These papers were:
- Proposed Regulatory Measures for Digital Payment Token Services
- Proposed Regulatory Approach for Stablecoin-Related Activities
Since 2017, MAS has consistently warned the public of the risk of cryptocurrencies speculations, however despite the high risks involved, crypto-assets continue to attract consumers. MAS in the consultation paper Proposed Regulatory Measures for Digital Payment Token Services sets out observations, policy consideration and proposed regulatory measures on Digital Payment Tokens Services Providers (“DPTSPs”).
Three key measures to address:
- Consumers Access
- Business conduct
- Technology
Consumer Access Measures:
Scope of Consumer Access Measures |
MAS proposes that DPTSPs apply consumer access measures to any customer who is:
|
Risk Awareness Assessment |
DPTSPs should assess (using multiple choice tests) whether a retail customer has sufficient knowledge of the risks of DPT services before providing any DPT service to that customer.
|
Restriction on Offering of Incentives |
DPTSPs should not: Provide to a retail customer any credit facility (fiat currencies or DPTs) to facilitate the retail customer’s purchase or continued holding of DPT
|
Business Conduct Measures:
MAS proposes to introduce business conduct standards for DPTSPs in key areas of concern.
Segregation of Customers’ Assets and Risk Management Controls |
DPTSPs should provide written disclosures to customers, which may include:
|
Measures to safeguard private keys and storage of customers’ DPTs |
Management of private keys associated with custodial wallets should be subject to strong controls over producers and staff
|
Identification and Mitigation of Conflicts of Interest |
DPTSPs should:
DPT trading platform operators should not:
|
Disclosure of DPT Listing and Governance Policies |
DPT listing and governance policies that address the following matters:
|
Complaints Handling |
MAS proposes that DPTSPs have in place adequate policies and procedures to handle customer complaint |
Managing Technology and Cyber
MAS requires Digital Payment Token Service Providers to:
- Have effective Framework to identify critical systems
- Ensure that the maximum unscheduled downtime for each critical systems does not exceed a total of 4 hours within any period of 12 months
- Establish a recovery time objective of not more than 4 hours for each critical system.
- Notify MAS as soon as possible, but not later than 1 hour, upon the discovery of a system malfunction or IT security incident
- Implement IT controls to protect customer information from unauthorised access or disclosure
Market Integrity
MAS recognised the crypto market have been susceptible to unfair trading practice of market manipulation, misleading conduct, and insider trading by malicious actors. The regulator also considered the limitations to addressing market integrity risks from cross-border transactions. For this reason, MAS has provided examples of good and bad industry practices to provide guidance.
Implementation
MAS intends to issue final guidelines taking into considerations the responses to the consultation papers and is considering providing a transition period of 6 to 9 months starting from the time of publication for DPTSPS to implement and comply with the guidelines.
How Apex can help
- VASP / CASP Due diligence
- Crypto/Virtual Asset/ VASP- CASP Licensing
- Crypto AML & Compliance support
- Crypto AML Business Risk Assessment (AML BRA)
- Crypto Risk management
- Crypto/ VA and blockchain Training
[1] individual that has S$2 million in net personal assets