A practical guide to Singapore's Major Payment Institution (MPI) licence under the PSA — covering thresholds, requirements, the application process, and post-licensing obligations.

Singapore’s payment services regulatory framework is built around the Payment Services Act 2019 (PSA), administered by the Monetary Authority of Singapore (MAS). At its apex sits the Major Payment Institution (MPI) licence — the authorisation required for any operator conducting regulated payment services at scale, without transaction volume restrictions.

For founders, compliance officers, and legal counsel assessing market entry or expansion, understanding the MPI regime is not optional. Operating regulated payment services in Singapore without the correct licence is a criminal offence under Section 5 of the PSA. Getting the licence right from the start matters — both for regulatory approval and for commercial credibility with correspondent banks, institutional partners, and investors.

This guide covers who needs an MPI licence, how it differs from the Standard Payment Institution (SPI) tier, what MAS requires, and how to navigate the application process. It reflects the amended Guidelines on Licensing for Payment Service Providers (PS-G01), updated in 2024 and effective in stages through October 2025.

What Is a Major Payment Institution Licence?

A Major Payment Institution licence is issued by MAS under the PSA to companies that conduct one or more of seven defined regulated payment services in Singapore — without being subject to the transaction volume caps that apply to Standard Payment Institutions.

The PSA came into force on 28 January 2020, consolidating two earlier statutes — the Payment Systems (Oversight) Act and the Money-Changing and Remittance Businesses Act — into a single, activities-based licensing framework. The Payment Services (Amendment) Act 2021 significantly expanded the regulated perimeter, with expanded obligations commencing in tranches from 4 April 2024.

The MPI licence sits at the top tier of a three-class structure. The other two classes are the Standard Payment Institution (SPI) licence and the Money-Changing Licence. The MPI is mandatory for businesses operating at a scale that exceeds SPI-level thresholds, or for those offering certain higher-risk services like Digital Payment Token (DPT) services where institutional-grade compliance is expected from the outset.

Who Needs an MPI Licence?

Any business providing regulated payment services in Singapore “by way of business” must hold a licence. MAS applies this test broadly: a digital platform marketed to Singapore residents and priced in Singapore dollars is treated as Singapore-facing, regardless of where the company is incorporated or where its servers are hosted.

An MPI licence is required when any of the following apply:

• Monthly transaction value for any single regulated payment service exceeds SGD 3 million (averaged over a calendar year).
• Monthly transaction value across two or more regulated payment services combined exceeds SGD 6 million.
• Daily outstanding e-money issued reaches or exceeds SGD 5 million.
• The business model involves DPT services, cross-border money transfers, merchant acquisition, or e-money issuance at meaningful scale, where the operator wants no transaction ceiling constraining growth.

Businesses that anticipate reaching these thresholds within a 12-month horizon are generally advised to apply for an MPI licence from the outset. Upgrading from SPI to MPI later requires a separate variation application, additional compliance work, and additional time — making early planning the more efficient path.

MPI vs Standard Payment Institution: Key Differences

The choice between an SPI and an MPI licence has direct implications for capital planning, compliance obligations, and operational scalability. The table below summarises the primary differences.

Breaching SPI threshold limits is a regulatory event requiring either an upgrade to MPI status or a MAS-accepted remediation plan. Compliance teams should monitor transaction volumes continuously against these thresholds.

Regulated Payment Services Covered by an MPI Licence

The PSA defines seven categories of regulated payment service. An MPI may be licensed to conduct one or more of the following:

• Account issuance service — issuing payment accounts such as e-wallets, stored-value cards, and multi-currency accounts.
• Domestic money transfer service — transferring funds between parties within Singapore, including payment gateway operations.
• Cross-border money transfer service — inbound and outbound international remittances and cross-border fund transfers.
• Merchant acquisition service — processing and settling payment transactions on behalf of merchants, including point-of-sale and online payment gateways.
• E-money issuance service — issuing electronic money usable for payments and transfers.
• Digital Payment Token (DPT) service — buying, selling, or facilitating the exchange of cryptocurrencies; operating custodian wallet services; and facilitating DPT transfers.
• Money-changing service — buying or selling foreign currency notes.

Each service category carries its own compliance obligations. DPT services attract the most intensive regulatory requirements, including a mandatory independent external auditor (EA) assessment covering AML/CFT and consumer protection, introduced with effect from August 2024.

If your business model touches crypto or digital asset services, it is essential to map each product feature to the correct regulated activity category before submitting any application. A legal opinion from a Singapore law firm with PSA experience is now required for all new MPI applications.

Eligibility Requirements

MAS assesses MPI applicants against a structured set of eligibility criteria. Meeting the capital threshold alone is not sufficient. The following conditions must all be satisfied:

• Corporate structure — the applicant must be a Singapore-incorporated company or a Singapore branch of a foreign corporation registered with ACRA. MAS will not process an application for an entity that does not yet legally exist.
• Registered office — a permanent place of business or registered office in Singapore where books and records can be securely held.
• Director residency — at least one executive director who is a Singapore citizen or PR, or one EP executive director plus one citizen/PR director.
• Fit and Proper — all directors, the CEO, and any individual holding 10% or more of shares must satisfy MAS’s fit-and-proper criteria, covering integrity, competence, and financial soundness.
• Compliance officer — a Singapore-based compliance officer must be appointed, with accountability for AML/CFT obligations and direct availability to MAS.
• Compliance arrangements — the applicant must have documented plans for compliance arrangements proportionate to the nature, scale, and complexity of its operations.

MAS takes a risk-based approach to assessing applications. The quality of governance documentation, the credibility of the business plan, and the depth of the compliance programme all influence the outcome and the speed of review.

Capital and Security Deposit Requirements

Capital requirements for an MPI licence are higher than for an SPI and must be met at the time of application, not at the point of approval.

Minimum base capital:

• SGD 250,000 — for most regulated payment services.

Capital must be maintained on an ongoing basis. MAS expects a buffer above the minimum, calibrated to the scale and risk profile of the business model.

Security deposit: Before commencing business, MPI applicants must provide a cash deposit with MAS or a bank guarantee in the prescribed format.

• SGD 100,000 — for operators whose projected monthly transactions do not exceed SGD 6 million.
• SGD 200,000 — for all other cases.

MPIs that issue e-money or hold relevant customer money must safeguard those funds. DPT customer tokens must be segregated under the consumer-protection rules. These funds must be held in a trust account at a licensed Singapore bank or through a qualifying security bond, with daily reconciliation required.

If your business requires structuring both capital and banking arrangements, GSS Legal’s Banking and EMI/PSP advisory covers the full setup from entity formation through to correspondent account establishment.

AML/CFT and Compliance Obligations

MAS expects a complete, operationalised AML/CFT programme — not a policy document. The distinction matters. On inspection, MAS examiners look for evidence of a live, tested compliance programme, not templates sitting in a folder.

Core AML/CFT requirements for an MPI include:

• A risk-based enterprise-level ML/TF risk assessment covering geographies, products, channels, and customer profiles including Politically Exposed Persons (PEPs) and high-risk entities.
• Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) procedures for both retail (B2C) and corporate (B2B/KYB) clients, including beneficial ownership verification.
• Automated sanctions screening against OFAC, UN, EU, and MAS-prescribed lists.
• A transaction monitoring programme with documented triggering rules, thresholds, and escalation procedures.
• Suspicious Transaction Report (STR) procedures with staff training and audit trails.
• Independent annual review of AML/CFT effectiveness, which MAS views positively.

For DPT services, additional requirements apply under PS Notices PSN01 and PSN02, including Travel Rule compliance for DPT transfers of SGD 1,500 or more. The originating institution must transmit the originator’s full name, account number, and country of residence to the beneficiary institution at the time of transfer.

Applicants that treat compliance as a box-ticking exercise are routinely required to rework their applications before MAS proceeds. Building a credible, evidence-based compliance function from the outset is both a regulatory requirement and a commercial asset when negotiating correspondent banking relationships. GSS Legal’s AML and compliance practice covers programme design, risk assessment, and ongoing stewardship.

How to Apply: Step-by-Step

The MPI application is submitted through the MAS portal (GoBusiness). Each step below represents a distinct workstream that should be completed before the submission date.

1. Incorporate the applicant entity in Singapore — Register the company with ACRA and establish a permanent place of business. The entity must exist as a legal person before MAS will process any application. Appoint the required local director and compliance officer at this stage.
2. Map business activities to regulated services — Identify each product feature and operational flow against the seven PSA service categories. This mapping underpins the legal opinion now required for all new MPI applications. The legal opinion must be issued by a Singapore law firm with PSA experience and must include an assessment of whether each proposed service constitutes a regulated payment service under the PSA.
3. Prepare the business plan and financial model — MAS expects a detailed, realistic business plan covering the proposed services, target markets, projected transaction volumes, unit economics, and a financial model demonstrating sustainability. Volume projections determine whether you fall under SPI or MPI thresholds and drive the capital and security deposit calculations.
4. Design and document the compliance programme — Build the AML/CFT programme from scratch against your risk profile. This includes the risk assessment, CDD/EDD procedures, sanctions screening setup, transaction monitoring framework, STR process, governance matrix, and staff training plan. For DPT services, commission the independent external auditor assessment covering AML/CFT and consumer protection.
5. Establish technology and operational infrastructure — MAS assesses information security under its Technology Risk Management (TRM) Guidelines. Document the IT architecture, data governance, incident response plan, and Business Continuity Plan (BCP). DPT applicants will face additional scrutiny on cybersecurity and customer asset segregation.
6. Assemble and submit the application — Complete the MAS application forms and attach all supporting documents: legal opinion, director and beneficial owner dossiers (including Fit and Proper declarations), business plan, compliance programme documentation, technology risk assessments, and where required, the independent EA report. Pay the application fee of SGD 1,500.
7. Respond to MAS queries — MAS will typically issue queries during its review. Incomplete or unclear submissions may be placed on a formal Case-on-Hold for up to six months. Responding promptly, accurately, and with supporting evidence shortens the review cycle materially.
8. Satisfy pre-commencement requirements — Once MAS issues an approval-in-principle, the applicant must complete the security deposit, confirm capital adequacy, and finalise safeguarding arrangements before receiving the licence to commence business.

For operators combining payment services with foreign exchange activities or VASP/DPT licensing, the regulatory perimeters need to be carefully delineated across each activity before submission. Conflating activities or under-specifying the scope of services is a common cause of application delay.

Timeline and Government Fees

MAS does not target a fixed review period. In practice, the full cycle from incorporation through to licence approval typically runs 12 months or more, with no firm upper bound, depending on the complexity of the business model and the quality of the initial submission.

• DPT services applications, which require an independent external auditor report, may extend towards the upper end of this range or beyond where MAS raises multiple rounds of queries.
• Incomplete applications are the most common cause of extended timelines. A Case-on-Hold designation adds weeks or months.
• Engaging with MAS through a pre-submission meeting — where the regulator provides informal guidance on business model classification and compliance expectations — reduces the risk of fundamental reworking at a later stage.

Government fees:

• Application fee: SGD 1,500.
• Annual licence fee: SGD 5,000 (flat).

These government fees represent a fraction of total project cost. The more material budget items are legal and advisory fees, compliance programme development, technology infrastructure, capital, and the security deposit. Modelling total cost of ownership before starting the process — including first-year operational OPEX for the compliance function — is essential for any credible investor or board presentation.

Post-Licensing Obligations

Receiving the MPI licence is the beginning of the regulatory relationship, not the end. MAS maintains active supervisory oversight of all licensees. Key ongoing obligations include:

• Annual audit and regulatory reporting — MPI licensees must submit periodic reports to MAS and undergo annual independent audits of financial statements and compliance controls.
• Ongoing AML/CFT compliance — transaction monitoring rules, sanctions screening, and CDD procedures must be kept current. MAS expects compliance programmes to evolve with the business.
• Safeguarding and daily reconciliation — operators holding customer funds must reconcile trust accounts daily and report discrepancies.
• Change of control notifications — any material change in ownership structure (crossing Section 28 PSA thresholds) requires MAS notification or prior approval.
• Licence variation for new activities — adding any new regulated payment service requires a formal variation application. This process should be scoped out in advance as part of product roadmap planning.
• MAS on-site inspections — MAS conducts supervisory inspections and focuses on live evidence of AML/CFT controls, technology risk management, incident logs, and outsourcing governance.

Operators planning cross-border expansion from a Singapore MPI base — into the EU, the Gulf, or other Asian markets — should assess each target jurisdiction’s regulatory requirements early. Holding an MPI licence from MAS carries significant credibility with foreign regulators and correspondent banks, but does not substitute for local authorisation in each market. GSS Legal’s Jurisdiction Advisory service covers multi-jurisdiction licensing strategy for payment operators building regional or global footprints.

How GSS Legal Supports MPI Applicants

GSS Legal (by Gofaizen & Sherle) has delivered over 800 licences across 50+ jurisdictions, including MAS-regulated payment institutions in Singapore. The firm operates an Asia desk in Singapore, working directly with MAS on application strategy, pre-submission engagement, and post-licensing stewardship.

For MPI applicants, GSS Legal provides end-to-end support across the full project lifecycle:

• Corporate formation — Singapore entity incorporation, board structuring, and local director and compliance officer placement.
• Jurisdiction advisory — threshold mapping, activity scoping, and MPI vs SPI determination based on your actual business model and 12-month projections.
• AML and compliance programme design — risk assessment, CDD/EDD procedures, sanctions screening implementation, transaction monitoring framework, and STR procedures.
• Banking and EMI/PSP setup — correspondent banking relationships, trust account structuring, and safeguarding compliance.
• Application management — full preparation of MAS application forms, legal opinion coordination, supporting documentation, and MAS query management through to approval-in-principle.

GSS Legal’s approach is practical: every deliverable is tied to a specific regulatory outcome. Clients engage with a team that has guided payment operators from incorporation through first transactions, across Singapore, the EU, the UAE, Southeast Asia, and offshore markets. See client success cases or explore all services to understand the full scope of support available.

Singapore’s MPI licence is a substantive regulatory authorisation. It requires real governance, a credible compliance programme, adequate capital, and a business model that MAS can assess clearly. The 2024 and 2025 amendments to the PSA and the MAS Guidelines have raised the bar further, particularly for DPT services and complex business models.

The most common reasons for delay or rejection are avoidable: thin risk assessments, incomplete director dossiers, compliance officers without relevant Singapore experience, and ambiguous business model descriptions. Investing in the preparation phase — before clicking submit — is where application outcomes are determined.

For operators building a payments business in Asia, a well-structured MPI licence from MAS is one of the strongest regulatory credentials available. It opens correspondent banking relationships, facilitates institutional partnerships, and provides a credible foundation for regional expansion.