Bank of Korea (settlement) · Personal Information Protection Commission (data)
Core law
Payment Services Act (PSA)
Entry capital
KRW 1 billion (Payment Service Provider)
Approval timeline
6-12 months for full licensing
Customer assets
Must be segregated in trust accounts
Data protection
PIPA · Personal Information Protection Commission
Sandbox
Yes - Regulatory Sandbox
South Korea maintains a rigorous licensing regime for fintech and payments, primarily governed by the Payment Services Act (PSA) and enforced by the FSC. The regulatory direction emphasizes consumer protection, fund segregation, and operational resilience, with recent updates targeting payment gateway stability and electronic transaction security. Foreign market entry is facilitated by the abolition of legacy investment certificates, though capital and compliance requirements remain stringent.
2024-09-09Payment Gateway Segregation Rules — Mandated secure segregation of unsettled funds for payment gateway providers to prevent delays.[1]
2024-09-03Electronic Financial Transactions Revision — Strengthened protection for advance payments by requiring separate management of customer funds.[2]
2024-06-21Abolishment of Investment Registration Certificate — Removed 30-year-old certificate requirement to improve market access for foreign investors.[3]
Market-entry checklist
1Secure KRW 1B+ Paid-in CapitalEnsure minimum statutory capital for Payment Service Provider licensing under the PSA.
2Establish Fund Segregation SystemsImplement compliant trust accounts for customer funds as mandated by recent gateway rules.
3Obtain FSC Licensing ApprovalSubmit comprehensive application to the Financial Services Commission for operational authorization.
4Register with PIPC for DataComply with Personal Information Protection Act requirements for data handling and security.
5Utilize Regulatory SandboxConsider applying for the FSC Regulatory Sandbox to test innovations with temporary exemptions.
This guide is compiled automatically from 3 primary-source documents published by South Korea's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.