DeFi Intel

MAS PSA — Singapore Payment Services Act Licence

2,505 words13 min readBy DeFi Intel Research Desk

Executive summary

Singapore's Payment Services Act 2019 created the world's first comprehensive digital-payment-token licensing regime within a unified payments statute. Three licence tiers — Money-Changing Licence, Standard Payment Institution, and Major Payment Institution — gate access to seven payment activities including DPT services, with capital requirements scaling from 100,000 to 250,000 Singapore dollars and ongoing capital floors layered on top. After a deliberately slow grant pace through 2021-23, MAS issued a wave of Major Payment Institution licences in 2023-24 covering Coinbase Singapore, Crypto.com, Ripple, Sygnum, and others. The August 2023 stablecoin framework added a single-currency stablecoin regime that became a benchmark for the GENIUS Act foreign-issuer designation pipeline. As of Q1 2026 Singapore is positioned as one of the three most consequential crypto jurisdictions globally alongside the EU and the United States.

Statutory architecture

The Payment Services Act 2019, Act No. 2 of 2019, was enacted by the Singapore Parliament on 14 January 2019 and came into operational effect on 28 January 2020 following the publication of MAS Notice PS-N01 setting out the implementation framework. The PSA replaced and consolidated the prior Payment Systems (Oversight) Act 2006 and the Money-Changing and Remittance Businesses Act, creating a single statute covering seven enumerated activities: account-issuance services, domestic money-transfer services, cross-border money-transfer services, merchant-acquisition services, e-money issuance services, digital payment token (DPT) services, and money-changing services. DPT services under section 2 of the Act are defined to include any service of dealing in digital payment tokens, any service of facilitating the exchange of digital payment tokens, any service of accepting custody of digital payment tokens for the purpose of dealing or facilitating exchange, and (added by amendment in 2021) cross-border transfer services involving digital payment tokens and brokering of digital payment tokens. The 2021 PS Act Amendment expanded scope to capture custody-only providers and brokers — closing a gap that had allowed several firms to operate without licensing — and introduced the framework for travel-rule compliance under MAS Notice PS-N02. The 2022 amendments added consumer-protection guardrails including restrictions on retail credit and leverage, prohibitions on retail incentives and gamification, and a series of Notices issued in 2023 covering retail-customer suitability. The August 2023 MAS Stablecoin Framework — a separate regulatory regime layered onto PSA — created the Single-Currency Stablecoin (SCS) category with prescriptive 1:1 reserve, audit, and disclosure requirements. The PSA is supervised by MAS under the broader Monetary Authority of Singapore Act and connects to the Financial Services and Markets Act 2022 for AML and conduct supervision; AML/CFT requirements derive from MAS Notice PS-N02 implementing the FATF Recommendations.

License tiers and categories

PSA recognises three licence tiers, distinguished by both the activities permitted and the volumetric thresholds for ongoing operation. The Money-Changing Licence covers only money-changing activity — buying and selling foreign currency for cash or specified equivalents — and is not relevant for crypto operations. The Standard Payment Institution (SPI) licence permits any combination of the seven activities (including DPT services) subject to volumetric limits: 3 million Singapore dollars per month for any single payment service, 6 million Singapore dollars per month aggregate across all services, and 5 million Singapore dollars in average daily e-money float. The Major Payment Institution (MPI) licence covers the same seven activities without volumetric limits and is the standard licence held by significant crypto operators. Capital requirements scale by tier and by activity: SPI base capital is 100,000 Singapore dollars; MPI base capital is 250,000 Singapore dollars for any single activity, rising to 500,000 Singapore dollars for combinations including e-money issuance. Security deposits with MAS layer additional requirements: 100,000 Singapore dollars for SPI and 200,000 to 1,000,000 Singapore dollars for MPI scaled to monthly transaction value. The August 2023 Single-Currency Stablecoin (SCS) framework adds a separate authorisation track: an SCS issuer must hold either an MPI licence or a separate stablecoin issuance licence, with reserve assets restricted to high-quality liquid assets denominated in the same currency as the peg, capital floor of the higher of 1 million Singapore dollars or 50 percent of annual operating expenses, redemption rights at par within five business days, and external audit at least annually. The DPT/SCS distinction is important: a DPT is a non-fiat-pegged token under the PSA definition while an SCS is a fiat-pegged token under the August 2023 framework, and the two categories carry different capital, custody, and disclosure rules.

Capital and operational requirements

Beyond base capital, MPI holders must maintain ongoing capital adequacy of the higher of base capital or 50 percent of average annual operating expenses; SPI holders need only maintain base capital plus security deposit. AML/CFT obligations under MAS Notice PS-N02 are extensive: every PSA licensee must maintain a comprehensive AML programme with a named MLRO and a deputy MLRO who must be approved by MAS, conduct customer due diligence including enhanced due diligence on high-risk customers and politically-exposed persons, screen against UN consolidated sanctions and Singapore-specific designations, comply with full Travel Rule obligations on transfers above 1,500 Singapore dollars (notably stricter than FATF's 1,000-dollar default), and submit a comprehensive annual AML risk assessment to MAS. Custody of customer DPTs under MAS Notice PS-N04 requires segregation from the licensee's own assets, holding in a trust arrangement or equivalent structure, prohibition on commingling, comprehensive insurance against operational losses, and quarterly attestation of holdings by an independent auditor. The 2022 retail-investor consumer-protection regime under MAS Notice PS-N06 prohibits credit-card payments for DPT purchases, prohibits retail customer leverage, prohibits retail incentives or gamification including loyalty programmes that reward higher trading volume, and requires a knowledge assessment for retail customers before they can begin trading. Cybersecurity requirements derive from MAS's Technology Risk Management Guidelines and the supplementary Notices on cyber hygiene; large MPI holders are subject to threat-led penetration testing under the Adversarial Attack Simulation Exercise (AASE) framework. The August 2023 SCS framework adds prescriptive reserve requirements: reserves must be held with a Singapore-licensed bank in a segregated bankruptcy-remote account, restricted to high-quality liquid assets denominated in the peg currency (cash, deposits at MAS-regulated banks, sovereign debt of the issuing country), with no commercial paper, no rehypothecation, no commingling, and weekly reserve attestations published publicly.

Notable licensees

The MPI grant pace was deliberately slow through 2021 and most of 2022 — MAS publicly stated that fewer than ten percent of in-principle applications received from the 2020 grandfather pool would be granted — but accelerated materially in 2023 and 2024 as the supervisory team scaled up. By April 2026 notable MPI holders include Coinbase Singapore (granted MPI in October 2023, including DPT services), Crypto.com Singapore (MPI granted June 2023), Ripple Markets APAC (MPI granted October 2023, the first major US-headquartered crypto firm to obtain Singapore MPI), Sygnum Singapore (MPI granted November 2024, the first regulated digital-asset bank to obtain Singapore MPI), Independent Reserve Singapore (MPI in late 2022), DBS Vickers (MPI through DBS group, providing institutional DPT services), Hashkey Singapore (MPI granted Q4 2023), GSR Markets (MPI granted Q1 2024), Wintermute Asia (MPI granted Q2 2024 for institutional dealing), and Anchorage Singapore (MPI granted Q1 2025 for institutional custody). On the stablecoin side, StraitsX (operated by Xfers under MPI) was the first Singapore-licensed issuer to comply fully with the August 2023 SCS framework for its XSGD token; Paxos Asia is in pre-application discussions for a Singapore-domiciled USD stablecoin issuance under SCS. Notable rejections and withdrawals include Binance Asia (which voluntarily withdrew its application in late 2021 and exited the Singapore retail market), FTX Singapore (predecessor entity wound down before any grant decision), and Three Arrows Capital (which had operated as a fund manager under separate MAS regulation rather than PSA but whose collapse materially shaped MAS's subsequent supervisory posture).

Enforcement actions to date

MAS enforcement under the PSA has been active and frequently public. Three Arrows Capital — although technically supervised under the Securities and Futures Act fund-manager regime rather than the PSA — was issued a public reprimand in June 2022 for providing false information and a multi-year management ban for its founders. The 2022-23 collapse cycle drove a series of MAS actions on PSA-supervised firms: Vauld Singapore was the subject of a moratorium and supervisory direction in mid-2022; Hodlnaut Singapore had its in-principle MPI approval revoked in August 2022 following the disclosure of stETH losses; Crypto.com Singapore faced a September 2023 supervisory letter on retail-marketing breaches and entered a remediation programme. The August 2023 stablecoin framework was accompanied by a formal MAS communication directing all DPT licensees to delist any stablecoin not on track for SCS authorisation by mid-2024, accelerating the wind-down of certain second-tier USD stablecoins on Singapore-regulated platforms. The December 2023 MAS retail-suitability framework was followed by a series of supervisory inspections in 2024 and 2025 that produced multiple seven-figure penalties for MPI holders that had failed to implement the retail knowledge-assessment requirement. The most recent major action was a May 2025 settlement with an unnamed MPI holder for 4 million Singapore dollars over AML/CFT programme deficiencies, including inadequate Travel Rule compliance and insufficient enhanced due diligence on high-risk corporate customers. MAS has also coordinated several cross-border actions with US, EU, and UAE counterparts, leveraging information-sharing arrangements under the IOSCO Multilateral Memorandum of Understanding.

How to apply

PSA applications are filed with MAS through the Financial Institutions Directory portal under a structured submission process: Form 1 (general application), Form 1A (DPT-specific particulars), and the supporting compliance, AML, technology, and capital-adequacy documentation. The substantive filing comprises a three-year business plan with detailed activity-by-activity volume projections, an AML/CFT framework satisfying MAS Notice PS-N02 with named MLRO and deputy MLRO (both subject to MAS approval), a comprehensive technology risk-management framework aligned with the MAS Technology Risk Management Guidelines, a custody architecture document covering wallet segregation and cold-storage practice, biographical material on every director and substantial shareholder including 'fit-and-proper' declarations, financial projections demonstrating capital adequacy and ongoing capital sufficiency, a detailed conflicts-of-interest framework, and (for MPI applicants seeking DPT permission) a specific risk assessment under the December 2022 DPT supervisory guidelines. MAS application fees are 1,500 Singapore dollars for SPI and 1,500 to 50,000 Singapore dollars for MPI scaled to activity scope. The all-in cost of preparation runs 500,000 Singapore dollars at the lower end to 5 million Singapore dollars for complex MPI applications including DPT services and cross-border transfers, with ongoing compliance overhead of 1 to 3 million Singapore dollars annually. Decision timelines run 9 to 18 months for in-principle approval and a further 6 to 12 months for the formal grant after the in-principle holder satisfies operational and capital conditions; some MPI applications including DPT services have run 24 to 30 months end to end. Common rejection reasons include inadequate substance — a paper Singapore presence with senior management actually located offshore — gaps in the AML programme particularly around enhanced due diligence and Travel Rule, inadequate retail consumer-protection arrangements, and inability to demonstrate effective DPT custody architecture.

Comparison to peer frameworks

Against MiCA's CASP regime, the MAS PSA covers a broader range of activities — payments services and DPT services within a single statute, where MiCA addresses crypto in isolation — but is single-jurisdiction with no passport equivalent. PSA capital floors at the SPI tier are lower than MiCA Class 1, but MPI capital and ongoing capital requirements are roughly comparable to MiCA Class 3. Against the GENIUS Act, the August 2023 SCS framework is the closer comparator and was a model for the GENIUS Title V foreign-issuer designation regime; Treasury's substantial-similarity determinations under GENIUS Title V have so far covered MAS-licensed SCS issuers as a distinct cohort, reflecting the structural alignment between the two regimes. Against the BitLicense, PSA is materially less expensive to obtain (500K-5M SGD versus 150K-1M USD plus the much higher ongoing burden of BitLicense maintenance), but PSA's prescriptive Travel Rule and retail-suitability rules are more demanding than NYDFS's regime. Against VARA, PSA is broader in scope (covering all payment activities, not only virtual asset service provision) but less granular on the activity-categorisation side; VARA's seven-category framework provides more permission-tailoring than PSA's three-tier structure. Against Hong Kong's Securities and Futures Commission virtual-asset trading platform regime, PSA is broader in activity scope (covering payments, custody-only providers, and brokers) but Hong Kong's HKMA stablecoin regime that began operation in 2025 is structurally similar to Singapore's SCS framework.

Open questions and pending changes

Three open questions dominate the PSA landscape through 2026 and 2027. First, the implementation of MAS's expanded retail-investor framework following the December 2023 consultation paper is in active rulemaking, with proposed amendments expected to extend the knowledge-assessment requirement to additional categories of retail trading and to introduce volumetric caps on retail DPT trading by individual customer; finalised rules are expected mid-2026. Second, the treatment of cross-border DPT activities under the 2021 PS Act Amendment remains in development, particularly the boundary between Singapore-licensed and offshore activity for customers with Singapore touchpoints; MAS has indicated forthcoming guidance on the equivalent of the EU's reverse-solicitation perimeter. Third, the SCS framework's operation through its first full year (mid-2024 to mid-2025) produced several technical questions on reserve-asset eligibility, redemption mechanics for institutional holders, and the boundary between SCS-authorised and offshore stablecoins on Singapore-regulated platforms; an SCS framework refresh consultation is expected in Q3 2026. Operators should also watch the ongoing dialogue between MAS and the GENIUS Act federal-floor regulators on cross-border foreign-issuer designations, the implementation of Singapore's Project Guardian tokenisation initiatives within the PSA framework, and the first formal travel-rule enforcement action testing the boundaries of MAS Notice PS-N02 compliance for institutional cross-border transfers.

Watch points

  • Retail-investor framework expansion — knowledge assessment + volumetric caps
  • Cross-border DPT perimeter guidance (Singapore reverse-solicitation equivalent)
  • SCS framework refresh consultation expected Q3 2026
  • Cross-border foreign-issuer dialogue with GENIUS Act regulators
  • First formal Travel Rule enforcement action under PS-N02

TL;DR

Singapore's deliberately-slow MPI grant pace through 2021-22 gave way to a wave of 2023-24 grants covering Coinbase, Crypto.com, Ripple, Sygnum and others; the August 2023 stablecoin framework became a benchmark for the GENIUS Act foreign-issuer designation pipeline.

Get DeFi Intel research in your inbox

Weekly long-form coverage of papers, incidents, jurisdictions, chains, tokens and the people building them. Free tier covers headlines; Pro adds the analyst-grade breakdowns.