Indonesia (ID)

Licensing, Authorisation & Market Access

Singapore's market-access gate is the Payment Services Act 2019, which establishes modular activity-based licensing over seven regulated payment activities with three tiers — Money-Changing, Standard Payment Institution (SPI) and Major Payment Institution (MPI). The Act commenced on 28 January 2020 and was substantively amended on 4 April 2024, repealing the prior Payment Systems (Oversight) Act and the Money-Changing and Remittance Businesses Act. A defining structural feature is the bank-vs-non-bank distinction: banks are exempt from PS Act payment-service licensing, while non-bank payment institutions and e-money issuers carry the full licensing burden. This bank-PSP versus non-bank-PI/EMI asymmetry is the spine of the module.

Tier allocation is volume- and float-driven. An MPI licence is required where monthly transactions exceed S$3m for any single service, S$6m for two-or-more services, or where daily outstanding e-money exceeds S$5m; the SPI tier carries a minimum base capital of S$100,000 alongside a Singapore-incorporation or branch requirement. These thresholds in s.6(5) determine when a non-bank operator crosses into the higher-burden MPI tier with its safeguarding and security-deposit obligations.

The most material recent shift is the expanded-scope commencement of 4 April 2024 (the appointed day under the Payment Services (Amendment) Act 2021), which brought digital-payment-token (DPT/VASP) activity more fully into AML/CFT, user-protection and financial-stability requirements. From 26 August 2024, certain new and DPT-variation applications require a legal opinion and an independent external auditor assessment — heightening the cost and time of market entry for crypto and VASP payments players.

Outlook

The licensing baseline is established and stable, but the gatekeeping trajectory is tightening at the DPT/VASP edge. Forward attention centres on whether the stablecoin enabling legislation expected mid-2026 alters the activity-mapping for single-currency stablecoin issuance, which would feed back into licensing scope.

Stablecoins & Digital Money

MAS finalised its single-currency stablecoin (SCS) regulatory framework on 15 August 2023. It covers single-currency stablecoins pegged to SGD or any G10 currency and issued in Singapore, requiring issuers to meet value-stability, reserve-asset (denominated in the peg currency), redemption and disclosure requirements. Only compliant SCS may be labelled 'MAS-regulated stablecoins' — making the label a commercial credentialling asset. Non-bank SCS exceeding S$5m in circulation are regulated as a stablecoin-issuance service, carrying base capital of S$1m or 50% of annual opex (whichever is higher) and barred from lending or staking. This positions Singapore alongside MiCA and the US GENIUS Act as a leading stablecoin regime.

The critical open question is legislative implementation. On 13 November 2025 MAS announced it would hold trials to issue tokenised MAS bills in 2026 and bring in laws to give full effect to the SCS framework, with effect expected mid-2026. As of the 27 June 2026 cycle the research did not confirm whether the enabling PS Act amendments have been enacted — the status remains announced-but-not-confirmed-legislated. This item carries an Assessed confidence following a challenger soft-flag downgrade. Until the enabling legislation is enacted, issuers cannot rely on regulated-stablecoin status, and the SCS label remains prospective.

Outlook

This is the highest-priority watch item in the Singapore baseline. The mid-2026 enabling legislation must be re-verified next cycle against the MAS PS Act page. Enactment would convert the SCS framework from prospective to operative and trigger label-eligibility for issuers.

Legal & Litigation

Enforcement is the escalating thread in the Singapore payments environment. On 4 July 2025 MAS imposed composition penalties totalling S$27.45m on nine financial institutions for AML/CFT breaches linked to the August 2023 S$3bn money-laundering case; on 27 June 2025 it penalised five Major Payment Institutions providing cross-border money transfer for PSN01 breaches covering CDD, screening and wire-transfer controls. This is the defining 2024-25 enforcement thread and directly targets cross-border MPIs, reinforcing MAS's gatekeeper posture and raising compliance-cost expectations sector-wide.

The penalty structure underpinning this is broad. The PS Act carries criminal, civil and administrative penalties: unlicensed operation can attract fines up to S$125,000 plus three years' imprisonment for individuals and up to S$250,000 for entities, and MAS may publicly direct firms to cease operations (as with Binance in 2021). The MAS Enforcement Report covering July 2023–December 2024 recorded 163 review or investigation cases (19 unlicensed-activity, 16 AML/CFT) and S$4.4m in penalties. The stated 2025-26 enforcement priorities are AML/CFT controls and digital-asset enforcement capability — directly relevant to DPT/VASP payments operators. A related dashboard datapoint is the S$2.5m composition penalty imposed on Swiss-Asia Financial Services on 7 May 2024.

Outlook

The enforcement trajectory is escalating, with AML/CFT and digital-asset capability as the declared 2025-26 priorities. Cross-border MPIs and DPT operators should expect sustained gatekeeper-cost pressure. The illicit-finance dimension of this thread is cross-routed to the Financial Integrity Monitor.

Conduct, Safeguarding & Promotions

The live conduct and safeguarding architecture for non-bank PI/EMI operators rests on the PS Act and the Payment Services Regulations. MPIs holding customer money or issuing e-money must safeguard relevant moneys via one of three MAS-approved methods: an undertaking or guarantee by a Singapore bank or prescribed FI (reg.15/16), a trust account or segregation of funds (reg.17), or another prescribed manner. Critically, e-money is not a bank deposit and is not deposit-insurance protected — shifting the customer-protection burden onto safeguarding mechanics rather than deposit guarantees. The regime also incorporates the s.22 security deposit (reg.18), s.24 personal-account restrictions, and daily reconciliation of safeguarded funds.

Conduct prohibitions reinforce the separation between e-money wallets and banking-like propositions. It is an offence for a payments licensee to grant credit to individuals, lend customer money, or use customer money or interest to finance its business. Personal payment accounts containing e-money are subject to a S$5,000 stock cap and a S$30,000 annual flow cap, with no cash withdrawals and no deposit-taking-like activity. These hard caps constrain product design for non-bank issuers and keep their propositions structurally distinct from bank deposit accounts.

Outlook

The safeguarding and conduct baseline is established. The non-bank-versus-bank distinction remains the analytical axis: absence of deposit insurance makes customer-fund protection design a core trust differentiator for e-money issuers, and any future tightening of safeguarding methods or account caps would directly reshape non-bank product economics.

Operational Resilience & Critical Infrastructure

Operational resilience for both banks and payment institutions is anchored by the MAS Technology Risk Management (TRM) Guidelines (updated January 2021), the legally binding Notice 655 (Cyber Hygiene) and Notice 658 (cyber-incident reporting). Though the TRM Guidelines are advisory, MAS treats them as effectively mandatory and enforces via inspection, and institutions remain accountable for IT outsourcing and cloud risk on a non-delegable basis. MPIs must notify MAS within one hour of a customer-affecting outage, conduct annual penetration testing, maintain a tested incident-response plan, and reconcile safeguarded funds daily. The treated-as-mandatory posture means non-bank PSPs face the same resilience expectations as banks.

The live development is reporting consolidation. From 1 February 2026, financial institutions must submit reportable incidents using an updated Incident Reporting Template via the MAS-FI Transactions Platform (MAS-Tx), following the December 2025 MAS Circular on FI Incident Reporting. The template spans Technology Risk Management, Outsourcing, Business Continuity and Payment Services — consolidating four previously separate incident streams into a single platform and raising reporting-consistency expectations across PSPs and banks. A challenger note records that the T1 MAS Circular (16 Dec 2025) is available and preferable; only the T3 source was carried in research.

Outlook

The MAS-Tx consolidation is now in force; the trajectory is advancing toward more standardised cross-stream incident reporting. A source-tier upgrade to the primary MAS Circular is recommended for the next cycle.

Scheme & Network Compliance

Singapore operates a market-led interchange regime. There is no regulatory cap on interchange fees — Visa, Mastercard and Amex set rates themselves, with Amex operating a three-party model versus the four-party Visa/Mastercard model. Rather than capping fees, MAS encourages competition and lower-cost domestic rails such as PayNow, NETS and SGQR; surcharging credit-card transactions is not prohibited. In a 2026 parliamentary reply MAS noted that card revenue averaged roughly 3% of banks' total revenue over four years. This contrasts with the EEA's 0.2%/0.3% interchange caps and preserves scheme economics, even as MAS's pro-competition steer toward domestic rails pressures card-scheme volumes. Both banks and non-banks operate under these scheme rules.

At the acceptance layer, a dashboard datapoint records that from 2023 NETS terminals in Singapore accept Mastercard and Visa, allowing merchants — including small businesses below S$1m turnover — to add international schemes alongside NETS through a single PSP without upgrading terminals. This single-terminal multi-scheme acceptance lowers small-merchant onboarding friction.

A gap note applies: primary scheme-rulebook text is absent (member-channel restricted), so interchange and scheme-economics intelligence rests on parliamentary replies and vendor explainers.

Outlook

The scheme-economics posture is stable. The structural pressure is the pro-competition steer toward domestic A2A rails, which over time erodes card-scheme volume share even without an interchange cap.

Payment Corridor Dynamics

The domestic A2A backbone is PayNow, a central addressing scheme on FAST infrastructure enabling instant SGD transfer using NRIC, phone number or UEN. FAST is strictly SGD between participating institutions in Singapore; for international value transfer, SWIFT or specialised cross-border providers are used. PayNow serves as the proxy layer for cross-border linkages.

Those linkages now span three regional corridors: PayNow is linked to Thailand's PromptPay (April 2021), India's UPI (21 February 2023) and Malaysia's DuitNow (November 2023), enabling instant cross-border transfers via mobile-number proxies. Typical daily caps are SGD1,000 (or MYR3,000 / THB25,000) per user, with a SGD1 minimum, operating 24/7. Singapore also participates in the BIS Project Nexus initiative. A challenger note corrected the PayNow-UPI launch date to 21 February 2023, with a T1 MAS/RBI source available but only the T3 carried. These low-cost proxy-based corridors directly compete with card-scheme and remittance economics in ASEAN and India flows.

In 2025 Singapore announced plans to consolidate PayNow, FAST and Interbank GIRO under a single entity, signalling national-rail governance reform.

Outlook

The corridor trajectory is advancing. The 2025 scheme-consolidation plan is a horizon item for 2026 with implications for governance and non-bank access; the Project Nexus linkage is the multilateral extension of the bilateral proxy corridors.

Industry Structure & Commercial

Singapore is the dominant regional payments hub. The Singapore Fintech Map 2025 lists roughly 520 fintechs, with payments the largest category at around 20.4% (some 106 firms); the country counted 8 fintech unicorns in 2025 and holds a sixth-place global fintech ranking. The market blends incumbent banks (DBS, OCBC, UOB) with cross-border specialists (Nium, Airwallex, Thunes, Wise) and e-money players (Grab Financial Group, YouTrip). Notable MPI holders include Grab Financial Group, Revolut, Wise and MatchMove. This establishes the competitive landscape baseline, concentrating talent, capital and licensing in the non-bank segment.

Funding concentration underlines the structural pull: Singapore captured roughly 84% of total Southeast Asia fintech funding in 9M 2025 (followed by Jakarta at 4%) out of a regional total of about US$839m, implying roughly US$705m to Singapore. The region recorded three $100M+ rounds (Thunes, Airwallex, Bolttech) and 13 fintech acquisitions in the period. A challenger note flags that a separate ~US$319m figure appears category-scoped, so the absolute Singapore figure is to be reconciled. This is the structural market-analysis view, distinct from the discrete commercial events carried in W13.

Outlook

The structure is stable: payments remains the dominant fintech category and Singapore the dominant regional hub. The funding denominator needs reconciliation, but the directional finding — overwhelming concentration of regional capital in Singapore — holds against an APAC funding slowdown to a decade low.

Merchant Acquiring & Risk

Merchant acquisition is a regulated PS Act activity — accepting or processing payment transactions for a merchant resulting in a transfer of money — and requires an MPI licence above SPI thresholds, placing it within the non-bank PI/EMI licensing perimeter. Singapore lacks a domestic dispute statute, so chargeback and high-risk treatment defaults to international card-scheme rules: the Visa Dispute and Fraud Monitoring Programs, the Mastercard Excessive Chargeback Merchant programme, and the MATCH-list. High-risk MCCs such as crypto, forex and iGaming face rolling reserves of roughly 5-15% held for 6-12 months. The binding chargeback-ratio thresholds are set by the card-network monitoring programmes rather than by any Singapore-specific rule.

A methodology gap applies: merchant-acquiring and high-risk MCC treatment rests on international scheme programmes and generic vendor guides, with no Singapore-specific acquirer-stress or chargeback-ratio data surfaced. Merchant-acquiring operations remain a known WPM under-indexing risk.

Outlook

The module is stable but under-indexed. Acquirer risk treatment is scheme-rule-bound; absent a domestic dispute statute, any shift in network monitoring-programme thresholds — not domestic regulation — would be the operative change vector. Targeted sourcing on Singapore-specific acquiring economics is recommended.

Product Innovation & Market Development

The digital-money innovation agenda runs through Project Orchid, launched in 2021 to develop digital-SGD infrastructure and Purpose Bound Money (PBM). The Orchid Blueprint (2023) sets out the settlement-ledger, tokenisation-bridge, programmability-protocol and name-service infrastructure supporting single-currency stablecoins, tokenised bank liabilities and CBDC. MAS assessed no urgent need for a retail CBDC but commenced wholesale CBDC development for interbank settlement, with first live issuance announced in 2023. Pilots span OCBC, UOB, Ant International, Fazz, Grab, Amazon, HSBC and JPMorgan, drawing in both banks and non-banks. Programmable money, tokenised bank liabilities and wholesale CBDC together build the infrastructure layer for next-generation payment and settlement products.

This is the thematic product-access regulatory view, distinct from the discrete commercial product launches and deals tracked in W13.

Outlook

The trajectory is advancing. The horizon item is MAS's announced plan to hold trials to issue tokenised MAS bills in 2026, which advances the wholesale digital-money agenda. Retail CBDC remains assessed as not urgently needed, so the near-term build-out is wholesale and programmable-money focused.

Consumer Protection & APP Fraud

MAS and IMDA implemented the Shared Responsibility Framework (SRF) for phishing scams on 16 December 2024, assigning FIs and telcos anti-scam duties and requiring payouts to victims under a 'waterfall' liability approach — FI first, then telco, then consumer. Investigations must complete within 21 business days for straightforward cases or 45 for complex ones, with recourse via FIDReC or the courts. Revised E-Payments User Protection Guidelines took effect on the same date. A fraud-surveillance duty took effect 16 June 2025, and the Protection from Scams Act (2025) empowers police to issue Restriction Orders to banks. The SRF covers phishing scams specifically.

The waterfall liability model materially shifts scam-loss exposure onto FIs and telcos where their duties are breached, driving fraud-surveillance investment and reshaping consumer-redress economics. Both banks and non-banks fall within the framework.

Outlook

The consumer-protection architecture is advancing and now substantially in force. The combination of the SRF, the fraud-surveillance duty and police Restriction Orders signals a maturing, layered anti-scam regime; the operative environment shift is the cost of fraud-surveillance investment and the redistribution of scam-loss liability.

AML/CFT & Financial Crime

This module is sourced from the Sentinel.gi feed; the intelligence below is attributed to Sentinel, and original illicit-finance analysis (typologies, predicate offences, sanctions exposure) belongs to the Financial Integrity Monitor rather than this monitor.

Per the Sentinel feed, MAS imposes AML/CFT requirements on payment service providers through Notices — with separate requirements for DPT service providers and other PSPs — applying CDD, screening and wire-transfer controls consistent with FATF standards. DPT services carry first-dollar AML obligations with no low-risk exemption, removing any carve-out and raising the baseline compliance cost for crypto and VASP payments operators. The relevant instruments are the PSN01-type notices for other PSPs and PSN02-type notices for DPT providers.

Also carried from Sentinel is the AML context underpinning the W7 enforcement thread: the August 2023 S$3bn money-laundering case — involving illicit assets from overseas scams and online gambling converted into luxury goods and real estate — drove MAS to impose S$27.45m in composition penalties on nine financial institutions on 4 July 2025 for shortcomings in customer risk assessment, source-of-wealth corroboration, transaction monitoring and STR follow-up.

Outlook

The AML/CFT baseline is established via Sentinel. The payments-relevant trajectory is the DPT first-dollar obligation and the gatekeeper-cost expectations ahead of FATF review. Illicit-finance analysis is cross-routed to the Financial Integrity Monitor; this module carries only the payments-context surface.

Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank-versus-non-bank settlement-access asymmetry. MEPS+ (the MAS Electronic Payment System) is MAS's real-time gross settlement system for high-value SGD interbank transfers, owned and operated by MAS and designated a systemically important payment system. It uses common SWIFT standards with queue management, gridlock resolution and intra-day liquidity facilities, and settles scripless SGS on a delivery-versus-payment basis. All banks in Singapore hold a current account with MAS and may participate directly; non-participating banks may appoint participating banks as agents. CLS and traditional correspondent banking remain the main FX settlement methods. This is the bank-PSP settlement layer.

The structural access shift favours non-banks. Since February 2021, eligible non-bank financial institutions can access FAST and/or PayNow as direct participants; FAST inter-participant clearing obligations settle in MEPS+ on a deferred net settlement basis in two cycles per business day. Direct non-bank access to the instant rails reduces reliance on bank sponsors and lowers a structural barrier to non-bank PSP competition — narrowing, at the instant-payments layer, the historic bank-vs-non-bank access asymmetry.

Outlook

The settlement baseline is established. The directional finding is structurally favourable to non-bank PSPs: direct FAST/PayNow access since 2021 erodes the bank-sponsorship barrier even as high-value RTGS settlement via MEPS+ remains bank-anchored. The 2025 PayNow/FAST/GIRO consolidation plan is the governance development to watch.

Commercial Intelligence (M&A, Investment & Product)

This module carries discrete commercial events. In investment, Singapore-based global payments fintech Thunes completed a US$150m Series D in April 2025, led by Apis Partners and Vitruvian Partners — its largest raise to date — to accelerate US expansion of its Direct Global Network spanning 130+ countries. The deal value is publicly disclosed. Separately, Airwallex raised US$301m and Bolttech raised US$147m in H1 2025, both disclosed, cementing Singapore's position as a leading regional payments hub even as Asia-Pacific fintech funding slumped to a decade low of US$4.3bn across 363 deals in H1 2025.

In M&A, Southeast Asia fintechs recorded 13 acquisitions in 9M 2025 — a 43% drop versus 9M 2024. The highest-valued was ASCENT, acquired by KFin Technologies for US$34.7m (disclosed), with Singapore capturing 84% of regional fintech funding in the period. The sharp M&A slowdown signals a consolidation pause, with the largest deal modest in value.

Outlook

The commercial cycle is funding-led rather than consolidation-led: mega funding rounds (Thunes, Airwallex, Bolttech) coincide with a 43% fall in M&A volume. The trajectory is active on investment and slowing on M&A. These are discrete events distinct from the structural market analysis in W6 and the thematic product-access view in W9.