Crypto Exchange Licensing Requirements in Singapore: FSMA & PSA Guide 2026

Running a crypto business in Singapore used to be a gray area. You could set up shop, serve clients overseas, and mostly fly under the radar. That era ended on June 30, 2025.

The Monetary Authority of Singapore (MAS) pulled the rug out from under offshore-focused operators with the full implementation of the Financial Services and Markets Act (FSMA). If you are looking to launch or expand a crypto exchange license in Singapore today, you need to understand that the regulator has drawn a hard line: if you operate here, you play by their rules, regardless of where your customers sit.

This guide breaks down exactly what changed, which license you need, and how to navigate the new landscape without getting shut down.

The Two Pillars: PSA vs. FSMA

To get licensed, you first need to know which law applies to you. Currently, two frameworks govern digital asset services in Singapore: the older Payment Services Act (PSA) and the newer Financial Services and Markets Act (FSMA).

Payment Services Act 2019 has been the backbone since 2020. It categorizes licenses based on transaction volume. Then came Financial Services and Markets Act 2022, which introduced the concept of Digital Token Service Providers (DTSPs). As of late 2025, these two systems work together, but FSMA is the heavy hitter for anyone dealing with significant market activity or institutional clients.

Here is the quick breakdown:

• PSA Licenses: Best for payment-focused activities, smaller exchanges, and basic token transfers.
• FSMA DTSP Licenses: Required for operating a trading platform, managing investment tokens, or providing custody services for significant assets.

If you are running a traditional order-book exchange where users trade tokens against each other, you likely fall under FSMA’s DTSP regime. If you are just facilitating payments using stablecoins, PSA might suffice. But don’t guess-get legal advice.

Choosing Your License Tier

Under the PSA framework, your license type depends on how much money moves through your pipes. The MAS looks at your monthly transaction value to decide your tier.

For most serious exchanges, the Major Payment Institution (MPI) license is the target. Why? Because once you hit that SGD 3 million monthly threshold, you have no choice. And let’s be honest, if you’re building an exchange, you probably plan to exceed that quickly.

The capital requirement isn’t just cash in the bank. It’s paid-up capital. This means the money must be fully contributed and available to cover operational risks. For larger operations, expect to hold significantly more than the minimum to satisfy MAS’s fit-and-proper tests for directors and substantial shareholders.

The DTSP Regime: No More Offshore Loopholes

Here is where things got tight. Before June 2025, many firms operated in Singapore while serving only foreign clients. They argued that since no local residents were involved, they didn’t need a full license. MAS called this "regulatory arbitrage" and closed the door.

Under the Digital Token Service Provider (DTSP) framework, there is no transitional period. You either meet the high compliance standards immediately or you cease operations. Chengyi Ong, head of Asia Pacific policy at Chainalysis, put it bluntly: "Financial integrity is a red line."

MAS wants to insulate Singapore from reputational risk. They remember the collapses of Three Arrows Capital and Terraform Labs in 2022. Those events showed that even offshore-linked entities can cause massive disruption if they have ties to the region. Now, if your substantive regulated activity is outside Singapore, MAS will likely deny your license. They want real substance, not just a mailbox address.

Anti-Money Laundering: The Non-Negotiable Core

You cannot get a license without a robust Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) program. This is governed by MAS Notice PSN02. It requires you to treat crypto transactions with the same scrutiny as traditional banking.

Your system must include:

1. Customer Due Diligence (CDD): Verify every user. Know who they are, where their money comes from, and why they are trading.
2. Ongoing Monitoring: Don’t just check IDs at sign-up. Monitor transactions in real-time for suspicious patterns.
3. Suspicious Transaction Reporting: If something looks off, report it to the Suspicious Transaction Reporting Office (STRO) immediately.
4. Risk Assessment: Document how you identify threats and mitigate them. Market monitoring is part of this.

This isn’t paperwork you file once. It’s an ongoing operational cost. You need dedicated compliance staff or expensive third-party software to handle this. Many smaller operators struggle here because the technology stack required for real-time AML monitoring is complex and costly.

The Application Process: What to Expect

Applying for a license is not a click-and-done process. It is a marathon. Here is what you need to prepare:

• Business Plan: Detail your mission, revenue model, marketing strategy, and growth projections. Be specific. Vague plans get rejected.
• AML/KYC Policies: Submit detailed procedures for customer verification and financial crime prevention.
• Internal Controls: Show how you secure customer funds, manage risks, and ensure data privacy.
• Audit Reports: Annual internal and external audits are mandatory. Have your accounting firm ready.
• Capital Proof: Demonstrate you have the authorized capital to facilitate transactions.

Timing varies wildly. A Standard Payment Institution license might take 3-6 months if you have professional legal support. A Major Payment Institution or DTSP license can take 6-12 months or longer. Why? Because MAS conducts enhanced due diligence. They will dig into your background, your tech infrastructure, and your compliance culture. Expect multiple rounds of questions and document requests.

How Singapore Compares Globally

Why choose Singapore over other hubs? It’s about balance. China has banned crypto entirely. The US has a fragmented state-by-state approach that is a legal nightmare. Switzerland has high capital requirements, often reaching millions of francs.

Singapore offers a unified national standard under MAS. The minimum capital of SGD 100,000-250,000 is accessible for medium-sized operators. However, the operational burden is high. Hong Kong is emerging as a competitor with its own licensing framework, but Singapore has the first-mover advantage in terms of established regulatory clarity.

Unlike the EU’s MiCA regulation, which gave firms years to adapt, Singapore’s DTSP regime hit immediately. This signals that MAS is serious. They are not waiting for problems to arise; they are preventing them upfront.

Is It Worth It?

If you are a well-capitalized, compliance-focused operator, yes. The regulatory certainty attracts institutional investors who refuse to touch unregulated platforms. Being MAS-licensed is a badge of trust in the Asian market.

If you are a small startup or an offshore-only operation, think twice. The costs of compliance, legal fees, and minimum capital may outweigh the benefits. MAS has made it clear: they will not issue licenses to firms using Singapore as a base to evade regulation elsewhere.

The bar is high. But for those who can clear it, Singapore remains one of the best places in the world to build a legitimate crypto business.