Japan's FSA Demands Security Improvements from Exchanges

On January 18, 2018, Japan's Financial Services Agency (FSA) issued formal requests to multiple cryptocurrency exchanges operating in the country, demanding enhanced security measures and improved customer protection protocols. The regulatory action came in response to growing concerns about exchange security following several high-profile hacks and thefts that had resulted in hundreds of millions of dollars in customer losses.

Japan had taken a relatively progressive approach to cryptocurrency regulation, becoming one of the first major economies to recognize Bitcoin as legal tender in 2017 and implementing a licensing regime for cryptocurrency exchanges. However, the rapid growth of the industry had exposed weaknesses in security practices at many exchanges, which were handling billions of dollars in customer assets with inadequate safeguards.

The FSA's intervention demonstrated that even in jurisdictions with relatively crypto-friendly regulatory frameworks, exchanges would be held accountable for protecting customer funds. The agency's demands included requirements for improved cold storage practices (keeping the majority of customer assets offline), enhanced cybersecurity measures, better internal controls, and clearer customer disclosures about risks.

For Bitcoin users, the FSA's actions represented both positive and negative developments: on one hand, stronger exchange security requirements would better protect customer funds; on the other hand, increased regulatory compliance costs and scrutiny could reduce the number of exchange options and increase barriers to entry.

The Japanese regulatory approach—licensing and supervising exchanges rather than attempting to ban cryptocurrency activity—would prove influential as other jurisdictions developed their own regulatory frameworks.The FSA's January 18 notice foreshadowed more aggressive regulatory action that would come following the massive Coincheck hack that occurred just days later.