▸ RegulatoryMAS PSA amendments are now fully in force. New safeguarding rules, DPT service scrutiny, and revised thresholds for Standard vs Major Payment Institutions change the compliance calculus for fintechs.
The Monetary Authority of Singapore's Payment Services Act (PSA), originally enacted as Act 2 of 2019 and materially amended by the Payment Services (Amendment) Act 2021 (PSA 2021), is now operating at full capacity. The transition periods that gave existing licensees time to upgrade their regimes have expired. MAS has been clear in its supervisory communications: the post-amendment framework is the baseline, not an aspiration.
This is INNOVA's Q2 2026 briefing for clients operating or seeking to operate payment businesses under MAS oversight.
The PSA establishes two main licence classes for payment service providers (excluding the Money-Changing Licence, which covers FX only):
Standard Payment Institution (SPI):
Major Payment Institution (MPI):
The distinction matters significantly for regulatory burden. MPIs face substantially more demanding requirements: stricter capital requirements (base capital of S$250,000 vs S$100,000 for SPI), mandatory safeguarding of customer funds, enhanced AML/CFT program obligations, and more frequent MAS supervisory engagement.
A common planning error is to obtain an SPI licence based on projected modest volumes, then exceed the thresholds within 12 months of launch without proactively notifying MAS and applying for MPI status. This is a compliance breach. MAS expects licensees to monitor their own thresholds and self-report when they are breached.
The PSA 2021 amendments introduced mandatory safeguarding obligations for payment institutions holding customer funds (e-money). The rules, operationalised through MAS Notice PSN01 and PSN02, require:
For newer PSA applicants and SPIs scaling toward MPI thresholds, the practical challenge is that not all Singapore banks are enthusiastic about opening dedicated safeguarding accounts for payment startups. DBS and OCBC are the most active, but both require a well-documented operations manual demonstrating how funds will be isolated and reconciled. Setting up the safeguarding structure before MAS asks for it — not after — is the correct approach.
The PSA's digital payment token (DPT) service category covers businesses buying, selling, or facilitating the exchange of cryptocurrencies and other digital tokens. MAS has been progressively tightening this space since 2022.
Key developments as of Q2 2026:
Consumer protection restrictions: MAS Guidelines on Consumer Protection for DPT Service Providers (MAS-GCDPT) restrict DPT licensees from offering retail customers credit or leverage for crypto purchases, providing incentives to trade, and accepting credit card payments for crypto. These restrictions are in force and have prompted several licensees to withdraw from the retail market.
Stablecoin regulatory framework: MAS issued MAS Notice MAS-STBL (Stablecoin) in 2023 and operationalised it through 2024. Single-currency stablecoins (SCS) denominated in Singapore dollars or G10 currencies, pegged 1:1, are now a licensed activity under the DPT framework with additional reserve and disclosure requirements. Issuers must maintain reserve assets in value at least equal to outstanding SCS in circulation, with monthly reserve reports to MAS.
New DPT licence applications: MAS had 17 active DPT licensees as of Q1 2026. New applications are reviewed carefully, with MAS placing particular weight on the applicant's AML/CFT track record, the qualifications of the MLRO and board, and the technical security of the custody infrastructure.
MAS Notice SFA04-N02 (updated 2024) and the corresponding PSA AML notices have aligned Singapore's financial crime reporting obligations more closely with FATF Recommendation 16 (the Travel Rule for virtual assets).
For DPT service providers, the Travel Rule now applies to all digital token transfers of S$1,500 or more. Originating institutions must collect, verify, and transmit originator and beneficiary information with the transfer. The implementation technology — SWIFT's gpi, blockchain-based travel rule solutions like TRUST and Notabene — is now a compliance infrastructure requirement, not optional.
For non-DPT payment institutions, the PSA AML notice requires:
MAS processing times for PSA licence applications have stabilised at approximately:
These timelines assume a complete application at first submission. Incomplete applications — particularly those lacking a detailed AML/CFT policy manual, an adequate business plan with volume projections, or a named MLRO with relevant experience — are returned for supplementation, which can add 3–6 months to the clock.
The PSA requires a physical presence in Singapore: a registered office, a named resident director, and a compliance function that is genuinely based in Singapore rather than managed remotely. MAS conducts supervisory visits and expects to find real operations, not a letterbox.
INNOVA's Singapore team advises on PSA licence applications, MAS correspondence, AML/CFT program development, and ongoing PSA compliance. We have submitted several PSA applications in the past 24 months and maintain relationships with Singapore's major compliance-friendly banks for safeguarding account setup.
For businesses in the pre-application phase, the most valuable investment is a regulatory gap analysis before committing to a Singapore structure — confirming that your business model fits one of the PSA's defined payment service categories and that your current AML infrastructure meets MAS's expectations.
See our Singapore licensing and Singapore banking pages for related context, and our Singapore Pte. Ltd. guide for entity formation.
This briefing reflects MAS guidance and INNOVA's advisory experience through Q2 2026. MAS frequently updates notices and circulars; verify current requirements at mas.gov.sg.
This material is for general information only and does not constitute legal or tax advice. Accurate as of the publication date.
