MAS Payment Services Act licensing , MPI and SPI , Common mistakes and rejection reasons

MAS Payment Services Act licensing governs who may lawfully provide regulated payment services in Singapore, with entities classified as a Standard Payment Institution (SPI) below prescribed transaction-value thresholds or a Major Payment Institution (MPI) above them, under the Payment Services Act 2019.

Raffles Corporate Services works with a panel of corporate and employment law firms; this article is general information, not legal advice.

What Payment Services Act licensing is

The Payment Services Act 2019 (PS Act) consolidated Singapore’s regulation of payment services into a single activity-based framework covering account issuance, domestic and cross-border money transfers, merchant acquisition, e-money issuance, digital payment token services, and money-changing. Descriptively, the Act provides that a person carrying on a business of providing a payment service in Singapore is required to hold the relevant class of licence unless an exemption applies. The two principal licence classes for most fintechs and payment businesses are the Standard Payment Institution (SPI) licence, for entities below the Act’s prescribed transaction-value thresholds, and the Major Payment Institution (MPI) licence, for entities above them or issuing e-money beyond a prescribed float. A third class, Money-Changing Licence, applies to standalone currency exchange businesses and is not covered in depth here.

Licensing is activity-specific — a firm applies for the specific payment service(s) it intends to provide, and its licence conditions are scoped accordingly, meaning a firm adding a new regulated activity later (for example moving from account issuance into e-money) generally needs to vary its licence rather than assume its existing licence already covers the new activity.

Who this is for

This affects fintechs and wealth-management-adjacent businesses providing digital wallets, remittance services, merchant payment gateways, e-money products, or cross-border transfer services from or into Singapore. It also affects wealth managers and fund platforms that are increasingly bundling payment rails — such as multi-currency accounts or stablecoin settlement — into their client offering, since doing so can bring them within the scope of the PS Act even if payments were not originally the core business. Start-ups scoping a minimum viable product should assess PS Act scope early, since retrofitting a licensing strategy after launch is materially harder than designing the product with licence class thresholds in mind from the outset.

Eligibility and requirements — SPI vs MPI

• Standard Payment Institution (SPI): for applicants whose payment services fall below the Act’s prescribed monthly transaction-value thresholds, generally understood to be in the region of S$3 million per payment service per month (or S$6 million per month if providing multiple payment services), and below the prescribed e-money float threshold. SPI applicants face comparatively lighter base capital and reporting requirements, though the fit-and-proper and governance standards still apply in full.
• Major Payment Institution (MPI): for applicants above those thresholds, or issuing e-money with outstanding float above the prescribed level (commonly cited around S$5 million). MPI licensees face higher base capital requirements, safeguarding obligations for customer moneys, and more extensive AML/CFT and reporting obligations.
• Common requirements across both classes: fit-and-proper directors, chief executive and controllers; a permanent place of business in Singapore; adequate risk management, technology risk and cyber-security controls; and a documented AML/CFT programme addressing customer due diligence, transaction monitoring and suspicious transaction reporting under MAS Notices issued pursuant to the PS Act.

Applicants should treat the thresholds above as indicative and verify the current prescribed figures directly against MAS’s Payment Services Regulations before finalising a licence-class strategy, since these figures are set in subsidiary legislation that can be amended.

Cost and timeline — numerical specifics

• Base capital: SPI applicants are typically required to maintain a lower base capital (commonly cited around S$100,000), while MPI applicants face a materially higher requirement (commonly cited in the region of S$250,000, with additional requirements where the entity provides multiple regulated activities). Confirm current figures against the Payment Services Regulations.
• Professional/advisory fees: preparing and lodging an SPI application typically runs from roughly S$15,000 to S$30,000; an MPI application, given the deeper AML/CFT, safeguarding and technology risk documentation required, typically runs from roughly S$30,000 to S$60,000 or more depending on the number of regulated activities applied for.
• MAS processing timeline: SPI applications are typically processed within roughly 4 to 6 months from a complete submission; MPI applications, given their greater complexity, typically take roughly 6 to 12 months, and can extend further where MAS raises multiple rounds of queries.
• Ongoing costs: licensees should budget for recurring AML/CFT independent audits, annual regulatory reporting, and (for MPIs handling customer moneys) safeguarding arrangements such as trust accounts or bank guarantees, on top of the base licence fee payable to MAS.

Step-by-step licensing process

1. Scope the regulated activities the business actually intends to carry out and map them against the PS Act’s activity definitions, since this determines both the licence class and the specific conditions attached.
2. Determine SPI or MPI status based on realistic transaction-value and e-money float projections, not just the first-year business plan — applying under the wrong class based on overly optimistic or overly conservative projections is a common source of later friction.
3. Build the AML/CFT programme, technology risk management framework, and safeguarding arrangements (for MPI/e-money) before lodging, since these are core to MAS’s assessment.
4. Assemble fit-and-proper documentation for all directors, the chief executive, and controllers (shareholders above the prescribed control threshold), including CVs, qualification evidence and disclosure of regulatory or insolvency history.
5. Lodge the application through MAS’s licensing portal with the business plan, financial projections, org chart and supporting policies.
6. Respond to MAS’s Requests for Information substantively and promptly; payment licensing reviews frequently involve multiple detailed rounds on AML/CFT and technology risk specifically.
7. On approval, implement — put safeguarding arrangements into effect, finalise customer terms and disclosures, and set up the ongoing regulatory reporting calendar before commencing regulated activity.

Common mistakes and rejection reasons

Payment licensing applications are reviewed with particular attention to financial crime and technology risk, given the sector’s exposure to money laundering, terrorism financing and fraud. Frequent issues include:

• Underdeveloped AML/CFT programmes: generic customer due diligence policies that do not reflect the applicant’s actual customer base, geography and product risk are one of the most common causes of rejection or prolonged review.
• Misjudging SPI vs MPI classification: applying as an SPI with a business plan that clearly projects transaction volumes exceeding the thresholds within the first year invites MAS to redirect the application to MPI, causing delay.
• Weak technology risk management documentation: MAS expects a credible cyber-security and technology risk framework proportionate to a payments business, including incident response and vendor/outsourcing oversight; applicants sometimes underinvest here relative to AML/CFT.
• Safeguarding arrangements not properly structured for MPI/e-money applicants: customer moneys need to be properly segregated and safeguarded (via trust account or bank guarantee arrangements); ambiguous or undocumented safeguarding arrangements are a recurring query point.
• Controllers or directors with undisclosed overseas regulatory history: as with fund management licensing, MAS’s own checks frequently surface matters an applicant did not proactively disclose, which damages credibility more than the underlying issue itself often would.
• Business models that blur into other regulated activities: payment businesses that also touch securities, digital payment tokens, or lending sometimes fail to recognise they may need additional licences or exemptions beyond the core PS Act licence.
• Thin management substance in Singapore: applicants with a largely offshore team and a nominal Singapore presence face closer scrutiny of whether genuine control and oversight actually sit in Singapore.
• Incomplete responses to MAS queries treated as a formality: MPI applications in particular often go through several rounds of detailed questions; applicants that treat each round as a box-ticking exercise rather than a substantive re-examination of their controls tend to see the process drag out or stall.

Documentation checklist

A well-prepared PS Act application typically assembles the following before lodging with MAS:

• Corporate structure chart showing the applicant, its shareholders, and any group entities, down to ultimate beneficial owners and controllers.
• Business plan covering the specific regulated activities applied for, target customer base, projected transaction volumes and e-money float (where applicable) over a three-year horizon.
• CVs and supporting qualification evidence for the chief executive, directors and key management, together with disclosure of any regulatory or insolvency history.
• AML/CFT policy covering customer due diligence, enhanced due diligence triggers, transaction monitoring and suspicious transaction reporting, tailored to the applicant’s actual customer and geography risk.
• Technology risk management framework, including cyber-security controls, incident response plan and outsourcing/vendor oversight arrangements.
• Safeguarding policy for customer moneys (MPI/e-money applicants), specifying the trust account or bank guarantee structure to be used.
• Financial projections and evidence of base capital, including bank statements or audited accounts where the applicant is an existing operating entity.

Ongoing obligations after licensing

Once licensed, both SPI and MPI holders remain subject to ongoing MAS supervision, including periodic regulatory returns, independent AML/CFT audits at prescribed intervals, and notification obligations for material changes such as a change in directors, controllers, or the scope of regulated activities carried out. MPI licensees handling customer moneys face additional ongoing scrutiny of their safeguarding arrangements, and all licensees should expect MAS thematic reviews focused on financial-crime controls given the sector’s risk profile. Firms should build a compliance calendar covering these recurring obligations from day one rather than treating them as a future problem, since gaps identified by MAS during supervision are treated more seriously than issues a firm identifies and remediates on its own initiative.

Why this matters for wealth managers and fintechs specifically

Wealth management and fintech businesses increasingly sit at the intersection of several MAS regulatory regimes at once — a platform might combine fund management activity under the Securities and Futures Act 2001 with payment rails, multi-currency wallets or stablecoin settlement that separately trigger Payment Services Act 2019 licensing. Organisations building these combined propositions should map every product feature against the PS Act’s activity definitions early in the design process, since retrofitting licensing after a product has already launched to real customers is materially more disruptive — and draws closer MAS scrutiny — than designing the licensing strategy alongside the product from the outset. Where a wealth platform is unsure whether a particular feature crosses into regulated payment services territory, seeking an informal MAS consultation or specific legal advice before launch is generally more efficient than proceeding on an internal assumption that later proves wrong.

FAQs

What is the practical difference between an SPI and an MPI licence? The core difference is scale — transaction-value and e-money float thresholds set out in the Payment Services Act 2019 and its regulations — which in turn drives higher base capital, safeguarding and reporting obligations for MPI licensees.

Can a business start as an SPI and later upgrade to MPI? Yes, this is a common and expected path as transaction volumes grow; the firm needs to notify and apply to MAS for the upgrade before exceeding the SPI thresholds, not after.

Does a wealth management platform offering multi-currency accounts need a payment services licence? Potentially yes, if the platform is itself providing the account issuance or cross-border transfer service rather than merely referring clients to a separately licensed provider; this should be assessed activity by activity against the Payment Services Act 2019 definitions.

Are digital payment token (cryptocurrency) services covered under the same Act? Yes, digital payment token services are a regulated activity under the Payment Services Act 2019, though they carry additional MAS conditions given the sector’s risk profile.

How long should a fintech budget for the whole process before it can go live? Allowing for building out AML/CFT, technology risk and safeguarding arrangements before lodging, most SPI applicants should budget roughly six to nine months end-to-end, and MPI applicants nine to fifteen months.

Related guides

Fintechs evaluating whether a fund vehicle structure is relevant to their business model may find this guide on knowing when a Singapore VCC is the wrong vehicle useful context alongside payment licensing planning. On the governance side, this guide to the Singapore Register of Registrable Controllers (RORC) is directly relevant, since licensed payment institutions must also maintain accurate controller records. See also our companion piece on MAS Payment Services Act licensing — MPI and SPI — documents required and templates for the underlying document set.

Requirements described here draw on the Payment Services Act 2019 and its subsidiary regulations, which govern payment services as a regulated activity in Singapore, and on the Securities and Futures Act 2001 where a business’s activities extend into capital markets or digital payment token services with securities characteristics. Applicants should always verify current thresholds, forms and the latest guidance directly on the MAS website before lodging, since licensing regulations are periodically updated.

Need help with this? Call, SMS or WhatsApp +65 8501 7133, or email [email protected]. Raffles Corporate Services works with a panel of corporate and employment law firms; this article is general information, not legal advice.