Remote VASP serving residents in Singapore
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Singapore with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Full MAS AML/CFT compliance under Notice PSN01 and PSN02 (effective July 2025 amendments)
- Travel Rule compliance for DPT transfers ≥ SGD 1,500 — originator and beneficiary PII must be obtained and transmitted immediately and securely
- Customer due diligence (CDD) and ongoing transaction monitoring
- Suspicious transaction reporting to MAS/STRO
- Risk-based AML/CTF policies and procedures covering ML/TF risk assessment
- Record-keeping requirements for DPT transactions under PSA
Key Restrictions
- Must be incorporated as a Singapore entity to apply for an MPI or SPI license — no remote, foreign-entity licensing pathway exists
- Cannot market or promote DPT services to the general public of Singapore (MAS prohibition since Jan 2022)
- No incentive programs, advertising in public spaces, or ATMs in public areas
- Must meet SGD 250,000 base capital (MPI) or SGD 100,000 (SPI with transaction limits SGD 3M single / SGD 6M aggregate)
- Customer asset segregation in statutory trust required (since 2024)
- Security deposits of SGD 100K–200K required
- Technology Risk Management Guidelines (2021) apply — cybersecurity and operational resilience obligations
Key Risks
- MAS has demonstrated strong enforcement against unlicensed operators — Binance.com was issued a warning in 2021 and ordered to cease providing DPT services to SG residents
- Very low MPI license approval rate (~12-18% of 170+ applications resulted in full MPI licenses), creating uncertainty for applicants
- Serving Singapore residents without a license carries high risk of MAS enforcement actions including fines, public reprimands, and potential criminal prosecution
- Cross-border remote operation without local entity creates AML/CFT compliance gaps — MAS expects on-the-ground supervision of obligations
- Retail speculation discouragement policy creates commercial constraints on customer acquisition and growth
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
MAS licenses payment service providers, including DPT service providers, under the Payment Services Act 2019 (standard payment institution, major payment institution and money-changing licences), imposes AML/CFT requirements on DPT licensees through Notice PSN02, and requires DPT licensees to comply with Notice FSM-N13 on technology risk management from 6 November 2024.
The Payment Services Act 2019 (Act 2 of 2019) licenses digital payment token services through standard and major payment institution licences; it commenced on 28 January 2020, and Act 1 of 2021 widened its DPT scope with effect from 4 April 2024.
MAS Notice PSN02, issued 2 April 2024 under section 16 of the Financial Services and Markets Act 2022 and in force from 4 April 2024, sets the AML/CFT requirements for Payment Services Act licensees providing a digital payment token service; its latest amendment, dated 30 June 2025, took effect on 1 July 2025.
MAS published its Technology Risk Management Guidelines (now listed as Guidelines on Risk Management Practices – Technology Risk) on 18 January 2021; they set non-binding technology risk principles for financial institutions, including payment institutions, covering technology risk governance, IT resilience, data and infrastructure security and cyber security operations.
Crypto service providers in Singapore are licensed under the Payment Services Act 2019; as of 14 October 2026 the MAS directory lists 38 major payment institutions for DPT services and no standard payment institutions. Base capital is S$250,000 for an MPI and S$100,000 for an SPI, which is capped at S$3 million monthly for one service or S$6 million for two or more.
Providing custodial services for digital payment tokens became a regulated DPT service under the Payment Services Act from 4 April 2024; regulations requiring DPT service providers to segregate customer assets in a trust account took effect six months later. All 38 DPT licensees in the MAS Financial Institutions Directory hold major payment institution licences, which require S$100,000 or S$200,000 security.
A crypto exchange serving Singapore customers is licensed as a digital payment token service under the Payment Services Act 2019; MAS's 17 January 2022 guidelines bar DPT marketing in public areas, including physical crypto ATMs, and its 23 November 2023 measures bar offering retail customers incentives to trade.
Singapore applies the travel rule to DPT value transfers through MAS Notice PSN02 ¶13: transfers above S$1,500 must carry full originator information (¶13.6), and transfers at or below S$1,500 carry names plus account or reference numbers (¶13.4).
Under MAS Notice PSN02 ¶13, an ordering DPT service provider must identify the originator, include originator and beneficiary information with each value transfer, and must not execute or arrange the transfer if it cannot comply (¶13.11).
MAS Notice PSN02 ¶13 applies to all DPT value transfers: at or below S$1,500 the message must carry originator and beneficiary names and account or unique reference numbers (¶13.4); above S$1,500 the originator must also be verified and further originator information included (¶13.6).
Evidence fact sg.travel-rule.information-to-be-transmitted not found (may have been renamed).
The travel rule for Singapore DPT service providers is set out in MAS Notice PSN02 ¶13 (Value Transfers), in the version dated 2 April 2024 and last revised 30 June 2025.
Effective Date: January 28, 2020.
MAS Notice PSN02 applies to every Payment Services Act licensee providing a DPT service (¶1.1); the MAS Financial Institutions Directory listed 38 major payment institutions licensed for DPT service on 14 October 2026, and PSN02 ¶6.27 requires enhanced risk mitigation for transfers to or from entities that are not regulated financial institutions.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a non-resident VASP cannot serve Singapore residents from abroad without a local Singapore entity and an MPI or SPI license under the Payment Services Act 2019, with full AML/CFT and Travel Rule obligations, and faces significant enforcement risk from MAS for unlicensed cross-border operations.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?