empty
 
 
Japan's FSA proposes mandatory cybersecurity standards for crypto exchanges from 2026

Japan's FSA proposes mandatory cybersecurity standards for crypto exchanges from 2026

On February 10, 2026, the Financial Services Agency (FSA) published a draft of new mandatory cybersecurity requirements for cryptocurrency exchanges. The regulator plans to require all domestic crypto platforms to undergo a comprehensive cybersecurity self‑assessment (CSSA) in response to a rise in sophisticated hacking incidents and thefts of digital assets. The new rules could take effect in the 2026 fiscal year, while public consultations on the draft will run until March 11, 2026.
The FSA acknowledges that cold‑storage models are no longer sufficient to protect assets. Threats have become more complex and attacks more sophisticated and indirect, including breaches via contractors and social‑engineering schemes. Japan is strengthening oversight of crypto exchanges, shifting from formal compliance checks to a focus on systemic protection. After the collapse of Mt. Gox in 2014, the country was the first to introduce mandatory exchange licensing under the Payment Services Act. The current initiative represents the next phase of regulation.
The new framework envisages continuous analysis of risks and vulnerabilities. Exchanges will be required to assess hot‑ and cold‑wallet security, key‑storage systems, and network architecture; staff training and measures to guard against phishing and social engineering; security standards for contractors and external service providers; incident‑response plans and recovery procedures; and protection of user data in accordance with the Act on the Protection of Personal Information (APPI). The FSA plans to conduct live penetration tests on operators’ systems and may engage ethical hackers. The approach aligns with a global trend: the EU has adopted the MiCA regulation, and Singapore is tightening operational resilience requirements for crypto firms.

Back

See aslo

Can't speak right now?
Ask your question in the chat.