A token-exchange operator expanding from Asia-Pacific into the Atlantic basin faces a structural decision early: domicile the regulated entity in the Cayman Islands or obtain a Digital Payment Token (DPT) licence under Singapore's Payment Services Act. The choice is not cosmetic. Regulator posture, substance requirements, banking access and the reach of each licence into third-country markets diverge sharply. Getting the structure wrong costs months of remediation and, in the worst case, a frozen bank account and an enforcement notice before the business has turned its first trade.
This analysis maps the two regimes head-to-head across the axes that matter to an operator: the regulatory perimeter, licence categories, application process, AML posture, tax interaction and banking reality. It closes with a decision matrix by operator profile. No verdict is offered on which jurisdiction is universally superior – the right answer depends on your entity, your user base and your capital allocation.
What Does Each Regime Actually Regulate?
Singapore's Payment Services Act, administered by the Monetary Authority of Singapore (MAS), captures any person carrying on a business of providing a digital payment token service – which includes buying and selling DPTs, facilitating the exchange of DPTs, and transferring DPTs on behalf of third parties. The Cayman Islands regime, administered by the Cayman Islands Monetary Authority (CIMA) under the Virtual Asset (Service Providers) Act, covers a broadly comparable set of activities: virtual-asset trading, custody, issuance-related services and administration. Both regimes draw their definitional scope from the FATF Recommendations on virtual assets, so the perimeter is deliberately wide.
The critical structural difference is purpose. Singapore's DPT regime is an operating licence – it authorises a business to conduct live commercial activity with customers in Singapore and, under passporting logic, signals compliance credibility to partner banks across ASEAN. CIMA's registration and licensing tracks serve a dual function: they satisfy the Cayman's FATF obligations, but a Cayman-registered VASP servicing retail clients in Singapore still needs a MAS licence for that activity. Cayman is frequently used as the holding or fund layer, not the primary operating layer, precisely because its regime does not substitute for in-market authorisation.
In our licensing practice, operators who approach us after receiving a banking-denial letter have often built the structure the wrong way around: a Cayman vehicle on top with no licensed subsidiary at the point of customer contact. That structural error is correctable, but it adds time and cost that a properly sequenced build avoids.
What Licence Categories Are Available in Each Jurisdiction?
Singapore's Payment Services Act offers three licence tiers: a money-changing licence, a standard payment institution (SPI) licence and a major payment institution (MPI) licence. The tiers differ by transaction volume thresholds and the breadth of permitted payment services. A DPT business that breaches the SPI thresholds must hold an MPI licence, which carries higher capital and safeguarding requirements. MAS also regulates digital-asset fund managers under the Securities and Futures Act where assets are securities-equivalent.
The Cayman Virtual Asset (Service Providers) Act establishes a registration track for lower-risk activities and a full licensing track for those whose activity meets the elevated-risk threshold set by CIMA. In practice, virtual-asset trading platforms and custodians operating at meaningful scale are steered toward the licensing track. There is no MAS-style tiering by volume: CIMA's assessment is more qualitative, focusing on substance, governance and AML posture.
An operator running an exchange, a custody wallet and a fiat-ramp under one brand will typically find that Singapore demands a single MPI licence covering multiple payment services, whereas Cayman may require separate registrations or a combined licence application that explicitly lists each activity. The scope of what is covered by a single instrument differs, and that has a direct bearing on compliance overhead.
How Does the Application Process Compare?
Both processes require a physical or demonstrable substance presence, fit-and-proper assessments of key persons, an AML/CFT framework, technology risk documentation and a business plan with financial projections. The similarity ends there.
MAS is known for a thorough, document-intensive review. Operators we advise in Singapore regularly find the technology-risk and cybersecurity annexes the most time-consuming elements. MAS expects a mature incident-response plan, penetration-testing evidence and – where the applicant holds customer assets – a detailed safeguarding methodology. The regulator is responsive during the review period, but it asks detailed supplementary questions; a first-submission that is incomplete restarts the clock in practical terms. Timeline is best described qualitatively: the process typically extends over multiple months for a well-prepared applicant, and longer where MAS raises substantive queries.
CIMA's process is generally regarded as less documentation-intensive at the outset, though the regulator has materially raised its expectations since the VASP Act came into force. A Cayman application still requires full AML policies, a compliance officer with demonstrable experience and, for the licensing track, evidence of adequate capital. Allied counsel in the Cayman Islands who work alongside us on these matters regularly note that CIMA's processing times, while historically shorter than MAS, have lengthened as the VASP register has grown.
One practical divergence: MAS operates a formal licence-in-principle stage that gives applicants a clear checkpoint before full authorisation. CIMA does not have an equivalent staged approval – the decision is issued on the full application, which means operators carry more uncertainty for longer during the Cayman process.
The process above describes the standard path. Your facts – the entity structure, the user base geography, the banking relationships you have in place – change the analysis substantially. For a scoped assessment of which application path fits your build, contact OBOLUS at info@oboluslaw.com.
What Level of Substance Does Each Regulator Require?
Substance is the axis on which the two jurisdictions diverge most sharply in practice. MAS expects the licensed entity to have genuine operational substance in Singapore: a local office, key management personnel resident or regularly present in-market, a board with independent members and – for custody activities – physical or contractual infrastructure located in the jurisdiction. Singapore has positioned itself as a genuine financial hub for digital assets, not a brass-plate centre, and MAS enforces that positioning through substance scrutiny.
CIMA's substance threshold, while not negligible, is calibrated differently. A Cayman-registered VASP must have a registered office and a compliance officer, and its AML programme must be genuinely operative. But the regulator does not insist on the operational depth that MAS requires. This makes the Cayman structure attractive as a holding layer or fund wrapper – where substance is provided at the fund-management or GP level – rather than as the front-line operating entity that onboards and services retail customers.
For a custodian considering either jurisdiction, the substance question interacts directly with insurance and segregation expectations. In our experience, institutional counterparties – prime brokers, bank custodians, institutional investors – conduct their own substance assessment of the custodian's domicile when deciding whether to engage. A MAS-licensed custodian carries more institutional credibility in the ASEAN corridor than an equivalent Cayman-registered vehicle, all else equal.
How Do AML and Travel Rule Obligations Compare?
Both Singapore and the Cayman Islands have adopted FATF Recommendation 15, the foundational requirement that virtual-asset service providers apply AML/CFT controls equivalent to those applied in the traditional financial sector. Both have implemented the Travel Rule – the obligation to pass originator and beneficiary information with a virtual-asset transfer above the applicable threshold. The threshold and the technical implementation rules differ between the two jurisdictions, and operators must confirm the current position in each before building their compliance stack.
MAS has been an early and active implementer of the Travel Rule. The expectation in Singapore is that a licensed DPT service provider uses a recognised Travel Rule solution, can demonstrate counterparty VASP due-diligence procedures and maintains records in a format that MAS can inspect. Singapore-licensed operators we advise find that Travel Rule compliance is effectively table-stakes for maintaining their licence in good standing – MAS will raise it in any routine supervisory engagement.
CIMA's Travel Rule implementation has followed a similar trajectory, though the supervisory intensity has – at least historically – been lighter than MAS. The gap is narrowing. FATF's mutual evaluation process, which assesses jurisdictions against global AML standards, creates direct pressure on Cayman to maintain robust supervision. Operators who assume that a Cayman registration requires less AML infrastructure than a MAS licence are taking a risk that is increasingly difficult to sustain.
A point that is frequently underestimated: the AML posture of the licensed entity affects banking access as much as the licence itself. Correspondent banks and stablecoin issuers apply their own assessment of the jurisdiction's AML rating when deciding whether to extend rails. Singapore's strong FATF standing is a material banking-access advantage over any jurisdiction on the grey list or under heightened monitoring.
What Are the Tax and Banking Realities?
Tax treatment of digital-asset activity is jurisdiction-specific and evolves as domestic authorities issue guidance. The following points are structural and qualitative; a specific tax analysis for your entity requires current advice from counsel in each jurisdiction.
Singapore operates a territorial tax system. Offshore-sourced income has historically been exempt from corporate tax, though the government has tightened the conditions for that exemption over recent years. There is no capital-gains tax in Singapore – a structural feature that has attracted digital-asset businesses holding appreciated positions. Goods and services tax (GST) treatment of DPT transactions has been clarified by the Inland Revenue Authority of Singapore, and the position has moved in a direction that is broadly favourable to exchange operators. The details require current verification.
The Cayman Islands levies no corporate income tax, capital-gains tax or withholding tax. This makes it an effective vehicle for fund structures and holding companies where the primary concern is tax efficiency at the entity level. However, a Cayman entity that is substantively managed and controlled from another jurisdiction may be treated as tax-resident in that jurisdiction under local rules – a risk that the substance analysis must address.
On banking: Singapore-licensed entities generally have better access to domestic and regional banking relationships than Cayman-registered VASPs seeking the same rails. MAS's regulatory standing means that a Singapore DPT licensee is a known quantity to the compliance teams of major banks. Cayman vehicles routinely bank offshore – in Singapore, the UK, or the US – and must establish their AML credentials with those banks independently of their CIMA registration. In a market where banking denial is a common operational risk for digital-asset businesses, the Singapore licence is a more powerful instrument for opening accounts.
Which Operator Profile Should Choose Which Jurisdiction?
No single jurisdiction is the right answer for every business. The decision turns on four factors: the primary activity, the customer geography, the capital allocation and the banking strategy.
Profile A – Regulated Exchange Serving ASEAN or Global Retail Clients. A spot-trading platform with a significant Singapore or broader ASEAN user base requires a MAS licence as a baseline. A Cayman registration alone does not authorise that activity. The MPI licence under the Payment Services Act is the appropriate instrument. Timeline and capital requirements should be confirmed with current counsel. Banking access is meaningfully better under a Singapore licence. The Cayman structure may sit above the operating entity as a holding company or as the vehicle for a proprietary trading book.
Profile B – Digital-Asset Fund or Asset Manager. A fund structure with no direct retail interface is a natural fit for Cayman. CIMA's regime for virtual-asset investment funds, combined with the absence of Cayman corporate tax, makes this the dominant structure in the institutional digital-asset market. The fund manager, however, must consider whether its management activities require a separate MAS or other licence in the jurisdiction where the management function sits.
Profile C – Institutional Custodian. An institutional custodian serving professional counterparties in ASEAN should seriously consider the MAS route. The regulatory credibility and banking access it confers are material to the institutional client-acquisition process. A Cayman-registered custodian is viable for a fund-service model where clients are already onboarded under the fund framework, but faces a harder path with institutional primes in the region.
Profile D – Token Issuer. A token issuer whose tokens are not securities under Singapore law and who does not conduct ongoing DPT services may not require a MAS licence, though it must assess the financial-promotion rules and any MAS guidance on the specific token. If the tokens are likely to be classified as payment tokens and the issuer will facilitate their exchange, the DPT service licence is likely required. Cayman offers a lighter-touch registration for an issuance vehicle, but the same market-access limitations apply: the Cayman registration does not substitute for in-market authorisation where customers are located.
If a prior application stalled or a bank account was closed mid-process, a second read of the structure often surfaces the underlying cause. Write to our licensing team at info@oboluslaw.com to map the corrected path.
What Are the Most Common Structural Mistakes in This Decision?
A common assumption is that a single offshore registration is sufficient to serve clients in any country. It is not. Both the Cayman and Singapore regimes are local: they authorise activity in and from the relevant jurisdiction, and they do not grant any right to operate in third countries without separate authorisation. An operator who licenses in Cayman and then markets to Singapore residents without a MAS licence is conducting unlicensed DPT activity in Singapore – a regulatory position that MAS has made clear it will enforce.
The second frequent mistake is sequencing: operators often apply for the Cayman registration first because it is perceived as faster, intending to add the Singapore licence later. In practice, the Cayman entity's structure – its shareholding, its AML policies, its operational footprint – then has to be rebuilt to satisfy MAS's substance and governance requirements for the Singapore vehicle. It is more efficient to design the full structure before any application is submitted.
In a recent matter, a custodian operator had established a Cayman-registered entity and was operating a custody wallet service from that vehicle for clients across Southeast Asia. When a correspondent bank in Singapore requested MAS licence evidence, none could be provided. We restructured the group to establish a Singapore operating subsidiary and commenced the MAS application from a position of demonstrated substance – a process that was achievable but that added several months to the operator's go-to-market timeline. Designing that structure from the outset would have been faster and less costly.
Related at OBOLUS
- Digital-Asset Licensing and Registration – How OBOLUS maps the full licence stack across operating, custody and payment layers.
- Crypto Exchange Licensing in Kazakhstan – AIFC – A practical guide to the AFSA regime for exchanges considering the Central Asian hub.
- Client Funds Safeguarding: The Disputes Angle – Why custody structure and safeguarding methodology matter when a recovery matter arises.
FAQ
How long does a crypto licence take to obtain?
Timeline varies materially by jurisdiction and applicant readiness. A Singapore MAS DPT licence for a well-prepared applicant typically extends over multiple months, with MAS's supplementary-question rounds adding to that baseline. A Cayman VASP registration or licence application is generally shorter, but CIMA's processing times have lengthened as application volumes have grown. In both cases, an incomplete first submission is the single biggest cause of delay. Engage counsel to pressure-test the application before it is filed.
Which jurisdiction is best for licensing my crypto business?
There is no universal answer. The right jurisdiction turns on your primary activity, where your customers are located, your capital position and your banking strategy. Singapore's MAS licence is the stronger instrument for exchange and custody businesses targeting ASEAN markets or institutional counterparties. Cayman is a strong choice for fund structures and holding companies. Many mature digital-asset groups use both – a Singapore operating entity and a Cayman holding or fund layer – because each serves a different function in the capital and regulatory stack.
Do I need a separate custody licence?
In Singapore, custody of digital-payment tokens is a regulated activity under the Payment Services Act, and an operator providing custody services alongside exchange or transfer services must ensure its MPI licence explicitly covers that activity. In the Cayman Islands, custody is similarly within the scope of the VASP Act, and a separate registration or licence for custody activity is required where it is not already covered by an existing instrument. The interaction between an operating licence and a custody licence is one of the most frequently misunderstood elements of the licence stack – and a common source of enforcement exposure.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We map the licence stack across operating, custody and payment layers before you commit – so that the structure you build is the structure you can actually bank and operate. Our disputes team coordinates freezing relief and on-chain tracing across leading common-law forums where recovery is time-critical. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com or message us via t.me/oboluslaw.
By Aisha Tan, Licensing & Jurisdictions Analyst – specialising in multi-hub licence structuring for digital-asset exchanges, custodians and fund vehicles across the Asia-Pacific and offshore centre corridors.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.