Upbit is the dominant retail crypto exchange in South Korea and a very different product from Binance or OKX. Its Korean service is built around won trading, domestic identity checks and local banking rather than offshore derivatives. It ranked third in the CoinMarketCap spot snapshot captured on August 14, 2026, largely reflecting the scale of its spot activity.
This Upbit review finds a strong option for eligible Korean residents who need KRW markets and a locally reported virtual-asset service provider. It is not a universal global exchange: Upbits Singapore, Indonesia and Thailand operations use different entities, licences, markets and fiat rails.
Operator and Korean status
Upbit Korea is operated by Dunamu Co., Ltd. The Korean Financial Intelligence Units June 30, 2026 VASP status material names Dunamu/Upbit among reported virtual-asset service providers. The KoFIU site also explains that customer fiat at reported providers must be managed separately from proprietary property under Korean rules.
Registration is primarily a legal and anti-money-laundering status, not a government guarantee of token value. South Koreas Virtual Asset User Protection Act added customer-asset and unfair-trading protections from July 2024, but crypto remains volatile and custodial.
Korean users normally need real-name banking and full customer verification. Account availability for non-residents is limited, so an overseas user should not assume that a Korean phone number or translated page is enough.
KRW, BTC and USDT markets
Upbit offers KRW order books alongside BTC and USDT markets. KRW markets are the centre of activity and often produce large domestic premiums or discounts relative to international USD prices. A tokens Upbit KRW price should therefore be compared after currency conversion, not copied as a global reference.
The official help centre lists a minimum order of 5,000 KRW for the won market, 0.00005 BTC for BTC markets and 0.5 USDT for USDT markets. Orders receive price priority and then time priority. Upbit is a spot exchange; it does not present the same extensive leveraged perpetual suite as offshore derivatives venues.
This spot focus reduces one source of liquidation risk, but it does not make speculative altcoins safe. Korean listing and delisting notices can move prices sharply.
Trading fees and won balances
Upbit calculates the trading fee as executed quantity multiplied by executed price and the applicable market rate. KRW spot fees have often been promoted around 0.05%, while specific order features or campaigns can use a different rate. Upbits own help examples show 0.139% in certain contexts, so the order screen and current fee explanation should control.
At 0.05%, a 1,000,000 KRW purchase costs 500 KRW. At 0.139%, it costs 1,390 KRW. The difference matters for frequent trading. Upbit states that fees include VAT and apply to the executed portion.
Eligible Korean residents also receive a usage payment on qualifying KRW deposits. Upbits current notice states an annual 2.1% pre-tax rate, calculated from the daily closing KRW balance and paid quarterly after 15.4% withholding. The rate can change and should not be confused with a return on crypto holdings.
Security history: the 2019 ETH theft
On November 27, 2019, Upbit disclosed an unauthorized transfer of 342,000 ETH from its hot wallet. The exchange suspended deposits and withdrawals, moved assets and said it would cover the loss with corporate funds rather than charge customers.
The incident remains relevant even though no customer haircut was reported. It demonstrates hot-wallet and operational risk at a high-volume domestic exchange. A present-day assessment should consider how custody, withdrawal signing and monitoring evolved afterward, not pretend the event never happened.
Dunamu has published procedures relating to customer-asset verification, including reports reconciling cash and digital assets. Such reports are useful but dated. They do not guarantee that a future breach cannot occur.
Account security and phishing
Upbit supports strong login verification and monitors unusual account activity. Users should protect the Kakao-linked or other associated credentials, use a unique password and secure the mobile number against SIM changes.
Its fraud guidance warns about fake QR login pages, KakaoTalk impersonators, false listing offers and callers who tell users to purchase a specific asset. Upbit says listing decisions are confidential and not sold through private messages.
Open API keys are another risk. A trading bot with exposed Access and Secret keys can create harmful orders even if withdrawals are disabled. Use IP restrictions, minimal permissions and separate keys.
Deposits, withdrawals and Travel Rule
Won deposits and withdrawals depend on the real-name bank arrangement and identity match. Bank maintenance, new-account limits or fraud monitoring can delay access. Keep the funding bank and exchange profile names identical.
Crypto transfers are subject to Korean Travel Rule controls. Upbit may request destination exchange and beneficiary details and may limit transfers to providers it can verify. A blockchain address that works technically may still fail compliance checks.
Check supported network and memo. XRP, XLM and other assets can require a destination tag or memo; leaving it out may need manual recovery. Send a test amount above the deposit minimum.
Listing and delisting risk
Upbits concentrated Korean liquidity can cause a token to react strongly to a trading-support notice. The exchange uses the term “termination of trading support” for delisting. Deposits may stop before trading, while withdrawals remain available for a defined period.
Users should read the specific notice rather than rely on a chat-room translation. Cancel orders, record the deadline and verify another wallet before moving assets. Fake migration links commonly target holders during a delisting.
Complaints and operational limits
Typical complaints involve delayed verification, bank-transfer restrictions, Travel Rule rejection, missing memos and asset withdrawal maintenance. Evidence should include the KRW transfer receipt or blockchain hash, asset, network, destination and support case.
Korean-language support and domestic complaint channels are an advantage for residents but a barrier for outsiders. The country-specific design is a feature, not a defect, for the intended user base.
Verdict
Upbit is best for verified Korean residents who want liquid KRW spot markets, local banking and a platform within Koreas VASP framework. Its spot orientation and published domestic controls are positives. Limitations include restricted international access, region-specific transfer rules and sensitivity to Korean listing decisions.
The 2019 ETH theft remains a material security event, while the current FIU status and asset-separation regime provide important context. Verify fees at order time, secure the linked identity accounts and test both KRW and crypto withdrawals. CMC rank three reflects exceptional market activity, not immunity from custody or compliance risk.
