LINE Banking Compliance: How Multinational Banks Can Govern LINE Communications in Japan

Short Summary

Japanese retail banks increasingly use LINE to provide customer service, send account alerts, and process customer payments. The FSA – Japan’s primary financial regulator – requires that financial institutions keep records of client communications, treat customers fairly, and monitor for money laundering and other financial crime. This article explores how banks in Japan use LINE, what the FSA expects, and what a bank operating in multiple markets needs to do to govern LINE communications properly.

Key Takeaways

• Retail Banking Adoption: LINE use is embedded in Japanese banking culture, with employees using both the bank’s LINE Official Account and their personal LINE accounts to communicate with customers. 
• Regulatory Demands: The FSA’s supervisory expectations for recordkeeping, consumer protection, and AML monitoring apply to all LINE conversations, but the platform is not built to capture, store, or screen conversations the way FSA requirements demand.
• Gaps in Global Programs: Compliance teams based outside Japan often build programs without LINE in mind, since LINE plays no role in the markets they know best.
• Compliance Challenges: Integrating LINE into an existing compliance program is difficult due to a lack of native tool support and Japanese-language surveillance, and the absence of clear policy guidance for employees.
• LINE Governance: A defensible LINE program needs to meet the same bar a bank already applies to other channels: capture, retention, supervision, and production, on demand.

How Banks in Japan Use LINE

LINE is Japan’s favorite messaging app, used daily by almost 80% of the population. It offers two distinct products, both of which are widely used by Japanese banks:

• LINE: a personal, consumer-facing app people use to message friends, family, and increasingly, businesses, in daily life.
• LINE Official Account: a separate business product banks use to operate a formal, business-facing presence on the same platform, sending broadcasts, automated replies, and structured customer service conversations.

Because such a large proportion of the Japanese public already uses LINE daily, banks naturally choose the platform as the basis for much of their customer communication. It is more convenient than asking customers to use a designated banking app and is also more direct than email, which most people in Japan check less frequently than LINE. 

LINE Official Accounts are commonly used by banks in Japan to conduct customer service conversations, allow customers to make and receive payments (through integration with LINE Pay), and send account alerts, such as low-balance warnings or fraud alerts.  Aside from these cases, bank employees may also sometimes conduct customer conversations on their personal LINE accounts, as this is the most natural way to connect in Japan. 

Japanese retail banks place a high value on the relationships built between customers and individual bankers or relationship managers, in which bank personnel often become trusted financial advisors to their clients over the course of years. When customers build long-term relationships with a specific banker, they will have saved that banker’s personal LINE ID, making it all the more convenient to conduct repeated conversations using LINE. It is exactly in this everyday scenario that LINE banking compliance becomes a live issue.

FSA Expectations for Digital Communication

Every regulated financial institution operating in Japan is supervised by the Financial Services Agency (FSA), the country’s primary financial regulator. Established in 2000, the FSA has a mandate to protect depositors, policyholders, and investors, and imposes strict regulations on how banks review and screen customer conversations for policy violations. 

The FSA ensures that banks and financial institutions meet this mandate by requiring them to maintain internal controls, including mechanisms to capture, screen, and store all communications between the bank and its customers. 

Japan FSA LINE compliance requires that financial institutions meet three substantive obligations:

• Recordkeeping:  Under the Financial Instruments and Exchange Act (FIEA), banks must maintain accurate records of client communications and transactions, including messages related to a customer’s account, an investment product, or a specific transaction, not just formal account documentation.
• Customer protection: The FSA’s Comprehensive Guidelines for Supervision require banks to demonstrate fair treatment of customers, handle complaints appropriately, and be able to reconstruct exactly what was communicated if a customer later disputes a sale, a piece of advice, or how a product was explained to them.
• AML monitoring: Under Japan’s Act on Prevention of Transfer of Criminal Proceeds, banks must retain transaction-related records, including relevant communications, for at least seven years to support ongoing monitoring and any investigation into suspicious activity.

The FSA also reviews a bank’s practices through regular reporting and periodic on-site inspections and may request records of client communications as part of either process. Where inadequate controls are detected, it can issue a business improvement order or, in more serious cases, a business suspension order, requiring the bank to address the gap.

Ahead of the FATF’s Fifth Round Mutual Evaluation of Japan, planned for 2028, the FSA has continued tightening its AML/CFT guidance for local banks, even though a 2024 FSA report found that 99% of financial institutions already considered themselves fully compliant with existing guidelines.

Complexity of Governing LINE Accounts 

Adhering to FSA requirements is no simple matter for banks where messaging apps like LINE and LINE Official Account are widely used. This is because LINE conversations are harder to record, govern, and capture than those conducted over phone lines or email.

Conversations that take place over a LINE Official Account are delivered directly to the bank’s systems, making them, at least, visible to the bank. Visibility gives the bank some ability to govern the conversation, since it can apply policies, tools, or oversight to what it can see.

Conversations conducted over an employee’s personal LINE account, however, pose an even greater risk to banks. As these occur on the employee’s private device, they are effectively invisible to the bank and cannot be governed. 

Neither channel, on its own, offers the recordkeeping and supervision capabilities FSA regulations require.

Governing LINE at a Multinational Bank

Global compliance programs typically define the institution’s approved communication channels and set guidelines for their safe use — the same challenge covered in our broader look at global communication compliance in finance — assuming that these guidelines can be applied across all jurisdictions in which the bank operates. This works well for channels the compliance team already knows about, but LINE in Japan is a clear example of a channel its architects may have had little reason to consider before and are thus unfamiliar with. 

A compliance team based outside Japan is unlikely to include LINE among its approved or monitored channels, simply because the app plays no role in how business is conducted in the jurisdictions that team knows best. But in Japan, LINE is embedded in how retail banks operate day-to-day, and any compliance program covering operations in Japan should account for it.

While global compliance teams may overlook LINE because they are unaware of its use, a local Japanese team may know that LINE is in active use but lack the budget, tools, or authority to build a separate governance program of its own, especially when the expectation is to follow global policy rather than deviate from it.

LINE is also difficult to fold into an existing global program for a few practical reasons:

• Tool compatibility: Surveillance and archiving systems built for a bank’s home-market channels often lack native support for LINE, since most compliance technology is designed around the channels used in Western markets.
• Language: LINE conversations in Japan take place in Japanese. Lexicon-based surveillance systems built to flag risk indicators in English will not catch equivalent language in Japanese unless specifically configured to do so.
• Policy silence: If a bank’s approved communications policy does not mention LINE, employees in Japan have no clear guidance on whether or how they are permitted to use it with clients.
• Regulatory unfamiliarity: Global compliance teams are typically built around the regulators they deal with most, such as the SEC or the FCA — or, for firms already active in Southeast Asia, MAS in Singapore. The FSA operates under a different framework, and a program designed elsewhere may not reflect its specific expectations for recordkeeping, customer protection, and AML monitoring.

What a Defensible LINE Governance Program Actually Needs

In the US, FINRA Rule 3110 requires firms to establish a system reasonably designed to supervise their personnel’s activities and ensure compliance with applicable regulations. LINE recordkeeping Japan requirements rest on this same underlying principle, but are enforced by the FSA rather than FINRA.

To govern LINE properly, global banks need to extend the same standards they apply to other communication channels to LINE, ensuring they can:

• Capture every one-to-one LINE conversation in full.
• Retain those records for as long as Japanese regulation requires, in a format the bank can search and produce later.
• Supervise conversations for policy violations in real time, based on FSA standards or other risk indicators.
• Produce complete records quickly whenever the FSA, an auditor, or a court asks for them.

A purpose-built recordkeeping and compliance tool capable of monitoring and capturing LINE conversations, as well as those on other platforms, is the safest way to ensure full adherence to FSA standards and to avoid trouble further down the line.

Bringing LINE Into a Bank’s Global Governance Program

The LeapXpert Communications Platform provides exactly the functionality banks need to extend LINE to client-facing staff in Japan and other locations where it is used, without fear of violating local compliance legislation. 

Rather than treating Japan as a standalone compliance project, this approach brings LINE into the same governed environment already used for WhatsApp and WeChat, so a global compliance team can supervise and produce records across all markets from a single system.

Book a demo to learn more.

FAQ

Do Japanese regulators require banks to archive LINE messages?

Japanese regulators do not have a rule written specifically for LINE, but the underlying recordkeeping obligation still applies. The Financial Instruments and Exchange Act (FIEA) and the FSA’s supervisory expectations require firms to maintain records of business communications with clients, regardless of the channel used, and LINE conversations that relate to transactions, accounts, or advice fall under this requirement.

How long must financial firms retain LINE communication records?

Retention periods depend on the specific regulation and record type involved. Under Japan’s Act on Prevention of Transfer of Criminal Proceeds, transaction records must be prepared and preserved for seven years, and communications related to a transaction may also be subject to this requirement. Firms should confirm the applicable retention period for each record type with their compliance and legal teams, as other record categories may have different requirements.

Can a global bank supervise LINE alongside WhatsApp and email in one archive?

Yes, provided the bank uses a governance layer built to capture and supervise multiple messaging channels rather than treating each one separately. A unified system allows compliance teams to apply consistent retention, supervision, and production processes across LINE, WhatsApp, email, and other channels, rather than managing Japan as a standalone exception.

What happens if a bank can’t produce LINE records during an FSA inspection?

An inability to produce requested communication records during an FSA inspection is treated as a gap in the firm’s internal controls, and the FSA can require the firm to take corrective action to address it. Depending on the severity and pattern of the failure, this can extend to formal supervisory measures, reputational damage, and closer ongoing scrutiny of the firm’s compliance program.