AML/KYC Requirements for a Singapore Crypto Company
Singapore is a leading global financial hub with a clear regulatory framework for digital payment tokens. Under the Payment Services Act (PSA), any crypto company providing digital payment token services must obtain a licence from the Monetary Authority of Singapore (MAS) and comply with stringent AML/KYC requirements. These rules are designed to combat money laundering and terrorist financing, and they apply to all entities operating in or from Singapore.
For crypto founders, understanding the AML/KYC requirements for a Singapore crypto company is essential before applying for a licence. The MAS requires strong customer due diligence (CDD), ongoing transaction monitoring, and regular reporting. Failure to comply can result in hefty fines or licence revocation. This guide covers everything you need to know, from the regulatory framework to step-by-step implementation, and compares Singapore with other jurisdictions like Panama and Lithuania.
Consulting24 has helped over 500 crypto firms obtain licences worldwide. While we deliver directly in Panama, Estonia, and Lithuania, for Singapore we advise and coordinate with local partners. If you are considering Singapore, we can help you evaluate whether it is the right fit or recommend alternative jurisdictions with lighter AML/KYC burdens.
What Are the AML/KYC Requirements for a Singapore Crypto Company?
The AML/KYC requirements for a Singapore crypto company are set out in the Payment Services Act (PSA) and the MAS Notice PSN02 on Prevention of Money Laundering and Countering the Financing of Terrorism. These require crypto companies to:
- Conduct customer due diligence (CDD) for all customers, including verifying identity and beneficial ownership.
- Perform enhanced due diligence (EDD) for high-risk customers, such as politically exposed persons (PEPs) or those from high-risk jurisdictions.
- Monitor transactions for suspicious activity and report suspicious transactions to the Suspicious Transaction Reporting Office (STRO).
- Maintain records of all transactions and CDD information for at least five years.
- Appoint a compliance officer and a money laundering reporting officer (MLRO).
- Implement an internal AML/CFT policy and training program for all staff.
These requirements apply to all types of crypto services, including exchanges, wallet providers, and OTC desks. The MAS conducts regular inspections and expects companies to have a risk-based approach to AML/KYC. For example, a crypto exchange handling high volumes must have automated transaction monitoring systems that flag transactions above SGD 10,000 or those involving high-risk jurisdictions. Failure to implement such systems can lead to enforcement actions, as seen in several cases where MAS imposed fines for non-compliance.
Who Needs to Comply with AML/KYC Requirements in Singapore?
Any entity providing digital payment token (DPT) services in Singapore must comply. This includes:
- Cryptocurrency exchanges (centralised and decentralised if they have a Singapore presence).
- Digital payment token wallet providers.
- OTC desks and peer-to-peer platforms.
- Any business that facilitates the exchange of DPTs for fiat or other DPTs.
Even if you are based overseas but offer services to Singapore residents, you may be subject to MAS regulation. The MAS has extraterritorial reach and can require foreign entities to apply for a licence if they have a Singapore nexus. For example, a foreign exchange that actively markets to Singapore users must register. If you are a startup, you should consider whether Singapore's rigorous AML/KYC regime is suitable for your business model. For a lighter regulatory environment, many founders choose Panama or Lithuania. Panama, for instance, has no AML/KYC obligations for crypto companies under its current framework, making it a cost-effective alternative.
Licence Type and Regulator for Singapore Crypto Companies
The regulator is the Monetary Authority of Singapore (MAS). Under the PSA, there are two main licence types for crypto companies:
- Standard Payment Institution (SPI) licence: For companies with monthly transaction flows below SGD 3 million (or SGD 6 million for e-money) or that store less than SGD 5 million in payment instruments.
- Major Payment Institution (MPI) licence: For companies exceeding these thresholds. Most crypto exchanges apply for an MPI licence because they handle large volumes.
Both licences require full compliance with AML/KYC requirements. The MAS publishes a list of licensed entities on its website. As of 2026, the MAS has granted only a limited number of licences, and the process is known to be rigorous and lengthy. For example, as of early 2026, only about 20 MPI licences have been issued to crypto firms, with many applications still pending. This contrasts with jurisdictions like Lithuania, where over 500 crypto licences have been issued under the MiCA framework.
Cost and Timeline for Obtaining a Singapore Crypto Licence
The cost of obtaining a crypto licence in Singapore can be significant. Below is a summary of typical fees and timeline:
| Item | Amount (SGD) |
|---|---|
| Application fee (non-refundable) | 10,000 |
| Annual licence fee (varies by class) | 5,000 - 50,000 |
| Compliance setup (lawyers, consultants) | 50,000 - 150,000 |
| Ongoing compliance costs (annual) | 30,000 - 100,000 |
| Timeline for approval | 6 - 12 months (sometimes longer) |
These figures are estimates. The actual cost depends on the complexity of your business and the quality of your AML/KYC framework. For a fixed-price alternative, consider Panama at EUR 6,000 flat, with no ongoing compliance burden. Consulting24 can advise on both routes. The timeline in Singapore can extend beyond 12 months if MAS requests additional information or if the application is complex. In contrast, Panama can be set up in 2-4 weeks.
Capital Requirement for Singapore Crypto Companies
The capital requirement for a Singapore crypto company depends on the licence type. For an MPI licence, the minimum base capital is SGD 250,000. For an SPI licence, it is SGD 100,000. Additionally, you must maintain a security deposit (e.g., a bank guarantee or cash) of up to SGD 200,000, depending on your transaction volume. These funds must be kept in a Singapore bank account. The MAS does not allow the use of crypto assets to meet capital requirements. This is a significant barrier for startups compared to jurisdictions like Panama, which has no minimum capital requirement, or Lithuania, which requires EUR 125,000 for a CASP licence. For early-stage founders, Panama's zero capital requirement is a major advantage.
Tax Treatment for Crypto Companies in Singapore
Singapore has a territorial tax system. Companies are taxed on income derived from Singapore or remitted to Singapore. The corporate tax rate is a flat 17%. There is no capital gains tax, and cryptocurrency transactions are generally treated as ordinary income if they are part of a business. However, the Inland Revenue Authority of Singapore (IRAS) has issued guidelines that treat cryptocurrency as an intangible asset. For companies holding crypto as investment, gains may be tax-exempt under certain conditions. Goods and Services Tax (GST) applies to the supply of digital payment tokens at 9% (as of 2024, but check current rate). In contrast, Panama has no corporate tax on foreign-source income and no VAT on crypto services, making it more tax-efficient for many founders. For example, a crypto exchange based in Panama would pay 0% tax on profits from non-Panamanian clients, whereas a Singapore exchange would pay 17% on global income.
Allowed Activities Under a Singapore Crypto Licence
A Singapore crypto licence (MPI or SPI) allows the following activities:
- Buying and selling digital payment tokens (DPTs) for fiat or other DPTs.
- Operating a digital payment token exchange.
- Providing custodial wallet services for DPTs.
- Facilitating the transfer of DPTs.
- Cross-border money transfer services involving DPTs.
However, the MAS does not allow the issuance of stablecoins or other digital tokens that are not DPTs under the PSA. If you plan to issue a token, you may need a separate securities licence under the Securities and Futures Act. This limitation makes Singapore less flexible than some other jurisdictions. For example, in Lithuania under MiCA, you can issue stablecoins and utility tokens under the same CASP licence. Panama offers even more flexibility with no licensing for token issuance.
Step-by-Step Process to Meet AML/KYC Requirements in Singapore
To comply with AML/KYC requirements for a Singapore crypto company, follow these steps:
- Engage a compliance consultant (Consulting24 can advise) to draft your AML/CFT policy.
- Appoint a compliance officer and MLRO who are resident in Singapore.
- Implement CDD procedures including identity verification using government-issued IDs and biometric checks.
- Set up transaction monitoring systems for suspicious activity detection, such as automated alerts for transactions above SGD 10,000.
- Establish record-keeping for at least five years, including all transaction data and CDD records.
- Register with MAS and submit your application with all supporting documents, including your AML policy and business plan.
- Undergo MAS review and respond to queries within the stipulated timeframe.
- Undergo an onsite inspection by MAS before licence issuance.
The entire process can take 6-12 months. For a faster route, consider Estonia or Panama. Estonia offers a streamlined process under MiCA, with typical timelines of 3-6 months.
Banking and Payment Solutions for Singapore Crypto Companies
Opening a bank account in Singapore for a crypto company is notoriously difficult. Most traditional banks (DBS, OCBC, UOB) are reluctant to serve crypto firms due to AML risks. Some fintech-friendly banks like DBS Digital Exchange or specialised payment institutions may offer accounts, but they require a strong compliance framework. Alternatively, you can use multi-currency accounts from neobanks or payment processors. Consulting24 can help you identify banking partners in jurisdictions where we operate, such as Lithuania and Panama, where banking is more accessible. For example, in Lithuania, many banks accept crypto firms with a valid CASP licence, and in Panama, there are no restrictions on crypto-related banking.
Benefits of Complying with Singapore AML/KYC Requirements
While the AML/KYC requirements are strict, they offer benefits:
- Regulatory credibility: A MAS licence is a gold standard that builds trust with customers and partners.
- Access to the Asian market: Singapore is a gateway to Southeast Asia.
- Stable legal environment: Singapore has a strong rule of law and clear regulations.
- Tax advantages: No capital gains tax and low corporate tax.
However, the cost and time may outweigh these benefits for early-stage startups. For a more cost-effective and faster setup, many founders choose Panama (EUR 6,000 flat) or Lithuania (EUR 2,500 setup). Panama, in particular, offers a fully compliant structure with no ongoing AML/KYC obligations, making it ideal for startups.
Compliance and Trust: How Singapore Ensures Integrity
The MAS enforces AML/KYC compliance through regular inspections, audits, and penalties. Non-compliance can result in fines of up to SGD 1 million or imprisonment. The MAS also publishes enforcement actions, which can damage reputation. To maintain trust, companies must:
- Conduct regular AML training for staff, at least annually.
- Perform independent audits of their AML/CFT program every year.
- Report suspicious transactions promptly to STRO.
- Cooperate with MAS investigations fully.
This is general guidance, not legal advice. Always consult a qualified lawyer for your specific situation. For a less burdensome compliance environment, consider Panama, where there are no mandatory AML/KYC requirements for crypto companies.
Common Mistakes in Meeting AML/KYC Requirements in Singapore
Common pitfalls include:
- Incomplete CDD: Failing to verify beneficial owners or using outdated documents.
- Weak transaction monitoring: Not implementing automated systems for large or unusual transactions, such as those above SGD 10,000.
- Poor record-keeping: Not retaining records for the required five years, or storing them in an inaccessible format.
- No MLRO: Not appointing a resident money laundering reporting officer, which is a mandatory requirement.
- Underestimating timeline: Applying without a fully developed compliance framework, leading to delays or rejection.
To avoid these, work with an experienced consultant like Consulting24. We can help you prepare a strong application for Singapore or guide you to a simpler jurisdiction like Panama.
Alternatives to Singapore: Panama and Other Jurisdictions Compared
Singapore's rigorous AML/KYC regime is not suitable for every crypto business. Here is a comparison with other popular jurisdictions:
| Jurisdiction | Setup Cost | Capital Requirement | AML/KYC Burden | Tax on Foreign Income | Timeline |
|---|---|---|---|---|---|
| Singapore | SGD 60,000+ | SGD 100,000 - 250,000 | High | 17% | 6-12 months |
| Panama | EUR 6,000 flat | None | None | 0% | 2-4 weeks |
| Lithuania | EUR 2,500+ | EUR 125,000 (MiCA) | Moderate | 15% | 3-6 months |
| Estonia | EUR 3,000+ | EUR 100,000 (MiCA) | Moderate | 20% | 3-6 months |
Panama stands out for its low cost, zero capital requirement, and no AML/KYC obligations. For founders seeking a quick and affordable setup, Panama is often the best choice. Consulting24 delivers Panama licences directly.
Why Consulting24 for Your Crypto Licence Needs
Consulting24 (X24Consulting OU, Tallinn, Estonia) has obtained over 500 crypto licences worldwide. We deliver directly in Estonia, Lithuania, and Panama. For Singapore and other jurisdictions, we advise and coordinate with local partners. Our team provides end-to-end support, from company formation to compliance setup. We help you choose the right jurisdiction based on your business model, budget, and timeline. Contact us on WhatsApp to book a consultation and discuss your options.
Frequently asked questions
What is the difference between SPI and MPI licences in Singapore?
The SPI licence is for smaller payment institutions with monthly transaction flows below SGD 3 million or stored value below SGD 5 million. The MPI licence is for larger institutions exceeding these thresholds. Most crypto exchanges apply for an MPI licence due to high volumes. Both require full AML/KYC compliance.
How long does it take to get a crypto licence in Singapore?
The typical timeline is 6 to 12 months, but it can take longer if the MAS requests additional information. The process includes application review, onsite inspection, and compliance checks. For a faster alternative, Panama can be set up in 2-4 weeks.
What are the capital requirements for a Singapore crypto licence?
For an MPI licence, the minimum base capital is SGD 250,000. For an SPI licence, it is SGD 100,000. Additionally, a security deposit of up to SGD 200,000 may be required. These funds must be in fiat and held in a Singapore bank account.
Is it difficult to open a bank account for a crypto company in Singapore?
Yes, it is notoriously difficult. Traditional banks are reluctant to serve crypto firms. Some fintech-friendly banks or payment processors may offer accounts, but they require a strong compliance framework. In Panama, banking is more accessible for crypto companies.
What are the tax implications for a crypto company in Singapore?
Singapore has a territorial tax system with a corporate tax rate of 17%. There is no capital gains tax. Cryptocurrency transactions are treated as ordinary income. GST applies at 9% on digital payment token supplies. Panama offers 0% tax on foreign-source income.
Can I issue my own token under a Singapore crypto licence?
No, the PSA only covers digital payment tokens. Issuing stablecoins or other tokens may require a separate securities licence under the Securities and Futures Act. Jurisdictions like Lithuania and Panama offer more flexibility for token issuance.
What happens if I fail to comply with AML/KYC requirements in Singapore?
Non-compliance can result in fines of up to SGD 1 million, licence revocation, or imprisonment. The MAS also publishes enforcement actions, damaging your reputation. It is crucial to have a strong compliance framework in place.
Is Singapore a good jurisdiction for a crypto startup?
Singapore offers regulatory credibility and access to Asian markets, but the high cost, capital requirements, and lengthy timeline can be prohibitive for startups. For a more cost-effective and faster setup, consider Panama or Lithuania.
Does Consulting24 help with Singapore crypto licences?
Yes, Consulting24 advises and coordinates with local partners for Singapore. We deliver directly in Panama, Estonia, and Lithuania. We can help you evaluate whether Singapore is right for you or recommend an alternative jurisdiction.
What is the ongoing compliance cost for a Singapore crypto licence?
Ongoing compliance costs typically range from SGD 30,000 to SGD 100,000 per year, including staff, audits, and reporting. In contrast, Panama has no ongoing compliance costs.
Official sources
Related jurisdictions
Talk to a crypto-licensing expert
500+ licenses across Estonia, Lithuania, Panama and beyond. Tell us your model and we'll map the right route — honestly.
💬 Talk to an expertFree consultationGeneral guidance, not legal advice. Rules and fees evolve — we confirm current requirements for your case.