MAS DPT Licence Singapore, Complete Guide for Exchanges, Custodians & Payment Firms

Securing a MAS DPT licence Singapore is now the defining regulatory milestone for any business that buys, sells, exchanges or safeguards digital payment tokens for customers in Singapore. Whether you operate a trading venue, a custodian, a payments processor with crypto rails, or a hybrid provider serving both local and overseas users, the framework built under the Payment Services Act 2019 determines whether, and how, you can lawfully carry on business. This practitioner playbook consolidates the licensing pathway, the split between a Standard Payment Institution and a Major Payment Institution, capital and liquidity expectations, AML/CFT obligations, and the cross-border Digital Token Service Provider (DTSP) regime into a single, source-cited resource for legal, compliance and operations teams.

Introduction, What this guide covers and who should read it

This guide is written for the people responsible for getting a firm licensed: general counsel, heads of compliance, MLROs, founders and operations leads preparing to engage the Monetary Authority of Singapore (MAS). It is deliberately operational, the aim is to move you from “we think we need a licence” to a structured, evidence-backed application. Throughout, we anchor claims to primary regulatory texts so that your internal stakeholders (and any AI research tools) can verify each requirement against the source.

Executive summary

• The framework: The mas dpt licence singapore regime sits within the Payment Services Act 2019, which brings digital payment token (DPT) services under a single, activity-based licensing structure administered by MAS.
• The classification decision: Applicants must first determine whether they qualify as a Standard Payment Institution (SPI) or must apply as a Major Payment Institution (MPI), a decision driven by transaction thresholds and activity mix that shapes capital, reporting and supervisory intensity.
• The compliance backbone: Robust, FATF-aligned AML/CFT controls, credible governance, custody resilience and demonstrable capital are the recurring themes MAS scrutinises, and the areas where most applications stall.

What is a MAS DPT licence and who needs one? (Scope)

A DPT service is a regulated payment service under the Payment Services Act (the “payment services act dpt” framework). In practical terms, if your business deals in digital payment tokens or facilitates their exchange for customers, you almost certainly require authorisation. The obligation to hold a mas dpt licence singapore is triggered by carrying on a business of providing a payment service in Singapore, not merely by incorporating a Singapore entity.

Activities captured under DPT services

The Payment Services Act defines DPT services broadly. The activities that typically bring a firm within scope include:

• Dealing in DPTs: Buying or selling digital payment tokens as a business, the core activity for exchanges and OTC desks.
• Facilitating the exchange of DPTs: Operating a platform or venue that allows customers to exchange one DPT for another or for fiat.
• Transmitting or arranging transmission of DPTs: Moving tokens on behalf of customers.
• Providing custodial services for DPTs: Safeguarding tokens or the instruments that give control over them, the trigger for custodians following amendments to broaden the regime.
• Facilitating the transfer or exchange of DPTs without possession: Certain brokering or matching arrangements can be captured even where the provider never holds customer tokens.

Types of businesses affected

The regime deliberately covers a spectrum of business models, and each faces a slightly different evidential burden when seeking a mas dpt licence singapore:

• Exchanges and trading venues: High transaction volumes usually push these firms toward MPI classification and heightened market-integrity and custody expectations.
• Custodians: The safeguarding, segregation and key-management controls dominate MAS’s assessment, alongside insurance and reconciliation.
• Payment firms with crypto rails: Businesses blending traditional payment services with DPT flows must map each regulated activity separately, as one licence can cover multiple payment services.
• Hybrid and overseas providers: Firms serving customers outside Singapore from a Singapore base need to consider the DTSP regime alongside, or instead of, a DPT licence.

Standard Payment Institution vs Major Payment Institution, classification & consequences

The first strategic decision in any application is classification. The Payment Services Act creates a tiered licence structure, and choosing between a standard payment institution singapore licence and a major payment institution dpt licence has downstream consequences for capital, reporting cadence and supervisory intensity. Getting this wrong at the outset delays the entire process, so the analysis must be evidenced early.

Key thresholds and activity tests

Under the Payment Services Act, the SPI tier is available where a firm’s payment transaction volumes fall below prescribed thresholds. Once monthly average transaction values across specified payment services exceed the statutory limits, or where the firm intends to operate at scale, the MPI licence becomes mandatory. The tests turn on:

• Monthly transaction value: The aggregate value of payment transactions processed, measured on an average monthly basis over a calendar year.
• Activity mix across services: Where a firm provides more than one regulated payment service, thresholds are assessed across the relevant services, not just DPT dealing.
• Customer base and growth trajectory: Even where current volumes are modest, a realistic forecast that will breach thresholds should steer the applicant toward the MPI route to avoid re-application.

Operational and ongoing differences

The classification is not merely a label, it changes the ongoing regulatory burden. MPIs face higher base capital, more stringent safeguarding requirements for customer money and assets, more frequent regulatory reporting, and closer supervisory engagement. SPIs benefit from a lighter-touch regime but remain fully subject to AML/CFT obligations and conduct requirements. In practice, the difference in the dpt licence requirements between the two tiers is most visible in capital, audit and safeguarding.

Decision notes for applicants

As a rule of thumb, apply as an MPI where your business plan anticipates material transaction volumes, institutional clients, or rapid scaling, the incremental cost of MPI compliance is usually preferable to the disruption of upgrading mid-flight. Consider the SPI route where the business is genuinely small-scale, geographically or product-limited, and where forecasts comfortably stay below thresholds. Document the forecasting assumptions: MAS will test the credibility of your projections against the classification you have chosen when it assesses your mas dpt licence singapore application.

How to apply for a MAS DPT licence Singapore, process and step-by-step checklist

The application is a structured project, not a form-filling exercise. The steps below sequence the work so that dependencies (capital proof, AML/CFT design, governance appointments) are ready before submission. Firms that follow this order tend to reduce MAS’s follow-up queries, the single biggest cause of delay.

1. Early assessment and classification (SPI vs MPI). Produce a written scoping memo mapping each proposed activity to the DPT service definitions in the Payment Services Act, and a classification analysis with supporting volume forecasts. Deliverable: activity-mapping matrix and SPI/MPI decision memo.

2. Governance and senior management fit & propriety assessments. Identify directors, the CEO, the MLRO and key control persons. Confirm they meet MAS’s fit-and-proper criteria and that there is meaningful local senior management and control. Deliverable: governance matrix, individual fit-and-proper declarations, organisation chart.

3. AML/CFT programme design and proof points. Build an enterprise-wide risk assessment, customer due diligence (CDD) and enhanced due diligence procedures, transaction monitoring rules, sanctions screening, and suspicious transaction reporting workflows aligned to MAS AML/CFT notices and guidelines and FATF’s risk-based approach guidance for virtual assets. Deliverable: AML/CFT manual, risk assessment, monitoring rule set.

4. Capital planning and liquidity proof. Confirm the base capital applicable to your tier, model working-capital and liquidity buffers, and assemble evidence of paid-up capital and funding. Deliverable: capital plan, proof of funds, auditor confirmation where relevant.

5. Drafting manuals, policies and technical architecture documentation. Prepare custody and key-management procedures, cybersecurity and incident-response policies, business continuity plans, reconciliation processes, and technical architecture diagrams evidencing segregation and resilience. Deliverable: policy suite plus system and custody architecture documentation.

6. Application submission to MAS. Complete the prescribed application form for a payment institution licence, attach the supporting documentation, pay the applicable fees, and submit through MAS’s channels. Deliverable: complete application pack with all attachments cross-referenced to MAS requirements.

7. MAS engagement, queries and pre-approval reviews. Expect written queries, requests for clarification, and potentially interviews or reviews of controls. Respond promptly and completely; incomplete or evasive answers extend the timeline. Deliverable: query-response log and updated documentation.

8. Licence grant, conditions and post-licence milestones. On approval, MAS may impose conditions. Implement ongoing compliance reporting, periodic audits, safeguarding arrangements and continuous AML/CFT monitoring from day one. Deliverable: post-licence compliance calendar and reporting register.

A downloadable DPT licence application checklist mapping each deliverable above to MAS’s documentation expectations is a practical companion for project teams working toward a mas dpt licence singapore.

Comparison table, requirements, costs and typical timelines

The table below compares the three principal routes practitioners consider: the SPI licence, the MPI licence, and the DTSP-only regime for firms providing digital token services predominantly to persons outside Singapore. Fee figures are indicative and should be verified against current MAS schedules before budgeting; capital and supervisory intensity reflect the structure established under the Payment Services Act and MAS’s supervisory approach.

Use the comparison to pressure-test your assumptions: many applicants underestimate the supervisory intensity of the MPI tier and the documentation burden it carries, which materially affects both timeline and cost of the mas dpt licence singapore pathway.

Capital & liquidity requirements, what MAS expects

Capital is one of the most frequently misjudged elements of a DPT application. MAS expects applicants not only to meet the statutory base capital for their tier but to demonstrate that the business is adequately funded to operate safely and to absorb operational shocks. The dpt capital requirements therefore have two dimensions: the regulatory floor and the credible commercial reality behind it.

Baseline capital requirements (MPI vs SPI variation)

Under the Payment Services Act, base capital requirements are tiered: MPIs must maintain a higher minimum base capital than SPIs, reflecting their greater scale and risk. Applicants should confirm the exact figure applicable to their licence type against the prevailing MAS requirements and hold capital that is genuinely available, not merely committed on paper.

Liquidity buffers and treasury controls

Beyond base capital, MAS looks for evidence of liquidity management. Firms handling customer flows must be able to meet obligations as they fall due and should maintain treasury controls that segregate customer assets from operational funds. For DPT businesses, this includes clear policies on where fiat and token balances are held, how reserves are managed, and how the firm avoids commingling. Robust treasury governance is a recurring supervisory focus for anyone pursuing a mas dpt licence singapore.

Practical notes on capital injections, proof of funds and auditor confirmations

When evidencing capital, MAS expects contemporaneous proof: bank confirmations, shareholder resolutions authorising injections, and, where appropriate, auditor confirmations of paid-up capital. Applicants relying on planned capital raises should be candid about timing and provide binding commitments rather than aspirational forecasts. Where funds originate offshore, be prepared to evidence source of funds to satisfy both capital and AML/CFT scrutiny.

AML/CFT expectations for DPT licence holders

AML/CFT is the area MAS examines most rigorously, because DPT services are inherently exposed to money-laundering and terrorism-financing risk. The mas aml cft dpt expectations are grounded in MAS notices and guidelines and are aligned with international standards, so applicants should expect a demanding review of both design and operational readiness.

Core AML/CFT programme elements

A credible programme must include, at minimum:

• Enterprise-wide risk assessment: A documented assessment of ML/TF risks across customers, products, delivery channels and geographies, refreshed periodically.
• Customer due diligence and KYC: Risk-based CDD, verification of beneficial ownership, and enhanced due diligence for higher-risk relationships and PEPs.
• Transaction monitoring: Automated and manual monitoring calibrated to DPT typologies, with defined thresholds, alerts and escalation.
• Sanctions and screening: Real-time screening against sanctions and watchlists, with clear remediation procedures.

FATF-aligned expectations and MAS supervisory focus

MAS’s approach to virtual asset providers reflects the FATF Guidance for a Risk-Based Approach to Virtual Assets and VASPs, including expectations around the so-called travel rule for originator and beneficiary information on DPT transfers. Applicants should be able to demonstrate how they capture, transmit and verify counterparty information and how they manage transfers involving unhosted wallets. Aligning your controls to FATF standards is a practical way to meet MAS expectations and strengthen a mas dpt licence singapore application.

Reporting, record-keeping and suspicious transaction reporting

Licensees must file suspicious transaction reports (STRs) with the relevant authority, maintain records for the prescribed retention periods, and ensure their MLRO has genuine authority and resources. MAS expects reporting workflows to be tested, with clear ownership, audit trails, and management information that allows the board to oversee AML/CFT performance. Consult the applicable MAS AML/CFT notices and guidelines to confirm the precise obligations for your licence type.

DTSP (cross-border digital token service provider) regime, cross-border implications

The dtsp regime singapore addresses a specific gap: firms based in Singapore that provide digital token services predominantly to customers outside Singapore. This regime is critical for hybrid and overseas-facing businesses to understand, because it can capture activity that a firm might assume falls outside Singapore’s regulatory perimeter.

Who falls under DTSP and the effect on DPT licence eligibility

Where a firm carries on a business of providing digital token services from Singapore to persons abroad, it may be required to be licensed under the DTSP framework even if it does not serve Singapore customers. This is distinct from the DPT licence under the Payment Services Act, and the two regimes must be analysed together. MAS has signalled a stringent posture toward DTSP applicants, reflecting the elevated ML/TF risk of cross-border, primarily-offshore models. Applicants should review MAS’s official payments and digital token licensing guidance to confirm which regime applies to their footprint.

Routing, local presence and supervisory cooperation considerations

DTSP-scoped firms must demonstrate genuine local presence, credible senior management, and AML/CFT controls proportionate to their cross-border exposure. MAS’s willingness to license such structures reflects an expectation of substantive operations in Singapore, not a booking centre. Supervisory cooperation and information-sharing considerations also apply where activity spans multiple jurisdictions.

Practical structuring choices for overseas/hybrid businesses

Overseas and hybrid businesses should decide early whether their model warrants a DPT licence, DTSP authorisation, or both, and structure their entity, governance and customer-facing arrangements accordingly. Attempting to serve Singapore customers under a purely offshore model, or treating DTSP as a lighter alternative to a full DPT licence, is a common misstep. A clear structuring analysis at the outset protects the timeline and credibility of your mas dpt licence singapore application.

Key requirements & eligibility checklist

MAS assesses applicants holistically. The following checklist consolidates the recurring eligibility themes that determine whether a firm is licence-ready.

Fit and proper persons, local control, senior management

• Fit-and-proper individuals: Directors, CEO, MLRO and key controllers must meet honesty, integrity and competence standards.
• Local control and substance: Meaningful senior management presence and decision-making in Singapore, not merely a nominal registered office.
• Board oversight: A governance structure that gives the board genuine visibility over risk, compliance and AML/CFT performance.

Technology & custody resilience

• Cybersecurity controls: Documented security architecture, access controls, key management and penetration-testing regime.
• Business continuity and incident response: Tested plans covering outages, security incidents and recovery.
• System resilience: Architecture that supports segregation, monitoring and auditability.

Insurance, reconciliation and custody segregation

• Segregation of customer assets: Clear separation of customer tokens and fiat from firm assets.
• Reconciliation: Frequent, evidenced reconciliation of on-chain and off-chain balances against customer records.
• Insurance and loss coverage: Consideration of insurance arrangements appropriate to custody and operational risk.

Documentation & evidence MAS looks for during assessment

Assemble a complete evidence pack before submission. Incomplete documentation is the leading cause of extended review periods and repeated queries.

• Business plan and financial projections: Realistic model with clear revenue assumptions and volume forecasts supporting the classification.
• Governance matrix and organisation chart: Roles, reporting lines, and fit-and-proper documentation for key persons.
• AML/CFT manual and risk assessment: Full programme documentation aligned to MAS and FATF standards.
• Cybersecurity and incident-response policies: Including business continuity and recovery arrangements.
• Capital proof and audited financials: Bank confirmations, auditor confirmations and evidence of source of funds.
• Technical architecture diagrams: Custody, key-management and system-segregation documentation.

Timelines & realistic expectations for MAS processing

Applicants should plan for a multi-month process. While published guidance sets out indicative review periods, real timelines for a mas dpt licence singapore depend heavily on the completeness and quality of the application and the complexity of the business model.

Typical review periods, common delays and how to accelerate

• Typical duration: SPI applications generally resolve faster than MPI applications; complex custody or cross-border structures extend the review.
• Common causes of delay: Incomplete AML/CFT programmes, unclear classification analysis, unproven capital, weak custody documentation and slow query responses.
• Ways to accelerate: Engage MAS early where appropriate, submit a genuinely complete pack, maintain a responsive query-handling process, and work with experienced local counsel to pre-empt likely questions.

Conclusion & next steps, realistic roadmap for applicants

Obtaining a mas dpt licence singapore rewards firms that treat the application as a disciplined project: classify accurately, evidence capital genuinely, design AML/CFT controls to FATF-aligned standards, and document custody and governance to MAS’s satisfaction. The firms that stall are typically those that submit prematurely, underestimate the DTSP overlay, or treat compliance documentation as an afterthought. Approached methodically, the pathway is demanding but navigable, and the credibility that comes with authorisation is a meaningful commercial asset in a maturing market. For the broader regulatory context, see the Crypto licensing hub and this MAS DPT licence landing page.

Recommended immediate actions (pre-application checklist)

• Confirm scope: Map every proposed activity to the DPT service definitions in the Payment Services Act and identify any DTSP overlap.
• Decide classification: Complete an SPI vs MPI analysis supported by credible volume forecasts.
• Secure capital and governance: Lock in base capital, appoint fit-and-proper senior management and an empowered MLRO.
• Build the compliance backbone: Finalise the AML/CFT programme, custody controls and technical documentation before you submit.

How Global Law Experts supports applicants

Global Law Experts consolidates practitioner-grade guidance, source-cited analysis and cluster resources, including decision tools for MPI vs SPI classification, capital planning frameworks, and AML/CFT templates, to help legal, compliance and operations teams move confidently through the licensing process. Each supporting asset connects back to this mas dpt licence singapore guide so that busy teams can navigate from strategy to submission without losing the thread.

Sources

• Payment Services Act 2019 (Singapore), Singapore Statutes Online
• Monetary Authority of Singapore, Payments and digital token service licensing
• Monetary Authority of Singapore, Anti-Money Laundering / Countering the Financing of Terrorism notices and guidelines
• FATF, Updated Guidance for a Risk-Based Approach to Virtual Assets and VASPs