{"id":1949,"date":"2026-09-01T03:09:35","date_gmt":"2026-09-01T03:09:35","guid":{"rendered":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/"},"modified":"2026-09-01T03:10:31","modified_gmt":"2026-09-01T03:10:31","slug":"identity-theft-loan-verification-south-korea","status":"publish","type":"post","link":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/","title":{"rendered":"A Loan Taken Out in Your Name in South Korea \u2014 When You Do Not Have to Repay It"},"content":{"rendered":"<p><!--  -->\n\n\n\n<!--  --><\/p>\n<p><!-- ATLAS_SEO_BLOCK_START --><br \/>\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"Article\",\"@id\":\"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/#article\",\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/#webpage\"},\"headline\":\"A Loan Taken Out in Your Name in South Korea \u2014 When You Do Not Have to Repay It\",\"description\":\"Under South Korean law a non-face-to-face loan obtained through identity theft does not bind the named party where the financial institution failed to verify identity properly. Cheongju District Court 2024Na57532 and two Supreme Court judgments issued the same day with opposite results.\",\"datePublished\":\"2026-09-01T09:00:00+09:00\",\"dateModified\":\"2026-09-01T09:00:00+09:00\",\"inLanguage\":\"en-US\",\"author\":{\"@type\":\"Person\",\"@id\":\"https:\/\/atlaw.kr\/soyoung-park\/#person\",\"name\":\"Soyoung Park\",\"alternateName\":\"\ubc15\uc18c\uc601\",\"jobTitle\":\"Representative Attorney\",\"worksFor\":{\"@id\":\"https:\/\/atlaw.kr\/#legalservice\"}},\"publisher\":{\"@type\":\"LegalService\",\"@id\":\"https:\/\/atlaw.kr\/#legalservice\",\"name\":\"Atlas Legal\",\"url\":\"https:\/\/atlaw.kr\"},\"about\":[\"Identity theft non-face-to-face loan in South Korea\",\"Framework Act on Electronic Documents and Transactions Article 7(2)(ii)\",\"Specific Guidelines on Non-Face-to-Face Identity Verification\",\"Telecom Fraud Act Article 2-4\",\"Digital Signature Act 2020 amendment and joint certificates\",\"Cheongju District Court 2024Na57532\",\"Supreme Court of Korea 2024Da236754\",\"Supreme Court of Korea 2024Da310331\"]}<\/script><br \/>\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"@id\":\"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/#faqpage\",\"inLanguage\":\"en-US\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"A loan was taken out in my name in South Korea. Do I have to repay it?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Not if the financial institution failed properly to perform identity verification. Cheongju District Court, Judgment of December 4, 2025, 2024Na57532, declared that neither the KRW 30 million principal nor the interest existed as a debt where an impostor had used a forged resident registration card. Where the institution did follow proper procedure, however, the contract has been upheld (Supreme Court of Korea, Judgment of August 14, 2025, 2024Da236754), so the first step is to establish what the institution actually did.\"}},{\"@type\":\"Question\",\"name\":\"Can I win if the perpetrator is never caught?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Yes. Korean police registered this matter as unsolved in October 2023, no suspect having been identified, yet the named party prevailed at first instance and on appeal. Civil proceedings determine not the punishment of the perpetrator but whether the financial institution exercised reasonable care.\"}},{\"@type\":\"Question\",\"name\":\"The Supreme Court issued opposite judgments on the same day. Which one governs?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Both are good law and they do not conflict. In Supreme Court of Korea, Judgment of August 14, 2025, 2024Da236754, the institution had performed multiple independent authentications \u2014 ID copy submission, existing-account verification, mobile phone authentication, joint certificate authentication, and a credit bureau inquiry \u2014 and the contract was upheld. In 2024Da310331, decided the same day, the institution had performed only SMS authentication and joint certificate authentication, and was held liable in damages for breach of the verification duty. What separated them was performance, not doctrine.\"}},{\"@type\":\"Question\",\"name\":\"The lender says it verified identity several times. Can the loan still be challenged?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"A count of steps is not sufficient. The Supreme Court held that whether identity verification was properly performed \\\"is to be assessed not by evaluating a single means of authentication in isolation, but by considering mutually independent means of authentication in combination\\\" (Supreme Court of Korea, Judgment of August 14, 2025, 2024Da236754). Where every authentication derives from the same forged document, the methods cannot compensate for one another.\"}},{\"@type\":\"Question\",\"name\":\"The forged ID passed the government authenticity check. Is the institution still liable?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"It may be. South Korea's Government24 authenticity check validates only the name, resident registration number, and issue date, so a card with a substituted photograph and address passes. Cheongju District Court held that because the photograph on the submitted copy differed markedly from that on the genuine card, and given the form and content of the forgery, it did not appear that detecting the forgery was altogether impossible; a positive authenticity check alone therefore did not establish proper performance.\"}},{\"@type\":\"Question\",\"name\":\"Is a copy of the ID enough, or is facial confirmation required?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Because submission of a copy substitutes for presenting an ID at a branch counter, a method sufficient to establish, even indirectly, that the customer holds the original is required (Suwon District Court Seongnam Branch, Judgment of September 20, 2023, 2022Ga-dan6453). An institution that captured the customer's face in real time and matched it against the ID photograph by facial recognition was found to have performed adequately (Daegu District Court, Judgment of February 27, 2026, 2024Ga-dan137991). Since March 1, 2024, real-time remote facial recognition may substitute for a video call.\"}},{\"@type\":\"Question\",\"name\":\"Is the KRW 1 micro-deposit test not accepted as identity verification?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"It is an accepted method, but it did not function here because the account had been opened two days earlier by the same impostor. Korean lower courts differ on this point. Seoul Western District Court, Judgment of June 14, 2024, 2023Na43126, held that \\\"on its wording, an 'existing account' means an account already in existence prior to the application for the non-face-to-face electronic financial transaction,\\\" disregarding the opening date. Cheongju District Court reached a different result because the absence of transaction history, weekend certificate issuance, and a large application combined as grounds for suspicion.\"}},{\"@type\":\"Question\",\"name\":\"If a joint certificate was used to sign, am I presumed to have signed?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. The joint certificate introduced by the wholesale amendment of the Digital Signature Act on June 9, 2020 is recognized only as having the effect of a signature, a signature and seal, or a name and seal, unlike the former accredited certificate for which authenticity of identity and integrity of the document were presumed. Seoul Central District Court, Judgment of October 31, 2024, 2024Na28037, went so far as to state that the joint certificate \\\"does not even possess an identity verification function.\\\"\"}},{\"@type\":\"Question\",\"name\":\"Can the 2018 Supreme Court judgment on accredited certificates still be relied on?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Not for cases governed by the current statute. Supreme Court of Korea, Judgment of March 29, 2018, 2017Da257395, held that an electronic document transmitted by a person whose identity was confirmed by an accredited certificate could be treated as the originator's without additional verification. Seoul Central District Court, Judgment of April 11, 2023, 2021Ga-dan5243198, stated that that reasoning \\\"may apply only to cases governed by the former Digital Signature Act, and can no longer apply to cases governed by the new Digital Signature Act.\\\"\"}},{\"@type\":\"Question\",\"name\":\"If the contract is upheld, can I recover nothing?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Damages remain available. Article 2-4(2) of the Telecom Fraud Act imposes liability where a failure to perform identity verification measures causes loss to the user. Seoul Central District Court, Judgment of October 31, 2024, 2024Na28037, awarded KRW 25 million, being 50% of a KRW 50 million loan, and the award was confirmed by Supreme Court of Korea, Judgment of August 14, 2025, 2024Da310331. Comparative fault may prevent full recovery.\"}},{\"@type\":\"Question\",\"name\":\"Does \\\"the effect attaches to the named party\\\" mean the contract is valid?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Yes \u2014 the named party owes the loan debt, and the primary claim of invalidity was rejected. Seoul Central District Court, Judgment of April 11, 2023, 2021Ga-dan5243198, held that a policy loan is not subject to the Real Name Act, so that even if the institution had failed properly to perform identity verification measures, the effect attached to the named party under Article 7(2)(ii) of the Electronic Documents Act because SMS and joint certificate authentication had been completed. The verification breach was addressed separately as a matter of damages.\"}},{\"@type\":\"Question\",\"name\":\"If the contract is valid, why did the debt halve? Was it a set-off?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No set-off defense or counterclaim appears in the judgment. The court held that, the effect of the agreement having attached to the named party, non-repayment would cause the principal and interest to be deducted from future insurance proceeds or surrender value, so that \\\"the principal and interest of this policy loan all devolve upon the plaintiff as loss.\\\" Treating the debt itself as the loss, the court applied comparative fault to limit the institution's liability to 50% and expressed the result in the form of a declaration. The named party sought a declaration as to the whole KRW 50 million, obtained it as to half, and bore one half of the costs.\"}},{\"@type\":\"Question\",\"name\":\"What happens if the institution pleads apparent authority?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Name-impersonation ordinarily defeats apparent authority. The Supreme Court of Korea has held that where a person merely impersonates the principal's name and performs a legal act directly in that name, apparent authority cannot, absent special circumstances, be established (Judgment of June 28, 2002, 2001Da49814), and that the doctrine applies by analogy only where the impersonator had basic authority and the counterparty had justifiable grounds (Judgment of June 5, 2025, 2023Da232526). The latter judgment also confirmed that a financial institution owes a higher duty of care than an ordinary person as to verification of the principal and of authority.\"}},{\"@type\":\"Question\",\"name\":\"What should a victim of identity theft in South Korea do first?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Cancel the compromised mobile line, account, and certificate immediately to break the credential chain, and file a police report to create a record. Then review every account, mobile line, and loan in your name to establish the scope of the loss, and avoid conduct that may be construed as acknowledging the debt. In litigation, orders for production of financial transaction information and factual inquiries to telecommunications carriers are essential to obtain the institution's authentication records and the submitted ID copy, and the choice between a declaration of non-existence of debt and a damages claim must be made when proceedings are commenced.\"}}]}<\/script><br \/>\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":[\"LegalService\",\"LocalBusiness\"],\"@id\":\"https:\/\/atlaw.kr\/#legalservice\",\"name\":\"Atlas Legal\",\"alternateName\":[\"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4\",\"Atlas Law Firm\"],\"url\":\"https:\/\/atlaw.kr\/en\/home-en\/\",\"telephone\":\"+82-32-864-8300\",\"email\":\"info@atlaw.kr\",\"priceRange\":\"$$$\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"B-2901, 323 Incheon Tower-daero\",\"addressLocality\":\"Yeonsu-gu, Incheon\",\"addressRegion\":\"Incheon Metropolitan City\",\"postalCode\":\"22007\",\"addressCountry\":\"KR\"},\"geo\":{\"@type\":\"GeoCoordinates\",\"latitude\":37.399438,\"longitude\":126.629812},\"openingHoursSpecification\":[{\"@type\":\"OpeningHoursSpecification\",\"dayOfWeek\":[\"Monday\",\"Tuesday\",\"Wednesday\",\"Thursday\",\"Friday\"],\"opens\":\"09:00\",\"closes\":\"18:00\"}],\"areaServed\":[{\"@type\":\"Country\",\"name\":\"South Korea\"},{\"@type\":\"Place\",\"name\":\"Songdo International Business District\"},{\"@type\":\"Place\",\"name\":\"Cheongna International City\"},{\"@type\":\"Place\",\"name\":\"Yeongjong International City\"},{\"@type\":\"Place\",\"name\":\"Incheon\"},{\"@type\":\"Place\",\"name\":\"Seoul Metropolitan Area\"},{\"@type\":\"Place\",\"name\":\"Incheon Free Economic Zone (IFEZ)\"}],\"knowsAbout\":[\"Identity Theft Loan Disputes in South Korea\",\"Non-Face-to-Face Identity Verification under Korean Financial Law\",\"Framework Act on Electronic Documents and Transactions in South Korea\",\"Telecommunications-Based Financial Fraud Law in South Korea\",\"Electronic Signature Law and Joint Certificates in South Korea\",\"Apparent Authority under the Korean Civil Act\",\"Incheon Free Economic Zone (IFEZ) Legal Services in South Korea\"],\"serviceType\":[\"Banking and Financial Dispute Resolution\",\"Identity Theft and Fraud Litigation\",\"Electronic Contract and Digital Signature Advisory\",\"Financial Regulatory Compliance Counseling\",\"Foreign Direct Investment Legal Services\"]}<\/script><br \/>\n<!-- ATLAS_SEO_BLOCK_END --><\/p>\n<style>@import url('https:\/\/cdn.jsdelivr.net\/gh\/orioncactus\/pretendard@v1.3.9\/dist\/web\/static\/pretendard.css'); \/* \u2500\u2500 Kadence \ud14c\ub9c8 \ucee8\ud150\uce20 \ud3ed override \u2500\u2500 *\/ :root { --global-content-narrow-width: 1290px !important; } .entry-content-wrap { max-width: 1290px !important; } .entry-content { margin-top: 0 !important; } *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; } :root { --navy: #0a2540; --navy2: #1a3353; --wine: #722f37; --text: #1a1f36; --muted: #697386; --rule: #e3e8ee; } body { font-family: 'Pretendard', -apple-system, BlinkMacSystemFont, 'Apple SD Gothic Neo', sans-serif; background: #fff; color: var(--text); font-size: 18px; line-height: 1.82; -webkit-font-smoothing: antialiased; } \/* \u2500\u2500 \ud788\uc5b4\ub85c \u2500\u2500 *\/ .hero { max-width: 1000px; margin: 0 auto; padding: 72px 48px 48px; text-align: center; } .category-tag { font-size: 11px; font-weight: 700; letter-spacing: 1.5px; text-transform: uppercase; color: var(--wine); display: block; margin-bottom: 20px; } .hero h1 { font-size: 44px; font-weight: 700; line-height: 1.22; color: var(--navy); margin-bottom: 28px; word-break: keep-all; } \/* \ud788\uc5b4\ub85c \uc81c\ubaa9 \u2014 h1 \ub300\uc2e0 \uc0ac\uc6a9 (\ud14c\ub9c8 \uc790\ub3d9 h1\uacfc \uc911\ubcf5 \ubc29\uc9c0) *\/ .hero-title { font-size: 44px; font-weight: 700; line-height: 1.22; color: var(--navy); margin-bottom: 28px; word-break: keep-all; } .hero-meta { display: flex; align-items: center; justify-content: center; gap: 12px; padding-bottom: 40px; border-bottom: 1px solid var(--rule); } .hero-info { font-size: 13.5px; color: var(--text); line-height: 1.4; } .hero-info strong { color: var(--text); font-weight: 500; } \/* \u2500\u2500 \uc989\uc2dc \ub2f5\ubcc0 \ubc15\uc2a4 \u2500\u2500 *\/ .direct-answer { background: #f6f9fc; border-left: 4px solid var(--navy); border-radius: 0; padding: 20px 24px; margin: 32px 0 40px; font-size: 17px; line-height: 1.75; color: var(--text); } \/* \u2500\u2500 \ubcf8\ubb38 \u2500\u2500 *\/ .content { max-width: 1000px; margin: 0 auto; padding: 52px 48px 100px; } \/* \ubaa9\ucc28 *\/ .toc-nav { margin-bottom: 60px; border: 1px solid #d0d5dd; border-radius: 6px; padding: 28px 32px; } .toc-label { font-size: 20px; font-weight: 700; color: var(--navy); margin-bottom: 14px; } .toc-nav ol { list-style: none; padding-left: 0; } .toc-nav ol li { display: flex; gap: 14px; align-items: baseline; padding: 6px 0; font-size: 17px; } .toc-nav ol li::before { content: none; } .toc-nav ol li a { color: var(--text); text-decoration: none; font-weight: 400; } .toc-nav ol li a:hover { color: var(--wine); } \/* \ub9ac\ub4dc\u00b7\uc694\uc57d\u00b7\ucee8\ud14d\uc2a4\ud2b8 \ud14d\uc2a4\ud2b8 *\/ .lead-text { font-size: 20px; font-weight: 400; color: var(--text); line-height: 1.8; margin-bottom: 24px; } .summary-text { font-size: 18px; color: var(--text); line-height: 1.8; margin-bottom: 20px; } .context-text { font-size: 17px; color: var(--text); line-height: 1.8; margin-bottom: 52px; } \/* \u2500\u2500 \uc81c\ubaa9 \u2500\u2500 *\/ h2 { font-size: 30px; font-weight: 700; color: var(--wine); margin: 68px 0 16px; word-break: keep-all; } h3 { font-size: 17px; font-weight: 700; color: var(--wine); margin: 38px 0 10px; } p { font-size: 18px; color: var(--text); line-height: 1.82; margin-bottom: 18px; } \/* \ud45c *\/ table { width: 100%; border-collapse: collapse; margin: 24px 0; font-size: 14px; } thead tr { background: #fff; } th { color: var(--navy); font-weight: 600; padding: 11px 16px; text-align: left; font-size: 16px; border-bottom: 2px solid var(--navy); } td { padding: 12px 16px; border-bottom: 1px solid var(--rule); color: var(--text); font-size: 16px; } tbody tr:hover { background: #f6f9fc; } \/* \ubd88\ub9bf \ub9ac\uc2a4\ud2b8 *\/ ul, ol:not(.toc-nav ol) { padding-left: 20px; margin-bottom: 16px; } li { font-size: 18px; line-height: 1.78; margin-bottom: 6px; color: var(--text); } \/* \uacc4\uc0b0 \uacf5\uc2dd *\/ .formula { display: flex; align-items: center; gap: 8px; background: #f6f9fc; border: 1px solid var(--rule); border-radius: 8px; padding: 28px 24px; margin: 32px 0; flex-wrap: wrap; justify-content: center; } .f-item { text-align: center; padding: 12px 18px; background: #fff; border: 1px solid var(--rule); border-radius: 5px; } .f-result { background: #fff; border: 2px solid var(--navy); } .f-num { font-size: 22px; font-weight: 700; color: var(--navy); line-height: 1.2; } .f-result .f-num { color: var(--wine); } .f-label { font-size: 11px; color: var(--text); margin-top: 4px; } .f-op { font-size: 20px; color: var(--text); padding: 0 2px; font-weight: 300; } \/* FAQ *\/ .faq-item { border-top: 1px solid var(--rule); padding: 22px 0; } .faq-item:last-of-type { border-bottom: 1px solid var(--rule); } .faq-q { font-size: 17px; font-weight: 600; color: var(--navy); margin-bottom: 8px !important; } .faq-item p:not(.faq-q) { font-size: 17px; color: var(--text); margin: 0; line-height: 1.75; } \/* \ub9c8\ubb34\ub9ac \ubb38\uc7a5 *\/ p.closing { font-size: 15.5px; color: var(--text); margin: 40px 0 0; padding-top: 32px; border-top: 1px solid var(--rule); } \/* \uc800\uc790 \ubc15\uc2a4 *\/ .author-box { display: flex; align-items: center; gap: 14px; padding-top: 40px; margin-top: 40px; border-top: 1px solid var(--rule); } .author-avatar { width: 56px; height: 56px; border-radius: 50%; object-fit: cover; flex-shrink: 0; align-self: flex-start; } .author-text { flex: 1; } .author-name { font-size: 18px; font-weight: 600; color: var(--navy); } .author-meta { font-size: 13px; color: var(--text); margin-top: 2px; } .author-link { display: inline-block; margin-top: 8px; font-size: 15px; font-weight: 600; color: var(--wine); text-decoration: none; } .author-link:hover { text-decoration: underline; } .author-section-label { font-size: 15px; font-weight: 700; letter-spacing: 1px; text-transform: uppercase; color: var(--muted); margin-bottom: 8px; } .author-detail { font-size: 16px; color: var(--text); line-height: 1.7; margin-bottom: 1px; } @media (max-width: 640px) { body { font-size: 15px; } p { font-size: 15px; } li { font-size: 15px; } .hero { padding: 32px 14px 24px; } .hero h1 { font-size: 22px; } .hero-title { font-size: 22px; } .hero-info { font-size: 12px; } .content { padding: 28px 0 60px; } .toc-nav { margin-left: -14px; margin-right: -14px; border-radius: 0; border-left: none; border-right: none; padding: 12px 4px; margin-bottom: 28px; } .toc-label { font-size: 16px; } .toc-nav ol li { font-size: 14px; padding: 3px 0; } h2 { font-size: 20px; margin: 44px 0 10px; } h3 { font-size: 15px; margin: 24px 0 8px; } .lead-text { font-size: 16px; } .summary-text { font-size: 15px; } .context-text { font-size: 14px; } .formula { flex-direction: column; padding: 16px 12px; } .f-num { font-size: 18px; } th { font-size: 13px; padding: 8px 10px; } td { font-size: 13px; padding: 8px 10px; } .faq-q { font-size: 14px; } .faq-item p:not(.faq-q) { font-size: 14px; } .author-box { display: block; overflow: hidden; } .author-avatar { float: left; width: 36px; height: 36px; margin-right: 10px; border-radius: 50%; } .author-section-label { display: inline; font-size: 11px; letter-spacing: 0; margin: 0 3px 0 0; } .author-name { display: inline; font-size: 14px; } .author-detail { clear: both; font-size: 13px; line-height: 1.55; margin-top: 8px; margin-bottom: 1px; } .author-detail ~ .author-detail { clear: none; margin-top: 2px; } .author-link { clear: both; display: block; font-size: 13px; margin-top: 8px; } p.closing { font-size: 14px; } }<\/style>\n<div class=\"hero\">\n  <span class=\"category-tag\">Banking &amp; Identity Theft<\/span><\/p>\n<div class=\"hero-title\">A Loan Taken Out in Your Name in South Korea<br \/>When You Do Not Have to Repay It<\/div>\n<div class=\"hero-meta\">\n<div class=\"hero-info\">\n      <strong>Soyoung Park<\/strong> \u00b7 Representative Attorney, Atlas Legal<br \/>\n      Cheongju District Court 2024Na57532 &nbsp;\u00b7&nbsp; Supreme Court of Korea 2024Da236754 &nbsp;\u00b7&nbsp; Supreme Court of Korea 2024Da310331\n    <\/div>\n<\/p><\/div>\n<\/div>\n<div class=\"content\">\n<div class=\"direct-answer\">\n    <strong>Key Answer:<\/strong> Under South Korean law, a non-face-to-face loan executed by an impostor using a forged identification card does not bind the person whose name was used, provided the financial institution failed to properly carry out identity verification. In Cheongju District Court, Judgment of December 4, 2025, 2024Na57532, the lender had completed four separate verification steps and still lost. On August 14, 2025, however, the Supreme Court of Korea issued two judgments on the same day reaching opposite results (2024Da236754 and 2024Da310331).\n  <\/div>\n<div class=\"toc-nav\">\n<p class=\"toc-label\">Contents<\/p>\n<ol>\n<li><a href=\"#sec-1\">1. Am I liable for a loan taken out in my name?<\/a><\/li>\n<li><a href=\"#sec-2\">2. How did the impostor extract KRW 101 million in three days?<\/a><\/li>\n<li><a href=\"#sec-3\">3. Why did the Supreme Court reach opposite results on the same day?<\/a><\/li>\n<li><a href=\"#sec-4\">4. The lender verified identity four times \u2014 why did it still lose?<\/a><\/li>\n<li><a href=\"#sec-5\">5. Why did a forged ID card pass the government authenticity check?<\/a><\/li>\n<li><a href=\"#sec-6\">6. Why did the KRW 1 micro-deposit test fail as identity verification?<\/a><\/li>\n<li><a href=\"#sec-7\">7. Does a joint certificate signature prove that I signed?<\/a><\/li>\n<li><a href=\"#sec-8\">8. If the contract stands, do I recover nothing?<\/a><\/li>\n<li><a href=\"#sec-9\">9. Why did the apparent-authority defense fail?<\/a><\/li>\n<li><a href=\"#sec-10\">10. What should a victim of identity theft do first?<\/a><\/li>\n<li><a href=\"#sec-11\">11. What should financial institutions and companies strengthen?<\/a><\/li>\n<li><a href=\"#sec-faq\">12. Frequently Asked Questions<\/a><\/li>\n<\/ol><\/div>\n<p class=\"lead-text\">On April 11, 2023, a Korean resident discovered that a mobile phone line had been opened in their name and that several loans had been drawn against their identity. None of it had been applied for. A police report was filed the same day. Six months later the answer came back: no suspect could be identified, and the case was registered as unsolved.<\/p>\n<p class=\"summary-text\">The perpetrator was never found, and the lender demanded repayment on the ground that it had followed proper procedure. Litigation was the only route left. The named borrower brought an action for a declaration that the debt did not exist, and prevailed at both first instance and on appeal.<\/p>\n<p class=\"context-text\">What makes this judgment notable is that the lender had not been passive. Mobile phone authentication, a joint certificate electronic signature, an ID authenticity check run against the Ministry of the Interior and Safety database, and a KRW 1 micro-deposit test \u2014 all four were completed. The court nonetheless held that the lender had failed to discharge its identity verification duty. This article explains the reasoning and sets it against recent Korean judgments that reached the opposite conclusion.<\/p>\n<p><\/p>\n<h2 id=\"sec-1\">Am I liable for a loan taken out in my name?<\/h2>\n<p class=\"lead-text\">Not if the financial institution failed to carry out the identity verification procedures required by South Korean law. In Cheongju District Court, Judgment of December 4, 2025, 2024Na57532, the court declared that neither the KRW 30 million principal nor the interest existed as a debt of the named borrower. This outcome is not automatic, however; it turns on what the lender actually did.<\/p>\n<p>The starting point should be stated clearly. Even in an electronic financial transaction, if a genuine meeting of the minds is proven, legal effect follows regardless of whether the electronic document formalities were satisfied. Conversely, where the named party had no intention at all, the transaction in principle does not bind that party.<\/p>\n<p>On what basis, then, does a lender demand repayment? Article 7(2)(ii) of the Framework Act on Electronic Documents and Transactions (the &#8220;Electronic Documents Act&#8221;). That provision allows a recipient to treat a manifestation of intent contained in an electronic document as the originator&#8217;s where the document &#8220;was transmitted by a person for whom the recipient had justifiable reason to believe that it was based on the intent of the originator or the originator&#8217;s agent.&#8221;<\/p>\n<p>Article 7(3)(ii) supplies the counterweight. Article 7(2)(ii) does not apply where the recipient knew that the document was not the originator&#8217;s, or <strong>would have known had it exercised reasonable care or followed the procedure agreed with the originator<\/strong>. The case therefore turns on whether the financial institution exercised reasonable care.<\/p>\n<h3>The standard set by the Supreme Court of Korea<\/h3>\n<p>The Supreme Court of Korea has framed the test as follows: whether there was justifiable reason to believe that the electronic document was transmitted on the originator&#8217;s intent &#8220;is determined by whether the recipient properly performed identity verification procedures sufficient to support a belief that the electronic document was transmitted by the originator or the originator&#8217;s agent.&#8221; In assessing this, courts consider whether the verification procedure was appropriate given the technological standards of the time, whether the institution did all it could by way of identity verification and loss prevention in the manner prescribed by law and suited to the nature of the transaction, and the content and character of the legal act intended (Supreme Court of Korea, Judgment of August 14, 2025, 2024Da236754).<\/p>\n<p>Cheongju District Court applied that standard directly. The point that is easy to miss is this: the question is not whether the formalities were met, but whether the institution actually verified identity in a manner suited to the transaction.<\/p>\n<p><\/p>\n<h2 id=\"sec-2\">How did the impostor extract KRW 101 million in three days?<\/h2>\n<p class=\"lead-text\">By building a chain of credentials, each step supplying the input for the next: a forged ID card opened a mobile line, the mobile line opened a bank account, the account produced a certificate, and the certificate drew the loan. Within roughly ten days, three institutions disbursed approximately KRW 101 million.<\/p>\n<table>\n<thead>\n<tr>\n<th>Date<\/th>\n<th>Event<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Mar. 31, 2023<\/td>\n<td>A mobile virtual network operator opened a prepaid mobile line using a forged copy of the victim&#8217;s resident registration card<\/td>\n<\/tr>\n<tr>\n<td>Apr. 7, 2023<\/td>\n<td>A bank opened a savings account in the victim&#8217;s name through a non-face-to-face process<\/td>\n<\/tr>\n<tr>\n<td>Apr. 8, 2023 (Sat.)<\/td>\n<td>A joint certificate was issued in the victim&#8217;s name using an OTP security device<\/td>\n<\/tr>\n<tr>\n<td>Apr. 9, 2023 (Sun.)<\/td>\n<td>The same bank executed a KRW 3 million revolving credit facility through an online application<\/td>\n<\/tr>\n<tr>\n<td>Apr. 9, 2023, 2:20 p.m.<\/td>\n<td>A lending-focused financial institution disbursed a KRW 30 million loan at 13.7% per annum into that account<\/td>\n<\/tr>\n<tr>\n<td>Apr. 9, 2023, 3:40\u20136:23 p.m.<\/td>\n<td>The full amount was withdrawn in more than ten transfers to accounts held by various third parties<\/td>\n<\/tr>\n<tr>\n<td>Apr. 10, 2023<\/td>\n<td>Another financial institution disbursed KRW 68 million under a separate credit agreement<\/td>\n<\/tr>\n<tr>\n<td>Apr. 11, 2023<\/td>\n<td>The victim discovered the fraud, cancelled the mobile line, and filed a police report<\/td>\n<\/tr>\n<tr>\n<td>Oct. 26, 2023<\/td>\n<td>Police registered the matter as unsolved, no suspect having been identified<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Notably, <strong>more than one forged card was used<\/strong>. The copy submitted to the telecommunications carrier matched only the victim&#8217;s Korean name and resident registration number; the photograph and address belonged to someone else. The copy submitted to the bank and the lender matched the name, registration number, address, and photograph. The impostor had forged several cards, each tailored to its purpose.<\/p>\n<p>This judgment concerns only the KRW 30 million loan. The other two were resolved separately: the creditors of the KRW 3 million and KRW 68 million loans were co-defendants at first instance, and each accepted a court recommendation for settlement confirming that the respective debt did not exist. Of the three institutions, <strong>only one litigated to judgment<\/strong>, and that one lost twice.<\/p>\n<p>The timing also matters. The certificate was issued on a Saturday and the loan executed on a Sunday. Dispersal began <strong>80 minutes<\/strong> after disbursement and the balance was gone within roughly three hours. The court treated this as grounds for suspicion that the lender should have resolved before proceeding. Seoul Central District Court took the same view in its Judgment of October 31, 2024, 2024Na28037, holding that because the transaction &#8220;was carried out unusually on a Saturday rather than a weekday, the defendant&#8217;s identity verification duty is heightened.&#8221;<\/p>\n<p><\/p>\n<h2 id=\"sec-3\">Why did the Supreme Court reach opposite results on the same day?<\/h2>\n<p class=\"lead-text\">On August 14, 2025, the Supreme Court of Korea handed down two judgments on non-face-to-face identity-theft lending. The financial institution won one (2024Da236754) and lost the other (2024Da310331). The law did not shift; <strong>the same standard produced different results on different facts<\/strong>.<\/p>\n<table>\n<thead>\n<tr>\n<th>Item<\/th>\n<th>Supreme Court 2024Da236754<\/th>\n<th>Supreme Court 2024Da310331<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Outcome<\/td>\n<td>Appeal dismissed \u2014 loan agreement valid<\/td>\n<td>Appeal dismissed \u2014 institution liable in damages<\/td>\n<\/tr>\n<tr>\n<td>Cause of action<\/td>\n<td>Declaration of non-existence of debt<\/td>\n<td>Damages (claim amended in exchange)<\/td>\n<\/tr>\n<tr>\n<td>Steps taken<\/td>\n<td>ID copy submission, existing-account verification, mobile phone authentication, joint certificate authentication, credit bureau inquiry<\/td>\n<td>SMS authentication and joint certificate authentication only<\/td>\n<\/tr>\n<tr>\n<td>Mandatory methods satisfied<\/td>\n<td>Methods (i) and (iv)<\/td>\n<td>None of methods (i)\u2013(v)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The reasoning in 2024Da236754 is the key: &#8220;whether identity verification procedures were properly performed in a non-face-to-face transaction is to be assessed not by evaluating a single means of authentication in isolation, but <strong>by considering mutually independent means of authentication in combination<\/strong>, and in this case the defendant bank, through multiple means of authentication including submission of a copy of the identity verification document, existing-account authentication, mobile phone authentication, joint certificate authentication, and credit information inquiry, can be assessed as having done all it could to confirm that the loan application was based on the plaintiff&#8217;s intent.&#8221;<\/p>\n<p>The operative words are <strong>&#8220;mutually independent.&#8221;<\/strong> What counts is not the number of authentication steps but whether they originate from different sources and genuinely cross-check one another. In the Cheongju case, all four steps derived from the same forged identification card.<\/p>\n<p>The institution in 2024Da310331, by contrast, performed only SMS authentication and joint certificate authentication. Both are <strong>recommended<\/strong> methods under the industry standard, meaning that none of the five mandatory methods was satisfied.<\/p>\n<p><\/p>\n<h2 id=\"sec-4\">The lender verified identity four times \u2014 why did it still lose?<\/h2>\n<p class=\"lead-text\">Because completing a count of steps is not the same as verifying identity. The court accepted that the lender had formally performed two of the mandatory methods and two recommended methods, yet held that it had &#8220;failed to properly take the measures, or would have known, had it exercised reasonable care, that the loan was not executed on the plaintiff&#8217;s intent.&#8221;<\/p>\n<h3>The regulatory structure<\/h3>\n<p>Three Korean statutes operate together.<\/p>\n<p><strong>First, Article 3(1) of the Act on Real Name Financial Transactions and Confidentiality<\/strong> (the &#8220;Real Name Act&#8221;) requires financial institutions to verify the true identity of the transacting party. For non-face-to-face transactions, the Korea Federation of Banks and the Korea Financial Investment Association jointly adopted the Specific Guidelines on Non-Face-to-Face Identity Verification (the &#8220;Verification Guidelines&#8221;), applicable to every transaction subject to the statutory duty.<\/p>\n<p><strong>Second, Article 2-4 of the Special Act on the Prevention of Loss Caused by Telecommunications-Based Financial Fraud and Refund of Loss<\/strong> (the &#8220;Telecom Fraud Act&#8221;) requires identity verification measures when a user applies for a loan, and imposes liability in damages where a breach causes loss. Article 2-3 of its Enforcement Decree refers the method to the Financial Services Commission, which on December 22, 2015 declared that the required method is the non-face-to-face real name verification method under the Real Name Act.<\/p>\n<p><strong>Third, Article 7 of the Electronic Documents Act<\/strong> converts the result into private law effect.<\/p>\n<p>Suwon District Court, Judgment of April 18, 2024, 2023Na97362, states the linkage most clearly: whether an institution properly performed the required identity verification measures &#8220;is appropriately assessed by reference to the Verification Guidelines, which the Korea Federation of Banks and the Korea Financial Investment Association prepared and which the Financial Services Commission has authoritatively interpreted as the appropriate method of identity verification in non-face-to-face financial transactions.&#8221;<\/p>\n<h3>Seven methods, and what this lender did<\/h3>\n<p>The Verification Guidelines as amended effective January 1, 2020 set out seven methods and require that <strong>at least two of methods (i) through (v) be applied in combination<\/strong>. Methods (vi) and (vii) are recommended supplements.<\/p>\n<table>\n<thead>\n<tr>\n<th>Class<\/th>\n<th>Method<\/th>\n<th>In the Cheongju case<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Mandatory (i)<\/td>\n<td>Submission of a copy of the identity verification document<\/td>\n<td>Performed \u2014 but the document was a copy of a forged card<\/td>\n<\/tr>\n<tr>\n<td>Mandatory (ii)<\/td>\n<td>Video call or equivalent<\/td>\n<td>Not performed<\/td>\n<\/tr>\n<tr>\n<td>Mandatory (iii)<\/td>\n<td>Verification of identification when delivering access media<\/td>\n<td>Not performed<\/td>\n<\/tr>\n<tr>\n<td>Mandatory (iv)<\/td>\n<td>Use of an existing account (micro-transfer, etc.)<\/td>\n<td>Performed \u2014 but that account was itself opened by identity theft<\/td>\n<\/tr>\n<tr>\n<td>Mandatory (v)<\/td>\n<td>Equivalent methods (biometric matching)<\/td>\n<td>Not performed<\/td>\n<\/tr>\n<tr>\n<td>Recommended (vi)<\/td>\n<td>Use of verification results from other institutions<\/td>\n<td>Performed \u2014 joint certificate, mobile phone authentication<\/td>\n<\/tr>\n<tr>\n<td>Recommended (vii)<\/td>\n<td>Verification against multiple customer data points<\/td>\n<td>\u2014<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>On paper the lender complied, and the court accepted as much. But the judgment first held that where an electronic financial transaction is conducted on a non-face-to-face basis, an institution seeking to prevent loss and escape liability must &#8220;take active measures, including performing the identity verification duty under a strict standard,&#8221; and then examined whether each of the two mandatory methods had actually functioned.<\/p>\n<h3>Note \u2014 method (ii) was broadened in 2024<\/h3>\n<p>A practical development matters here. Daegu District Court, Judgment of February 27, 2026, 2024Ga-dan137991, records that the Financial Services Commission designated facial-recognition matching of an ID photograph against a live customer photograph as an innovative financial service on May 27, 2020, extended that designation in 2022 so that the method could substitute for a video call, and that &#8220;on March 1, 2024, the existing method (ii) &#8216;video call&#8217; was amended to &#8216;video call, etc.,&#8217; partially amending the Verification Guidelines so that real-time remote facial recognition technology and the like may be used in place of a video call.&#8221;<\/p>\n<p><\/p>\n<h2 id=\"sec-5\">Why did a forged ID card pass the government authenticity check?<\/h2>\n<p class=\"lead-text\">Because the check validates only the name, resident registration number, and issue date. A card with a substituted photograph and address passes so long as those three fields match. The court held that the lender should therefore have reinforced its verification method.<\/p>\n<p>The copy submitted matched the victim&#8217;s name, registration number, address, and photograph. Compared with the genuine card, however, four elements differed.<\/p>\n<ul>\n<li>The photograph differed \u2014 it was taken from the victim&#8217;s 2013 driver&#8217;s license.<\/li>\n<li>The address differed \u2014 it was the current address, not the address at the stated issue date.<\/li>\n<li>The administrative district name was anachronistic \u2014 it did not exist at the stated issue date.<\/li>\n<li>The issuing authority&#8217;s seal differed \u2014 the current seal appeared instead of the one then in use.<\/li>\n<\/ul>\n<p>The authenticity check nevertheless returned a positive result, because the Government24 service validates a resident registration card on <strong>name, registration number, and issue date alone<\/strong>. An impostor who learns the genuine issue date may substitute the photograph and address freely.<\/p>\n<h3>What the courts require: the original, held by the person<\/h3>\n<p>This reasoning did not originate with the Cheongju judgment. Suwon District Court Seongnam Branch, Judgment of September 20, 2023, 2022Ga-dan6453, had already held that because submission of a copy substitutes for presenting an identification document at a branch counter, it &#8220;requires, to the greatest extent possible and by analogy to a face-to-face transaction, a method sufficient to establish, even indirectly, that the customer is in possession of the original identification document.&#8221; The same judgment set the required level: the institution must take &#8220;identity verification measures at a level capable of demonstrating that it endeavored to prevent financial fraud loss.&#8221;<\/p>\n<p>Both judgments relied on the Ministry of the Interior and Safety&#8217;s Technical Standards and Management Criteria for ID Authenticity Verification in Non-Face-to-Face Identity Verification, which presumes that a copy must be <strong>photographed directly by the person, from the original<\/strong>, and provides that &#8220;a financial institution may require the customer to submit a photograph of the customer&#8217;s upper body holding the customer&#8217;s own identification document.&#8221;<\/p>\n<p>In the Cheongju case, what was submitted was a rephotographed or scanned copy of a forged card. The court held that where an institution cannot be technically certain that the original was photographed, it &#8220;should have reinforced its identity verification method, for example by requiring the identification document to be photographed with the customer&#8217;s face directly visible, or by additionally requiring method (ii), the video call, under the Verification Guidelines,&#8221; adding in parentheses: <strong>&#8220;such measures are not technically difficult.&#8221;<\/strong><\/p>\n<h3>Institutions that actually checked the face have won<\/h3>\n<p>The contrast is borne out. The institution in Daegu District Court 2024Ga-dan137991 performed mobile phone authentication, driver&#8217;s license submission and authenticity verification, and <strong>real-time capture of the customer&#8217;s face matched against the license photograph by facial recognition<\/strong>. The court treated this as mandatory methods (i) and (ii) plus recommended method (vi), found the performance adequate, and dismissed the claim.<\/p>\n<p>Daegu High Court, Judgment of November 18, 2025, 2025Na10683, reached the same result, holding that &#8220;the non-face-to-face real name verification procedures performed by the defendant can be found to have been appropriate to the extent of confirming that the application to open the deposit account was transmitted by the plaintiff or the plaintiff&#8217;s agent.&#8221; That case is factually different, however: the named party had voluntarily handed over their own mobile phone and driver&#8217;s license to a workplace colleague.<\/p>\n<p>The practical lesson is plain. <strong>A positive authenticity check does not, by itself, discharge the duty.<\/strong> Whatever the system does not examine must be examined by a person or by another procedure.<\/p>\n<p><\/p>\n<h2 id=\"sec-6\">Why did the KRW 1 micro-deposit test fail as identity verification?<\/h2>\n<p class=\"lead-text\">Because the account itself had been opened two days earlier by the same impostor. This point, however, is <strong>one on which Korean lower courts disagree<\/strong>.<\/p>\n<p>The micro-deposit test is widely used: the institution transfers a nominal sum to the customer&#8217;s existing account together with a code, and the customer enters the code. It corresponds to method (iv), use of an existing account, and is intended to confirm that the customer has authority over an account already opened at another institution.<\/p>\n<p>Cheongju District Court reasoned that, unlike method (ii) or method (iii), this method <strong>does not directly confirm that the person acting is the named party<\/strong>, so compliance must be assessed more strictly to ensure that the actor and the named party are the same person.<\/p>\n<h3>A judgment pointing the other way<\/h3>\n<p>Seoul Western District Court, Judgment of June 14, 2024, 2023Na43126, construed the term the opposite way. Rejecting the argument that an account opened by an impostor immediately before the loan cannot be an &#8220;existing account,&#8221; the court held: &#8220;on its wording, an &#8216;existing account&#8217; means an account already in existence prior to the application for the non-face-to-face electronic financial transaction, and there is no objective and reasonable basis for construing it as further requiring, by reference to a period counted back from the application date, that the account was opened some time ago and has an actual transaction history. In practice a financial institution cannot readily ascertain the opening date of an account held at another institution or whether it is in actual use, and there is no material or circumstance supporting a duty to do so.&#8221;<\/p>\n<p>The position, then, is this: whether a newly opened account qualifies is genuinely contestable, and the Seoul Western District Court reading has textual support. Cheongju District Court reached a different result because <strong>it did not decide the case on that single issue<\/strong>. A customer with no transaction history, an account two days old, a certificate issued on a Saturday, and a large application on a Sunday combined, and the court held that in such circumstances the lender needed to &#8220;resolve the grounds for suspicion in the transaction, for example by requiring additional authentication procedures capable of confirming that the online loan applicant was the plaintiff in person.&#8221;<\/p>\n<h3>The credential chain<\/h3>\n<p>Set out in sequence, the structure shows why independence mattered.<\/p>\n<ul>\n<li>Forged ID card opens a prepaid mobile line \u2192 mobile authentication credential obtained<\/li>\n<li>Forged ID card plus mobile line opens a bank account \u2192 existing-account credential obtained<\/li>\n<li>That account&#8217;s OTP issues a joint certificate \u2192 electronic signature credential obtained<\/li>\n<li>All three combine in the loan application \u2192 four verification steps passed<\/li>\n<\/ul>\n<p>The four checks were not independent verifications but <strong>outputs derived from the same forged document<\/strong>. Since the purpose of requiring combined application is that each method compensate for the weaknesses of the others, adding steps produces no compensating effect in this structure.<\/p>\n<p><\/p>\n<h2 id=\"sec-7\">Does a joint certificate signature prove that I signed?<\/h2>\n<p class=\"lead-text\">No. The wholesale amendment of the Digital Signature Act on June 9, 2020 abolished the accredited certificate regime, and the joint certificate that replaced it <strong>carries no presumption as to the authenticity of identity or the integrity of the electronic document<\/strong>.<\/p>\n<p>Many people recall the proposition that a signature made with an accredited certificate is presumed to be the person&#8217;s own. That proposition rests on Supreme Court of Korea, Judgment of March 29, 2018, 2017Da257395: &#8220;an electronic document transmitted by a person whose identity has been confirmed by an accredited certificate issued by an accredited certification authority is, absent special circumstances, to be regarded as falling within the case prescribed in Article 7(2)(ii) of the Electronic Documents Act, namely &#8216;where the electronic document received was transmitted by a person for whom the recipient had justifiable reason to believe, by reason of the relationship with the originator or the originator&#8217;s agent, that it was based on the intent of the originator or the originator&#8217;s agent.&#8217; Accordingly, in such a case the recipient of the electronic document may, without additional identity verification procedures such as a telephone call or an interview, treat the manifestation of intent contained in the electronic document as the originator&#8217;s and perform a legal act.&#8221;<\/p>\n<h3>That judgment does not carry over to cases under the current statute<\/h3>\n<p>Seoul Central District Court, Judgment of April 11, 2023, 2021Ga-dan5243198, addressed the point directly, holding that the earlier judgment&#8217;s reasoning &#8220;may apply only to cases governed by the former Digital Signature Act, and can no longer apply to cases governed by the new Digital Signature Act.&#8221; It added that even under the former statute the reasoning is displaced where special circumstances exist, or where the institution would have known, on reasonable care, that the signature was made by an impostor.<\/p>\n<p>Cheongju District Court is to the same effect. The lender had merely &#8220;mechanically completed identity authentication through a joint certificate rather than an accredited certificate,&#8221; and &#8220;unlike the former accredited certificate, for which the authenticity of identity and the integrity of the electronic document were presumed and recognized in respect of an accredited electronic signature, the joint certificate introduced by the wholesale amendment of the Digital Signature Act on June 9, 2020 is recognized only as having <strong>the effect of a signature, a signature and seal, or a name and seal<\/strong> in respect of the electronic signature.&#8221;<\/p>\n<p>The strongest formulation appears in Seoul Central District Court 2024Na28037, which pointed to &#8220;the fact that the joint certificate that emerged after the abolition of the accredited certificate under the former Digital Signature Act does not even possess an identity verification function, and the fact that the Verification Guidelines likewise prescribe SMS authentication and joint certificate authentication as recommended measures to be performed in addition to the mandatory methods (i) through (v).&#8221;<\/p>\n<table>\n<thead>\n<tr>\n<th>Item<\/th>\n<th>Former accredited certificate<\/th>\n<th>Current joint certificate<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Basis<\/td>\n<td>Accredited electronic signature under the former Digital Signature Act<\/td>\n<td>Digital Signature Act as wholly amended June 9, 2020<\/td>\n<\/tr>\n<tr>\n<td>Authenticity of identity<\/td>\n<td>Presumed<\/td>\n<td>Not presumed<\/td>\n<\/tr>\n<tr>\n<td>Integrity of the document<\/td>\n<td>Presumed<\/td>\n<td>Not presumed<\/td>\n<\/tr>\n<tr>\n<td>Effect recognized<\/td>\n<td>Including the above presumptions<\/td>\n<td>Effect of a signature, signature and seal, or name and seal<\/td>\n<\/tr>\n<tr>\n<td>Status under the Verification Guidelines<\/td>\n<td>\u2014<\/td>\n<td>Recommended method (vi), not a mandatory method<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The implications reach beyond banking disputes. Foreign-invested companies operating in the Incheon Free Economic Zone (IFEZ) \u2014 across Songdo International Business District, Cheongna International City, and Yeongjong International City \u2014 that execute contracts electronically in Korea should not assume that a joint certificate signature carries a presumption of due execution. Alongside the certificate signature it is prudent to retain <strong>separate evidence that the signatory was in fact that person<\/strong>: video confirmation, an upper-body photograph, a face-to-face verification step, and preserved logs.<\/p>\n<p><\/p>\n<h2 id=\"sec-8\">If the contract stands, do I recover nothing?<\/h2>\n<p class=\"lead-text\">Not at all. Even where the contract binds the named party, damages remain available under Article 2-4(2) of the Telecom Fraud Act. In the Seoul Central District Court line of cases the claimant recovered 50% of the loan amount, confirmed by the Supreme Court of Korea on August 14, 2025. The route there was not straightforward.<\/p>\n<p>The construction adopted in Cheongju District Court 2024Na57532 \u2014 that the contract has no effect as against the named party \u2014 is not always accepted. In Supreme Court 2024Da236754 the contract was held valid. Where that happens, damages are what remain.<\/p>\n<h3>Five stages over four years<\/h3>\n<table>\n<thead>\n<tr>\n<th>Stage<\/th>\n<th>Judgment<\/th>\n<th>Outcome<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>First instance<\/td>\n<td>Seoul Central District Court, Apr. 11, 2023, 2021Ga-dan5243198<\/td>\n<td>Loan agreement <strong>valid<\/strong> \u2192 but debt declared not to exist beyond 50% of the loan amount, reflecting the institution&#8217;s liability; remainder of claim dismissed<\/td>\n<\/tr>\n<tr>\n<td>Appeal<\/td>\n<td>Seoul Central District Court, Dec. 14, 2023, 2023Na21565<\/td>\n<td>Defendant&#8217;s appeal dismissed<\/td>\n<\/tr>\n<tr>\n<td>Supreme Court<\/td>\n<td>Supreme Court of Korea, May 30, 2024, 2024Da202188<\/td>\n<td>Reversed and remanded ex officio \u2014 a policy loan is not a loan for consumption, so there was no interest in seeking a declaration<\/td>\n<\/tr>\n<tr>\n<td>On remand<\/td>\n<td>Seoul Central District Court, Oct. 31, 2024, 2024Na28037<\/td>\n<td>Claim amended in exchange to damages of KRW 25 million \u2192 granted in full<\/td>\n<\/tr>\n<tr>\n<td>Second appeal<\/td>\n<td>Supreme Court of Korea, Aug. 14, 2025, 2024Da310331<\/td>\n<td>Appeal dismissed \u2014 final<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>Why the first instance held the contract valid<\/h3>\n<p>A point easily misread: the first instance judgment did not favor the named party on the principal issue. The primary claim was that the loan agreement was void, and the court <strong>rejected<\/strong> it.<\/p>\n<p>The decisive reason was that the transaction fell <strong>outside the Real Name Act<\/strong>. A policy loan forms one contract together with the insurance policy rather than a separate one, has the character of an advance on the surrender value, and the underlying insurance contract had already been concluded through real name verification; the Korea Federation of Banks&#8217; guidance likewise excludes insurance transactions from real name transactions. On that basis the court held that &#8220;the policy loan transaction in this case is difficult to regard as subject to the Real Name Act.&#8221;<\/p>\n<p>The analysis then split in two. &#8220;Even if the defendant failed properly to perform the identity verification measures required by the Electronic Financial Transactions Act or the Telecom Fraud Act, so long as it went through SMS authentication using the plaintiff&#8217;s own mobile phone and identity verification through the joint certificate,&#8221; the agreement fell within Article 7(2)(ii) and <strong>its effect attached to the named party<\/strong>. The contract was valid; the verification breach was handled separately as a question of damages.<\/p>\n<p>This is where the case diverges from Cheongju District Court 2024Na57532, which concerned an unsecured loan by a lending-focused financial institution. That transaction was subject to the Real Name Act, and breach of the verification duty went directly to the validity of the contract.<\/p>\n<h3>The 50% reduction was comparative fault, not set-off<\/h3>\n<p>How, then, did a valid debt halve? The judgment records neither a set-off defense nor a counterclaim. The court treated <strong>the very existence of the loan debt as the named party&#8217;s loss<\/strong>, and then applied comparative fault.<\/p>\n<p>The connecting passage reads: &#8220;so long as the effect of the policy loan agreement attaches to the plaintiff, if the plaintiff does not repay the policy loan, then when an insured event later occurs or the policy is terminated and a surrender value arises, the loan principal and interest are deducted from the insurance proceeds or surrender value, and therefore <strong>the principal and interest of this policy loan all devolve upon the plaintiff as loss<\/strong>.&#8221;<\/p>\n<p>With the loss fixed at the full loan amount, what remained was limitation of liability. The court weighed three matters against the named party: that the fraud succeeded because the victim, deceived by the impostor, &#8220;did not merely provide personal information voluntarily but went so far as to install TeamViewer, a remote control program, on the plaintiff&#8217;s mobile phone&#8221;; that the victim, a 51-year-old who had worked for roughly 30 years, could sufficiently have recognized the prevalence of voice phishing in Korea; and that a loan notification message was received and read without timely action being taken. On that basis the court held that &#8220;the defendant&#8217;s liability in damages arising from this policy loan is appropriately limited to 50% of the loan amount.&#8221;<\/p>\n<div class=\"formula\">\n<div class=\"f-item\">\n<div class=\"f-num\">KRW 50m<\/div>\n<div class=\"f-label\">Valid loan debt<br \/>(contract upheld)<\/div>\n<\/div>\n<div class=\"f-op\">\u2212<\/div>\n<div class=\"f-item\">\n<div class=\"f-num\">KRW 25m<\/div>\n<div class=\"f-label\">Institution&#8217;s liability<br \/>(after 50% comparative fault)<\/div>\n<\/div>\n<div class=\"f-op\">=<\/div>\n<div class=\"f-item f-result\">\n<div class=\"f-num\">KRW 25m<\/div>\n<div class=\"f-label\">Debt actually remaining<br \/>(half the claim dismissed)<\/div>\n<\/div><\/div>\n<p>The named party sought a declaration as to the whole KRW 50 million, obtained it as to half, and bore one half of the costs. <strong>It was a win, but only half a win.<\/strong><\/p>\n<p>The Supreme Court&#8217;s first reversal turned on the form of the action rather than on the verification duty: &#8220;the economic substance of a policy loan is to be regarded as an advance payment of insurance proceeds or surrender value that the insurer will later be obliged to pay. Although the policy uses the term &#8216;loan,&#8217; this differs from an ordinary loan and does not have the legal character of a loan for consumption&#8221; (Supreme Court of Korea, Judgment of May 30, 2024, 2024Da202188). On remand the claim was amended in exchange <strong>from a declaration of non-existence of debt to damages<\/strong>, and KRW 25 million was awarded. Dismissing the second appeal, the Supreme Court held that &#8220;the conclusion of the court below, which found the defendant liable in damages on the ground that it had failed properly to perform the identity verification measures prescribed by the Telecom Fraud Act, is acceptable.&#8221;<\/p>\n<p>Three points deserve note.<\/p>\n<p><strong>First, the verification duty applies even outside the Real Name Act.<\/strong> A policy loan is not a financial transaction under the Real Name Act, yet the court held that &#8220;the Electronic Financial Transactions Act or the Telecom Fraud Act differ in purpose and legislative intent from those of the Real Name Act, and therefore it cannot be said that the identity verification duty or the duty to prevent telecommunications-based financial fraud required by the Electronic Financial Transactions Act or the Telecom Fraud Act is inapplicable or exempted merely because there is no identity verification duty under the Real Name Act.&#8221;<\/p>\n<p><strong>Second, the form of the action drives the outcome.<\/strong> This claimant won twice on a declaration, was reversed by the Supreme Court, and then secured a final judgment by reframing the claim as damages. Which cause of action to pursue must be settled when proceedings are commenced.<\/p>\n<p><strong>Third, comparative fault applies.<\/strong> Unlike the invalidity route, the damages route absorbs the claimant&#8217;s own fault in full. Installing a remote control program cut recovery in half here. Where the contract itself is held ineffective, as in Cheongju, no question of comparative fault arises and the debt disappears entirely.<\/p>\n<p><\/p>\n<h2 id=\"sec-9\">Why did the apparent-authority defense fail?<\/h2>\n<p class=\"lead-text\">Because no basic authority existed and there was no justifiable ground. The Supreme Court of Korea restated this doctrine in June 2025.<\/p>\n<p>The lender argued apparent authority in the alternative: the photograph on the submitted card was genuinely the named party&#8217;s, the address matched the named party&#8217;s current residence, and the bank account had been opened using another account in the named party&#8217;s name \u2014 none of which, it said, would be possible unless the named party had supplied personal information and completed authentication steps. Authority, or at least basic authority, must therefore have existed.<\/p>\n<h3>Name-impersonation ordinarily defeats apparent authority<\/h3>\n<p>The starting point is long settled. In Supreme Court of Korea, Judgment of June 28, 2002, 2001Da49814 \u2014 a case in which a forged resident registration card bearing the impostor&#8217;s photograph was used to obtain a loan \u2014 the Court held that &#8220;where a person, by artifice, does not indicate that the act is done as agent but merely impersonates the principal&#8217;s name and, deceiving the counterparty into believing that the person is the principal, performs a legal act directly in the principal&#8217;s name, apparent authority under that provision cannot, absent special circumstances, be established.&#8221;<\/p>\n<p>The Supreme Court clarified the narrow exception in 2025: apparent authority under Article 126 of the Civil Act applies by analogy &#8220;only where the person impersonating the principal had basic authority to act for the principal and the counterparty had justifiable grounds to believe that the impersonator was exercising the principal&#8217;s authority as the principal&#8221; (Supreme Court of Korea, Judgment of June 5, 2025, 2023Da232526).<\/p>\n<p>The same judgment set a heavier standard for financial institutions: taking into account &#8220;the fact that a financial institution owes a higher duty of care than an ordinary person with respect to verification of the principal and of authority in financial transactions,&#8221; even where a loan solicitor exploits an entrustment relationship to impersonate another and the institution is unaware, justifiable grounds are not readily to be found.<\/p>\n<h3>The court&#8217;s findings<\/h3>\n<p><strong>On basic authority.<\/strong> Absent any material indicating that the named party had supplied personal details or information to the impostor, the grounds advanced by the lender were insufficient to establish basic authority.<\/p>\n<p><strong>On justifiable grounds.<\/strong> The court weighed three matters: that the impostor forged <strong>several<\/strong> resident registration cards and used them to open a mobile line, open an account, and apply for multiple loans; that the lender had mechanically completed authentication through a joint certificate rather than an accredited certificate; and that it could not be found to have discharged its verification duty in that process.<\/p>\n<p>In short, <strong>the finding that the verification duty was not discharged also defeats the justifiable grounds required for apparent authority.<\/strong> For a financial institution the two lines of defense stand or fall together.<\/p>\n<p><\/p>\n<h2 id=\"sec-10\">What should a victim of identity theft do first?<\/h2>\n<p class=\"lead-text\">Two things at once: stop the loss spreading, and preserve evidence. The named party here cancelled the prepaid line and filed a police report on the day of discovery, and that report became the factual backbone of the later litigation.<\/p>\n<h3>1. Cut off the compromised credentials immediately<\/h3>\n<p>Identify and cancel any mobile line opened, account established, or certificate issued through the identity theft. The loan succeeded here because line, account, and certificate were chained together; breaking one link disables the authentications built on top of it.<\/p>\n<h3>2. File a police report and obtain the receipt<\/h3>\n<p>The report matters even if no suspect is found. Police here registered the case as unsolved six months later, yet the named party used that notice and the investigation record to establish that the loan had not been applied for.<\/p>\n<h3>3. Establish the full scope of the loss<\/h3>\n<p>Identity theft rarely stops at one transaction; three institutions disbursed loans here. Review every account, mobile line, and loan in your name through the integrated account information service and the carriers&#8217; identity-theft inquiry services.<\/p>\n<h3>4. Object to the institution, but avoid acknowledging the debt<\/h3>\n<p>Partial payment or an application to defer repayment may be construed as acknowledgment. Where the matter will be litigated, it is better to record in writing from the outset that the contract was not concluded by you.<\/p>\n<h3>5. Choose the cause of action, then commence proceedings<\/h3>\n<p>There are two routes: a declaration that the debt does not exist, which contests the validity of the contract, and damages under Article 2-4(2) of the Telecom Fraud Act, which accepts validity. Which is preferable depends on the verification steps the institution actually took and on the legal character of the transaction. Note also that the second route is subject to comparative fault.<\/p>\n<h3>6. Obtain the institution&#8217;s verification records in documentary form<\/h3>\n<p>The decisive issue in litigation is what identity verification the institution performed and how. Orders for production of financial transaction information and factual inquiries to telecommunications carriers are the means of obtaining the authentication records and the submitted ID copy. In the Cheongju case, the results of the first instance court&#8217;s production order and carrier inquiry were among the grounds of the findings.<\/p>\n<p>The outcome of an identity theft case usually turns not on proving <strong>that you did not do it<\/strong>, but on proving <strong>that the other side did not properly check<\/strong>.<\/p>\n<p><\/p>\n<h2 id=\"sec-11\">What should financial institutions and companies strengthen?<\/h2>\n<p class=\"lead-text\">The points identified in these judgments form a checklist. What matters is not the number of authentication methods but whether each functions as an independent check.<\/p>\n<h3>1. Confirm that the checks are mutually independent<\/h3>\n<p>As the Supreme Court put it, mutually independent means of authentication must be capable of being considered in combination. If the ID copy and the existing account both derive from the same forged document, no compensating effect arises. Whether the sources diverge should be tested at the design stage.<\/p>\n<h3>2. Actually perform two or more of mandatory methods (i)\u2013(v)<\/h3>\n<p>SMS authentication plus a joint certificate is not enough; both are recommended method (vi). That is precisely why the institution in Supreme Court 2024Da310331 lost.<\/p>\n<h3>3. Build in a step that assures the original was photographed<\/h3>\n<p>Operate at least one of the following, if only conditionally: an upper-body photograph holding the ID, forced live capture, or a video call. Since the March 1, 2024 amendment permits <strong>real-time remote facial recognition in place of a video call<\/strong>, operational burden is a weaker justification for deferral. The Cheongju court&#8217;s remark that &#8220;such measures are not technically difficult&#8221; should be taken seriously.<\/p>\n<h3>4. Have a person review what the authenticity system does not<\/h3>\n<p>The Government24 check examines name, registration number, and issue date. The photograph, the address, the chronological consistency of the district name, and the seal are outside its scope. Without a separate review of those elements, a forgery passes.<\/p>\n<h3>5. Require additional authentication where grounds for suspicion exist<\/h3>\n<p>A new customer with no transaction history, a freshly opened account, and certificate issuance or a large application at the weekend or at night together constitute suspicion. Courts treat the verification duty as heightened for weekend transactions.<\/p>\n<h3>6. Review irrespective of whether the Real Name Act applies<\/h3>\n<p>Products outside the Real Name Act, such as policy loans, remain subject to the verification duty under the Telecom Fraud Act. Lowering the standard because a product falls outside the Real Name Act leaves liability in damages intact.<\/p>\n<h3>7. Revisit the evidentiary assumptions behind electronic signatures<\/h3>\n<p>A joint certificate carries no presumption as to authenticity of identity or integrity. Companies operating electronic contracting in South Korea \u2014 including foreign-invested companies in Songdo International Business District, Cheongna International City, and Yeongjong International City \u2014 should ensure their procedures capture evidence of the signatory&#8217;s identity alongside the certificate signature.<\/p>\n<p><\/p>\n<h2 id=\"sec-faq\">Frequently Asked Questions<\/h2>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. A loan was taken out in my name in South Korea. Do I have to repay it?<\/p>\n<p>A. Not if the financial institution failed properly to perform identity verification. Cheongju District Court, Judgment of December 4, 2025, 2024Na57532, declared that neither the KRW 30 million principal nor the interest existed as a debt where an impostor had used a forged resident registration card. Where the institution did follow proper procedure, however, the contract has been upheld (Supreme Court of Korea, Judgment of August 14, 2025, 2024Da236754), so the first step is to establish what the institution actually did.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. Can I win if the perpetrator is never caught?<\/p>\n<p>A. Yes. Korean police registered this matter as unsolved in October 2023, no suspect having been identified, yet the named party prevailed at first instance and on appeal. Civil proceedings determine not the punishment of the perpetrator but whether the financial institution exercised reasonable care.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. The Supreme Court issued opposite judgments on the same day. Which one governs?<\/p>\n<p>A. Both are good law and they do not conflict. In Supreme Court of Korea, Judgment of August 14, 2025, 2024Da236754, the institution had performed multiple independent authentications \u2014 ID copy submission, existing-account verification, mobile phone authentication, joint certificate authentication, and a credit bureau inquiry \u2014 and the contract was upheld. In 2024Da310331, decided the same day, the institution had performed only SMS authentication and joint certificate authentication, and was held liable in damages for breach of the verification duty. What separated them was performance, not doctrine.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. The lender says it verified identity several times. Can the loan still be challenged?<\/p>\n<p>A. A count of steps is not sufficient. The Supreme Court held that whether identity verification was properly performed &#8220;is to be assessed not by evaluating a single means of authentication in isolation, but by considering mutually independent means of authentication in combination&#8221; (Supreme Court of Korea, Judgment of August 14, 2025, 2024Da236754). Where every authentication derives from the same forged document, the methods cannot compensate for one another.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. The forged ID passed the government authenticity check. Is the institution still liable?<\/p>\n<p>A. It may be. South Korea&#8217;s Government24 authenticity check validates only the name, resident registration number, and issue date, so a card with a substituted photograph and address passes. Cheongju District Court held that because the photograph on the submitted copy differed markedly from that on the genuine card, and given the form and content of the forgery, it did not appear that detecting the forgery was altogether impossible; a positive authenticity check alone therefore did not establish proper performance.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. Is a copy of the ID enough, or is facial confirmation required?<\/p>\n<p>A. Because submission of a copy substitutes for presenting an ID at a branch counter, a method sufficient to establish, even indirectly, that the customer holds the original is required (Suwon District Court Seongnam Branch, Judgment of September 20, 2023, 2022Ga-dan6453). An institution that captured the customer&#8217;s face in real time and matched it against the ID photograph by facial recognition was found to have performed adequately (Daegu District Court, Judgment of February 27, 2026, 2024Ga-dan137991). Since March 1, 2024, real-time remote facial recognition may substitute for a video call.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. Is the KRW 1 micro-deposit test not accepted as identity verification?<\/p>\n<p>A. It is an accepted method, but it did not function here because the account had been opened two days earlier by the same impostor. Korean lower courts differ on this point. Seoul Western District Court, Judgment of June 14, 2024, 2023Na43126, held that &#8220;on its wording, an &#8216;existing account&#8217; means an account already in existence prior to the application for the non-face-to-face electronic financial transaction,&#8221; disregarding the opening date. Cheongju District Court reached a different result because the absence of transaction history, weekend certificate issuance, and a large application combined as grounds for suspicion.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. If a joint certificate was used to sign, am I presumed to have signed?<\/p>\n<p>A. No. The joint certificate introduced by the wholesale amendment of the Digital Signature Act on June 9, 2020 is recognized only as having the effect of a signature, a signature and seal, or a name and seal, unlike the former accredited certificate for which authenticity of identity and integrity of the document were presumed. Seoul Central District Court, Judgment of October 31, 2024, 2024Na28037, went so far as to state that the joint certificate &#8220;does not even possess an identity verification function.&#8221;<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. Can the 2018 Supreme Court judgment on accredited certificates still be relied on?<\/p>\n<p>A. Not for cases governed by the current statute. Supreme Court of Korea, Judgment of March 29, 2018, 2017Da257395, held that an electronic document transmitted by a person whose identity was confirmed by an accredited certificate could be treated as the originator&#8217;s without additional verification. Seoul Central District Court, Judgment of April 11, 2023, 2021Ga-dan5243198, stated that that reasoning &#8220;may apply only to cases governed by the former Digital Signature Act, and can no longer apply to cases governed by the new Digital Signature Act.&#8221;<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. If the contract is upheld, can I recover nothing?<\/p>\n<p>A. Damages remain available. Article 2-4(2) of the Telecom Fraud Act imposes liability where a failure to perform identity verification measures causes loss to the user. Seoul Central District Court, Judgment of October 31, 2024, 2024Na28037, awarded KRW 25 million, being 50% of a KRW 50 million loan, and the award was confirmed by Supreme Court of Korea, Judgment of August 14, 2025, 2024Da310331. Comparative fault may prevent full recovery.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. Does &#8220;the effect attaches to the named party&#8221; mean the contract is valid?<\/p>\n<p>A. Yes \u2014 the named party owes the loan debt, and the primary claim of invalidity was rejected. Seoul Central District Court, Judgment of April 11, 2023, 2021Ga-dan5243198, held that a policy loan is not subject to the Real Name Act, so that even if the institution had failed properly to perform identity verification measures, the effect attached to the named party under Article 7(2)(ii) of the Electronic Documents Act because SMS and joint certificate authentication had been completed. The verification breach was addressed separately as a matter of damages.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. If the contract is valid, why did the debt halve? Was it a set-off?<\/p>\n<p>A. No set-off defense or counterclaim appears in the judgment. The court held that, the effect of the agreement having attached to the named party, non-repayment would cause the principal and interest to be deducted from future insurance proceeds or surrender value, so that &#8220;the principal and interest of this policy loan all devolve upon the plaintiff as loss.&#8221; Treating the debt itself as the loss, the court applied comparative fault to limit the institution&#8217;s liability to 50% and expressed the result in the form of a declaration. The named party sought a declaration as to the whole KRW 50 million, obtained it as to half, and bore one half of the costs.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. What happens if the institution pleads apparent authority?<\/p>\n<p>A. Name-impersonation ordinarily defeats apparent authority. The Supreme Court of Korea has held that where a person merely impersonates the principal&#8217;s name and performs a legal act directly in that name, apparent authority cannot, absent special circumstances, be established (Judgment of June 28, 2002, 2001Da49814), and that the doctrine applies by analogy only where the impersonator had basic authority and the counterparty had justifiable grounds (Judgment of June 5, 2025, 2023Da232526). The latter judgment also confirmed that a financial institution owes a higher duty of care than an ordinary person as to verification of the principal and of authority.<\/p>\n<\/div>\n<div class=\"faq-item\">\n<p class=\"faq-q\">Q. What should a victim of identity theft in South Korea do first?<\/p>\n<p>A. Cancel the compromised mobile line, account, and certificate immediately to break the credential chain, and file a police report to create a record. Then review every account, mobile line, and loan in your name to establish the scope of the loss, and avoid conduct that may be construed as acknowledging the debt. In litigation, orders for production of financial transaction information and factual inquiries to telecommunications carriers are essential to obtain the institution&#8217;s authentication records and the submitted ID copy, and the choice between a declaration of non-existence of debt and a damages claim must be made when proceedings are commenced.<\/p>\n<\/div>\n<p class=\"closing\">In non-face-to-face banking disputes the outcome turns not on how many procedures were completed, but on what those procedures actually verified. That is why the Supreme Court of Korea reached opposite conclusions on the same day. For anyone whose identity has been used, the starting point is to establish in documentary form what the financial institution checked and what it did not.<\/p>\n<div class=\"author-box\">\n    <img decoding=\"async\" class=\"author-avatar\" src=\"https:\/\/atlaw.kr\/wp-content\/uploads\/2022\/12\/\ubc15\uc18c\uc601-1.png\" alt=\"Soyoung Park, Representative Attorney \u2014 Atlas Legal\"><\/p>\n<div class=\"author-text\">\n<div class=\"author-section-label\">About the Author<\/div>\n<div class=\"author-name\">Soyoung Park | Representative Attorney<\/div>\n<div class=\"author-detail\">Family Law, Inheritance, Construction &amp; Real Estate Disputes<\/div>\n<div class=\"author-detail\">Judicial Research and Training Institute, 33rd Class<\/div>\n<div class=\"author-detail\">Korea University, Department of Law<\/div>\n<div class=\"author-detail\">Atlas Legal | Incheon Songdo, South Korea<\/div>\n<p>      <a class=\"author-link\" href=\"https:\/\/atlaw.kr\" target=\"_blank\" rel=\"noopener noreferrer\">Visit Atlas Legal Homepage \u2192<\/a>\n    <\/div>\n<\/p><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Under South Korean law, a non-face-to-face loan obtained through identity theft does not bind you where the lender failed to verify identity properly. Cheongju District Court 2024Na57532, and two Supreme Court judgments issued on the same day reached opposite results.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[17],"tags":[937,940,939,938,941],"class_list":["post-1949","post","type-post","status-publish","format-standard","hentry","category-civil","tag-identity-theft-loan","tag-joint-certificate","tag-korean-electronic-documents-act","tag-non-face-to-face-verification","tag-telecom-fraud-act"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Identity Theft Loans in South Korea: When You Owe Nothing | Atlas Legal<\/title>\n<meta name=\"description\" content=\"Under South Korean law, a non-face-to-face loan obtained through identity theft does not bind you where the lender failed to verify identity properly. Cheongju District Court 2024Na57532, and two Supreme Court judgments issued on the same day reached opposite results.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Identity Theft Loans in South Korea: When You Owe Nothing | Atlas Legal\" \/>\n<meta property=\"og:description\" content=\"Under South Korean law, a non-face-to-face loan obtained through identity theft does not bind you where the lender failed to verify identity properly. Cheongju District Court 2024Na57532, and two Supreme Court judgments issued on the same day reached opposite results.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/\" \/>\n<meta property=\"og:site_name\" content=\"Atlas Legal Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-01T03:09:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-01T03:10:31+00:00\" \/>\n<meta name=\"author\" content=\"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"38 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/identity-theft-loan-verification-south-korea\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/identity-theft-loan-verification-south-korea\\\/\"},\"author\":{\"name\":\"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4\",\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/#\\\/schema\\\/person\\\/184bcdecc06f89fd6c36b29781165b55\"},\"headline\":\"A Loan Taken Out in Your Name in South Korea \u2014 When You Do Not Have to Repay It\",\"datePublished\":\"2026-09-01T03:09:35+00:00\",\"dateModified\":\"2026-09-01T03:10:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/identity-theft-loan-verification-south-korea\\\/\"},\"wordCount\":7693,\"publisher\":{\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/#organization\"},\"keywords\":[\"Identity Theft Loan\",\"Joint Certificate\",\"Korean Electronic Documents Act\",\"Non-Face-to-Face Verification\",\"Telecom Fraud Act\"],\"articleSection\":[\"Civil\\\/Administrative\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/identity-theft-loan-verification-south-korea\\\/\",\"url\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/identity-theft-loan-verification-south-korea\\\/\",\"name\":\"Identity Theft Loans in South Korea: When You Owe Nothing | Atlas Legal\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/#website\"},\"datePublished\":\"2026-09-01T03:09:35+00:00\",\"dateModified\":\"2026-09-01T03:10:31+00:00\",\"description\":\"Under South Korean law, a non-face-to-face loan obtained through identity theft does not bind you where the lender failed to verify identity properly. Cheongju District Court 2024Na57532, and two Supreme Court judgments issued on the same day reached opposite results.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/identity-theft-loan-verification-south-korea\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/identity-theft-loan-verification-south-korea\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/identity-theft-loan-verification-south-korea\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\ud648\",\"item\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A Loan Taken Out in Your Name in South Korea \u2014 When You Do Not Have to Repay It\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/#website\",\"url\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/\",\"name\":\"Atlas Legal English Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/#organization\",\"name\":\"Atlas Legal English Blog\",\"url\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2025\\\/09\\\/\ud3f4\ub354-\uc0c1\ub2e8-\uc9c1\uc0ac\uac01\ud615.png\",\"contentUrl\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2025\\\/09\\\/\ud3f4\ub354-\uc0c1\ub2e8-\uc9c1\uc0ac\uac01\ud615.png\",\"width\":540,\"height\":485,\"caption\":\"Atlas Legal English Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/#\\\/schema\\\/person\\\/184bcdecc06f89fd6c36b29781165b55\",\"name\":\"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f03bca99acfafded0c4fa1b01dee8839b10f831ccba39db4d9dc175f44d3d640?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f03bca99acfafded0c4fa1b01dee8839b10f831ccba39db4d9dc175f44d3d640?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f03bca99acfafded0c4fa1b01dee8839b10f831ccba39db4d9dc175f44d3d640?s=96&d=mm&r=g\",\"caption\":\"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4\"},\"sameAs\":[\"https:\\\/\\\/atlaw.kr\"],\"url\":\"https:\\\/\\\/atlaw.kr\\\/en-blog\\\/author\\\/prinz001\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Identity Theft Loans in South Korea: When You Owe Nothing | Atlas Legal","description":"Under South Korean law, a non-face-to-face loan obtained through identity theft does not bind you where the lender failed to verify identity properly. Cheongju District Court 2024Na57532, and two Supreme Court judgments issued on the same day reached opposite results.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/","og_locale":"en_US","og_type":"article","og_title":"Identity Theft Loans in South Korea: When You Owe Nothing | Atlas Legal","og_description":"Under South Korean law, a non-face-to-face loan obtained through identity theft does not bind you where the lender failed to verify identity properly. Cheongju District Court 2024Na57532, and two Supreme Court judgments issued on the same day reached opposite results.","og_url":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/","og_site_name":"Atlas Legal Blog","article_published_time":"2026-09-01T03:09:35+00:00","article_modified_time":"2026-09-01T03:10:31+00:00","author":"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4","Est. reading time":"38 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/#article","isPartOf":{"@id":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/"},"author":{"name":"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4","@id":"https:\/\/atlaw.kr\/en-blog\/#\/schema\/person\/184bcdecc06f89fd6c36b29781165b55"},"headline":"A Loan Taken Out in Your Name in South Korea \u2014 When You Do Not Have to Repay It","datePublished":"2026-09-01T03:09:35+00:00","dateModified":"2026-09-01T03:10:31+00:00","mainEntityOfPage":{"@id":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/"},"wordCount":7693,"publisher":{"@id":"https:\/\/atlaw.kr\/en-blog\/#organization"},"keywords":["Identity Theft Loan","Joint Certificate","Korean Electronic Documents Act","Non-Face-to-Face Verification","Telecom Fraud Act"],"articleSection":["Civil\/Administrative"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/","url":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/","name":"Identity Theft Loans in South Korea: When You Owe Nothing | Atlas Legal","isPartOf":{"@id":"https:\/\/atlaw.kr\/en-blog\/#website"},"datePublished":"2026-09-01T03:09:35+00:00","dateModified":"2026-09-01T03:10:31+00:00","description":"Under South Korean law, a non-face-to-face loan obtained through identity theft does not bind you where the lender failed to verify identity properly. Cheongju District Court 2024Na57532, and two Supreme Court judgments issued on the same day reached opposite results.","breadcrumb":{"@id":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/atlaw.kr\/en-blog\/identity-theft-loan-verification-south-korea\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\ud648","item":"https:\/\/atlaw.kr\/en-blog\/"},{"@type":"ListItem","position":2,"name":"A Loan Taken Out in Your Name in South Korea \u2014 When You Do Not Have to Repay It"}]},{"@type":"WebSite","@id":"https:\/\/atlaw.kr\/en-blog\/#website","url":"https:\/\/atlaw.kr\/en-blog\/","name":"Atlas Legal English Blog","description":"","publisher":{"@id":"https:\/\/atlaw.kr\/en-blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/atlaw.kr\/en-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/atlaw.kr\/en-blog\/#organization","name":"Atlas Legal English Blog","url":"https:\/\/atlaw.kr\/en-blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atlaw.kr\/en-blog\/#\/schema\/logo\/image\/","url":"https:\/\/atlaw.kr\/en-blog\/wp-content\/uploads\/sites\/3\/2025\/09\/\ud3f4\ub354-\uc0c1\ub2e8-\uc9c1\uc0ac\uac01\ud615.png","contentUrl":"https:\/\/atlaw.kr\/en-blog\/wp-content\/uploads\/sites\/3\/2025\/09\/\ud3f4\ub354-\uc0c1\ub2e8-\uc9c1\uc0ac\uac01\ud615.png","width":540,"height":485,"caption":"Atlas Legal English Blog"},"image":{"@id":"https:\/\/atlaw.kr\/en-blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/atlaw.kr\/en-blog\/#\/schema\/person\/184bcdecc06f89fd6c36b29781165b55","name":"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f03bca99acfafded0c4fa1b01dee8839b10f831ccba39db4d9dc175f44d3d640?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f03bca99acfafded0c4fa1b01dee8839b10f831ccba39db4d9dc175f44d3d640?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f03bca99acfafded0c4fa1b01dee8839b10f831ccba39db4d9dc175f44d3d640?s=96&d=mm&r=g","caption":"\ubc95\ubb34\ubc95\uc778 \uc544\ud2c0\ub77c\uc2a4"},"sameAs":["https:\/\/atlaw.kr"],"url":"https:\/\/atlaw.kr\/en-blog\/author\/prinz001\/"}]}},"_links":{"self":[{"href":"https:\/\/atlaw.kr\/en-blog\/wp-json\/wp\/v2\/posts\/1949","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/atlaw.kr\/en-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/atlaw.kr\/en-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/atlaw.kr\/en-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/atlaw.kr\/en-blog\/wp-json\/wp\/v2\/comments?post=1949"}],"version-history":[{"count":1,"href":"https:\/\/atlaw.kr\/en-blog\/wp-json\/wp\/v2\/posts\/1949\/revisions"}],"predecessor-version":[{"id":1950,"href":"https:\/\/atlaw.kr\/en-blog\/wp-json\/wp\/v2\/posts\/1949\/revisions\/1950"}],"wp:attachment":[{"href":"https:\/\/atlaw.kr\/en-blog\/wp-json\/wp\/v2\/media?parent=1949"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/atlaw.kr\/en-blog\/wp-json\/wp\/v2\/categories?post=1949"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/atlaw.kr\/en-blog\/wp-json\/wp\/v2\/tags?post=1949"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}