MAS Digital Payment Token (DPT) licensing , Eligibility and requirements checklist

Raffles Corporate Services works with a panel of corporate and employment law firms; this article is general information, not legal advice.

MAS Digital Payment Token licensing is the authorisation a business needs before it may carry on a digital payment token (DPT) service in or from Singapore. A DPT service is regulated under the Payment Services Act 2019, so any firm dealing in, or facilitating the exchange of, cryptocurrencies for customers must hold either a Standard Payment Institution or Major Payment Institution licence granted by the Monetary Authority of Singapore.

What the MAS Digital Payment Token regime covers

The Payment Services Act 2019 brought DPT activity under a single, activity-based framework. Section 6 of the Payment Services Act 2019 describes the payment services that trigger licensing, and DPT service is one of the seven regulated activities. In practice a firm needs a licence if it buys or sells DPTs for customers, operates a platform that allows customers to exchange DPTs, transmits DPTs, provides custody, or facilitates the exchange of DPTs even without possession of the money or tokens. Since the Payment Services (Amendment) Act took effect, the definition has expanded to capture custodial wallet providers and firms that arrange DPT transmission, so activities that once sat outside the perimeter now require authorisation.

The framework is technology-neutral but risk-focused. The Monetary Authority of Singapore treats DPT dealing as high money-laundering and terrorism-financing risk, and its Notice PSN02 imposes detailed anti-money-laundering and countering-the-financing-of-terrorism obligations on every DPT licensee regardless of size.

Who needs a DPT licence

Any company incorporated in Singapore, or a foreign company registered here, that provides a DPT service by way of business must be licensed. This includes crypto exchanges, over-the-counter desks, custodial wallet operators, and payment firms that let merchants accept tokens. A firm that only holds DPTs for its own account, or that develops software without touching customer tokens or money, generally falls outside the regime, but the line is fact-specific and worth confirming before launch. Fintechs setting up here often pair the licence application with a fresh Singapore incorporation; our guide to Pte Ltd registration for foreigners sets out how the operating company is usually formed first.

Eligibility and requirements checklist

MAS assesses each applicant against admission criteria before granting a payment institution licence. The core requirements are:

• A Singapore-incorporated company (or registered foreign company) with a permanent place of business.
• At least one executive director who is a Singapore citizen or permanent resident, and a resident chief executive.
• Fit-and-proper directors, shareholders and senior management, assessed under the MAS Guidelines on Fit and Proper Criteria.
• A base capital requirement — S$100,000 for a Standard Payment Institution and S$250,000 for a Major Payment Institution.
• A permanent security deposit or bank guarantee lodged with MAS — S$100,000, rising to S$200,000 where average monthly transactions exceed S$6 million.
• A compliance arrangement, independent audit, technology risk controls and a robust AML/CFT programme.
• Professional indemnity insurance appropriate to the scale of the business.

Standard vs Major Payment Institution thresholds

The two licence tiers turn on transaction volume. A Standard Payment Institution may process up to S$3 million per month in any single payment service and up to S$6 million across two or more services, with e-money float capped at S$5 million. A firm expecting to exceed those thresholds must hold a Major Payment Institution licence, which carries higher capital and the security deposit obligations noted above. DPT firms that intend to scale generally apply directly for the Major tier to avoid re-licensing. The Payment Services Act 2019 also runs alongside the wider capital markets regime; firms offering token-based investment products should read our walkthrough of MAS Payment Services Act licensing for MPI and SPI before deciding which perimeter applies.

Cost and timeline

Application fees are modest — the MAS application fee for a DPT service under a Major Payment Institution licence is S$1,500 per payment service. The real cost sits in build-out: base capital of S$250,000, a security deposit of up to S$200,000, and set-up spend on compliance staff, audit, and technology that typically runs from S$150,000 to well over S$500,000 in the first year. Realistic timelines run 9 to 15 months from a complete submission to grant, and longer where the applicant must strengthen its AML programme mid-review. MAS engages actively during the review, so a clean, well-evidenced application shortens the path materially.

Common mistakes and gotchas

The most frequent failures are an under-resourced compliance function, a chief executive who is not genuinely resident and hands-on, and travel-rule controls that do not meet PSN02. Applicants also underestimate the segregation and custody expectations for customer tokens. Because the perimeter now captures pure transmission and custody, some firms discover late that a model they believed was exempt in fact requires a Major Payment Institution licence. Structuring the group early — often with a separate holding vehicle — avoids re-papering; our note on VCC Section 17 legal personality explains how fund and treasury vehicles interact where token activity feeds an investment strategy.

Step-by-step: applying for a DPT licence

The path from decision to grant is a structured one, and MAS expects each stage to be evidenced rather than asserted. In practice the process runs as follows:

1. Incorporate the operating entity. Set up a Singapore private limited company that will hold the licence, with a resident chief executive and at least one resident executive director in place before you apply.
2. Scope the payment services. Map every activity to the seven regulated services and decide whether you need the Standard or Major Payment Institution tier. DPT dealing usually points to the Major tier.
3. Build the compliance framework. Draft AML/CFT policies aligned to Notice PSN02, a compliance manual, a risk assessment, and travel-rule controls for token transfers. Appoint a compliance officer and, for larger firms, a money-laundering reporting officer.
4. Lodge base capital and the security deposit. Fund the S$250,000 base capital and arrange the security deposit or bank guarantee of up to S$200,000.
5. Prepare technology and custody controls. Document wallet security, key management, segregation of customer tokens and business continuity, consistent with MAS technology risk expectations.
6. Submit through the MAS portal. File the application with supporting documents, pay the S$1,500-per-service fee, and respond promptly to MAS queries during review.

MAS engages iteratively, so the quality of the first submission drives the timeline. Firms that treat compliance as a launch afterthought, rather than a design input, are the ones that stall. Where the DPT business feeds a wider investment or treasury strategy, aligning the group structure early — including any fund vehicle under the VCC framework — avoids re-papering after grant.

Ongoing obligations after you are licensed

The licence is the beginning, not the end. A DPT licensee must file periodic returns to MAS, maintain its base capital and security deposit, conduct ongoing customer due diligence and transaction monitoring, submit suspicious transaction reports, and undergo independent audits of its AML/CFT controls. MAS also imposes consumer-protection measures for DPT service providers, including restrictions on retail incentives and requirements around risk disclosures and custody of customer assets. Breaches can lead to directions, financial penalties or revocation, so a licensee needs a compliance function that scales with transaction volume. Firms should treat regulatory change as continuous, since the DPT perimeter and consumer-protection rules have expanded steadily since the Payment Services Act framework first took effect.

FAQs

Is a DPT licence the same as the crypto exchange licence?
There is no separate ‘crypto exchange licence’. Exchanges are licensed as payment institutions providing a DPT service under the Payment Services Act 2019, usually at the Major Payment Institution tier.

How much capital do I need for DPT licensing?
Base capital is S$100,000 for a Standard Payment Institution and S$250,000 for a Major Payment Institution, plus a security deposit of up to S$200,000 for higher-volume firms.

Can a foreign company apply?
Yes, but it must be incorporated or registered in Singapore with a permanent place of business, a resident chief executive and at least one resident executive director.

How long does approval take?
Plan for 9 to 15 months from a complete application, longer if MAS requires the AML/CFT framework to be strengthened during review.

Related guides

For adjacent MAS regimes see our MAS Payment Services Act MPI and SPI guide, and for fund-linked token structures the VCC legal personality note and our foreigner incorporation guide. The statutory text sits on Singapore Statutes Online.

Need help with this? Call, SMS or WhatsApp +65 8501 7133, or email [email protected]. Raffles Corporate Services works with a panel of corporate and employment law firms; this article is general information, not legal advice.