Upbit's Legal Glow-Up: Court Tells FIU to Actually Write the Rules Before Enforcing Them

In a ruling that reads like a regulatory facepalm, a South Korean court has told the Financial Intelligence Unit to try again after Upbit's parent company Dunamu successfully challenged a three-month partial business suspension. It's the crypto equivalent of your professor telling you to redo your homework—but cooler, because money was involved.

The Seoul Administrative Court sided with Dunamu on Tuesday, overturning the FIU's sanction tied to alleged AML violations. The judges pointed out what many in the industry have long suspected: while rules for transactions above 1 million won (~$675) are crystal clear, anything below that sits in a regulatory gray zone nobody bothered to define. Imagine building a castle on sand, then being shocked when it floods. That's basically what happened here, but with spreadsheets.

The decision essentially puts a pin in the FIU's ability to slap major AML penalties on exchanges when the compliance playbook is more suggestion than instruction. It's like getting fined for a traffic violation while the cops forgot to paint the lines on the road. Technically someone's still wrong, but good luck proving it in court.

The saga started in February 2025 when the FIU hit Dunamu with the suspension, blocking new Upbit users from transferring digital assets. The regulator claimed Dunamu processed transactions with unregistered overseas VASPs and dropped the ball on customer due diligence. The FIU also flagged over 600,000 suspected KYC violations during its review. That's a lot of "oops" forms to go through, for those counting at home.

Dunamu wasn't having it. The company filed suit and requested an injunction practically the next day. On March 27, 2025, the court granted the injunction, letting Upbit keep onboarding new users while the case played out