Remote VASP serving residents in Singapore
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Singapore with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Full MAS AML/CFT compliance under Notice PSN01 and PSN02 (effective July 2025 amendments)
- Travel Rule compliance for DPT transfers ≥ SGD 1,500 — originator and beneficiary PII must be obtained and transmitted immediately and securely
- Customer due diligence (CDD) and ongoing transaction monitoring
- Suspicious transaction reporting to MAS/STRO
- Risk-based AML/CTF policies and procedures covering ML/TF risk assessment
- Record-keeping requirements for DPT transactions under PSA
Key Restrictions
- Must be incorporated as a Singapore entity to apply for an MPI or SPI license — no remote, foreign-entity licensing pathway exists
- Cannot market or promote DPT services to the general public of Singapore (MAS prohibition since Jan 2022)
- No incentive programs, advertising in public spaces, or ATMs in public areas
- Must meet SGD 250,000 base capital (MPI) or SGD 100,000 (SPI with transaction limits SGD 3M single / SGD 6M aggregate)
- Customer asset segregation in statutory trust required (since 2024)
- Security deposits of SGD 100K–200K required
- Technology Risk Management Guidelines (2021) apply — cybersecurity and operational resilience obligations
Key Risks
- MAS has demonstrated strong enforcement against unlicensed operators — Binance.com was issued a warning in 2021 and ordered to cease providing DPT services to SG residents
- Very low MPI license approval rate (~12-18% of 170+ applications resulted in full MPI licenses), creating uncertainty for applicants
- Serving Singapore residents without a license carries high risk of MAS enforcement actions including fines, public reprimands, and potential criminal prosecution
- Cross-border remote operation without local entity creates AML/CFT compliance gaps — MAS expects on-the-ground supervision of obligations
- Retail speculation discouragement policy creates commercial constraints on customer acquisition and growth
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
MAS — All DPT service regulation, PSA licensing, AML/CFT, stablecoin framework, TRM guidelines
Payment Services Act 2019 (2019) — DPT service licensing — MPI/SPI licenses
MAS AML/CFT Notices (PSN01, PSN02) — AML/CFT requirements for DPT service providers; amendments effective July 2025
MAS Technology Risk Management Guidelines (2021) — Cybersecurity, data protection, operational resilience
VASP: Major Payment Institution (MPI) license for DPT services. SGD 250,000 base capital (~$185K USD). 170+ applications received, only ~20-30 full MPI licenses granted. SPI option: SGD 100,000 base capital with transaction limits (SGD 3M single/SGD 6M aggregate). Must have Singapore entity, resident director, local compliance officer, physical office.
CUSTODY: Included under DPT MPI license. Customer asset segregation mandatory (statutory trust since 2024). Security deposits (SGD 100K-200K) required.
EXCHANGE: MPI license. MAS explicitly discourages retail crypto speculation — marketing to general public prohibited (Jan 2022), no incentive programs, no ATMs in public areas. Stablecoin issuers must maintain 100%+ reserves in cash/equivalents at SG-licensed institutions.
Travel Rule adopted — threshold: SGD 1,500
Requirements: DPT service providers are required to obtain and transmit certain originator and beneficiary information for DPT transfers.
Thresholds: This applies to DPT transfers involving a value of S$1,500 or more (or its equivalent in other currencies/DPTs).
Information to be Transmitted:
MAS Notice PSN02 on Prevention of Money Laundering and Countering the Financing of Terrorism – DPT Service Providers (Paragraphs 6.4, 6.5, 6.6)
Effective Date: January 28, 2020.
Covered VASPs: All licensed DPT service providers under the PSA, such as centralized crypto exchanges like Crypto.com and Gemini, which must handle incoming/outgoing transfers compliantly. Non-custodial wallets may require verification (e.g., Satoshi Test) for withdrawals exceeding S$20,000 monthly from custodied wallets.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a non-resident VASP cannot serve Singapore residents from abroad without a local Singapore entity and an MPI or SPI license under the Payment Services Act 2019, with full AML/CFT and Travel Rule obligations, and faces significant enforcement risk from MAS for unlicensed cross-border operations.
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?