South Korea Sets August 2026 Start for Anti-Phishing Data Sharing

What changed

South Korea enacted amendments to the Special Act on Prevention of Telecommunications-based Financial Fraud, effective August 4, 2026, giving financial companies, telecom providers, and investigation authorities a legal foundation to share voice-phishing data through the AI-based Anti-Phishing Sharing and Analysis Platform (ASAP).

Who this touches

Financial companies, telecom service providers, and investigation authorities in Korea that participate in or supply data to the ASAP platform.

Why it matters

ASAP previously ran mostly on bank-supplied data with limits on legal foundation and participation scope; the amended Act extends the basis for sharing financial, telecom, and investigation data through the same platform.

Suggested next step — and why

Entities touching ASAP data flows may want their advisers to map what new categories of data sharing become permissible under the revised Act before the August 4 effective date.

The clock

Revised Act passed the National Assembly on January 15, 2026; takes effect August 4, 2026.

The editor's read

August 4, 2026 is the first day a telecom provider or investigation authority can lawfully feed data into ASAP under statute, not workaround. — IDV