Singapore crypto licence 2026 — MAS Payment Services Act licensing

Where Singapore fits in crypto licensing

Singapore licenses crypto businesses that serve Singapore customers through the Monetary Authority of Singapore under the Payment Services Act 2019. Operators choose it for an English-language financial centre with established banks, and they accept a detailed DPT application review in return.

The licence is about business with Singapore customers. A Singapore entity that serves only customers abroad falls under a separate FSMA regime, covered below, and in practice cannot use Singapore as a base.

Singapore crypto licensing counsel handle the MAS application, fit-and-proper preparation, AML programme design aligned with MAS Notice PSN02, information requests, and ongoing supervisory dialogue.

The MAS Payment Services Act framework

The Payment Services Act 2019 (PSA) is the governing legislation for Singapore crypto licensing. Crypto-asset activity is covered as Digital Payment Token (DPT) service — buying or selling DPTs, facilitating their exchange, transferring them, and providing DPT custodial wallet services.

MAS issues two main licence categories. The Major Payment Institution (MPI) licence covers full-scope DPT service and is the standard credential for crypto operators. The Standard Payment Institution (SPI) licence covers activity below specified transaction thresholds (SGD 3 million a month for one payment service, SGD 6 million for two or more) and is appropriate for smaller operators.

Where tokens are capital markets products, such as tokenised securities, the Securities and Futures Act applies instead of the PSA, with its own licences and approvals. Some operators hold licences under both Acts for combined DPT and security-token activity.

An MPI needs base capital of at least SGD 250,000 (SGD 100,000 for an SPI) and a security deposit with MAS of SGD 100,000, or SGD 200,000 where average monthly transactions exceed SGD 6 million per payment service. MAS also suggests base capital should cover 6 to 12 months of operating expenses. The application fee is SGD 1,500 for an MPI and SGD 1,000 for an SPI, or the sum of the per-service amounts if higher, and annual licence fees follow (SGD 10,000 for an MPI in MAS's worked examples). Practitioners estimate first-year operations at SGD 750,000-1,800,000, covering senior hires, substance, and compliance infrastructure.

Singapore's offshore-only rule: FSMA Part 9

Part 9 of the Financial Services and Markets Act 2022 took effect on 30 June 2025. It requires a licence for digital token service providers that serve only customers outside Singapore. MAS said on 6 June 2025 that it has set the bar high and will generally not issue such a licence, and that existing providers serving only overseas customers would have to cease that activity.

Firms that serve customers in Singapore were already regulated, and MAS said there is no change to what licensed providers can do: a PSA licensee may also serve customers outside Singapore. The practical effect is that a Singapore entity without a Singapore customer base is no longer a workable booking vehicle for crypto services.

MAS application process and timeline

MAS publishes no processing time. Practitioners typically quote 6-12 months for a clean file.

Counsel usually arrange a scoping meeting with MAS before filing, covering the business model, anticipated activity scope, and senior management, so that concerns surface before the formal application.

Formal application filing includes the application form, supporting business plan, financial projections, AML programme documentation, customer due-diligence procedures, business continuity plan, cybersecurity framework, senior management CVs and supporting fitness-and-properness documentation, and audited entity financials.

Substantive review follows filing. MAS conducts document review, multiple rounds of information requests, senior management interviews, and supervisor dialogue. The dialogue typically focuses on AML framework adequacy, senior management substance, business model coherence, and ongoing supervisor relationship build. MAS may recommend withdrawal of an application it assesses as significantly deficient.

Approval comes first as an in-principle approval (IPA) with conditions. For DPT applicants these include an independent external auditor's assessment of technology and cybersecurity controls (Guidelines PS-G01, paragraph 4.1.14). The licence follows once the conditions are met, and licensed operations start after that.

Singapore substance and senior management

MAS's substance rules are specific. At least one executive director must be a Singapore citizen or permanent resident, or an Employment Pass holder alongside another director who is a citizen or PR, and executive directors are expected to be resident in Singapore; nominee directors do not count. MAS approves the CEO and directors, and expects DPT firms to have an in-house local compliance officer at management level. Practitioners typically budget for a Singapore compliance team of 3-7 people, depending on operational scope.

The fitness-and-properness assessment is intensive. MAS reviews senior management CVs against relevant industry experience, regulatory history across all jurisdictions, criminal record, civil litigation history, and personal integrity dimension. Beneficial owners face equivalent review. Adverse findings on any senior person can support refusal even if the firm-level framework is adequate.

Singapore operational substance includes a Singapore registered office, Singapore employment for headcount, Singapore banking arrangements, Singapore customer support capability where Singapore customers are in scope, and Singapore-located key systems infrastructure.

Practitioner estimates put the substance investment at SGD 500k-1.2m in the first year. Components: senior compliance hires (SGD 250k-500k loaded cost for CEO and head of compliance), broader compliance team build (SGD 150k-300k), Singapore office and operational infrastructure (SGD 50k-150k), MAS application legal fees (SGD 100k-250k), ongoing legal and audit work.

MAS AML framework and Notice PSN02

MAS Notice PSN02 sets the detailed AML obligations for DPT service providers. The notice is the operational compliance framework rather than a high-level statement of principles — granular requirements on customer due diligence, suspicious transaction reporting, transaction monitoring, sanctions screening, record retention, and ongoing customer monitoring.

Customer due-diligence requirements under PSN02 include customer identification at onboarding, beneficial ownership verification for corporate customers, enhanced due diligence for high-risk customers and politically-exposed persons, source-of-funds and source-of-wealth verification for relevant categories, and ongoing customer due-diligence refresh.

Suspicious transaction reporting framework includes Singapore Financial Intelligence Unit (FIU) reporting via the Suspicious Transaction Report (STR) framework, operational STR officer designation, documented decision-making framework for STR filing decisions, and audit trail for all STR activity.

Transaction monitoring framework includes real-time monitoring rules, blockchain analytics integration where appropriate, escalation framework for anomalous activity, and documented review and disposition workflow. MAS supervises the operational adequacy of transaction monitoring through routine supervisory inspection.

How Singapore compares to alternative Asia-Pacific jurisdictions

Singapore versus Hong Kong. Hong Kong SFC operates the Virtual Asset Service Provider (VASP) licensing framework under amended AMLO. The two regimes are broadly comparable in supervisor rigour and operational expectations. Hong Kong has stronger China-mainland positioning; Singapore has stronger broader Asia-Pacific positioning. Choose by market focus rather than procedural advantage.

Singapore versus Dubai VARA. Dubai's VARA runs a newer, separate virtual-asset regime in the Middle East. The choice turns on where the customers are: an MAS licence is for business with Singapore customers, and since June 2025 Singapore offers no practical route for an offshore-only book.

Singapore versus Japan FSA. Japan operates a crypto exchange licensing framework with a large domestic market. Japanese-language operational requirements limit non-Japanese operators. Singapore is the broader Asia-Pacific play; Japan is the right answer specifically for Japan-market operations.

Singapore versus EU MiCA. Different products entirely. Singapore MPI licence is Singapore national scope. A MiCA authorisation passports across the EU and EEA. Operators servicing both markets need parallel licensing. The choice is not Singapore-vs-EU but Singapore-and-EU for genuinely global operators.