Singapore MAS · Practitioner guide

Singapore MAS Crypto Licensing: 2026 Practitioner Guide

Singapore reads serious from a distance. Up close, MAS authorisation under the Payment Services Act is one of the most selective crypto licences anywhere. The headline approval count is small for a reason.

Singapore MAS crypto licensing — Payment Services Act practitioner guide

Singapore crypto licensing is the regulatory regime under the Payment Services Act 2019 (PSA) — supervised by the Monetary Authority of Singapore (MAS) — that licenses firms providing Digital Payment Token services such as dealing in DPTs or operating a DPT exchange, with two main licence categories, Standard Payment Institution and Major Payment Institution, distinguished by transaction-volume thresholds.

Quick facts

ParameterValue
RegulatorMonetary Authority of Singapore (MAS) — Singapore's central bank and integrated financial supervisor
Legal basisPayment Services Act 2019 (PSA), in force from 28 January 2020
Activity regulatedDigital Payment Token (DPT) services — dealing in DPTs and providing DPT exchange
Licence categoriesStandard Payment Institution (SPI) and Major Payment Institution (MPI) — distinguished by transaction-volume thresholds
ProfileDeliberate, narrow, and notoriously selective — MAS has publicly favoured quality over volume in approvals
SubstanceReal Singapore presence expected — directors, compliance staff, operations actually based in Singapore
EU passportNone — a Singapore MAS licence does not reach the EU market; EU customers require MiCA

A serious regulator, not a fast door

Singapore appears on almost every shortlist for the same reasons it appears on so many other financial-services shortlists. It is stable, English-language, well-governed, and the Monetary Authority of Singapore (MAS) has a deep, prudential-supervision tradition. The regime is real, in both senses — it is taken seriously by the market, and it is enforced seriously by the regulator.

It is also narrow and selective. A founder who reads Singapore as a fast, certain crypto base has read the brochure rather than the regulator.

What the PSA actually covers

Crypto licensing in Singapore sits inside the Payment Services Act 2019 (PSA), in force from 28 January 2020. The PSA regulates a broader payment-services landscape, with crypto licensing specifically attaching to Digital Payment Token (DPT) services:

  • Dealing in DPTs — buying and selling DPTs against fiat or other DPTs
  • Providing a DPT exchange — operating a platform that matches DPT buyers and sellers

If a firm provides either of those services in or from Singapore, it needs a PSA licence — or it needs not to be doing the activity. MAS does not run a “register and notify” track for these services.

Two licence classes — SPI and MPI

The PSA splits payment-institution licensing into two main classes, distinguished by transaction-volume thresholds:

  • Standard Payment Institution (SPI) — for firms below the relevant transaction-volume thresholds. Lighter requirements, but still substantial.
  • Major Payment Institution (MPI) — for firms above the thresholds. Heavier requirements across capital, controls, and governance.

The class choice is not a free pick. A firm whose projected volumes will breach the SPI thresholds within a foreseeable horizon should scope an MPI from the start — discovering the threshold breach in operation, without the higher authorisation in hand, is a supervisory problem of its own.

The MAS approval profile

This is the part founders most often under-research. MAS is selective. The publicly observable pattern over recent years has been a relatively small number of approvals against a larger applicant pool, with a meaningful share of applications withdrawn during the assessment — a softer outcome than a formal refusal, but in practice the same end state.

MAS is not running a counter. It is running a regulator. The bar lands hardest on:

  • AML/CFT controls — risk assessment, transaction monitoring, sanctions screening
  • Fit-and-proper — directors and key staff, with substance behind the names
  • Local presence — real operations and management based in Singapore
  • Risk management and cyber hygiene — MAS Notices and Guidelines set explicit expectations

A clean file matters more here than in most jurisdictions.

What MAS expects on substance

A Singapore licence is not a nameplate licence. MAS expects directors and compliance leadership to be actually based in Singapore, decision-making to happen in Singapore, and operations — including AML and risk functions — to run from Singapore.

A structure where the licensee is a Singapore entity but the team and the decisions sit elsewhere is exactly the structure that fails the substance review. This is true of every serious jurisdiction — Singapore enforces it more visibly than most.

The EU caveat

A Singapore MAS licence authorises activity in Singapore. It is not an EU authorisation, and does not passport into EU member states. Singapore’s reputation does not substitute for the passport — for any of the EU market, a MiCA CASP authorisation is required regardless.

So:

  • A firm whose market is the EU needs a MiCA CASP — see the crypto licensing pillar guide.
  • A firm building for Asia-Pacific, Singapore-headquartered, or wanting Singapore’s reputational weight is in MAS’s territory.
  • A firm targeting both is a two-licence project.

Working with counsel on a Singapore setup

The diagnostic for counsel: ask them to scope SPI versus MPI honestly against projected volumes, to map out the substance build (resident management, real local operations), and to read the MAS approval profile the way it is — selective and deliberate, not a fast path. Counsel that markets Singapore on prestige without engaging the approval-rate reality has skipped the part of the analysis that decides whether the project gets to a licence at all. The firms in our index with Asia-Pacific experience are listed below.

Pitfalls and nuances

1 Treating Singapore as a fast-track jurisdiction

Singapore is widely picked because it reads serious and reputational. It is — and that is the problem when read as a speed play. MAS reviews are deliberate, evidence-heavy, and selective; a noticeable share of applications are withdrawn after the assessment exposes weak controls, ownership unclarity, or insufficient substance. A firm scoping Singapore for pace has misread the regulator.

2 Picking the wrong PSA licence class

The Standard Payment Institution licence carries lower thresholds and lighter requirements; the Major Payment Institution licence applies above the transaction-volume thresholds and carries more. Scoping the project around an SPI licence and then breaching the thresholds without an MPI authorisation is exactly the kind of post-grant supervisory problem that ends an MAS licence.

3 Underestimating substance

MAS expects real Singapore presence — directors, compliance officers, operations actually based there. A nameplate office and a non-resident management team do not satisfy that bar. The substance gap is the part of the file that stalls reviews, not the application form itself.

4 Assuming MAS authorisation reaches the EU

A Singapore licence authorises activity in Singapore. It does not passport into the EU. A firm serving EU customers needs a MiCA CASP authorisation in an EU member state, regardless of how strong the MAS file is. The strength of Singapore's reputation does not substitute for the passport a different market needs.

Frequently asked questions

Who regulates crypto in Singapore?

The Monetary Authority of Singapore (MAS) — the country's central bank and integrated financial supervisor — regulates crypto firms providing Digital Payment Token services under the Payment Services Act 2019.

What licence does a crypto exchange need in Singapore?

A Digital Payment Token (DPT) service licence under the Payment Services Act — most commonly as a Standard Payment Institution or, above the threshold, a Major Payment Institution.

Is it hard to get a crypto licence in Singapore?

Yes. MAS is deliberate and selective; a large share of applications are withdrawn or refused. The bar on AML controls, fit-and-proper, and substance is high relative to most jurisdictions.

Does a Singapore crypto licence give EU market access?

No. Singapore is not an EU member state, so an MAS licence does not passport into the EU. A firm with EU customers needs a MiCA CASP authorisation in an EU member state.

Get matched

Working through a crypto-licensing decision?

Get an editorial shortlist of firms matched to your business — customer market, model, jurisdiction, and stage. Free, and not influenced by sponsorship.

Get a firm shortlist →

Sources cited

  1. Monetary Authority of Singapore — Payment Services Act — regulator
  2. MAS — Payments regulation — regulator
  3. Regulation (EU) 2023/1114 (MiCA) — regulation
  4. ESMA — Markets in Crypto-Assets Regulation (MiCA) — regulator