What the MAS Payment Services Act means for crypto licensing in 2025
The Monetary Authority of Singapore (MAS) Payment Services Act creates a legal pathway for cryptocurrency and digital asset businesses to operate in Singapore. Starting in 2025, any crypto company handling payments or storing customer funds must obtain a license from MAS or fall under a specific exemption. This is not optional — operating without the right license is illegal and can result in fines and criminal charges.
The Act divides crypto activities into categories, and each category has different licensing requirements. A business that only trades crypto for its own account faces different rules than one that holds customer money or processes payments. Understanding which category your business falls into determines what you need to do next.
The licensing pathway is not fast. From the moment you submit your process to the moment MAS approves it typically takes several months. Many businesses start preparing their compliance systems and documentation a year in advance. If you are running a crypto business or planning to start one, 2025 is when the rules become enforceable, not when they begin.
Key Takeaways
- MAS requires a Payment Services Act license for any crypto business that holds customer funds, processes payments, or operates as a digital asset exchange in Singapore.
- The licensing process requires detailed compliance documentation, including anti-money laundering procedures, customer identity verification systems, and financial controls.
- Businesses that only trade crypto for their own account and do not hold customer money may be exempt, but must document and prove that exemption to MAS.
- The process review period typically takes three to six months, and MAS may request additional information or changes to your systems before approval.
- Operating without a license after the 2025 enforcement date carries criminal penalties, including fines up to SGD 1 million and imprisonment up to five years.
Which crypto activities require a Payment Services Act license
MAS divides crypto businesses into categories based on what they actually do with customer money and data. The categories that require a license are: Digital Payment Token (DPT) services, which means buying, selling, or exchanging crypto on behalf of customers; Money-changing services for crypto-to-fiat conversions; and Stored value facility (SVF) services, which means holding customer funds in any form, including stablecoins or crypto wallets.
A business needs a license if it does any of these things: accepts customer money and converts it to crypto, accepts crypto and converts it to customer money, holds crypto or stablecoins on behalf of customers, operates a trading platform where customers buy and sell crypto, or issues a stablecoin or other digital token that customers can redeem for cash or goods.
Businesses that do not need a license include those that only trade crypto for their own account and never touch customer funds, those that provide only software or infrastructure (like a wallet provider that never holds keys), and those that operate outside Singapore and do not serve Singapore residents. However, "do not serve Singapore residents" is narrowly defined — if you market to Singapore, accept Singapore payment methods, or have Singapore customers, MAS considers you to be operating in Singapore.
The three main licensing categories under the Payment Services Act
MAS offers three separate licenses depending on what your business does. Understanding which one applies to you is the first step in the process process.
Digital Payment Token (DPT) Service Provider is the license for crypto exchanges, trading platforms, and brokers. You need this license if you buy crypto from customers, sell crypto to customers, or operate a platform where customers trade with each other. This is the most common license for crypto businesses. The DPT license requires you to hold customer funds in segregated accounts, maintain real-time records of who owns what, and implement systems to prevent market manipulation and insider trading.
Money-Changing Service Provider is for businesses that convert between fiat currency (like Singapore dollars) and crypto. If your business model is primarily converting customer money to stablecoins or vice versa, this may be your license category. The requirements are similar to DPT but focused on currency conversion compliance and foreign exchange controls.
Stored Value Facility (SVF) Operator is for businesses that issue or manage digital tokens that customers can hold and redeem. This includes stablecoin issuers, wallet providers that hold customer keys, and any business that accepts customer money and issues a digital representation of that value. SVF operators must maintain reserves equal to the value customers have deposited and undergo regular audits.
What MAS requires in your license process
MAS does not accept a straightforward form and a fee. Your process must include detailed documentation of your entire business operation, your compliance systems, and your financial controls. The process typically runs 50 to 100 pages and takes two to four months to prepare if you already have systems in place.
You must submit: a detailed business plan describing what you do, how you make money, and who your customers are; organizational charts and background information on all directors, shareholders, and key staff; your anti-money laundering (AML) and know-your-customer (KYC) procedures, including how you verify customer identity and detect suspicious activity; your technology architecture, including how you store customer funds, how you find private keys, and what happens if your systems fail; your financial projections and proof of adequate capital; your risk management framework; and your incident response and business continuity plans.
MAS also requires proof that you have the financial resources to operate safely. The minimum capital requirement varies by license type but typically ranges from SGD 500,000 to SGD 1 million. You must also show that you have adequate insurance, including cyber liability insurance and crime insurance.
One common reason applications are rejected or delayed is incomplete AML/KYC documentation. MAS expects you to have systems that can identify every customer, verify their identity against government records or third-party databases, understand the source of their funds, and flag transactions that look suspicious. If your process describes manual processes or vague procedures, MAS will ask you to rewrite them.
How to prepare your business for the licensing process
Start by determining which license category applies to you. If you are unsure, you can request a pre-process consultation with MAS, though this does not may provide a particular outcome. Write down exactly what your business does: Do you hold customer money? Do you convert between fiat and crypto? Do you operate a trading platform? Do you issue tokens? Your answer determines which license you need.
Next, audit your current systems against MAS requirements. If you do not have documented AML/KYC procedures, you need to build them. If you store customer funds in a single account rather than segregated accounts, you need to change that. If you do not have incident response procedures or cyber insurance, you need to obtain them. This phase typically takes two to three months and may require hiring compliance staff or consultants.
Document everything. MAS expects to see written policies, system diagrams, audit trails, and evidence that your procedures actually work. If your policy says you verify customer identity, MAS will ask to see examples of verification records. If your policy says you monitor for suspicious activity, MAS will ask to see your monitoring logs. Vague or undocumented procedures will be rejected.
Engage with MAS early if possible. Some businesses request a pre-process meeting to discuss their business model and get informal feedback on whether their approach will work. This is optional but can save time later. You can contact MAS's Financial Sector Development Division to request a meeting.
The process review timeline and what happens next
After you submit your process, MAS has a statutory timeline of 90 days to make a decision, though in practice most applications take longer because MAS requests additional information. Expect the process to take three to six months from submission to approval.
MAS will review your process in phases. First, they check whether your submission is complete — if documents are missing or unclear, they will ask you to resubmit. This phase typically takes two to four weeks. Second, they conduct a substantive review of your business model, compliance systems, and financial controls. This is where most delays occur, because MAS may ask detailed questions about how your systems work or request changes to your procedures. Third, they may conduct on-site inspections or request live demonstrations of your systems.
If MAS approves your process, you receive a license valid for three years. You must then comply with ongoing reporting requirements, including quarterly financial reports, annual audits, and when ready notification of any significant incidents or changes to your business. If MAS denies your process, they will provide reasons, and you can reapply after addressing those issues.
If you are currently operating without a license, you have until the enforcement date in 2025 to obtain one. Operating after that date without a license is a criminal offense. If you cannot obtain a license in time, you must cease operations or restructure your business to fall under an exemption.
Exemptions and alternatives if you cannot obtain a license
Not every crypto business needs a Payment Services Act license. If your business falls into one of these categories, you may be exempt: you only trade crypto for your own account and never hold customer funds; you provide only software or infrastructure and do not custody customer assets; you operate outside Singapore and have no Singapore customers; or you are a financial institution already regulated by MAS under banking or securities laws.
However, claiming an exemption does not mean you can ignore the law. You must be able to prove to MAS that you genuinely fall under an exemption. If MAS determines that you are actually holding customer funds or serving Singapore customers, you will be required to obtain a license retroactively, and you may face penalties for operating without one.
If you cannot meet the licensing requirements, your alternatives are limited. You can restructure your business to avoid regulated activities — for example, by becoming a software provider rather than a custodian, or by serving only non-Singapore customers. You can partner with a licensed operator who handles the regulated activities while you provide other services. Or you can cease operations in Singapore and focus on other jurisdictions.
Frequently Asked Questions
Do I need a license if I only provide a wallet app and do not hold customer private keys?
It depends on whether you hold customer funds in any form. If your app is purely software and customers control their own keys, you likely do not need a license. But if you hold customer money, issue tokens, or provide any service where customers trust you with their assets, you probably do. Contact MAS if you are unsure.
What happens if I am operating now without a license and cannot get one by 2025?
You must stop serving Singapore customers or restructure your business to avoid regulated activities. Operating without a license after the enforcement date is a criminal offense with penalties up to SGD 1 million in fines and five years in prison. MAS has stated it will enforce this actively.
How much does the license cost?
MAS does not publish a fixed fee. License costs vary based on your business model and the complexity of your process. Budget for process fees, legal and compliance consulting, and the cost of building compliant systems. Many businesses spend SGD 200,000 to SGD 500,000 on the entire licensing process.
Can I operate while my process is pending?
No. If you are not currently licensed and you are not operating under a valid exemption, you cannot accept new customers or process new transactions while your process is under review. Some businesses that were operating before the law was announced may have been grandfathered in, but new entrants must wait for approval.
What if my business model changes after I get a license?
You must notify MAS of any material change to your business, including new services, new customer types, or changes to how you handle funds. MAS may require you to amend your license or submit additional documentation. Failing to notify MAS of changes can result in license suspension or revocation.