South Korea advances 22% crypto tax rules and tightens cybersecurity after 16 financial breaches
South Korea's tax authority will issue crypto tax guidelines in November before a 22% levy takes effect in 2027, while financial regulators propose stricter cybersecurity rules after breaches at 16 firms exposed 100,000 customer records.
Why it matters
The tax guidelines will clarify how staking, airdrops, hard forks, and DeFi transactions are treated before the delayed 22% levy takes effect, while the cybersecurity overhaul signals regulators treating crypto platforms as critical financial infrastructure alongside banks. Both moves reflect South Korea's maturing regulatory approach to its large retail crypto market.
Where the sources disagree
Spelling of second crypto firm name
Prabang
Cointelegraph, Crypto.News, TheNewsCrypto
Pravang
CryptoSlate
CryptoSlate spells the second crypto firm as 'Pravang' while Cointelegraph, Crypto.News, and TheNewsCrypto spell it 'Prabang'
Key facts
South Korea's National Tax Service will issue cryptocurrency tax guidelines in November 2026
Reported by Crypto.News
A 22% tax on qualifying annual cryptocurrency gains exceeding 2.5 million won takes effect January 1, 2027
22 %Reported by Crypto.News
First cryptocurrency income tax returns are expected in May 2028 for 2027 transactions
Reported by Crypto.News
Financial Services Commission found cybersecurity deficiencies at 130 of 555 financial companies reviewed
130 firmsReported by Cointelegraph
Approximately 100,000 customer records were exposed across affected firms
100,000 recordsReported by Cointelegraph
Streami (Gopax operator) and Prabang were named among the affected crypto firms
Reported by Cointelegraph
What happened
South Korea's National Tax Service announced it will publish cryptocurrency taxation guidelines in November 2026, ahead of a 22% tax on qualifying annual gains above 2.5 million won starting January 1, 2027, following three prior delays. Separately, the Financial Services Commission proposed tougher cybersecurity requirements after an industry-wide review found deficiencies at 130 of 555 financial firms and confirmed security incidents at 16 companies, including crypto exchanges Streami (Gopax operator) and Prabang. The breaches exposed approximately 100,000 customer records containing names, contact details, and identification numbers. The FSC plans twice-yearly vulnerability assessments for larger institutions, improved threat monitoring, and stronger executive accountability. Investigators have not determined whether artificial intelligence facilitated the attacks or if a common perpetrator targeted multiple firms.
How the story developed
- Official statement
FSC completes industry-wide cybersecurity review of 555 firms
Review using 12-point checklist finds deficiencies at 130 firms by October 8
- Official statement
National Tax Service announces November crypto tax guidelines
NTS Commissioner Lim Gwang-hyeon tells parliamentary audit that detailed taxation standards will be published next month
- Official statement
FSC holds second emergency response meeting on cyber breaches
Officials review recent attacks and inspection results, announce proposed reforms
- Official statement
FSC names Streami and Prabang among 16 breached financial companies
Disclosure lists two virtual asset businesses alongside major banks including Shinhan, Kookmin, Busan and Hana
- First report
First report by Crypto.News
South Korea plans new crypto tax guidelines next month
- Update
Crypto tax guidelines expected to be published
NTS plans to release detailed standards for staking, airdrops, hard forks, and DeFi taxation
- Resolution
22% crypto tax takes effect
Qualifying annual gains above 2.5 million won become taxable
- Independent corroboration
Independently corroborated by Cointelegraph
South Korea plans cybersecurity overhaul after attacks hit banks, crypto firms
How coverage built up
Independent sources over time, counted the way the consensus panel counts them: a republication of a wire story does not move the line.
- 14 Oct 2026, 06:26 UTC: Crypto.News — 1 independent source, 1 reports
- 15 Oct 2026, 05:52 UTC: Cointelegraph — 2 independent sources, 2 reports
- 15 Oct 2026, 06:55 UTC: Bitcoin Insider — 3 independent sources, 4 reports
- 15 Oct 2026, 11:19 UTC: TheNewsCrypto — 4 independent sources, 5 reports
- 15 Oct 2026, 19:00 UTC: CryptoSlate — 5 independent sources, 6 reports
- 18 Oct 2026, 13:30 UTC: Bitcoinist — 6 independent sources, 7 reports
Affected entities
Also mentioned: Chainlink
Original sources
Related events
MoonPay launches Korean unit with three banks, plans won stablecoin channels
MoonPay launched MoonPay Korea on Sept. 29 with Woori Bank, KB Financial Group and KakaoBank, and plans Korean licenses plus won stablecoin distribution if won stablecoins are issued.
South Korea's FSC to review crypto market making after JPYC spiked on Upbit
South Korea's FSC will review allowing crypto market makers after yen stablecoin JPYC traded up to 37.6 won on Upbit, roughly four times its 1:1 yen peg.
Dunamu and MoonPay explore stablecoin payments partnership
Upbit operator Dunamu and MoonPay agreed to explore a strategic collaboration on stablecoin payments, cross-border transfers, and GIWA blockchain services.
XRP Tops Upbit Spot Volume in Korea as Upbit and Bithumb Delist Zilliqa
XRP led Upbit's won-pair spot volume over bitcoin and ether on Oct. 15 and 16, and separately Upbit and Bithumb said they will end support for Zilliqa's ZIL token.
South Korean crypto exchange operating profits fell 78% to KRW81.6 billion in H1 2026
KoFIU says Korean crypto exchange operating profits fell 78% to KRW81.6 billion in H1 2026, with daily volume down 44% and won deposits down 35%.
Hana Bank and Upbit Global to develop Travel Rule infrastructure for digital assets
Crypto.News reported that Hana Bank and Upbit Global signed a memorandum to develop and test Travel Rule infrastructure linking banks with digital asset service providers.