The backbone of this system is the Payment Services Act (PSA), reinforced by Cabinet regulations and detailed guidelines from the Financial Services Agency (FSA). Unlike in many countries, where crypto laws are patchy or half-baked, Japan takes a no-nonsense stance: if you want to operate, you must register as a digital asset exchange provider. Without that, you’re simply illegal.
What makes Japan stand out is its obsession with technical discipline, not just financial flows. By law, client crypto must be held in cold wallets. If you dare to use hot wallets, you need to back every yen of it with your own assets. That way, the risk stays with the operator, not the users — and trust in the system grows stronger.
And the obligations don’t end there. Regulators will check your corporate structure, minimum capital, office presence, appointed managers, and the quality of your internal risk controls. Launching a crypto exchange in Japan isn’t a quick startup adventure — it’s a full-scale legal and organizational project that demands serious preparation and complete transparency.
That’s why an FSA license has become a kind of quality stamp. If an exchange makes it through this process, the market sees it as a serious player — one that meets the highest standards of client protection and financial stability.
The Legal Landscape: What Japan Really Polices
In Japan, crypto rules aren’t vague guidelines — they’re a tightly woven system where every definition has legal weight. A trading platform here is not simply a “marketplace” but is formally treated as a provider of crypto-asset exchange services. To wear that badge, a company has no choice but to go through registration with the Financial Services Agency (FSA), in line with the Payment Services Act (PSA).
This law locks in several non-negotiable principles. Client balances can’t mingle with company money, and users’ coins must be fully ring-fenced from the operator’s own stash. Even the way services are advertised is scrutinized — no glossy promises of quick profits, no fuzzy facts.
The finer details come not from the statute alone but from government ordinances, which lay out the mechanics: the paperwork required, how much capital a firm must maintain, and the kinds of compliance systems that need to run inside the business. These rules aren’t theory; they dictate the everyday routine of a licensed exchange.
On top of that, there are scenarios where activity drifts into another regime: the Financial Instruments and Exchange Act (FIEA). That happens if tokens start to behave like securities or serve as the backbone for derivatives. When that line is crossed, the licensing bar jumps higher, and oversight becomes far heavier.
Still, for the majority of platforms — especially those dealing with plain spot trading of well-known tokens — the PSA track is the one that matters. It’s the standard route into Japan’s market and, despite being demanding, it offers operators a clear, predictable framework to build on.
What Japan Demands Before You Can Run an Exchange
Think of Japan’s licensing process as a stress test, not just a formality. The idea is simple: only players who can survive under pressure get through the gate. That starts with the company structure. Casual setups won’t cut it — you need to form a kabushiki-kaisha, a joint-stock company under Japanese law. For outsiders, it’s not enough to have a name on paper abroad; you must open a local branch and appoint a resident manager who takes personal responsibility for playing by the rules.
Money is the next hurdle. Regulators want proof that you have skin in the game and a cushion to fall back on. The line is drawn at 10 million yen of capital (about USD 68,000) plus positive net assets. In practice, this test knocks out many would-be entrants — balance sheets don’t lie, and the FSA looks at them closely.
Then comes the self-regulation layer. Japan doesn’t leave exchanges floating solo; it expects them to slot into the industry’s watchdog network. The heavyweight here is the JVCEA, an association that sets standards for token listings, internal audits, and user safeguards. Membership is the easy road. Refusing it means proving to the regulator that your in-house rules are just as tough — a process that can drag on for months as companies rewrite policies again and again.
Security isn’t just a box to tick — it’s central. Before you even apply, you’re expected to build data-protection systems and put controls on every contractor you hire. If a vendor cuts corners, the blame falls on you, not them. The smart move is to have the full security playbook in place long before regulators come knocking.
How Customer Assets Are Locked Down
Japan doesn’t trust convenience — it trusts walls. Client fiat money is sealed away in trust accounts with licensed custodians. The operator can’t touch it, can’t borrow against it, and can’t use it to plug business gaps.
Crypto gets an even stricter design. Coins are separated from company holdings and by default parked offline in cold storage. Only the fraction needed for live transactions moves online, and every satoshi in those hot wallets must be mirrored by the exchange’s own reserves in the same currency.
Day to day, operators are expected to run reconciliations, divide authority over critical functions, and document exactly how keys are handled. Even outside contractors are pulled under this rulebook, and once again, the operator remains on the hook if they slip. Outsourcing agreements are therefore loaded with heavy clauses on security and reporting.
The effect is clear: Japan values durability over speed. Operators carry buffers in both yen and tokens, ensuring clients are shielded no matter what storm hits.
AML, CFT, and the Travel Rule: Treated Like Banks
In the eyes of Japan’s regulators, crypto exchanges aren’t scrappy startups — they’re financial institutions. That means full know-your-customer (KYC) procedures before a single trade: documents proving residency, address verification, and checks on where income comes from. This data turns into a client file that’s constantly monitored.
Every transaction is compared against that profile. If something feels off — unusual amounts, strange patterns — the exchange is required to flag it, notify the FSA, and submit a suspicious activity report. The system is built to catch anomalies, not to rubber-stamp routine.
The toughest test for many platforms is the Travel Rule. Any crypto transfer must carry identifying details of both sender and receiver — names, account information, contact data. Japan didn’t half-implement it; they plugged it in fully, aligned with FATF standards.
What that means in practice: your systems have to be able to automatically send and receive this information. If your counterparty can’t, the transaction dies on the spot. For regulators, this isn’t negotiable. For operators, it’s the point where global readiness is proven — or exposed as lacking.
Contact our specialists
Registering a Crypto Exchange in Japan: Navigating the FSA
Getting approval from Japan’s Financial Services Agency (FSA) is less about paperwork for its own sake and more about proving your house is already in order. Each stage of the process asks the applicant to show that internal systems aren’t just planned but already built and running. From experience, the difference between success and endless delays usually comes down to how much groundwork is done before the application lands on the regulator’s desk.
Here’s how the journey typically unfolds:
- Building the foundation Before any forms are filed, an exchange has to establish the core rules: how client funds will be managed, how cyber risks will be handled, how disputes will be resolved, and how transactions will be monitored. These are the first things the FSA inspects, and if the processes aren’t documented and tested, the application goes nowhere.
- Compiling the dossier Applicants must prepare a thick stack of documents in the formats required by the FSA. This includes details on executives and shareholders, financial statements, organizational charts, compliance policies, and more. Preparing them early matters — every missing detail leads to questions, and every question stretches the review timeline.
- Filing through the local finance bureau The initial submission doesn’t go directly to Tokyo. It passes first through the regional finance bureau where the applicant’s head office is based. These offices act as gatekeepers, checking the completeness and accuracy of the package. A smooth interaction here increases the chances of the file moving up to FSA headquarters without hiccups.
- Regulatory review Once in Tokyo, the FSA digs deep. It checks not just whether documents exist but whether the company is actually capable of running under Japanese rules. Many firms find themselves strengthening IT systems or rewriting internal controls after the first round of regulator feedback.
- The final decision If everything holds up, the FSA issues approval. The whole process usually takes several months, though timelines depend heavily on the complexity of the corporate structure and the completeness of the submission. The fastest approvals go to applicants who have already patched every weak spot before they applied.
The message is clear: registering an exchange in Japan isn’t a rubber-stamp exercise. Every gap sends the file back for rework. The best strategy is to present the regulator with working systems from day one, not just promises.
The Application Package
The documentation bundle required for registration is spelled out in law and becomes the regulator’s roadmap for assessing readiness. Each section gets its own layer of scrutiny, which is why I always advise preparing them with substance, not just formality.
Here’s what the package usually includes:
- Statement of eligibility — a declaration confirming that neither executives nor major shareholders are disqualified from operating in financial services.
- Profiles of directors and shareholders — background details on management and majority owners, helping the FSA assess whether the ownership structure is clean and transparent.
- Corporate charter and registry extract — proving the legal existence of the entity and its right to conduct business in Japan.
- Financial statements — balance sheet and P&L showing that the company meets capital requirements and has a stable footing.
- Three-year financial forecast — projections of key performance indicators to demonstrate long-term viability.
- Organizational chart and internal policies — mapping responsibilities and oversight procedures so regulators can judge management reliability.
- Template client agreements — samples of contracts to ensure terms meet consumer protection and transparency rules.
- Complaint-handling and ADR mechanisms — descriptions of how user grievances will be handled, including engagement with alternative dispute resolution bodies.
This list isn’t just administrative red tape — it’s a full readiness audit. The more polished and realistic each document is, the fewer follow-up questions the FSA sends back, and the faster the exchange moves from application to license.
After Registration: Taxes, Reporting, Notifications, and Audit
Securing an FSA license is only the beginning. Once the exchange goes live, the real work starts — proving, day after day, that operations stay within the boundaries of Japan’s rules. That proof takes the form of taxes, reports, notifications, and regular audits.
On the tax side, the basics are clear-cut. The corporate income tax rate sits at 23.2%, and there’s a 10% consumption tax. Payments to overseas partners bring withholding tax into play: 15% on dividends to non-residents, and 20% on interest and royalties.
Financial statements are filed annually and must detail crypto-exchange activity. If the platform manages customer assets, an external auditor’s opinion is mandatory — a safeguard to confirm the numbers match reality and that internal oversight works as claimed. In addition, operators must submit quarterly reports on client funds, breaking down balances and custody arrangements.
Regulatory notifications are another constant. The FSA requires advance notice if there are major shifts — new shareholders, changes to directors, alterations in internal policies, or updates to the business model. This early-warning system lets the regulator step in before changes create risks for customers.
Transparency doesn’t stop with the regulator. Exchanges must also inform users about any changes to service terms and promptly disclose events that could impact client interests. If a platform shuts down, it’s not enough to tell the FSA — the operator must also settle every obligation, returning both fiat and crypto to customers.
That’s why in Japan, registration is just the entry ticket. The real exam begins afterward, when a company proves it can function under constant reporting, tax discipline, and unwavering accountability to its clients.
Conclusion
Registering a crypto exchange in Japan isn’t a box-ticking exercise — it’s a full stress test of the business itself. The FSA looks beyond the paperwork to see whether corporate governance is solid, whether client assets are genuinely protected, and whether the company can stand on its own feet over the long run.
The smartest path is to build those systems in advance, not scramble after feedback. With strong legal and compliance support, operators can shape their processes to match Japanese standards from the start. That preparation not only speeds up approval but also cuts down the risk of rejection or endless back-and-forth with the regulator.