Korea outsources crypto detection to the public, then staffs the follow-up

The Eom bill does not invent an offence. Running an unregistered virtual asset business already breaches the Act on Reporting and Using Specified Financial Transaction Information; what the amendment adds is a door anyone can knock on, plus onward powers for the Financial Intelligence Unit once somebody does: investigate and analyse the allegation, file complaints with the relevant authorities, request criminal investigations, or pass material to investigators ^[1][2]. Detection stops being a line item a regulator budgets for and becomes something the public supplies. The working perimeter then sits wherever complaints land.

The Korea Media and Communications Commission has already demonstrated how those cases get reasoned. Its finding on Polymarket rested on structure and operations, not on who holds the funds: noncustodial design and smart contracts did not disturb the conclusion that the arrangement amounts to illegal gambling ^[3]. For a protocol with Korean users, custody architecture is no longer the interesting question.

Capacity is where the arithmetic thins out. The Serious Crimes Investigation Agency arrives in October with 2,567 investigators covering seven categories of crime, one unit of which handles phishing and virtual asset offences ^[4]. Split evenly, that is roughly 367 investigators per category ^[10], and no headcount for the crypto unit has been given ^[11]. Meanwhile the Novel Securities Market is due to open in November trading fractional interests in artworks, real estate and music copyright ^[5], which widens the surface those same investigators are meant to watch.

Timing is doing work that compliance is supposed to do. BitGo Korea's registration was reportedly accepted on Tuesday, two days before stricter VASP entry requirements took effect ^[6]. A firm through the door before the standard rose holds something later applicants cannot buy at any price, and that is a fact about the calendar rather than about controls.

Set against the rest of the region, the asymmetry is the point. Pakistan's PVARA has opened its licensing portal and given anyone operating on or before March 5 until Sept 5 to file for a no-objection certificate or stop ^[7], a grace period of six months ^[12]. Japan's FSA authorised Nomura's Laser Digital as a crypto asset exchange service provider, the country's first such licence in four years and the first since Binance Japan in October 2022 ^[8]. Singapore's monetary authority answered Hong Kong's fund manager tax cuts with exemptions of its own ^[9]. Licensing regimes are cheap to announce and slow to bite. The scarce input is somebody paid to find the firms that never applied, and Korea is the jurisdiction currently buying that, with a complaint channel feeding it and a gambling doctrine that ignores whether a service touches customer assets.