Self-custodial wallet / non-custodial software in Singapore
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is permitted in Singapore with no licensing burden.
Verdict Details
- Permitted
- yes
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
Key Restrictions
- No custody, control, or access to user private keys or funds — the publisher never holds, transfers, or facilitates DPT transactions; if any of these activities are performed, PSA licensing would be triggered
- Must not engage in any regulated activity under the Payment Services Act (dealing in DPTs, facilitating exchange, receiving/sending DPTs, DPT issuance)
- Must not issue tokens that qualify as 'capital markets products' under the Securities and Futures Act (security tokens)
- Standard software EULA and disclaimers should clarify the non-custodial nature; no specific MAS disclosure framework applies to pure software publishers
Key Risks
- Regulatory ambiguity risk: if the software includes any built-in swap/aggregation features that route or facilitate transactions, MAS may consider the publisher a 'provider of a facility for DPT exchange' under the PSA
- Reputational risk: MAS has aggressively warned against marketing crypto to the general public — even non-custodial wallet publishers should avoid Singapore-targeted retail marketing
- Technology Risk Management (TRM) Guidelines may still apply as a general cyber-hygiene expectation even for non-regulated entities; failure could be cited by MAS in enforcement actions
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
MAS — All DPT service regulation, PSA licensing, AML/CFT, stablecoin framework, TRM guidelines
Payment Services Act 2019 (2019) — DPT service licensing — MPI/SPI licenses
Securities and Futures Act (2001) — Security tokens, CMS licensing
Monetary Authority of Singapore (MAS): This is the central bank and integrated financial regulator of Singapore. MAS is the primary body responsible for regulating all digital asset and crypto-related activities, issuing licenses, and enforcing compliance with financial regulations.
Dealing in DPTs (e.g., buying and selling on behalf of customers).
Facilitating the exchange of DPTs (e.g., operating a DPT exchange).
Receiving or sending DPTs (e.g., cross-border DPT transfers).
DPT issuance (e.g., initial coin offerings where the token functions as a payment token).
This act applies to digital tokens that qualify as "capital markets products" (i.e., security tokens). If a digital token represents an equity, a debt instrument, a collective investment scheme, or a derivative, it falls under the SFA.
Regulated Activities under SFA include:
Operating a market for security tokens (e.g., an exchange).
Fund management involving security tokens.
Providing custodial services for security tokens.
VASP: Major Payment Institution (MPI) license for DPT services. SGD 250,000 base capital (~$185K USD). 170+ applications received, only ~20-30 full MPI licenses granted. SPI option: SGD 100,000 base capital with transaction limits (SGD 3M single/SGD 6M aggregate). Must have Singapore entity, resident director, local compliance officer, physical office.
EXCHANGE: MPI license. MAS explicitly discourages retail crypto speculation — marketing to general public prohibited (Jan 2022), no incentive programs, no ATMs in public areas. Stablecoin issuers must maintain 100%+ reserves in cash/equivalents at SG-licensed institutions.
Evidence fact sg.licensing.mas-technology-risk-management-guidelines not found (may have been renamed).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Yes — pure non-custodial wallet software publishing does not trigger VASP/MSB classification in Singapore because the publisher never holds, controls, or facilitates DPT transactions; no AML obligations attach, no MAS license is required, and no local entity is strictly necessary, provided no regulated activities (custody, exchange facilitation, DPT transfer) are performed.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?