A practical guide to the MAS FinTech Regulatory Sandbox — eligibility, the three tracks, what regulations stay in force, and how to decide whether to apply.

Singapore’s financial sector is among the most rigorously regulated in the world. For fintech founders and compliance officers trying to bring a new product to market, that regulatory density can feel like a barrier before the first customer is onboarded.

The MAS FinTech Regulatory Sandbox exists to address precisely that friction. It allows companies to test regulated financial services in a live market environment while MAS temporarily relaxes selected legal requirements. But the Sandbox is not a shortcut, and it is not right for every business.

This article explains how the Sandbox works, which of its three tracks suits which type of business, and — critically — when applying for the Sandbox is the wrong move and a direct licence path will serve you better.

What Is the MAS FinTech Regulatory Sandbox?

The Monetary Authority of Singapore launched the FinTech Regulatory Sandbox in 2016. Its purpose was to let companies experiment with technology-driven financial services inside a defined space and timeframe, without requiring full regulatory compliance from day one.

The core mechanics are straightforward. MAS identifies which legal and regulatory requirements it is prepared to relax for the duration of the experiment. The company then operates under those relaxed conditions, within agreed boundaries on customer numbers, transaction volumes, and geographic scope. At the end of the sandbox period, relaxed requirements expire — and the company must either qualify for a full licence or exit the market.

What the Sandbox is not: it is not a way to avoid licensing altogether. MAS is explicit on this point. The Sandbox softens certain rules for a limited time under specific conditions. It does not remove the obligation to eventually meet the full regulatory standard.

What MAS Will — and Will Not — Relax

Understanding what stays in force during the Sandbox period is as important as knowing what gets relaxed. Many applicants underestimate the compliance obligations that remain active regardless of Sandbox status.

Requirements MAS may relax (depending on the nature of the product):

• Minimum capital and asset maintenance requirements
• Credit rating requirements
• Cash balance thresholds
• Certain outsourcing guidelines
• Some licensing conditions specific to the regulated activity

Requirements that remain in force throughout the Sandbox period:

• AML/CFT obligations — anti-money laundering and counter-financing of terrorism rules continue to apply in full
• Core Payment Services Act 2019 requirements relevant to the activity
• Personal Data Protection Act (PDPA) obligations
• Consumer disclosure requirements specific to Sandbox status
• Safeguards for managing customer funds if the business ceases to operate

This distinction matters for resource planning. A company entering the Sandbox still needs a functioning AML and compliance framework from the outset — not a deferred one.

The Three Sandbox Tracks

Since its launch, the Sandbox framework has expanded from a single track to three distinct pathways. Each suits a different risk profile, product complexity, and stage of development.

1. Sandbox Express

Sandbox Express was introduced in 2019 to give firms a faster entry option for market testing in pre-defined environments. It is suited to experiments where the risks are low and already well understood by the market. MAS typically responds to Express applications within 21 days.

Currently, Sandbox Express is available only for two activity types:

• Carrying on business as an insurance broker
• Establishing or operating an organised market

In exchange for the faster approval, the conditions are pre-set and non-negotiable. Companies operating under Sandbox Express must disclose to all prospective customers that they are operating within a Sandbox, including the scope and limitations of their activities. Any breach of these conditions may result in immediate termination of the Sandbox.

The Express track is narrow by design. If your activity falls outside those two categories, Express is not an option — regardless of how low-risk your product appears.

2. Regular Sandbox

The Regular Sandbox is fully bespoke. It gives companies greater flexibility to negotiate which specific regulatory requirements are relaxed and to set the duration of the experiment based on the nature and risk profile of the product.

This is the appropriate track for complex or novel business models where a pre-defined framework would not adequately reflect the product’s risk profile. Applicants can propose the Sandbox duration in their application, but this must be supported by detailed risk management rationale.

The trade-off is time. Because MAS assesses each application on its individual merits, the evaluation process takes longer than Sandbox Express. Applicants should factor this into their go-to-market timelines.

3. Sandbox Plus

Sandbox Plus came into effect on 1 January 2022 and introduced three enhancements to the existing framework, aimed at accelerating market entry for firms introducing innovations that MAS regulates.

Sandbox Plus offers:

• Expanded eligibility — previously, only first movers (firms introducing a product with no similar existing implementation in Singapore) qualified. Sandbox Plus extended eligibility to early adopters, meaning firms that are the first to deploy a technology already seen elsewhere but not yet established in Singapore.
• Streamlined grant access — first movers can concurrently apply to enter the Sandbox and apply for a financial grant under the Financial Sector Technology and Innovation (FSTI) scheme in a single application. Eligible applicants may access funding at a 50% funding level to help cover operational costs during the testing period.
• Deal Fridays participation — eligible applicants are enrolled in a programme that connects sandbox companies with investors, providing access to mentorship and funding opportunities ahead of the Singapore FinTech Festival.

For a fintech startup that qualifies as either a first mover or early adopter and needs both regulatory room and capital runway, Sandbox Plus is the most commercially attractive of the three tracks.

Core Eligibility Criteria

Sandbox eligibility is not automatically available to any fintech company. MAS requires applicants to demonstrate several conditions before an application is even considered.

The product or service must:

• Use new or emerging technology, or apply existing technology in a genuinely innovative way
• Address a problem or deliver a clear benefit to consumers or the financial industry
• Be a regulated financial service — or one that would likely require an MAS licence if deployed at scale
• Have a clear and credible plan for broader deployment in Singapore after exiting the Sandbox

The applicant must also demonstrate:

• Sufficient financial and human resources to conduct the test and manage associated risks
• Defined test scenarios with clear boundaries and a documented exit plan
• Prior laboratory-stage testing and a working understanding of the legal and regulatory requirements that would apply on full deployment

Both MAS-regulated financial institutions and non-regulated entities — including foreign companies — may apply. That said, the Sandbox is not accessible for activities with no direct link to payments, investments, insurance, or other regulated financial services. A software tool or data analytics product that does not itself constitute a regulated activity will not qualify, regardless of how innovative it is.

There is also a 3-month cooling-off period following any rejected application. MAS will not consider a new application from the same entity during this window. This makes preparation quality critical — a premature or under-prepared submission creates a costly delay.

When the Sandbox Makes Strategic Sense

For founders and compliance officers, the Sandbox decision should be driven by one question: does my business genuinely need reduced regulatory compliance to prove viability, or am I ready to meet licensing standards today?

The Sandbox is a strong fit when:

• Your product is truly novel. If no similar financial service exists in Singapore and the regulatory treatment is genuinely unclear, the Sandbox gives you space to operate while MAS develops its supervisory approach in parallel.
• Full licensing requirements would prevent a meaningful market test. For example, if capital requirements or credit rating thresholds would consume your runway before you have validated demand, the Sandbox creates a viable path to market.
• You are a first mover or early adopter eligible for Sandbox Plus. If you qualify for the combined Sandbox and FSTI grant application, you gain both regulatory relief and financial support simultaneously — a significant advantage for capital-constrained startups.
• You need a structured dialogue with the regulator. The Sandbox process forces a detailed, documented conversation with MAS about your product and its regulatory implications. For companies in genuinely ambiguous regulatory territory, this dialogue has long-term value beyond the sandbox period itself.

When Not to Apply for the Sandbox

The Sandbox is frequently misunderstood as a general entry route for any fintech company that wants to operate in Singapore with lower compliance overhead. That framing is wrong, and acting on it can damage both timelines and regulatory standing.

The Sandbox is the wrong choice when:

• Your product already exists in Singapore. The Sandbox is not available for established products or services. If a comparable offering is already licensed and operating, you will need to pursue a standard licence directly.
• You can already meet the licensing requirements. If your product is well-understood by the market and you have the financial resources to meet capital, AML, and operational requirements, going straight to a full licence is faster and cleaner. The Sandbox adds process without benefit.
• Your activity is not a regulated financial service. The Sandbox only covers activities that constitute — or would likely constitute — regulated financial services under MAS. If your product does not touch payments, investment, insurance, or a comparable regulated category, you will not qualify.
• You cannot commit to full licensing after the sandbox period. The Sandbox assumes a clear path to full deployment. If you have no credible plan to obtain a standard licence upon exit, MAS will view your application unfavourably. The Sandbox is a transition, not a permanent operating model.
• Speed to market is the primary concern. Sandbox applications — particularly for the Regular Sandbox — require significant preparation, structured testing plans, and ongoing regulatory engagement throughout the experiment period. For companies that can qualify for a standard licence, the direct licensing route is often faster in practice.

For companies operating in payments, digital assets, forex, or crypto services, the relevant licensing pathways under the Payment Services Act (whose Digital Payment Token provisions cover crypto activities — Singapore has no separate VASP licence class) or the Securities and Futures Act are well-established. In many cases, engaging directly with those licensing pathways is a more efficient route to market than the Sandbox. GSS Legal’s jurisdiction advisory and VASP licensing work in Singapore reflects exactly this — most clients with defined products and adequate resources move faster through direct licensing than through a sandbox period.

How to Apply: Process and Timelines

All three Sandbox tracks have no application fee. The submission route depends on the applicant’s regulatory status.

• MAS-regulated financial institutions submit to their MAS Review Officer directly.
• All other entities — including foreign companies and unregulated startups — submit by email to [email protected].

Each application should be prepared with clear internal ownership across functions:

• The product lead is responsible for the test plan and technology architecture.
• The compliance officer handles the AML/CFT justifications and regulatory relief rationale.
• Legal counsel covers consumer disclosures, PDPA obligations, and contractual documentation.

For Sandbox Express, MAS will respond within 21 days. For the Regular Sandbox and Sandbox Plus, timelines are longer and depend on the complexity of the application. Incomplete applications are a common cause of delays — all annexures must be attached and signed by authorised company representatives in the format MAS specifies.

MAS allows adjustments to proposals during the evaluation process. Given the exploratory nature of the Sandbox, the regulator will work with applicants to refine boundary conditions and test parameters before final approval. However, any material changes to the financial service during the experimentation stage require a formal application to MAS at least one month in advance.

Exiting the Sandbox: What Comes Next

The end of the Sandbox period is not the end of the regulatory journey — it is the beginning of the full licensing process. When the sandbox period expires, all relaxed regulatory requirements revert to the standard baseline. The company must then either meet all applicable legal and regulatory requirements and proceed to full deployment, or exit the market.

If both the company and MAS are satisfied that the experiment achieved its intended outcomes, the company may deploy the product at scale. Firms graduating from the Sandbox are provided with structured guidance on the requirements for full regulatory authorisation, which smooths the transition from experimental to mainstream operations.

If full compliance cannot be achieved by the sandbox expiry date, the company may apply for an extension — but this should not be relied upon as a default. Extension applications must be made at least one month before expiry and are reviewed case by case. MAS may grant an extension if the company needs additional time to incorporate customer feedback or resolve specific product deficiencies. Extensions are not automatic.

For companies in the crypto and VASP space, the payments and PSP sector, or forex and FX licensing, exit planning should begin well before the sandbox period ends. The compliance infrastructure, banking relationships, and regulatory documentation needed for a full licence take time to build. Starting that process at the end of the sandbox period — rather than in parallel with it — is a common and costly mistake.

The Sandbox Is a Tool, Not a Strategy

The MAS FinTech Regulatory Sandbox serves a specific purpose: giving genuinely novel regulated financial services a structured, time-limited space to prove viability. It has worked well for companies operating in ambiguous regulatory territory — particularly those in digital asset custody, innovative payment infrastructure, and early-stage insurance technology.

But for the majority of fintech companies considering Singapore as a licensing jurisdiction, the Sandbox is not the right first step. If your product is defined, your compliance infrastructure is in place, and a recognised licensing pathway exists, a direct licence application will get you to market faster and with fewer transitional obligations.

The decision requires a clear-eyed assessment of your product’s novelty, your compliance readiness, and your go-to-market timeline. Making the wrong call adds months to your timeline and, in the case of a rejected application, triggers a 3-month cooling-off period that compounds the cost.