Korea Sets August 2026 Start Date for AI Anti-Phishing Data Sharing

What changed

Revised rules under Korea's Special Act on Prevention of Telecommunications-based Financial Fraud take effect August 4, 2026, giving financial companies, telecom providers, and investigation authorities a legal basis to share data through the AI-based Anti-Phishing Sharing and Analysis Platform (ASAP).

Who this touches

Financial companies, telecom service providers, and investigation authorities operating in South Korea.

Why it matters

ASAP previously ran mainly on bank-supplied data with limits on legal foundation and participation; the revised rules widen both the legal basis and the range of organisations that can feed data into the platform.

Suggested next step — and why

Financial and telecom entities in Korea should have counsel review how the expanded data-sharing scope under the revised Act and Enforcement Decree affects existing data-handling agreements ahead of the effective date.

The clock

The revised Act passed the National Assembly on January 15, 2026; the revised rules and Enforcement Decree take effect August 4, 2026.

The editor's read

August 4, 2026 isn't just when the rules start; it's the first day telecom providers and investigation authorities can lawfully feed phishing data into ASAP alongside banks. — IDV