Structure your Singapore crypto business under the correct MAS regime: PSA for DPT services, FSMA Part 9 for DTSP activity, and SFA where tokens qualify as capital markets products.
Prepared by RUE editorial team · Reviewed by Milana · Updated 29 October 2026
Request Licensing Gap AssessmentSingapore regulates crypto on an activity basis, not through a single generic “VASP license”. In 2026, the key question is whether your model falls under the Payment Services Act 2019, Financial Services and Markets Act 2022 Part 9, or the Securities and Futures Act 2001.
"As your point of contact, I help coordinate the licensing process end-to-end, keep communication clear, and move your application forward without unnecessary delays."
Regulated United Europe (RUE) supports founders and groups entering Singapore through scope analysis, token classification, company setup coordination, MAS application drafting, AML/CFT framework design, governance mapping, and post-licensing readiness.
We do not treat “crypto license in Singapore” as a one-size-fits-all product. Our work starts with legal qualification of the business model under PSA, FSMA Part 9, and SFA, then moves to documentation, regulator-facing responses, banking strategy, and operational controls.
The Monetary Authority of Singapore combines central bank and integrated financial supervision functions, which reduces regulatory fragmentation.
Licensing depends on what the company actually does: DPT services, overseas digital token services, e-money, or capital markets activity.
A well-structured MAS-facing compliance framework materially improves conversations with banks, payment providers, and institutional clients.
Singapore offers a developed ecosystem for AML tooling, audit, cybersecurity, tax, and regulated corporate administration.
A Singapore crypto license is not a single universal permit. The applicant must first determine whether it is applying as a payment institution under the Payment Services Act 2019 (PSA), whether it is caught by the digital token service provider regime under Part 9 of the Financial Services and Markets Act 2022 (FSMA), or whether its token or platform activity falls under the Securities and Futures Act 2001 (SFA).
MAS assesses applicants on substance, governance, financial soundness, AML/CFT maturity, and operational control. A clean corporate shell with generic policies is not enough. The strongest applications show internal consistency across the website, customer journey, token classification, flow of funds, custody design, outsourcing model, and board-approved compliance manuals.
The first requirement is legal scoping. The company must identify which regime applies:
This classification drives the entire application strategy, document set, capital planning, and post-licensing obligations. Misclassification is one of the most common causes of delay.
For payment institution applicants under the PSA, MAS expects the company to meet minimum financial thresholds. As a practical baseline used in licensing analysis:
For MPI holders, a security deposit of SGD 100,000 or SGD 200,000 may be required depending on the scope of regulated services. Founders should distinguish clearly between application fees, regulatory capital, security deposit, and real operating runway. MAS will not be satisfied by a technically compliant capital figure if the business model is underfunded in practice.
The applicant generally uses a Singapore private limited company registered with ACRA. A registered office is required, but a registered address alone does not prove regulatory substance. MAS looks at:
Market claims that a “virtual office is enough” are unsafe for regulated crypto activity. A registered office may satisfy company law formalities, but licensing depends on the broader control environment and local management presence.
MAS generally expects at least one executive director who is resident in Singapore. Depending on the business model, the company may also need clearly designated senior managers for compliance, operations, technology, and risk. Governance must show:
A common failure point is over-reliance on external consultants without internal ownership. MAS expects outsourced functions to remain under board and management control.
MAS applies its Guidelines on Fit and Proper Criteria to directors, chief executive officers, key appointment holders, and significant shareholders. The assessment focuses on:
Applicants should be ready to disclose adverse litigation, prior regulatory findings, insolvency history, sanctions exposure, source of wealth, and source of funds. Nominee-heavy structures, opaque beneficial ownership chains, or unexplained wealth accumulation materially increase review risk.
For DPT activity, MAS expects a mature AML/CFT framework before submission, not after approval. The control stack should align with MAS Notice PSN02 and related obligations, including:
MAS will usually test not only the written manual, but also whether alert thresholds, escalation ownership, and case management workflows are operationally credible.
Crypto applicants are expected to maintain controls consistent with MAS Technology Risk Management (TRM) expectations. A credible framework typically includes:
A useful practical nuance: MAS increasingly looks at how the firm governs wallet whitelisting, smart-contract risk, and privileged access reviews, not just whether it stores assets offline.
A strong application package usually includes:
The application, website, terms of service, and investor materials must describe the same business. MAS often queries inconsistencies between public marketing claims and the formal scope of the license request.
Licensing and banking are separate gates. Even a legally licensable model can fail commercially if it cannot secure workable fiat rails. Founders should prepare early for:
RUE typically treats bankability as part of licensing design, not a post-approval afterthought. In practice, unsupported fiat flow models are one of the fastest ways to destroy launch timelines.
Compare Singapore with other jurisdictions by the applicable regulatory framework, permitted activities, review period, fees, capital, local substance and cross-border permissions. Local registration or authorisation is distinct from EU MiCA/CASP authorisation and does not grant EU passporting.
6 jurisdictions in this table
* This table focuses on MiCA/CASP authorization conditions. Use the settings icon to customize countries and parameters.
Singapore remains tax-efficient for properly structured crypto businesses, but the tax analysis must follow the actual activity, asset characterization, and revenue model. The headline corporate income tax rate is 17%, there is generally no capital gains tax, and the GST treatment of qualifying digital payment tokens has been materially clarified since 1 January 2020 by the Inland Revenue Authority of Singapore (IRAS).
IRAS does not tax “crypto” as a single category. It looks at what the company is doing: proprietary trading, market making, brokerage, custody fees, token issuance, software licensing, staking-related service revenue, or treasury gains. The same token can produce different tax outcomes depending on whether it is held as trading stock, inventory, treasury reserve, or long-term investment asset.
First, do not assume that “Singapore has no crypto tax” means the business is tax-free. Operating profits remain taxable unless a specific rule says otherwise. Second, do not rely on generic offshore marketing phrases such as “foreign income is untaxed” without checking Singapore’s source rules, remittance treatment, and the actual operating footprint of the group.
Crypto firms in Singapore should keep granular wallet-level records, fair-value methodology, reconciliation logs, and policy-level treatment for treasury, customer assets, and fee income. This is not only an accounting issue; weak books and records also create licensing and banking friction.
A MAS license is the start of supervision, not the end of the project. Ongoing duties span AML/CFT, safeguarding, technology risk, incident reporting, disclosures, and governance.
“Crypto license in Singapore” is market shorthand, not the name of a single permit. In 2026, a founder must first map the business model against three core regimes:
This is why generic “VASP Singapore” language is often misleading. MAS regulates by activity, token characteristics, customer touchpoints, and jurisdictional nexus. A crypto exchange, custody provider, OTC desk, wallet operator, token issuer, or overseas-only broker may each land in a different legal box.
RUE starts every Singapore mandate with a licensing gap assessment: activity mapping, token classification, customer geography, safeguarding model, and banking feasibility. That approach reduces the two biggest founder mistakes in Singapore: filing under the wrong regime and underestimating post-licensing compliance burden.
Answer a few quick questions to find out if this jurisdiction suits your crypto business
Based on your answers, this jurisdiction matches your business requirements well. Here's a quick summary:
Recommended License
CASP License
Estimated Budget
€24,000 – €35,000
Estimated Timeframe
4–6 months
EU Passporting
Available
Define whether the business falls under PSA, FSMA Part 9, SFA, or a combination. Map token types, customer geography, custody model, and payment flows. Duration: 1-2 weeks.
Incorporate Singapore entity through ACRA, confirm ownership transparency, registered office, resident executive director, and initial governance structure. Duration: 1-3 weeks.
Build AML/CFT, sanctions, Travel Rule, safeguarding, outsourcing, complaint handling, and technology risk frameworks. Align website claims and customer documents with the intended license scope. Duration: 3-6 weeks.
Prepare Form 1, business plan, flow-of-funds diagrams, financial projections, fit-and-proper materials, policy set, and supporting legal analysis. Duration: 2-4 weeks.
Submit the application through the relevant MAS e-licensing channel and pay the applicable fee. Confirm completeness before filing to reduce avoidable queries. Duration: 1 week.
MAS conducts due diligence, reviews documents, and may issue several rounds of questions or request interviews with founders and key officers. Typical review window: 3-12 months depending on complexity.
Address any in-principle approval conditions, finalize staffing, controls, vendor arrangements, and where relevant security deposit or safeguarding mechanics. Duration: 2-6 weeks.
Complete banking and PSP onboarding, implement reporting calendar, train staff, test incident response, and launch only after the licensed scope, disclosures, and controls are fully aligned. Duration: 2-4 weeks.
Open the key issues founders, compliance teams and legal leads usually need to confirm before launch.
Usually yes. A spot exchange, brokerage, OTC desk, or custodial wallet business commonly triggers analysis under the Payment Services Act 2019, especially where the company provides digital payment token services. If the platform lists or handles tokens that qualify as capital markets products, the SFA may also apply. The answer depends on custody, customer location, settlement model, and token classification.
No safe blanket exemption should be assumed. Since 30 June 2025, FSMA Part 9 can apply to a Singapore entity providing digital token services outside Singapore. This means an overseas-only model may still require authorisation. Founders should re-test any structure built around the old assumption that “no Singapore retail means no Singapore regulation”.
SPI and MPI are license classes under the PSA. An SPI operates within statutory thresholds such as SGD 3 million per month for a single payment service and SGD 6 million aggregate for two or more services, while an MPI can operate above those thresholds. Base capital is commonly analysed at SGD 100,000 for SPI and SGD 250,000 for MPI, with possible security deposit requirements for MPI.
A DPT service provider is a business that provides regulated services involving digital payment tokens. Depending on the model, this may include exchange, brokerage, transfer facilitation, or custody-related activity. The exact scope is determined by the PSA and MAS guidance, not by generic market labels such as “VASP”. Whether a token is actually a DPT must be analysed separately from whether the business provides a regulated service.
The SFA applies when the token or arrangement is a capital markets product. Typical examples include tokenized shares, debt instruments, and units in a collective investment scheme. In those cases, the legal analysis moves into securities regulation rather than pure DPT/payment-services regulation. A platform dealing in such instruments may face market, dealing, custody, or offering rules under the Securities and Futures Act 2001.
A registered office alone is not enough to prove licensing substance. Singapore company law allows a registered address, but MAS looks at the broader operational reality: local management presence, governance, access to records, control over outsourced functions, and whether the company can be effectively supervised. A “virtual office” may satisfy mailing formalities, but it does not by itself satisfy regulatory substance expectations.
A realistic end-to-end timeline is often 4 to 12+ months. Pre-application readiness typically takes 4-8 weeks for a well-organised founder team. MAS review itself often takes 3-12 months depending on complexity, quality of documents, and the number of Q&A rounds. Complex token classification, overseas activity, weak AML frameworks, or management changes during review can extend the process materially.
The official application fee is only a small part of the real budget. Founders should separate MAS filing fees, base capital, possible security deposit, legal drafting, AML tooling, cybersecurity, staffing, audit, and banking setup. For PSA applicants, practical capital planning often starts at SGD 100,000 for SPI and SGD 250,000 for MPI, but the true launch budget is usually much higher once compliance operations are included.
The main reasons are inconsistency and weak controls. Typical issues include opaque ownership, poor source-of-funds evidence, no resident decision-maker, generic AML/CFT documents, weak sanctions monitoring, unclear token classification, unsupported custody design, unrealistic projections, and website claims that exceed the requested licensed scope. MAS generally responds better to coherent, well-governed businesses than to large but poorly integrated document sets.
DPT businesses should expect MAS AML/CFT obligations to be central, not peripheral. In practice this means a framework aligned with MAS Notice PSN02, including CDD, beneficial ownership verification, sanctions screening, transaction monitoring, Travel Rule controls, record-keeping, and suspicious transaction reporting. Firms must also be able to file STRs to STRO when suspicion thresholds are met.
Operating profits are generally taxable, while capital gains are generally not. The headline corporate income tax rate is 17%. Singapore generally has no capital gains tax, but IRAS may treat gains as trading income depending on the facts. Supplies of qualifying digital payment tokens have had special GST treatment since 1 January 2020, but not every crypto-related service is GST-neutral. The tax outcome depends on the actual business model.
Check the MAS Financial Institutions Directory and the ACRA corporate record. Verify the exact legal entity name, license class, and regulated services. Do not rely only on website statements such as “regulated”, “registered”, or “compliant”. A company may be incorporated in Singapore without holding any MAS license, and an application in progress is not the same as approval.
