Do I Need a MAS Crypto Licence in Singapore? Quick Checklist for DPT / PSA Obligations

Singapore’s Monetary Authority of Singapore (MAS) has built one of the most comprehensive regulatory frameworks for digital assets in Asia-Pacific. If you operate or plan to operate a crypto business that touches Singapore customers, the question is no longer whether regulation applies, but which obligations apply to you. Whether you are launching an exchange, running a custody platform, or providing over-the-counter (OTC) brokerage, understanding whether you need a MAS crypto licence Singapore is the essential first step before committing capital or onboarding users.

This page provides an immediate eligibility test, a decision matrix mapping common business models to licensing triggers, a detailed walkthrough of the application process, and a practical comparison of Standard Payment Institution (SPI) and Major Payment Institution (MPI) licence categories under the Payment Services Act 2019 (PSA). It also addresses recent regulatory expansions including the Financial Services and Markets (Digital Token Service Providers) Regulations 2025 that have broadened the perimeter and raised application expectations significantly.

Quick Eligibility Checklist: Does Your Crypto Business Need a Digital Payment Token Licence?

Use this rapid yes/no flow to determine whether your activities likely fall within the regulated DPT perimeter under the PSA. The substance of what you do not your corporate label or jurisdiction of incorporation is what triggers a licence requirement.

• Crypto exchange or trading platform: YES facilitating buying, selling, or exchanging DPTs for customers is a regulated DPT service.
• Custodial wallet or custody-as-a-service: YES holding digital payment tokens on behalf of others triggers a licence.
• OTC desk or brokerage: YES dealing in DPTs or arranging transactions for customers is a regulated activity.
• Token transfer or remittance service: YES transmitting DPTs from one person to another falls within the DPT service definition.
• Staking or rewards platform (custodial): YES (frequently contested) if you take custody of customer tokens to stake or generate yield, MAS generally treats this as a regulated service.
• Token issuance or fundraising: DEPENDS primary issuance may trigger securities or capital-markets regulation rather than (or in addition to) PSA licensing; a detailed legal assessment is required.
• Non-custodial wallet or protocol developer: GENERALLY NO if you never take custody of user tokens and do not onboard Singapore customers through your own platform, the PSA DPT perimeter typically does not apply. However, any customer-facing element (on-ramp, interface, user management) can change the analysis.
• Software or infrastructure provider (no customer-facing token handling): NO pure technology supply without regulated payment-service activity is outside the PSA perimeter.

The definitions of regulated digital payment token services in the PSA are broad and activity-based. If any of your product flows involve the acceptance, exchange, custody, or transmission of DPTs for or on behalf of customers in Singapore, you should proceed on the assumption that a licence either an SPI or MPI is required.

Quick Decision Matrix Which Activities Trigger a MAS Crypto Licence in Singapore?

The PSA lists specific service categories that constitute a “digital payment token service.” The table below maps common crypto business activities to the relevant licence trigger. Remember: MAS assesses the substance of the activity and the actual fund flows, not how the business describes itself in marketing materials.

Where an activity sits at the boundary for example, staking platforms that hold customer tokens but characterise the service as “software” MAS has shown a willingness to look through the arrangement and assess economic substance. Legal advice tailored to the specific fund flow is strongly recommended before concluding that no licence is needed.

Process How to Obtain a MAS DPT Licence: Step-by-Step

Follow these practical steps from scoping to operational launch. Each step includes common pitfalls and market-typical time estimates.

Step 1: Pre-Qualification and Scoping (PROC Engagement)

Before filing a formal application, DPT-active applicants should engage MAS through the Pre-Registration of Intent to Apply process (PROC), which is effectively required in practice for complex DPT and MPI filings. Present your business model, detailed fund-flow diagrams, proposed AML/CFT approach, and safeguarding plan. MAS uses this stage to provide early feedback on licensing scope and to identify obvious gaps.

Common mistake: Submitting a PROC package with an incomplete or stylised fund-flow diagram. MAS expects granular, transaction-level flow maps that show how customer tokens move from deposit through to settlement.

Time to resolve: Market-typical PROC engagement runs 4–8 weeks, depending on the complexity of the business model and MAS’s queue.

Step 2: Entity Setup and Local Substance

Incorporate a Singapore company through ACRA (Accounting and Corporate Regulatory Authority). The PSA requires a licensee to maintain a permanent place of business in Singapore and to appoint at least one resident director. For DPT applicants, MAS also expects senior management with relevant compliance and operational experience to be based locally.

Common mistake: Appointing a nominee or passive resident director without genuine senior management presence. MAS reviews the substance of local control arrangements and will challenge applications that appear to lack genuine Singapore-based decision-making.

Time to resolve: ACRA incorporation typically takes 1–3 business days. Recruiting and onboarding qualified local management may take 4–12 weeks.

Step 3: Governance, AML/CFT and Consumer Protection Policies

Develop comprehensive internal policies covering anti-money laundering and countering the financing of terrorism (AML/CFT), sanctions screening, know-your-customer (KYC) procedures, travel-rule readiness, conflicts of interest, and consumer protection measures per MAS guidelines (PS-G03). These policies must be operational not aspirational before the application is submitted.

Common mistake: Adopting generic, off-the-shelf AML/CFT templates that do not address DPT-specific risks (e.g., blockchain analytics, unhosted-wallet screening, mixer/tumbler policies). MAS expects DPT applicants to demonstrate crypto-native compliance capability.

Time to resolve: Policy development, legal review, and board adoption typically require 6–12 weeks of dedicated effort.

Step 4: Technical Readiness

Ensure your technology stack meets MAS’s expectations for technology risk management (TRM), cyber hygiene, custody-key segregation, and third-party audits. MAS has issued guidance on technology and cyber standards that apply to all payment-service licensees, with particular emphasis on custodial DPT providers.

Common mistake: Failing to segregate customer-custody keys from corporate treasury wallets at both the infrastructure and policy level. MAS expects both logical and operational separation, supported by independent testing.

Time to resolve: Infrastructure build-out and penetration testing typically take 8–16 weeks, depending on whether a platform is already operational.

Step 5: Prepare the Application Bundle

Assemble the full application package, including: prescribed MAS forms, a legal opinion (from Singapore counsel experienced in PSA matters) confirming licence scope and fund-flow analysis, audited financials or investor-funding evidence, fit-and-proper declarations for all directors and key officers, and critically for DPT applicants an independent assessment by an external auditor of the applicant’s AML/CFT and operational controls.

Common mistake: Submitting the application without the external auditor’s independent assessment. This requirement, which has been reinforced through recent MAS guideline updates, is now a practical gating item incomplete bundles are returned or deprioritised.

Time to resolve: Coordinating the external audit, legal opinion, and supporting documents typically takes 8–14 weeks.

Step 6: Submission and MAS Review

Submit the bundle through MAS’s prescribed channels. Expect an iterative review process: MAS will issue questions (often multiple rounds), may request management interviews, and will assess the completeness and credibility of your governance arrangements. MAS does not publish a guaranteed service-level agreement (SLA) for DPT applications; market practice suggests that well-prepared applications are reviewed over several months.

Common mistake: Slow or incomplete responses to MAS queries this is the single most common cause of extended timelines. Designate a senior compliance officer to manage the MAS dialogue full-time during the review period.

Step 7: In-Principle Approval (IPA) and Conditions Clearance

If MAS is satisfied, it typically issues an IPA with conditions that must be met before a final licence is granted. Common IPA conditions include: posting the required security deposit, evidencing fully funded base capital, completing AML/CFT acceptance testing, securing a compliant bank account, and establishing safeguarding arrangements for customer assets in accordance with the PSA.

Time to resolve: IPA conditions clearance varies widely from 4 weeks for straightforward items to 6+ months where banking relationships or complex safeguarding structures must be established.

Step 8: Post-Licence Onboarding and Ongoing Compliance

Once the final licence is granted, the licensee must comply with ongoing obligations: periodic regulatory reporting, annual audits, consumer protection disclosures, transaction monitoring, and prompt notification of material changes to the business model. MAS conducts supervisory reviews and may impose additional conditions as the regulatory framework evolves.

Common mistake: Treating the licence grant as the finish line. Post-licence compliance is intensive budget for a permanent compliance function proportionate to the scale of your DPT operations.

SPI vs MPI Which MAS DPT Licence Suits Your Business Model?

The PSA distinguishes between Standard Payment Institutions (SPIs) and Major Payment Institutions (MPIs). The classification depends primarily on the volume and value of payment transactions processed, and the scope of regulated services provided. For DPT businesses, the distinction determines the level of regulatory capital, safeguarding requirements, and supervisory intensity.

Industry observers note that most DPT businesses offering exchange, custody, and transfer services at commercial scale will need an MPI licence. SPIs are more suitable for early-stage or limited-scope operators that remain below prescribed transaction thresholds. MAS reserves the right to impose MPI-level requirements on SPI applicants where the risk profile warrants it particularly for DPT service providers handling significant customer assets. Applicants should confirm their classification against current statutory thresholds in the PSA and MAS guidance.

Key Requirements and Eligibility Checklist for a MAS Crypto Licence Singapore

Capital and Security Deposit

The PSA prescribes minimum base capital requirements that differ between SPIs and MPIs. MAS may also require a security deposit commensurate with the scale and risk profile of the applicant’s DPT operations. Applicants must evidence that capital is fully paid up not merely committed before the final licence is granted. Statutory references to capital and safeguarding obligations are set out in the PSA.

Local Presence and Resident Director / Senior Manager Approvals

Every licensee must maintain a permanent place of business in Singapore. The PSA requires at least one executive director who is ordinarily resident in Singapore, and MAS expects senior management responsible for compliance, risk, and operations to be based locally. All directors and key officers are subject to fit-and-proper assessments, including background checks and professional-experience reviews.

AML/CFT and Auditor-Assessed Controls

DPT applicants must implement AML/CFT controls aligned with MAS Notice PSN02 and demonstrate these through an independent assessment by an external auditor before the application is submitted. The auditor assessment covers KYC procedures, transaction monitoring, sanctions screening, suspicious-transaction reporting, and record-keeping. This requirement has been reinforced significantly through recent MAS guideline updates and is now a practical gating item for all DPT applications.

Filing, Form and Legal-Opinion Expectations

MAS prescribes specific application forms (updated through the 2025 Regulations). Applicants must also submit a legal opinion from Singapore-qualified counsel addressing the fund-flow analysis, licence-scope determination, and any cross-border considerations. The legal opinion must be prepared by counsel with demonstrable PSA experience MAS has been known to query opinions that appear boilerplate or insufficiently tailored to the applicant’s actual business model.

Eligibility Checklist Summary

• Singapore-incorporated entity: ACRA registration with appropriate constitution.
• Resident director and local senior management: Fit-and-proper tested, ordinarily resident in Singapore.
• Permanent place of business: Physical office in Singapore (not a virtual address).
• Base capital: Fully paid up, meeting SPI or MPI thresholds.
• Security deposit: Posted as required by MAS.
• AML/CFT framework: Operational policies, procedures, and controls; externally audited.
• Legal opinion: From qualified Singapore counsel covering fund flows and licence scope.
• Consumer protection framework: Disclosure, complaints handling, and risk-warning procedures.
• Technology and custody arrangements: TRM-compliant infrastructure with key segregation.
• Safeguarding arrangements: Trust, segregated-account, or guarantee structure for customer assets.

Recent Regulatory Developments: Why Timing Matters

The MAS crypto licence Singapore landscape has shifted materially since 2024. Key developments include:

• April 2024 Expanded DPT scope: MAS announced an expansion of regulated payment-service categories and introduced user-protection requirements specifically for DPT service providers. Activities that previously sat outside the perimeter including certain custody and arrangement services were brought within scope.
• September 2024 Updated consumer-protection guidelines (PS-G03): MAS revised its guidelines on consumer safeguards, requiring enhanced disclosures, risk warnings, and complaints-handling procedures from DPT licensees.
• 30 June 2025 Digital Token Service Providers Regulations 2025: New subordinate legislation prescribing updated forms, filing procedures, and regulatory framing for DPT service providers came into force, raising the documentation bar further.

The practical effect of these changes is significant. Firms that previously relied on transitional arrangements, informal exemptions, or narrower interpretations of the DPT perimeter should urgently reassess their position. Industry observers expect MAS to take enforcement action against firms that continue to operate without a licence or outside transitional provisions.

Practical Next Steps: Document Checklist, Estimated Fees and Key Advisers

Document Checklist for a DPT Licence Application

• Corporate documents: ACRA registration, constitution, board resolutions authorising the application.
• Shareholder structure: Ultimate beneficial ownership chart with supporting identification documents.
• Audited financials or funding proof: Recent audited accounts or investor commitment letters evidencing available capital.
• Business plan: Detailed description of DPT services, target market, revenue model, and three-year projections.
• AML/CFT manuals: Full policy and procedures documentation, including sanctions list, PEP screening, and STR protocols.
• KYC flow documentation: End-to-end customer onboarding process with identity-verification technology details.
• Technology architecture: System diagrams, custody-key management, disaster-recovery and business-continuity plans.
• Custody and safeguarding agreements: Trust deeds, segregated-account arrangements, or guarantee documentation.
• Insurance evidence: Professional indemnity, cyber, and fidelity coverage where applicable.
• Legal opinion: Singapore-qualified counsel opinion on fund flows, licence scope, and regulatory classification.
• External auditor’s independent assessment: AML/CFT controls review by an approved external auditor.

Estimated Fees (Market Guidance)

MAS charges a nominal application filing fee. However, the total cost of preparing and obtaining a DPT licence is driven by professional advisory, legal, audit, and local-substance costs. Market estimates range widely:

• Professional advisory and compliance consulting: S$30,000–S$150,000 depending on business complexity.
• External auditor independent assessment: S$20,000–S$80,000 depending on scope of DPT activities.
• Legal opinion and ongoing counsel: S$15,000–S$60,000 for the initial opinion; ongoing retainers vary.
• Local substance costs: Office lease, resident director/management recruitment, and ACRA filings variable.
• Total estimated range: S$50,000–S$500,000+ depending on model scope and licence type (SPI vs MPI).

These are market estimates only. Actual costs depend on the complexity of the applicant’s business model, the number of DPT services offered, and the state of readiness at the time of engagement.

Key Advisory Roles

• Local corporate services provider (critical): ACRA incorporation, registered office, company secretary.
• Singapore counsel experienced in PSA legal opinions (critical): Fund-flow analysis, licence-scope determination, regulatory correspondence.
• Experienced AML/CFT external auditor (critical): Independent assessment required by MAS for all DPT applicants.
• Bank-facing consultant for safeguarding deposits (recommended): Navigating Singapore bank account opening and structuring compliant safeguarding arrangements.
• Tax adviser for GST and DPT tax treatment (recommended): Ensuring correct invoicing and GST treatment from launch.

Sources

• Payment Services Act 2019 Singapore Statutes Online
• MAS Media Release: MAS Expands Scope of Regulated Payment Services (April 2024)
• MAS Guidelines on Provision of Digital Payment Token Services / Consumer Protection (PS-G02 / PS-G03)
• Financial Services and Markets (Digital Token Service Providers) Regulations 2025 Singapore Statutes Online
• Inland Revenue Authority of Singapore (IRAS) Digital Payment Tokens (GST)