TOKENIZATION COMPLIANCE
The Vanderbilt Terminal for Global Tokenization Regulation
INDEPENDENT INTELLIGENCE FOR DIGITAL ASSET COMPLIANCE
Global RWA Tokenized: $18.9B ▲ +142%| MiCA Status: Live ▲ Dec 2024| VARA Licensed Platforms: 80+ ▲ +12| SEC Actions YTD: 14 ▲ +3| Tokenized Bonds Issued: $10.2B ▲ +68%| BlackRock BUIDL: $531M ▲ Mar 2024| STO Volume YTD: $3.8B ▲ +44%| Active Jurisdictions: 20+ ▲ +4| Global RWA Tokenized: $18.9B ▲ +142%| MiCA Status: Live ▲ Dec 2024| VARA Licensed Platforms: 80+ ▲ +12| SEC Actions YTD: 14 ▲ +3| Tokenized Bonds Issued: $10.2B ▲ +68%| BlackRock BUIDL: $531M ▲ Mar 2024| STO Volume YTD: $3.8B ▲ +44%| Active Jurisdictions: 20+ ▲ +4|

MAS Singapore: Digital Payment Token Regulation and Project Guardian

MAS has built the most institutionally sophisticated digital asset regulatory regime in Asia — rigorous in AML and consumer protection, collaborative in innovation policy, and uniquely active in multi-institution tokenization pilots.

Overview

The Monetary Authority of Singapore (MAS) is Singapore’s central bank and integrated financial regulator, responsible for conducting monetary policy, supervising financial institutions, developing financial sector policy, and administering the financial regulatory framework. MAS has emerged as the most institutionally sophisticated and internationally regarded digital asset regulator in Asia, combining a rigorous AML and consumer protection framework with active support for regulated innovation through Project Guardian — a multi-bank, multi-jurisdiction tokenization pilot program that has produced more institutional tokenization pilots than any equivalent regulatory initiative globally.

MAS licenses Digital Payment Token (DPT) services — including cryptocurrency exchanges, OTC trading desks, and custodians — under the Payment Services Act 2019 (PSA). By 2024, MAS had issued more than 60 DPT service licenses, building a licensed digital asset sector that includes both global exchange operators and Singapore-domiciled fintech firms.

DPT LICENSEES
60+ (2024)
Payment Services Act 2019 · MPI and Standard Payment Institution licenses · DBS · Coinbase SG · Ripple

Payment Services Act 2019: The DPT Licensing Framework

The Payment Services Act 2019 (PSA) is the primary legislation governing digital payment token services in Singapore. The PSA regulates seven categories of payment services, of which the DPT service category is most relevant to digital asset businesses. The PSA provides two license tiers:

Major Payment Institution (MPI) license — required for firms with monthly transactions exceeding SGD 3 million or daily DPT holdings exceeding SGD 5 million. MPI licensees are subject to the full range of PSA requirements including capital adequacy (base capital of SGD 250,000 or higher, depending on activity scope), customer due diligence, AML/CFT requirements, travel rule compliance, technology risk management, and consumer protection safeguards.

Standard Payment Institution (SPI) license — available for firms with transaction volumes below the MPI thresholds. SPI capital requirements are lower (SGD 100,000 base capital), and some regulatory requirements are scaled proportionately.

MAS’s licensing process for DPT service providers is comprehensive: applicants must demonstrate fit and proper management and major shareholders, maintain adequate financial resources, implement AML/CFT systems meeting MAS Notice PSN02 standards, comply with technology risk management requirements under MAS TRM guidelines, and satisfy consumer protection conditions including asset segregation and disclosure requirements.

Notable MAS licensees include DBS Vickers (the brokerage arm of DBS Group), Coinbase Singapore, Ripple Markets AP, and Circle Internet Financial (Singapore). The presence of these global firms reflects Singapore’s importance as a regional hub for regulated digital asset activity.

Project Guardian: Institutional Tokenization at Scale

Project Guardian is MAS’s flagship institutional tokenization initiative, launched in 2022 as a collaborative program between MAS and financial industry participants to explore the potential of asset tokenization and DeFi applications in wholesale financial markets. By 2024, Project Guardian had grown to encompass more than 15 pilot programs across 7 industry workstreams, with participants including JPMorgan, DBS Bank, SBI Digital Markets, HSBC, UBS, Citi, Franklin Templeton, and numerous other major financial institutions.

Project Guardian’s structure is notable for its multi-institution, multi-jurisdiction design. Rather than creating a single sandbox environment under MAS’s exclusive supervision, Project Guardian pilots involve institutions from multiple jurisdictions (Singapore, the US, Switzerland, the UK, Japan) transacting on common infrastructure, testing regulatory interoperability alongside technical interoperability.

Key Project Guardian pilot workstreams have included:

Fixed Income Tokenization: JPMorgan, DBS, and SBI Digital Markets executed tokenized government bond transactions across borders, testing cross-institution atomic settlement and the regulatory treatment of tokenized securities transfers between Singapore and other jurisdictions.

FX and DeFi: JPMorgan and SBI used a modified Aave DeFi protocol to execute a live FX spot trade between tokenized Singapore dollar and Japanese yen deposits, demonstrating that DeFi infrastructure (automated market makers, liquidity pools) can be adapted for institutional wholesale FX markets with appropriate compliance controls.

Fund Management Tokenization: Franklin Templeton, UBS, and other asset managers piloted tokenized fund share subscriptions and redemptions, testing the integration of on-chain fund operations with MAS-regulated fund administration requirements.

Institutional Grade Digital Bond Issuance: Multiple Project Guardian pilots have issued digital bonds through DLT infrastructure, testing primary issuance mechanics, secondary market transfer with KYC enforcement, and coupon payment automation through smart contracts.

PROJECT GUARDIAN PILOTS
15+ Pilots · 7 Workstreams
JPMorgan · DBS · SBI · HSBC · UBS · Franklin Templeton · Multi-jurisdiction

Stablecoin Framework (August 2023)

MAS published its final stablecoin regulatory framework in August 2023 — one of the first comprehensive stablecoin-specific regulatory frameworks globally. The framework applies to single-currency stablecoins (SCS) pegged to the Singapore dollar or any G10 currency, issued in Singapore, with a circulation value exceeding SGD 5 million.

Key requirements under the MAS stablecoin framework include:

Reserve backing: 100% reserve backing with high-quality liquid assets, held in a segregated account separate from the issuer’s proprietary assets, with the reserve valued at par or at market value (whichever is lower).

Reserve composition: Reserves must consist of cash, cash equivalents, or debt securities with a residual maturity of three months or less, denominated in the peg currency.

Independent audit: Monthly attestation of reserve adequacy by an independent third-party auditor, with public disclosure of the attestation results.

Capital adequacy: Base capital of SGD 1 million, with additional capital based on risk-weighted assets.

Redemption rights: Holders must be able to redeem SCS for the peg currency at par value within five business days of a redemption request.

The MAS stablecoin framework is more prescriptive than MiCA’s e-money token provisions in some respects (particularly the five-day redemption window and monthly attestation requirements) and reflects MAS’s view that stablecoins serving as payment instruments require robust reserve standards to maintain monetary stability.

Travel Rule (June 2023)

MAS implemented FATF’s Travel Rule requirements for DPT service providers in June 2023, applicable to transfers of SGD 1,500 or more between PSA-licensed DPT service providers and other VASPs. The implementation gives Singapore one of the lower thresholds among major digital asset jurisdictions (the FATF recommended threshold of USD/EUR 1,000 was adopted with SGD conversion) and reflects MAS’s consistent application of FATF’s recommendations in full.

Licensed DPT service providers must collect originator information (name, account identifier, and — where technically feasible — physical address or date of birth) for outgoing transfers and must screen incoming transfers for compliance with originator identification requirements. Transfers to unhosted wallets require enhanced due diligence and risk-based supplementary information collection.

Technology Risk Management Guidelines

MAS’s Technology Risk Management (TRM) guidelines — which apply to all MAS-supervised financial institutions, including DPT service providers — set comprehensive cybersecurity, IT governance, and operational resilience requirements. For digital asset custodians, the TRM guidelines’ requirements for secure key management are directly applicable: MAS expects digital asset custodians to implement hardware security modules, MPC, or equivalent institutional-grade key protection, with documented key ceremony procedures, access controls, and recovery mechanisms.

Further Resources