DeFi protocol frontend in Singapore
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in Singapore with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Customer Due Diligence (CDD) and KYC required under MAS AML/CFT Notices PSN01/PSN02 for any entity providing DPT services
- Ongoing transaction monitoring and suspicious transaction reporting to MAS
- Travel Rule compliance for all DPT transfers
- Record-keeping obligations (minimum 5 years) per MAS AML/CFT requirements
- Screening against sanctions lists and prohibited persons
- No threshold exemption — all DPT transactions require KYC if the operator is deemed a DPT service provider
Key Restrictions
- Marketing to the general public for crypto services is prohibited (MAS Jan 2022 guidance)
- No incentive programs (referral bonuses, trading competitions) targeting retail customers
- No crypto ATMs in public areas
- Must have a Singapore-incorporated entity with at least one local director resident in Singapore
- Geofencing required — cannot serve US persons or other restricted jurisdictions without local licensing
- Frontend must screen users by jurisdiction and enforce access restrictions based on applicable licensing
- Fee-taking (commission, spread, or swap fees) likely triggers DPT service classification under PSA, requiring MPI or SPI license
Key Risks
- MAS takes an expansive view of what constitutes a DPT service — operating a frontend that facilitates DPT exchange may be regulated even if the underlying protocol is decentralized
- Low licensing approval rate (~12-18% of MPI applications granted) creates material risk of rejection
- Uncertainty in how MAS treats 'non-custodial' frontends — if the frontend never takes custody, MAS may still consider it 'facilitating exchange' of DPTs
- Enforcement risk: MAS has publicly warned and taken action against unlicensed operators targeting Singapore users
- Staking / yield features on the frontend could trigger CMS licensing under the SFA if tokens are deemed capital markets products
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
MAS licenses payment service providers, including DPT service providers, under the Payment Services Act 2019 (standard payment institution, major payment institution and money-changing licences), imposes AML/CFT requirements on DPT licensees through Notice PSN02, and requires DPT licensees to comply with Notice FSM-N13 on technology risk management from 6 November 2024.
The Payment Services Act 2019 (Act 2 of 2019) licenses digital payment token services through standard and major payment institution licences; it commenced on 28 January 2020, and Act 1 of 2021 widened its DPT scope with effect from 4 April 2024.
The Securities and Futures Act 2001 governs digital tokens that are capital markets products, and a person carrying on a regulated activity in such tokens must hold a capital markets services licence granted under section 86 unless exempt.
MAS Notice PSN02, issued 2 April 2024 under section 16 of the Financial Services and Markets Act 2022 and in force from 4 April 2024, sets the AML/CFT requirements for Payment Services Act licensees providing a digital payment token service; its latest amendment, dated 30 June 2025, took effect on 1 July 2025.
MAS published its Technology Risk Management Guidelines (now listed as Guidelines on Risk Management Practices – Technology Risk) on 18 January 2021; they set non-binding technology risk principles for financial institutions, including payment institutions, covering technology risk governance, IT resilience, data and infrastructure security and cyber security operations.
Crypto service providers in Singapore are licensed under the Payment Services Act 2019; as of 14 October 2026 the MAS directory lists 38 major payment institutions for DPT services and no standard payment institutions. Base capital is S$250,000 for an MPI and S$100,000 for an SPI, which is capped at S$3 million monthly for one service or S$6 million for two or more.
A crypto exchange serving Singapore customers is licensed as a digital payment token service under the Payment Services Act 2019; MAS's 17 January 2022 guidelines bar DPT marketing in public areas, including physical crypto ATMs, and its 23 November 2023 measures bar offering retail customers incentives to trade.
Providing a platform that allows persons to exchange digital payment tokens is a regulated DPT service under the Payment Services Act 2019, and from 4 April 2024 facilitating the exchange of DPTs is regulated even where the provider does not come into possession of the moneys or DPTs.
Dealing in DPTs (e.g., buying and selling on behalf of customers).
Receiving or sending DPTs (e.g., cross-border DPT transfers).
Evidence fact sg.licensing.mas-amlcft-notices-eg-psn01 not found (may have been renamed).
These notices lay out the specific Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) requirements for financial institutions, including DPT service providers.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi frontend serving Singapore residents likely requires an MPI or SPI license under the Payment Services Act for facilitating DPT exchange, with a Singapore-incorporated entity, KYC/AML obligations, and a ban on marketing to the general public, though there is regulatory ambiguity around non-custodial interfaces.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?