Singapore Major Payment Institution (MPI) Licence Application and Ongoing Compliance Guide: Seven Types of Payment Services

Business and application categories

An MPI is a payment institution licence under Singapore’s Payment Services Act. Applicants may apply for one or more payment services, with the actual scope of business limited to the services approved by MAS. This guide covers account issuance, domestic money transfer, cross-border money transfer, merchant acquisition, e-money issuance, digital payment token services and money-changing, and explains the entity, genuine place of business, shareholders and directors, capital, application materials, acquisition approvals and ongoing maintenance. The verification reference date is 2026-11-04; approval, account opening or approval dates are not guaranteed. Prepared by 仁港永胜（香港）有限公司, with professional guidance from business manager 唐上永（唐生）。

Business characteristics and suitability considerations

• Conduct larger-scale payment business within the approved scope of services without being subject to the SPI entity transaction-volume and e-money thresholds; individual payment account limits and other regulatory requirements continue to apply.
• The activity-based authorisation framework allows applicants to apply for multiple payment services based on their actual products, rather than mistakenly treating each function as a separate company licence.
• The licensed entity and its approved activities can be checked in the MAS Financial Institutions Directory, enabling customers and business partners to verify the scope of authorisation. This does not mean that MAS endorses the safety or commercial performance of any product.
• Governance, safeguarding of funds, audit and AML/CFT arrangements have a clear regulatory basis and help establish verifiable operational controls; banking partnerships and access to overseas markets must still be assessed separately.

01｜First confirm the licence scope and MPI size thresholds

An MPI is not a bank licence, nor is it an all-purpose financial licence that automatically covers all seven activity types. MAS may approve one or more payment services and impose conditions; the relevant licence variation must be made before adding a service that has not been authorised. The actual activities should be determined by examining contracts, payment instructions, control over funds or tokens, and settlement responsibilities, rather than drawing conclusions solely from product labels such as wallet, gateway or platform. [1] [2] [3]

The transaction volume test under section 6(5) of the Payment Services Act is calculated based on the average monthly total value of transactions accepted, processed or executed during a calendar year: exceeding 3000000SGD for a single relevant service, or exceeding 6000000SGD in aggregate for two or more services, triggers the MPI requirement. This set of tests excludes e-money account issuance and money-changing; e-money accounts and e-money issuance are subject to a separate statutory test where the relevant average daily balance during a calendar year exceeds 5000000SGD. A monthly peak, wallet balance at month-end or all global e-money balances must not be mechanically treated as the same metric. [2]

Businesses should retain the basis of calculation for each service separately and check the definitions of Singapore residents, place of issuance and specified e-money. Institutions planning rapid growth may assess applying directly for an MPI, but must have the corresponding operational capabilities. The statutory application period following an SPI upgrade trigger should be confirmed against the current regulations and MAS’s current guidance; this guide does not rely on the outdated blanket statement in older materials that the application must be made 'within one month after exceeding the threshold'. [2] [7]

• First prepare a mapping of products, the seven activity types, contracting entities and points of control over funds.
• Monitor transaction volumes, e-money balances and statutory limits for individual accounts separately.

02｜Account issuance: a wallet account is not a bank account

Account issuance includes issuing payment accounts to persons in Singapore and services required to operate those accounts, such as top-ups or withdrawals; however, certain money transfer functions should be classified as domestic or cross-border money transfer. A wallet may require authorisation for both account issuance and e-money issuance; issuing an account and issuing the stored-value liability within that account are two distinct activities, and one cannot be chosen in place of the other. [3]

Application materials should explain who contracts with the customer, who creates the account, which entity owes the balance, and whether the account can be used for transfers, withdrawals or payments to third-party merchants. Practical controls include identity verification, account freezes, changes to authorisations, device binding and investigations into unusual access. The absence of an SPI size limit for an MPI does not remove the holding and transaction limits for individual payment accounts; specific limits and exceptions should be checked separately against current section 24 and related requirements. [1] [2] [3]

• Submit the complete processes for account opening, top-ups, payments, withdrawals and account closure.
• Clearly link account records, e-money liabilities and the safeguarding of customer funds.

03｜Domestic money transfer: local transfers and bill payments

The core of domestic money transfer is accepting funds to execute or arrange statutory payment transactions between payers in Singapore and payees in Singapore, including transfers through payment accounts, direct debits and credit transfers. Connecting to PayNow or another payment network does not, by itself, determine the licence category; the analysis should be based on the entity’s role in accepting funds, arranging payments and executing transactions. [3]

Materials should show every step, from the customer’s payment instruction and the funds entering the account through clearing, crediting the payee and refunds, and identify third-party banks and processing institutions. Controls should be established for verifying payee accounts, preventing duplicate payments, handling failed transactions and identifying funds outstanding at the end of the day. Where relevant customer funds are held by an MPI, a safeguarding process under section 23 must be established; controls for funds retained in exceptional circumstances cannot be omitted on the grounds that transactions are normally completed quickly. [3] [12]

• Retain payment instructions, execution status, proof of receipt and refund records.
• Separately identify customer funds still held at the end of the day and funds for which settlement has been completed.

04｜Cross-border money transfer: arrangements between overseas jurisdictions also require analysis

Cross-border money transfer includes not only accepting funds in Singapore for remittance overseas and receiving funds from overseas for collection by a payee in Singapore. Following the expansion of the regulatory scope on 2024-04-04, arranging a transfer of funds from one overseas country or territory to another may also fall within the definition, even if the service provider does not accept or receive the funds in Singapore. 'The money does not pass through Singapore' is not a general exemption. [3] [13]

Applicants should list the sending and receiving countries, customer categories, partner banks, agents and settlement entities for each remittance corridor, and explain the exchange rate, fees, payment information, source of funds and handling of failed-payment refunds. Overseas agents should be subject to due diligence, monitoring and exit mechanisms; an MPI provides authorisation in Singapore only and does not automatically grant permission to remit funds in destination markets. Foreign exchange spreads and cross-border prefunding should be included in liquidity and counterparty risk budgets, rather than assigning an arbitrary universal capital multiple. [4] [14]

• Map the contracts, information flows and funds flows for each corridor.
• Obtain evidence of overseas partners’ licences and banking settlement arrangements.

05｜Merchant acquisition: focus on contractual responsibilities, not only on whether funds are handled

Merchant acquisition means accepting and processing payment transactions under a contract between a service provider and a merchant, and causing the funds to be transferred to the merchant. The First Schedule may apply where the relevant merchant and contractual connection conditions are met, even if the acquirer does not hold the funds. Providing a purely technical connection is not the same as assuming responsibility for acquiring and settlement; accordingly, not all payment gateways should be treated as acquirers, and the absence of possession of funds should not be mistaken for an automatic exemption. [3]

The business plan should set out merchant onboarding, industry restrictions, management of platform sub-merchants, settlement cycles, and the parties responsible for refunds and chargebacks. The merchant’s genuine business and ultimate beneficial owner should be verified, and fictitious transactions, transaction laundering and unusual refunds monitored. Merchant security deposits, chargeback reserves and amounts payable to merchants should be accounted for separately; applicable customer-related funds must be safeguarded under section 23 and must not be used arbitrarily to subsidise the company’s operating losses. [4] [12] [14]

• Provide the merchant agreement, fee schedule, and chargeback and refund processes.
• Set out the respective responsibilities of the master merchant, sub-merchants, banks and card schemes.

06｜E-money issuance: stored-value liabilities and real-time safeguarding

E-money must meet the definition under the Payment Services Act: it is electronically stored, denominated in currency or pegged to currency by the issuer, paid for in advance for use in transactions through a payment account, accepted by persons other than the issuer, and represents a claim on the issuer. Closed-loop vouchers, limited-purpose stored value and points each have their own exclusion conditions; they are not outside regulation merely because they are called points. Where the issuer and the operator of the wallet account are different entities, the authorisation and redemption responsibilities of each party must be made clear. [3]

For MPI e-money issuance, applicable relevant funds must be safeguarded from the time the funds are received, rather than under a uniform next-business-day deadline. Top-up credits, e-money issuance, redemptions and customer liability ledgers should be linked in real time to safeguarding accounts or guarantee limits. 5000000SGD is a threshold relevant to the scale assessment, not a cap on customer-fund safeguarding or an amount of e-money that may be freely redeployed. [2] [12]

• Explain the stored value, the customer’s claim, eligible merchants and redemption terms.
• Calculate specified e-money and applicable safeguarded funds separately; do not use a single global balance as a substitute.

07｜DPT: trading, transfers and custody involving control

Current DPT services are not limited to buying and selling crypto-assets or operating an exchange platform. The definition, as expanded in 2024, also covers receiving or arranging the transfer of tokens between accounts, inducing the purchase or sale of tokens, and safeguarding and executing customer instructions in relation to tokens or instruments over which the service provider has control. Joint control may also constitute control; not directly holding funds or tokens does not, on that basis alone, exclude all facilitation activities. [3] [13]

A new application for DPT services must be accompanied by an assessment report from an independent external auditor on the proposed AML/CFT and consumer-protection processes, policies and procedures. The report must have been issued within the three months immediately preceding the application submission. Materials should include the token list, legal classification, wallet and private-key controls, on-chain monitoring, custody arrangements, customer asset records and procedures for handling unusual transfers. DPT AML requirements are governed by PSN02; where other specified payment services are also carried on, the applicability of PSN01 must also be checked. [4] [14] [15]

Protection of customer DPT assets and safeguarding of ordinary fiat funds should be designed separately, including asset segregation, trust arrangements for the benefit of customers, reconciliation and withdrawal controls. Consumer-protection and marketing rules should also be implemented in accordance with current PSN07, PSN08 and the relevant guidelines. As not all ancillary documents could be fully retrieved for this review, details such as retail restrictions, implementation dates and specific custody ratios should be verified individually before submission; do not adopt a uniform insurance or capital formula from an outdated guide. [13] [16]

• Determine whether each token is a DPT, a capital markets product or another category.
• An external assessment report does not replace actual implementation, ongoing audits or technology remediation.

08｜Money-changing: foreign banknotes distinguished from other foreign-exchange business

Money-changing services under the First Schedule are defined as buying and selling foreign currency notes. Travellers’ cheques, all foreign-exchange conversions and margin foreign-exchange trading should not all be treated as falling within MPI money-changing authorisation. An applicant providing money-changing services alone should apply for an MC licence; if it also carries on other payment services, it should apply for the relevant combination under SPI or MPI. [1] [3]

If an MPI plans to establish cash-changing locations, it should describe the locations, cash inventory, cash transportation security, counterfeit-note detection, customer verification and transaction records. A change of business location or provision of the relevant services at another location may require additional approval and prescribed forms. The rules on ownership, personnel and experience that apply specifically to an MC should not be incorrectly recast as a requirement for all MPIs to be majority-owned by Singapore citizens. [1] [16]

• Classify banknote exchange separately from foreign-exchange conversion for remittances, DPT exchange and leveraged foreign-exchange trading.
• Check the approval requirements for additional business locations before opening a counter.

09｜Applicant entity and genuine Singapore business location

MAS states that an MPI applicant must be a Singapore-incorporated company or a Singapore branch of a foreign company. It is not the case that only a Pte. Ltd. may apply, nor can the registration documents of an overseas company directly replace a Singapore entity and local regulatory connection. The entity must have a permanent place of business or registered office where books and records can be securely kept, and must appoint at least one person at that location to handle consumer enquiries or complaints. [1] [2]

An ACRA registered office must be at a Singapore address and, under official registration requirements, be open to the public for at least three hours on every business day. The registered office may differ from the actual place of business. However, meeting ACRA’s requirements for a correspondence address does not mean that the entity has the substantive governance, record-keeping and consumer-facing capabilities required by MAS. A shared or serviced office should demonstrate genuine access to usable space, staff presence, access controls and data security; it should not merely provide a mailbox or fictitious address. [1] [17]

Practical supporting information should include the full street address and unit number, postal code, lease or right-of-use agreement, on-site arrangements, person in charge, office hours and method for securely keeping records. The company should also complete the applicable arrangements for its secretary, directors, controllers and nominee registers. This guide does not present a Hong Kong adviser’s address, a regulator’s address or an example address as the applicant’s business address; the final location must be consistent with actual operations and the information submitted to ACRA and MAS. [17] [18]

• Verify the right to use the address and the presence of on-site personnel; do not create a paper office.
• Establish arrangements for access to books and records, handling consumer complaints and receiving on-site inspections.

10｜Shareholders, controllers and ultimate beneficial owners

The application must include a complete ownership chart and all controlling interests, not merely a list of direct shareholders. For corporate shareholders, provide the latest business profile and trace ownership upwards to the ultimate natural persons, explaining any trusts, nominee arrangements, concert-party arrangements and contractual control. Source of funds, group financial standing, regulatory history and capacity to provide support may all affect the assessment. A complex structure is not automatically disqualifying, but an inability to explain actual control or the legitimacy of funds will create a material obstacle. [1] [4]

The identification of a 20% controller considers both shareholding interests and voting control, and the statutory rules for aggregating associates must also be taken into account. MAS controller requirements, customer AML beneficial-owner identification and ACRA’s registerable-controller regime are not the same set of percentage rules; a single 25% threshold cannot be used as a substitute for all identification requirements. If a fund, trust, option or special veto right is proposed, a Singapore lawyer should analyse its effect on control; nominal shareholding alone should not be considered. [8] [9] [17]

• Prepare an explanation of each ownership layer, voting rights, relationships between associates and actual control.
• Provide shareholder identity details, source of funds, financial information and disclosures of material adverse matters.

11｜Executive director, CEO and fit and proper requirements

The director composition currently published by MAS is: one Singapore citizen or permanent resident serving as an executive director; or one executive director holding a Singapore Employment Pass together with at least one other director who is a Singapore citizen or permanent resident. This is not a general requirement for two local executive directors, nor is it mandatory to appoint an additional local non-executive director. The executive director must genuinely participate in day-to-day management; a nominal resident director cannot fulfil this function. [1] [2]

Directors, controllers and key management personnel must demonstrate integrity, competence and financial soundness commensurate with the business. Prepare detailed CVs, payment and financial-services experience, responsibilities, actual time commitment, and disclosures of all criminal, civil, regulatory, disciplinary or insolvency matters that must be disclosed. The board should be able to understand service classification, safeguarding of funds and AML risks; do not state consultant-recommended five-year or ten-year experience periods as statutory periods applicable to all MPIs. [1] [4] [6]

After licensing, the appointment of a new director or CEO is subject to prior approval under section 34 of the Payment Services Act; notifying ACRA only after the appointment is not sufficient. The source material’s presentation of Form 5 or “notification within 14 days after appointment” as a uniform process is inaccurate; the current payment regulatory forms list specifies Form 3 for an application for approval of a CEO, director or partner. Resignations, changes in particulars and other material changes must also be checked against the applicable current notification requirements, while avoiding any vacancy in the required director composition. [10] [16] [18]

• The director who actually participates in executive management should be consistent with the application’s organisational chart and the information in their CV.
• Obtain any required MAS approval for a new director or CEO before the appointment takes effect.

12｜Compliance officer, AML/CFT and suspicious transaction handling

Compliance arrangements should be commensurate with the nature, scale and complexity of the business. The application should specify the compliance function, AML/CFT lead, reporting lines and implementation plan, provide relevant CVs, and explain how locally responsible personnel will access systems and customer information, escalate issues and report to the board. Whether the role must be full-time, may be combined with another role, may be outsourced, and the minimum staffing requirements should be confirmed against the latest Appendix 2 to PS-G01; an external consultant’s contract should not be treated as transferring management’s responsibility. [1] [4] [6]

Check PSN01 and PSN02 separately for specified payment services and DPT services. The official pages indicate that amendments to both notices took effect on 2025-07-01; the consolidated current versions should be used. Implementable AML documents must cover an enterprise-wide risk assessment, CDD/EDD, beneficial-owner identification, PEPs, sanctions screening, ongoing monitoring, record retention, agent oversight, training and independent testing. Suspicious transactions should be reported to STRO under Singapore’s reporting framework, rather than describing all STRs as being submitted to MAS; applicable regulatory reporting and confidentiality obligations must also be addressed. [4] [14] [15] [16]

• Establish alert allocation, investigation, escalation, reporting decisions and audit trails.
• Test policies against actual customer and transaction scenarios; do not merely copy regulatory text.

13｜Capital, regulatory security deposit and operating budget are three distinct arrangements

The minimum base capital for an MPI is 250000SGD, and MAS also requires an adequate buffer to be maintained according to the scale and scope of the business and its profit-and-loss risks. The seven services do not require seven separate amounts of 250000 to be added together, and no general formula requiring the higher of “annual shareholders’ equity at 100%” has been verified. Base capital must be calculated on an ongoing basis using the applicable statutory accounting basis; a historical bank receipt for a capital injection is not, by itself, evidence of ongoing compliance. Details of the capital calculation applicable to a foreign branch should be confirmed separately with MAS. [1] [7]

The regulatory security deposit must be provided before commencing business. MAS’s current page states that the amount is 100000SGD where the average monthly transaction value for the relevant payment services during a calendar year does not exceed 6000000SGD, and 200000SGD in all other cases. The deposit must be provided in the form of cash deposited with MAS or a banker’s guarantee. This deposit is a separate regulatory arrangement; it does not replace the safeguarding of customer funds and should not be conflated with the entity’s base capital or the minimum balance required to open a bank account as if they were the same type of deposit. [1]

The actual budget must also cover staffing, premises, legal advice, external assessments, audits, AML systems, cybersecurity and bank security costs. Prepare profit and loss, balance sheet and cash flow projections linked to transaction forecasts, and explain the route for additional shareholder funding and stress scenarios. There is no verified uniform total first-year cost or compliance staff remuneration threshold; this guide therefore does not present market quotation ranges from old webpages as regulatory conditions. [1] [4]

• Record separately: base capital, capital buffer, regulatory security deposit, customer safeguarding and working capital.
• Forecast losses and guarantee collateral requirements to avoid underestimating available cash.

14 | Safeguarding of Customer Funds: Start Time by Service

Section 23 imposes safeguarding obligations on funds relating to domestic money transfers, cross-border money transfers and merchant acquisition by an MPI. Applicable funds must be safeguarded no later than the next business day after receipt; relevant funds applicable to the issuance of e-money must be safeguarded from the time of receipt. Relevant funds are subject to statutory definitions and exclusions. Not all fees, company receivables and settled amounts should be treated indiscriminately as customer safeguarding liabilities. [12]

Statutory methods include an undertaking under which an eligible safeguarding institution assumes full liability, a guarantee or trust account, and other methods prescribed by law. An arbitrary commercial insurance policy, an ordinary corporate bank account or an account held by another MPI cannot automatically be treated as a qualifying arrangement. Where multiple safeguarding methods are proposed, verify whether MAS approval is required and, under Section 23, notify MAS of the chosen method, safeguarding institution and relevant changes. [12] [26]

Establish customer sub-ledgers, reconciliations with banks and processing institutions, shortfall replenishment and exception escalation procedures. Specify when funds become funds requiring safeguarding, when withdrawals are permitted and when payment is completed. Safeguarding accounts and agreements must reflect customer interests and statutory asset segregation; company salaries, rent and shareholder repayments should be paid from working capital. Safeguarding arrangements reduce certain insolvency risks, but are not a guarantee by MAS of principal, immediate refunds or protection against all losses. [12]

• Define relevant money, the point at which safeguarding begins and the conditions for its end, item by item.
• Retain reconciliation evidence, bank confirmations, guarantee coverage and withdrawal authorisations.

15 | Application Materials: Build an Evidence Chain Linking the Business, Personnel and Controls

The MAS official checklist includes an ACRA business profile dated within 30 days before the application, the organisational and compliance structure, a shareholding chart showing all controlling interests, a business plan, and, where applicable, the audited financial statements of the company and group for the past three years. Entities that have never been independently audited should attach unaudited financial statements. The 30-day requirement must also be checked for corporate shareholders’ business profiles; submit supporting documents and prescribed forms for individual shareholders, directors and the CEO according to their respective status. [4]

A legal opinion is an express requirement in the current checklist, not an optional submission reserved only for particularly complex projects. It should be issued by a law firm with experience advising on the PSA in Singapore and explain, for each proposed product, which payment services apply and which do not. AML/CFT policies, an enterprise-wide risk assessment, an implementation plan and the responsible persons’ CVs are also required. A new DPT application must additionally include an independent assessment report issued within the most recent three months. [4]

Practical supporting documents should include end-to-end fund flows, customer contracts, fee and refund rules, three-year financial projections, sources of capital, safeguarding arrangements, outsourcing contracts, technology architecture, access controls, penetration testing and business continuity plans. Transaction projections, personnel, addresses and system status must be consistent across all materials. Form 1 and its attachments should be in English or accompanied by certified English translations; attachments must be searchable and annotatable, and files exceeding 5MB should be compressed for upload in accordance with the official page. [4] [5]

MAS may, depending on the circumstances, require majority shareholders, parent companies and related companies to provide a Letter of Responsibility or Letter of Undertaking. This requirement applies based on a case-by-case assessment and should not be described as a fixed mandatory document for every MPI application. Before applying, the specific entities required to issue the letters, their content and the obligations for ongoing support should be confirmed. [1]

• Core entity pack: ACRA documents, constitution, shareholding and control chain, personnel identification and CVs.
• Business pack: legal opinion, fund flows for each service, contracts and financial projections.
• Control pack: AML, safeguarding, technology, audit and DPT-specific reports.

16 | Process, Online Channels and Application Fees

First classify the products and determine the applicant entity, then put personnel, capital support, business premises and implementable controls in place, and submit online through the current official MAS portal. New applications use Form 1; changes to an existing licence or the addition of services must follow Form 2 or another applicable route. PDF specimens are for preparation only and cannot be submitted as formal applications. The company must configure Corppass authorisation and access the relevant services using the government’s current Singpass login method; old names such as WINGS or MASNET should not be described as the sole permanent channels. [4] [5] [16]

MAS may verify the entity, controllers, business viability, compliance and operational readiness, and may request further documents or clarification. If information changes after submission, the Form 1 page requires MAS to be notified immediately by email. If in-principle approval is granted, fulfil only the conditions set out in the actual approval letter. In-principle approval is not a formal licence permitting the commencement of business. Upon approval, MAS issues an electronic licence by email and lists the institution in the Financial Institutions Directory; the approved activities and restrictions must still be checked individually. [4] [5]

The non-refundable MPI application fee is the higher of 1500SGD and the aggregate fees for the activities applied for. The official schedule lists account issuance at SGD 0; domestic money transfer, cross-border money transfer, merchant acquisition, e-money issuance and DPT at SGD 1500 each; and money-changing at SGD 500. The uniform MPI application fee of SGD 1000 in the old material must therefore not be reused. Annual licence fees and subsequent amendment charges must be confirmed against the current fee schedule in the regulations and MAS invoices; unverified historical rates must not be used for budgeting. [4] [7]

• Retain online submission confirmations, version registers and records of regulatory questions and answers.
• Obtain the required authorisation before adding services; do not launch first and apply afterwards.

17 | Timelines: A Queue Is Not a Review, and a Review Is Not Approval

As of 2026-11-04, the MAS Form 1 page states that application volumes are high and there is a significant wait before staff can begin reviewing applications; the current estimated waiting time is more than one year, and MAS is unable to provide a better estimate. This notice describes the queue before review begins, not the full approval process, and certainly not that a licence will ‘definitely be granted after one year’. Old webpage estimates of approval in 3 to 6 months or a total process of 7 to 14 months must not be presented as current commitments. [5]

The company should manage preparation, waiting for allocation, substantive queries, remediation, licensing conditions and commencement of business as separate stages. Specific deadlines for further submissions are governed by the regulatory email. Personnel status, document validity, ACRA profiles and business projections may change while an application is in the queue, so an update mechanism is needed. Bank accounts, custody agreements and system security remediation may be prerequisites to commencing operations; accordingly, do not pre-sell a definite launch date or treat anticipated approval as valid authorisation. [1] [4] [5]

• Do not promise an approval date or guarantee that an application will succeed.
• Keep time-sensitive documents and financial resources updated, and do not wait until the licence is granted to build controls.

18 | Banking, Technology and Operational Readiness

Holding a licence does not guarantee that any bank will open an account. Account-opening materials should be consistent with the MAS application and explain the source of shareholder funds, customer countries, transaction volumes, fund flows, AML controls and the types of accounts required. The purposes of operating accounts and customer funds accounts must be clearly distinguished. A model using an eligible guarantee or undertaking should not be incorrectly described as requiring every MPI to have exactly the same ‘two-account’ structure. Obtain the bank’s express confirmation as to whether it will accept third-party customer funds. [4] [12]

For providers of online financial services, MAS expressly requires penetration testing of the proposed services, remediation of all high-risk findings and independent validation of the effectiveness of remediation before licensing. Make arrangements for segregation of system privileges, logging, encryption, supplier oversight and recovery exercises. The current MAS payment regulation directory lists FSM-N13 Technology Risk Management and FSM-N14 Cyber Hygiene; do not rely solely on old PSN technology notice numbers. Confirm the applicable institutions, incident reporting requirements and specific timelines against the current texts. [1] [16]

• Do not invent individual banks’ risk appetite, account-opening success rates or fixed account-opening timelines.
• Complete the required high-risk remediation and independent validation before licensing.

19 | Acquiring an MPI: Buying Shares Is Not Buying a Freely Transferable Licence

Begin by verifying the target entity’s valid status in the MAS directory, its actual authorised services, restrictions and outstanding remediation matters. The licence belongs to the licensed legal entity; an asset transaction or share acquisition must not be described as the free transfer of a licence. A person becoming a 20% controller must apply in advance and obtain MAS approval under Section 28, using Form 3A. Statutory associates, share interests and voting control may all affect the calculation. [8] [9]

The old material’s presentation of 5%, 12%, 20% and 50% as uniform prior-approval thresholds for an MPI is inaccurate. The Payment Services Act contains different definitions of regulated persons and controllers; rules for designated payment systems should not be transposed directly to an MPI. A transaction below 20% should not automatically be treated as requiring no regulatory engagement: check actual control, aggregation with associates, existing licence conditions, notification requirements and other applicable obligations. Appointment of a new director or CEO separately requires approval under Section 34. [8] [10]

The share sale and purchase agreement should make any required regulatory approval a condition precedent to completion and address the long-stop date, refusal of approval, capital top-ups and customer asset shortfalls. Due diligence should cover customer funds reconciliations, AML history, audit qualifications, consents to changes in banking and custody arrangements, technology deficiencies, tax and outstanding complaints. After completion, relevant particulars must also be updated within ACRA’s timelines. Changing shareholders within the existing entity does not extinguish historical liability for breaches or mean that existing banking relationships automatically continue. [11] [12] [18]

• Submit information on the buyer and control chain, source of funds, post-acquisition plan and personnel arrangements.
• Do not complete the transaction or substantively transfer control before obtaining the required MAS approval.

20 | Ongoing Maintenance: Audits, Returns, Changes and Exit

Section 37 of the Payment Services Act requires a licensee, at its own expense, to appoint an auditor annually to audit its accounts and compliance in relation to payment transactions, and to submit a report to MAS. A small company’s audit exemption under company law does not, by itself, remove the payment regulatory audit requirement. An auditor must report immediately upon identifying serious breaches, fraud or prescribed financial irregularities. The reporting format, deadline and applicable audit scope should be determined by the current Form 4, relevant requirements and MAS permissions; this guide does not state the incompletely verified claim that ‘all reports are due within six months of the financial year-end’ as a general statutory deadline. [11] [16]

Ongoing work includes maintaining capital and the security deposit, customer safeguarding and reconciliations, AML monitoring, training and independent reviews, technology controls, outsourcing management and complaint handling. Regulatory returns should be submitted at the frequencies and by the deadlines applicable to the institution under PSN04, PSN04A and its particular scope; not all items are quarterly or half-yearly, and unverified references on old webpages to Form 25 and Form 26 should not be reused. If the licensee ceases to meet financial or operational requirements, Section 6(13) requires immediate notification to MAS. [2] [16]

Significant structural and operational changes must be distinguished as matters requiring approval or notification. Current Form 7 is used to notify specified significant changes, and licensed institutions submit it through MAS-Tx. Subsequent notification cannot replace prior approval for new services, directors or controllers. Cessation, temporary cessation or surrender of a licence must use the applicable form and include arrangements for returning customers’ funds, transferring assets and retaining records; termination of a licence does not automatically extinguish contractual liabilities or historical regulatory obligations. [10] [12] [16] [26]

• Maintain an itemised regulatory calendar recording the basis, responsible person, deadline and evidence of submission.
• Conduct regular checks on the expiry of bank guarantees, the composition of qualified directors and capital-loss warnings.

21｜ACRA Annual Returns, Company Changes and IRAS Tax

ACRA generally requires company particulars, personnel details and relevant shareholder changes to be updated through Bizfile within 14 days; prior MAS approval does not exempt a company from ACRA filings. An ordinary private company generally must file its annual return within seven months after the end of its financial year. A private company in certain circumstances, such as having a share capital and foreign branches, has an eight-month deadline. The applicable requirement should be determined based on the entity type; a branch cannot directly apply the same rule as a locally incorporated company. Dormancy or a tax exemption does not automatically exempt a company from filing its ACRA annual return. [18] [19]

The corporate income tax rate published by IRAS is 17% of chargeable income, not 17% of the total remittance amount. ECI is generally filed within three months after the end of the financial year, except where an exemption applies. Form C-S, C-S Lite or Form C is generally due annually on 11-30, and is a separate obligation from the ACRA annual return. Companies must retain relevant accounting records and supporting documents for at least five years. GST, cross-border services, tokens and related-party transaction tax treatment for financial services should be assessed separately according to the nature of the specific supply; holding an MPI does not mean that a company is fully tax-exempt or automatically entitled to tax concessions. [20]

• Manage the deadlines for ACRA, MAS and IRAS separately; they are not interchangeable.
• Keep client funds, service revenue and intercompany transactions in separate accounts, and retain complete supporting documents.

22｜Digital Banks, DTSPs, Fund Management and Stablecoin Boundaries

An MPI does not allow an institution to accept bank deposits or conduct regulated fund management solely by virtue of holding a payment services licence. Digital banks have separate licences and application windows. The MAS official page retrieved for this review returned historical reference material only, and no announcement of a new open application window was obtained. Accordingly, as at the date of this review, a digital full bank or digital wholesale bank cannot be presented as a new option for which applications may be submitted at any time. The RFMC regime was repealed by S 637/2024 with effect from 2024-08-01; a new RFMC registration route can no longer be offered to clients. Regulated fund management should be assessed under the current LFMC, VCFM or statutory exemption framework. [22] [23] [24]

DTSP is not synonymous with MPI. The MAS statement dated 2025-06-06 makes clear that, with effect from 2025-06-30, a DTSP providing only the relevant DPT and capital markets product token services to overseas customers must obtain a licence, and that MAS applies a high licensing threshold and will generally not grant a licence. Unlicensed persons must cease the relevant activities. A licensed service provider already serving Singapore customers may serve overseas customers under its applicable authorisation, but must not evade regulation of an exclusively overseas-facing model by fabricating local customers or making changes in form only. [21]

Stablecoins require separate analysis. On 2026-09-01, MAS published a consultation on proposed legislation to implement the stablecoin framework, with a closing date for comments of 2026-10-16. The conclusion of the consultation does not mean that the legislation has come into force or that all issuance windows are open. This guide does not treat proposed capital, reserve or labelling qualifications as MPI requirements already in force, nor does it claim that obtaining an MPI entitles its holder to use the designation “MAS-regulated stablecoin”. Before launch, the final legislation, commencement arrangements, token classification and specific approval conditions must be checked. [25]

• Receipt of funds, deposit-taking, investment management and token issuance must each be classified separately under the law.
• The strict DTSP licensing policy must not be presented as an offshore business route that is easy to obtain.

23｜Attribution, Source Materials and Pre-submission Checks

This guide was prepared by 仁港永胜（香港）有限公司, with professional commentary provided by business manager 唐上永（唐生）. It retains and organises the 7 service categories, information collection, AML, segregation of funds, technology, account opening, budget and maintenance practices from the company’s own MPI guide, while correcting its statements on directors, capital, control, application fees and timelines against official materials. It does not retain repetitive promotional content, advertisements for unrelated overseas licences, or unverified success-rate and experience claims. Official documents are cited as regulatory sources; neither regulators nor external authors are misrepresented as the company’s authors. [27]

The verification reference date for this guide is 2026-11-04. It provides general business and application-preparation information and does not replace Singapore legal, audit or tax advice for a specific case. The complete latest PS-G01 PDF, portions of the Payment Services Regulations, the capital basis for branches, the application period for upgrading from SPI, specific reporting and audit deadlines, DPT consumer protection details, and new digital bank application windows have not all been fully verified. These should be confirmed against current MAS requirements before formal submission. Regulators may impose individual conditions; no adviser can guarantee approval, an approval date or the opening of a bank account. [1] [5] [6] [7]

• Check the latest PS-G01, application checklist, notices, commencement dates and individual approval conditions.
• Obtain fresh advice on legal classification and the regulatory route when there is a substantive change to the business or control.

Frequently Asked Questions

Sources and usage notes

1. [1] MAS — Licensing for Payment Service Providers: eligibility, directors, capital, security deposit and technology requirements(opens in a new window)https://www.mas.gov.sg/regulation/payments/licensing-for-payment-service-providers
2. [2] SSO — Payment Services Act 2019 Section 6: licence, scale calculations and ongoing requirements(opens in a new window)https://sso.agc.gov.sg/Act/PSA2019?ProvIds=pr6-
3. [3] SSO — Payment Services Act 2019 First Schedule: current definitions of the 7 payment services(opens in a new window)https://sso.agc.gov.sg/Act/PSA2019?ProvIds=Sc1-&ValidDate=20261104
4. [4] MAS — How to Apply: legal opinions, information currency, DPT assessment and application fee(opens in a new window)https://www.mas.gov.sg/regulation/payments/licensing-for-payment-service-providers/how-to-apply
5. [5] MAS — Form 1: current online submission instructions and estimated review waiting period of more than a year(opens in a new window)https://www.mas.gov.sg/regulation/forms-and-templates/form-1---application-for-a-payment-service-provider-licence
6. [6] MAS — PS-G01 Licensing Guidelines official page: confirm the complete latest annex before submission(opens in a new window)https://www.mas.gov.sg/regulation/guidelines/ps-g01-guidelines-on-licensing-for-payment-service-providers
7. [7] SSO — Payment Services Regulations 2019: current regulations page; retrieval of some text was restricted(opens in a new window)https://sso.agc.gov.sg/SL/PSA2019-S810-2019
8. [8] SSO — Payment Services Act Section 28: prior approval for a 20% controller(opens in a new window)https://sso.agc.gov.sg/Act/PSA2019?ProvIds=pr28-&ViewType=Within
9. [9] MAS — Form 3A: approval for a 20% controller, MAS-Tx and new application route(opens in a new window)https://www.mas.gov.sg/regulation/forms-and-templates/form-3a---application-for-approval-of-20-percent-controller-of-a-payment-service-provider
10. [10] SSO — Payment Services Act section 34: Prior approval for the appointment of directors and the CEO(opens in a new window)https://sso.agc.gov.sg/Act/PSA2019?ProvIds=pr34-&ValidDate=20261104
11. [11] SSO — Payment Services Act section 37: Annual statutory audit and reporting responsibilities(opens in a new window)https://sso.agc.gov.sg/Act/PSA2019?ProvIds=pr37-&ViewType=Within
12. [12] SSO — Payment Services Act section 23: Definition of relevant funds, safeguarding methods and commencement time(opens in a new window)https://sso.agc.gov.sg/Act/PSA2019?ProvIds=pr23-&ValidDate=20261104
13. [13] MAS — 2024-04-02 announcement on the expanded scope of payment services and DPT customer protection(opens in a new window)https://www.mas.gov.sg/news/media-releases/2024/mas-expands-scope-of-regulated-payment-services
14. [14] MAS — PSN01 AML/CFT for designated payment services, including notes on amendments taking effect in 2025(opens in a new window)https://www.mas.gov.sg/regulation/notices/psn01-aml-cft-notice---specified-payment-services
15. [15] MAS — PSN02 AML/CFT for DPT services, including notes on amendments taking effect in 2025(opens in a new window)https://www.mas.gov.sg/regulation/notices/psn02-aml-cft-notice---digital-payment-token-service
16. [16] MAS — Payments Regulations and Guidance: Directory of current notices and forms(opens in a new window)https://www.mas.gov.sg/regulation/payments/regulations-and-guidance
17. [17] ACRA — Registering a local company: genuine registered office address, opening hours and personnel records(opens in a new window)https://www.acra.gov.sg/register/business/registering-different-business-structures/local-company/registering-via-bizfile/
18. [18] ACRA — Changes to company, officer and shareholder details and the 14-day filing requirement(opens in a new window)https://www.acra.gov.sg/manage/companies/legal-requirements-common-offences/maintaining-local-companys-information-registers/updating-company-information-officers-shareholders/
19. [19] ACRA — Annual return deadlines and exceptions for different company types(opens in a new window)https://www.acra.gov.sg/manage/companies/legal-requirements-common-offences/filing-annual-returns-companies/deadline-requirements/
20. [20] IRAS — Basic guide to corporate income tax: 17%, ECI, annual tax filing and record retention(opens in a new window)https://www.iras.gov.sg/taxes/corporate-income-tax/basics-of-corporate-income-tax/basic-guide-to-corporate-income-tax-for-companies
21. [21] MAS — 2025-06-06 DTSP regulatory clarification: offshore-only business and the general no-licensing policy(opens in a new window)https://www.mas.gov.sg/news/media-releases/2025/mas-clarifies-regulatory-regime-for-digital-token-service-providers
22. [22] MAS — Digital Bank Licence: only historical reference material was obtained in this extraction; no new window was verified(opens in a new window)https://www.mas.gov.sg/regulation/banking/digital-bank-licence
23. [23] SSO — S 637/2024: commencement amendment repealing the RFMC regime with effect from 2024-08-01(opens in a new window)https://sso.agc.gov.sg/SL-Supp/S637-2024/Published/20240731?DocDate=20240731
24. [24] MAS — Current fund management licensing entry points: LFMC, VCFM and exemptions(opens in a new window)https://www.mas.gov.sg/regulation/capital-markets/apply-for-licensing-or-registration-of-capital-market-entities/fund-management-licensing
25. [25] MAS — Consultation announcement on legislation to implement the stablecoin framework on 2026-09-01(opens in a new window)https://www.mas.gov.sg/news/media-releases/2026/mas-consults-on-legislative-amendments-to-implement-stablecoin-regulatory-framework
26. [26] MAS — Form 7: Notification of a significant change by a payment institution and submission via MAS-Tx(opens in a new window)https://www.mas.gov.sg/regulation/forms-and-templates/form-7---notice-of-changes-for-a-payment-service-provider
27. [27] 仁港永胜’s proprietary MPI guide: source of practical material, revised against official sources and not relied on as a regulatory basis(opens in a new window)https://www.jrp-hk.com/html/sg_mpi_guide_final.html