Skip to main content

This site is for educational purposes only. Nothing here constitutes financial advice.

Back to all jurisdictions

Japan

FSA-supervised Payment Services Act + JVCEA self-regulation; world's first formal crypto-exchange licensing regime, established 2017.

Primary regulators:
Financial Services Agency (FSA)
JVCEA (self-regulatory organisation)
National Tax Agency

Not legal or tax advice. This guide is an educational summary of the public regulatory framework. Crypto rules in every jurisdiction change frequently and depend on facts specific to each user. Consult a qualified professional licensed in Japan for any consequential decision.

Japan was the first major economy to formally license crypto exchanges, establishing the Payment Services Act (PSA) crypto framework in April 2017 — months ahead of any other comparable jurisdiction. The Financial Services Agency (FSA) is the lead regulator; the Japan Virtual and Crypto Assets Exchange Association (JVCEA) is the FSA-recognised self-regulatory organisation handling day-to-day standards and member supervision.

Japan's framework is characterised by: (1) strict licensing requirements that have historically resulted in fewer-than-30 approved exchanges; (2) mandatory cold-storage of customer assets (97%+ in cold storage post-Coincheck hack); (3) clear tax treatment as 'miscellaneous income' taxed at marginal rates up to ~55%; (4) post-2023 stablecoin framework distinguishing electronic-payment-instrument stablecoins from prepaid-payment-instrument tokens; (5) ongoing FSA enforcement focus on AML and customer-protection compliance.

Japan's approach is often described as 'principles-based with high implementation standards' — fewer rules than the US framework, but those rules are enforced rigorously. For users, the most visible effect is the small set of FSA-licensed domestic exchanges and the strict information-collection requirements imposed on those exchanges.

Regulatory framework overview

Payment Services Act (PSA) crypto framework. Following the Mt. Gox collapse (2014), Japan amended the PSA in 2016 (effective April 2017) to create the world's first formal crypto-exchange licensing regime. The amended PSA defines 'crypto-assets' (formerly 'virtual currencies'), requires registration of all crypto-exchange service providers (CESPs), and sets out conduct-of-business requirements.

JVCEA self-regulation. The Japan Virtual and Crypto Assets Exchange Association is the FSA-recognised SRO handling: token-listing review (tokens must pass JVCEA review before listing on member exchanges); AML guidelines for members; cybersecurity standards; member dispute resolution. JVCEA's listing reviews are notably conservative; new-token approvals have been infrequent compared to other major markets.

Financial Instruments and Exchange Act (FIEA). Crypto-assets are not 'securities' under FIEA, but certain tokens functioning as investment contracts (the 'electronically recorded transferable rights' / ERTRs introduced by the 2020 FIEA amendments) fall within FIEA's scope. Tokenised securities and structured crypto products typically fall under FIEA rather than the PSA.

Coincheck and Mt. Gox precedents. Japan's strict approach is driven by two major historical exchange collapses: Mt. Gox (February 2014, ~850K BTC missing) and Coincheck (January 2018, ~$530M NEM stolen). Both prompted material framework revisions; the post-Coincheck rules require 97%+ cold-storage of customer assets and mandatory customer-asset segregation with strict bankruptcy-remoteness.

Exchange licensing

CESP registration requirements. Crypto-Exchange Service Providers must register with the FSA under PSA Article 63-2. Registration requires: minimum capital (¥10 million / approximately $65K, plus substantial net-worth requirements in practice); fit-and-proper assessment of officers and major shareholders; comprehensive AML / KYC / transaction monitoring programmes; cybersecurity arrangements meeting JVCEA standards; segregation of customer assets with 97%+ in cold storage; business-continuity plans; compliance officer designation.

The licensing bar. The FSA has historically granted CESP registration to a small set of operators — roughly 27 as of mid-2026. The combination of high capital and infrastructure requirements, JVCEA listing reviews, and FSA discretion has kept the licensed exchange count materially below comparable major-market counts. Foreign exchanges may not solicit Japanese customers without local registration; the FSA has been active in issuing warning notices to overseas exchanges that target Japanese users.

Token listing process. Each new token a licensed exchange wishes to list must pass JVCEA review. The review examines: technical security, tokenomics, team / governance, AML risk, and market integrity. Listings that pass JVCEA review can then proceed; JVCEA review takes months and a substantial fraction of submissions do not pass.

Stablecoin rules

2023 PSA stablecoin framework. Japan amended the PSA in 2022 (effective June 2023) to create a dedicated stablecoin regulatory framework distinguishing two categories: (a) Electronic Payment Instruments (EPIs) — fiat-backed stablecoins issued by banks, money-transfer service providers, or trust companies, redeemable at par and 1:1-reserved; (b) Prepaid Payment Instruments — utility tokens with stable value used within a specific platform, not redeemable in fiat.

EPI issuer requirements. EPI issuers must be regulated financial institutions: a bank, a fund-transfer business, or a trust company. Reserves must be held 1:1 in segregated accounts at qualifying institutions. Daily redemption at par is mandatory. The 2023 framework was the first major-economy formal stablecoin regime preceding MiCA's full application.

Practical effect. USDT and USDC have limited availability on Japanese-licensed exchanges. Some Japanese banks and trust companies have explored EUR / USD / JPY stablecoin issuance; Progmat Coin (consortium of MUFG and others) is the most-developed Japanese-issued stablecoin initiative. The framework intentionally favours bank-issued stablecoins over uncollateralised or non-bank-issued alternatives.

Tax framework

Miscellaneous income treatment. The National Tax Agency treats crypto disposals (including spending, swapping, and selling) as taxable events. Gains are classified as 'miscellaneous income' (zatsu shotoku) and taxed at the individual's marginal income tax rate, which combined with prefectural and municipal residence taxes can reach approximately 55% at the highest bracket. There is no separate preferential capital-gains rate.

Loss handling. Crypto losses can offset other miscellaneous income but cannot be carried forward to subsequent years or offset against employment / business income. This treatment is materially less favourable than the equity-investing CGT framework and is a significant point of practitioner advocacy.

Mining, staking, and airdrops. Mining and staking rewards are miscellaneous income at fair-market value on receipt. Airdrops are similarly miscellaneous income on receipt. NFT transactions follow the same miscellaneous-income framework with cost-basis tracking per NFT.

Salary-and-benefit treatment. Crypto received as salary or compensation is taxed as employment income, not miscellaneous income, at the time of receipt. Subsequent disposal of those tokens is a separate miscellaneous-income event measured against the receipt-value cost basis.

This is general background, not tax advice. Japanese tax treatment depends on specific facts and ongoing NTA guidance. Consult a Japanese-qualified zeirishi (tax accountant) experienced with crypto for personal tax matters.

AML, sanctions, and travel-rule compliance

Act on Prevention of Transfer of Criminal Proceeds. Japan's AML framework applies to CESPs as 'specified business operators.' Customer identification, ongoing monitoring, suspicious-transaction reporting, and recordkeeping requirements are mandatory. The Japanese FIU (JAFIC) processes crypto-related suspicious-transaction reports alongside conventional ones.

Travel Rule. Japan implemented the FATF Travel Rule in 2023 with effective date June 2023. CESPs must collect and transmit originator and beneficiary information for all crypto transfers between CESPs (no de minimis threshold for transfers between Japanese-licensed exchanges). Transfers to self-hosted wallets require originator information collection and verification of beneficial ownership of the destination address.

Sanctions compliance. Japanese CESPs must screen transactions against the international sanctions lists Japan implements (UN sanctions, Japan-specific designations targeting North Korea, Russia post-2022, Iran, etc.). The Ministry of Foreign Affairs and Ministry of Finance jointly administer sanctions enforcement; CESP non-compliance is enforced via PSA-based regulatory actions.

Retail-investor protections

Mandatory cold storage. Post-Coincheck, FSA rules require CESPs to hold 95%+ (in practice typically 97%+) of customer crypto-assets in cold storage. The cold-storage requirement is among the strictest in any major jurisdiction and is verified through FSA on-site inspections.

Customer-asset segregation. Customer crypto-assets must be segregated from CESP proprietary assets and held in bankruptcy-remote structures (typically via trust banks or dedicated custody arrangements). The Mt. Gox-style commingling is explicitly prohibited; Coincheck-style hot-wallet concentration is restricted via the cold-storage requirements.

JVCEA standards. Member CESPs must comply with JVCEA's marketing, complaint-handling, and customer-onboarding standards. Marketing to retail customers must be balanced, include risk warnings, and avoid 'misleading representations.' Solicitation of speculative trading is restricted under JVCEA self-regulation.

On-chain reporting and monitoring

FSA inspection regime. Licensed CESPs are subject to regular FSA on-site inspections covering AML, customer-asset segregation, cybersecurity, and conduct of business. Inspection findings can trigger administrative actions including business-improvement orders, business-suspension orders, and (in extreme cases) registration revocation.

National Tax Agency data access. The NTA has routine data-sharing arrangements with licensed Japanese CESPs. Japanese taxpayers should assume the NTA has visibility into crypto activity on domestic exchanges. The NTA has also conducted information-gathering exchanges with overseas exchanges identified as serving Japanese customers; OECD CARF implementation in Japan is on a 2027-2028 timeline.

The 2025 cybersecurity framework. Following the 2018 Coincheck and 2024 DMM Bitcoin hacks, the FSA published updated cybersecurity guidance for CESPs covering: cold-wallet key management, hot-wallet rotation, multi-signature requirements, third-party-vendor security assessments, and incident-response readiness. Compliance is monitored via JVCEA self-assessments plus FSA inspections.

Key statutes and regulatory texts

Sources & further reading

We prioritise primary sources. Where a topic moves quickly (regulation, security incidents), we re-check sources on the cadence shown by the page's "Next review" date.

Related on Block Clarity Hub