Japan crypto regulation: lessons from Mt. Gox

Why did Mt. Gox matter for Japan crypto regulation?

Mt. Gox was the market. By April 2013 and into 2014, it handled over 70% of the world’s Bitcoin trades (Wikipedia, Mt. Gox). When a single operator carries that share, its failure becomes a market event, and it forces a government to decide how such venues should be supervised. A reader who studies Japan therefore studies what happens when one venue holds most of the order flow.

Japan chose supervision by registration. The page on Mt. Gox says the failure, followed by the arrest and conviction of its former chief executive, led Japan to create its first formal regulations for crypto exchanges. That sequence, failure first and rules second, explains why Japan crypto regulation reads like a list of lessons.

What happened at Mt. Gox before Japan crypto rules took shape in 2014?

Mt. Gox suspended trading on 24 February 2014 and filed for civil rehabilitation in Tokyo on 28 February 2014. On 9 March 2014 it filed for United States bankruptcy protection. At the Tokyo filing, the company said it had lost almost 750,000 customer Bitcoin and about 100,000 of its own, roughly 7% of all Bitcoin in existence.

A later discovery changed the count. After the company found 199,999.99 Bitcoin in an old wallet in March 2014, the reported loss fell to 650,000 Bitcoin (Wikipedia, Mt. Gox). The numbers moved because the venue’s own records were incomplete, a point that returns in the lessons section of this page.

What did the Tokyo court decide for Japan crypto users of Mt. Gox?

The Tokyo District Court convicted former chief executive Mark Karpelès on 14 March 2019 of falsifying data to inflate holdings by $33.5 million. He received a 30-month sentence, suspended for 4 years. A criminal conviction on record keeping shows what regulators in Japan treat as the heart of venue duty (Wikipedia, Mt. Gox). The verdict also set a precedent, because it tied a venue operator to the accuracy of its own books.

Repayment ran through a trustee, Nobuaki Kobayashi. Payments were promised to begin before 31 October 2023, and the final deadline moved to 31 October 2024. As of 6 July 2022 the trustee held close to 142,000 Bitcoin. Customers therefore waited years for a rehabilitation process, which shows how slow a claim against a failed venue can be.

How did Japan classify Bitcoin after the Mt. Gox failure?

A cabinet decision of 7 March 2014 stated that Bitcoin is neither a currency nor a bond under the Banking Act or the Financial Instruments and Exchange Law. Banks and securities companies were prohibited from dealing in Bitcoin, and taxes could apply (Wikipedia, legality of cryptocurrency by country). The government answered within days of the Tokyo filing.

The classification matters for a crash. Crypto sat outside the banking perimeter, so a failure at a venue carried no deposit protection. Holders learned to treat exchange balances as claims on a company. That framing remains useful today for any account at a crypto venue in Asia, whatever its country. The same habit helps when a venue advertises insurance, since an insurer’s promise differs from a legal protection.

What must a crypto exchange do under the Payment Services Act?

As of April 2017, crypto exchange businesses in Japan are regulated under the Payment Services Act. The law requires registration, record-keeping, security measures, and customer protection, and it defines crypto as a property value rather than legal tender (Wikipedia, legality of cryptocurrency by country). Registration moved the venue from a private website to a supervised business.

Each requirement answers a Mt. Gox weakness. Registration gives a regulator a name to supervise. Record-keeping gives a court something to read. Security measures address hacks, and customer protection addresses commingled funds. A holder can use the same 4 headings as a due diligence list for any venue, in any country. Each of these 4 duties maps to a question you can put in writing to a venue.

What did the Coincheck hack of January 2018 add to Japan crypto rules?

In January 2018 Coincheck was hacked and about 500 million NEM tokens were stolen, a loss reported as $530 million. The Financial Services Agency ordered the exchange to improve its security practices and did not order it to close, citing concern for the protection of users (Wikipedia, Coincheck).

In April 2018 Monex Group acquired Coincheck for 3.6 billion yen. The episode shows 2 things. Supervision continues after registration, and a supervised venue can still suffer a hack. A reader should therefore ask each venue how it stores keys and what happens to customer balances after a breach. The regulator’s choice to order improvements shows a preference for repair over closure when users stay protected.

What can a crypto holder take from the Japan crypto regulation model?

Three habits follow from the Japanese record. Check that a venue is registered where it serves you. Ask how customer assets are kept apart from company funds. And read the venue’s records policy, since the Mt. Gox count moved by 200,000 Bitcoin once a wallet was found. This page is general information, not investment advice.

The EQOS Asia pricing page lists the formats for a deeper review, and the EQOS Asia method page shows how venue facts become a score. Teams that want a view on their own exposure can book a 30-minute pre-diagnostic with EQOS Asia, then repeat the review each quarter.

Frequently asked questions

About the author

Stéphane Jambu

President, EQOS Forecast Asia

Stéphane Jambu leads EQOS Forecast Asia and works as a consultant in e-commerce, search visibility, and AI. LinkedIn profile