Self-custodial wallet / non-custodial software in Singapore
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is permitted in Singapore with no licensing burden.
Verdict Details
- Permitted
- yes
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
Key Restrictions
- No custody, control, or access to user private keys or funds — the publisher never holds, transfers, or facilitates DPT transactions; if any of these activities are performed, PSA licensing would be triggered
- Must not engage in any regulated activity under the Payment Services Act (dealing in DPTs, facilitating exchange, receiving/sending DPTs, DPT issuance)
- Must not issue tokens that qualify as 'capital markets products' under the Securities and Futures Act (security tokens)
- Standard software EULA and disclaimers should clarify the non-custodial nature; no specific MAS disclosure framework applies to pure software publishers
Key Risks
- Regulatory ambiguity risk: if the software includes any built-in swap/aggregation features that route or facilitate transactions, MAS may consider the publisher a 'provider of a facility for DPT exchange' under the PSA
- Reputational risk: MAS has aggressively warned against marketing crypto to the general public — even non-custodial wallet publishers should avoid Singapore-targeted retail marketing
- Technology Risk Management (TRM) Guidelines may still apply as a general cyber-hygiene expectation even for non-regulated entities; failure could be cited by MAS in enforcement actions
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
MAS licenses payment service providers, including DPT service providers, under the Payment Services Act 2019 (standard payment institution, major payment institution and money-changing licences), imposes AML/CFT requirements on DPT licensees through Notice PSN02, and requires DPT licensees to comply with Notice FSM-N13 on technology risk management from 6 November 2024.
The Payment Services Act 2019 (Act 2 of 2019) licenses digital payment token services through standard and major payment institution licences; it commenced on 28 January 2020, and Act 1 of 2021 widened its DPT scope with effect from 4 April 2024.
The Securities and Futures Act 2001 governs digital tokens that are capital markets products, and a person carrying on a regulated activity in such tokens must hold a capital markets services licence granted under section 86 unless exempt.
Monetary Authority of Singapore (MAS): This is the central bank and integrated financial regulator of Singapore. MAS is the primary body responsible for regulating all digital asset and crypto-related activities, issuing licenses, and enforcing compliance with financial regulations.
Dealing in DPTs (e.g., buying and selling on behalf of customers).
Providing a platform that allows persons to exchange digital payment tokens is a regulated DPT service under the Payment Services Act 2019, and from 4 April 2024 facilitating the exchange of DPTs is regulated even where the provider does not come into possession of the moneys or DPTs.
Receiving or sending DPTs (e.g., cross-border DPT transfers).
Issuing a token is not one of the digital payment token services MAS lists under the Payment Services Act 2019; an offer or issue of digital tokens is regulated under the Securities and Futures Act where the tokens are capital markets products (MAS Guide to Digital Token Offerings, para 2.1).
The Securities and Futures Act 2001 regulates digital tokens that are capital markets products, which the Act defines as securities, units in a collective investment scheme, derivatives contracts, spot foreign exchange contracts for leveraged foreign exchange trading and other prescribed products.
Evidence fact sg.licensing.regulated-activities-under-sfa-include not found (may have been renamed).
Operating a market for security tokens (e.g., an exchange).
Fund management involving security tokens.
Providing custodial services for security tokens.
Crypto service providers in Singapore are licensed under the Payment Services Act 2019; as of 14 October 2026 the MAS directory lists 38 major payment institutions for DPT services and no standard payment institutions. Base capital is S$250,000 for an MPI and S$100,000 for an SPI, which is capped at S$3 million monthly for one service or S$6 million for two or more.
A crypto exchange serving Singapore customers is licensed as a digital payment token service under the Payment Services Act 2019; MAS's 17 January 2022 guidelines bar DPT marketing in public areas, including physical crypto ATMs, and its 23 November 2023 measures bar offering retail customers incentives to trade.
Evidence fact sg.licensing.mas-technology-risk-management-guidelines not found (may have been renamed).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Yes — pure non-custodial wallet software publishing does not trigger VASP/MSB classification in Singapore because the publisher never holds, controls, or facilitates DPT transactions; no AML obligations attach, no MAS license is required, and no local entity is strictly necessary, provided no regulated activities (custody, exchange facilitation, DPT transfer) are performed.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?