PSA Registration Requirements for Crypto Exchanges in Japan 2025
Nov, 14 2025
PSA Asset Storage Calculator
Why this matters: Under Japan's Payment Services Act, at least 95% of all customer crypto assets must be stored in offline cold wallets. This requirement was implemented after the 2018 Coincheck hack where $530 million was stolen. Failure to comply results in license revocation.
If you're thinking about running a cryptocurrency exchange in Japan, you need to know one thing upfront: PSA registration isn't just a formality. It's the only legal way to operate. The Financial Services Agency (FSA) doesn't allow unregistered platforms to touch Japanese customers' money or crypto. And if you try? You're looking at criminal penalties - up to three years in confinement, or fines of up to JPY 3 million. That’s not a warning. It’s the law.
What Exactly Is the Payment Services Act (PSA)?
The Payment Services Act (PSA) is Japan’s main law governing digital currency exchanges. Passed in 2017 and updated most recently in 2025, it defines what counts as a "crypto asset" - anything that isn’t tied to yen or any other fiat currency and can be used to pay people you don’t know. Bitcoin, Ethereum, Solana - those qualify. Prepaid cards backed by yen? Not crypto. Bank-issued digital coins? Not crypto either. Under Article 63-2 of the PSA, any business that buys or sells crypto assets as part of its operations must register as a Crypto Asset Exchange Service Provider (CAESP). This applies to everyone - local startups, foreign giants, even small teams. No exceptions. The FSA doesn’t care how big or small you are. If you’re trading crypto for money or other crypto with Japanese users, you need registration.Who Can Apply for PSA Registration?
You can’t just show up with a website and a business plan. The FSA only accepts applications from two types of entities:- Japanese stock companies (kabushiki-kaisha)
- Foreign companies that set up a Japanese subsidiary
Financial Requirements: It’s Not Cheap
The FSA doesn’t just want you to be legal - it wants you to be financially solid. Here’s what you need:- Minimum capital of JPY 10 million (about $65,000 USD)
- Positive net assets - you can’t be in debt when you apply
- Ongoing capital maintenance - you must keep this amount at all times
Compliance Systems: The Real Hurdle
Money isn’t the only barrier. The FSA demands you build full compliance infrastructure before you even submit your application. This includes:- Internal controls to prevent money laundering and fraud
- A dedicated compliance officer based in Japan
- Real-time transaction monitoring systems
- Employee training programs on AML/KYC rules
- Documentation of every step in your customer onboarding process
Customer Asset Protection: Cold Wallets Are Mandatory
One of the strictest rules in Japan is how you store users’ crypto. You can’t mix customer funds with your own. Not even a little.- At least 95% of all user crypto assets must be stored in offline cold wallets
- Remaining 5% can be in hot wallets for trading, but must be fully insured
- All user assets must be separately accounted for - no commingling allowed
Advertising and Marketing: No Hype, No Promises
You can’t say "get rich quick" or "10x returns guaranteed" in Japan. The FSA bans any marketing that implies crypto is a sure bet. Ads must be factual, clear, and avoid emotional language.- No before-and-after profit screenshots
- No celebrity endorsements promising gains
- No vague terms like "high-yield" or "risk-free"
The Application Process: Six Months Minimum
The official review period for a PSA application is six months. But that’s only the start. Most companies spend 8 to 12 months preparing before they even submit. Here’s what’s required in the application:- Company registration documents (articles of incorporation, tax ID)
- Names and backgrounds of all directors and major shareholders
- Full list of crypto assets you plan to list
- Details on how you’ll segregate customer assets
- Outsourcing agreements (if you use third-party custody or tech providers)
- Technical architecture diagrams of your systems
- Compliance manuals and internal audit procedures
What Happens After You Get Registered?
Getting approved isn’t the end. It’s the beginning of ongoing oversight.- You must submit quarterly financial reports
- You’re subject to unannounced on-site inspections
- You must report any security breaches within 24 hours
- You’re required to join the Japan Virtual Currency Exchange Association (JVCEA)
What About Security Tokens?
Not all crypto is treated the same. If your platform offers tokens that act like investments - think dividends, profit-sharing, or ownership rights - you’re no longer under the PSA. You fall under the Financial Instruments and Exchange Act (FIEA), which is even stricter. The FIEA requires full securities licensing, additional capital, and investor suitability checks. Most crypto exchanges stick to spot trading of Bitcoin and Ethereum to avoid this extra layer. But if you plan to list tokenized stocks, bonds, or real estate funds, you’ll need a completely different license.Who Can’t Get Registered?
The PSA filters out weak players. If you’re:- A startup with less than JPY 10 million in funding
- A foreign company trying to operate from overseas
- Someone without a clear compliance team in Japan
- Using unproven or unaudited tech systems
Why Japan’s Rules Matter Globally
Japan’s PSA is the most detailed crypto regulatory framework in the world. It’s not perfect - it’s slow, expensive, and complex. But it works. Registered exchanges like Bitflyer, Coincheck, and Zaif have never suffered a major hack since the rules came in. Customer trust is high. Transactions are secure. And because of that, Japan remains one of the most active crypto markets in Asia. Other countries look to Japan as a model. The U.S. SEC, the EU’s MiCA, even Singapore’s MAS - they all reference Japan’s approach when drafting their own rules. If you’re building a crypto business today, understanding the PSA isn’t just about Japan. It’s about what the future of global regulation looks like.Can a foreign company register for PSA without setting up a Japanese subsidiary?
No. The Financial Services Agency (FSA) has never approved a foreign crypto exchange operating through a branch office in Japan. All registered foreign entities must establish a Japanese kabushiki-kaisha (stock company) with local directors, a physical office, and a Japanese bank account. This ensures full legal accountability under Japanese law.
How long does PSA registration take?
The official review period is six months, but most applicants spend 8 to 12 months preparing documentation, building compliance systems, and finalizing internal controls before submitting. Delays are common if the FSA requests revisions or additional proof of systems.
What happens if a crypto exchange operates without PSA registration?
Operating without PSA registration is a criminal offense. Under Article 107 of the amended Payment Services Act, violators face confinement punishment (koukin-kei) - a form of detention under Japan’s 2022 Penal Code amendments - and fines up to JPY 3 million. The FSA also has the power to shut down websites, freeze assets, and block payments to unlicensed platforms.
Do I need to use cold wallets for all customer crypto?
Yes. At least 95% of all customer crypto assets must be stored in offline cold wallets. The remaining 5% may be kept in hot wallets for trading purposes, but only if fully insured against theft or loss. The FSA requires detailed documentation proving how assets are segregated and secured at all times.
Can I list any cryptocurrency on my exchange after registration?
No. You must list only the specific crypto assets approved in your original application. Adding new tokens later requires submitting an amendment to the FSA, which involves additional review and approval. Listing unapproved assets is a violation of your license and can lead to suspension or revocation.
garrett goggin
November 15, 2025 AT 03:00So let me get this straight - Japan wants you to build a whole damn corporation just to trade crypto? And you can’t even use a branch office? That’s not regulation, that’s a corporate hostage situation. The FSA is basically running a VIP club for billionaires with Japanese last names and a taste for bureaucracy. Meanwhile, the rest of us are out here trying to move Bitcoin without hiring a compliance officer who charges more than my rent.
And don’t even get me started on the cold wallet rule. 95% offline? That’s not security, that’s digital hoarding. If your wallet’s colder than my ex’s heart, how the hell do you even trade? You gonna send a guy in a snowsuit with a USB stick to the vault every time someone wants to buy Dogecoin?
And the advertising ban? No ‘10x returns’? Cool. So now I can’t say ‘Buy Bitcoin and retire in Bali’? What am I supposed to say? ‘Here’s a regulated financial instrument with probabilistic volatility and non-guaranteed outcomes’? Yeah, that’ll sell.
Japan’s crypto rules aren’t about protecting users. They’re about protecting the status quo. And if you’re not a Tokyo-based hedge fund with a legal team the size of a small country, you’re just a hobbyist with a dream and a death wish.
Bill Henry
November 15, 2025 AT 10:02man i just read this whole thing and i’m like wow this is insane but also kinda makes sense? like yeah if you’re gonna handle people’s money you gotta be legit. i’m from the us where half the exchanges look like they were built in a garage with a free wordpress theme and i’m like… maybe japan’s onto something. yeah it’s a pain but at least you know your coins aren’t gonna vanish overnight. also 95% cold storage? that’s smart. coincheck happened for a reason. no more lazy storage.
still… jpy 10 mil minimum? that’s like 70k usd. i could buy a used car with that. how do small teams even start? feels like the system’s rigged for big players. but hey, if it keeps people safe, maybe it’s worth it.
Jess Zafarris
November 16, 2025 AT 14:13It’s fascinating how Japan’s approach is less about stifling innovation and more about forcing accountability. You can’t just slap together a website, call it a ‘crypto exchange,’ and start taking deposits. You need real infrastructure - real people, real offices, real legal responsibility. That’s not red tape, that’s responsibility.
Compare that to places where you can register a crypto company in the Caymans and still serve US customers with a VPN and a wink. That’s not innovation. That’s evasion.
And the cold wallet rule? Genius. After Coincheck, it was obvious: if you’re holding other people’s assets, you don’t get to gamble with them. The FSA isn’t being draconian - they’re being pragmatic. The real question is why more countries haven’t copied this model instead of pretending regulation is optional.
jesani amit
November 16, 2025 AT 16:03bro this is actually really well explained and i appreciate how detailed it is. i’m from india and here we have like zero clear rules - some exchanges operate, some get shut down randomly, and users just lose everything. japan’s system is tough but fair. you know exactly what you’re getting into. yes it’s expensive and slow, but at least you’re not playing russian roulette with your crypto.
also the cold wallet thing? 100% right. if you’re storing coins online, you’re asking for trouble. and the advertising ban? finally someone gets it - crypto isn’t a lottery ticket. it’s a tool. treat it like one.
if more countries did this, we wouldn’t have half the scams we see today. respect to japan for actually doing the hard work instead of just talking.
Peter Rossiter
November 18, 2025 AT 00:3310 million yen minimum capital? lol. that’s a joke. anyone with half a brain can fake a balance sheet. the real barrier isn’t money - it’s time. six months just to submit? that’s a death sentence for startups. the FSA isn’t protecting users - they’re protecting incumbents. Bitflyer doesn’t care if you take 8 months to apply. You do. And by then your investors have already bailed.
Also the JVCEA? A self-regulatory body that can recommend revoking licenses? That’s not oversight. That’s a cartel. Welcome to the crypto mafia, Japan. They’re just nicer about it.
Mike Gransky
November 18, 2025 AT 23:20Japan’s crypto rules are the most thoughtful in the world. They don’t pretend crypto is a fad. They treat it like finance - because it is. That means rules. That means responsibility. That means no shortcuts.
The cold wallet requirement alone saves users from disasters. The compliance officer requirement ensures someone’s actually watching. The advertising ban stops people from being scammed by influencers selling ‘guaranteed’ returns.
Yes, it’s expensive. Yes, it’s slow. But look at the results: registered exchanges in Japan haven’t been hacked. Not once. That’s not luck. That’s design. Other countries should stop copying Silicon Valley’s ‘move fast and break things’ nonsense and start copying Japan’s ‘move slow and don’t steal people’s life savings’ model.
Ella Davies
November 19, 2025 AT 07:51I’ve been watching Japan’s crypto regulation for years and honestly, it’s the only model that actually works. Most countries either ban it outright or let it run wild. Japan says: if you want to do this, you have to do it right. No half-measures.
The cold wallet rule, the 95% requirement, the segregation of assets - these aren’t arbitrary. They’re lessons learned from real losses. And the fact that they require a local subsidiary? That means accountability. Someone’s physically in Japan, responsible under Japanese law. No offshore shell companies. No ‘we’re not liable’ nonsense.
It’s not perfect, but it’s the most mature framework out there. Other regulators should study it, not dismiss it.
Henry Lu
November 20, 2025 AT 23:34Wow. Japan’s rules are so outdated they’re practically medieval. You need a Japanese corporation? That’s not regulation, that’s feudalism. And you can’t even list new coins without going back to the FSA? You think Bitcoin was invented in a boardroom? No - it was invented by someone who didn’t give a damn about compliance manuals.
And the 10 million yen minimum? That’s just a tax on innovation. Most startups can’t even afford a decent lawyer, let alone a Tokyo office with a Japanese director who speaks three languages and has a clean criminal record. This isn’t protecting users - it’s protecting the old guard.
Also, cold wallets? That’s like saying you can’t drive a car unless you keep it in a bunker. It’s not innovation - it’s stagnation dressed up as safety.
Lori Holton
November 21, 2025 AT 13:21It is, of course, entirely unsurprising that the Japanese Financial Services Agency has instituted a regulatory regime of such rigorous, almost Orwellian, precision. One must wonder, however, whether the imposition of a mandatory Japanese subsidiary - a legal entity that must be incorporated, capitalized, and staffed with local directors - constitutes not merely a regulatory hurdle, but a de facto barrier to entry designed to preserve domestic monopolistic control over the digital asset market. The prohibition against foreign branch applications, coupled with the total absence of any approved foreign branch registration in history, suggests not a technical requirement, but a deliberate exclusionary policy.
Furthermore, the requirement that 95% of customer assets be held in cold storage - while ostensibly protective - may, in fact, represent a form of financial containment, rendering liquidity unattainable for any but the most capital-saturated entities. The JVCEA, ostensibly a self-regulatory body, functions as a quasi-governmental gatekeeper, wielding de facto authority to recommend license revocation without public accountability. One must ask: is this regulation - or is this control?
Bruce Murray
November 22, 2025 AT 04:18I’ve been in crypto since 2017 and I’ve seen a lot of regulatory chaos. Japan’s system is the first one that actually feels like it’s trying to protect people instead of just looking good on paper. Yeah, it’s hard. Yeah, it’s slow. But look at the track record - no major hacks on registered exchanges. That’s not luck. That’s discipline.
And honestly? I think this is what the future looks like. Other countries are starting to wake up. The EU’s MiCA, the US’s growing enforcement - they’re all borrowing from Japan. It’s not about being the most exciting. It’s about being the most reliable. And that’s worth the wait.
Aayansh Singh
November 22, 2025 AT 18:32Let’s be real - Japan’s PSA is just a fancy way of saying ‘no outsiders allowed.’ You need a Japanese company? That’s not regulation, that’s economic nationalism. The FSA doesn’t care if you’re the most secure exchange in the world - if you’re not incorporated in Tokyo, you’re not welcome.
And the 95% cold wallet rule? That’s not security - it’s incompetence disguised as caution. If you can’t handle hot wallet security, you shouldn’t be in business. This isn’t protecting users - it’s protecting Japanese banks from competition.
Also, the JVCEA? A private association with licensing power? That’s not regulation - that’s fascism with a corporate logo. Japan’s crypto scene is a gated community for rich insiders. Everyone else is just a tourist with a wallet.
Rebecca Amy
November 24, 2025 AT 17:55okay but like… why is this even a thing? i just wanted to buy some ETH. why do i care if the exchange has a Japanese director or a cold wallet? this feels like someone spent 6 months writing a 50-page PDF just to make themselves feel important. also the advertising ban? i just want to see memes. not a legal disclaimer. 🤦♀️
Kathleen Bauer
November 25, 2025 AT 04:38honestly this is one of the clearest breakdowns i’ve seen. i’ve been trying to figure out why japan’s exchanges feel so… safe? and now i get it. it’s not magic. it’s rules. real ones. no shady stuff. no ‘we’ll fix it later’
the cold wallet thing? yes please. i lost coins once because an exchange said they were ‘secure’ and then poof. no more. 95% offline? good.
and the no hype ads? thank god. i’m so tired of people saying ‘invest in this coin and buy a yacht.’ no. just no.
it’s a pain to set up? sure. but if you’re serious about crypto, you should be serious about safety. japan gets it.
nikhil .m445
November 26, 2025 AT 10:03Japan has the most professional crypto regulation in the world. Other countries are still in the Stone Age. You cannot run a financial service without proper legal structure. A branch office is not enough. You must have a Japanese company with local directors. This is basic corporate governance. The FSA is not being difficult - they are being responsible. The 10 million yen capital is minimum. Many exchanges have 100 million. That is normal for serious business. Cold wallets are not optional. They are mandatory. It is not a suggestion. It is law. If you cannot follow this, you should not be in crypto. Japan is the model for the world.
garrett goggin
November 26, 2025 AT 16:23Wow. So the guy who said Japan is the model for the world is now quoting the FSA like it’s scripture. Congratulations. You’ve achieved the pinnacle of regulatory worship. Let me guess - you also think the FSA should have a statue in Shinjuku.
But here’s the thing - you don’t get to call it ‘professional’ when it’s designed to keep out competition. You want a Japanese subsidiary? That’s not compliance - that’s colonization. You want to be the global model? Fine. But don’t pretend you’re not just building a moat around your own market.
And don’t act like cold wallets are some revolutionary idea. They’re just slow. And expensive. And they don’t stop insider theft. The real problem isn’t hot wallets - it’s bad actors with access. But hey, if you want to spend 8 months filing paperwork instead of building better security, go ahead. I’ll be over here trading on exchanges that actually move.