What Is a Payment Service Provider Under Singapore Law?

Under the PS Act, a Payment Service Provider (PSP) is any entity that carries on a business of providing one or more of the seven regulated payment services in Singapore. The definition is activity-based, not entity-based. This means that whether you are a bank, a fintech startup, or an international operator with a Singapore entity, the licence obligation arises from what you do — not who you are.

The PS Act came into force on 28 January 2020 and was amended on 4 April 2024, expanding the scope of regulated activities and tightening compliance requirements. Any entity providing regulated payment services in Singapore must hold a valid licence unless it qualifies for a specific exemption under the Act.

The Monetary Authority of Singapore (MAS) is the licensing and supervisory authority. MAS operates two regulatory regimes under the PS Act: a Licensing Regime for PSPs, and a Designation Regime for systemically important payment systems. Most commercial operators are subject to the Licensing Regime.

The Seven Regulated Payment Service Activities

The PS Act adopts an activity-based approach to regulation. Your licence obligations depend on which combination of activities your business model covers. A single entity can hold one licence that covers multiple activities, but the licence class required depends on the scope and volume of those activities.

The seven regulated activity types are:

• Account Issuance Service: Issuing a payment account, or providing services related to operating a payment account. Non-bank credit cards and e-wallets such as GrabPay fall within this category.
• Domestic Money Transfer Service: Facilitating the transfer of funds between a payer and payee both located in Singapore. Online payment gateways and payment kiosks serving local transfers are covered here.
• Cross-Border Money Transfer Service: Providing outbound or inbound remittance — accepting funds in Singapore for transmission abroad, or receiving funds from outside Singapore for local payees. Traditional remittance agents and newer fintech platforms like Wise operate under this category.
• Merchant Acquisition Service: Processing payment transactions on behalf of a merchant under a contractual arrangement that results in a transfer of funds to the merchant. Payment gateways and point-of-sale terminal providers such as Stripe or Adyen operate in this space.
• E-Money Issuance Service: Issuing electronic money so that users can make payment transactions, including paying merchants or transferring funds to others.
• Digital Payment Token (DPT) Service: Dealing in, or facilitating the exchange of, digital payment tokens — commonly referred to as cryptocurrencies. This includes operating a crypto exchange or facilitating peer-to-peer DPT transactions.
• Money-Changing Service: Buying or selling foreign currency notes in Singapore.

Most businesses will cover more than one activity. An e-wallet provider, for example, will typically touch account issuance, domestic money transfer, and e-money issuance simultaneously. Understanding which activities apply to your model is the first step in determining which licence class is required.

The Three Licence Classes: Money-Changing, SPI, and MPI

MAS issues three classes of licence under the PS Act. Each licence class is calibrated to the risk profile and scale of the services being provided. Choosing the right class from the outset avoids the cost and delay of a licence variation down the line.

Money-Changing Licence

The Money-Changing Licence is the narrowest of the three. It authorises the holder to buy and sell foreign currency notes — and nothing else. Entities engaged solely in foreign currency exchange, including physical bureaux de change and online FX note sellers, must hold this licence. If your business provides any other regulated payment service in addition to money-changing, you will need an SPI or MPI licence instead.

Standard Payment Institution (SPI) Licence

The Standard Payment Institution (SPI) Licence is for operators providing one or more regulated payment services at below-threshold transaction volumes. It is typically the starting point for early-stage fintechs, remittance platforms, and payment wallet providers building their initial customer base in Singapore.

An SPI licence applies when all of the following conditions are met:

• Monthly transactions for any single payment activity do not exceed S$3 million.
• Monthly transactions across two or more payment activities combined do not exceed S$6 million.
• Daily outstanding e-money does not exceed S$5 million.

The minimum paid-up capital required for an SPI licence is S$100,000. SPIs are not required to post a security deposit with MAS, which reduces the upfront financial burden for early-stage operators.

Major Payment Institution (MPI) Licence

The Major Payment Institution (MPI) Licence is required once any of the SPI thresholds above are exceeded — or when the operator intends to build a business that will scale past those limits from the outset. Unlike the SPI, the MPI licence carries no transaction volume ceiling, allowing holders to process unlimited payment flows across multiple activities.

The higher scale comes with more demanding requirements:

• Minimum paid-up capital of S$250,000.
• A mandatory security deposit with MAS, provided in the form of a cash deposit, bank guarantee, or equivalent instrument.
• Stricter safeguarding obligations for customer money, typically satisfied through a trust account, bank undertaking, or financial guarantee.
• More extensive AML/CFT compliance frameworks aligned to MAS Notices.
• At least one executive director who is a Singapore citizen or permanent resident, or one Employment Pass holder as executive director plus a separate citizen/PR director.

MPI licence holders are listed in MAS’s Financial Institutions Directory, which carries commercial credibility with banking partners, institutional clients, and counterparties.

SPI vs. MPI: How to Choose the Right Licence Class

The decision between SPI and MPI is primarily a question of volume and growth trajectory, not ambition. The two licences cover the same seven activity types. The difference lies in the thresholds, capital requirements, and ongoing compliance obligations.

For operators in an early growth phase — building a payment wallet, remittance platform, or QR-code payment product for an initial customer base — the SPI is often the right starting point. It carries a lighter compliance burden while allowing the business to establish a regulatory track record with MAS.

Operators who expect to exceed the SPI thresholds within the first year, or who are entering the market with a crypto exchange or large-scale merchant acquiring business, should apply for an MPI licence directly. Upgrading from SPI to MPI later is possible, but it triggers a full variation application, which adds time and cost.

Key Regulatory Updates Since 2024

The PS Act was amended on 4 April 2024, and MAS updated its Guidelines on Licensing for Payment Service Providers on 26 July 2024, with those changes taking effect on 26 August 2024. These updates introduced several requirements that directly affect new licence applications.

The two most significant changes for new applicants are:

• Legal Opinion Requirement: All new SPI and MPI applicants must now submit a legal opinion prepared by a Singapore-admitted solicitor with PS Act expertise. The opinion must map the applicant’s proposed business model to the specific regulated activity types under the PS Act. MAS may request a second opinion if the initial submission is unclear or inconclusive. This requirement is particularly relevant for complex business models that span multiple activity categories.
• Independent External Auditor (EA) Assessment: Any new applicant or existing licensee seeking to add Digital Payment Token (DPT) services must commission an independent EA assessment covering AML/CFT compliance and consumer protection controls before the licence is granted or varied.

These changes reflect MAS’s intent to raise the quality and completeness of applications before they reach the review stage. An incomplete or poorly mapped application is likely to be placed on hold, extending the overall timeline. Engaging advisers with direct PS Act application experience — before submission — reduces that risk.

Core Requirements for Any PSP Licence Application

Regardless of licence class, MAS assesses applicants against a consistent set of eligibility criteria. The key requirements include:

• Singapore incorporation: The applicant must be incorporated in Singapore and hold a valid Unique Entity Number (UEN).
• Local presence: At least one executive director who is a Singapore citizen or permanent resident, or one Employment Pass holder as executive director plus a separate citizen/PR director.
• Fit and proper persons: All key controllers, directors, and senior management are assessed against MAS’s fit and proper criteria. The onus is on the applicant to demonstrate this — MAS does not need to establish otherwise.
• Capital adequacy: The applicant must demonstrate that it meets and can sustain the minimum capital requirement for the relevant licence class.
• Shareholding chart: A complete ownership chart up to the ultimate natural person controller(s) must be submitted. If there is no 20% controller, a written confirmation is required.
• AML/CFT framework: A documented AML/CFT compliance programme aligned with MAS Notices must be in place.
• Business plan and financial model: MAS expects a credible, detailed business plan and financial projections as part of the application.
• Technology risk management: Applicants must demonstrate adequate technology controls, particularly for digital or platform-based services.

Once granted, a PSP licence does not expire on a fixed term but remains valid until revoked by MAS, surrendered by the licensee, or lapsed under the provisions of the PS Act. Ongoing compliance obligations — including annual reporting, AML/CFT controls, and capital maintenance — apply for the life of the licence.

For founders navigating the corporate formation and banking setup elements alongside the licence application, GSS Legal’s Corporate Formation and Banking & EMI / PSP services address these parallel workstreams.

A Note on Digital Payment Token Services

DPT services carry the most complex licensing requirements within the PS Act framework, and the regulatory bar has risen significantly since 2024. Any entity buying, selling, or facilitating the exchange of cryptocurrencies for Singapore users or entities is providing a DPT service and requires either an SPI or MPI licence covering that activity.

The 2024 amendments expanded the scope of what counts as a DPT service, bringing additional activities — including certain custody and transfer facilitation functions — within the regulated perimeter. Entities that were operating under transitional arrangements were required to submit an external auditor attestation covering AML/CFT and user protection by 4 January 2025.

For new DPT applicants, the EA assessment requirement means the compliance infrastructure must be operational before the licence is granted, not after. This raises the practical cost and preparation timeline relative to non-DPT payment service applications. Founders entering the DPT space should plan for a longer pre-application preparation period and engage compliance counsel early in the process.

GSS Legal’s dedicated Crypto & VASP Licensing practice covers the full DPT application pathway, from business model mapping and AML/CFT framework design through to the EA assessment and MAS submission.

How GSS Legal Supports PSP Licence Applications

GSS Legal is a Singapore-based international legal and consulting practice focused on regulatory licensing across the fintech, crypto, and financial services sectors. The firm’s team works from its Singapore Asia desk and has supported clients through MAS licensing processes across the Payment Services Act framework, including SPI and MPI applications covering DPT, cross-border money transfer, e-money issuance, and merchant acquisition services.

The firm’s approach is practical and end-to-end. This means covering not just the licence application itself, but the connected requirements that MAS and banking partners assess in parallel: Singapore corporate formation, AML/CFT framework design, business plan preparation, and operational banking setup. A licence that cannot open a bank account or pass an internal compliance review at a correspondent bank does not get a business to go-live.

For founders who are still at the jurisdiction-selection stage — weighing Singapore against other regional or offshore options for a payments or fintech business — GSS Legal’s Jurisdiction Advisory service provides a structured comparison before any capital is committed.

Relevant service areas include:

• Banking & EMI / PSP — licence applications and banking setup for payment institutions
• Crypto & VASP Licensing — DPT service applications under the PS Act
• AML & Compliance — framework design and ongoing compliance support
• Corporate Formation — Singapore entity setup and structuring
• Jurisdiction Advisory — jurisdiction selection and regulatory strategy