market-abuse rules but does not replace the underlying FTRA registration. | MiCA CASP Authorisation granted by the Comisión Nacional del Mercado de Valores (CNMV); Banco de España separately supervises stablecoin (ART/EMT) issuance |
| Regulator | Financial Services Commission (FSC), Korea's top financial policymaker; Korea Financial Intelligence Unit (KoFIU, also referred to as FIU), an FSC-subordinate unit established 2001 under the FTRA that receives and processes VASP registrations and AML reporting; day-to-day supervision/inspection is delegated to the Financial Supervisory Service (FSS), which set up dedicated Virtual Asset Supervision/Investigation bureaus (announced 29 Nov 2023). FSC retains final sanctioning authority. | Comisión Nacional del Mercado de Valores (CNMV) - lead CASP authority; Banco de España co-supervises stablecoin issuers |
| Capital requirement | South Korea capital requirement is included in the £349 pass. | Spain capital requirement is included in the £349 pass. |
| Timeline to authorisation | South Korea timeline to authorisation is included in the £349 pass. | Spain timeline to authorisation is included in the £349 pass. |
| Local substance | South Korea local substance is included in the £349 pass. | Spain local substance is included in the £349 pass. |
| Application cost | South Korea application cost is included in the £349 pass. | Spain application cost is included in the £349 pass. |
| Ongoing cost | South Korea ongoing cost is included in the £349 pass. | Spain ongoing cost is included in the £349 pass. |
| Passporting | South Korea passporting is included in the £349 pass. | Spain passporting is included in the £349 pass. |
| MiCA CASPs approved | South Korea mica casps approved is included in the £349 pass. | Spain mica casps approved is included in the £349 pass. |
| Key restrictions | South Korea key restrictions is included in the £349 pass. | Spain key restrictions is included in the £349 pass. |
| Recent changes | The 20 Aug 2026 tightening is now identifiable as Act No. 21358 (amendment to the FTRA/AML Reporting Act), promulgated 19 Feb 2026 and taking effect 20 Aug 2026. It removes the KRW 1,000,000 Travel Rule de minimis threshold and separately expands VASP entry screening: adds a statutory definition of major shareholders, extends fit-and-proper disqualification checks to major shareholders, adds financial condition, social credibility, organisational, staffing and IT review factors, and authorises KoFIU to attach conditions when accepting a VASP report. Existing registered VASPs must re-report under the amended Article 7 within 3 months of the effective date (by approximately 20 Nov 2026). Separately, a Foreign Exchange Transactions Act amendment creating cross-border VASP registration passed 7 May 2026 (effective date disputed, 2 Aug vs 2 Dec 2026). The FSC's implementing-decree package (public comment 30 March to 11 May 2026) adds entry screening for VASP re-reports: a debt-ratio ceiling of 200 per cent excluding customer deposits, a three-year clean default record, fit-and-proper tests for officers and major shareholders, and AML staffing requirements; it removes the KRW 1,000,000 Travel Rule de minimis entirely and treats cross-border transfers of KRW 10,000,000 or more to foreign VASPs or private wallets as automatically suspicious. | The CNMV's own register shows a bank-led adoption pattern: home-authorised providers include BBVA, CaixaBank, Cecabank, Kutxabank, Open Bank and Renta 4 alongside fintechs such as Bit2Me, Criptan Trade and Crossmint Europe, 10 in total by late Jun 2026. CNMV published updated MiCA Q&A guidance in Dec 2025 ahead of full application from 1 Jul 2026. |
| Difficulty rating | South Korea difficulty rating is included in the £349 pass. | Spain difficulty rating is included in the £349 pass. |
The two regimes differ on 9 of 9 tracked decision dimensions, including capital requirement and timeline to authorisation. Unlock the pass to see each figure with its source and verification date.
What changed recently
🇰🇷 South Korea (verified 2026-08-01): The 20 Aug 2026 tightening is now identifiable as Act No. 21358 (amendment to the FTRA/AML Reporting Act), promulgated 19 Feb 2026 and taking effect 20 Aug 2026. It removes the KRW 1,000,000 Travel Rule de minimis threshold and separately expands VASP entry screening: adds a statutory definition of major shareholders, extends fit-and-proper disqualification checks to major shareholders, adds financial condition, social credibility, organisational, staffing and IT review factors, and authorises KoFIU to attach conditions when accepting a VASP report. Existing registered VASPs must re-report under the amended Article 7 within 3 months of the effective date (by approximately 20 Nov 2026). Separately, a Foreign Exchange Transactions Act amendment creating cross-border VASP registration passed 7 May 2026 (effective date disputed, 2 Aug vs 2 Dec 2026). The FSC's implementing-decree package (public comment 30 March to 11 May 2026) adds entry screening for VASP re-reports: a debt-ratio ceiling of 200 per cent excluding customer deposits, a three-year clean default record, fit-and-proper tests for officers and major shareholders, and AML staffing requirements; it removes the KRW 1,000,000 Travel Rule de minimis entirely and treats cross-border transfers of KRW 10,000,000 or more to foreign VASPs or private wallets as automatically suspicious.
🇪🇸 Spain (verified 2026-07-10): The CNMV's own register shows a bank-led adoption pattern: home-authorised providers include BBVA, CaixaBank, Cecabank, Kutxabank, Open Bank and Renta 4 alongside fintechs such as Bit2Me, Criptan Trade and Crossmint Europe, 10 in total by late Jun 2026. CNMV published updated MiCA Q&A guidance in Dec 2025 ahead of full application from 1 Jul 2026.
Quick answers
Who regulates crypto licensing in South Korea and Spain?
South Korea: Financial Services Commission (FSC), Korea's top financial policymaker; Korea Financial Intelligence Unit (KoFIU, also referred to as FIU), an FSC-subordinate unit established 2001 under the FTRA that receives and processes VASP registrations and AML reporting; day-to-day supervision/inspection is delegated to the Financial Supervisory Service (FSS), which set up dedicated Virtual Asset Supervision/Investigation bureaus (announced 29 Nov 2023). FSC retains final sanctioning authority.. Spain: Comisión Nacional del Mercado de Valores (CNMV) - lead CASP authority; Banco de España co-supervises stablecoin issuers.
What licence do you need in South Korea compared with Spain?
In South Korea the authorisation route is VASP registration (not a discretionary licence) under the Act on Reporting and Using Specified Financial Transaction Information (the 'FTRA'/AML Reporting Act, amended effective 25 Mar 2021), which requires: (1) ISMS certification from KISA (Korea Internet & Security Agency); (2) for KRW fiat on/off-ramp services, a bank-issued real-name verified account; plus fit-and-proper/AML program requirements. Layered on top since 19 July 2024 is the Act on the Protection of Virtual Asset Users (VAUPA), which adds customer-asset segregation, insurance/reserve, and market-abuse rules but does not replace the underlying FTRA registration.; in Spain it is MiCA CASP Authorisation granted by the Comisión Nacional del Mercado de Valores (CNMV); Banco de España separately supervises stablecoin (ART/EMT) issuance. The comparison table on this page lines the two up dimension by dimension.
Where can I see the full South Korea vs Spain comparison?
The interactive benchmark lets you pin either jurisdiction and add up to five peers; a Founder Pass or Pro subscription unlocks every gated figure with its source and verification date. This page stays free at /crypto/compare/south-korea-vs-spain.
Informational only, not legal advice. Every open figure carries its own verification date; verify with qualified counsel before acting.