Viva Republica Inc.

Profile narrative

Viva Republica Inc. operates Toss, South Korea's leading mobile financial platform that has evolved from a peer-to-peer money transfer service into a comprehensive financial super-app serving the domestic market. The platform integrates payments, banking, securities brokerage, insurance distribution, lending, and personal finance management tools within a single mobile interface, allowing users to conduct transfers, pay bills, invest in stocks and funds, purchase insurance products, and monitor credit scores without leaving the application. Toss Bank, launched in 2021 after securing a banking license, provides deposit and loan products, while Toss Securities and Toss Insurance operate as licensed subsidiaries offering brokerage and insurance services respectively. The company's core market remains South Korea, where it has become a central infrastructure layer for digital financial activity across consumer and small-business segments.

Founded in 2015 by Lee Seung-gun, Viva Republica has grown into one of South Korea's most valuable fintech companies, backed by prominent global investors including Sequoia Capital, Kleiner Perkins, and PayPal Ventures. The organization holds multiple regulatory licenses — banking, securities, and insurance — positioning it as a rare fully licensed digital financial conglomerate in the Korean market. Its distinguishing attribute lies in the consolidation of traditionally separate financial verticals into a single user experience, supported by proprietary risk-scoring technology and a design philosophy centered on reducing friction in everyday financial tasks. The company operates through a holding structure with specialized subsidiaries for each regulated business line, maintaining common technology and data infrastructure while adhering to sector-specific compliance requirements.

In June 2020, the platform experienced a security incident involving unauthorized transactions totaling approximately 9.4 million won across eight illicit purchases at three online merchants, executed using compromised personal information including names, contact details, birth dates, and PIN numbers. The breach raised significant concerns about the platform's security measures and prompted scrutiny from regulators and users regarding the protection of sensitive financial data within the rapidly expanding ecosystem. The incident underscored the operational risks inherent in managing a high-volume, multi-product financial platform and led to renewed focus on authentication controls and fraud detection capabilities across the organization's services.

Incidents

1 incident linked to this organisation.