You’re sitting in a Singapore boardroom and someone asks the question that decides your Asia plan: can we actually service retail here next quarter, or will MAS licensing keep us sidelined another year? The room goes quiet. Everyone looks at compliance.
That question is getting sharper. The roster of licensed Digital Payment Token providers has grown, the stablecoin rulebook is live, and AML expectations just got more prescriptive. If you touch crypto in Singapore, the details now matter more than the marketing.
Here’s what’s really inside the regime, how licensing works in practice, and where people still slip up.
The Big Picture
Singapore treats crypto activities as regulated payment services. If you provide a Digital Payment Token service to the public from Singapore, you either hold a licence under the Payment Services Act or you don’t operate. The Monetary Authority of Singapore is clearly signaling a long game: let innovation breathe, but put hard fences around customer assets, conduct, and financial crime controls.
MAS has shifted from broad principles to nuts-and-bolts expectations. The burden is on firms to prove they can run crypto services with bank-grade discipline.
Who’s affected? Centralized exchanges, brokers, OTC desks, crypto payment gateways, custody outfits, and stablecoin issuers with a Singapore footprint. Even global players serving Singapore customers from abroad should assume MAS will look through cross-border setups.
How Singapore Got Here: From PSA To Full DPT Oversight
Singapore’s framework sits on the Payment Services Act (PSA), which consolidated and modernized payment rules and brought crypto service providers into scope as Digital Payment Token services. Over the past few years MAS layered on more detail: custody segregation, consumer risk controls, and a dedicated stablecoin regime. The tone is consistent. If you’re taking money, moving value, or holding tokens for customers, you’ll be supervised like a serious financial firm.
What counts as a DPT service
Think of activities like operating an exchange, broking crypto trades, facilitating token transfers, or safeguarding tokens for others. The moment you intermediate between customer and token in a business context, you step into DPT territory under the PSA.
Why timing matters
Licensing timelines have improved, but they’re still measured in quarters, not weeks. Several applicants underestimate the depth of MAS’ questions on technology risk, custody architecture, key management, and organizational competence. If your responses lean on vendor brochures or vague policies, expect delays.
Licensing, Who Needs It, And How Approval Actually Works
There are two operating scales in practice: Standard Payment Institution (SPI) for lower volumes and Major Payment Institution (MPI) for higher volumes. DPT providers that grow, or that issue MAS-regulated single-currency stablecoins above certain thresholds, will end up at MPI level. If you plan to serve mainstream retail and handle meaningful flows, build for MPI from day one.
Licence tiers without the guesswork
| Licence or role | When it typically applies | What MAS expects at a glance |
|---|---|---|
| Standard Payment Institution (SPI) | Lower activity volumes, narrower scope | Foundational governance, AML/CFT, tech risk controls, customer disclosures |
| Major Payment Institution (MPI) | Higher volumes or broader activities | More capital and audits, tighter risk management, formalized safeguarding and oversight |
| Issuer of MAS-regulated Single-Currency Stablecoins (SCS) | Outstanding SCS above MAS thresholds | 100% reserve backing in low-risk same-currency assets, independent verification, timely par redemption; MPI licence once size crosses S$5m outstanding |
How firms actually move from idea to licence
- Map your business model to specific PSA activities. Name the exact DPT services and any other payment services you’ll perform.
- Design custody and key management first. MAS will test how you segregate customer assets and who can move keys in production.
- Stand up AML/CFT controls tuned to crypto risks. That includes Travel Rule workflows and screening that can handle token movements.
- Hire fit-and-proper leadership. MAS looks closely at decision-makers’ track records and hands-on experience running risk in live shops.
- Submit with evidence, not promises. Policies, runbooks, vendor contracts, SOC reports, and test results beat slideware every time.
- Respond deeply to follow-ups. Expect rounds of questions on tech, ops, liquidity, and conflict management. Treat them like on-site exams.
Customer safeguarding is not optional
MAS’ expectations on custody are straightforward in spirit: keep customer tokens ring-fenced, auditable, and retrievable on demand. In practice that means clear trust arrangements or equivalent legal segregation, robust wallet design, documented incident playbooks, and reconciliations that actually tie to chain data. If you lend, pledge, or re-hypothecate customer assets, expect heavy scrutiny and clear, prior consent rules.
Customer Asset Safeguards And Everyday Conduct
One recurring theme across supervisory interactions is conduct. Singapore wants investors to know what they are getting into, and it wants providers to avoid sharp practices. That translates to sober risk warnings, no gamified incentives around trading, controls on retail access to high-risk features, and strict complaint handling.
Practical mechanics teams ask about
- Asset segregation: keep firm and customer tokens separate, with books that reconcile to wallet sets and on-chain balances.
- Withdrawal reliability: set service levels you can hit during stress. Document emergency key recovery and cold-to-warm procedures.
- Conflicts of interest: separate market-making from client order handling, and disclose arrangements that could bias execution.
- Retail protections: offer honest disclosures and avoid incentives that encourage excessive trading. Keep leverage in check.
Simple timeline of how the rulebook deepened
| Year | Development | Why it mattered |
|---|---|---|
| 2020 | Payment Services Act took effect for DPT services | Laid the legal base to license and supervise crypto intermediaries |
| 2023–2024 | Single-Currency Stablecoin framework operationalised | Brought reserve, audit, and redemption standards to fiat-referenced tokens |
| 2026 | MAS set out granular AML/CFT expectations for DPT providers | Raised the floor on Travel Rule, screening, and ongoing monitoring |
Stablecoin Rules That Really Bite: The SCS Framework
MAS’ Single-Currency Stablecoin regime is the closest thing to a bank-like standard that crypto has seen in Asia. If you issue a MAS-regulated SCS and there is more than S$5 million outstanding, you need a Major Payment Institution licence. Your reserves must cover 100% of tokens in circulation, held in low-risk assets in the same currency, typically very short in duration, verified independently on a recurring basis, with redemption at par within a set number of working days. These points have been summarised by industry guides that track MAS’ framework since it went live in 2023–2024, and remain the reference for issuers planning to scale in Singapore (Tazapay).
Why it matters for treasurers and token designers
The reserve rule shapes your investment book. If you can’t stretch duration, you can’t chase yield. And par redemptions on a tight clock force you to hold cash and T-bill-like instruments rather than longer corporates. The upside is credibility with banks and payment partners, which many stablecoin projects badly need.
One quiet design choice
Same-currency reserves sound obvious, but they close the door on FX carry games. If you mint a USD stablecoin, your reserves sit in USD assets. That avoids redemption slippage from currency swings during stress.
AML/CFT Expectations And The Travel Rule Reality
The other big 2026 development is clarity on financial crime controls. MAS recently published an information paper laying out supervisory expectations for DPT service providers across seven areas: how to assess token and new-product risks, enhanced customer due diligence for higher-risk clients, Travel Rule value transfer requirements and the six guiding factors MAS uses to assess Travel Rule solutions, ongoing monitoring, screening, diligence on partners and outsourcers, and staff training. Industry coverage has captured the shape of this paper and how firms are aligning their programs (VerifyVASP).
Travel Rule in production, not just on paper
Expect MAS to look for practical routing logic when counterparties can’t receive Travel Rule data, reconciliation of VASP identifiers, and controls that avoid data leakage. Screening needs to span addresses, transaction patterns, and beneficiary risk in a way that ties back to your customer’s profile.
Why this changes onboarding
Front-office timelines will stretch unless you automate risk scoring and bounce-backs. Don’t treat Travel Rule and screening as post-trade checks. Build them into quote, deposit, and withdrawal flows so compliance doesn’t become a manual choke point.
Who Is Licensed Now, And What The Roster Suggests
As of mid-July 2026, MAS’ public directory shows 38 institutions with Digital Payment Token service on their licences. That list moves, but it’s a useful barometer of who made it through the gate and how diverse the field has become, from exchanges and OTC desks to payment firms and custody specialists (Monetary Authority of Singapore — Financial Institutions Directory).
How to read the list
Check the exact activities a firm is licensed for, not just the brand name. Some only have DPT broking, others have exchange operation and custody. If you’re a customer, that matters for where your assets sit and what service levels you can reasonably expect.
Implication for market structure
With more MPI-grade shops live, liquidity and fiat ramps are stabilising. But competition will likely concentrate around firms that pair strong compliance with reliable banking. The bar to raise fresh capital also looks lower if your licence is in hand and systems have already passed testing.
Risks & What Could Go Wrong
- Regulatory drift: MAS can tighten rules if retail harms or systemic issues emerge. Plans need buffers for changing guidance.
- Banking access: de-risking by correspondent banks can impair fiat ramps even for compliant firms.
- Implementation gaps: custody, reconciliations, and key ceremonies that look fine on paper can fail under stress.
- Travel Rule fragmentation: counterparties with weak Travel Rule support create settlement friction and data-handling risk.
- Stablecoin reserve risk: duration or currency mismatches, or weak attestation cycles, can break par at the worst moment.
- Vendor dependencies: over-reliance on screening, custody, or Travel Rule vendors without strong SLA and exit plans.
- Cross-border exposure: serving users in stricter jurisdictions can trigger extra obligations or enforcement outside Singapore.
Licences don’t cancel operational risk. They just prove you built guardrails. The daily discipline still decides who survives volatility.
Frequently Asked Questions
What exactly is a Digital Payment Token service under MAS rules?
It’s a regulated activity under the Payment Services Act that covers things like operating a crypto exchange, broking token trades, transferring tokens, or safeguarding tokens for others as a business. If you intermediate between customers and tokens in Singapore, plan on being in scope.
Do I need an MPI or can I start as an SPI for DPT services?
It depends on your activity volume and scope. SPI suits smaller, narrower operations. Many firms targeting mainstream retail or significant flows eventually graduate to MPI. If you plan to issue a MAS-regulated single-currency stablecoin and grow above S$5 million outstanding, MPI will be required.
How long does a DPT licence take to obtain?
Timelines vary by complexity and the quality of your submission. Think in quarters, not weeks. MAS will probe tech risk, AML/CFT, custody, governance, and conflicts. Detailed documentation and production-grade controls shorten the process.
What does the stablecoin rule mean for reserves and redemptions?
MAS’ SCS framework requires 100% reserves in low-risk assets denominated in the same currency as the token, independent verification, and redemption at par within specified working days. Once outstanding SCS passes S$5 million, an MPI licence is required for the issuer.
How is the Travel Rule applied in Singapore for DPT providers?
MAS expects effective value transfer controls that transmit and screen originator and beneficiary data when sending or receiving between VASPs where applicable. The information paper sets out guiding factors MAS uses to assess Travel Rule solutions, alongside expectations for monitoring, screening, and training.
How can I verify whether a firm is licensed for DPT services?
Check MAS’ Financial Institutions Directory. Search the firm’s name and confirm the exact activities on its licence. Don’t rely on website badges. The directory reflects the current regulatory position.
Are algorithmic stablecoins included in the SCS framework?
The SCS regime targets fiat-referenced stablecoins with robust reserve backing, independent verification, and par redemption. Algorithmic designs without full backing do not fit those requirements and would not qualify as MAS-regulated SCS.
