Shinhan Bank said it blocked 12,400 customer accounts tied to cryptocurrency on-ramps in August after pig-butchering scam reports routed through a joint Financial Supervisory Service and Korean National Police Agency tip line jumped more than threefold from June, concentrating freezes on accounts that received small test deposits before larger won transfers ahead of Chuseok.
What triggered the sweep
The bank’s financial crime unit flagged a pattern: romance-investment lures on Telegram and KakaoTalk moved victims through fake trading dashboards, then asked them to wire won to domestic accounts that immediately purchased stablecoins on licensed exchanges. Mule recruiters promised quick side income for “liquidity testing,” often targeting university students and gig workers in Incheon and Daejeon. Shinhan said 68 percent of frozen accounts had opened within 90 days and never paid utility bills from the same profile.
Police cyber teams supplied hashed phone numbers linked to prior cases; Shinhan matched them against new account openings using consent-based data shares authorized after 2024 scam legislation. The bank declined to publish a dollar total for blocked flows but said attempted outbound crypto purchases exceeded 920 billion won before controls fired.
How blocks work in practice
Retail customers see a soft lock on mobile banking with a hotline prompt; business accounts get a hold on outbound wires while investigators review KYC scans. Shinhan emphasized that innocent account holders can appeal with employment contracts or tuition receipts, a process averaging four business days. Critics among consumer lawyers argue that speed still strands payroll for sole proprietors whose names were rented by mule networks.
Licensed exchanges must mirror bank flags under FSS notice 2025-18, preventing mules from off-ramping through Upbit or Bithumb while Shinhan reviews a case. Exchange compliance officers said August ticket volume forced weekend staffing—a cost they plan to pass through higher listing fees for new tokens.
Coordination with regulators
The Financial Intelligence Unit received 3,100 suspicious transaction reports from Shinhan in August alone, up from 900 in April. KoFIU analysts said pig-butchering rings increasingly mix won, gift cards, and crypto legs to evade single-instrument thresholds. FSS examiners will include Shinhan’s mule playbook in autumn inspections of other major banks, looking for delayed reporting when tips arrive after business hours.
Police opened 740 new cyber fraud cases tied to the August freeze wave, many cross-border with call centers in Southeast Asia. Investigators cautioned that account blocks are a containment tool, not a recovery mechanism; restitution rates remain below 12 percent for crypto-finalized scams.
Customer communication
Shinhan branches in Seoul posted bilingual warnings about “part-time payment tester” ads before the Chuseok travel rush, when families send lump sums to relatives. Call-center scripts now ask whether customers were introduced to investments by strangers on messaging apps—a question fraud trainers said cuts average call time but surfaces coaching attempts in real time.
What other banks are doing
KB Kookmin and Hana told brokers they tightened daily crypto purchase limits for accounts under six months old, mirroring Shinhan’s posture without publishing freeze counts. Fintech challengers argued incumbents are punishing new users; regulators replied that mule recruitment deliberately targets fresh accounts and that risk-based friction is permissible under consumer protection guidance.
Limits of the strategy
Crypto advocates noted that decentralized wallet transfers still bypass bank gates once coins leave licensed venues. Shinhan executives acknowledged the gap and urged exchanges to delay large withdrawals for young accounts—a measure some trading platforms resist as bad for liquidity. For September, the bank’s bet is blunt: slow mules at the on-ramp even if investigators cannot claw back coins that already left Korea.
What victims should file
Police and FSS operate a consolidated online portal for pig-butchering reports with exchange transaction hashes attached. Shinhan said customers who frozen accounts in error should bring three months of salary deposits to branches; students with legitimate internship pay can clear holds within 48 hours if school registration verifies. The bank plans a October webinar with university counselors—a small outreach budget compared with scam losses, but one compliance chiefs said beats waiting for another tip surge after the holiday.
