- Singapore — MAS Licensing Requirements
Mandatory Licensing Requirements for DPTs
A complete breakdown of the mandatory requirements for obtaining a Digital Payment Token (DPT) licence in Singapore — including governance, capital, AML/CFT compliance, and operational readiness expectations imposed by MAS.
Requirements — At a Glance
⚖️
9 mandatory requirement pillars — all must be satisfied before MAS approval
💰
SPI: SGD 100,000 minimum capital — MPI: SGD 250,000 minimum
🛡️
AML/CFT framework is the primary area of MAS scrutiny and the #1 cause of rejection
📑
External audit mandatory for DPT applicants — must be ≤ 3 months old at submission
🏢
Local Singapore entity and operational substance required — shell structures not accepted
Licensing Is a Threshold Test
Obtaining a MAS DPT Licence Is Not Discretionary
MAS does not approve partially compliant businesses, concept-stage models, or incomplete operational setups. You must satisfy all mandatory requirements before MAS will grant approval. Licensing readiness is assessed at the point of submission — not promised after approval is received.
Obtaining a MAS licence for DPT services is not a discretionary or partial exercise. MAS assesses whether your business is fit to operate as a regulated financial institution — and all mandatory requirements across all nine pillars must be satisfied before approval will be granted.
MAS does not assess intention — it assesses readiness. Operational capability, compliance infrastructure, governance quality, and financial soundness must be demonstrably in place at submission. Systems planned for post-approval implementation will not satisfy MAS's threshold.
MAS does not approve: partially compliant businesses — concept-stage models — or incomplete operational setups. Full compliance across all pillars is required before any application is filed.
💡
Core Principle: MAS assesses whether your business is fit to operate as a regulated financial institution — not whether your application form is complete. Documentation quality and operational substance determine the outcome.
The MAS Approval Test — Simplified
- Is this business safe to operate?
MAS evaluates whether the business model, risk controls, and governance structure are capable of operating without risk to customers or financial stability.
- Is this business compliant?
AML/CFT, technology risk, governance frameworks, and the external audit must be fully implemented and demonstrably operational at submission.
- Is this business sustainable?
Financial soundness, adequate capital, and an operational buffer of 6–12 months of expenses must be demonstrated — not just minimum capital thresholds met.
📋
9 Pillars
Mandatory requirement categories — all must be fully satisfied before MAS will grant approval
💰
SGD 100K+
Minimum paid-up capital for SPI — SGD 250,000 for MPI — plus 6–12 months operating buffer
🛡️
AML First
Weak AML/CFT frameworks are the single primary cause of MAS application failure and rejection
Mandatory Requirements — All Nine Pillars
The 9 Key Licensing Requirements for DPT Providers
MAS evaluates DPT licence applicants across nine core pillars. Each pillar carries mandatory requirements — there is no partial credit, no deferral, and no approval before all conditions are met. Pillar 4 (AML/CFT) is the most scrutinised and the most common cause of rejection.
PIL 01
📌
Legal & Regulatory Requirements
You must conduct regulated activities under a valid MAS licence. The regulated activity perimeter must be clearly defined before any application preparation begins.
Key Requirements
- Conduct regulated activities under a valid MAS licence
- Clearly define all regulated activities in scope
- Select appropriate licence type — SPI or MPI
- Provide mandatory legal opinion — business model, token classification, regulatory mapping
📄 Regulatory classification memo + licensing strategy
PIL 02
👥
Governance & Fit and Proper
The firm and all relevant persons must be fit and proper — demonstrating integrity, competence, and financial soundness. MAS evaluates the people behind the business, not just the entity.
Applies To
- Shareholders and controllers
- Directors and CEO
- Senior management and compliance officer
- All key personnel in regulated functions
Governance Expectations
- Clear organisational structure with defined reporting lines
- Independent compliance function established
📄 Governance framework + Fit & Proper declarations
PIL 03
💰
Financial Requirements
Minimum capital is only the starting point. MAS expects financial resilience — applicants must demonstrate the ability to sustain operations, maintain sufficient liquidity, and evidence financial stability beyond the regulatory minimum.
Paid-Up Capital Minimums
Licence Type
Minimum Capital
Standard Payment Institution (SPI)
SGD 100,000
Major Payment Institution (MPI)
SGD 250,000
⚠️Operational Buffer Required: MAS expects 6–12 months of operating expenses available. Minimum capital alone is not sufficient — financial resilience is critical.
PIL 04
🛡️
AML/CFT Compliance
The most scrutinised pillar. Applicants must implement a robust, technology-enabled AML/CFT system specifically designed for their DPT business model. MAS Notice PSN02 sets legally binding standards.
Mandatory Framework Components
- Customer Due Diligence (CDD) — identity verification and beneficial ownership checks
- Enhanced Due Diligence (EDD) — high-risk customers and PEPs
- Transaction monitoring — ongoing surveillance and suspicious activity detection
- Travel Rule compliance — sender and recipient data transmission
- Sanctions screening — real-time screening of all customers and transactions
- Enterprise-Wide Risk Assessment (EWRA) — documented and current
⭐ Primary Cause of Application Failure — Generic Templates Not Accepted
PIL 05
💻
Operational & Technology Requirements
MAS treats crypto platforms as critical financial infrastructure. Technology and cybersecurity requirements are legally binding under the MAS Technology Risk Management (TRM) Notice.
Technology Risk Management
- System reliability, high availability, and resilience
- Incident response capability and escalation procedures
Cybersecurity Controls
- Access controls and multi-factor authentication
- Vulnerability management and penetration testing
Custody & Asset Protection
- Segregation of customer assets where applicable
- Secure key management and reconciliation processes
PIL 06
📊
Business & Operational Readiness
Applicants must demonstrate a fully developed business model with clear operational workflows and a defined customer lifecycle. MAS assesses the entire transaction lifecycle — from onboarding through to settlement.
Operational Requirements
- Fully developed business model — not concept-stage
- Clear operational workflows with defined processes
- Defined customer lifecycle from onboarding to exit
Fund Flow Requirement (Critical)
- End-to-end transaction mapping — no gaps permitted
- Fiat and crypto flows mapped separately and completely
- All third-party involvement identified and explained
📄 Fund flow diagrams — MAS issues most queries on this document
PIL 07
📑
External Audit Requirement — DPT-Specific Mandatory
An independent external audit is mandatory specifically for DPT applicants — this cannot be deferred or omitted. The audit must be commissioned, completed, and received before the application is filed with MAS.
⭐ AML/CFT Programme Assessment
Independent auditor must assess the AML/CFT framework against MAS Notice PSN02 requirements.
⭐ Consumer Protection Validation
Independent validation of consumer protection controls as required under the Payment Services Act.
⚠️ Recency Requirement
The audit must be dated no more than 3 months before the date of filing. An expired audit will halt the MAS review.
PIL 08
🏢
Local Presence & Substance
MAS requires genuine operational substance in Singapore. Shell or nominal structures — where the business is not meaningfully managed or operated locally — will not satisfy MAS's threshold test.
Requirements
- Maintain a Singapore-incorporated legal entity
- Local management presence — key decision-makers based in Singapore
- Establish genuine operational substance — not a nominal address
- Compliance function must be locally accessible
📄 Shell or nominal structures are not accepted by MAS
PIL 09
🔄
Ongoing Compliance Requirements
Licensing is not a one-time obligation. Once licensed, firms must maintain operational compliance frameworks, submit regular regulatory reports, and notify MAS of all material events — on an ongoing basis.
Post-Licence Obligations
- Maintain all compliance frameworks — AML, technology, governance
- Submit regulatory reports on schedule — including annual returns
- Undergo periodic regulatory audits as required by MAS
- Notify MAS immediately of all material events and changes
- Update licensing submissions when business model changes materially
📄 Ongoing supervision begins from the date of licence grant
Licensing Readiness — Quick Reference
The Complete MAS DPT Licensing Checklist
To qualify for a MAS DPT licence, all of the following must be in place before submission. This checklist covers every required element across all nine mandatory pillars — none can be deferred, omitted, or planned for post-approval completion.
✔
Legal Opinion — Singapore-qualified counsel
✔
Regulatory Business Plan (RBP)
✔
Fund Flow Diagrams — complete, end-to-end
✔
AML/CFT Framework — PSN02-compliant
✔
Governance Structure — clear reporting lines
✔
Qualified Management — Fit & Proper declarations
✔
Adequate Capital — SPI SGD 100K / MPI SGD 250K +
✔
Technology & Cybersecurity Controls — TRM compliant
✔
External Audit Report — ≤ 3 months old at submission
📋
All nine items must be complete and consistent at the point of submission. MAS does not process partial applications — the complete file must be ready before filing begins. Any missing or expired item stops the review process.
Why Applications Fail
Common Reasons for MAS DPT Application Failure
MAS may reject applications that do not meet its standards. Understanding the most common causes of rejection is as important as understanding the requirements themselves — these are the failure patterns that delay or terminate applications.
❌
Weak AML/CFT Controls
Generic or template-based AML programmes not tailored to the specific risk profile of the DPT business. This is the single most common cause of application failure and extended query rounds. MAS Notice PSN02 sets binding standards — a generic policy does not meet them.
❌
Inadequate Governance
Governance structures that do not reflect institutional-grade oversight — unclear reporting lines, no independent compliance function, or board members who cannot demonstrate relevant financial services experience under MAS's Fit & Proper criteria.
❌
Insufficient Capital
Meeting the minimum paid-up capital threshold is not sufficient. MAS expects financial resilience — demonstrable ability to sustain operations, maintain liquidity, and absorb operational risk. An operational buffer of 6–12 months of expenses must be evidenced.
❌
Poorly Defined Fund Flows
Incomplete or ambiguous transaction flow diagrams — missing third-party roles, unresolved custody points, or fiat and crypto flows not separately mapped. MAS issues more queries on fund flows than any other document in the submission.
❌
Inexperienced Management
Board or senior management team without demonstrable financial services experience. MAS assesses management competence at both the documentation stage and the management interview — an inexperienced team is a primary ground for rejection.
❌
Concept-Stage or Partial Submissions
Applying before the business is operationally ready — or submitting an incomplete application in the expectation that gaps can be resolved during MAS review. MAS does not work through partial submissions and will not grant approval to concept-stage businesses.
🔴
MAS Can Reject Applications. MAS has full authority to reject applications that do not meet its standards — and will do so. A rejected application does not stop the clock on regulatory obligations for businesses already operating in Singapore.
How We Help
MAS Licensing Requirements — What We Deliver
We translate MAS licensing requirements into actionable implementation frameworks — covering every mandatory pillar — and manage the full application process through to licence grant. Our approach is built on regulatory substance, not document filing.
🔍
Licensing Readiness Assessment
We conduct a comprehensive assessment of your business against all nine mandatory MAS pillars — identifying gaps, sequencing remediation, and building a clear path to submission-readiness before any filing work begins.
⚖️
Legal Opinion Drafting
We draft the mandatory MAS legal opinion — covering business model analysis, token classification, regulatory perimeter mapping, and licensing requirement conclusion — in the format and depth that MAS reviewers expect and that withstands the iterative query process.
🛡️
AML/CFT Framework Development
We design and implement the complete AML/CFT programme to MAS Notice PSN02 standard — including CDD procedures, EWRA, transaction monitoring calibration, Travel Rule compliance architecture, and STR reporting — tailored specifically to your DPT business model.
👥
Governance & Fit and Proper Review
We assess and structure the board and senior management team against MAS Fit & Proper criteria — reviewing CVs, designing the governance framework, establishing the compliance function, and preparing declarations in the format MAS requires.
🔁
Fund Flow Design
We design the end-to-end fund flow diagrams — the document that attracts the most MAS scrutiny — mapping every fiat and crypto movement, all third-party roles, and every custody and control point with no gaps or ambiguities across the full transaction lifecycle.
📋
Full MAS Application Support
We manage the complete application process across all seven phases — from regulatory scoping and documentation build through submission, MAS query management, management interview preparation, IPA condition satisfaction, and final licence grant.
End-to-End Licensing Support — Built to MAS Approval Standards
- We assess your business against all nine mandatory pillars before any application work begins
- We design and implement the frameworks — AML/CFT, governance, technology, and fund flows — that MAS requires
- We draft the legal opinion, business plan, and all supporting documentation to institutional-grade standards
- We manage all MAS interactions — query rounds, management interview preparation, and IPA condition closure
FAQs
Frequently Asked Questions — MAS DPT Licensing Requirements
Yes. MAS expects full compliance across all nine pillars. There is no partial credit, no deferral pathway, and no approval before all mandatory conditions are satisfied. Each pillar contains specific requirements that must be demonstrably met at the point of submission — not promised for post-approval implementation. The external audit, the legal opinion, and the AML/CFT framework are all explicitly mandatory for DPT applicants with no exceptions.
No. MAS requires operational readiness at the point of submission — not a promise to build systems after approval is granted. The AML/CFT programme, technology controls, governance framework, and compliance infrastructure must be documented, implemented, and demonstrably operational before the application is filed. MAS does not approve concept-stage businesses or businesses that plan to become compliant after licensing.
Yes — it is the primary area of MAS scrutiny and the most common cause of application failure. MAS Notice PSN02 sets legally binding AML/CFT standards for DPT service providers, and a generic or template-based programme will not satisfy those standards. The framework must be technology-enabled, risk-based, and specifically designed for the DPT business model — including CDD, EDD, transaction monitoring, Travel Rule compliance, sanctions screening, and an Enterprise-Wide Risk Assessment.
Yes. MAS has full authority to reject applications that do not meet its standards — and exercises that authority. A rejected application does not pause or excuse regulatory obligations for businesses already operating DPT services in Singapore. MAS may reject on the basis of governance deficiencies, inadequate AML/CFT controls, insufficient capital, or management team weaknesses — at any stage of the review process, including after the management interview.
The paid-up capital minimums are SGD 100,000 for a Standard Payment Institution (SPI) licence and SGD 250,000 for a Major Payment Institution (MPI) licence. However, meeting the minimum is not sufficient — MAS expects financial resilience, which includes demonstrating the ability to sustain operations and maintain sufficient liquidity. MAS expects applicants to hold an operational buffer of 6–12 months of operating expenses above the minimum capital threshold.
Licensing is not a one-time obligation. Once the licence is granted, ongoing compliance obligations begin immediately — including maintaining all compliance frameworks, submitting regulatory reports on schedule, undergoing periodic audits as required by MAS, and notifying MAS immediately of any material events or business model changes. MAS supervises all licensed DPT service providers on an ongoing basis, and regulatory standards continue to evolve — meaning compliance is a continuous operational requirement, not a one-time licensing threshold.
Ready to Assess Your Licensing Readiness?
Assess Your MAS DPT Licensing Readiness
Whether you are evaluating requirements for the first time or preparing to build your application, meeting MAS's mandatory standards starts with an honest assessment of where your business stands across all nine pillars.