Japan's Financial Services Agency announces cybersecurity enhancement guidelines for cryptocurrency exchange operators

ME News update, on April 4 (UTC+8), according to market sources, Japan’s Financial Services Agency has officially released the “policy guidelines for strengthening cybersecurity measures for business operators such as crypto asset exchanges.” The guidelines were developed based on 18 public comments collected from February to March 2026, with investor asset protection as the top priority. They propose a three-tier cybersecurity strengthening framework of “self-help (individual operators), mutual assistance (self-regulatory oversight bodies), and public assistance (regulatory authorities).” The authorities noted that cyberattacks have now evolved from simple signature-key theft to highly organized methods such as social engineering attacks and supply-chain intrusions, and that traditional cold-wallet management can no longer adequately ensure security. Going forward, the Financial Services Agency will conduct threat-driven penetration testing (TLPT) on some major firms and also plans to revise the business guidance guidelines to improve cybersecurity staffing levels and enhance external audit standards. (Source: ChainCatcher)