MAS Major Payment Institution Licence: Application, Capital, Timeline (2026)

After the EEA, the jurisdiction founders ask about most often in finconduit's work is Singapore. The reasoning is rarely surprising: a credible English-language legal system, the deepest regulator brand in Asia, USD-clearing depth on par with London, and a fintech ecosystem that took fifteen years to build. Yet Singapore is also the jurisdiction where founder expectations and operational reality diverge most sharply — particularly on the timeline, the capital floor, and the Singapore-resident substance bar that no jurisdiction outside the city-state has matched.

The gateway licence for almost every founder we speak to is the MAS Major Payment Institution (MPI) authorisation under the Payment Services Act 2019 — the framework that consolidated the old Money-Changing and Remittance Businesses Act and the Payment Systems (Oversight) Act and added the Digital Payment Token (DPT) service category for crypto. The MPI is the higher-tier of the two payment-services tiers; DPT is the activity that sits inside it for crypto firms. Together they form the licence that any meaningful fintech or crypto operator needs in Singapore.

This article maps the Singapore MPI gateway as it actually operates in 2026: the capital-floor calculation under PS Act Regulation 14, the realistic licensing-cycle timeline from PROC engagement to operational launch, the Singapore-resident substance requirement at CEO, COO and Compliance Officer level, and the practical differences from MiCA CASP authorisation — which is the comparison founders almost always make when weighing Singapore against an EEA build-out. Naming policy: regulators (MAS) named freely; no specific banks, EMIs or custodians.

The Payment Services Act 2019¹^[1] defines seven regulated activities: account issuance, domestic money transfer, cross-border money transfer, merchant acquisition, e-money issuance, digital payment token services, and money-changing. Any firm carrying on one or more of these activities by way of business in or from Singapore must hold a licence — under one of three tiers calibrated by activity volume.

The SPI tier authorises payment-services activity below specified thresholds: S$3 million per month per regulated activity (or S$6m across two activities), and an e-money float that does not exceed S$5 million at any point. Capital floor: S$100,000. The SPI is the on-ramp tier for nascent businesses — operationally legitimate, but structurally constrained. Most fintechs outgrow it within twelve months and must vary up to MPI.

The MPI tier carries no volume cap and is the licence any firm with serious commercial ambitions targets from the outset. Capital floor: S$250,000 — but the operative number is rarely the floor. The capital actually demanded scales with activity profile and the MAS PROC officer's view of operational risk; S$500k–S$1.5M working capital is the realistic expectation for a credible MPI applicant, separate from the safeguarding obligation on customer money.

The DPT²^[2] service is not a separate licence but an activity category added to the SPI or MPI base licence. A crypto exchange, OTC desk, custodian, transfer service, or token-payment processor will hold an MPI with the DPT activity authorised. MAS has progressively tightened the DPT regime since 2022 — segregation of customer assets in trust, restrictions on retail leverage, prohibition on credit-funded crypto purchases, and stringent suitability/marketing rules. The DPT activity is the most heavily-supervised category inside the PSA framework and the one where MAS exercises most discretion at the application stage.

The capital obligation has two components that founders routinely conflate: base capital (the floor specified in the Payment Services Act 2019³^[3]) and the security deposit payable to MAS as a condition of the MPI licence under PS Act Regulation 14.

Base capital for an MPI is S$250,000 of paid-up share capital, maintained continuously. The MPI must satisfy MAS that the firm holds — at all times — base capital not less than this floor. The capital is calculated net of intangibles and is tested at parent-company level for the licensed entity.

The security-deposit layer under Regulation 14 is the part founders typically discover late. Every MPI must lodge a security deposit with MAS — held as cash or as an unconditional, irrevocable guarantee from a Singapore bank — calibrated by activity volume:

• S$100,000 where the average monthly transactions in the preceding calendar year do not exceed S$6 million.

• S$200,000 where average monthly transactions exceed S$6 million.

The deposit is non-interest bearing where held in cash and locked for the duration of the licence; if posted as a bank guarantee, the underlying credit line carries fees and counter-indemnity. Founders building cash-flow projections should treat the deposit as locked balance-sheet capital — recoverable on licence surrender, but not deployable for working capital during the operating life of the firm.

Stacked: a credible MPI applicant should plan for S$250k base capital + S$100k–S$200k security deposit + S$500k–S$1.5M working capital — i.e. roughly S$850k–S$2M of committed Singapore-resident capital before the licence is granted. For DPT-active applicants, MAS routinely indicates that it expects the upper end of that range and additional buffers for operational-risk capital and cyber/insurance overlays.

The single most-mis-quoted figure in Singapore licensing is the application timeline. MAS does not publish a service-level commitment for MPI grant. The realistic end-to-end timeline in 2026 — for a well-prepared, DPT-active MPI applicant — is 14–20 months from first PROC engagement to operational launch. The cycle has three distinct phases.

Before any formal application is filed, MAS⁴^[4] expects a Pre-Application Review of Concept (PROC) engagement — a structured pre-filing dialogue in which the firm presents its business model, governance, capital plan, and tech architecture to the relevant supervisory team. PROC is not optional in practice for any DPT-active applicant; submitting a cold MPI application without PROC almost guarantees rejection or extended Q&A cycles. Expect 2–4 months from first contact to a green light to file.

Once the formal MPI application is submitted, the supervisory team runs a structured assessment cycle: completeness review, two to three rounds of detailed Q&A, fit-and-proper diligence on directors and senior managers, AML/CFT framework review, technology-risk-management assessment, and finally an inter-departmental clearance. The realistic clock from submission to in-principle approval (IPA) is 10–14 months. Applicants who quote the historical 6–9 month figure are reading materials from before MAS materially tightened DPT supervision.

In-principle approval is not a licence — it is a conditional letter listing the items the applicant must satisfy before the actual MPI licence is granted. Typical IPA conditions: lodgement of the security deposit, funded base capital, signed senior-management contracts with Singapore-resident incumbents in post, completed AML/CFT systems acceptance testing, executed banking arrangements for the safeguarding trust account, finalised insurance cover, and a board-attested operational-readiness sign-off. Working through the IPA conditions takes 4–6 months — sometimes longer where the safeguarding trust banking proves slow to put in place.

Net result: a founder beginning PROC engagement in January should plan for operational launch in Q3 of the following year. Anyone quoting a 6–9 month MPI cycle in 2026 is either selling something, citing pre-2023 data, or describing an SPI rather than an MPI.

This is the dimension where Singapore most diverges from EEA jurisdictions and where founder-stage firms most underestimate cost. MAS expects an MPI applicant to demonstrate genuine local mind-and-management — not corporate-services-provided directors or part-time consultants.

The minimum substance pattern MAS expects for an MPI:

• CEO — Singapore-resident, full-time, with sufficient sectoral experience. Functioning as the executive head of the licensed entity from a Singapore office.

• COO (or equivalent operational head) — Singapore-resident, full-time, responsible for operational risk, technology, and day-to-day execution.

• Compliance Officer / MLRO — Singapore-resident, full-time, with prior PSA-regulated experience and sufficient seniority to challenge the business. Cannot be the same person as CEO or COO.

• At least one Singapore-resident independent director on the board.

• A documented physical office in Singapore — co-working acceptable for early-stage SPI, expected to be a dedicated office for MPI by IPA conditions clearance.

All three executive roles must be materially independent — i.e. not double-hatting across multiple licensed firms in a way MAS would consider dilutive of attention. The fit-and-proper diligence MAS runs on each individual is detailed: regulatory history, criminal-records checks across all jurisdictions of residence, financial soundness, prior employment references, and a structured interview where MAS supervisors test understanding of the proposed business model and obligations.

All-in cost of the substance pack — three full-time senior executives plus an independent director plus office — is meaningfully above S$1M per year before any other operating cost. This is the single line item that most often forces founders comparing MAS to MiCA to revisit assumptions.

For a crypto-active firm choosing between Singapore and the EEA, the comparison is rarely about regulator quality — both MAS and the EEA's lead authorities operate at the high end globally. The trade-offs are about market access, timeline, capital, substance cost, and tax.

The single most decisive factor is customer base. A firm whose customer base is structurally European — institutional clients, corporate treasury, EU retail — should be in the EEA under MiCA, because EEA passporting is the sole mechanism for serving 27 member states from one licence. A firm whose customer base is APAC-institutional, regional-corporate, or where the strategic value of the Singapore brand itself is the asset, should be in Singapore. Trying to serve both with one licence is a structural error.

The rule of thumb that holds in 2026: choose MiCA if speed-to-licence and EEA passporting are dominant; choose MAS MPI if the institutional brand value of Singapore authorisation, APAC market access, or USD-clearing depth is dominant. Firms with the resource envelope sometimes pursue both — but only sequentially, with MiCA typically built first because of the shorter cycle.

Indicative all-in cost to obtain and maintain a DPT-active MAS MPI in 2026, Year-1 view:

• Application + advisory legal: S$300k–S$600k across the 14–20 month cycle.

• Base capital + security deposit: S$350k–S$450k locked.

• Substance pack (3 senior executives, INED, office) for the application year: S$1.0M–S$1.4M.

• Tech and AML systems (transaction monitoring, sanctions screening, blockchain analytics, KYC vendor): S$200k–S$400k.

• Insurance, audit, internal-audit outsource, professional indemnity: S$150k–S$300k.

• Total Year-1 indicative all-in: S$2.0M–S$3.2M committed before launch.

This is consistent with the broader pattern across major fintech jurisdictions: the licensed-entity infrastructure is the same order of magnitude, with the substance bar and the locked deposit being Singapore's distinctive cost burdens.

A live MAS MPI authorisation is necessary but not sufficient for tier-one Singapore banking. The local bank ecosystem — supported through MAS⁵^[5]'s fintech development programmes — has matured considerably since 2022, but DPT-active licensees still face material onboarding diligence. The pattern that works most consistently in 2026:

• Operating account at a tier-one Singapore bank for OPEX, payroll, and corporate treasury — initiated in parallel with PROC, so the relationship is in place by IPA.

• Customer-money safeguarding trust account at a separate institution — typically opened during IPA conditions clearance.

• USD-clearing depth via the Singapore correspondent banking layer — institutional, predictable, and the second-most cited reason (after brand) that firms choose Singapore over a peer Asian jurisdiction.

• Qualified custody for digital assets via a Singapore-licensed or otherwise-recognised custodian — the substance and segregation regime is the strictest in Asia.

The banking layer maps onto the substance work the firm has already done. A Singapore-resident management team, a clear PROC-validated business model, and a credible security-deposit arrangement materially shorten the bank diligence cycle.

In principle yes — the variation pathway exists. In practice, MAS uses the variation as a re-evaluation gate, not a rubber-stamp; the SPI-to-MPI variation often takes nearly as long as a fresh MPI application and requires the same fit-and-proper, capital, and substance evidence. The choice between starting at SPI vs MPI is fundamentally a question of whether the volume cap and reduced substance burden of the SPI buy enough runway to justify the eventual variation friction. For most firms with ambitions beyond the SPI cap, going directly for MPI from PROC is faster overall.

No — there is no multilateral payment-services passport in ASEAN comparable to the EEA. Singapore is the regional hub by virtue of substance, brand and clearing depth, not by virtue of cross-border licensing rights. Firms targeting Hong Kong, Malaysia, Indonesia, Thailand, the Philippines or Vietnam need separate licensing in each — though several of those regulators give weight to a live MAS authorisation as a fit-and-proper signal during their own assessments.

Not at MPI level for a DPT-active applicant. MAS expects role separation between CEO, COO, and Compliance Officer at all times, with each role held by a different Singapore-resident individual carrying sufficient seniority. Combining CEO/COO is occasionally accepted at SPI level for simpler business models, but is treated as a structural weakness even there.

Both regimes are credible; the choice typically turns on customer base. Singapore MAS is broader (covers payments and DPT), more institutionally credible globally, and slower to license. Hong Kong's SFC VATP regime is narrower (focused on virtual-asset trading platforms), distinctly retail-investor-protective, and gated by SFC's familiar — and demanding — Type 1/Type 7 framework. Firms whose primary business is a retail crypto exchange increasingly look at both.

No. Reg 14 specifies that the guarantee must be issued by a bank in Singapore — and unconditional, irrevocable, payable on demand. Foreign-bank standby letters of credit do not satisfy the requirement; firms either lodge cash or arrange the guarantee with a domestic bank, with the cost and counter-indemnity that implies.

• Hong Kong SFC VATP Licence — the closest peer regime to MAS MPI for crypto-trading firms.

• EEA vs UK vs Offshore: Where to Incorporate Your Crypto Business — the EEA side of the choice founders most often weigh against MAS.

• Multi-Jurisdiction Crypto Structures — sequencing MAS MPI alongside an EEA CASP build.

• UAE VARA Licence Guide — the third major non-EEA jurisdiction founders consider alongside Singapore.

• Regulatory Legal Opinions — our service: PROC strategy, MPI application architecture, IPA conditions clearance.

The Singapore MPI gateway is not a fast or cheap authorisation. It is — for the right firm with the right customer base — the most institutionally durable payment-services licence in Asia, and the one whose brand most reliably opens doors with banks, custodians, and counterparties globally. Founders who plan for a 14–20 month cycle, S$2M+ committed capital and a Singapore-resident senior team from PROC stage onwards are the ones who reach IPA without surprises. The firms that under-budget on any one of those three dimensions are the ones whose MPI files stall.