Korea's real-name account system links every crypto trade to a single verified bank account.
A trader on Upbit cannot withdraw a single won without a K-Bank account in their own name. A trader on Bithumb needs one at KB Kookmin instead, because each of Korea's four major exchanges is locked to exactly one partner bank. Most global markets don't do this. So what happens when someone's primary bank doesn't match their exchange of choice? Does that mismatch lock them out of trading entirely?
The FSC built this structure because it treats non-real-name accounts as a much higher money laundering risk. Before the system existed, exchanges often pooled user funds in a handful of corporate bank accounts, which made it genuinely hard to trace who sent or received a given transfer. Real-name verification fixes that by giving each transaction a direct, traceable link between a specific person's identity, their bank record, and their exchange wallet. Foreign observers of Korean financial policy will recognize the logic: it's the same KYC framework that governs KOSPI-listed banks under FSC anti-money laundering rules, just stretched to cover digital assets too.
In practice, this means Korea's four major exchanges, Upbit, Bithumb, Coinone, and Korbit, each sit inside a closed loop with one designated bank. Want to use Upbit? You need a K-Bank account. Your primary bank is NH Nonghyup but you want to trade on Bithumb? You can't withdraw won directly; you'll need to route funds through KB Kookmin first. This is the single biggest structural fact a newcomer to Korean crypto trading needs to understand before attempting a withdrawal: the bank match has to exist before the exchange account does you any good. Confirm your bank match before funding an account, not after.
Verification runs through identity checks, bank matching, and biometric confirmation before any won moves.
Knowing which bank pairs with which exchange only answers half the question. The other half is how that match actually gets enforced at the account level, and that enforcement starts well before anyone tries to move funds out. Sign-up on any major Korean exchange requires a liveness check, usually a selfie or short video, matched against a government-issued ID. This stops someone from opening an account under a stolen or fabricated identity. Most exchanges clear this check in minutes, though FSC rules permit additional manual review, which can stretch processing to a day or two during high-volume periods.
Once identity is confirmed, the exchange cross-checks the user's registered name against the partnered bank's records: Upbit users verify through K-Bank, Coinone users through Kakao Bank, Bithumb users through KB Kookmin Bank. Only when the name on the exchange account matches the name on the bank account exactly does the system unlock KRW deposits and, critically, withdrawals. That's the core mechanic here. Deposits and withdrawals only move between a verified trader's bank account and the matching exchange account, which is exactly what lets regulators trace a transaction back to one specific individual.
Virtual asset business operators don't get to design this process however they like. They have to file a report with Korea's Financial Intelligence Unit (FIU) proving they meet both the real-name verification standard and an information protection management system certification. The FIU then supervises and inspects reporting exchanges on an ongoing basis, and reviewing a submitted report can take a meaningful stretch of time. For exchanges, that lag isn't a formality, it's a real business risk: noncompliant platforms can lose their ability to offer KRW trading pairs altogether, which cuts off their main source of liquidity.
Recent deposit and withdrawal resumptions show the real-name system still gates every transaction after an incident.
Account opening and routine transfers are one test of this framework. The other comes whenever something breaks and an exchange has to resume service. When Upbit resumes deposit and withdrawal services for a given asset after a pause, the real-name framework doesn't go anywhere, it becomes the backbone of the resumption itself. Upbit tells users to log in and generate a new deposit address for the resumed asset before transferring anything, and treats this as a non-negotiable first step. That new address still lives inside the same real-name verified account structure: the exchange already knows who the user is and which K-Bank account they're tied to, so the fresh address is a technical safeguard layered on top of the identity check, not a substitute for it.
The practical guidance during these rollouts echoes the same caution baked into the whole system. Double-check the network before withdrawing. Start with a small test transaction if you're unsure. Use only deposit addresses generated through the exchange's official interface, never an old saved one. These steps guard against technical errors, but they sit on top of a verification architecture that has already confirmed the person moving funds is who they claim to be, and that their bank account matches their trading identity.
Security incidents elsewhere in the ecosystem show where that architecture still has gaps. After a data leak affecting Bithumb users raised phishing risks, the practical advice that followed, like using a separate email alias for each exchange account, was a reminder that identity verification protects the account-opening stage but doesn't eliminate every risk downstream. For anyone tracking Korean financial markets, the lesson is that real-name verification isn't a one-time checkbox. It's a continuous link between a person, a bank account, and an exchange, re-tested every single time money moves. That repeated check answers the original question about bank mismatches directly: a trader without the right bank account isn't locked out permanently, they simply can't complete a withdrawal until the name on their exchange account matches the name on a specific partner bank account exactly. That match is what makes every KRW withdrawal in Korea traceable back to one verified identity.