Toss

Toss Fintech: Censorship in China and North Korea

What Toss Is

Toss is a South Korean financial technology platform launched in 2015 by Vicki Song. The parent company, Toss Corporation (now Toss Financial Group), operates as one of Asia's most prominent fintech startups, with a user base exceeding 15 million active accounts as of 2024. The service began as a peer-to-peer money transfer application and has expanded to include payments, investing, lending, and insurance products. Toss is primarily designed for the Korean market and does not officially operate as a cross-border remittance service in most countries.

Why It's Censored

Toss is blocked in China and North Korea, though for distinct reasons reflecting each government's regulatory approach.

In China, Toss faces restrictions as part of broader capital control enforcement. The Chinese government, through the State Administration of Foreign Exchange (SAFE) and the People's Bank of China, restricts foreign fintech platforms that enable outbound financial transfers or currency exchange outside official banking channels. South Korean fintech services—particularly those with payment and transfer capabilities—fall under heightened scrutiny. While not explicitly named in public regulations, Toss is effectively blocked to prevent unmonitored money movement that circumvents China's foreign exchange approval requirements. This aligns with China's enforcement of Article 30 of the Foreign Exchange Management Regulations, which mandates state oversight of all cross-border transactions.

In North Korea, the blockade is absolute and ideological. The regime prohibits access to nearly all foreign financial services as part of its information control policy overseen by the Ministry of Posts and Telecommunications. North Korea maintains a near-total internet embargo for civilian populations; only government officials and select entities have limited external connectivity. Any foreign fintech application, including Toss, would represent a potential breach in financial and information sovereignty—concerns paramount to the regime. No specific statutory reference is published; the ban operates through blanket restrictions on foreign digital services.

Technical Blocking Methods

Blocking methods differ by jurisdiction.

China employs multi-layered blocking: DNS filtering through state-controlled resolvers redirects Toss domain queries to null routes; IP-based blocking filters traffic to known Toss servers; and deep packet inspection (DPI) identifies and terminates connections based on Server Name Indication (SNI) headers in TLS handshakes, even when encrypted. This combination makes simple workarounds ineffective. Toss's domain and associated IP ranges are maintained on the Golden Shield's blocking lists.

North Korea's blocking is less technically sophisticated but more comprehensive. The regime simply blocks all external connectivity to civilian internet segments, making domain-level filtering redundant. Government networks use explicit whitelisting rather than blacklisting, so Toss and virtually all foreign services remain inaccessible by default architecture.

User Workarounds

For users in affected regions, circumvention typically involves network-layer solutions. A circumvention-capable VPN service that routes traffic through servers outside the blocking jurisdiction can mask both IP identity and encrypted metadata (though advanced DPI can still detect VPN usage itself in China). Proxy chaining and obfuscation protocols reduce detectability but do not guarantee access. In North Korea, meaningful workarounds exist only for users with access to external networks—an extremely restricted population.

Importantly, using Toss from China carries legal risk. While merely accessing blocked services is not explicitly criminalized, authorities can investigate and penalize users involved in financial transfer circumvention under capital control laws.

Alternatives

Users seeking similar services in restricted regions have limited options. WeChat Pay and Alipay dominate China's digital payments ecosystem and are permitted domestically, though they integrate with SAFE oversight. Wise (formerly TransferWise) is also partially restricted in China for cross-border transfers. In North Korea, no legitimate alternatives exist; financial technology access is state-monopolized.

Outlook

Restrictions are unlikely to ease. China's capital control stance has hardened since 2015, with SAFE expanding enforcement. North Korea's information isolation shows no signs of relaxation. Toss's own expansion strategy focuses on licensed operations in compliant jurisdictions rather than circumventing censorship. The blocking is stable and deepening.