Deep diveGeographic Expansion
EU fintech entering Singapore: the MAS payment services licence explained
An EU payment or e-money authorisation does not let you serve customers in Singapore. There, payment activities are regulated by the Monetary Authority of Singapore (MAS) under the Payment Services Act, which defines seven payment services and three licence classes. Which licence you need depends on the services you provide and their scale, and the licence brings technology risk, outsourcing and anti-money-laundering expectations that shape your entity and architecture.
On this page
- Why an EU authorisation does not carry over
- Terms used in Singapore payment regulation
- The three Payment Services Act licence classes compared
- From product flow to licence class
- Technology risk and outsourcing expectations that shape the build
- Anti-money-laundering obligations to design for
- Sequencing the licence with entity, hiring and launch
- Questions and answers
- Sources
Terms used in Singapore payment regulation
- Payment service
- One of seven activities regulated under the Payment Services Act: account issuance, domestic money transfer, cross-border money transfer, merchant acquisition, e-money issuance, digital payment token service and money-changing2.
- Digital payment token service
- Dealing in or facilitating the exchange of digital payment tokens; MAS lists custodian wallet provision and transmission of tokens among the covered activities2.
- Standard payment institution
- A licensee that may provide any combination of payment services but must stay below MAS's specified transaction and e-money thresholds3.
- Major payment institution
- A licensee permitted to exceed those thresholds, subject to closer regulation, including a security deposit with MAS before starting business3.
- Money-changing licence
- A licence for firms that only carry on money-changing services3.
- Digital token service provider
- A separate class under Part 9 of the Financial Services and Markets Act for Singapore-linked firms that provide digital token services only outside Singapore; MAS has said it will generally not grant these licences7.
The three Payment Services Act licence classes compared
| Point of comparison | Money-changing licence | Standard payment institution | Major payment institution |
|---|---|---|---|
| Services permitted | Money-changing only | Any combination of payment services | Any combination of payment services |
| Scale | Not threshold-based | Below MAS's specified thresholds | Above the thresholds permitted |
| Entity form | Set out in MAS licensing guidance | Singapore company or Singapore branch of a foreign company | Same as a standard payment institution |
| Financial requirements | Per MAS guidance | Minimum base capital | Higher base capital plus a security deposit |
| Fit for an EU fintech when | Rarely relevant | Launching with modest volumes and a clear path to grow | Expecting volumes above the thresholds from the start |
Summarised from MAS's licensing pages; thresholds and capital amounts are set out there and change by notice. Moving between licence classes requires MAS approval, so plan the variation before you approach the thresholds3.
From product flow to licence class
- Describe each money flow
Who pays whom, through whose accounts, in which currencies and with which tokens.
- Map to payment services
Match each flow to one or more of the seven regulated services, with counsel.
- Project volumes
Estimate transaction and e-money volumes against MAS's thresholds.
- Choose licence class
Standard or major payment institution, or an exemption counsel can support.
- Set up the local entity
A Singapore company or branch, with directors who meet MAS's requirements.
- Prepare the application
Policies, technology risk evidence, AML/CFT framework and a pre-licence penetration test.
Technology risk and outsourcing expectations that shape the build
MAS's Guidelines on Risk Management Practices for technology risk set principles for board oversight, secure development, IT resilience, access control, cyber operations and third-party arrangements, and the same MAS page points to a separate notice on technology risk management4. For applicants offering online financial services, MAS's licensing page also asks for a penetration test, with high-risk findings fixed and independently validated before the licence is granted3.
Outsourcing matters for any fintech that runs on cloud providers, shared group services or offshore support. MAS's Guidelines on Outsourcing for financial institutions other than banks apply to major and standard payment institutions5. Group engineering in Europe, a cloud region outside Singapore or a third-party KYC vendor may each be an outsourcing arrangement to assess, document and govern from Singapore.
Anti-money-laundering obligations to design for
MAS sets AML/CFT duties for payment service providers through notices. Notice PSN01 covers specified payment services6, and Notice PSN02 covers digital payment token services, including risk assessment, customer due diligence, wire transfers, record keeping and suspicious transaction reporting8.
Sequencing the licence with entity, hiring and launch
Scope services and volumes
Map your flows to the regulated services and project volumes, and record each obligation in a regulatory register.
Decide entity and directors
Choose between a Singapore company and a branch with counsel, and plan directors to meet MAS's requirement for an executive director who is a Singapore citizen or permanent resident, or an Employment Pass holder alongside such a director3.
Build the evidence pack
Adapt policies, risk assessments, technology risk controls, outsourcing register and AML/CFT framework to Singapore, and commission the penetration test.
Hire local accountable people
Recruit the people MAS will expect to see running compliance and operations in Singapore, ideally before the application is filed.
Launch within the licence
Go live only with the services and volumes the licence covers, and monitor volumes against thresholds so a variation is filed in time.
Questions and answers
Can we serve Singapore customers from the EU without a Singapore licence?
Do not assume so. The Payment Services Act regulates payment services provided in Singapore, and whether serving Singapore customers from abroad falls within it depends on how and where the service is provided. Ask Singapore counsel to analyse your specific model before marketing to Singapore residents, and record the answer and its reasoning in your regulatory register.
Does the digital token service provider regime apply to an EU crypto firm serving Singapore customers?
Generally no. According to commentary on the regime, it targets Singapore-linked firms that provide digital token services only outside Singapore, and firms whose services are already licensed under the Payment Services Act and related laws are excluded. A firm serving customers in Singapore looks first at the Payment Services Act, typically for a digital payment token service.
Should we apply for a standard or major payment institution licence?
Start from projected volumes over the period your business plan covers. If you expect to exceed MAS's specified thresholds soon after launch, applying for the major licence avoids an early variation; if volumes will build slowly, the standard licence may suit, with a variation planned before the thresholds are reached. Counsel can advise on how MAS views each route.
Can our EU group run technology and compliance for the Singapore entity?
Often yes, under arrangements MAS expects to be assessed and governed. Group services are outsourcing for the Singapore licensee, so they need agreements, oversight from Singapore and access for MAS. Accountability stays with the Singapore entity, and MAS will want to see people locally who understand and control what the group does for them.
Sources
- Directive (EU) 2015/2366 on payment services in the internal market — EUR-Lex · checked 10 October 2026
- Types of Payment Services — Monetary Authority of Singapore · checked 10 October 2026
- Licensing for Payment Service Providers — Monetary Authority of Singapore · checked 10 October 2026
- Guidelines on Risk Management Practices – Technology Risk — Monetary Authority of Singapore · checked 10 October 2026
- Guidelines on Outsourcing (Financial Institutions other than Banks) — Monetary Authority of Singapore · checked 10 October 2026
- MAS Notice PSN01: Prevention of Money Laundering and Countering the Financing of Terrorism – Specified Payment Services — Monetary Authority of Singapore · checked 10 October 2026
- Regulatory framework for digital token service providers under Financial Services and Markets Act 2022 in operation on 30 June 2025 — Allen & Gledhill · checked 10 October 2026
- Notice PSN02: Prevention of Money Laundering and Countering the Financing of Terrorism – Digital Payment Token Service — Monetary Authority of Singapore · checked 10 October 2026