Defy
Compliance & Regulation

Japan FSA Crypto Compliance Guide: JFSA Regulations, Licensing & AML Requirements

Defy Team
2026-02-25
11 min read
#Japan#FSA#JFSA#Crypto Regulation#JVCEA#Virtual Currency#AML Compliance
## What Is Japan's Crypto Regulatory Framework Under the JFSA? Japan's Financial Services Agency (JFSA, commonly abbreviated FSA) is the primary regulatory body overseeing crypto asset businesses in Japan. The FSA enforces the **Payment Services Act (PSA)** and the **Act on Prevention of Transfer of Criminal Proceeds**, which together form the legal backbone of Japan's crypto compliance regime. Japan was among the first major economies to legally recognize crypto assets as a form of payment instrument following the 2017 PSA amendments, and has since built one of the most structured regulatory environments globally. As of early 2026, Japan has approximately **30 registered Crypto Asset Exchange Service Providers (CAESPs)**, all subject to rigorous capital, custody, AML, and reporting obligations. ## What Are the Key Amendments to Japan's Payment Services Act? The Payment Services Act has undergone two landmark amendment cycles. The **2020 PSA amendments** formally replaced the term "virtual currency" with "crypto asset" to align with FATF standards, and expanded regulation to cover derivatives trading under the Financial Instruments and Exchange Act (FIEA). The **2022 PSA amendments** introduced Japan's stablecoin regulatory framework, categorizing electronic payment instruments into three types: bank-issued tokens, fund settlement law tokens, and trust-backed tokens. Each category carries distinct issuance, redemption guarantee, and AML obligations. ## How Does the JVCEA Self-Regulatory Framework Work? The Japan Virtual Currency Exchange Association (JVCEA) operates as a certified self-regulatory organization recognized by the FSA. All registered CAESPs are required to become JVCEA members and adhere to its self-regulatory rules, which in many cases exceed minimum statutory requirements. The JVCEA publishes detailed rule sets covering **listing standards for new crypto assets**, **system risk management guidelines**, **customer asset segregation audits**, **advertising rules**, and **KYC procedures**. This dual-layer oversight means that crypto businesses in Japan must satisfy two distinct compliance frameworks simultaneously. ## What Are the License Types for Crypto Businesses in Japan? | License Type | Governing Law | Primary Activity | Regulator | |---|---|---|---| | Crypto Asset Exchange Service (CAES) | Payment Services Act | Spot crypto trading, custody, transfer | FSA / JVCEA | | Financial Instruments Business – Type I | FIEA | Crypto derivatives, margin trading | FSA | | Electronic Payment Instruments Exchange Service (EPIES) | Payment Services Act (2022) | Stablecoin intermediation | FSA | | Fund Settlement Business | Payment Services Act | Prepaid payment instruments | FSA | ## What Are the Capital and Custody Requirements? Registered CAESPs must maintain **net assets of at least 10 million JPY** (approximately 65,000 USD) at all times. Customer crypto assets must be held in **cold storage at a ratio of at least 95%**, with the remaining 5% in hot wallets for operational liquidity. Annual third-party audits of segregated asset holdings are mandatory, and operators must demonstrate solvency and full coverage of customer assets at all times. ## How Is Japan's Travel Rule Implemented? Japan implemented the FATF Travel Rule in **June 2023**. For transfers of **3,000 JPY or more** (approximately 20 USD), the sending exchange must transmit the originator's name, account number, and address, as well as the beneficiary's name and account number. Japan has endorsed **TRUST** and **TRISA** as primary Travel Rule interoperability protocols. | Travel Rule Parameter | Japan Requirement | |---|---| | Effective Date | June 2023 | | Threshold | 3,000 JPY (~20 USD) | | Originator Data Required | Full name, account number, physical address | | Beneficiary Data Required | Full name, account number | | Unhosted Wallet Treatment | Enhanced due diligence required | | Endorsed Protocols | TRUST, TRISA | ## What Is Japan's Stablecoin Regulatory Framework? Japan's 2022 PSA amendments created a dedicated stablecoin framework effective **June 2023**. Permitted issuance structures include **bank-issued tokens**, **trust-backed tokens**, and **fund settlement tokens**. Algorithmic stablecoins with no fiat reserve backing are not recognized. Foreign stablecoin issuers must either establish a domestic issuance structure through a licensed entity or partner with a registered EPIES intermediary. ## What Recent FSA Enforcement Actions Should Teams Know About? Key enforcement milestones include the **2018 business improvement orders** following the Coincheck hack (58 billion JPY in NEM stolen), the **2021 suspension order against BitFlyer** for AML weaknesses, and ongoing FSA inspections of unlicensed foreign exchanges. In 2024–2025, the FSA intensified scrutiny of unlicensed foreign platforms offering services to Japanese users via app stores and social media. ## What Are Japan's Crypto Tax Reporting Obligations? Crypto gains are classified as **miscellaneous income** subject to a **maximum effective tax rate of approximately 55%**. All disposals are taxable events, and gains are calculated using the moving average cost method or total average cost method. From 2026, exchanges are anticipated to face enhanced reporting mandates aligned with the OECD's **Crypto-Asset Reporting Framework (CARF)**. ## How Long Does the CAES Registration Process Take? CAES registration typically requires **12 to 24 months** from initial filing. Applicants must submit corporate and governance documentation, AML/CFT manuals, system risk management policies, customer asset segregation procedures, and cybersecurity assessment reports. Foreign companies must establish a **Japanese legal entity** and appoint a resident representative. ## How Can Defy Help With Japan FSA Compliance? Defy provides a purpose-built compliance platform for crypto businesses operating in regulated jurisdictions including Japan. Our **real-time AML screening** and **transaction monitoring** tools are calibrated to Japanese regulatory thresholds and FSA examination standards, while our **Travel Rule solution** supports TRUST and TRISA protocol integration. Defy's **risk scoring engine** applies entity-level and transaction-level risk signals aligned with FATF recommendations and FSA guidance. Contact us at [getdefy.co](https://getdefy.co/contact) for a compliance readiness assessment.

More with Defy

Contact us to learn more about our compliance and security solutions.

Contact Us

Share This Article

Help this article reach more people by sharing it on social media.

Stay Updated on Compliance and AI Trends

Subscribe to our weekly newsletter and never miss the latest industry developments