South Korea has approved domestic access restrictions on 27 websites operated by unregistered crypto service providers, extending enforcement from mobile applications to the web. The move creates an immediate practical question for customers: how to retrieve assets when their usual route into a platform is restricted.
The Financial Intelligence Unit disclosed the action on October 13. Its official notice says the communications standards regulator approved the restrictions after reviews on October 6 and 7. October 13 was the disclosure date, not the date of a new vote.
Access restrictions and withdrawals are separate problems
For overseas websites, the measure is a domestic access block; for a locally based operator or server, it is service termination. The notice does not establish when every site became inaccessible to every Korean user.
FIU says withdrawal instructions will be provided through the Digital Asset eXchange Alliance, with operators' cooperation. Its announcement does not supply a platform-by-platform timetable or completed withdrawal procedure. A promised assistance channel should therefore not be confused with proof that every customer's exit is already working.
The distinction matters because reaching a website, signing into an account and obtaining an outgoing transfer are different steps. Restoring one does not demonstrate that the others work. A report of blocked access alone cannot establish that a customer's balance has been seized, that an exchange has become insolvent or that a withdrawal has succeeded.
App stores already apply a registration gate
The registration requirement also appears in Google Play's published crypto policy. For South Korea, developers of cryptocurrency exchanges and software wallets must have successfully filed a virtual-asset service-provider report with the FIU commissioner. Google describes country-specific licensing or registration requirements for these applications.
That is a distribution condition for an app, not a statement about the settlement of an individual withdrawal. The web restrictions now raise a related access issue through a different channel. Customers cannot infer from an application's familiar name or prior availability that its operator meets the requirements for serving their country.
The wider issue is supervision across borders
The Financial Action Task Force's March 2026 offshore-provider report describes services incorporated in one jurisdiction that serve customers in another. It found that 46% of jurisdictions had adopted an activity-based approach, extending licensing or registration requirements according to services performed in their market regardless of where a provider is located.
That earlier finding supplies context for why an offshore location does not settle the local supervision question. FATF also identified gaps exploited for fraud and money laundering. Its report is not a finding that every website in Korea's latest action committed those offences.
For customers, the decisive next evidence is operational: which official withdrawal channels are available, which assets and networks they support, and whether transfers reach their intended destinations. Our self-custody guide explains why control of signing keys differs from a balance held through a service. Changing where assets are held requires understanding those responsibilities; a website restriction itself does not transfer custody.
The enforcement decision is documented. The customer exit process still needs to be demonstrated separately, rather than assumed from the regulator's stated plan to provide assistance.