Virtual Asset Service Provider (VASP): The Global Label Behind Singapore’s Crypto Regulation
A Virtual Asset Service Provider (VASP) is the internationally-used term, defined by the Financial Action Task Force, for a business that provides services involving cryptocurrencies or other digital assets — including exchanges, wallet providers, and token issuers — a classification Singapore implements through MAS licensing under the Payment Services Act and the newer Financial Services and Markets Act.
Not financial advice. All figures for educational reference only. Data as at September 2026.
Last updated: September 2026
Key Takeaways
- VASP is a global regulatory term coined by the Financial Action Task Force (FATF), not a Singapore-specific licence name — Singapore implements VASP obligations mainly through Digital Payment Token (DPT) service provider licensing under the Payment Services Act.
- Singapore closed a long-standing regulatory gap in 2022 by requiring Singapore-incorporated entities providing digital asset services solely to overseas customers to also be licensed, addressing what MAS called “regulatory arbitrage” risk.
- VASP obligations under FATF standards include implementing the Travel Rule — collecting and sharing sender and recipient information for crypto transfers above a threshold, similar to bank wire transfers.
- MAS has taken a notably restrictive stance on retail-facing crypto marketing and has publicly discouraged retail speculation in digital payment tokens, even while licensing legitimate VASP activity.
- Not every crypto-related business in Singapore is a licensed VASP — checking the MAS Financial Institutions Directory or the Financial Services and Markets Act registry remains the most reliable way to verify a platform’s status.
What Is a Virtual Asset Service Provider (VASP)?
Virtual Asset Service Provider is the term used by the Financial Action Task Force (FATF), the global standard-setter for anti-money laundering and counter-terrorism financing policy, to describe any business conducting one or more of a defined set of activities involving virtual assets (broadly, cryptocurrencies and similar digital assets) on behalf of another person. This includes exchanging virtual assets for fiat currency or other virtual assets, transferring virtual assets, safekeeping or administering virtual assets or instruments enabling control over them, and participating in or providing financial services related to a token issuer’s offer or sale.
Singapore, as a FATF member jurisdiction, is obligated to implement VASP regulation domestically. Rather than creating a single licence literally named “VASP”, Singapore folds these obligations primarily into the Digital Payment Token (DPT) service provider category under the Payment Services Act 2019, supplemented since 2022 by provisions under the Financial Services and Markets Act (FSM Act) that specifically target Singapore-incorporated entities providing digital token services exclusively to persons outside Singapore — a gap that existed because such entities previously fell outside the Payment Services Act’s territorial scope.
How Does VASP Regulation Work in Singapore?
MAS regulates virtual asset activity through overlapping frameworks depending on where the business is based and who it serves:
| Business Profile | Applicable Framework | Key Requirement |
|---|---|---|
| DPT services to Singapore customers | Payment Services Act (DPT licence, SPI or MPI class) | MAS licensing, AML/CFT, consumer risk warnings |
| Singapore-incorporated, serves only overseas customers | Financial Services and Markets Act (FSM Act) | Separate MAS licensing to close the offshore gap |
| Securities-type tokens (e.g. tokenised bonds, equity-like tokens) | Securities and Futures Act | Capital markets services licence, prospectus rules may apply |
A core FATF requirement implemented through this framework is the “Travel Rule”: VASPs must collect and transmit originator and beneficiary information (name, account/wallet identifiers) for virtual asset transfers above a specified threshold, mirroring the information banks must share for wire transfers under the traditional financial system. This is designed to prevent virtual assets from becoming an easy channel for money laundering or terrorism financing precisely because crypto transfers can otherwise move value across borders with less visible identity information than bank transfers. MAS has also been notably vocal in discouraging retail speculation in digital payment tokens, restricting how DPT service providers can market their services to the Singapore public, including bans on advertising in public spaces and via social media influencers, even while continuing to license legitimate institutional-grade VASP activity.
VASP Regulation Example
A crypto exchange is incorporated in Singapore but, prior to 2022, served only customers based in other countries, deliberately avoiding the Payment Services Act’s licensing requirement because its digital token services were not provided “in Singapore” to Singapore persons — a structure sometimes used to access Singapore’s reputable corporate environment while avoiding the compliance cost of MAS licensing.
After the Financial Services and Markets Act came into force, this same exchange, being Singapore-incorporated, now falls within scope even though it serves only overseas customers. It must apply for a licence under the FSM Act’s digital token service provider framework, demonstrating adequate AML/CFT controls, fit-and-proper management, and Travel Rule compliance for cross-border transfers — or it must restructure to relocate its incorporation outside Singapore if it wishes to continue operating without MAS licensing.
This closed a meaningful gap: MAS’s stated concern was that unlicensed Singapore-incorporated entities conducting purely offshore crypto business could still damage Singapore’s reputation as a well-regulated financial centre if they were later linked to money laundering or fraud, even though no Singapore residents were technically their customers.
Advantages of VASP Regulation
- Closes cross-border regulatory gaps. Extending obligations to Singapore-incorporated entities serving overseas customers prevents the jurisdiction from becoming a base for under-regulated crypto activity.
- Aligns Singapore with global AML/CFT standards. Implementing FATF’s Travel Rule and VASP obligations keeps Singapore’s financial system interoperable with international counterparts and reduces blacklisting risk.
- Protects retail consumers from aggressive marketing. MAS’s marketing restrictions reduce the risk of inexperienced retail investors being drawn into high-risk crypto speculation through slick advertising.
- Creates a credible licensing pathway for legitimate businesses. Well-run digital asset businesses can build trust with institutional partners and banks by holding a genuine MAS licence rather than operating in a grey zone.
- Improves traceability of virtual asset flows. Travel Rule compliance makes it harder to use crypto transfers for anonymous illicit finance compared to unregulated peer-to-peer alternatives.
Risks and Limitations
- Licensing doesn’t eliminate crypto’s underlying volatility. A MAS-licensed VASP is regulated for AML/CFT and operational integrity, but this says nothing about the price risk of the digital assets themselves.
- Not all platforms accessible to Singapore users are licensed. Overseas-based exchanges without a Singapore licence can still be accessed by tech-savvy Singapore users via VPN or direct sign-up, operating entirely outside MAS’s regulatory perimeter.
- Travel Rule compliance can be technically inconsistent globally. Because not all jurisdictions have implemented FATF’s Travel Rule at the same pace, cross-border transfers between a compliant Singapore VASP and a non-compliant overseas counterpart can create friction or gaps.
- Regulatory scope continues to evolve. As new token structures and DeFi-adjacent services emerge, the boundary of what counts as a regulated VASP activity in Singapore is still being clarified by MAS on a case-by-case basis.
- No deposit insurance for crypto holdings. Unlike bank deposits, assets held with a licensed VASP are not covered by SDIC insurance, regardless of the platform’s licensing status.
VASP (FATF Term) vs Digital Payment Token Service Provider (Singapore Term)
| Feature | VASP (FATF Global Term) | DPT Service Provider (Singapore PS Act Term) |
|---|---|---|
| Origin | International standard defined by FATF | Singapore-specific implementation under the Payment Services Act |
| Scope | Broad — exchanges, wallets, custodians, token issuance services | Specifically digital payment token exchange, transfer, and custody services |
| Licensing authority | Varies by country implementing FATF standards | Monetary Authority of Singapore (MAS) |
| Additional SG-specific coverage | N/A | Financial Services and Markets Act extends coverage to offshore-only Singapore entities |
| Practical relationship | The umbrella concept | Singapore’s specific licensing mechanism implementing the VASP concept |
Source: FATF Recommendation 15 guidance, Payment Services Act 2019, Financial Services and Markets Act 2022, MAS regulatory notices, 2026.
The Bottom Line
For Singapore users of crypto platforms, understanding the VASP concept is important because it explains why MAS licensing now extends beyond just exchanges serving Singapore customers to include Singapore-incorporated entities serving anyone globally. Checking whether a digital asset platform actually holds a MAS licence — Digital Payment Token service provider status under the Payment Services Act, or a licence under the Financial Services and Markets Act — remains the clearest way to distinguish regulated activity from an unlicensed operator.