How to Apply for the MAS Fintech Regulatory Sandbox (2026): Step‑by‑step Guide

If you are building a fintech product in Singapore and need to test it under relaxed regulatory conditions, understanding how to apply for the MAS fintech sandbox is the critical first step. The Monetary Authority of Singapore (MAS) operates three distinct sandbox pathways, Sandbox, Sandbox Plus and Sandbox Express, each offering tailored regulatory reliefs that allow financial institutions and technology firms to experiment with innovative services in a live but controlled environment. MAS published updated Sandbox Plus FAQs in January 2026 and introduced clearer operational service targets, meaning applicants now face more defined timelines and evidence expectations than in previous years.

This guide sets out the complete application procedure, the documents needed for an MAS sandbox submission, the sandbox application timeline you should plan around, and the common legal pitfalls that derail applications.

Overview of the MAS FinTech Sandbox and the Three Application Pathways

The MAS FinTech Regulatory Sandbox provides a controlled space for firms to deploy new or emerging technology in financial services while operating under specifically relaxed regulatory requirements. MAS may grant temporary exemptions from selected legal and regulatory provisions, for example, certain capital requirements, licence conditions or business conduct rules, on a case‑by‑case basis. These reliefs are time‑limited and subject to boundary conditions that protect consumers and the broader financial system.

Before deciding how to apply for the MAS fintech sandbox, applicants must identify which of the three pathways matches their product, risk profile and readiness stage. The comparison below summarises the key differences between Sandbox, Sandbox Plus and Sandbox Express.

The sandbox does not waive all statutory obligations. Core requirements under the Payment Services Act 2019, anti‑money laundering and countering the financing of terrorism (AML/CFT) rules, and personal data protection obligations under the Personal Data Protection Act (PDPA) generally continue to apply during the sandbox period. Industry observers expect MAS to maintain this position through 2026 and beyond.

Eligibility and Prerequisites for the MAS Fintech Sandbox

Sandbox eligibility in Singapore centres on the nature of the proposed innovation and the applicant’s ability to manage risks during testing. MAS requires applicants to demonstrate each of the following criteria before an application will be considered.

• Genuine innovation. The proposed financial service must incorporate new or emerging technology, or apply existing technology in a novel way that is not yet widely available in Singapore.
• Consumer or industry benefit. The innovation must address a significant problem or bring meaningful benefit to consumers or the financial industry.
• Intent and ability to deploy broadly. The applicant must intend to deploy the solution in Singapore on a broader scale after completing the sandbox.
• Defined test scenarios and safeguards. The applicant must present clear test boundaries, risk mitigation measures and an exit plan, including how affected customers will be managed if the sandbox experiment is discontinued.
• Adequate resources. The applicant must demonstrate it has sufficient financial and human resources to conduct the test and manage the associated risks.

Both MAS‑regulated financial institutions and non‑regulated entities (including foreign companies) may apply. Under the expanded Sandbox Plus criteria effective from 1 January 2022, MAS broadened eligibility to include firms that are not currently licensed or regulated by MAS but whose proposed activities would ordinarily require an MAS licence.

How to Apply for the MAS Fintech Sandbox: Step‑by‑Step Procedure

The application procedure follows a structured sequence. Each step below identifies the responsible party and the evidence MAS will expect. Use this as your internal project plan to prepare a submission that meets MAS sandbox requirements.

Step 1: Conduct Pre‑Engagement with MAS

Before submitting a formal application, contact MAS to discuss your proposed innovation. If your firm is already an MAS‑regulated financial institution, approach your assigned MAS Review Officer. If your firm is not regulated by MAS, email fintech_sandbox@mas.gov.sg to initiate a pre‑engagement discussion.

During pre‑engagement, MAS will assess whether the proposed service falls within the scope of the sandbox framework and which pathway (Sandbox, Sandbox Plus or Sandbox Express) is most appropriate. Prepare a short briefing document covering the technology, the target market, the specific regulatory requirements you seek relief from, and the consumer safeguards you plan to implement.

Step 2: Prepare the Application Bundle

This is the most resource‑intensive phase. Using the application template provided in the FinTech Regulatory Sandbox Guidelines (available on the MAS website), assemble a comprehensive submission that addresses every MAS sandbox requirement. The application must include an executive summary, a detailed product description, a test plan with measurable key performance indicators (KPIs), a risk and mitigation matrix, a PDPA impact assessment, AML/CFT risk analysis, sample terms and conditions for test participants, and a clear exit strategy.

Assign internal owners for each section: the product lead for the test plan and technology architecture, the compliance officer for AML/CFT and regulatory relief justifications, the chief technology officer for cybersecurity measures, and legal counsel for the PDPA assessment, consumer disclosures and contractual documentation.

Step 3: Submit the Application to MAS

Submit the completed application to your MAS Review Officer (if you are an MAS‑regulated entity) or to fintech_sandbox@mas.gov.sg (if you are not). Ensure all annexures are attached, signed where required by authorised company representatives, and formatted as specified in the MAS guidelines. Incomplete applications are a common reason for delays.

Step 4: MAS Suitability Assessment and Outcome

MAS will assess whether the application meets its eligibility criteria and whether the proposed test boundaries and safeguards are adequate. For Sandbox Express applications, eligible applicants can begin market testing in the pre‑defined environment within 21 days of applying to MAS. For standard Sandbox and Sandbox Plus applications, the assessment timeline is agreed case‑by‑case and depends on the complexity of the proposed service and the regulatory reliefs requested.

Expect MAS to issue clarification queries during this phase. Respond promptly, delayed responses will extend the assessment period. MAS may approve the application, approve it with modified conditions, or decline it.

Step 5: Commence Pilot Testing and Monitoring

Once approved, the sandbox entity enters a live testing phase under the agreed boundary conditions. MAS will specify reporting obligations, including periodic progress reports, incident reporting requirements and consumer complaint handling procedures. The pilot period is typically 3 to 12 months, though MAS may extend it by agreement.

Throughout the test, maintain detailed records of all metrics, consumer interactions, risk events and operational issues. These records form the evidential basis for MAS to evaluate whether to grant a full licence upon sandbox exit.

Step 6: Exit the Sandbox and Apply for a Full Licence

Before the sandbox period expires, the firm must execute its exit plan. This means either transitioning to a full licence under the relevant regulatory framework (for example, a Major Payment Institution licence under the Payment Services Act 2019), winding down the tested service in an orderly manner, or applying for a sandbox extension. Begin the parallel licence application process at least 3 to 6 months before the sandbox is scheduled to end.

Documents Needed for an MAS Sandbox Application

The documents needed for an MAS sandbox application are extensive. The table below lists the core submission documents, together with practical notes on format, issuer and common requirements.

Sandbox Application Timeline and Key Deadlines for 2026

Planning realistic internal lead times is essential. The following sandbox application timeline reflects MAS service targets published in the January 2026 FAQs and the operational commitments on the MAS Sandbox Express page.

For Sandbox Express, MAS has stated that eligible applicants can begin market testing within 21 days of applying. For standard Sandbox and Sandbox Plus applications, applicants should build in a buffer of at least 4 to 8 weeks after submission for MAS to complete its assessment, plus additional time for responding to clarification queries. The total path from initial preparation to live testing commonly spans 4 to 6 months.

Costs, Fees and Funding Considerations

MAS does not charge a specific application fee for the sandbox. However, applicants should budget for significant internal and third‑party costs. Under Sandbox Plus, eligible applicants can obtain funding of up to S$500,000 at a 50% funding level, disbursed over three payments upon meeting certain milestones agreed with MAS.

Note that the cost ranges above are indicative estimates based on prevailing market rates. Applicants should obtain specific quotes from service providers and verify current Sandbox Plus funding eligibility and disbursement conditions directly with MAS.

What Changed in 2026: MAS Sandbox Updates You Need to Know

MAS published updated FAQs on the FinTech Regulatory Sandbox in January 2026, clarifying several operational aspects of the sandbox framework. The key changes and clarifications relevant to applicants preparing submissions in 2026 include the following:

• Clarified service targets. MAS has set objective service timelines for processing sandbox applications, giving applicants greater visibility on expected assessment durations.
• Sandbox Plus eligibility reaffirmed. The January 2026 FAQs confirm the expanded eligibility criteria introduced under Sandbox Plus (effective 1 January 2022), which extend sandbox access to firms not currently regulated by MAS.
• Updated FAQ guidance. The 2026 FAQs provide additional detail on the application process, including how firms should submit applications (via MAS Review Officer for regulated FIs, or via fintech_sandbox@mas.gov.sg for non‑regulated firms) and the information that must accompany each submission.
• Sandbox Express pathways maintained. Pre‑defined sandbox environments under Sandbox Express remain available, with MAS maintaining the 21‑day target for eligible applicants to begin market testing.

The likely practical effect of these updates is that applicants who align their submissions closely with MAS’ stated evidence expectations and service timelines will experience faster assessment cycles and fewer clarification rounds.

Common Pitfalls When Applying for the MAS Fintech Sandbox, and How to Avoid Them

Sandbox applications fail or stall for predictable reasons. The following pitfalls are drawn from common regulatory compliance challenges and the MAS sandbox requirements themselves.

• Weak or vague test plans. A test plan without measurable KPIs, defined sample sizes or clear escalation triggers will prompt MAS to request revisions. Define quantitative success criteria before submission.
• PDPA non‑compliance. Collecting personal data from test participants without adequate consent frameworks, purpose limitations or cross‑border transfer safeguards can derail an application. Conduct a full PDPA impact assessment early.
• Cybersecurity gaps. Inadequate security architecture, missing penetration test results or absent incident response plans signal operational risk to MAS. Commission independent security testing before submission.
• Insufficient consumer protection. Failing to provide clear risk disclosures, complaint handling processes and refund mechanisms for test participants is a frequent deficiency.
• Undercooked AML/CFT measures. MAS will not waive core AML/CFT obligations. Ensure your customer due diligence and transaction monitoring frameworks are fully designed and documented.
• No credible exit plan. An application that does not explain how the service will transition to a full licence, or how customers will be protected if the pilot is terminated, will face objections. Map the sandbox exit to a specific licensing pathway (such as a licence under the Payment Services Act 2019).
• Cross‑border data transfer oversights. If your service involves transferring data outside Singapore, you must comply with the PDPA’s cross‑border transfer provisions. Ignoring this is a common blind spot.
• IP ownership confusion. Clarify intellectual property ownership between co‑developing parties, technology vendors and the applicant entity before the pilot begins. Disputes during the sandbox period can delay or terminate the experiment.
• Inadequate vendor controls. Where third‑party vendors provide critical infrastructure or services during the pilot, MAS will expect the applicant to demonstrate adequate vendor oversight, contractual controls and contingency arrangements.
• Failure to maintain MAS evidence. Throughout the pilot, MAS will require periodic reporting and evidence of compliance with boundary conditions. Firms that do not maintain contemporaneous records risk losing their sandbox approval or being unable to support a subsequent licence application.

Sources

1. Monetary Authority of Singapore, FinTech Regulatory Sandbox
2. Monetary Authority of Singapore, Sandbox Plus
3. Monetary Authority of Singapore, Sandbox Express
4. MAS, Frequently Asked Questions on MAS FinTech Regulatory Sandbox (January 2026)
5. Payment Services Act 2019 (Singapore Statutes)
6. Personal Data Protection Commission Singapore (PDPC)