In a significant crackdown on phishing scams, South Korea's financial regulatory bodies have introduced a unified, stringent system for delaying cryptocurrency withdrawals across all domestic exchanges. This move aims to counter the rising incidence of voice phishing attacks that exploit the speed of transactions. Previously, exchanges had the discretion to set their own rules for bypassing holding periods, which fraudsters had learned to circumvent by coaching their victims on how to exploit these exceptions.
Voice phishing scams typically involve convincing victims to quickly convert cash into cryptocurrency and transfer it, a process that can be disrupted by even brief delays, providing victims with time to reconsider or allowing alerts to be raised before funds are transferred out of an account. Under the new regulations, exchanges are required to apply consistent criteria for evaluating withdrawal exceptions, including account history, transaction patterns, and sudden behavioral changes. It is anticipated that less than 1% of users will be eligible for immediate withdrawals under these new standards.
Furthermore, exchanges are mandated to enhance identity verification processes and closely monitor fund movements. This shift from industry-led security measures to a nationally standardized approach marks a significant development in the regulation of cryptocurrency exchanges.
Unlike some other markets, such as the U.S. and Europe, where withdrawal holds are common but determined by individual companies, South Korea's move towards a national standard represents a more centralized approach to combating phishing scams.