Singapore Standard Payment Institution (SPI) Licence Guide: Seven Categories of Payment Services, Application and Ongoing Compliance

Business and application categories

An SPI is a payment institution licence under Singapore’s Payment Services Act for businesses operating below the statutory thresholds. An applicant may apply for one or more of the seven categories of service, but must obtain authorisation for each category separately. A Singapore company must have minimum base capital of 100000SGD; for a foreign company’s branch, the requirement is calculated by reference to the net head office funds. Providing DPT services does not automatically increase the SPI minimum capital to 250000SGD. This guide is compiled from MAS, SSO, ACRA and IRAS materials verifiable as at 2026-11-04 and covers service classifications, teams, addresses, documents, actual queue times, acquisitions and ongoing maintenance.

Business characteristics and suitability considerations

• Applications may cover multiple payment service modules based on the genuine business model, enabling one licence to cover the approved combination rather than requiring the establishment of seven separate licences.
• The minimum base capital requirement is lower than that for an MPI, making it suitable for businesses with controlled scale and genuine operational and compliance resources; this does not mean that the review is less stringent.
• Clearly defines the statutory scope of business authorisation, helping the company explain its licensed entity and approved services to customers, banks and partners.
• Additional services may be added or the licence upgraded to an MPI as the business develops by applying for a licence variation, but both additions and upgrades are subject to regulatory review.
• A local payment operations platform may be established in Singapore; the licence does not guarantee bank account opening, access to payment networks, access to overseas markets or MAS endorsement of the business.

01｜Scope of SPI authorisation and suitable applicants

A Standard Payment Institution is not a company registration category, a free trial licence or a regulatory sandbox. Under sections 5 and 6 of the Payment Services Act, a valid licence is required to provide regulated payment services in Singapore, except where an exemption applies. An SPI may apply to provide one or more of the seven classes of services, but the business it may ultimately conduct is limited to the specific services and additional conditions granted by MAS; the SPI label does not automatically authorise all seven services.[1]

In selecting a licence, first map the contractual relationships and flow of funds among customers, payers, payees, merchants, banks and technology platforms, and then forecast transaction and e-money volumes. An enterprise with controlled volumes that is genuinely preparing to launch payment services may consider an SPI; a project expected to exceed the thresholds rapidly in the near term should assess an MPI as well. An entity dealing only in foreign currency notes should select a money-changing licence. Whether a pure technology provider is excluded must be determined by reference to the conditions in the First Schedule; it must not be assumed solely from the company name or on the basis that it “does not hold funds”.

• Distinguish registration of a Singapore company or branch from MAS financial licensing.
• Retain the legal basis for the analysis of each service classification and applicable exceptions.
• A licence does not authorise the taking of bank deposits, nor does it automatically authorise fund management, securities dealing or investment advice.

02｜Account issuance: assessing wallet accounts and stored value separately

Account issuance includes issuing payment accounts to persons in Singapore and providing services incidental to the operation of those accounts. A payment account under the legislation is not limited to an App login account; it is an account, device or facility through which a payment instruction may be initiated or a payment transaction executed. Related deposit and withdrawal operations must also be assessed against the definition; the First Schedule specifically distinguishes domestic or cross-border money transfer services from certain account operations.[2]

An e-wallet project should separately identify who provides the account to customers, who is liable for the stored value, who executes local transfers and who settles with merchants. The same wallet may involve account issuance, e-money issuance, and money transfer or merchant acquisition. Applying only for “account opening services” does not cover all functions. Application materials should show the actual processes for account opening, top-ups, payments, refunds, account closure and restrictions on abnormal accounts, and clearly state which entity customers have rights against.

• Prepare the account terms, feature list and customer balance ledger.
• Specify how personal and business accounts are distinguished and how customer residence is identified.
• Do not market e-wallet balances as bank deposits or as automatically covered by deposit insurance.

03｜Domestic money transfer: local fund transfers and settlement responsibilities

Domestic money transfer concerns the acceptance of money for the purpose of executing or arranging payment transactions between a payer and a payee in Singapore. The First Schedule lists transactions executed through a payment account, direct debits, credit transfers and the acceptance of money for transfer into another person’s account, and includes an exception where both the payer and payee are financial institutions. This category is not limited to person-to-person transfer Apps.[2]

For bill payments, business disbursements and local bulk payments, show confirmation of incoming funds, payee verification, refunds for failed transactions and the handling of undelivered payments. If a system merely sends instructions to a bank but, under the contract, assumes an obligation to execute or arrange the payment, obtain a legal classification opinion first; do not conclude that no licence is required solely because the system does not hold cash. Applicants should also explain controls for fraud prevention, changes to payee details and duplicate payments.

• Assess the actual locations of the payer and payee against the statutory definition.
• Record the payment authorisation, processing status and final settlement evidence for each transaction.
• Plan dual-person review for changes to beneficiaries, unusual refunds and bulk payments.

04｜Cross-border money transfer: funds need not pass through Singapore to be regulated

Cross-border money transfer includes accepting money in Singapore for transmission overseas, receiving or arranging to receive money from overseas for persons in Singapore, and arranging the transmission of money between different countries or regions. The scope expanded from 2024-04-04 to cover relevant arrangement services where the funds are not accepted or received in Singapore. Older materials that categorically exclude platforms that “do not actually handle Singapore funds” should not be relied upon.[2][6]

For each remittance corridor, the project should specify the places of payment and receipt, currencies, partner banks or payment institutions, settlement agents, how the exchange rate is determined and responsibility for refunds. Overseas partners must be due diligenced, and sanctions screening and the transmission of payer and payee information at each stage must be explained. A Singapore SPI is not a passport to operate under the licences of other countries; customer solicitation, local payouts and partnership arrangements overseas must separately comply with the rules of the relevant markets.

• Prepare cross-border fund flow diagrams and information on partners’ licences or regulatory status.
• State the exchange rate, fees, expected receipt conditions and refund handling clearly in the customer terms.
• Do not treat overseas clearing or not handling funds as an automatic basis for exemption.

05｜Merchant acquisition: contracts, fund flows and chargeback management

Merchant acquisition is a service of accepting and processing payment transactions under a contract with a merchant, resulting in the transfer of money to the merchant. The statutory definition expressly provides that whether the service provider actually receives the relevant money does not determine the classification; whether the merchant carries on business or is registered in Singapore, or whether the contract is entered into in Singapore, are factors connecting the service to Singapore that should be reviewed. Merely selling POS hardware is not the same business as assuming merchant acquiring obligations.[2]

Payment gateways, payment aggregators and e-commerce platforms should explain who contracts with the merchant, who assumes payment processing and settlement obligations, and whether another licensed institution provides the service directly to the merchant. An acquiring arrangement should also cover merchant due diligence, prohibited industries, refunds, card-scheme chargebacks, settlement cycles and reserves. Card-scheme or partner-bank requirements are separate commercial and risk conditions; SPI approval does not replace their independent onboarding reviews.

• Prepare merchant agreements, acquiring partner agreements and settlement workflows.
• Clearly allocate responsibility for chargeback losses, frozen funds and settlement errors.
• Establish ongoing reviews and transaction anomaly investigations for high-risk merchants.

06｜E-money issuance: claims, redemption and limited-purpose exclusions

Electronic money typically has four core characteristics: it is stored electronically, denominated in or pegged by the issuer to a currency, prepaid to support payment, accepted by persons other than the issuer, and constitutes a claim against the issuer; the legislation also excludes the relevant deposits. Issuing such value for payment purposes constitutes the issuance of e-money, while account issuance concerns the account itself. Service classification must be based on the statutory provisions and the facts of the product.[1][2]

Limited-purpose e-money, loyalty points and single or limited-network products are subject to specific definitions and conditions. Not all gift cards or closed-loop wallets should be treated as regulated, nor should all be treated as exempt. The scope of merchants, geographical availability, refunds and cash withdrawals, account balances, and whether the product constitutes a financial product should be examined. A general-purpose stored-value scheme available at third-party merchants should clearly identify the issuer and redemption entity, top-up evidence, unused balances and the mechanism for customer claims.

• Reconcile issued balances, customer account balances and bank funds separately.
• Analyse whether the issuance and account modules require applications at the same time.
• Reassess the limited-purpose exemption before introducing cash withdrawals or expanding the merchant acceptance network.

07｜DPT: Transactions, transfers and custody must all be classified

DPT services are no longer limited to buying or selling Bitcoin or operating an exchange. The current First Schedule includes facilitating transactions, accepting or arranging the transfer of tokens between accounts, inducing the relevant buying or selling, and, where there is statutory control, safeguarding tokens, private keys and other token instruments, or executing customer instructions. The 2024 expansion specifically covers certain facilitation activities that do not involve actually receiving money or tokens; joint control may also constitute control.[2][6]

Applicants should list token and product classifications, matching or quoting methods, wallet and key access rights, withdrawal authorisations, on-chain monitoring, counterparties and customer asset safeguards. The minimum SPI capital for DPT remains 100000SGD, but MAS has higher expectations regarding compliance and technical resources. Legal opinions, external independent assessments consistent with the guidance in force at the time, and local internal compliance personnel should be put in place during the preparation stage; this should not be treated as simply adding another currency to an ordinary remittance system.[3][7][20]

• Security tokens and capital markets products require a separate analysis under the Securities and Futures Act.
• Identify actual control in non-custodial, multisignature and third-party custody structures.
• Check current DPT consumer protection and public promotion restrictions; do not promote tokens as having value guaranteed by MAS.

08｜Money-changing: foreign currency notes, not all foreign exchange business

The First Schedule to the Payment Services Act defines money-changing as the buying or selling of foreign currency notes. Accordingly, this module covers the core activities of an over-the-counter money changer; foreign exchange in remittances, electronic money exchange, leveraged foreign exchange or derivatives trading must be analysed under their respective legal definitions and cannot all be covered by referring to a “money-changing licence”.[2]

A business conducting money-changing only should apply for a standalone Money-Changing Licence. That licence has its own eligibility requirements for sole proprietorships, partnerships and different company categories, and the general foreign ownership structure applicable to an SPI cannot simply be applied. A company planning to provide other services, such as remittance, account issuance or merchant acquisition, may apply to include money-changing within its SPI, but should prepare for the actual business premises, cash management, counterfeit note detection, staff supervision and anti-money laundering measures commensurate with the business.[3]

• Confirm whether the business genuinely buys and sells notes or trades foreign exchange value in accounts.
• Prepare a plan for cash inventory and transaction record management.
• Where the business only exchanges notes, separately verify the shareholding and director eligibility requirements for the money-changing licence.

09｜3000000, 6000000 and 5000000: Understanding the thresholds for upgrading correctly

Section 6(5) of the Payment Services Act uses a calendar-year average. Where the relevant services are account issuance, excluding e-money account issuance, domestic money transfer, cross-border money transfer, merchant acquisition and DPT services, if the monthly transaction value of any one service exceeds 3000000SGD on average during a calendar year, or the average monthly transaction value of two or more relevant services in aggregate exceeds 6000000SGD, MPI requirements are engaged. Money-changing is not included in this set of transaction thresholds.[1]

E-money account issuance and e-money issuance are subject to a separate 5000000SGD test based on the average daily amount during a calendar year, which must be calculated separately according to the statutory customer residence, place of issuance and specified e-money scope. It is not the case that “exceeding 5000000 on any one day” or “exceeding 3000000 for two consecutive months” can replace the statutory formula. Regulation 6(2) provides that a licensee without an MPI licence on the relevant statutory date must apply for a variation within 30 days thereafter. The company should forecast and monitor continuously to avoid discovering an exceedance only at year-end; statutory arrangements during the application period should be verified under section 6(6) and the conditions of the individual case.[1][4]

• Maintain traceable transaction classifications and SGD equivalent calculations for each service module.
• Monitor e-money account balances and the scale of e-money issuance separately.
• Do not substitute a rolling 12-month period or a single-month peak for the statutory calendar-year average formula.

10｜Capital, operating buffers and fee budget

Regulations 8 and 12 require a Singapore SPI company to have base capital of at least 100000SGD at the time of application and throughout the licence period; a foreign company is subject to a net head office funds requirement of at least 100000SGD. The corresponding minimum threshold for an MPI is 250000SGD. There is no statutory service tier under which an SPI must have 250000 for cross-border, e-money or DPT services in all cases, and shareholder loans, unpaid subscriptions or customer prepayments cannot be treated as freely interchangeable with capital.[4]

In addition to the minimum threshold, MAS requires sufficient capital buffers to cover the scale of the business and potential losses. Prepare substantiated profit and loss, cash flow and capital forecasts, taking into account local personnel, premises, anti-money laundering systems, legal opinions, independent assessments, technology testing and audit costs. Minimum base capital is neither a one-off application fee nor a complete budget for commencing operations. MAS application fees are non-refundable; verify application and annual fees against the current regulations’ fee schedule and online bill, and do not treat quotes on old webpages as current fixed total costs.[3][5]

• Have the finance lead calculate base capital in accordance with regulatory definitions and report it regularly.
• Determine capital alerts, recapitalisation decisions and shareholder support arrangements in advance.
• If ongoing financial requirements are not met, notify MAS immediately under section 6(13) of the Payment Services Act.

11｜Shareholders, ultimate controllers, directors and CEO

An SPI applicant may be a Singapore-incorporated company or a Singapore branch of a foreign company. MAS assesses the fitness and propriety, competence and financial soundness of the applicant and relevant persons, including controllers and directors. There is no general SPI eligibility requirement for a majority shareholding by Singapore citizens; however, foreign ownership, complex trusts, nominee arrangements or multi-layer structures must still be fully disclosed on a look-through basis, with explanations of the source of funds and wealth, regulatory history and group support. MAS may also require a major shareholder or parent company to provide a letter of responsibility or undertaking.[3]

The director configurations published by MAS allow for either of two pathways: one executive director who is a Singapore citizen or permanent resident; or one executive director holding an Employment Pass, together with at least one director who is a Singapore citizen or permanent resident. The executive director must participate in day-to-day management and cannot be replaced by a nominal director who merely receives a fee for holding office without performing the role. ACRA’s ordinary company resident director requirements and MAS’s financial licence governance requirements must be met separately.[3][4][10]

In principle, the appointment of a CEO or director after licensing requires prior MAS approval under section 34 of the Payment Services Act, and the regulations require Form 3 to be used; statutory exceptions, such as the immediate reappointment of an approved person upon expiry of their term, should be treated in accordance with the applicable exception. This should not be rewritten as a blanket requirement to “notify MAS within 14 days after appointment”. CVs should describe actual responsibilities, relevant experience, time commitment and conflicts of interest; do not invent a hard threshold of 5 or 10 years’ experience that applies uniformly to all positions.[1][4]

• Prepare an ownership chart, control agreements, identity and address information, and declarations of fitness and propriety.
• Disclose and explain relevant matters such as past litigation, bankruptcy, penalties and licence revocations.
• When directors change, also check the resident director configuration, executive role requirements and work pass compliance.

12｜Compliance personnel and practical AML/CFT implementation

Compliance arrangements should be commensurate with the nature, scale and complexity of the services, and include a responsible officer with authority and accountability who is not driven by sales targets. DPT businesses should in particular appoint a local internal compliance officer in accordance with MAS’s current licensing guidelines; they should not rely solely on an overseas parent company, an outsourced consultant or a nominal MLRO as their entire local control function. Whether a small non-DPT institution may combine roles or receive group support should be assessed in light of the actual workload and independence, and confirmed against the guidance in force at the time, rather than promising that any combined-role structure will be accepted.[3][7][20]

PSN01 is the anti-money laundering and countering the financing of terrorism notice for designated payment services, while PSN02 is the anti-money laundering notice for DPT services; the latter is not a technology risk notice. The webpages for both notices state that the 2025 amendments take effect from 07-01. Implement enterprise-wide risk assessments, customer and beneficial owner verification, politically exposed person and sanctions screening, transaction monitoring, record-keeping, training and independent reviews in accordance with their current scope. Investigations of suspicious transactions and the submission of suspicious transaction reports to STRO must form a closed loop; suspicious indicators should not be disregarded because the customer’s transaction amount is small.[8][9]

• Establish a list of applicable notices for each service module rather than making a blanket claim that all seven services are subject to the same notice.
• Record the compliance officer’s authority, direct reporting line, leave cover and conflict-of-interest arrangements.
• For DPT, separately check value transfer information, on-chain risks and customer asset safeguarding controls.

13｜Genuine Singapore address and on-site service personnel

MAS requires permanent business premises or a registered office address where books and records can be stored securely, and the appointment of at least one person at that location to handle consumer enquiries or complaints. ACRA also requires a genuine registered office address in Singapore that is accessible to the public during normal business days; the office hours published at registration must meet the minimum requirement of three hours per day. The registered office does not have to be at the same location as all business activities, but it cannot be merely a mail-forwarding address where no duties can be performed.[3][11]

Applicants should provide their own complete Singapore address, including the building number, floor, unit number and postal code, and provide the lease, right-of-use or lawful service agreement, arrangements for record-keeping and access, and details of the personnel responsible for being present. Shared or serviced offices should demonstrate that the relevant functions can in fact be performed; the label “virtual office” should not be treated as automatically resulting in approval or prohibition. This article does not invent an address for an application, nor does it use a consultant’s Hong Kong office address in place of the applicant entity’s Singapore place of business.

• Check that the address and the party to the lease are consistent with the ACRA and MAS application information.
• Clearly specify arrangements for receiving complaints, regulatory inspections and retrieving electronic records.
• The substantive arrangements for personnel, systems and business decisions should be consistent with the declared business model.

14 | Application Documents: A Complete Information Pack from Premises to Systems

Company information typically includes the latest ACRA Business Profile, constitution or registration documents for a foreign company and its branch, shareholder and control structure, board authorisations, capital and bank evidence, existing financial statements and explainable financial projections. Personnel information includes the résumés, identification documents, residential addresses, passes and fit-and-proper declarations of directors, the CEO and key personnel such as compliance staff. Specific certification, background checks and document validity periods should be confirmed against the current checklist or MAS requirements; do not present criminal record certificates from every country or a uniform six-month validity period as hard-and-fast rules without exception.[3][5]

Business information should set out, item by item, the services applied for, products, customers, jurisdictions, transaction volumes, fees and refunds, supported by contracts and fund-flow diagrams. Policy documents should cover anti-money laundering, consumer complaints, safeguarding of funds or assets, fraud prevention, risk and outsourcing. Technical materials should explain the architecture, permissions, data, keys and recovery testing. The legal opinion on payment classifications for a new application and the independent external assessment for a new DPT application or an addition of DPT services should be included in the plan in accordance with the current requirements of PS-G01. The external assessment is distinct from the annual regulatory audit after approval.[7][20]

MAS Form 1 must be completed in English. Attachments should be searchable and annotatable, and an English translation or certified English translation should be provided. The page stipulates that attachments exceeding 5MB must be compressed for upload as required. Before submission, check that the lists, percentages, addresses, sources of funds and policy versions are consistent. Generic templates may serve as an index, but cannot replace operating procedures that match the actual systems, transaction corridors and personnel permissions.[5]

• Company and controllers pack: registration, constitution, shareholding chart, capital and background.
• Business and contracts pack: itemised classification, fund flows, terms and due diligence on counterparties.
• Compliance and technology pack: policies, testing, independent assessment, outsourcing and audit arrangements.

15 | Application Process and Current Online Entry Point

First complete the activity classification, SPI/MPI forecast, shareholder and governance assessment, and resource assessment; then establish or confirm the applicant entity, build the team, and put in place the premises and policies. Once preparations are complete, access the online submission through the Form 1 page on the MAS website, and configure Corppass permissions and Singpass login in accordance with the current corporate authorisation arrangements. PDF samples are for preparation only and cannot be used as formal submissions. Older materials contain conflicting references to WINGS, MAS-Tx and MASNET; in practice, follow the links on the current official page and the account authorisation instructions.[5]

After submission and payment of the non-refundable fee, retain the acknowledgement and manage the queue, regulatory queries, interviews and requests for further information. Changes to application information must be notified to MAS by email immediately, in accordance with the Form 1 instructions. If in-principle approval is granted, each condition in the letter must still be met, such as those relating to personnel, capital, banking and system security; in-principle approval is not a formal licence to operate. Only after the licence is effective and all required conditions have been met may the approved services be carried on.

• Stage 1: Define the scope, assess the scale and establish entity governance.
• Stage 2: Put in place the team, policies, funds and genuinely operational systems.
• Stage 3: Submit online through the official channel, respond to the regulator, satisfy conditions and commence operations once authorised.

16 | Practical Timeline Management: Queueing Is Not Review or Approval

As verified on 2026-11-04, the MAS Form 1 page expressly states that application volumes are high, the estimated waiting time for assignment to a reviewing officer exceeds one year, and a more precise estimate cannot be provided. This describes the wait for an application to be reviewed by an officer; it does not mean that approval is guaranteed after more than one year, nor does it constitute a fixed review service commitment. The 3—6-month timeframe, 4-month target or completion within 6—12 months stated in earlier drafts cannot be treated as a definitive timetable for current projects.[5]

The budget should cover the maintenance of key personnel and systems during the waiting period, and allow for the actual review, classification disputes, verification of information and satisfaction of conditions. Bank account opening, external assessments and work passes each have their own processes and cannot be promised to conclude in tandem with the licensing process. The project may be managed through milestones such as completion of materials, submission acknowledgement, responses to requests for further information, closure of in-principle approval conditions and formal commencement of operations. Before authorisation, “application submitted” must not be used as a substitute for authorisation to conduct business externally.

• Make regulatory approval and bank readiness conditions precedent to the effectiveness of commercial contracts.
• Clearly distinguish the consultant’s preparation time, regulatory queue time and substantive review time.
• Do not promise an approval date, success rate or expedited channel.

17 | Customer Funds, DPT Asset Safeguarding and Bank Accounts

An ordinary non-DPT SPI should not be described categorically as bearing exactly the same statutory safeguarding obligations under Section 23 as an MPI. MPIs and licensees specified by the Regulations are subject to the relevant requirements, and Section 13B of the current Regulations expressly designates an SPI providing DPT services as a specified licensee. Accordingly, Section 23 and Regulations 14—16 must be specifically checked in relation to customer fiat funds connected with DPT services. Safeguarding may involve qualifying undertakings, guarantees or trust accounts; an ordinary corporate deposit account merely named a “customer account” may not constitute a legally effective trust or restriction on set-off.[1][4]

DPT tokens are separately subject to Regulations 18B—18H, which apply to licensees providing DPT services and should not be disregarded because an SPI is small. In principle, customer assets received must be deposited into a compliant trust account or returned to the customer no later than the next business day; customer assets must be segregated from proprietary assets, recorded on a per-customer basis, and the prescribed calculations performed daily. Key security, custody, and segregation of transaction decision-making responsibilities must also be implemented. Safeguarding of fiat funds and the trust arrangements for token assets are not interchangeable.[4]

Banks independently review shareholders, sources of funds, customers and corridors, licensing status and transaction risks. Plan separately for capital and operating accounts, settlement accounts and any safeguarding accounts required by law, and prepare the terms, reconciliation procedures and permissions for withdrawing funds. A licence does not guarantee that a bank account will be opened or that any particular bank will accept the applicant. Even where an ordinary non-DPT SPI is not subject to a uniform MPI-style safeguarding requirement, the actual arrangements should be clearly disclosed, and customer funds should not be treated as proprietary capital or used arbitrarily for working capital.

• Analyse customer fiat funds, electronic money liabilities and DPT assets separately.
• Confirm in writing with the bank the actual conditions for trusts, set-off, security and permitted transfers.
• Check safeguarding obligations against the licence conditions and latest rules; do not apply an old guide’s blanket conclusion indiscriminately.

18 | Technology, Security, Outsourcing and Personal Data

The MAS application eligibility page expressly states that applicants proposing to provide online financial services must conduct penetration testing of the proposed services, remediate all high-risk findings, and have an independent party verify the effectiveness of the remediation before licensing. This is not an optional document for enhancing an application. Systems should have access and permission management, audit trails for transactions and accounting, backups, recovery exercises and incident response. For DPT services, coverage should also include key generation, signing, wallet access, withdrawals and asset reconciliation.[3]

Cloud services or third-party technology support do not transfer the board’s or licensee’s regulatory responsibilities. Outsourcing due diligence should examine permissions, data access, regulatory inspections, business continuity and exit migration, and a notification process should be established in accordance with applicable current MAS technology and cyber requirements. Personal data processing must also comply with relevant PDPA obligations. Notification of material incidents must be based on the triggering definitions and timelines in applicable laws and regulations; do not state uniformly that all SPIs must notify all incidents within one hour or 72 hours of discovery.

• Retain evidence of penetration testing, remediation of high-risk findings and independent review.
• Implement multi-factor authentication, privileged account controls and reviews of critical payment operations.
• Check the scope of each technology notice; PSN02 is not a technology risk notice.

19 | Regulatory Audit, Reporting and Ongoing Maintenance

Section 37 of the Payment Services Act requires licensees to appoint an auditor annually at their own expense, not only to audit accounts but also to examine payment transactions and related regulatory compliance. Regulation 20 requires a company to submit to MAS, no later than six months after the end of its financial year, a regulatory audit report signed by an auditor in Form 4. An audit exemption for a small company under the Companies Act does not automatically exempt it from this financial regulatory audit.[1][4]

Ongoing maintenance should cover capital, transaction and balance thresholds, updates to customer due diligence, investigations of unusual activity, complaints, outsourcing, technology testing, staff training and remediation of issues. Periodic reporting should use the MAS notices, forms, frequency and reporting systems currently applicable; do not copy from an old draft a fixed checklist stating that all SPIs must report monthly, quarterly or annually. The board should periodically review deficiencies and data, and reporting records should be traceable to ledgers, bank statements and source system data.

• Confirm the auditor, regulatory audit scope and six-month submission deadline in advance.
• Maintain registers of changes, training, complaints and remediation, with assigned owners.
• Check annual fees, licence conditions and updates to applicable notices to ensure consistency in reporting methodology.

20 | Acquisition of an SPI Company and Change of Control

A licence is attached to the approved entity; it is not an asset that can be purchased independently of the company. Under Sections 27 and 28 of the current Payment Services Act, in the case of a Singapore-incorporated licensee, a person becoming a 20% controller must apply for and obtain MAS approval in advance. The calculation may include share interests or voting rights held by the person and associates, and should not be based only on directly registered shareholdings. The Act’s definitions of 5% and 12% controllers do not mean that Section 28 of the SPI regime invariably requires prior approval for every change at the 5% or 12% level, nor should “20%, 50%” be copied as its general approval thresholds.[1]

Before an acquisition, conduct due diligence on the validity of the licence and permitted services, additional restrictions, regulatory correspondence, capital, shortfalls in customer money and assets, audits, AML/CFT history, litigation, and banking and technology contracts. Confirm whether there are any lapse issues arising from business not having commenced or a prolonged cessation of business. The buyer’s funds and background, post-completion directors and executive personnel, business model and systems migration may all affect the regulatory assessment. The share purchase agreement should make any required MAS approval, directors’ approval and consent from cooperating banks conditions precedent to completion. Do not complete first and then seek to remedy the position through ACRA registration.

Even an investment of less than 20% requires checks on joint holdings, aggregation with related parties, voting arrangements, licence conditions, information notifications and MAS requirements. It must not be structured to circumvent a review of actual control. The legal treatment of an overseas branch or group reorganisation may differ from that of an acquisition of a local company; confirm the position with MAS in advance. After lawful completion, promptly update the company register and controller particulars, and submit applicable change information to the regulator and banks.[1][12]

• You are acquiring a licensed company and its risk history, not a liability-free licence number.
• Include capital replenishment, customer safeguards and retention of key personnel in the completion plan.
• Whether approval for a change in controller is triggered must be confirmed by applying the statutory aggregation calculation, licence conditions and requirements in force at the time.

21 | Additional services, cessation of business and changes to directors’ particulars

An application to add a payment service or upgrade from SPI to MPI must be submitted using Form 2 under section 7 of the Payment Services Act and regulation 9 of the Regulations. Do not launch the service first and apply afterwards. Adding DPT also requires a review of legal opinions, internal compliance and external assessment requirements. The first appointment of a CEO or director should in principle be approved in advance using Form 3. Notifications of other changes to personal particulars, address or operations should be made in accordance with the applicable provisions, notices and licence conditions; do not treat all material matters as subject to the same 14-day post-event notification.[1][4][7]

A licence cannot be retained indefinitely as a shell asset. Regulation 10 sets out circumstances in which a licence may lapse, including failure to commence the permitted business within six months after licensing, cessation of all business for a continuous period of six months, and the absence of relevant transactions or DPT activity, and provides for circumstances in which MAS allows a longer period. Where multiple modules are authorised and some have not commenced for six months, or have ceased for six months without resuming, regulation 9 requires an application to remove the relevant services. Check these rules at acquisition and during ongoing maintenance; payment of a simple annual fee does not prove that the licence has remained valid at all times.[4]

• Conduct a legal, regulatory, banking and systems impact assessment before making changes.
• Schedule checks for commencement within six months, cessation of business and unused modules.
• Keep evidence of actual operations, such as service launches, transactions or custody activity.

22 | ACRA company maintenance and IRAS tax

A local company must meet the resident director and company secretary requirements. The secretary should generally be appointed within six months after successful registration. ACRA states that changes to company particulars, officers and shareholders generally must be updated through Bizfile within 14 days; this is a separate process from MAS approval in advance for appointments or changes in control. A non-listed company generally must file its Annual Return within seven months after the end of its financial year, while specific circumstances such as a foreign branch may have different deadlines. A dormant company that remains in existence cannot therefore cease all company filings.[10][12][13]

IRAS generally requires the filing of an Estimate of Chargeable Income (ECI) within three months after the end of the financial year. A company may be exempt from filing ECI as prescribed if it meets both conditions of annual revenue not exceeding 5000000SGD and zero ECI; an ECI filing exemption is not the same as an exemption from the annual tax return. IRAS’s current 2026 filing-season page states that the corporate income tax filing deadline for YA 2026 is 2026-11-30 and explains the treatment of companies with losses or no operations. The usual corporate income tax rate is 17%, but tax residency, exemptions and concessions each have their own conditions. Holding an SPI does not automatically qualify a company for tax concessions.[14][15]

GST treatment should be determined based on the specific supply, contract and customer circumstances. Not all seven categories of payment services are exempt, nor are all cross-border charges necessarily zero-rated. IRAS explains that only financial services falling within the Fourth Schedule to the GST Act qualify for the relevant exemption; services such as arranging or broking may fall outside the scope of the exemption. Zero-rating also requires compliance with the conditions for international services. Technical services, merchant acquisition charges, token services and overseas purchases should be analysed individually, with input tax apportionment, registration obligations and any applicable reverse charge addressed.[16]

• Maintain separate filing calendars for MAS regulatory matters, ACRA company matters and IRAS tax matters.
• Do not infer that no transactions or losses remove all filing obligations.
• Related-party management, technology and funding arrangements should be supported by contracts and a basis for fees, and receive the appropriate tax treatment.

23 | Digital banks, DTSP, fund management and stablecoin boundaries

An SPI is not a digital banking qualification. The historical application window for digital banks closed on 2019-12-31. In this verification, no official material was found in which MAS announced a new public application window. The digital banking page provides references for past applications; do not promote historical qualifications and application steps as a new application process that is currently open at any time. If the substance of a product involves accepting deposits or conducting banking business, assess the Banking Act separately. Anyone intending to apply for a digital bank licence should confirm the current application window against an announcement from MAS.[17]

The DTSP regime under the Financial Services and Markets Act for providing relevant digital token services solely to overseas customers took effect on 2025-06-30. MAS has made clear that the licensing threshold is high and that licences will generally not be granted; unlicensed persons must cease regulated activities. This is not an offshore shortcut for SPI DPT business. Approved DPT services provided to Singapore customers remain subject to their applicable regulatory framework; the two regimes must not be conflated. Fund management is also outside the scope of SPI authorisation. The RFMC regime and related definitions were repealed on 2024-08-01. The current position requires an assessment of LFMC, VCFM or a statutory exemption, rather than an application for a new RFMC registration.[18][19]

Stablecoins require a separate product and legal analysis. On 2026-09-01, MAS issued a legislative amendments consultation on implementing the stablecoin framework, with comments due by 10-16; completion of the consultation does not mean that all proposed requirements are in force. This document does not treat the 2023 framework, the 2026 consultation or proposed capital figures as current uniform additional requirements for an SPI, nor does it describe a token issued by an ordinary SPI as automatically being a “MAS-regulated stablecoin”. Check the laws in force, authorisation and conditions for use of labels separately for issuance, trading and custody.[21]

• An overseas-customer model also requires checks on the scope of DTSP and its strict licensing policy.
• Fund management, bank deposits and security tokens are not covered by a payment licence.
• The status of any new digital bank application window and subsequent stablecoin legislation must be confirmed against current MAS announcements.

24 | Attribution and use notes

This document was prepared by 仁港永胜（香港）有限公司, with professional explanations by business manager 唐上永（唐生）. Its subject matter and information-pack structure are based on the user’s own SPI guide, reorganised using materials verifiable as at 2026-11-04, with repetitive promotional content, irrelevant jurisdictional descriptions and inconsistent historical figures removed. Legal and regulatory facts are drawn from the official sources below. External lawyers’ articles are used only as supplementary references with clear attribution; their authorship or professional experience is not represented as that of this company.[22]

This guide is general business-preparation material. It does not constitute MAS approval, a commitment to open a bank account, or specific legal or tax advice. The full text of PS-G01, certain MAS download files and technical notices were not fully obtained in this fetch. Details concerning the latest appendices, case-specific notices, the precise scope of external assessments and personnel holding concurrent roles should be confirmed by the applicant and relevant professionals against MAS requirements in force before formal submission. The main text has verified the core capital, service definitions, upgrades, change-of-control and audit rules against accessible MAS application pages and current legislation on SSO.

• Verification reference date: 2026-11-04.
• Retain the original official URLs and check the latest versions and effective dates before submission and commercial decisions.
• Any additional case-specific conditions, licence restrictions and written MAS requirements take precedence.

Frequently Asked Questions

Sources and usage notes

1. [1] SSO｜Payment Services Act 2019 current legislation: scale, authorisation, controllers, directors and audit(opens in a new window)https://sso.agc.gov.sg/Act/PSA2019?WholeDoc=1
2. [2] SSO｜First Schedule to the Payment Services Act: definitions and exceptions for the seven classes of payment services(opens in a new window)https://sso.agc.gov.sg/Act/PSA2019?ProvIds=Sc1-
3. [3] MAS｜Licensing for Payment Service Providers: SPI and MPI eligibility and assessment(opens in a new window)https://www.mas.gov.sg/regulation/payments/licensing-for-payment-service-providers
4. [4] SSO｜Current RG2 under the Payment Services Regulations 2019: capital, upgrades, safeguarding of assets and Form 4 deadline(opens in a new window)https://sso.agc.gov.sg/SL/PSA2019-RG2?WholeDoc=1
5. [5] MAS｜Online Form 1 application: current queue exceeding one year, language of attachments and authorisation requirements(opens in a new window)https://www.mas.gov.sg/regulation/forms-and-templates/form-1---application-for-a-payment-service-provider-licence
6. [6] MAS｜2024-04-02 announcement on expanded payment services scope and DPT safeguards(opens in a new window)https://www.mas.gov.sg/news/media-releases/2024/mas-expands-scope-of-regulated-payment-services
7. [7] MAS｜Entry point for PS-G01 Guidelines on Licensing for Payment Service Providers; full-text attachments must be rechecked before submission(opens in a new window)https://www.mas.gov.sg/regulation/guidelines/ps-g01-guidelines-on-licensing-for-payment-service-providers
8. [8] MAS｜PSN01 Anti-Money Laundering Notice for Designated Payment Services and amendments effective in 2025(opens in a new window)https://www.mas.gov.sg/regulation/notices/psn01-aml-cft-notice---specified-payment-services
9. [9] MAS｜PSN02 Anti-Money Laundering Notice for Digital Payment Token Services and amendments effective in 2025(opens in a new window)https://www.mas.gov.sg/regulation/notices/psn02-aml-cft-notice---digital-payment-token-service
10. [10] ACRA｜Choosing company directors and other key officers: directors and company secretary(opens in a new window)https://www.acra.gov.sg/register/business/registering-different-business-structures/local-company/appointing-company-directors-other-key-officers/
11. [11] ACRA｜Registering a local company via Bizfile: genuine registered office address and opening hours(opens in a new window)https://www.acra.gov.sg/how-to-guides/setting-up-a-local-company
12. [12] ACRA｜Updating company information, officers and shareholders: 14-day change notification(opens in a new window)https://www.acra.gov.sg/manage/companies/legal-requirements-common-offences/maintaining-local-companys-information-registers/updating-company-information-officers-shareholders/
13. [13] ACRA｜Deadline and requirements for annual returns: annual filing deadlines(opens in a new window)https://www.acra.gov.sg/manage/companies/legal-requirements-common-offences/filing-annual-returns-companies/deadline-requirements/
14. [14] IRAS｜Estimated Chargeable Income Filing: three-month deadline and exemption conditions(opens in a new window)https://www.iras.gov.sg/taxes/corporate-income-tax/estimated-chargeable-income-%28eci%29-filing
15. [15] IRAS｜Corporate Income Tax Filing Season 2026: deadline of 2026-11-30(opens in a new window)https://www.iras.gov.sg/taxes/corporate-income-tax/basics-of-corporate-income-tax/corporate-income-tax-filing-season-2026
16. [16] IRAS｜Finance: GST exemptions for financial services, international services and input tax(opens in a new window)https://www.iras.gov.sg/taxes/goods-services-tax-%28gst%29/specific-business-sectors/finance
17. [17] MAS｜Digital Bank Licence and announcement that the historical application window has closed; no new public window confirmed(opens in a new window)https://www.mas.gov.sg/regulation/banking/digital-bank-licence
18. [18] MAS｜2025-06-06 DTSP policy clarification: licences will generally not be granted(opens in a new window)https://www.mas.gov.sg/news/media-releases/2025/mas-clarifies-regulatory-regime-for-digital-token-service-providers
19. [19] SSO｜S637/2024: deletion of the RFMC definition and former registration regime on 2024-08-01(opens in a new window)https://sso.agc.gov.sg/SL-Supp/S637-2024/Published/20240731?DocDate=20240731
20. [20] Morgan Lewis｜Commentary on the 2024 amendments to the payment services licensing guidelines; external counsel reference, not original material of this company or a substitute for current attachments(opens in a new window)https://www.morganlewis.com/pubs/2024/07/singapore-revises-its-guidelines-on-licensing-for-payment-service-providers
21. [21] MAS｜2026-09-01 announcement of consultation on legislative amendments to the stablecoin framework(opens in a new window)https://www.mas.gov.sg/news/media-releases/2026/mas-consults-on-legislative-amendments-to-implement-stablecoin-regulatory-framework
22. [22] User-owned materials｜仁港永胜 original SPI guide, which contained contradictory outdated rules; reorganised and verified for this revision(opens in a new window)https://www.jrp-hk.com/html/sg_spi_guide_final.html
23. MAS｜2020 announcement confirming that applications for digital bank licences closed on 2019-12-31(opens in a new window)https://www.mas.gov.sg/news/media-releases/2020/mas-receives-21-applications-for-digital-bank-licences
24. MAS｜Entry point for PS-G03 Guidelines on Consumer Protection Measures by Digital Payment Token Service Providers(opens in a new window)https://www.mas.gov.sg/regulation/guidelines/ps-g03-guidelines-on-consumer-protection-measures-by-dpt-service-providers
25. MAS｜Current fund management guidelines: LFMC and VCFM scope(opens in a new window)https://www.mas.gov.sg/regulation/guidelines/guideline-sfa-04-g05-on-licensing-registration-and-conduct-of-business-for-fund-managers