Crypto regulation in Singapore is governed by a detailed, risk-based framework that has evolved significantly over recent years. The Monetary Authority of Singapore (MAS) is the primary regulator, overseeing digital payment token services, stablecoin issuance, and related activities under the Payment Services Act and the Financial Services and Markets Act. Businesses operating in Singapore';s digital asset space must understand licensing requirements, ongoing compliance obligations, and recent regulatory tightening before launching or expanding operations. This guide covers the current legal framework, licensing pathways, compliance requirements, recent updates, and the practical steps businesses need to take.
Singapore';s approach to digital assets rests on two principal statutes. The Payment Services Act (PSA), which came into force in early 2020 and was substantially amended thereafter, is the cornerstone of crypto regulation in Singapore. It regulates entities providing digital payment token (DPT) services, including buying, selling, exchanging, or facilitating the transfer of cryptocurrencies. The Financial Services and Markets Act (FSMA), enacted more recently, extends MAS';s powers to regulate digital token offerings and certain market conduct issues that fall outside the PSA';s scope.
The Securities and Futures Act (SFA) remains relevant where digital tokens qualify as capital markets products - that is, where they exhibit characteristics of securities, units in collective investment schemes, or derivatives. MAS applies a substance-over-form analysis to determine whether a token is a DPT, a security token, or a utility token. This classification drives which regulatory regime applies and what licences are required.
MAS has also issued a series of guidelines, notices, and circulars that sit alongside the primary legislation. These include the Guidelines on Licensing for Payment Service Providers, the Notice on Prevention of Money Laundering and Countering the Financing of Terrorism for DPT Service Providers (MAS Notice PSN02), and various consumer protection advisories. Together, these instruments create a layered compliance environment that foreign founders frequently underestimate.
The PSA establishes three licence classes: the Money-Changing Licence, the Standard Payment Institution (SPI) licence, and the Major Payment Institution (MPI) licence. For most crypto businesses, the relevant choice is between the SPI and MPI.
An SPI licence is available to businesses whose monthly transaction volumes remain below prescribed thresholds - currently set at SGD 3 million per payment service and SGD 6 million across all payment services. Businesses that exceed these thresholds, or that wish to operate without volume caps, must hold an MPI licence. In practice, most serious crypto exchanges, OTC desks, and custody providers seek the MPI licence from the outset to avoid operational constraints.
The application process involves several stages:
MAS typically takes between six and twelve months to process a complete application, though complex cases or those requiring additional information can take longer. A common mistake among foreign applicants is submitting incomplete documentation, which resets the review clock. Applicants must also maintain a registered office and at least one executive director ordinarily resident in Singapore.
Entities that were already providing DPT services when the PSA came into force were permitted to continue operating under an exemption while their applications were pending. MAS has progressively tightened this transitional arrangement, and the window for relying on exemption status has effectively closed for new entrants. Any business commencing DPT services today must hold a licence before operating.
MAS introduced a dedicated stablecoin regulatory framework that came into effect in recent regulatory cycles. This framework applies to single-currency stablecoins (SCS) pegged to the Singapore dollar or any G10 currency, issued in Singapore. It sits alongside the PSA and imposes additional obligations on issuers.
Under the stablecoin framework, issuers must maintain reserve assets that are of high quality and liquidity, held separately from the issuer';s own assets. The value of reserve assets must at all times be at least equal to the par value of outstanding stablecoins. Issuers must conduct monthly attestations by an independent auditor and publish reserve composition disclosures. Redemption at par must be available to holders within five business days of a request.
Stablecoin issuers that meet these requirements and are licensed under the PSA may apply to MAS for their stablecoins to be designated as "MAS-regulated stablecoins." This designation carries reputational and commercial significance, particularly for institutional counterparties. Issuers that do not meet the framework';s requirements but continue to market their products as stablecoins face enforcement risk under the PSA and the FSMA.
A non-obvious requirement is that the stablecoin framework applies to issuance in Singapore, not merely to distribution. A foreign issuer that mints tokens offshore but sells them to Singapore residents through a Singapore-based entity may still trigger local obligations. Founders structuring stablecoin projects should obtain legal advice before finalising the issuance jurisdiction.
If you are structuring a stablecoin or DPT business and need clarity on which obligations apply to your specific model, contact info@vlolawfirm.com. We can help structure the setup correctly the first time.
MAS Notice PSN02 sets out detailed anti-money laundering and countering the financing of terrorism (AML/CFT) obligations for DPT service providers. These obligations are substantive and closely mirror the Financial Action Task Force (FATF) standards, which Singapore has been an early adopter of.
Licensed DPT service providers must implement a risk-based customer due diligence (CDD) programme. This includes identity verification for all customers, enhanced due diligence for higher-risk customers and politically exposed persons, and ongoing transaction monitoring. The Travel Rule - requiring the transmission of originator and beneficiary information for virtual asset transfers above a prescribed threshold - applies to Singapore-licensed entities. MAS has issued specific guidance on Travel Rule compliance, and failure to implement compliant systems is a common enforcement trigger.
Providers must also maintain records of all transactions and CDD documentation for at least five years. Suspicious transaction reports must be filed with the Suspicious Transaction Reporting Office (STRO) promptly. MAS conducts regular inspections and thematic reviews of DPT service providers, and findings from these reviews have led to licence conditions being imposed on several operators.
On the consumer protection side, MAS has issued directives restricting DPT service providers from offering certain retail-facing incentives, including credit facilities for purchasing DPTs and payment-facilitated DPT purchases via credit cards. Providers must also display prescribed risk warnings prominently on their platforms. These restrictions reflect MAS';s consistent position that retail participation in DPT markets carries significant risk and should not be actively encouraged.
In practice, founders should consider that consumer protection compliance is not merely a box-ticking exercise. MAS has shown willingness to impose conditions, suspend licences, or revoke approvals where providers fall short. The reputational consequences of enforcement action in Singapore';s relatively small financial community are significant.
Singapore';s regulatory framework for digital assets has undergone notable tightening in recent periods. MAS has moved from a posture of cautious openness to one of structured oversight, driven by global developments in the crypto market and international standard-setting by bodies such as FATF and the Financial Stability Board (FSB).
Several updates are particularly relevant for businesses currently operating or planning to enter the Singapore market:
The proposed custody regime is expected to impose capital requirements, segregation of client assets, and operational resilience standards on entities holding digital assets on behalf of clients. Businesses currently providing custody as an ancillary service to their licensed DPT activities should monitor MAS consultations closely and prepare for the possibility that a separate licence will be required.
It is worth noting that Singapore has observed developments under the European Union';s Markets in Crypto-Assets Regulation (MiCA) with interest. While MiCA does not apply directly in Singapore, MAS has acknowledged the value of regulatory convergence for cross-border business. Singapore-based firms seeking to serve EU clients must comply with MiCA independently, and dual-jurisdiction structuring is increasingly common among larger operators.
A common mistake among internationally active crypto businesses is assuming that a Singapore licence provides a passport to other markets. It does not. Each jurisdiction requires separate analysis, and Singapore';s framework, while respected, does not substitute for local authorisation elsewhere.
Scenario one: a foreign exchange launching in Singapore. A crypto exchange incorporated in the British Virgin Islands wishes to serve Singapore-based retail and institutional customers. It must establish a Singapore-incorporated entity, apply for an MPI licence under the PSA, and implement full AML/CFT infrastructure before onboarding any Singapore customers. The entity must have at least one locally resident executive director and a dedicated compliance function. The application process will take the better part of a year, and the exchange should budget for professional fees in the mid-to-high five figures at minimum, plus ongoing compliance costs.
Scenario two: a stablecoin issuer targeting institutional clients. A fintech company wishes to issue a Singapore dollar-pegged stablecoin for use in institutional settlement. It must comply with the MAS stablecoin framework, maintain qualifying reserve assets, conduct monthly attestations, and apply for MAS-regulated stablecoin designation if it wishes to market the product as such. The issuer will also need an MPI licence covering the relevant DPT services. Structuring the reserve custody arrangement and the redemption mechanism requires careful legal and operational planning, and MAS engagement at the pre-application stage is strongly advisable.
Many underestimate the operational complexity of maintaining ongoing compliance once a licence is granted. MAS expects licensees to have living compliance programmes - not static policies written at the time of application. Annual reviews, staff training records, and documented responses to regulatory guidance updates are all part of what MAS inspectors look for.
For assistance with licence applications, compliance programme design, or structuring digital asset businesses in Singapore, contact info@vlolawfirm.com. We can assist with documents and filings.
What is the main risk of operating a crypto business in Singapore without a licence?
Operating a DPT service without a valid PSA licence is a criminal offence in Singapore. MAS has the power to issue prohibition orders, impose financial penalties, and refer matters for prosecution. Directors and key officers of unlicensed entities can face personal liability, including fines and imprisonment. Beyond the legal consequences, operating without a licence makes it effectively impossible to maintain banking relationships in Singapore, as local banks conduct their own due diligence on crypto counterparties. The practical and reputational damage from enforcement action is severe and difficult to reverse.
How long does it take and what does it cost to obtain a Singapore DPT licence?
A complete MPI licence application typically takes between six and twelve months from submission to approval, assuming MAS does not request significant additional information. Incomplete applications or those involving complex business models can take longer. Professional fees for preparing and submitting a full application - covering legal, compliance, and technology risk documentation - generally start from the low tens of thousands of Singapore dollars and can reach significantly higher for complex structures. Ongoing compliance costs, including the compliance officer, AML/CFT systems, and annual audits, add materially to the total cost of holding a licence. Businesses should model these costs carefully before committing to the Singapore licensing route.
Should a crypto business choose Singapore over other Asian jurisdictions?
Singapore offers a well-developed legal system, a respected regulatory framework, and strong institutional infrastructure, making it a credible base for regional operations. However, it is not the only option. Hong Kong has developed its own virtual asset service provider (VASP) licensing regime, and other jurisdictions in the region offer varying degrees of regulatory clarity and cost efficiency. The right choice depends on the business model, target markets, investor base, and operational requirements. Singapore is generally preferred for businesses targeting institutional clients, seeking credibility with global counterparties, or planning to raise capital from sophisticated investors. Businesses primarily targeting retail markets in specific Asian countries may find that a local presence in those markets is more important than a Singapore licence.
Singapore';s crypto regulation framework is comprehensive, actively enforced, and continuing to evolve. Businesses that engage seriously with the PSA licensing process, build robust AML/CFT programmes, and monitor MAS guidance will find Singapore a workable and credible base for digital asset operations. Those that underestimate the compliance burden or attempt to rely on outdated transitional arrangements face significant legal and commercial risk.
VLO Law Firms advises international clients on crypto regulation and digital asset business structuring in Singapore. We can assist with MAS licence applications, AML/CFT compliance programme design, stablecoin framework analysis, and ongoing regulatory monitoring. To request a consultation, contact: info@vlolawfirm.com