- Singapore — MAS Licensing Decision Guide
Do You Need a MAS Licence?
If your business touches digital assets in Singapore — or operates from Singapore — you may require authorisation from MAS. Use this guide to determine whether your crypto activities fall within the licensing perimeter.
The Core Question
⚖️
MAS regulates what you do — not what you call your business
🌐
Operating from Singapore triggers jurisdiction — even for overseas-only services
🔑
Control over private keys = custody = regulated activity
⚠️
Indirect facilitation can trigger regulation — not just direct execution
📋
Token classification determines whether PSA or SFA applies
The Core Question
Are You Carrying On a Regulated Activity?
The most important question for any crypto business in Singapore is whether it is carrying on a regulated activity under the Payment Services Act or the Financial Services and Markets Act. If the answer is yes, a MAS licence is required — regardless of how the business is labelled or structured.
MAS applies a substance-over-form test — it evaluates the economic reality and actual functionality of your business, not the labels applied to it. Even if you describe your platform as a "technology provider," a "Web3 platform," or a "protocol" — you may still be regulated if your activities fall within MAS-defined DPT service categories.
The regulatory perimeter is broad. It captures direct execution, indirect facilitation, cross-border services, and even soft intermediation. Most operational crypto platforms trigger at least one — and often multiple — regulated activities.
Operating without a required MAS licence exposes your business to regulatory enforcement, fines, business restrictions, reputational damage, and potential criminal liability.
🧠
The Practical Test: Ask — “Do we enable crypto transactions? Do we move or hold digital assets? Do we connect buyers and sellers? Do we operate from Singapore?” If YES to any — you likely need a MAS licence.
What MAS Looks At
MAS evaluates the substance of your business across three dimensions — not the legal structure or commercial labels:
- End-to-End Transaction Flow
The complete path of a transaction — including all parties, platforms, and functions involved at each stage.
- Actual Control and Influence
The degree to which your platform controls, influences, or enables transactions — from full custody to indirect routing.
- Economic Reality of the Business
What the business actually does commercially — who benefits, who bears risk, and who exercises discretion over assets or transactions.
⚠️
The two applicable legislative frameworks are the Payment Services Act 2019 (PSA) for domestic and cross-border DPT services, and the Financial Services and Markets Act 2022 (FSM Act) for cross-border digital token services conducted from Singapore.
⚖️
Substance Test
MAS evaluates economic reality — not legal labels or commercial descriptions
🌐
From Singapore
The FSM Act captures services operated from Singapore even where no local users are served
⏱️
6 - 9+ Months
Typical timeline for a well-prepared MAS application — subject to complexity and readiness
5-Step Decision Framework
Work Through Each Step to Determine Your MAS Licensing Position
Follow the five steps in sequence. Your answer at each stage either confirms a licensing requirement or narrows the analysis further. This framework is a decision tool — your specific position requires professional analysis of your actual business model.
STEP 01
Where is your business operating — in Singapore, or from Singapore?
This is the jurisdictional gateway question. MAS jurisdiction is triggered both by operating in Singapore and by operating from Singapore — even where all clients are located overseas. The FSM Act specifically captures cross-border digital token services conducted from Singapore.
If Yes — Singapore Operations
You are likely within MAS jurisdiction. The FSM Act captures cross-border crypto activities conducted from Singapore — even where you serve no Singapore-based users. Proceed to Step 2.
Proceed to Step 2
If No — No Singapore Nexus
MAS jurisdiction may not apply — subject to a detailed analysis of your operational and management arrangements. Cross-border rules still require careful review before concluding you are outside scope.
Detailed Analysis Required
STEP 02
Does your business perform any of these DPT activities?
MAS-regulated DPT activities cover a broad functional perimeter. Check whether your business performs any of the following — even indirectly or as a supporting function:
If Any Apply
You are likely performing a regulated DPT activity under the PSA. The breadth of activities captured means most operational crypto platforms trigger at least one category. Proceed to Step 3.
Likely Regulated — Proceed to Step 3
If None Apply
Your activities may fall outside the DPT service perimeter — but this conclusion is highly fact-specific and should be confirmed through formal regulatory perimeter analysis before acting on it.
Perimeter Analysis Required
STEP 03
Do you control or touch customer assets — holding funds, controlling private keys, or executing transactions on behalf of users?
Asset control is the strongest regulatory trigger in the MAS framework. Where a firm exercises any form of control over customer assets — from full custody to transaction execution authority — the licensing requirement is almost certain. MAS applies a simple principle here: control equals regulation.
If Yes — Asset Control
You are almost certainly regulated. Asset custody, private key control, and transaction execution on behalf of users are the clearest licensing triggers in the entire MAS framework. A PSA licence is required.
MAS Licence Required
If No — No Asset Control
The custody and execution triggers do not apply. However, indirect facilitation, order routing, and arranging activities may still trigger regulation. Continue to Step 4 to complete the analysis.
Continue to Step 4
STEP 04
Are you targeting or accepting users in Singapore — marketing, onboarding, or providing services accessible in Singapore?
Where a platform markets to, accepts, or serves Singapore-based users, PSA licensing is required for all applicable regulated activities. Critically, this step does not complete the analysis — even a negative answer here does not guarantee exemption from the FSM Act where operations are conducted from Singapore.
If Yes — Singapore Users
PSA licensing is likely required for all regulated DPT activities performed. The combination of Singapore operations and Singapore users creates a clear licensing obligation with no structural workaround.
PSA Licence Required
If No — Overseas Users Only
No Singapore users — but if operations are conducted from Singapore, the FSM Act may still apply. “No Singapore customers” does not equal “no MAS regulation.” Proceed to Step 5.
Check FSM Act — Step 5
STEP 05
Does your token represent ownership, profit rights, or a pooled investment — making it potentially a capital markets product under the Securities and Futures Act?
Token classification determines which regulatory framework applies. Where a token represents ownership interests, profit participation, or pooled investment arrangements, it may be classified as a capital markets product under the SFA — triggering a separate and additional regulatory framework, or replacing the PSA framework entirely.
If Yes — Investment Features
You may be regulated under the SFA instead of — or in addition to — the PSA. Token classification requires a detailed legal analysis. This is the most complex scenario and requires specialist regulatory advice.
SFA / SFA + PSA Analysis Required
If No — Utility or Payment Token
Your token is likely a DPT rather than a capital markets product. The PSA is the primary applicable framework. Your licensing position is determined by your answers to Steps 1–4.
PSA Framework Applies
Decision Outcomes
Your Likely Licensing Position
Based on your answers to the five-step analysis, your MAS licensing position will fall into one of three categories. Each carries different implications — and each requires a different next step.
🟢 Limited Cases Only
You Likely Do Not Need a MAS Licence
- Pure technology provider with no transaction involvement
- Non-custodial interface where users retain sole key control
- Internal blockchain infrastructure with no client-facing services
- No Singapore nexus and no operations from Singapore
🟡 Requires Legal Analysis
You May Need a MAS Licence
- Indirect facilitation of DPT transactions
- Hybrid models combining regulated and non-regulated functions
- Complex cross-border structures with Singapore elements
- API or infrastructure services that enable regulated activities
🔴 Licence Required
You Likely Need a MAS Licence
- Crypto exchange or trading platform
- Broker or OTC trading service
- Custodian or hosted wallet provider
- Transfer or remittance service using digital assets
- Any platform enabling crypto transactions in or from Singapore
Common Misconceptions & Consequences
Why Misclassification Happens — and What It Costs
The most common cause of MAS regulatory exposure is not a deliberate decision to operate without a licence — it is a misclassification of activities based on assumptions that do not hold up against the PSA's broad functional test.
Common Misconceptions
❌ "We don't hold funds, so we're not regulated"
False. Facilitation alone — routing orders, enabling trading, connecting users to liquidity — may trigger regulation under the PSA even where no funds are held directly.
❌ "We are offshore, so MAS doesn't apply"
False. The FSM Act captures cross-border crypto activities conducted from Singapore — regardless of where the entity is incorporated or where clients are located.
❌ "We are just a protocol"
If users interact through your protocol to execute transactions — and your business exercises any control, influence, or facilitation function — MAS may regulate those activities regardless of the "protocol" framing.
Consequences of Operating Without a Licence
✕
Regulatory enforcement action — MAS directions, investigations, and formal proceedings
✕
Fines and financial penalties — potentially significant depending on the scale of unlicensed operations
✕
Business activity restrictions — MAS may require immediate cessation of regulated activities
✕
Reputational damage — public MAS enforcement actions are published and permanent
✕
Potential criminal liability — under certain circumstances, operating without a licence carries personal criminal exposure
💡
Limited testing may be possible through MAS’s regulatory sandbox — but operating at commercial scale without a licence carries the full range of enforcement consequences regardless of intent. The sandbox does not provide a commercial-scale exemption.
How We Help
MAS Licensing Requirement Assessment — What We Deliver
We deliver a clear, defensible licensing position before you engage with MAS — built on detailed activity mapping, token classification, fund flow analysis, and regulatory perimeter review that holds up under regulator scrutiny.
🔍
Licensing Requirement Assessment
We assess whether your business requires a MAS licence — analysing your specific activities, business model, technology stack, and operational arrangements against the PSA and FSM Act regulatory perimeter. We deliver a written conclusion with full reasoning.
🗺️
Activity Mapping & Regulatory Perimeter Analysis
We map every function of your business to its corresponding regulated DPT activity category — identifying all licensing obligations, potential overlaps, and grey-area functions that require careful analysis or structural attention before the licensing application is filed.
🟡
Token Classification
We classify your token as a DPT, capital markets product under the SFA, e-money, or other instrument — determining which regulatory framework applies and whether any cross-framework obligations arise. Token classification before your MAS application prevents the most costly mid-process reclassifications.
⚖️
Structuring Strategy — PSA vs FSM
We design the optimal licensing strategy — SPI or MPI under the PSA, FSM Act scope for cross-border services, or a combined structure — aligned with your business model, transaction volumes, and operational footprint.
📋
MAS Licensing Roadmap
We deliver a concrete licensing roadmap — covering the regulatory steps, timelines, documentation requirements, capital obligations, AML framework design, and governance build-out required to move from assessment to approved MAS licence efficiently.
📝
Legal Opinion (Submission-Ready)
We prepare the mandatory MAS legal opinion on regulatory perimeter analysis — in submission-ready format that addresses MAS reviewers' specific questions on activity scope, token classification, and jurisdictional analysis — and holds up through the iterative MAS query process.
A Clear, Defensible Licensing Position — Before You Engage MAS
- We assess your business model against the full MAS regulatory perimeter and deliver a written licensing requirement conclusion
- We map every regulated activity your business performs and identify all PSA and FSM Act obligations that follow
- We classify your token and determine whether the PSA, SFA, or a combined framework applies
- We design the licensing strategy and deliver the roadmap and legal opinion required to begin the MAS application process
FAQs
Frequently Asked Questions — MAS Licensing Requirement
Limited testing may be possible through MAS’s regulatory sandbox framework — which allows eligible firms to test innovative financial services in a controlled environment with relaxed regulatory requirements. However, operating without a licence at commercial scale carries the full range of PSA enforcement consequences regardless of intent or stage of development. The sandbox does not provide a commercial-scale exemption and is not an alternative to licensing for operational businesses.
MAS applies a substance-over-form test — avoidance strategies based on technical or commercial structuring rarely succeed. MAS evaluates the economic reality and actual functionality of a business, not the legal labels or contractual arrangements. Firms that structure specifically to avoid a licensing obligation — while continuing to perform the regulated function — create compounding regulatory exposure rather than eliminating it. The substance of the activity determines the regulatory outcome.
You may still be regulated under the Financial Services and Markets Act 2022 if your operations are conducted from Singapore. The FSM Act captures cross-border digital token services provided from Singapore regardless of where clients are located. The jurisdictional test is based on where the service is conducted from — not where clients are based. Firms with Singapore-based operations or management serving overseas users cannot rely on the absence of Singapore customers as an exemption from MAS regulation.
Typically 6 – 9+ months for well-prepared applications — subject to MAS review timelines, the complexity of the business model, and the number of query rounds issued. Applications that are incomplete, have weak AML frameworks, or raise governance concerns take materially longer. MAS approval is highly iterative and evidence-driven — the quality and completeness of the initial submission directly determines how efficiently the process proceeds.
Yes. Token classification is a prerequisite for the MAS legal opinion and determines which regulatory framework — PSA, SFA, or both — applies to your business. A DPT is regulated under the PSA. A capital markets product is regulated under the SFA with different licensing requirements. Misclassifying your token at the application stage creates a fundamental flaw in the application that MAS reviewers will identify — leading to delays, queries, and potential rejection. Classification must be resolved before the application is filed.
Get Clarity on Your MAS Licensing Position
Check Your Licensing Requirement
Whether you are assessing your position for the first time or preparing to apply, a defensible licensing conclusion before you engage MAS is the foundation everything else is built on. Let us map your activities and deliver your licensing position today.