TRW & Co · Investigations and financial crime
Financial services licensing breaches in Singapore
Financial licensing breaches in Singapore turn on the specific activity carried on, where, for whom and whether an exemption or transitional relief applies. The Payment Services Act 2019, Securities and Futures Act 2001 and Financial Advisers Act 2001 each define regulated activities differently, and FSMA adds cross-cutting powers. Before deciding which licence was needed, map exactly what was done.
Key pointResist the snap conclusion about which licence was required: the defensible first step is a factual map of the activity, the customers, the location and the terms, because each statute defines regulated activity and exemptions differently.
At a glance
Three principal statutes
The Payment Services Act 2019, the Securities and Futures Act 2001 and the Financial Advisers Act 2001 are the regimes most commonly engaged by licensing questions.
PS Act applies by default
MAS has confirmed that payment service providers operating in Singapore come under the Payment Services Act unless an exemption applies.
FSMA cuts across
The Financial Services and Markets Act 2022 provides a cross-cutting framework for certain regulatory and enforcement matters affecting financial institutions.
Activity drives the answer
The analysis turns on what regulated activity was performed, by whom, for whom, from where and on what terms, not on how the business describes itself.
Interim controls matter
While the fuller review proceeds, short-term controls and remediation governance help limit further exposure and show responsible conduct.
Swipe or scroll →
This guide to financial licensing breaches in Singapore sets out how the rules apply in practice, which authority is involved, what evidence decision-makers need and where the common mistakes lie. It is written for boards, founders, general counsel and advisers working through Singapore.
Financial licensing breaches in Singapore: the short answer
Licensing exposure in Singapore starts and ends with the specific activity carried on, where it is carried on, who it touches, and whether any exemption or transitional relief applies. For financial services, three principal regimes are commonly engaged: the Payment Services Act 2019 (PS Act), the Securities and Futures Act 2001 (SFA) and the Financial Advisers Act 2001 (FAA). The Monetary Authority of Singapore (MAS) has confirmed that payment service providers operating in Singapore come under the PS Act unless an exemption applies. The Financial Services and Markets Act 2022 (FSMA) provides a cross-cutting framework for certain regulatory and enforcement matters.
When a potential licensing breach is identified, decision-makers should avoid a snap conclusion about which licence is needed. The correct question is narrower and more practical: what regulated activity, if any, has actually been performed, by whom, for whom, from where, and on what terms. The answer changes across the PS Act, SFA and FAA because each statute defines regulated activities differently and contains tailored exemptions, transitional provisions and conditions. The right response is a structured triage: map the activity, locate the applicable regime, determine whether an exemption or “out-of-scope” position is credible, confirm the entity’s status, assemble contemporaneous records, and put short-term controls and remediation governance in place while a fuller review proceeds.
This insight sets out a field-tested process for triaging an apparent licensing breach in Singapore without offering a licensing conclusion. It focuses on the decisions in front of boards, founders, investors, in-house counsel and compliance leads: what to check first, what evidence to preserve, where distinctions under the statutes change the answer, and when to escalate to regulatory engagement. It also highlights common mistakes we see when organisations move too quickly, assume equivalence with other jurisdictions, or overlook written MAS conditions and public registers.
Two orientation points help from the outset:
- Activity-first analysis: begin with what the business, desk, product or platform has actually done for customers or counterparties, not with a label such as “payments”, “advisory”, “brokerage” or “tokens”.
- Singapore nexus: consider location, solicitation and servicing footprint. Singapore’s regimes can apply where activity is carried on in Singapore or targeted at persons in Singapore, subject to statutory language and exemptions.
Readers wanting wider market context on the region’s investigations trends can explore the firm’s perspectives at our latest perspective pieces. For a practice overview relevant to investigations, compliance and financial crime, see our practices.
Scope, authority and key distinctions
The practical route through an apparent licensing problem depends on which statutory regime may apply and how its thresholds and exemptions are drafted. Three distinctions usually determine that route.
First, the PS Act sets out a defined list of payment services—such as account issuance, domestic money transfer, cross-border money transfer, merchant acquisition, e-money issuance, digital payment token services and money-changing—each with its own scope, exclusions and licensing tiers. MAS has made clear that persons providing payment services in Singapore are regulated under the PS Act unless an exemption applies. That “unless” matters: the Act and subsidiary instruments include exemptions and transitional provisions, and MAS may impose written conditions on specific entities. The official text is available via the Singapore Statutes Online for the Payment Services Act 2019, and MAS maintains guidance and regulatory updates at MAS Payments.
Second, the SFA regulates markets, capital markets products and a suite of activities such as dealing in capital markets products, fund management, product financing and custodial services, among others. Whether a particular product or service falls under the SFA framework depends on precise definitions and activity boundaries under the statute and subsidiary legislation. The official text is at the Securities and Futures Act 2001.
Third, the FAA governs financial advisory services, including giving advice on specified investment products and issuing or promulgating research analyses or reports concerning such products, again subject to detailed exclusions and exemptions. The statutory text is the Financial Advisers Act 2001.
FSMA sits alongside these core regimes and addresses, among other things, aspects of licensing, powers and obligations that cut across sectors. The official text is the Financial Services and Markets Act 2022. While FSMA does not replace the PS Act, SFA or FAA, it is relevant to the way certain requirements and enforcement tools operate across regulated financial activities.
From an investigations perspective, three practical distinctions change the answer you reach:
- Which activity set is engaged. A payments flow dressed as “platform settlement” may fall under the PS Act; a structured token offering might engage the SFA; a pitch deck with product projections could drift into FAA territory if it amounts to advice. The label used in product design or marketing is not determinative.
- Where and how you engage customers. Regimes distinguish activity “in Singapore” from activity outside Singapore that is targeted at Singapore customers. Remote, cross-border and embedded activities may be in-scope depending on solicitation and servicing facts.
- What exemptions and written conditions apply. Transitional exemptions for new regimes, institutional investor carve-outs, group or incidental exemptions, and MAS-written conditions can all move a scenario from “licensing breach risk” to “exempt but conditioned”. These are technical, fact-dependent and time-limited.
These distinctions are why any licensing statement must be activity-by-activity. A conclusion that “a licence is required” or “no licence is required” is rarely safe without a granular map of the actual conduct and the live text of the applicable regime, including any updated notices or registers MAS maintains.
Process, documents and evidence
A disciplined process reduces regulatory risk and preserves optionality. The following workflow is designed for the first two to six weeks after an apparent breach comes to light; adjust pacing to the facts and the organisation’s governance.
1. Stabilise and define scope. Identify the trigger—internal audit finding, customer complaint, whistleblower report, counterparty query, media interest or an MAS communication. Set a narrow working hypothesis that you can test with evidence, e.g., “From March to July, the business accepted funds from Singapore customers for onward settlement without a PS Act licence, relying on a yet-to-be-verified exemption.” Establish a cross-functional core team with legal, compliance, operations and, where needed, technology support.
2. Map the activity. Build a fact base that separates what was marketed from what actually happened on the ground. Confirm the relevant time period, the customer cohorts involved, the jurisdictions touched, the transaction flows, the onboarding and KYC steps, the contractual terms and the operational controls deployed. The objective is to produce a concise activity narrative expressed in neutral, technical terms capable of being read against statutory definitions.
3. Locate the statutory hook. Using the activity narrative, assess which regime(s) may be engaged: PS Act (payments), SFA (capital markets activities), FAA (financial advisory), or a combination. Record any apparent exemptions or exclusions, and whether any transitional provision might have applied during the relevant period. Note any MAS directories, registers or licensing lists that indicate the entity’s status at relevant times.
4. Assemble the documentary record. Prioritise contemporaneous records that will be probative if the matter later requires engagement with MAS or internal accountability:
- Customer-facing materials: website pages, app flows, pitch decks, terms and conditions, risk disclosures, FAQs and support scripts used in the relevant period.
- Internal approvals: product governance documents, risk assessments, licensing analyses, board or management papers, legal advice records, and any correspondence recording an exemption rationale.
- Operational logs: onboarding journeys, payment instructions, settlement reports, reconciliations, KYC/AML outcomes and exception handling logs.
- Regulatory interactions: any letter, email or meeting note with MAS; evidence of reliance on written MAS conditions if any exist.
5. Test the exemption or “out-of-scope” position. Where an exemption is claimed, identify the exact statutory or subsidiary instrument reference, the conditions for its use, and whether each condition was met at the time. Many exemptions require ongoing controls (for example, dealing only with certain investor classes) and can be lost if the facts migrate.
6. Decide interim controls. If there is a plausible breach risk, consider pausing the activity, ring-fencing certain customer cohorts, or changing onboarding and communications while you complete the analysis. Record the rationale. Ensure that customer and market harm is prevented or mitigated in a controlled way.
7. Governance and accountability. Agree who owns the decision-making and who signs off on remediation steps. Document which board committee or executive forum will be briefed and when. If internal audit, risk or compliance committees are involved, minute their role. If external counsel or advisors are engaged, structure the engagement efficiently and with a clear scope.
8. Communications plan. Manage what is said internally and externally while the review is ongoing. Avoid categorical statements on licensing status until the analysis is complete and reviewed. Prepare lines-to-take for investor relations and key counterparties if disruption is possible.
9. Closure and learnings. Once the analysis is final, determine whether any remediation, customer redress or control enhancements are warranted, and whether any proactive engagement with MAS is appropriate. Capture lessons for product design, change governance and training.
Evidence that commonly proves decisive includes: the exact text of onboarding flows and marketing claims in the relevant period; internal analyses contemporaneous with product launch; and any written MAS conditions or correspondence that touches the activity. Keep an audit trail of what was collected, by whom, and when.
Operational and commercial implications
Licensing exposure is not only a legal or regulatory issue; it has immediate operational and commercial effects that boards and investors care about. Four themes typically dominate discussions.
Continuity of service. If the analysis suggests a credible breach risk under the PS Act, SFA or FAA, a temporary pause or modification of service may be prudent while facts are verified. That can affect revenue recognition, customer retention and contractual SLAs. Decision-makers should model realistic downtime scenarios and define customer communications that prevent speculation.
Counterparty confidence. Institutional partners, banks, and payment networks may reassess risk appetite when a licensing question arises. Clear articulation of the scope of the issue, the steps taken to stabilise operations and the analysis pathway can maintain counterparties’ confidence. For groups operating across jurisdictions, coordinate messaging to avoid inconsistent statements across regulators.
Product roadmap and resourcing. A licensing analysis often reveals dependencies that drive product engineering and staffing decisions, such as the need to configure customer segmentation, amend onboarding flows, or separate regulated from unregulated modules. Build these into the backlog early to avoid a scramble when the legal analysis concludes.
Investor and board oversight. Boards and significant investors will expect a documented, timely pathway to resolution, not a rush to a legal conclusion. Provide a short-form dashboard: the activity narrative; applicable regimes and exemptions being tested; interim controls; potential remediation paths; and decision points that may require escalation or external engagement.
For groups that straddle payments, capital markets and advisory features—such as platforms offering stored value, execution access and research—conclusions may differ across modules. It is common and legitimate to operate some modules under licence, others under exemption, and others outside scope entirely; the key is disciplined segregation and clear disclosures aligned to the applicable law and any written MAS conditions.
Financial licensing breaches in Singapore: how the triage plays out in practice
When a possible licensing gap is discovered, the first instinct is to ask which licence the business should have had. The better question is narrower. The scenario below shows how structured triage gets to a defensible position.
Illustrative scenario: a product feature that changed the analysis
Illustrative only; the facts are invented to show the decision points.
A growing fintech platform offers expense-management software to businesses. A new feature lets customers top up a stored balance and pay suppliers directly from the platform. A compliance review notes that no licensing analysis was done for the feature.
The first decision is the activity map. The team documents exactly how funds flow: who holds customer money, for how long, how payments are initiated and where customers and the operating entity are located.
The second decision is the regime. On those facts, the feature points towards the PS Act rather than the SFA or FAA. Counsel then tests whether any exemption or out-of-scope position is credible, using contemporaneous records rather than the marketing description.
The third decision is interim governance. Pending conclusions, the board approves a pause on onboarding new customers to the feature, controls on balances held, and a remediation workstream. It also considers, with advice, how and when to engage with MAS.
The written record of each step, from the flow-of-funds diagram to the board minute approving interim controls, becomes the core of any later discussion with the regulator, and of the disclosure the company later makes to investors during its next funding round.
| Step | Owner | Timing | Evidence to hold |
|---|---|---|---|
| Map the activity, customers, location and terms | Product and compliance | Immediately | Activity map, flow-of-funds diagram |
| Identify the applicable regime | Legal counsel | Once the map is stable | Regime analysis note |
| Test exemptions and out-of-scope positions | Legal counsel | In parallel | Exemption analysis with sources |
| Put interim controls in place | Management with board approval | Promptly | Board minute, control records |
| Decide on regulatory engagement | Board on advice | Once facts are verified | Decision note with reasons |
Licensing questions often arise as products evolve; our financial technology licensing team reviews new features before launch as well as after a gap is found.
Three questions boards and investors ask
How quickly should we contact MAS?
There is no universal timetable, but delay without reason is risky. The decision depends on what the facts show, whether any reporting obligation applies under the relevant statute or licence conditions, and whether the breach is continuing. Many firms establish core facts first so that engagement is accurate, while putting interim controls in place immediately. Take advice on timing, prepare a factual account and a remediation plan, and record why the chosen timing was appropriate. Inaccurate early contact can be as unhelpful as late contact.
Can we continue operating under an exemption?
Only if the exemption genuinely applies on the facts and its conditions are met. Exemptions under the PS Act, SFA and FAA are specific and conditional, and reliance on them should be supported by a written analysis based on contemporaneous records. If the analysis is uncertain, consider whether to pause or limit the activity while the position is confirmed. Continuing to rely on a doubtful exemption without documentation can turn a technical issue into a more serious one, especially if the activity grows in the meantime.
What do boards and investors need to see?
A clear factual account of the activity, the regime analysis, the exemption position, the interim controls in place and the remediation plan with owners and timetable. They should also see the options for regulatory engagement and the advice on each. Investors may ask whether the issue affects valuation, warranties or future fundraising, so the account should be accurate and consistent with any disclosure made to MAS. Avoid presenting conclusions as settled before the analysis is complete, and update them as the review progresses.
Financial licensing breaches in Singapore are best handled through disciplined triage and early interim controls. For broader regulatory strategy, see our fintech regulatory advice practice.
Common mistakes
Across reviews of apparent licensing breaches in Singapore, we repeatedly see the following errors that increase exposure and reduce flexibility.
- Starting with the desired conclusion. Teams sometimes begin by asserting that a licence is “not required” or “already covered” and then back-fill the analysis. This reverses the correct order. Begin with activities, facts and statutory text, and let the conclusion emerge.
- Equating labels with legal scope. Marketing phrases such as “wallet”, “broker”, “adviser” or “research” are not legal categories. The PS Act, SFA and FAA each contain bespoke definitions with inclusive and exclusive elements that can cut across these labels.
- Ignoring exemptions’ conditions. Even where an exemption appears to fit, its conditions may impose ongoing controls (e.g., customer type limitations, conduct requirements or reporting). If these conditions were not met in practice, the exemption analysis fails.
- Overlooking written MAS conditions or public registers. Entity status can be misread if teams do not check MAS directories and any written conditions recorded by MAS. Relying on internal spreadsheets rather than the official register leads to avoidable mistakes.
- Assuming foreign licences cover Singapore activity. Licences in other jurisdictions rarely map cleanly to Singapore regimes. Statements that “we are licensed in X, therefore we are fine in Singapore” are red flags without a statutory bridge.
- Premature external messaging. Telling customers, partners or the media that “no licence is required” before the analysis is complete can create a record that is hard to walk back and may impair regulator confidence later.
- Failure to preserve evidence. Deleting or overwriting app flows, webpages or support scripts from the relevant period makes it much harder to test scope or exemptions and to demonstrate good-faith remediation.
- Letting the issue sprawl. Without a narrow hypothesis and a defined time window, reviews can expand unnecessarily, consuming scarce capacity and delaying stabilisation steps.
Action plan and decision points
| Step | Decision or action | Evidence or record | When to escalate |
|---|---|---|---|
| 1 | Stabilise operations; define a narrow working hypothesis and appoint a cross-functional core team. | Issue log; hypothesis statement; team charter; initial risk memo. | If customer harm cannot be contained or multiple business lines are implicated. |
| 2 | Map the actual activity, customers, jurisdictions and time window. | Activity narrative; data extracts; customer cohort definitions; process maps. | If facts indicate multiple regimes (PS Act, SFA, FAA) may be engaged or facts are disputed. |
| 3 | Identify potentially applicable regime(s) and any exemptions or transitional provisions. | Annotated statutory extracts; exemption matrix; reference to MAS directories and any written conditions. | If exemption reliance is uncertain or depends on unresolved factual questions. |
| 4 | Decide interim controls (pause, ring-fence, amend onboarding/communications) while analysis proceeds. | Control decision note; customer communication scripts; change tickets. | If controls do not mitigate identified risks or counterparties signal concern. |
| 5 | Assemble and preserve contemporaneous documents and records relevant to scope and exemptions. | Document preservation notice; evidence register; copies of customer-facing and internal materials. | If records show potential customer or market harm that may warrant proactive engagement. |
| 6 | Prepare an options paper for governance: remediation paths, potential MAS engagement, product changes. | Board/committee paper; options analysis; timeline and resource plan. | If decisions implicate strategic pivots, significant spend, or formal contact with MAS. |
| 7 | Implement approved remediation and control enhancements; close out with documented learnings. | Remediation tracker; post-implementation review; training updates. | If new facts emerge suggesting ongoing exposure or a different regime applies. |
Decision-maker checklist
- Have we defined the activity with sufficient granularity to read it against the PS Act, SFA and FAA without relying on labels or assumptions?
- Which customers were actually targeted or served, from where, and over what period? Are there Singapore nexus facts that change the analysis?
- What exemptions or transitional provisions are we relying on, exactly, and did we meet each condition at the time?
- What is our entity status in MAS directories for the relevant period, and are there written MAS conditions that affect our analysis?
- Have we preserved and collated the most probative records—onboarding flows, terms, marketing statements, internal approvals and regulatory correspondence?
- What interim controls are in place to mitigate risk while the analysis is completed, and how have we explained these to customers and partners?
- What are the credible remediation paths if a breach is confirmed, and what are the decision gates for each path (including any escalation to MAS)?
- How will we resource any required product, process or disclosure changes across payments, capital markets or advisory modules?
- Have we captured lessons for product governance so future launches align with statutory scope and any MAS conditions?
Questions on financial licensing breaches in Singapore often sit alongside these areas of our work:
- Investigation and crisis response in Singapore
- Workplace investigations in Singapore
- Sanctions and restricted trade in Singapore
See all Singapore practice areas or contact the Singapore office.
Sources and official materials
Only official sources were used. Check the current law and MAS guidance before acting.
- Payment Services Act 2019
- MAS Payments
- Securities and Futures Act 2001
- Financial Advisers Act 2001
- Financial Services and Markets Act 2022
Sources checked 17 October 2026. Current law and guidance should be verified before making decisions.
Frequently asked questions
01How quickly should we contact MAS?
There is no single answer that fits every case. The decision depends on the nature of the activity, the credibility of any exemption, the presence of customer or market harm, and whether interim controls can contain risk while the analysis is completed. Many organisations first stabilise operations, collect the key facts and assess exemptions before deciding whether and how to approach MAS. Where there is a material risk of harm or where MAS is already aware, a timely, accurate engagement plan can be prudent. Check the live statutory position and any MAS communications relevant to your situation.
02Can we continue operating under an exemption?
Possibly, but only if the exemption unambiguously applies and its conditions are met in practice. Exemptions often depend on customer type, activity limits or transitional timelines. They may also be subject to written MAS conditions. If you intend to rely on an exemption, document the precise statutory basis, how each condition is satisfied, and the controls that will trigger a pause if facts change. Avoid making external statements that could be read as definitive licensing conclusions until the position is fully tested.
03What do boards and investors need to see?
They typically want a focused, factual briefing: the activity narrative; which regime(s) may apply; the exemption or out-of-scope theories being tested; the evidence base; interim controls; realistic remediation options; and decision points. They are less interested in abstract debates and more in whether the organisation has a credible path to a controlled outcome.
04What drives the cost of a licensing breach review?
The breadth of the product range, the number of jurisdictions and customer types, the quality of records and whether the review must cover several statutes. A single product with clear documentation can be assessed quickly. A platform offering several services across markets, with changing terms over time, needs a wider factual reconstruction. Costs also rise if regulatory engagement or remediation programmes follow.
05What happens to existing customers if we pause an activity?
Plan the pause carefully. Consider contractual commitments, customer funds or assets in transit, and the need for accurate, non-alarming communications. Customers should not be left without access to their money or without clear information. Coordinate the approach with legal advice so that the pause itself does not create new issues, and keep records of what was communicated and when. Consider whether any customer funds held need specific safeguarding while the pause is in effect.
06How do overseas operations affect the analysis?
Location matters. An overseas entity serving Singapore customers, or a Singapore entity serving overseas customers, can raise different questions under each statute. Map where the activity is carried on, where customers are located and how they are solicited. Local licensing requirements in other jurisdictions may also apply, so coordinate advice across markets. Keep one consolidated activity map so that the Singapore analysis and the foreign analyses rest on the same agreed facts.
General information only, current as at 20 October 2026. It is not legal advice and does not create a lawyer–client relationship. Singapore law and regulatory practice change; check current official sources and take advice on the facts of your matter.
