What the MAS Payment Services Act means for crypto businesses in 2025

The Monetary Authority of Singapore (MAS) Payment Services Act, which took full effect on January 1, 2025, created a single regulatory framework for all payment service providers — including those handling cryptocurrency. Before this date, crypto businesses operated in a gray zone with no clear path to legal status. Now there is one: the Payment Services License (PSL), issued by MAS.

This matters because it means crypto exchanges, stablecoin issuers, and digital asset custodians in Singapore can no longer operate unlicensed. They must either obtain a PSL, meet an exemption, or stop serving Singapore customers. The licensing pathway is open, but the requirements are specific and the process is lengthy.

This guide explains what the Payment Services Act requires, who needs a license, what the process process looks like, and what happens if a crypto business does not comply.

Key Takeaways

  • The Payment Services Act requires all crypto exchanges, stablecoin issuers, and digital asset custodians operating in Singapore to hold a Payment Services License from MAS or meet a specific exemption.
  • MAS issues different license types depending on what services a business offers — money changing, remittance, stored value, or digital payment token services — and a single business may need multiple licenses.
  • The process process requires detailed compliance documentation, anti-money laundering controls, cybersecurity measures, and proof of financial soundness, and typically takes several months to complete.
  • Businesses that were operating before January 1, 2025 had until May 1, 2025 to submit a license process or face enforcement action, though some received extended timelines.
  • Exemptions exist for certain activities — such as peer-to-peer transfers or in-house payment systems — but they are narrow and do not cover most commercial crypto operations.

Which crypto activities require a Payment Services License

MAS divides payment services into four categories, and crypto businesses fall into one or more of them. The first is money changing — buying and selling digital payment tokens (MAS's term for cryptocurrency) for fiat currency or other tokens. Any exchange that lets customers trade crypto for Singapore dollars or other money needs a money changing license.

The second is stored value — issuing or managing digital wallets, prepaid cards, or stablecoins that hold value on behalf of customers. If your business issues a stablecoin pegged to the Singapore dollar, or operates a wallet where customers hold funds, you need a stored value license.

The third is remittance — moving money across borders on behalf of customers. A crypto business that lets users send digital assets internationally for a fee falls into this category.

The fourth is digital payment token services — a catch-all category for services that do not fit the first three but still involve handling customer crypto assets. This includes custodians that hold crypto on behalf of institutional clients, and platforms that facilitate peer-to-peer crypto trading without taking custody.

A single business often needs multiple licenses. A crypto exchange that issues its own stablecoin and offers international transfers would need money changing, stored value, and remittance licenses all at once.

The Payment Services License process process

MAS does not publish a single process form. Instead, a business must submit a written proposal to MAS describing its services, ownership structure, and compliance plan. This proposal is the starting point for a dialogue with MAS, not a one-time submission.

The process must include detailed documentation across several areas. Ownership and governance requires proof of who owns the business, who sits on the board, and what their financial and criminal history is. MAS conducts background checks on all significant owners and directors.

Anti-money laundering and sanctions compliance is the largest section. You must describe how you will identify customers, verify their identity, monitor transactions for suspicious activity, and block transactions involving sanctioned countries or individuals. You must name a compliance officer and describe their team and budget.

Cybersecurity and operational resilience requires documentation of how you protect customer data, prevent hacking, back up systems, and recover from outages. MAS expects a detailed incident response plan and proof of regular security testing.

Financial soundness means submitting audited financial statements, a capital plan showing you can absorb losses, and proof of insurance. MAS sets minimum capital requirements that vary by license type and business size.

Customer protection requires a written policy on how you handle customer complaints, what happens to customer funds if you fail, and how you will notify customers of changes to your terms.

After submission, MAS typically takes two to four months to review the process and request clarifications. Most businesses go through multiple rounds of back-and-forth before MAS makes a decision. The entire process from first submission to license issuance commonly takes six to twelve months.

Minimum capital and financial requirements

MAS sets minimum capital requirements based on the type of license and the volume of transactions the business handles. These are not fixed numbers — they scale with business size.

For a money changing license, the minimum capital is typically SGD 500,000 (approximately USD 370,000), but MAS may require more if the business handles large transaction volumes or serves many customers. For a stored value license, the minimum is usually higher — often SGD 1 million or more — because MAS requires you to hold customer funds in reserve.

MAS also requires proof that the business is financially sound and can survive a downturn. This means submitting a three-year financial projection, proof of existing profitability or a clear path to it, and evidence that owners have contributed their own money to the business (not just borrowed it).

Additionally, MAS may require a letter of credit or insurance policy guaranteeing that customer funds will be returned if the business fails. The cost of this protection varies by provider and business risk profile.

What happened to businesses that were operating before January 1, 2025

Crypto businesses that were already operating in Singapore when the Payment Services Act took effect faced a important date. MAS required them to submit a license process by May 1, 2025, or stop serving Singapore customers. This was a hard important date with no automatic extensions.

However, MAS did grant case-by-case extensions to some businesses that could show they had begun the process process in good faith and needed more time to gather documentation. These extensions were typically 30 to 90 days and required written justification.

Businesses that did not meet the important date and did not receive an extension faced enforcement action. MAS can issue cease-and-desist orders, freeze assets, and refer cases to law enforcement. Several crypto platforms that did not comply were blocked from serving Singapore customers or had their bank accounts frozen.

Exemptions and when you do not need a license

MAS carved out narrow exemptions for certain activities. The most common is peer-to-peer transfers — if you operate a platform where users send crypto directly to each other without the platform taking custody or charging a fee, you may not need a license. However, if you charge any fee, take custody even temporarily, or facilitate the transaction in any way beyond providing the technical connection, you likely need a license.

Another exemption covers in-house payment systems — if a company issues digital tokens only to its own employees or customers for use within its own ecosystem (like airline miles or gaming tokens), it does not need a license. But if those tokens can be traded, sold, or converted to fiat currency, the exemption no longer applies.

A third exemption applies to non-commercial activities — individuals who buy and hold crypto for personal investment do not need a license. But anyone offering crypto services to others, even without charging a fee, is likely operating a payment service and needs a license.

These exemptions are narrow. Most crypto businesses — exchanges, custodians, stablecoin issuers, and trading platforms — do not may have access to for any of them and must obtain a license.

How to start the process process

The first step is to contact MAS directly. There is no online process portal. You must send a written proposal to the MAS Payments Development team describing your business, the services you offer, and your compliance plan. MAS publishes contact information and submission guidelines on its website.

Before submitting, gather the documentation listed above: proof of ownership and director backgrounds, a detailed compliance and AML policy, a cybersecurity plan, audited financial statements, and proof of minimum capital. This preparation typically takes two to three months.

Submit the proposal to MAS with a cover letter explaining what you are explore for and why. MAS will acknowledge receipt and assign a case officer. That officer will be your main point of contact throughout the process and will tell you what additional documentation is needed.

Expect to provide clarifications and updates multiple times. MAS may ask you to revise your compliance procedures, provide additional financial data, or explain how you will handle specific scenarios. Respond promptly — delays in providing information can extend the timeline significantly.

Once MAS is satisfied with your process, it will issue a license. The license is not permanent — MAS requires annual compliance reporting and may conduct audits. Failure to maintain compliance can result in license suspension or revocation.

Common mistakes businesses make during the process

The most common mistake is underestimating the compliance burden. Many crypto businesses submit applications with thin AML policies or vague cybersecurity plans, expecting MAS to accept them. MAS rejects these and asks for a complete rewrite, adding months to the timeline. Start with a detailed, specific compliance plan from the beginning.

A second mistake is not separating customer funds from company funds. MAS requires proof that customer crypto or fiat currency is held in segregated accounts and cannot be used for the business's own operations. If your financial statements show mixed funds, MAS will ask you to restructure before proceeding.

A third mistake is failing to conduct proper background checks on owners and directors before submitting the process. If MAS discovers during its review that an owner has a criminal record or regulatory history that was not disclosed, it will reject the process outright. Disclose everything upfront.

A fourth mistake is submitting financial statements that are not audited by a licensed auditor. MAS will not accept internal or unaudited financials. Budget for a professional audit — this costs money but is non-negotiable.

Frequently Asked Questions

Do I need a Payment Services License if I only provide crypto custody for institutional clients?

Yes. Holding crypto on behalf of others — whether retail or institutional — is a digital payment token service under the Payment Services Act. You need a license. The only exception is if you are holding crypto as part of a broader financial service (like a bank or licensed fund manager) and already have a license from MAS for that service.

What happens if I operate a crypto business in Singapore without a license?

MAS can issue a cease-and-desist order requiring you to stop when ready. It can also freeze your bank accounts, seize assets, and refer you to law enforcement for prosecution. Individuals operating unlicensed payment services can face criminal penalties including fines and imprisonment. The risk is severe.

How long does the entire licensing process take from start to finish?

Most businesses take six to twelve months from first submission to license issuance. This assumes you have all documentation ready and respond promptly to MAS requests. If you need to revise major sections of your compliance plan or gather additional financial data, it can take longer. Plan for at least six months.

Can I operate in Singapore while my license process is pending?

No. Once the Payment Services Act took effect on January 1, 2025, all payment service providers must hold a license or an exemption. Operating without either is illegal. If you submitted an process before the important date, MAS may allow you to continue operating during the review period, but this is not may provide and depends on your specific circumstances. Contact MAS to ask.

What is the difference between a money changing license and a digital payment token services license?

A money changing license is specifically for buying and selling crypto for fiat currency or other tokens. A digital payment token services license is broader and covers other services like custody, peer-to-peer facilitation, or token issuance. Most crypto exchanges need a money changing license. Custodians and wallet providers typically need a digital payment token services license. Some businesses need both.