A practical guide to Singapore crypto licensing under the MAS PSA: SPI vs MPI, capital requirements, government fees, document checklist, and realistic timelines.

Singapore is one of a small number of jurisdictions where a crypto licence carries genuine institutional weight. An MAS-issued Digital Payment Token (DPT) licence opens doors to banking relationships, institutional counterparties, and regulated market access across Southeast Asia — but the path to obtaining one is demanding.

The Monetary Authority of Singapore (MAS) runs one of the most rigorous licensing regimes for DPT service providers globally. The Payment Services Act (PSA), the Securities and Futures Act (SFA), and — since June 2025 — the Financial Services and Markets Act (FSMA) together create a layered framework that applies differently depending on what you do and where your clients are located.

This guide covers the licence types available, minimum capital requirements, a realistic cost breakdown, the documentation MAS expects, and the timeline from company incorporation through to licence issuance. It is written for founders, legal counsel, and compliance officers who need to make an informed go/no-go decision before engaging resources.

The Regulatory Framework: PSA, SFA, and FSMA

Three pieces of legislation define the Singapore crypto licensing landscape, and the one that applies to your business depends on your token type and client base.

The Payment Services Act 2019 (PSA) is the primary framework for DPT service providers — companies buying, selling, exchanging, transferring, or holding digital payment tokens on behalf of clients. Any entity providing these services to Singapore-based clients must hold a PSA licence from MAS. Offering such services without a licence is a criminal offence; MAS maintains a public register of licensed providers and takes enforcement action against unlicensed operators.

The Securities and Futures Act (SFA) governs tokens that qualify as capital markets products — security tokens, tokenised equity, or units in a collective investment scheme. If your token represents ownership or a claim on profits, you fall under the SFA regime, not the PSA.

The Financial Services and Markets Act 2022 (FSMA), which took effect on 30 June 2025, introduced a third pathway: the Digital Token Service Provider (DTSP) licence. This applies to Singapore-incorporated entities that provide digital token services to clients outside Singapore. If you are registered in Singapore but serve exclusively overseas clients, the DTSP regime applies to you under FSMA Part 9 rather than the PSA.

The 2024 amendments to the PSA also expanded the definition of DPT services to include the transfer of DPTs, the provision of custodian wallet services, and facilitating DPT exchanges without the provider taking possession of funds — meaning more business models now require licensing than previously.

Licence Types: SPI, MPI, and DTSP

Under the PSA, companies providing DPT services must hold one of two institutional licences. The distinction is transaction volume.

The MPI security deposit ranges from SGD 100,000 to SGD 200,000. The applicable amount depends on the service mix and volume, so confirm it against MAS guidance at the time of application.

The DTSP licence under the FSMA is a distinct regime with separate requirements set by MAS. If your business serves both Singapore and overseas clients, you will generally need a PSA licence (SPI or MPI) rather than a DTSP licence, which is specifically for companies with no Singapore client base.

SPI vs. MPI: Which One Do You Need?

The SPI is suitable for businesses in early stages with controlled transaction volumes. It carries lower capital requirements, simpler application documentation, and a reduced ongoing compliance burden. The trade-off is that SPI holders are subject to monthly transaction ceilings — SGD 3 million per service type and SGD 6 million across combined services — and upgrading to an MPI later adds cost and time.

The MPI has no transaction caps, making it the required structure for any crypto exchange, custodian, or OTC desk operating at scale. Most businesses providing DPT services to institutional clients or expecting significant retail volume should plan for an MPI from the outset. Choosing SPI initially and converting later is possible, but it requires a full variation application and extends the overall project timeline.

One practical consideration: MPI holders must provide a security deposit of SGD 100,000 to SGD 200,000 in addition to base capital. This is not operating capital — it is a ring-fenced deposit held as a customer protection measure and must be funded separately.

For businesses focused purely on cross-border DPT services with no Singapore-resident clients, the DTSP regime under the FSMA may be the appropriate path. Verify the correct classification carefully before committing to a structure, as misclassification adds significant remediation time.

Our Jurisdiction Advisory service can help you determine the correct licence type before you begin the application process.

Core Eligibility Requirements

MAS assesses readiness at the point of submission — not plans to build compliance infrastructure after approval. Every requirement below must be satisfied before filing, not promised as a post-approval deliverable.

Corporate structure:

• The applicant must be incorporated in Singapore as a private limited company (Pte. Ltd.) registered with ACRA.
• A physical office in Singapore is required. Foreign entities must establish a local subsidiary — a branch or representative office is not sufficient for MPI applications.
• At least one executive director must be ordinarily resident in Singapore.

Governance and fit-and-proper:

• All directors, the CEO, and major shareholders must pass MAS background checks covering integrity, competence, and financial soundness.
• The board must demonstrate active oversight of compliance and risk management — not a passive governance structure.
• A Singapore-based compliance officer must be appointed before the application is submitted.

Compliance infrastructure:

• A full AML/CFT programme aligned with MAS Notice PSN02, covering customer due diligence (CDD), transaction monitoring, and suspicious transaction reporting.
• A Travel Rule solution for cross-border DPT transfers.
• A Technology Risk Management (TRM) framework meeting MAS’s technology risk requirements.
• A business continuity plan and disaster recovery procedures.
• A client asset custody policy and user protection measures.

Capital:

• Base capital of SGD 100,000 (SPI) or SGD 250,000 (MPI) must be held in a Singapore bank account, unencumbered.
• MAS evaluates overall financial strength beyond the regulatory floor. Applicants holding only the minimum often face heightened scrutiny.
• MPI applicants must also fund a security deposit of SGD 100,000–200,000, depending on service mix and volume.

New DPT licence applicants — both SPI and MPI — must submit a legal opinion from a Singapore-qualified law firm and an independent external auditor’s assessment of their AML/CFT and consumer protection controls before MAS will accept the application.

Document Checklist

MAS does not process incomplete submissions. The full application dossier must be ready before filing. Below is the core document set required.

Corporate documents:

• Certificate of Incorporation and ACRA business profile
• Memorandum and Articles of Association
• Shareholder register with UBO disclosure (all beneficial owners above the applicable threshold)
• Confirmation of source of funds

Business and financial documents:

• Detailed business plan: operating model, target markets, revenue projections (3-year minimum)
• Audited financial statements or evidence of base capital availability (bank statements, letters of credit)
• 12-month cashflow model and capital buffer calculation

Compliance and risk framework documents:

• AML/CFT policies and procedures manual (CDD/KYC, transaction monitoring, STR protocols)
• Travel Rule implementation policy
• Technology Risk Management Framework aligned with MAS TRM Notice
• Cybersecurity controls documentation
• Business continuity and disaster recovery plan
• Client asset custody policy and user protection framework

Personnel documents:

• CVs, professional qualifications, and background disclosure for all directors, CEO, and compliance officer
• Personal declarations of no adverse regulatory history

Legal and audit documents:

• Legal opinion from a Singapore-qualified law firm confirming PSA classification and application basis
• Independent external auditor’s report on AML/CFT and consumer protection controls

MAS may request additional documents at any point during the review. Delays typically occur when the initial dossier is incomplete, the business plan is vague, or the AML/CFT framework does not address all risk scenarios specific to the applicant’s activities.

Our AML & Compliance team works with clients to develop regulator-ready AML/CFT frameworks that withstand MAS scrutiny.

Cost Breakdown: Capital, Fees, and Ongoing Expenses

The government application fee is a small fraction of the overall project cost. Below is a realistic breakdown of the financial commitments involved.

Government fees (one-time):

• Application fee: SGD 1,000 (SPI) or SGD 1,500 (MPI) — non-refundable regardless of outcome
• Annual licence fee: SGD 5,000

Capital requirements (ongoing):

• Base capital: SGD 100,000 (SPI) or SGD 250,000 (MPI) — must be maintained at all times
• Security deposit: SGD 100,000–200,000 (MPI only) — held as a ring-fenced deposit, not accessible for operations

Professional and setup costs (variable):

• Legal structuring and licence application advisory
• AML/CFT framework development and external auditor’s assessment
• Technology risk documentation and cybersecurity audit
• Registered office space in Singapore
• Compliance officer salary (Singapore-based, full-time)
• Company incorporation and ACRA registration

Ongoing annual compliance costs: Annual compliance operations — including the compliance officer, external AML audits, MAS filings, and legal advisory — typically range from SGD 30,000 to SGD 80,000 depending on the complexity of operations. This figure does not include technology infrastructure or banking costs.

MAS also expects companies to maintain a capital buffer above the minimum floor. Applicants holding only the statutory minimum are more likely to face detailed scrutiny during the review process and may be asked to demonstrate a credible operational funding plan.

For a full picture of what banking and payment infrastructure costs alongside the licence, see our Banking & EMI / PSP services.

Timeline: From Incorporation to Licence Issuance

MAS typically takes 9 to 12 months from first filing to licence grant, with the review period itself accounting for 6 to 12 months of that. Preparation before submission adds further time, and it is the phase the applicant actually controls.

MAS issues an In-Principle Approval (IPA) before granting the final licence. IPA conditions commonly include:

• completing a technology audit and cybersecurity validation;
• confirming the compliance framework is fully implemented;
• completing all key personnel appointments; and
• confirming that capital and safeguarding arrangements are in place and funded.

The full licence issues only once all IPA conditions are satisfied.

Timelines are heavily affected by application quality. Incomplete documentation, vague business model descriptions, or AML/CFT frameworks that do not cover the applicant’s specific risk scenarios are the primary sources of delay.

Post-Licence Obligations

A Singapore DPT licence is an ongoing regulatory relationship, not a one-time approval. MAS supervises licensed entities actively, and the obligations that begin on licence issuance are substantial.

Key ongoing requirements include:

• Periodic regulatory returns: Filed in line with MAS Notice PSN04, covering licensed activities and financial position.
• Annual external AML audit: An independent auditor must assess AML/CFT controls and submit findings to MAS each year.
• AML/CFT continuous monitoring: Ongoing transaction monitoring, customer screening, and suspicious transaction reporting under MAS Notice PSN02.
• Cybersecurity compliance: Maintenance of cyber hygiene standards under MAS’s technology risk requirements.
• Business conduct: Clear client disclosures, customer fund protection, timely transaction execution, and compliance with operational restrictions under PSN08.
• Material event reporting: Cyber incidents, AML breaches, significant operational disruptions, and changes in ownership or control must be reported to MAS promptly. Failure to report is itself a regulatory offence.
• Capital maintenance: Base capital and security deposit (for MPI) must be maintained at all times; any deterioration below the floor triggers mandatory notification.

MAS updated its DPT licensing guidelines in August 2024 to require dedicated in-house compliance officers for DPT service providers and independent external auditor assessments — raising the compliance baseline for all licensed entities.

Our AML & Compliance team supports licensed DPT providers with ongoing regulatory obligations, including annual AML audits, MAS return filings, and incident response protocols.

What Delays or Derails MAS Applications

MAS does not process applications in sequence — it assesses readiness. An incomplete or poorly structured application will be returned or placed on hold, resetting the clock. The most common failure points are:

• Incomplete AML/CFT policies: Frameworks that do not address all risk scenarios relevant to the applicant’s activities, or that lack a clear CDD process.
• Vague business model description: Services or revenue streams that are not clearly mapped to PSA-regulated activities, or that raise questions about scope creep into unlicensed territory.
• Weak governance structure: Absence of a qualified compliance officer, directors without relevant financial sector experience, or board composition that does not meet MAS fit-and-proper standards.
• Undercapitalisation signals: Holding only the minimum floor capital without demonstrating an adequate operational buffer raises MAS concerns about financial resilience.
• Missing prerequisite documents: Submitting without the required legal opinion or external auditor’s assessment will result in the application being rejected at intake.

Post-approval supervision is as rigorous as the application review itself. MAS can impose conditions, restrict activities, or withdraw a licence where a provider fails to maintain adequate AML controls.

Why Singapore for Crypto Licensing

The MAS licence carries significant weight with banks, institutional counterparties, and investors, who treat it as a marker of regulatory credibility — partly because of how difficult it is to obtain.

Several structural factors make Singapore a commercially attractive jurisdiction for licensed DPT businesses:

• Tax treatment: Singapore has no capital gains tax. DPT transactions have been exempt from GST since January 2020. The corporate tax rate is 17% on net profits.
• Financial infrastructure: Access to institutional banking, fintech investors, and a deep pool of qualified compliance and technology professionals.
• Regional market access: Singapore’s position as a Southeast Asian financial hub gives licensed operators a credible base for regional expansion.
• Regulatory consistency: MAS applies its framework consistently and publishes the guidance it relies on, which makes regulatory change easier to anticipate.

Singapore is not the lowest-cost path to a crypto licence. The capital requirements, compliance infrastructure, and professional costs make it a significant investment. But for businesses that require institutional relationships, cross-border banking access, or client trust at an institutional level, the MAS licence is difficult to replicate elsewhere.

If you are evaluating Singapore alongside other jurisdictions, our Jurisdiction Advisory service provides a structured comparison across the full range of options — including licensing timelines, capital requirements, banking access, and operational costs — so you can make the decision with full information.

For a broader view of our crypto and VASP licensing work across 50+ jurisdictions, see our Crypto & VASP Licensing service page.

Summary

Obtaining a crypto licence in Singapore means meeting one of the most demanding DPT licensing standards globally. The core choice — SPI or MPI — turns on transaction volume and expected scale, but both require substantial compliance infrastructure, local presence, and qualified personnel in place before the application is filed.

MAS takes 9 to 12 months from first filing to licence issuance, and preparation before filing adds further time. Capital requirements start at SGD 100,000 (SPI) or SGD 250,000 plus a security deposit (MPI), and ongoing annual compliance costs typically add SGD 30,000 to SGD 80,000 per year. The June 2025 FSMA amendments introduced a separate DTSP regime for Singapore-incorporated entities serving overseas clients, adding a further layer of classification that must be assessed before choosing a structure.

The applications that succeed are the ones where every element — governance, AML/CFT framework, technology risk management, capital, and legal opinion — is complete and regulator-ready at the point of submission.