Running a crypto exchange from Singapore used to be a bit of a gray area. You could set up shop, serve clients abroad, and technically skirt the strictest local rules. That era ended abruptly on June 30, 2025. The Financial Services and Markets Act (FSMA) is a comprehensive regulatory framework that fundamentally transformed how digital assets are supervised in Singapore, closing the loophole that allowed firms to operate as offshore-only entities without full compliance.
If you are looking to launch or maintain a crypto business in Singapore today, the landscape has shifted dramatically. The Monetary Authority of Singapore (MAS) is the central bank and financial regulatory authority of Singapore has drawn a hard line in the sand. Regulatory arbitrage is no longer an option. Whether you are a startup with big ambitions or an established player expanding into Asia, understanding these new requirements is not just legal homework-it is the difference between operating legally and facing immediate shutdown.
The Two Pillars of Regulation: PSA and FSMA
To navigate this space, you need to understand the two legislative instruments currently governing crypto activities in Singapore. Think of them as the foundation and the superstructure of your compliance house.
First, there is the Payment Services Act 2019 (PSA) is the primary legislation regulating payment services providers in Singapore since 2020. This has been the backbone of crypto regulation since 2020. It categorizes licenses based on transaction volume and operational scope. If you are processing payments involving digital tokens, the PSA likely applies to you.
Second, and more critically for 2026 operations, is the FSMA. Effective from June 30, 2025, this act introduced the Digital Token Service Provider (DTSP) is a specific license category under FSMA for entities providing services related to digital tokens framework. This regime covers two major entity types without any transitional period. There was no grace period. Organizations had to meet high compliance standards immediately or cease operations entirely.
The key takeaway here is integration. You cannot pick and choose which law applies. Your business model will determine where you fall under the PSA’s payment service definitions, but if you are dealing with digital tokens, the DTSP requirements under FSMA overlay those obligations with stricter oversight.
License Categories Under the Payment Services Act
Under the PSA, your license type depends largely on your monthly transaction value. Here is how the tiers break down:
- Standard Payment Institution (SPI) License: This is for smaller operators processing up to SGD 3 million per month. The minimum capital requirement is SGD 100,000. It covers basic operational standards, customer due diligence, and regular reporting. For a niche platform or a startup testing the waters, this might be the entry point, but be aware that growth quickly pushes you out of this tier.
- Major Payment Institution (MPI) License: If your monthly transactions exceed SGD 3 million, you need this license. The minimum capital jumps to SGD 250,000. But money is only part of it. MPIs face enhanced compliance measures, advanced risk management protocols, comprehensive auditing, and much stricter operational standards. This is where most serious exchanges end up.
- Exempt Payment Service Provider: This category is for very specific low-risk activities. It requires notification to MAS rather than a full license application, but it comes with varying capital requirements and strict operational restrictions. Do not assume this is an easy way out; the scope is narrow.
| License Type | Monthly Transaction Limit | Minimum Capital | Compliance Level |
|---|---|---|---|
| Standard Payment Institution | Up to SGD 3 million | SGD 100,000 | Basic |
| Major Payment Institution | Above SGD 3 million | SGD 250,000 | Enhanced |
| Exempt Provider | Specific low-risk activities | Varies | Restricted |
The DTSP Framework: No More Offshore Loopholes
This is the biggest change for 2026. Before FSMA, some firms operated in Singapore while serving only foreign clients, arguing they weren't engaging in domestic financial services. MAS shut that door firmly. The DTSP regime now covers all entities providing services related to digital tokens, regardless of where their customers are located.
Why did MAS do this? High-profile scandals like the collapse of Three Arrows Capital and Terraform Labs in 2022 damaged Singapore's reputation. MAS explicitly stated that "money laundering risks are higher in such business models and if their substantive regulated activity is outside of Singapore, the MAS is unable to effectively supervise such persons."
The message is clear: if you are registered in Singapore, you play by Singapore's rules. Period. Chengyi Ong, head of Asia Pacific policy at Chainalysis, noted that "with the new DTSP regime, MAS is reinforcing that financial integrity is a red line." The goal is to insulate Singapore from reputational risk associated with illicit activity.
Anti-Money Laundering and Customer Due Diligence
You cannot talk about licensing without discussing MAS Notice PSN02 is the regulatory notice setting out anti-money laundering and counter-financing of terrorism requirements for payment service providers. This notice forms the anti-money laundering (AML) foundation for every crypto platform in Singapore.
Here is what you must implement:
- Comprehensive Customer Verification: Know Your Customer (KYC) procedures must be robust. You need to verify identities thoroughly, not just collect names and emails.
- Ongoing Transaction Monitoring: Real-time monitoring systems are essential. You need to flag suspicious patterns automatically.
- Suspicious Activity Reporting: You must have clear protocols for reporting suspicious transactions to authorities. Failure to report can result in severe penalties.
Crypto platforms must operate with the same anti-financial crime standards as traditional banks. This means detailed procedures for customer identification, ongoing monitoring protocols, and regular audits of your AML systems.
Application Process: What You Need to Prepare
Applying for a license is not a simple form submission. It is a rigorous process that demands extensive documentation. Expect the timeline to range from 3-6 months for an SPI license and 6-12 months for an MPI license, especially if you need multiple rounds of feedback from MAS.
Your application package must include:
- Business Plan: A comprehensive document outlining your strategy, mission, business model, projected revenues and expenses, marketing strategies, and operational plans. MAS wants to see a viable, sustainable business, not a speculative venture.
- KYC and AML Policies: Detailed documents outlining your procedures for customer verification and financial crime prevention. These must comply with Singaporean standards.
- Internal Policies: Governing cryptocurrency dealings, including transaction processing procedures, customer fund security measures, risk management protocols, and compliance systems.
- Risk Assessment: Documentation of market monitoring procedures, potential threat identification, and strategies to prevent operational problems.
- Audit Reports: Annual internal and external audit reports regarding financial operations and regulatory compliance.
- Capital Proof: Demonstration of necessary authorized capital through fund availability documentation or confirmed financial support.
Many applicants struggle with the level of detail required. Legal and consulting expenses add up quickly. Reddit discussions in crypto communities frequently highlight the difficulty of meeting these stringent documentation requirements, with users reporting months-long processes and substantial costs.
How Singapore Compares Globally
Where does Singapore stand compared to other jurisdictions?
Unlike China, which has banned crypto trading, or the United States, which has a fragmented state-by-state approach, Singapore offers a unified national standard under MAS oversight. Compared to the European Union's Markets in Crypto-Assets (MiCA) regulation, Singapore's implementation was faster and more immediate, with no transitional periods. However, MiCA provides longer timelines for adaptation, which some firms prefer.
In terms of cost, Singapore's minimum capital requirements of SGD 100,000 to SGD 250,000 are substantially lower than Switzerland's, which can reach several million Swiss francs for similar operations. This makes Singapore more accessible to medium-sized operators while maintaining stringent operational standards.
| Jurisdiction | Approach | Transition Period | Capital Requirement (Approx.) |
|---|---|---|---|
| Singapore | Unified National Standard | None (Immediate) | SGD 100k - 250k |
| European Union (MiCA) | Harmonized Regional | Extended Timelines | Varies by Member State |
| United States | Fragmented State-Level | Varies | Varies Widely |
| Switzerland | Canton-Based | Flexible | CHF Millions |
Challenges and Industry Feedback
The industry reaction to the June 30, 2025 changes has been mixed. Some called it a "crypto crackdown," while others viewed it as a "step toward consistency." The reality is nuanced.
Smaller operators struggled with the immediate implementation. Without a transitional period, many faced rapid operational restructuring or market exit decisions. Larger exchanges generally welcomed the clarity but expressed concerns about compliance costs, particularly for enhanced monitoring under MPI licenses.
User experiences reveal significant hurdles. Meeting the stringent documentation requirements often takes months. Legal and consulting fees are substantial. Institutional users appreciate the regulatory certainty, which builds trust. However, smaller retail-focused platforms criticize the barriers to entry, arguing that the high costs favor well-capitalized incumbents.
Future Outlook: Staying Compliant in 2026 and Beyond
What does the future hold? Singapore is positioning itself as a regulated crypto hub. With Hong Kong also introducing its own licensing framework, competition is heating up. However, Singapore's earlier implementation and comprehensive scope give it a first-mover advantage.
MAS has indicated it will "set the bar high for licensing and will generally not issue a license" for operations serving only overseas clients. Long-term viability assessments suggest that well-capitalized, compliance-focused operators will benefit from the regulatory clarity. Smaller or offshore-focused businesses may find the Singapore market increasingly inaccessible.
The framework's success will likely influence other regional jurisdictions' regulatory approaches, potentially establishing Singapore's standards as a regional benchmark for crypto exchange licensing. If you are planning to enter this market, start preparing your compliance infrastructure now. The window for easy entry has closed.
What is the deadline for complying with the new FSMA regulations?
The Financial Services and Markets Act (FSMA) took effect on June 30, 2025. There was no transitional period, meaning all Digital Token Service Providers had to comply immediately by that date. As of 2026, non-compliance results in enforcement actions.
Can I operate a crypto exchange in Singapore if I only serve international clients?
No. The new DTSP framework under FSMA explicitly closes the loophole that allowed firms to serve only offshore clients without full licensing. If you are registered in Singapore, you must obtain the appropriate license and adhere to all local compliance standards, regardless of your customer base location.
How long does it take to get a Major Payment Institution license?
Obtaining a Major Payment Institution (MPI) license typically takes 6-12 months. The process involves extensive due diligence, detailed documentation, and often multiple rounds of feedback from the Monetary Authority of Singapore (MAS). Professional legal and compliance support is highly recommended.
What is the minimum capital requirement for a crypto exchange in Singapore?
For a Standard Payment Institution (SPI) license, the minimum capital is SGD 100,000. For a Major Payment Institution (MPI) license, which applies to larger operations, the minimum capital requirement is SGD 250,000. Exempt providers have varying requirements based on specific activities.
How does Singapore's crypto regulation compare to the EU's MiCA?
Singapore's approach is more immediate, with no transitional periods for the new DTSP regime, whereas the EU's MiCA regulation provides longer implementation timelines. Singapore offers a unified national standard under MAS, unlike the US fragmented system. Capital requirements in Singapore are generally lower than in Switzerland but comparable to or slightly higher than some EU member states depending on the specific jurisdiction.