Korea has an enormous retail cryptocurrency market, and scammers have built an equally sophisticated playbook around it. Foreign residents are targeted both through dating apps and messaging platforms — the so-called "pig butchering" investment scam pattern — and through fake exchanges and tokens marketed directly to the expat community. What follows is what actually happens after you realize you've been scammed, and what Korean law does and doesn't make possible.
→How Crypto Investment Scams Typically Work
- Relationship-based investment scams — a new online friend or romantic contact patiently builds trust over weeks, then introduces a "can't-miss" trading platform, often showing fabricated profits on a fake dashboard to encourage larger deposits before blocking withdrawals entirely
- Fake or unregistered exchanges — a slick-looking platform that accepts deposits normally but freezes or blocks withdrawals once a balance grows large enough
- Rug pulls — a new token is hyped and sold, then the developers drain the liquidity pool and disappear once enough people have bought in
- Fake customer support — a scammer posing as exchange support contacts a user about a "security issue," ultimately obtaining wallet credentials or a seed phrase directly
1The Virtual Asset User Protection Act (가상자산이용자보호법)
Korea's Virtual Asset User Protection Act (가상자산이용자보호법, gasangjasan iyongja bohobeop) requires licensed exchanges operating in Korea to segregate user assets, maintain reserves, and report unusual trading activity, and it created criminal penalties specifically for market manipulation and unfair trading involving virtual assets. It does not, however, cover every platform a scammer might point you to — many fraudulent "exchanges" targeting foreigners are unregistered, operate from outside Korea, or exist only as a spoofed website with no real trading infrastructure behind it at all. Whether a platform is a licensed exchange or a shell built purely to collect deposits is one of the first things worth establishing.
2Why Recovering Crypto Is Harder Than Recovering a Bank Transfer
With voice phishing and ordinary bank fraud, a victim can often request an account freeze (지급정지) within hours and realistically recover funds still sitting in the receiving account. Cryptocurrency doesn't work that way: transfers are generally irreversible, wallets aren't tied to a verified identity by default, and funds can be moved through mixing services or across multiple chains within minutes. Recovery is possible but far from guaranteed, and it depends heavily on whether the funds passed through a licensed, Korea-based exchange at some point — those exchanges can be compelled to freeze an account and disclose the holder's identity, in a way an anonymous wallet address never can be.
The single most important recovery lever is whether the scammer's funds ever touched a licensed exchange — that's the one point where Korean law enforcement can actually reach a real identity behind the wallet.
3Reporting: Financial Supervisory Service (금융감독원) and Cyber Investigation Police (사이버수사대)
Two channels matter for a crypto fraud report in Korea:
- The Financial Supervisory Service (금융감독원) handles complaints involving licensed exchanges and can flag suspicious platforms, though its authority is limited when the platform itself is unregistered or based abroad
- The National Police Agency's Cyber Investigation unit (사이버수사대, cyber investigation police) handles the criminal fraud (사기) side — filing a report here, ideally with wallet addresses, transaction hashes, screenshots, and any communication with the scammer, is what actually triggers an investigation into who controls the receiving wallet
Blockchain transactions are public and traceable in principle, but tracing a wallet to a real person requires either the scammer's own carelessness or cooperation from an exchange where the funds eventually landed — which is exactly why filing quickly, before funds move further, matters.
4If You Were Asked to Move Crypto for Someone Else
Just as with bank-based voice phishing, some foreign residents are recruited — sometimes through a "job" — to receive cryptocurrency into their own wallet or exchange account and forward it elsewhere for a fee. This can expose you to a fraud (사기) or money-laundering investigation even if you didn't know the funds were stolen, and "I didn't know" is a defense that needs real supporting facts, not just an assertion. If you've been contacted by police about a wallet or exchange account you used this way, get legal advice before your first interview.
5What to Do Immediately After You Realize You've Been Scammed
- Stop sending any further funds immediately, even if the scammer claims one more deposit will "unlock" a withdrawal — that claim is itself part of the scam
- Record every wallet address, transaction hash, exchange name, and piece of communication with the scammer before accounts or chats disappear
- Check whether the receiving platform is a licensed exchange in Korea or elsewhere — this determines whether a freeze request is even possible
- File a report with the Cyber Investigation police (사이버수사대) and, if a licensed Korean exchange is involved, contact the Financial Supervisory Service (금융감독원) as well
- Be wary of "recovery agencies" that contact you afterward promising to retrieve your funds for an upfront fee — this is a common secondary scam targeting people who were already victimized once