Asia's Digital Asset Crackdown: Leadership Accountability Intensifies

Welcome to Crypto Long & Short, our institutional newsletter. This week, we examine the evolving landscape of digital asset regulations in Asia and the rising threat of crypto scams targeting seasoned investors. Alexandra Levis provides expert insights. Asia's digital asset crackdown is leading to increased accountability for senior leaders, making strong governance and D&O insurance essential. By Bob Williams, FinTech, digital assets, and blockchain advisory leader at Lockton Companies, we see a new wave of regulations in Hong Kong, Singapore, and South Korea that are pressuring trading platforms and asset managers to enhance their governance and reassess their D&O liability insurance arrangements. In recent months, these three leading digital asset hubs have announced plans to refine their regulatory frameworks, signaling a shift toward personal accountability for directors and senior management. Hong Kong's Securities and Futures Commission issued a circular clarifying senior management's responsibilities regarding virtual asset custody, reinforcing expectations around governance, internal controls, and effective oversight. An emerging consideration is whether virtual asset management service providers should be permitted to rely on non-SFC-regulated or offshore custodians, which could impact insurance coverage for virtual asset risks. Singapore introduced licensing requirements for digital token service providers serving overseas customers, emphasizing the competency and fitness of key individuals as core admission criteria. Senior management must demonstrate a clear understanding of the regulatory framework and exercise effective oversight and control over business activities and staff. As regulatory expectations rise, so does the personal exposure of directors and officers, making D&O insurance a critical component of a firm's risk management framework. South Korea is pursuing a more expansive regulatory overhaul through the proposed Digital Asset Basic Act, which would formalize the digital asset market by regulating issuance, trading practices, and distributions, while introducing new governance structures around asset listing and delisting decisions. These imminent changes would significantly increase compliance obligations for trading platforms and related service providers, with D&O insurance playing an important role in protecting directors and officers from the financial consequences of legal actions, investigations, or claims arising from alleged regulatory breaches. Navigating regulatory complexity with D&O insurance is crucial, as regulators refine already sophisticated frameworks to address evolving digital asset risks. Firms operating in the region must proactively review governance structures, custody arrangements, and insurance programs to ensure leadership is appropriately protected against emerging liabilities. Crypto scams are not just targeting the uninformed, but also experienced investors, as explained by Haidy Grigsby, special agent at the Tennessee Bureau of Investigation. A common assumption is that crypto scams prey on the uninformed, but crypto-related frauds are increasingly catching experienced investors off guard. The TBI has seen a strategy where scammers flatter expertise, create exclusivity, and get the target to move the conversation to encrypted apps, exploiting familiarity with legitimate infrastructure. Victims are instructed to open accounts on real exchanges, then use self-custody wallets to access external sites through built-in Web3 browsers, often without realizing they have left the trusted app. These fraudulent markets mimic real ones, allowing one daily trade at a set time, and scammer will often claim to contribute their own funds, reinforcing trust and the illusion of shared risk. Balances grow, and profits appear real, but in truth, no trading occurs, and the returns are simply numbers entered by the scammer. To build credibility, victims are encouraged to withdraw a small amount after a 'winning' trade, which appears processed successfully but is funded with cryptocurrency stolen from other victims. The websites change domains and branding frequently, with victims being told the company is merging, upgrading, or rebranding, when in reality, these changes occur due to law enforcement takedowns. When victims attempt larger withdrawals, the narrative shifts, with explanations such as regulatory holds, tax prepayments, liquidity verification thresholds, or tier upgrades, each paired with urgent demands for more funds. Convincing victims of the truth remains one of the greatest challenges, as they often struggle to accept that the person they built trust with and gave substantial sums of money to never existed. The retired trader was left to face his family, admit he had been defrauded, and ask for help with basic living expenses, by which time his retirement savings were already gone. The FBI's data show losses rising with age, likely reflecting the fact that older individuals have more accumulated wealth than those in their 20s. Victims gather evidence, but most of it turns out to be stolen, fake, or AI-generated. Despite the difficulties in apprehending the perpetrators of these sophisticated schemes, law enforcement continues to pursue these cases, and anyone affected should cease all communication and report the incident to local law enforcement, IC3.gov, and Chainabuse.com.