Cryptocurrency is legal in Singapore but tightly regulated under the PSA and FSMA. This guide maps every licence type, compliance obligation, and 2025–2026 rule change.

Cryptocurrency is legal in Singapore. But legal status and operational compliance are two different things, and the gap between them has widened considerably since 2022.

Singapore regulates crypto activities through a layered framework administered by the Monetary Authority of Singapore (MAS). The rules distinguish between what type of token you are dealing with, what services you are providing, and who your customers are. Each of those variables determines which law applies, which licence you need, and what you must do to maintain it.

This article maps the full regulatory picture as it stands in 2026 — from the governing legislation and licence types to the compliance obligations, stablecoin rules, tax treatment, and the significant changes that took effect in mid-2025. It is written for founders, legal counsel, compliance officers, and investors who need a clear, accurate picture before making decisions about operating in or from Singapore.

Legal Status of Cryptocurrency in Singapore

Cryptocurrency is legal in Singapore. It is not legal tender — you cannot demand payment in Bitcoin the way you can in Singapore Dollars — but it is recognised as a digital asset that can be legally held, traded, and transferred.

The MAS has consistently maintained a position of permitting crypto activity under structured oversight. Its stated approach since 2023 has been to support digital asset innovation while controlling speculation and financial crime risk. That position has produced a detailed, enforceable rulebook — not a permissive environment.

Individual retail investors can hold and trade cryptocurrency without a licence. Businesses that provide crypto-related services to customers — whether in Singapore or abroad — must be licensed.

Governing Legislation: PSA, FSMA, and SFA

Singapore does not have a single dedicated crypto law. Instead, crypto activities are regulated under three existing statutes, each targeting different types of tokens and services.

• Payment Services Act 2019 (PSA): The primary statute for businesses providing Digital Payment Token (DPT) services — such as exchange, transfer, or custody of cryptocurrencies — to customers in Singapore. It was significantly amended in 2022 to expand its coverage of crypto activities.
• Financial Services and Markets Act 2022 (FSMA): Extended MAS oversight to Singapore-incorporated entities providing digital token services to customers outside Singapore. The Digital Token Service Provider (DTSP) regime under Part 9 of the FSMA became enforceable on 30 June 2025.
• Securities and Futures Act 2001 (SFA): Applies when a digital token qualifies as a capital markets product — a security, a unit in a collective investment scheme, or a derivative. In those cases, a Capital Markets Services (CMS) licence is required instead of a PSA licence.

The applicable statute depends on your token type and your customer base. Getting that analysis wrong at the start of an application process is one of the most common — and costly — structural errors.

Token Classification: The First Compliance Step

Before selecting a licence, every business must classify the tokens it deals with. MAS applies a substance-over-form test, meaning the legal label attached to a token by its issuer is less important than what the token actually does and what rights it confers.

There are three primary categories:

• Digital Payment Tokens (DPTs): Cryptocurrencies used as a medium of exchange, such as Bitcoin and Ether. These fall under the PSA or FSMA depending on the customer base.
• Capital Markets Products: Tokens that represent securities, units in a fund, or derivatives. These are regulated under the SFA and require a CMS licence for dealing, advising, or fund management activities.
• Utility and Governance Tokens: Tokens that provide access to a specific service or platform, without functioning as a means of payment or representing a financial right. These are not currently subject to PSA or FSMA licensing requirements.

Token classification is not a one-time exercise. If a token’s use evolves over time, its regulatory status can change. MAS expects licensees to reassess classification when material changes occur.

Licence Types Under the PSA

Businesses providing DPT services to customers in Singapore must hold a licence under the PSA. MAS issues two main licence types based on transaction volume and business scale.

• Standard Payment Institution (SPI) Licence: For smaller-scale operators with lower transaction volumes. Subject to monthly transaction and balance sheet caps. Lower capital requirements make it more accessible for early-stage businesses.
• Major Payment Institution (MPI) Licence: Required for high-volume operators — typically exchanges, OTC desks, and institutional platforms — that exceed defined monthly transaction thresholds. Carries more extensive ongoing obligations but provides full operational scope across all PSA payment services.

As of early 2026, the MAS FID currently lists several dozen active MPI holders for DPT services. SPI DPT licences remain far fewer. Out of more than 380 applications received since the PSA’s enactment, approximately 90 have been approved and over 200 rejected or withdrawn, according to industry estimates.

Those figures reflect how selective MAS has been. The application process tests fit-and-proper criteria, governance structures, capital adequacy, AML/CFT frameworks, custody arrangements, and technology risk controls. Preparation quality and regulatory engagement matter significantly to the outcome.

If your token is classified as a capital markets product rather than a DPT, a CMS licence under the SFA governs — not the PSA. This covers security token offerings, tokenised funds, and digital securities trading platforms.

The DTSP Regime Under the FSMA (Effective June 2025)

One of the most significant changes to Singapore’s crypto landscape took effect on 30 June 2025. Under Part 9 of the FSMA, any Singapore-incorporated entity providing digital token services exclusively to customers outside Singapore must now hold a Digital Token Service Provider (DTSP) licence.

Before this change, some operators had structured their business to serve only overseas clients from a Singapore base, placing themselves outside the PSA’s scope. The FSMA closed that gap entirely.

MAS has been explicit that it will grant DTSP licences only in extremely limited circumstances. The stated reasons are the heightened money laundering risks in cross-border digital token businesses and MAS’s limited ability to supervise activities conducted outside Singapore. Applicants must demonstrate a valid business reason for not serving Singapore customers, robust international compliance standards, and a structure that does not raise supervisory concerns.

There was no transitional period. Entities that did not obtain a licence were required to cease all regulated activities by 30 June 2025. Failure to comply carries penalties of up to SGD 250,000 and up to three years’ imprisonment.

Ongoing Compliance Obligations

Holding a licence is the starting point, not the finish line. Licensed DPT service providers in Singapore must maintain a continuous compliance programme covering several operational areas.

AML/CFT: Firms must implement customer due diligence procedures, monitor transactions on an ongoing basis, file Suspicious Transaction Reports (STRs) with the Suspicious Transaction Reporting Office (STRO), and apply enhanced due diligence for higher-risk relationships. In 2024, MAS imposed financial penalties totalling over SGD 12 million across six separate enforcement actions against DPT service providers, with violations spanning inadequate customer due diligence, failure to file STRs, and non-compliance with the Travel Rule.

Travel Rule: Applies to transfers above SGD 1,500. Both sending and receiving platforms must collect and exchange identifying information about transaction parties. This aligns Singapore’s requirements with the FATF Recommendation 16 standard.

Customer Asset Segregation: As of June 2025, licensed operators must hold customer assets under a statutory trust, kept separate from the firm’s own funds. This requirement was introduced following the collapse of several Singapore-based crypto firms in 2022.

Consumer Protection Rules: MAS consumer-protection rules for DPT platforms — set out in the Payment Services Regulations and Guidelines PS-G03 — require licensed firms dealing with retail customers. These include:

• Mandatory risk awareness assessments before a retail customer can begin trading.
• Prohibition on credit card purchases of DPTs.
• Restrictions on offering financing, margin trading, and trading incentives to retail customers.
• Clear risk disclosures and accurate customer communication.

Custody and Attestation (2026 Updates): MAS rolled out updated custody guidelines in early 2026, including requirements for licensed custodians to publish cryptographically verifiable reserve attestations at least once every 24 hours. These attestations must be available to both clients and MAS on request.

Annual Audit: Licensed entities must appoint an independent auditor annually to review both financial compliance and operational adherence to MAS requirements.

Physical Presence: MAS requires that at least one person be present at the licensee’s permanent place of business in Singapore for a minimum of 10 days per month, with a minimum of eight hours on each of those days.

Stablecoin Regulatory Framework

Singapore introduced one of the world’s first dedicated stablecoin regulatory frameworks in August 2023. It applies specifically to Single-Currency Stablecoins (SCS) pegged to the Singapore Dollar or a G10 currency, issued from Singapore.

Issuers seeking the “MAS-regulated stablecoin” designation must meet the following requirements:

• Reserve assets must equal 100% of stablecoins in circulation at all times, held in the same currency as the peg — in cash, cash equivalents, or short-duration sovereign debt.
• Reserve assets must be segregated from the issuer’s own funds and held with approved custodians.
• Monthly independent attestations of reserves are required, along with annual audits.
• Stablecoins must be redeemable at par value within five business days.
• Minimum base capital of S$1 million, or 50% of annual operating costs — whichever is higher.
• Issuers must hold a Major Payment Institution (MPI) licence.

Stablecoins that do not meet these criteria — including those pegged to non-G10 currencies or multi-currency baskets — are treated as standard DPTs under the PSA. Stablecoins that function as securities fall under the SFA.

Tax Treatment of Cryptocurrency

Singapore does not impose capital gains tax. For individual investors who hold cryptocurrency as a personal investment, gains on disposal are not subject to income tax. This treatment remains in place in 2026 and applies to Bitcoin, Ether, and most other payment tokens.

The distinction IRAS draws is between personal investment and business activity. If IRAS determines that an individual’s trading activity constitutes a trade — based on factors such as frequency of transactions, holding periods, use of automated tools, and whether trading is a primary income source — those profits are treated as taxable business income, subject to personal income tax rates of 0% to 24% for Singapore tax residents.

For businesses, the following tax considerations apply:

• Payment token receipts: When a business accepts cryptocurrency as payment for goods or services, the transaction is treated as a barter arrangement and taxed on the underlying value of what was provided.
• Token issuance: Proceeds from issuing utility tokens are typically treated as taxable revenue, since they represent prepayment for future services. Security token issuance may be treated as capital raising, depending on the rights attached.
• GST: From 1 January 2020, supplies of qualifying digital payment tokens are exempt from Singapore’s 9% Goods and Services Tax. NFTs and certain utility tokens may not qualify for this exemption.
• Staking and mining: Mining rewards are taxable if conducted with a profit intent. Passive staking at hobby level is less likely to attract tax, but significant DeFi yield or structured staking activity may be treated as business income.

IRAS significantly increased audits on crypto transactions through 2025. Common issues include non-reporting of transactions, misclassifying trading income as capital gains, and inadequate record-keeping. Singapore is also expected to adopt the OECD’s Crypto-Asset Reporting Framework (CARF), which will increase cross-border data sharing and reduce the information asymmetry that some investors have relied on.

Key Rule Changes in 2025–2026

The regulatory framework has moved quickly. The following changes are the most operationally significant for businesses assessing their position now:

• DTSP regime (30 June 2025): Singapore-incorporated entities serving only overseas clients must now hold a DTSP licence under the FSMA. MAS will grant these licences only in exceptional cases. Businesses that cannot qualify must cease regulated activities.
• Customer asset segregation (June 2025): All licensed DPT service providers must hold customer assets under a statutory trust, segregated from the firm’s own balance sheet.
• Mandatory retail risk assessments (June 2025): Retail customers must pass a mandatory risk awareness assessment before trading on any licensed platform.
• Updated custody requirements (early 2026): MAS introduced daily cryptographic reserve attestation requirements for licensed custodians, with attestations made available to clients and MAS on request.
• PSA amendments phased implementation (2026–2027): MAS announced amendments to the PSA introducing enhanced capital and governance requirements for DPT service providers. Phase 1 (capital and governance) took effect in July 2026, with full operational compliance required by January 2027.
• Stablecoin framework enforcement: The SCS framework, finalised in 2023, was given further legislative effect through 2024–2025 PS Act amendments. Issuers with total circulation value exceeding SGD 5 million must maintain full reserve backing at all times.

Next Steps for Businesses

Singapore remains one of the most credible jurisdictions for digital asset businesses. The licensing bar is high, but a MAS licence carries significant commercial value — in terms of banking access, institutional partnerships, and customer trust. Over 2,300 crypto and blockchain-related companies now operate in Singapore, including nearly 1,000 funded firms that have collectively raised close to USD 7 billion in capital.

For businesses assessing their position, the process typically follows this sequence:

1. Token classification review — Determine whether your tokens are DPTs, capital markets products, or utility/governance tokens. This determines the applicable statute and licence type.
2. Customer base analysis — Identify whether your customers are in Singapore, outside Singapore, or both. This determines whether the PSA, FSMA/DTSP regime, or both apply.
3. Licence selection — Based on transaction volumes and service scope, determine whether an SPI, MPI, CMS, or DTSP licence is required.
4. Compliance framework build-out — Prepare the AML/CFT programme, custody arrangements, technology risk controls, and governance documentation required for the application.
5. Pre-application engagement — MAS strongly encourages pre-application engagement, including through the regulatory sandbox where appropriate. First-pass applications that arrive well-prepared have materially higher approval rates.

If you are already licensed, a gap analysis against the 2025–2026 rule changes is a practical priority — particularly on custody obligations, retail protections, Travel Rule implementation, and the new attestation requirements.

GSS Legal operates from Singapore and advises on MAS licensing across the full range of DPT, DTSP, and CMS frameworks. Our Crypto & VASP Licensing service covers the end-to-end process — from jurisdiction and licence selection through application preparation, regulator engagement, and post-approval compliance. For businesses evaluating Singapore alongside other jurisdictions, our Jurisdiction Advisory service provides a structured comparison across key criteria including licensing timeline, capital requirements, banking access, and ongoing regulatory burden. Our AML & Compliance team can assist with building the programme documentation MAS expects at application stage and throughout the licence lifecycle.

Summary

Cryptocurrency is legal in Singapore. Operating a crypto business from Singapore — whether serving local or overseas clients — requires a licence from MAS, and the applicable framework depends on your token type and customer base.

The PSA governs DPT services to Singapore customers. The FSMA DTSP regime governs Singapore-based firms that serve only overseas clients. The SFA governs token activities involving capital markets products. All three impose meaningful compliance obligations, and MAS has demonstrated a clear willingness to enforce them.

The rule changes of 2025–2026 have closed the most significant regulatory gaps. Businesses that were operating in grey areas — particularly those serving only overseas clients from a Singapore base — now face a clear choice: obtain a licence or exit. For those that can meet the bar, the Singapore licence remains one of the most commercially valuable in Asia.