Crypto Scam Prevention in Korea: From the Upbit Hack to Pig Butchering Schemes

In November 2025, Upbit — South Korea's largest cryptocurrency exchange — suffered a staggering 44.5 billion KRW (roughly $33 million) hack. The breach proved that even the country's most dominant trading platform is not immune to cyberattacks. Just months earlier, in July 2024, Korea's Virtual Asset User Protection Act took effect, adding new legal safeguards. Yet scam tactics have only grown more sophisticated.

South Korea ranks among the world's top crypto-trading nations. With roughly 6 million active traders on Upbit alone, the country is a prime target for fraud. This guide covers the most common scam types targeting Korean investors and practical steps to stay safe.

The Most Common Crypto Scams in Korea

1. Pig Butchering Scams

Pig butchering is a long-con scheme where scammers "fatten" victims before "slaughtering" them financially.

Phase	Tactic	Duration
Approach	Build rapport via KakaoTalk or Instagram DMs	2–4 weeks
Trust building	Let victims see small gains on a fake platform	2–6 weeks
Big ask	Push for a large deposit into a "special opportunity"	1–2 weeks
Slaughter	Block withdrawals, demand fees, then vanish	Immediate

Red flags:

• Romantic or friendly contact from a stranger on social media
• A custom trading app or website you have never heard of
• Small initial withdrawals succeed (to build false confidence)
• Escalating deposit requests

2. Fake Exchange Scams

Unregistered exchanges are a growing threat. Only four exchanges are legally registered for KRW fiat trading in Korea: Upbit, Bithumb, Coinone, and Korbit.

How to verify:

• Check registration with Korea's Financial Intelligence Unit (FIU)
• Confirm the exchange supports real-name verified accounts
• Look for ISMS (Information Security Management System) certification

3. YouTube and Telegram "Signal Room" Fraud

Channels promising "guaranteed returns" or "VIP signals" are almost always scams.

Warning signs:

• Upfront fees or commissions required
• Only profit screenshots shown — losses are hidden
• Pump-and-dump: the operator buys first, promotes the coin, then sells
• High-pressure urgency — "act now or miss out"

4. Airdrop and Fake Token Scams

Free token offers lure victims into connecting their wallets, then exploit approval transactions to drain assets.

What the Virtual Asset User Protection Act Changed

Korea's Virtual Asset User Protection Act, enacted in July 2024, introduced key protections:

Provision	Description
Deposit segregation	Exchanges must hold customer assets in separate accounts
Insurance mandate	Mandatory insurance covering hacks and security incidents
Unfair trade ban	Market manipulation and insider trading are criminally punishable
Suspicious transaction monitoring	Real-time surveillance of unusual activity is required

Critically, these protections apply to registered exchanges. If you trade on an overseas unregistered platform or hold assets in a personal wallet, these legal shields do not cover you.

How to Store Seed Phrases and Private Keys Safely

If you use a self-custody wallet, your seed phrase is essentially your entire fortune.

Never do this:

• Save your seed phrase in KakaoTalk or a notes app
• Take a screenshot
• Email it to yourself
• Upload it to cloud storage

Safe storage methods:

1. Paper backup — Write it down and store it in a physical safe
2. Metal backup — Engrave it on a steel plate (fire and flood resistant)
3. Encrypted memo — Use LOCK.PUB to create a password-protected memo for your seed phrase. No one can view the contents without the password, and you can set an expiration timer for automatic deletion

Practical Security Checklist

Exchange Account Security

• Enable two-factor authentication (use an authenticator app, not SMS)
• Set a unique, strong password
• Enable withdrawal address whitelisting
• Turn on login notifications
• Periodically review and revoke unused API keys

Personal Wallet Security

• Use a hardware wallet for significant holdings
• Store seed phrases offline
• Verify permissions when connecting your wallet to any dApp
• Always test with a small amount first

Scam Prevention

• "Guaranteed returns" means guaranteed scam
• Ignore unsolicited investment DMs
• Only use official exchange apps downloaded directly from app stores
• If you cannot withdraw, something is wrong — act immediately

What to Do If You Have Been Scammed

1. Report immediately — Korean National Police Cyber Bureau (182)
2. Contact the exchange — Request an account freeze
3. Preserve evidence — Screenshot conversations, transaction records, and wallet addresses
4. File with FSS — Financial Supervisory Service (1332)

Stay Sharp, Stay Safe

The most important security tool in crypto is not technology — it is judgment. If an opportunity sounds too good to be true, it is a scam. Stick to registered exchanges and never expose your seed phrase online.

When you need to share sensitive security information safely, LOCK.PUB offers password-protected memos that encrypt your data. Whether you are passing wallet recovery details to a trusted family member or storing backup codes, using LOCK.PUB instead of iMessage or Messenger ensures that no third party can intercept your information.

Start reviewing your security habits today.