A plain-English guide to the Securities and Futures Act Singapore — covering the CMS licence, market conduct rules, prospectus obligations, and key compliance checkpoints.

The Securities and Futures Act 2001 (SFA) is Singapore’s principal statute for capital markets. It determines who needs a licence, what they must disclose when raising money, and what conduct is prohibited across all market participants — licensed or not.

For founders, fund managers, forex operators, and corporate finance advisers, the SFA is not background reading. It is the operative compliance framework. Get the licensing question wrong and you are running an unlicensed regulated business. Get the market conduct question wrong and you face civil penalties or criminal prosecution — regardless of whether you hold a licence.

This guide maps the SFA part by part, in plain English. It explains what each section requires, who it applies to, and what the practical compliance obligation looks like. It is written for decision-makers — not for those who want a surface summary, but for those who need to act on the information.

What the Securities and Futures Act Covers

The SFA is administered by the Monetary Authority of Singapore (MAS). It governs four distinct areas of regulation: the licensing of capital markets intermediaries, the rules for offering securities and collective investment schemes (CIS), the prohibition of market misconduct, and the framework for approved exchanges and clearing facilities.

The statute was originally enacted in 2001 and has been amended materially several times since — most recently through the Financial Institutions (Miscellaneous Amendments) Act 2024, parts of which took effect in January 2025. Businesses must work from the current consolidated version available on Singapore Statutes Online, not from older summaries.

The SFA sits alongside the Financial Advisers Act (FAA), which governs the giving of financial advice, and the Payment Services Act (PSA), which covers digital payment tokens. Where a business touches more than one statute — for example, a firm that both manages funds and advises on investments — compliance obligations must be addressed under each applicable regime separately.

Who the SFA Applies To

The SFA applies to any person carrying on a regulated activity in Singapore. That includes Singapore-incorporated entities and, in certain circumstances, foreign entities with a Singapore nexus. The market conduct prohibitions — covering insider trading and market manipulation — apply to all persons, not only to licensed firms.

The following categories of business are most directly affected:

• Fund managers (retail, accredited/institutional, and venture capital)
• Broker-dealers in securities and derivatives
• Corporate finance advisers
• Custodians of securities
• Operators of approved exchanges and clearing facilities
• Companies conducting securities offerings or CIS launches
• Providers of product financing
• Real estate investment trust (REIT) managers

Directors of licensed entities carry personal responsibility for the firm’s compliance with its licence conditions. Board members should understand the regime even if they are not involved in day-to-day operations.

The Capital Markets Services Licence: Section 82 and the Second Schedule

Section 82 of the SFA is the foundational rule. It provides that no person may carry on a business in any regulated activity — or hold themselves out as doing so — unless they hold a Capital Markets Services (CMS) licence for that activity, or qualify for an exemption. The prohibition covers carrying on the activity as a business; casual or incidental conduct is a separate analysis.

A CMS licence is activity-specific. A company dealing in capital markets products holds a different permission from one conducting fund management. A single CMS licence can cover multiple regulated activities, but each activity must be separately specified on the licence, and the conditions scale accordingly.

MAS grants CMS licences only to corporations. As a practical matter, this means a Singapore-incorporated private limited company is the standard vehicle. In exceptional cases, MAS has granted CMS licences to branches of foreign-incorporated entities, but the branch must demonstrate it is subject to proper management oversight and can comply with all applicable laws.

The Seven Regulated Activities

The regulated activities are defined in the Second Schedule to the SFA. Their definitions are broad. A person carrying on any activity that forms an integral part of the value chain of a regulated activity may be considered to be carrying on that activity itself — meaning firms cannot structure around the definitions simply by outsourcing one step.

The seven regulated activities are:

• Dealing in capital markets products — covering securities, units in a CIS, OTC derivatives contracts, exchange-traded derivatives, and spot foreign exchange
• Advising on corporate finance — including advice on takeovers, mergers, and securities issuances
• Fund management — managing assets belonging to external investors
• Real estate investment trust management — managing a REIT listed on an approved exchange
• Securities financing — financing a client’s acquisition of securities against those securities as collateral
• Providing custodial services for securities — safekeeping and administration of client securities
• Providing credit rating services — rating financial instruments or issuers

Operating a market or a clearing facility is regulated separately under the SFA, outside the CMS licensing regime — these functions require their own MAS authorisation, not a CMS licence.

The starting point for any SFA compliance analysis is determining which of these activities a business conducts, or will conduct. That question drives every downstream obligation — licence type, base capital, personnel requirements, and conduct rules.

Exemptions from Licensing: Section 99

Section 99 of the SFA and the Second Schedule to the Securities and Futures (Licensing and Conduct of Business) Regulations set out the classes of persons exempt from the CMS licence requirement. The main exempt categories include:

• Banks — licensed under the Banking Act conducting regulated activities under the SFA
• Merchant banks — approved under the MAS Act
• Finance companies — licensed under the Finance Companies Act
• Insurers — licensed under the Insurance Act
• Exempt futures brokers — dealing only in futures contracts within prescribed conditions
• Single family offices — managing only one family’s assets; file a Notice of Commencement with MAS; the exemption falls away if third-party capital is accepted

Relying on an exemption requires the same rigour as applying for a licence. The exemption must actually apply to the specific regulated activity the business is conducting, and the reliance must be documented. Operating on a mistaken assumption of exemption is not a defence against enforcement.

Fund Manager Licence Tiers

Fund management is the most common regulated activity for which MAS issues CMS licences. MAS applies a tiered framework depending on the investor base and the nature of the fund. Understanding which tier applies is critical before preparing a licence application.

Fund management companies are expected to conduct substantive fund management activities — portfolio management, investment research, or sub-advisory — in Singapore. Firms that engage only in marketing or client servicing without substantive portfolio work do not satisfy MAS’s requirements.

For businesses exploring the intersection of fund management and digital assets, the SFA’s treatment of capital markets products increasingly overlaps with the Payment Services Act. The classification of the product — whether it is a capital markets product or a digital payment token — determines which statute governs the activity. That is an analysis that must be done before structuring any offering. See our Crypto and VASP Licensing guidance for the digital asset licensing framework in Singapore.

Key Personnel and Fit-and-Proper Requirements

A CMS licence application requires the proposed entity to demonstrate it has adequate human capital in place. MAS evaluates all key personnel — directors, the CEO, and appointed representatives — against its Guidelines on Fit and Proper Criteria. A clean regulatory history is expected; criminal convictions, bankruptcies, or adverse regulatory findings in any jurisdiction are material disclosures.

The minimum personnel requirements for a CMS licence (other than retail LFMC and REIT managers) are:

• Directors: minimum two, with at least one resident in Singapore
• CEO: resident in Singapore, with at least 10 years of relevant experience
• Representatives: minimum two full-time Singapore-based individuals for each regulated activity

Representatives — the individuals who conduct the regulated activity on behalf of the CMS licensee — must be formally appointed and notified to MAS. MAS maintains a public Register of Representatives. A licensed firm cannot allow an unregistered person to conduct a regulated activity on its behalf.

Offers of Investments and Prospectus Obligations: Part 13

Part 13 of the SFA governs offers of securities and securities-based derivatives contracts to investors in Singapore. The default position is that any such offer must be made in, or accompanied by, a prospectus that is lodged and registered with MAS and complies with the prescribed content requirements. This is not a light obligation — a registered prospectus requires legal due diligence, audited financials, and ongoing update obligations.

Exemptions from prospectus registration are available for the following offer types:

• Offers to accredited investors — under Section 275 of the SFA, with investor status verified and documented for each subscriber
• Offers to institutional investors — under the same section, applying to banks, insurers, and other MAS-defined institutional counterparties
• Small personal offers — where total funds raised do not exceed the prescribed threshold within any 12-month period
• Private placement exemptions — subject to a cap on the number of offerees

Using an exemption does not remove all disclosure obligations — it removes the requirement for a MAS-registered prospectus. Offering documents must still be accurate and complete. The SFA provides for civil liability and criminal penalties for false or misleading statements in any offering document, regardless of whether it is a full registered prospectus or a private placement memorandum. Importantly, investors who receive offers under an accredited investor or institutional investor exemption lose access to certain protections, including compensation from the fidelity fund — a consequence that must be disclosed.

Market Conduct Prohibitions: Part 12

Part 12 of the SFA contains the market conduct regime. Its prohibitions apply to all persons — licensed intermediaries, corporate insiders, and members of the public alike. There is no carve-out for unlicensed parties, and enforcement reach extends to transactions conducted overseas where the effect is felt in Singapore.

The principal prohibitions are:

• Insider trading — Sections 218 and 219 prohibit dealing in securities, or procuring another person to deal, while in possession of material, non-public, price-sensitive information. Liability under the SFA is based on possession of the information. It is not necessary to prove the person intended to use it.
• False trading and market rigging — creating a false or misleading appearance of active trading or of the price of securities
• Market manipulation — transactions or conduct that artificially affect the price or volume of securities
• Employment of deceptive devices — schemes to defraud or deceive in connection with capital markets products
• Dissemination of false or misleading information — publishing statements likely to have a material effect on the price of securities when the person knows they are false

MAS enforces Part 12 through two parallel tracks. The civil penalty regime under Section 232 allows MAS to agree a penalty with a wrongdoer — up to three times the profit made or loss avoided, subject to a minimum of SGD 50,000 for individuals and SGD 100,000 for corporations. The criminal track allows prosecution for a fine of up to SGD 250,000 and/or imprisonment of up to seven years. Both tracks are actively used: MAS imposed civil penalties for insider trading in 2025 and 2026 based on joint investigations with the Commercial Affairs Department.

Ongoing Obligations After Licensing

Obtaining a CMS licence is the start, not the end, of the compliance obligation. Licensed firms face continuing requirements under the Securities and Futures (Licensing and Conduct of Business) Regulations and the Securities and Futures (Financial and Margin Requirements for Holders of Capital Markets Services Licences) Regulations, both of which are subsidiary legislation under the SFA.

The main ongoing obligations include:

• Base capital maintenance: the minimum financial resources must be maintained at all times, not just at application
• Risk-based capital: firms must calculate and maintain financial resources against a risk-weighted measure of their business
• Annual audits: audited accounts must be submitted within prescribed timeframes — five months from financial year-end for most licensees
• Representative notifications: MAS must be notified of every appointment, cessation, or change involving representatives
• Change-of-control approval: under Section 97A of the SFA, any person seeking effective control of a CMS licensee must obtain MAS approval (the timing requirements for this were amended in January 2025 under the FI Amendment Act)
• AML/CFT compliance: CMS licensees are subject to MAS’s AML/CFT notices, which require customer due diligence, transaction monitoring, and suspicious transaction reporting
• Conduct of business rules: client classification, suitability assessments, disclosure obligations, and conflict-of-interest management

Breach of any ongoing obligation can result in licence revocation, a prohibition order against key personnel, composition penalties, or criminal referral. MAS’s stated enforcement priorities for 2025–26 focus on market misconduct, AML/CFT failures, and technology risk.

For firms that need to build or review these frameworks, GSS Legal’s AML and Compliance service covers the full MAS AML/CFT framework, from policy documentation through to suspicious transaction reporting procedures.

Compliance Map: Obligation by Obligation

The table below maps the key SFA compliance obligations to the relevant provision and the practical question each creates for a business. Use it as a starting checklist, not a substitute for legal advice.

Common Compliance Mistakes

MAS enforcement actions and supervisory findings consistently reveal the same categories of failure. The following are the most frequent mistakes, each of which carries real consequences:

• Operating before the licence is granted. Section 82 prohibits conducting regulated activities without a licence. Commencing business while an application is pending is not a safe position.
• Assuming an exemption applies without analysis. The exemption must be specifically identified, assessed against the actual activity being conducted, and documented. A general belief that an exemption might apply is not enough.
• Failing to verify accredited investor status. Using the accredited investor exemption under Section 275 without formally verifying and recording each investor’s status exposes the offeror to an unlawful offer.
• Inadequate offering documents. Even where a prospectus is not required, an offering document that contains false or misleading statements creates civil and criminal liability under the SFA.
• Insufficient AML/CFT infrastructure at go-live. MAS expects compliance frameworks to be operational from day one of business — not built after the first client is onboarded.
• Treating market conduct rules as applying only to traders. Corporate insiders — directors, senior management, legal counsel — are equally caught by the insider trading provisions whenever they possess material, non-public information.

Businesses operating in adjacent regulated spaces — forex, digital assets, iGaming payment processing — should also assess whether their Singapore activities create a regulated activity trigger under the SFA, separately from their obligations under the Payment Services Act or other statutes. GSS Legal’s Jurisdiction Advisory service covers exactly this multi-statute mapping exercise for businesses entering the Singapore market.

Frequently Asked Questions

Is the SFA administered by MAS or ACRA?

MAS administers the Securities and Futures Act. ACRA administers the Companies Act 1967. A regulated firm incorporated in Singapore typically has obligations under both — MAS governs the regulated activity; ACRA governs corporate filing, directorship, and shareholder matters.

Do I need a CMS licence if I only serve accredited investors?

Serving only accredited or institutional investors does not remove the need for a CMS licence if you are carrying on a regulated activity. An accredited/institutional Licensed Fund Management Company (A/I LFMC) still requires a CMS licence — the investor type affects the category of licence and the applicable capital requirement, not whether a licence is required at all.

How long does a CMS licence application take?

MAS’s typical review period runs six to eight months for a complete application, with four months achievable only in the best case; average processing times have lengthened in recent years. Complex applications — those involving novel business models, extensive overseas structures, or multiple regulated activities — take longer. Incomplete applications restart the clock. Preparation quality is the primary variable within an applicant’s control.

Are the market conduct rules extraterritorial?

Yes. The SFA’s market conduct provisions can apply to transactions conducted outside Singapore where the securities are listed on a Singapore exchange or the conduct has a material effect in Singapore. MAS has pursued enforcement in cross-border cases and conducts joint investigations with the Commercial Affairs Department where criminal conduct is suspected.

Where can I find the official SFA text?

The consolidated SFA is published on Singapore Statutes Online (sso.agc.gov.sg). MAS publishes the relevant subsidiary legislation, notices, guidelines, and FAQs on its website (mas.gov.sg). Always work from the current version — the statute has been amended multiple times, and older summaries may not reflect current requirements.

Working With the SFA in Practice

The Securities and Futures Act creates layered obligations that interact across licensing, disclosure, market conduct, and ongoing supervision. No single checklist replaces a structured compliance analysis, but the framework above gives decision-makers a clear starting point: identify the regulated activity, assess whether a licence or exemption applies, confirm the capital and personnel requirements, map the offering against the prospectus rules, and build conduct and AML frameworks before opening for business.

The SFA also does not operate in isolation. For businesses with digital asset components, the VASP licensing framework under the Payment Services Act runs in parallel. For forex and CFD operators, the Forex and FX Licensing regime under the SFA’s dealing-in-capital-markets-products permission is the operative path. And for corporate formation prior to any licence application, a Singapore entity needs to be structured correctly from the outset — see our Corporate Formation service for the setup framework.

GSS Legal advises clients on SFA licensing from jurisdiction selection through to application, go-live, and long-term regulatory stewardship. Our Singapore desk works directly with clients on CMS licence applications, AML/CFT framework builds, and multi-statute compliance mapping across the SFA, PSA, and FAA. Explore our full range of services or review our success cases for context on what regulated licensing looks like in practice.