| Chapter 3 Recordkeeping and Notification of Data Transactions and Account Management |
Section 4 Virtual Asset Accounts |
| Article 24 |
When virtual asset service providers implement measures in accordance with the latter part of Paragraph 1, Article 8 of the Act, they shall retain the following information and transaction records in hard copy or electronic format:
1. All records obtained through CDD measures, such as copies or records of passports, identity cards, driving licenses or other similar official identification documents of the customer.
2. Contract files.
3. All abnormal transaction records of virtual asset accounts suspected of involvement in fraud.
4. Data and records obtained from inquiries regarding abnormal virtual asset accounts suspected of involvement in fraud in accordance with regulations in Chapter 2.
The abnormal transaction records of virtual asset accounts suspected of involvement in fraud, as referred to in Subparagraph 3 of the preceding paragraph, shall be sufficient to reconstruct individual abnormal transactions and shall serve as evidence for identifying illegal activity. |
| Article 25 |
When a virtual asset account is identified as an abnormal virtual asset account suspected of involvement in fraud, the virtual asset service provider shall take the following measures:
1. In accordance with the latter part of Paragraph 1, Article 8 of the Act, the virtual asset service provider shall strengthen the CDD measures for the customer and may adopt control measures such as continual review, suspension of deposits or withdrawals, suspension of outward remittance of virtual assets and funds, suspension of all or partial transaction functions, and refusal to establish a business relationship, service provision, and other control measures, and may report to the judicial police authority.
2. Measures to be taken in accordance with the Money Laundering Control Act and other applicable laws and regulations.
When a virtual asset service provider notifies the judicial police authority in accordance with the regulations in the preceding paragraph, it shall use the telephone, fax, email, electronic platform, or other feasible means. The virtual asset service provider shall also provide documents of abnormal virtual asset accounts suspected of involvement in fraud, the identity of the customer, relevant transaction records, or other documents required to be provided under the notification method. |
| Article 26 |
After receiving a report from the virtual asset service provider, the judicial police authority shall notify the virtual asset service provider by official letter within 20 days whether to continue or lift the control measures imposed on the abnormal virtual asset account suspected of involvement in fraud. If the judicial police authority fails to notify the virtual asset service provider within this period, the virtual asset service provider may continue to apply the control measures.
In case of major contingencies, the judicial police authority may send the notification in the preceding paragraph to the virtual asset service provider by telephone, fax, email, or other feasible means, followed by a confirming official letter and documents which should be delivered within five business days after the initial notification.
If a customer has any doubts regarding the control measures implemented by the virtual asset service provider with respect to his or her virtual asset account in accordance with the notification from the judicial police authority, he or she may contact the virtual asset service provider for inquiries, and may also contact the original judicial police authority that notified the implementation of the control measures where necessary. |