Tether USDT Order Sharing Lands Bithumb a $136,000 South Korea Privacy Fine

Crypto News

South Korea's Personal Information Protection Commission (PIPC) imposed a 210 million won fine, roughly $136,000, on Bithumb Korea for transferring user data overseas without valid consent. The penalty, agreed at the commission's 12th plenary session, follows a multi-month probe into how the exchange handled personal data during cryptocurrency transactions between September and November 2025. Investigators concentrated on activity in the Tether (USDT) market — USDT being among the largest fiat-backed stablecoins — where Bithumb shared order-book information with foreign trading venues. The commission also issued a corrective order requiring the exchange to meet legal cross-border transfer requirements. It ranks among the country's most direct privacy enforcement actions against a digital-asset platform to date.

At the center of the case sits a consent mismatch the commission described as a clear breach. Bithumb informed users that their personal information would be moved to the Stellar exchange, yet investigators determined the data — including member identification numbers and order details — was actually routed to a system operated by BingX. Under South Korean privacy law, the stated destination of any overseas transfer must be accurate, and the discrepancy alone constituted a violation. The finding underscores how strict the jurisdiction has become on destination disclosure, a requirement many crypto venues operating across borders in fast-moving altcoin and stablecoin markets still underestimate.

A second strand of the ruling addressed anti-money-laundering practices. When moving customer crypto to thirteen overseas exchanges, Bithumb supplied senders' and recipients' names and wallet addresses to satisfy travel-rule obligations, and shared dates of birth with one venue to confirm that sender and receiver were the same person. The commission acknowledged the legitimate AML rationale but ruled the transfers still breached consent requirements because users had not separately authorized them. The distinction matters: regulators accepted the operational necessity of the data sharing while still treating itemized user consent as non-negotiable for any movement of personal information beyond national borders.

Alongside the penalty, the PIPC published a new set of Blockchain Service Personal Information Protection Guidelines. The framework addresses the technology's defining traits — transparency, decentralization and immutability — and offers guidance on preventing on-chain tracing, managing information sharing between participants, and disposing of personal data on ledgers that cannot easily be altered. The move signals that Seoul intends to regulate not only centralized exchanges but the underlying infrastructure. Decentralized lending venues such as Aave and other on-chain protocols face the same tension the guidelines try to resolve: how to honor data-deletion rights on a system engineered never to forget.

Bithumb's regulatory troubles extend beyond data privacy. South Korean police have separately booked the exchange's chief executive as a suspect in an inquiry tied to a hiring request involving a lawmaker's son, according to local reporting. The case adds to a widening set of legal and compliance pressures on one of the country's largest exchanges, which has also faced reported scrutiny over anti-money-laundering obligations that could carry a partial six-month suspension of certain operations. Together the threads paint a platform navigating intense official attention as South Korea tightens oversight of an industry that processes enormous retail volume relative to the size of its economy.

A separate incident continues to shadow the exchange after Bithumb mistakenly distributed roughly 620,000 Bitcoin (BTC) in an erroneous payout, of which the firm says about 99.7% has since been recovered. The episode prompted the Bank of Korea to recommend introducing circuit breakers for the domestic crypto market, a mechanism that would halt trading during extreme volatility. Reports also place any potential Bithumb initial public offering no earlier than 2028. The accumulation of operational mishaps and pending sanctions illustrates why Korean authorities are moving simultaneously on privacy, market-structure and AML fronts rather than treating each failure in isolation.

Read together, these developments mark a coordinated tightening of crypto oversight in one of Asia's most active markets, where privacy, AML and market-structure concerns now advance in parallel. The pressure lands as broader sentiment stays fragile: COINOTAG's aggregate market data puts the Fear & Greed Index at 13 out of 100, deep in extreme-fear territory, with Bitcoin dominance at 70.4% and total crypto market capitalization near $1.71 trillion — a defensive configuration far from any all-time high. Our reading is that capital is concentrating in Bitcoin while regulatory risk reprices smaller venues. The PIPC filing itself, not market chatter, is the load-bearing source here: itemized consent is now the enforceable standard for cross-border crypto data in South Korea.