KakaoBank tightened rules on its branded credit card Monday, limiting how much holders can convert newly purchased gift certificates into cash at partner kiosks after investigators tied a jump in fraud reports to mule accounts cycling digital vouchers within minutes.
The new ceiling
Starting Tuesday, cardholders may cash out no more than 1 million won per day from gift certificates bought with the KakaoBank card, down from an effective 3 million won when multiple convenience chains were stacked in one afternoon. Transfers to other bank accounts linked through open banking will face the same cap for 24 hours after purchase.
The bank said the measure is temporary while it rolls out device fingerprinting on its mobile app. Customers who need higher limits for corporate catering can apply through a verified business portal, though approval will require a tax invoice upload.
Why regulators pressed for action
The Financial Supervisory Service flagged gift-card arbitrage in a September consumer alert, noting that criminals recruit college students to buy vouchers with stolen card numbers, liquidate them at CU and GS25 kiosks, and wire proceeds through cryptocurrency exchanges. Seoul Metropolitan Police Agency units broke up two rings this month that laundered an estimated 4.2 billion won through that pattern.
Competitive context
Shinhan Card and KB Kookmin Card already require a six-hour cooling period before gift certificates become redeemable for cash. KakaoBank had marketed instant liquidity as a perk for gig-economy workers, a pitch it paused in marketing decks last week.
Customer impact
Cardholders interviewed outside a Mapo branch said the change would barely affect routine spending but might complicate last-minute wedding gift purchases. KakaoBank promised fee waivers on legitimate refunds that get stuck by the new rules, and it plans a town-hall livestream for small-business users on Wednesday evening.
Enforcement cases driving the policy
Prosecutors in Suwon indicted eight suspects last week for recruiting university club members to liquidate stolen gift balances, using KakaoBank cards because the app's onboarding took minutes. Investigators recovered ledgers showing average turnaround of 37 minutes from voucher purchase to crypto wallet deposit, faster than legacy banks' cooling rules allowed.
The Financial Supervisory Service said it will audit KakaoBank's fraud monitoring models in November, focusing on whether machine-learning scores overweight transaction speed over device reputation. Peer banks will be asked to share typologies so the industry can block mule patterns without punishing legitimate small merchants.
Merchant and franchise reaction
CU and GS25 franchise associations welcomed the cap, saying kiosk staff faced intimidation when mules demanded instant cash-outs at busy lunch hours. Convenience-store owners asked card issuers to compensate them for chargebacks when stolen cards are involved, a reimbursement policy KakaoBank said it is negotiating with payment networks this quarter.
Digital wallet linkage
Kakao Pay users who link the credit card will see the cash-out cap reflected inside the super-app wallet by Thursday, preventing workarounds through peer transfers. Fintech competitors welcomed the move as a baseline they had already adopted, reducing regulatory arbitrage across platforms.
Consumer advocacy groups asked the Financial Consumer Protection Bureau to standardize cash-out limits across issuers so criminals cannot route victims to whichever bank still allows instant liquidity. Bureau officials said a harmonized rule is on the agenda for December hearings alongside broader open-banking security reviews.
Analysts at Kiwoom Securities said the change should shave a few basis points off KakaoBank card finance revenue but improve loss ratios heading into year-end stress tests. Shares of parent Kakao Corp. closed flat, suggesting investors view the cap as compliance cost rather than growth threat.
App update rollout
Users on older app versions will be forced to update before purchasing new gift certificates, a push notification campaign that begins Tuesday morning. KakaoBank said less than 8 percent of active cardholders still run builds older than six months, minimizing support desk strain.
