- Singapore — MAS Crypto Licensing Guide
Step-by-Step Guide to Obtaining a MAS Crypto Licence
A practical roadmap to securing a Digital Payment Token (DPT) licence under the Payment Services Act (PSA) — from regulatory structuring and compliance framework design to MAS submission and approval.
Licensing Journey — At a Glance
🗂️
12 defined steps from activity confirmation through to final licence grant
⏱️
Typical total timeline: 6 - 9+ months for a well-prepared applicant
🛡️
AML/CFT framework must be operational — not theoretical — at submission
📊
Fund flow diagrams are among the most scrutinised documents in any application
📋
A complete MAS application can require 50+ supporting documents
From Idea to Approval
MAS Licensing Is a Structured Readiness Assessment — Not a Filing Exercise
Launching a regulated crypto business in Singapore requires more than submitting an application. MAS evaluates whether your business is fully prepared to operate as a regulated financial institution — and approval is only granted when that readiness is demonstrated, not promised.
The MAS licensing process for DPT service providers follows a structured 12-step pathway — from confirming your regulatory obligation through to receiving the final PSA licence. Each step builds on the last, and skipping or shortcutting any step creates compounding problems later in the process.
MAS does not approve applications. It approves operational readiness. The distinction matters: MAS is not evaluating whether you have completed a form — it is assessing whether your business can safely, compliantly, and sustainably operate as a regulated financial institution under the PSA framework.
💡
Key Principle: MAS approval is driven by clarity, control, and consistency — across your business model, your compliance systems, your governance structure, and every document in the submission.
What MAS Is Really Assessing at Every Step
- Do we understand this business clearly?
Your business model, regulated activities, fund flows, and operating structure must be presented with complete clarity — no ambiguities, no gaps.
- Are risks identified and controlled?
Every material risk — AML, operational, cybersecurity, liquidity — must be identified, documented, and supported by operational controls that are demonstrably in place.
- Is the system secure and scalable?
Technology infrastructure, cybersecurity controls, wallet management, and incident response must meet institutional-grade standards — not startup-grade standards.
🗂️
12 Steps
Defined steps from activity confirmation to final licence — each must be completed correctly
⏱️
6 – 9 + Months
Realistic total timeline for a well-prepared applicant — poor preparation extends this significantly
📋
50+ Docs
A complete MAS application can require over 50 supporting documents across all categories
The Complete Licensing Process
The 12-Step MAS DPT Licensing Roadmap
Every MAS DPT application follows twelve defined steps — from confirming your licensing obligation through to receiving the final PSA licence. Steps 5 and 6 (fund flow design and AML/CFT framework) are the most scrutinised and most commonly underestimated phases of the process.
ST 01
🔍
Confirm Whether Your Business Requires a MAS Licence
The first step is determining whether your activities fall within the scope of Digital Payment Token (DPT) services under the PSA. Licensing is based on what your business does — not what it is called.
You Likely Require a Licence If You
- Operate a crypto exchange or trading platform
- Facilitate crypto transactions between parties
- Transfer digital assets on behalf of customers
- Provide custody or wallet services for digital assets
📄 Regulatory classification memo — activity mapping and licence type determination
ST 02
🗺️
Define Your Business Model & Regulated Activities
Before structuring your company or building compliance systems, you must clearly map your business model — how users interact, how transactions execute, where funds move, and who controls assets at every point.
Key Output
- A clear activity map identifying all DPT services in scope
- Related payment services identified and classified
- Risk points mapped across the full operating model
- Licence type determination — SPI or MPI — confirmed
📄 Activity mapping document — foundation for all subsequent steps
ST 03
🏗️
Establish Your Singapore Entity & Corporate Structure
You must incorporate a Singapore-based legal entity that will apply for the licence. MAS expects transparent ownership, identified UBOs, and genuine local substance — complex or unclear structures delay the process.
MAS Expectations
- Transparent ownership structure with no unresolved layers
- Ultimate Beneficial Owners (UBOs) clearly identified
- Local substance and decision-making presence in Singapore
- Operational address — not a nominee or virtual office
📄 Corporate structure chart + UBO declaration + entity incorporation
ST 04
👥
Appoint Directors & Key Management
MAS evaluates the people behind the business — not just the entity. The board and senior management must demonstrate relevant experience, a clean regulatory history, and the capability to manage risk in a regulated financial services context.
Required Appointments
- Directors — at least one Singapore-resident where required
- CEO and senior management — financial services experience
- Compliance Officer — independent, with AML/CFT expertise
Fit & Proper Requirements
- Relevant experience in financial services or regulated industries
- Clean regulatory history — no adverse findings or sanctions
- Demonstrated capability to manage compliance and risk
ST 05
📊
Design Fund Flow Diagrams & Operating Model
This is one of the most critical steps in the entire process. Fund flow diagrams receive more MAS queries than any other document — and incomplete or ambiguous diagrams are the second most common cause of application delays.
Your Fund Flows Must Show
- Fiat and crypto entry points — how funds arrive into the platform
- Internal movement of funds — across every system and account
- Custody arrangements — who holds assets and at what point
- Exit points — withdrawals, transfers, and settlement flows
- All third-party involvement — labelled, explained, and mapped
Why MAS Focuses on Fund Flows
- To understand the full operating model of the business
- To identify all risk areas and control points
- To assess the adequacy of AML and compliance controls
⭐ Most Queried Document — No Gaps Permitted
ST 06
🛡️
Build a MAS-Compliant AML/CFT Framework (PSN02)
A strong, technology-enabled AML/CFT system is the most important single requirement for MAS approval. It must be operational — not theoretical — and specifically designed for the DPT business model. Generic templates will not satisfy MAS Notice PSN02.
Your Framework Must Include
- Customer Due Diligence (CDD) — identity verification and beneficial ownership
- Enhanced Due Diligence (EDD) — high-risk customers and PEPs
- Transaction monitoring — technology-enabled, ongoing surveillance
- Sanctions screening — real-time screening of all customers and transactions
- Suspicious transaction reporting — documented escalation procedures
- Travel Rule compliance — sender and recipient data transmission architecture
- Enterprise-Wide Risk Assessment (EWRA) — current and documented
⭐ Primary Cause of Application Failure — Must Be Operational at Submission
ST 07
📁
Prepare the Full Application Pack
This is the most intensive phase of the process. The complete MAS application can require 50+ supporting documents — all of which must be internally consistent, complete, and defensible under deep MAS scrutiny.
Core Documentation Includes
- Regulatory Business Plan (RBP) — primary narrative document
- Legal opinion — mandatory for all DPT applicants
- AML/CFT policies and procedures
- Governance framework and Fit & Proper declarations
- Technology and cybersecurity policies
- Financial projections and capital confirmation
- External auditor report — DPT-specific mandatory (≤ 3 months old)
📄 Complete, consistent, submission-ready application package
PH 08
💻
Demonstrate Technology & Security Readiness
MAS expects strong operational resilience. Crypto businesses are technology-driven and risk-sensitive — and MAS treats them as critical financial infrastructure. Technology controls must be documented, implemented, and demonstrably operational at submission.
You Must Demonstrate
- Secure system architecture — high availability and resilience
- Wallet and custody controls — segregation and reconciliation
- Private key lifecycle and management procedures
- Incident response and escalation procedures
- Cybersecurity safeguards — access controls, MFA, vulnerability management
- Penetration testing and vulnerability assessment evidence
📄 Technology governance framework + TRM Notice compliance evidence
PH 09
📤
Submit Your Application to MAS
Once the complete application pack is ready, submission is made via the MAS licensing portal. All declarations must be signed, all documents uploaded, and applicable fees paid — incomplete applications are typically returned for revision.
Submission Requirements
- Submit via the MAS e-services licensing portal
- Pay applicable statutory application fee (SGD 1,000–1,500)
- Ensure all declarations are signed by authorised persons
- Confirm all 50+ documents are present and complete before filing
📄 Complete submission — no partial files accepted by MAS
PH 10
🔄
Respond to MAS Queries
After submission, MAS will review the application and issue detailed queries. Multiple rounds of queries are standard — not exceptional. Every response must strengthen, not reopen, issues in the application.
Common MAS Focus Areas
- AML/CFT controls — depth, technology, and risk calibration
- Fund flows — clarifications on third-party roles and custody points
- Governance structure — reporting lines and compliance function independence
- Technology systems — architecture detail and security evidence
📋 Management interview — competence and readiness assessment by MAS
PH 11
✅
Obtain In-Principle Approval (IPA)
If MAS is satisfied with the application and management interview, it will issue an In-Principle Approval (IPA). IPA conditions must be fully satisfied and evidenced before the final licence is granted.
IPA May Include Conditions Such As
- Hiring key personnel — compliance officer, MLRO, or other roles
- Completing system testing and cybersecurity validation
- Strengthening or finalising specific compliance controls
- Confirming capital and safeguarding arrangements are live
📄 IPA letter — all conditions must be satisfied and evidenced before final grant
ST 12
🏛️
Receive Final MAS Licence — Begin Regulated Operations
Once all IPA conditions are met and evidenced to MAS's satisfaction, the full PSA licence is granted and your business can legally operate as a regulated DPT service provider. Ongoing compliance obligations begin from the date of licence grant.
✔ All IPA Conditions Met
Every condition in the IPA letter satisfied, implemented, and evidenced to MAS.
✔ Operational Readiness Confirmed
Systems, staffing, compliance frameworks, and infrastructure live and tested.
✔ Ongoing Supervision Begins
Regulatory reporting, audits, and MAS notifications become ongoing obligations from day one.
Realistic Timeline Planning
How Long Does MAS Licensing Take?
A realistic MAS licensing timeline for a well-prepared applicant spans approximately 6–9 months from the start of preparation to final licence grant. The quality of the initial submission directly determines how efficiently the process moves — poor preparation can extend the timeline to 12 months or beyond.
Stage
Estimated Timeline
Preparation
1–3 months
MAS Review & Query Rounds
3–6 months
IPA Conditions & Final Approval
1–2 months
Total Timeline (Well-Prepared)
Approximately 6 - 9+ months
⚠️
Timeline Warning: Applications with weak AML frameworks, incomplete fund flows, or inconsistent documentation generate extensive query rounds that regularly extend the timeline to 12+ months. Investment in preparation quality is the single most effective way to manage timeline risk.
What Drives Timeline Efficiency
- Complete First Submission
A complete, consistent, and submission-ready application from day one reduces the number of MAS query rounds and accelerates the review phase.
- Strong AML/CFT Framework
A robust, technology-enabled AML programme that clearly meets PSN02 reduces the depth and number of AML-related query rounds — the most common source of delay.
- Responsive Query Management
Fast, precise, and consistent responses to MAS queries — managed by experienced regulatory advisors — keep the review moving without reopening settled issues.
- Management Interview Preparation
A well-prepared leadership team that can articulate the business model, risk framework, and compliance approach with precision avoids the additional rounds of follow-up that an unprepared interview generates.
Avoiding the Common Pitfalls
Common Mistakes That Delay MAS Applications — and What MAS Is Really Looking For
Understanding what derails applications is as valuable as understanding the licensing roadmap itself. These are the most common failure patterns — and what the MAS approval test is actually evaluating at each step.
Common Mistakes That Delay Applications
❌
Applying Before Readiness
Submitting an application before the business is operationally ready — planning to build systems during the MAS review period. MAS does not process partial applications and does not approve businesses that intend to become compliant after licensing.
❌
Weak AML Framework
Generic or template-based AML programmes that are not specifically designed for the DPT business model. The most common single cause of extensive query rounds and application delays — and of outright rejection.
❌
Poor Fund Flow Clarity
Incomplete or ambiguous transaction flow diagrams — missing third-party roles, unresolved custody points, or fiat and crypto flows not mapped separately. MAS issues more queries on fund flows than any other document.
❌
Inconsistent Documentation
Contradictions between documents — where the business plan describes services the fund flows do not support, or governance documents contradict the compliance framework. Every document must tell the same regulatory story.
❌
Overcomplicated Corporate Structure
Complex or opaque corporate structures with unresolved UBO chains or unclear ownership layers. MAS expects complete transparency — unclear structures trigger deep investigations that halt the review timeline.
What MAS Approval Really Requires
✔
Clarity — MAS Understands the Business
The business model, regulated activities, fund flows, and operating structure are presented with complete transparency — no ambiguities, no gaps, no contradictions across documents.
✔
Control — Risks Are Identified and Managed
All material risks — AML, operational, cybersecurity, liquidity — are identified, documented, and supported by operational controls that are demonstrably in place and functioning.
✔
Consistency — Every Document Tells the Same Story
The RBP, fund flows, AML framework, governance documents, and technology policies are internally consistent — each reinforcing the same regulatory narrative without contradiction.
✔
Competence — The Team Can Manage Compliance
The board and senior management demonstrate relevant experience and can articulate the risk framework, compliance approach, and business model with precision — at both the documentation and management interview stage.
How We Help
MAS Licensing Support — What We Deliver
We guide crypto businesses through every stage of the MAS licensing process — from the first regulatory scoping call through to final licence grant — ensuring every step is built to MAS's approval standards, not just to completion.
🗺️
Licensing Strategy & Activity Mapping
We determine whether your business requires a MAS licence, classify all regulated activities under the PSA framework, select the appropriate licence type (SPI or MPI), and build the licensing strategy before any application work begins.
🏗️
Business Structuring Under PSA & FSMA
We design the Singapore entity structure, corporate governance framework, and UBO disclosure architecture — ensuring transparency, MAS compliance, and a clean ownership structure that does not trigger additional scrutiny during review.
🛡️
AML/CFT Framework Development (PSN02)
We design and implement the complete AML/CFT programme to MAS Notice PSN02 standard — CDD, EDD, transaction monitoring, Travel Rule compliance, sanctions screening, EWRA, and STR reporting — tailored specifically to the DPT business model.
🔁
Fund Flow Design & Documentation
We design the end-to-end fund flow diagrams — the most queried document in any MAS application — mapping every fiat and crypto movement, all third-party roles, and every custody and control point with no gaps across the full transaction lifecycle.
📋
Full MAS Application Preparation
We prepare the complete application package — legal opinion, Regulatory Business Plan, AML/CFT policies, governance framework, technology documentation, financial projections, and external audit coordination — ensuring everything is complete, consistent, and submission-ready.
🔄
End-to-End Regulatory Support
We manage all MAS interactions throughout the licensing process — drafting query responses, preparing the leadership team for the management interview, satisfying IPA conditions, and carrying the file through to final licence grant and operational go-live.
End-to-End MAS Licensing Support — Step 1 Through to Step 12
- We confirm your licensing obligation and classify your regulated activities before any preparation or structuring begins
- We design the AML/CFT framework, fund flow diagrams, and governance structure that form the core of the MAS review
- We prepare the complete 50+ document application package — consistent, complete, and built to MAS approval standards
- We manage all query rounds, management interview preparation, IPA conditions, and post-approval compliance to operational go-live
FAQs
Frequently Asked Questions — MAS DPT Licensing
Only if they perform regulated DPT activities under the Payment Services Act. The key question is not what the business is called — it is what the business does. If you operate a crypto exchange, facilitate crypto transactions, transfer digital assets on behalf of customers, or provide custody or wallet services, you almost certainly require a MAS licence. Step 1 of the licensing process is confirming whether your specific activities fall within the regulated perimeter — this should be done before any other preparation begins.
Typically 6 – 9+ months for a well-prepared applicant. The timeline breaks down as approximately 1–3 months of preparation, 3–6 months of MAS review and query rounds, and 1–2 months for IPA conditions and final approval. Applications with weak AML frameworks, incomplete fund flow diagrams, or inconsistent documentation regularly extend to 12 months or more. Investment in preparation quality is the single most effective way to manage timeline risk — a complete and consistent first submission reduces the number of query rounds and accelerates the review phase significantly.
A strong, operational AML/CFT framework — this is the primary area of MAS scrutiny and the most common cause of application failure. Weak or generic AML programmes are the single most frequent reason for extensive query rounds and outright rejection. The framework must meet MAS Notice PSN02 standards, be technology-enabled, specifically designed for the DPT business model, and demonstrably operational at submission — not planned for post-approval implementation. Fund flow diagrams are the second most scrutinised area and the most common source of MAS queries.
No. MAS expects operational readiness at the point of submission — not a promise to build systems after approval. The AML/CFT programme, technology controls, governance framework, compliance function, and fund flow documentation must all be operational and demonstrably in place before the application is filed. MAS does not process concept-stage applications and does not grant licences to businesses planning to become compliant after licensing. Starting preparation 1–3 months before submission is the minimum viable timeline for a well-resourced applicant.
Ready to Start Your MAS Licensing Journey?
Start Your MAS DPT Licensing Journey
Whether you are at Step 1 — confirming your licensing obligation — or ready to build the full application, your MAS DPT licence starts with the right preparation and the right regulatory partner.