MAS New Regulations Explained: Strengthening Crackdown on "Shell-Type" Crypto Entities
TechFlow Selected TechFlow Selected
MAS New Regulations Explained: Strengthening Crackdown on "Shell-Type" Crypto Entities
MAS aims to strengthen the regulation of DTSPs that are based in Singapore but do not conduct substantial business operations locally.
Navigating Web3 tides with focused insightsAuthor: Aiying
The Monetary Authority of Singapore (MAS) has recently released proposed regulatory updates targeting Digital Token Service Providers (DTSPs), sparking widespread attention and discussion within the Web3 industry. As a consultancy specializing in Web3 compliance services, Aiying provides an in-depth analysis of the background, content, and potential implications of these new MAS regulations. This article explores how these regulatory changes may affect the strategic positioning and development of Web3 companies in Singapore and across the Asia-Pacific region.
1. MAS’s New Regulations: Cracking Down on "Shell" DTSPs
On October 4, MAS published proposed regulatory amendments concerning licensing requirements for Digital Token Service Providers (DTSPs), with particular focus on so-called "shell" DTSPs—entities registered in Singapore but lacking substantive local operations. These updated rules significantly raise compliance thresholds and signal tighter oversight of the cryptocurrency sector. Since 2020, Singapore has applied strict anti-money laundering (AML) and counter-terrorism financing (CFT) standards to screen DTSP applicants. This latest consultation further intensifies expectations around both compliance rigor and business model legitimacy, especially for firms not conducting meaningful operations within the country.
Under the Financial Services and Markets Bill (FSMB), MAS aims to strengthen supervision over DTSPs that use Singapore as a base without carrying out substantial local activities. Such "shell" entities could potentially be exploited for illicit purposes such as money laundering. The new proposals reflect MAS’s strong commitment to risk management and safeguarding the integrity of Singapore’s financial system, indicating plans for more rigorous scrutiny of these providers.
2. Key Legislation Governing DTSPs and Their Interrelationships
Before delving into the details of MAS’s latest proposal, it is essential to understand the existing legislative framework governing DTSPs and how these laws interact.
-
Financial Services and Markets Bill (FSMB): Enacted in 2022, the FSMB is still undergoing detailed implementation planning and public consultation by MAS. It establishes a legal framework for regulating individuals, partnerships, and corporations providing digital token services. The FSMB broadens the definition of digital token services to include a wider range of commercial activities and empowers MAS to regulate even those DTSPs headquartered in Singapore but lacking substantial domestic operations.
-
Payment Services Act (PS Act): This law regulates digital payment tokens (such as cryptocurrencies) and payment service providers to ensure safe and sound operations within Singapore. For DTSPs offering payment-related services in Singapore, the PS Act sets out specific licensing and compliance obligations. See also: [In-Depth Visual Guide] Comprehensive Overview of Singapore’s Payment Regulation Framework and VASP License Requirements
-
Securities and Futures Act (SFA): Primarily focused on capital market products, this act covers digital assets such as tokenized securities. DTSPs involved in securities-related activities are subject to regulation under the SFA.
These three pieces of legislation work together to form a comprehensive compliance framework for DTSPs operating in Singapore. In simple terms, the FSMB provides an overarching regulatory umbrella covering all digital token services, while the PS Act and SFA offer more granular guidance tailored to specific business types—such as payments or securities trading. This layered approach ensures that DTSPs face both high-level regulatory standards and practical, targeted operational requirements, resulting in a balanced and thorough supervisory regime.
3. New Requirements Under the Financial Services and Markets Bill
According to MAS’s consultation paper, obtaining a DTSP license will require meeting several stringent criteria, including but not limited to the following:
-
Minimum Capital Requirement: DTSPs must maintain at least SGD 250,000 in base capital to demonstrate financial stability and operational commitment.
-
Local Compliance Team: A compliance team must be established in Singapore, including at least one resident executive director or partner, ensuring real-time local management and compliance oversight.
-
Independent Audit Mechanism: Regular independent audits covering cybersecurity and financial compliance must be conducted, with audit reports submitted periodically to prove adherence to regulatory standards.
-
Penetration Testing and Cybersecurity Standards: Companies must perform penetration testing and remediate all high-risk vulnerabilities to ensure platform security and data integrity.
-
Independent Compliance Function: An independent compliance function must be set up in Singapore, led by a qualified compliance officer, to ensure the autonomy and effectiveness of compliance operations.
-
Audit Arrangements: Adequate audit arrangements must be in place to assess the effectiveness of compliance controls. These audits must be independent and proportionate to the size, nature, and complexity of the business.
-
Physical Office Requirement: A permanent physical office must be maintained in Singapore to facilitate on-site inspections and regulatory supervision by MAS.
These measures undoubtedly increase compliance costs. Moreover, MAS will conduct deeper assessments into the commercial rationale of business models, particularly for companies not intending to carry out substantial operations locally. These measures undoubtedly increase compliance costs. Moreover, MAS will conduct deeper assessments into the commercial rationale of business models, particularly for companies not intending to carry out substantial operations locally.
This stricter licensing regime clearly aims to enhance transparency and ensure lawful fund flows, but it also places heavier compliance burdens on Web3 enterprises. For Web3 companies pursuing global expansion, a critical question arises: does Singapore remain an attractive jurisdiction under these new rules? The requirements proposed by MAS may prompt many firms to reevaluate their strategy of establishing a presence in Singapore.
4. What Should Enterprises Prepare For?
Aiying recommends that businesses focus on the following key areas when preparing for these new regulations:
-
Establishing a Compliance Team: As required by MAS, DTSPs must establish a local compliance team in Singapore, led by a qualified compliance officer. Companies should begin planning their compliance structure early, focusing on recruitment and training of local compliance personnel.
-
Audits and Cybersecurity: Given MAS’s emphasis on penetration testing and independent audits, companies must ensure their cybersecurity frameworks meet regulatory standards and validate control effectiveness through third-party audits.
-
Sound Business Model Design: Firms seeking licenses in Singapore but primarily serving overseas markets must clearly justify the necessity and credibility of their business models to gain MAS approval.
-
Capital Readiness and Risk Assessment: Businesses must meet the minimum capital requirement of SGD 250,000 and conduct comprehensive risk assessments to prepare for future regulatory shifts.
5. Implementation Timeline and Transition Policy
The public consultation on these proposed guidelines and requirements will run until November 4. While the exact effective date of the final rules has not yet been confirmed, MAS has indicated that once finalized, there will be only about four weeks of transition period for compliance. At that point, any DTSP operating in Singapore without a valid MAS license must cease or suspend its operations in the country.
MAS emphasizes that these new measures are vital to maintaining the integrity of Singapore’s financial system and aligning with evolving international standards for digital assets. For observers of the crypto industry, the key question is whether these stringent new rules will encourage DTSPs to pursue compliant operations in Singapore—or deter innovators due to high compliance costs.
This dilemma is equally relevant across the Asia-Pacific region, particularly in Hong Kong. In recent years, Hong Kong has actively positioned itself in the digital asset space by launching a regulatory sandbox to support stablecoin issuers and financial institutions exploring tokenization use cases, explicitly identifying digital asset innovation as a key driver of financial sector growth. For Web3 institutions, making informed decisions about compliance architecture across Asia-Pacific and globally is crucial for long-term success. Aiying will continue to provide expert insights grounded in practical experience.
Join TechFlow official community to stay tuned
Telegram:https://t.me/TechFlowDaily
X (Twitter):https://x.com/TechFlowPost
X (Twitter) EN:https://x.com/BlockFlow_News
Aiying Compliance
