Digital Payment Token (DPT) Licence Support (Singapore)

A Digital Payment Token (DPT) Licence Support in Singapore grants defined rights to use the licensed subject matter on the terms it specifies.

MAS administers the DPT licensing regime through the Payment Services Regulations 2019 and the MAS Notice PSN02 on Prevention of Money Laundering and Countering the Financing of Terrorism — Digital Payment Token Service. Under Section 5 of the PS Act, any entity carrying on a business of providing DPT services in Singapore must hold either a Standard Payment Institution (SPI) licence or a Major Payment Institution (MPI) licence, depending on its monthly transaction volume and e-money float. An SPI licence permits DPT transactions up to S$3 million per month, while an MPI licence has no transaction cap but imposes higher capital and compliance requirements.

The Financial Action Task Force (FATF) standards on virtual assets, adopted by MAS, require DPT service providers to implement anti-money laundering and countering the financing of terrorism (AML/CFT) controls equivalent to those imposed on banks and other financial institutions. MAS Notice PSN02 prescribes customer due diligence (CDD) requirements, ongoing monitoring of transactions, suspicious transaction reporting to the Suspicious Transaction Reporting Office (STRO) under the Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act (Cap. 65A), and record-keeping obligations.

The MAS Guidelines on Licensing for Payment Service Providers (PS-G01) set out the application process, the information and documents required, and the assessment criteria. MAS evaluates the applicant's shareholders and directors against fit-and-proper criteria under Section 28 of the PS Act, the adequacy of the applicant's technology risk management framework under MAS Guidelines on Technology Risk Management (TRM), and the strongness of the AML/CFT framework.

Singapore's approach to DPT regulation has evolved since 2020. MAS issued the Guidelines on Provision of Digital Payment Token Services to the Public (PS-G02) in January 2022, restricting DPT service providers from advertising their services in public areas and requiring risk warnings. The Financial Services and Markets Act 2022 (FSMA), which introduced a regulatory framework for stablecoin issuers in Singapore, further expanded MAS's oversight of the digital asset ecosystem.

Singapore approach to DPT regulation has evolved since 2020. MAS issued the Guidelines on Provision of Digital Payment Token Services to the Public (PS-G02) in January 2022, restricting DPT service providers from advertising their services in public areas and requiring risk warnings. The Financial Services and Markets Act 2022 (FSMA), which introduced a regulatory framework for stablecoin issuers in Singapore, further expanded MAS oversight of the digital asset ecosystem.

The Travel Rule, adopted by MAS in line with FATF Recommendation 16, requires DPT service providers to collect and transmit originator and beneficiary information for DPT transfers between regulated entities. MAS Notice PSN02 incorporates the Travel Rule requirements, and DPT service providers must implement technical solutions (such as TRUST or OpenVASP protocols) to comply with the information-sharing obligations. Non-compliance with the Travel Rule may result in enforcement action by MAS, including licence revocation.

A DPT Licence Support document is needed when a Singapore-incorporated entity (registered with ACRA) or a foreign entity establishing a Singapore presence intends to apply for a DPT service licence from MAS under the Payment Services Act 2019.

Cryptocurrency exchanges operating in Singapore — including platforms that allow users to buy, sell, or exchange Bitcoin, Ethereum, stablecoins, and other digital payment tokens for fiat currency (SGD, USD) or other tokens — must hold a DPT service licence. Operating a DPT service without a licence is an offence under Section 5 of the PS Act, punishable by a fine of up to S$250,000, imprisonment for up to 3 years, or both.

Over-the-counter (OTC) trading desks that deal in digital payment tokens on a bilateral basis — buying tokens from or selling tokens to counterparties without operating an exchange order book — also fall within the definition of DPT services under Section 2(1) of the PS Act and require licensing.

Cryptocurrency brokerage platforms that intermediate between retail customers and exchanges, executing trades on the customer's behalf and charging a commission or spread, require a DPT licence because they are dealing in digital payment tokens within the meaning of the PS Act.

Payment service providers integrating cryptocurrency payment acceptance — allowing merchants to accept Bitcoin or stablecoins as payment for goods and services and converting the tokens to SGD for settlement — provide DPT services and require licensing.

Decentralised finance (DeFi) projects with a Singapore-based entity operating front-end interfaces, customer onboarding, or fiat on/off-ramp services may fall within MAS's regulatory perimeter. MAS has stated that the PS Act applies based on the activity performed in Singapore, regardless of the underlying technology architecture.

Entities transitioning from the transitional exemption regime must apply for a full DPT licence. MAS granted transitional exemptions to entities that were carrying on DPT services before the PS Act commenced, allowing them to continue operations while their licence applications are assessed. Entities whose applications are rejected or withdrawn must cease DPT services.

Stablecoin issuers in Singapore are subject to the regulatory framework introduced by the Financial Services and Markets Act 2022, which imposes reserve backing, redemption, and disclosure requirements on single-currency stablecoins pegged to the Singapore dollar or any G10 currency. The DPT licence application should address stablecoin-specific requirements where applicable.

A Singapore DPT Licence Support document must address the following elements to satisfy MAS's licensing requirements under the Payment Services Act 2019, the Payment Services Regulations 2019, and the MAS Guidelines on Licensing for Payment Service Providers (PS-G01).

Applicant identification requires the full legal name and UEN of the Singapore entity registered with ACRA, the entity type (private limited company is the standard corporate form for DPT service providers), the registered address, the date of incorporation, and the names of all directors and shareholders holding 20% or more of the voting shares. Foreign-incorporated applicants must establish a Singapore subsidiary or branch registered with ACRA before applying.

Licence type selection between Standard Payment Institution (SPI) and Major Payment Institution (MPI) depends on the applicant's projected monthly DPT transaction volume. SPI licences permit up to S$3 million per month in DPT transactions and require a minimum base capital of S$100,000. MPI licences have no transaction cap but require minimum base capital of S$250,000 and impose additional ongoing requirements including an annual audit by an MAS-approved auditor.

DPT services description must detail the specific DPT services the applicant intends to provide — dealing in DPT (buying and selling tokens as principal), supporting the exchange of DPT (operating a matching platform), or both. The description should identify the specific tokens to be offered, the fiat currencies supported, the customer segments targeted (retail, institutional, or both), and the geographic markets served.

AML/CFT framework documentation must demonstrate compliance with MAS Notice PSN02 and the FATF standards on virtual assets. Required elements include: a written AML/CFT policy approved by the board of directors; customer due diligence (CDD) procedures covering identity verification (using MyInfo, SingPass Face Verification, or equivalent KYC tools), enhanced due diligence for high-risk customers, and ongoing monitoring; transaction monitoring systems capable of detecting suspicious patterns; suspicious transaction reporting procedures to STRO; sanctions screening against MAS's designated lists and the UN Security Council Consolidated List; and record-keeping for at least five years.

Capital and customer safeguarding requirements under the PS Act and Payment Services Regulations require the applicant to maintain minimum base capital (S$100,000 for SPI, S$250,000 for MPI) and to safeguard customer money and DPT assets. Customer money must be held in a trust account with a safeguarding institution (a bank licensed by MAS) under Section 23 of the PS Act. Customer DPT assets must be segregated from the service provider's own assets.

Technology risk management framework must comply with the MAS Guidelines on Technology Risk Management (TRM) and address cybersecurity controls, system availability and resilience, data backup and recovery, access controls, penetration testing, and incident response procedures. MAS expects DPT service providers to maintain security standards comparable to licensed financial institutions.

Business continuity plan must address operational resilience, disaster recovery, and the orderly wind-down of the business if the licence is revoked or the entity ceases operations. MAS requires DPT service providers to have a documented wind-down plan that protects customer assets and confirms customers can withdraw their tokens and fiat balances.

Fit and proper assessment documentation for all directors, CEO, and shareholders with 20% or more voting shares must include curriculum vitae, educational qualifications, employment history, regulatory track record, and declarations regarding criminal convictions, bankruptcy, and regulatory sanctions in any jurisdiction. MAS applies the Guidelines on Fit and Proper Criteria (FSG-G01) in assessing each individual.

Compliance function must be staffed by a qualified compliance officer with AML/CFT experience. The compliance officer reports to the board and is responsible for ongoing regulatory compliance, regulatory reporting to MAS, and liaison with STRO and other authorities. The forms-legal.com DPT Licence Support template for Singapore includes structured sections for all MAS-required documentation, confirming applicants address every element of the PS-G01 guidelines.

Advertising and marketing restrictions under the MAS Guidelines on Provision of Digital Payment Token Services to the Public (PS-G02) prohibit DPT service providers from promoting their services in public areas (MRT stations, bus stops, public websites, social media advertising targeting the general public). Marketing to existing or prospective customers through the provider's own platform or direct communication is permitted but must include risk warnings.