🇸🇬Financial Licenses by Jurisdiction: A Map of Regimes

When to Get Your Own License — and When to Rent

Not every product needs its own financial license. While volumes are small, it is faster and cheaper to operate under someone else's regulation — as an agent, white-label, or on top of a BaaS provider; how that market works is covered in the License for Rent hub. Your own license becomes justified when the rental economics stop working, when the licensed partner constrains your product or geography, and when counterparties need the regulated status to sit on your own company.

This page is a map of regimes for the second scenario: eighteen payment regimes compared on eight axes — regulator and act, the capital the act requires, the timeline the regulator itself publishes, the safeguarding model and its ceiling, passporting and territory, the agent model, the crypto overlay and the reporting load. Country digests follow for the jurisdictions that carry the most traffic.

The Matrix: Eighteen Payment Regimes on Eight Axes

Capital and timeline are separate questions, and so are the right to hold client money and the duty to protect it. The grid below splits the regimes across eight axes; because eight axes plus an identifier do not fit one readable row, the matrix runs as two tables over the same eighteen rows — entry conditions first, operating conditions second.

The second half of the grid is what the licence does once it exists.

What the grid actually decides

Capital is the smallest of the three numbers that matter. Seven of the eighteen regimes have no statutory capital floor at all — Hong Kong's MSO, the Canadian pair, the US federal registration, Japanese funds transfer — yet none of them is cheap, because the money is tied up elsewhere. Japan takes it as a performance guarantee deposit recalculated every business day for Type I. Canada takes it as a daily per-user ledger and a triennial independent review from which no auditor exemption relieves the firm. The United States takes it as a surety bond and net worth in each of forty-nine states. The only place where the headline capital figure comes close to the real entry cost is the EU and the UK, where €350,000 buys an EMI and the rest of the requirement arrives as an own-funds method.

Timelines diverge from the statute far more sharply than capital does, and the divergence is measurable because two regulators publish it. The UK statute gives the FCA three months from a complete application; the median case closed in the fourth quarter of 2025/26 ran 207 days, the upper quartile 269, and the approval rate for payment institution applications determined in 2025 was 20%. Ireland's published service standard is met in full — 90% of assessment phases inside 90 business days — while the average calendar time from application to authorisation in 2025 was 763 days, with the fastest case at 497. Both statements are true at once, because the standard measures a phase and the calendar measures a file. Lithuania promises three months from proper documents and says in the same breath that documents are almost never free of deficiencies. Everywhere else — Singapore, Hong Kong, the UAE, Kazakhstan, Switzerland, Japan — no target is published at all, and a statutory clock is the start of a negotiation rather than a delivery date.

Safeguarding is the axis that changes the answer most and appears on the fewest shortlists. Four structures are in use, and they behave differently in an insolvency: segregation with a statutory pool and user priority (the EU and the UK), a trust (Hong Kong's SVF, the Canadian first option, Australia's ADI trust account), insurance or a third-party guarantee (the EU's second method, the Canadian second option, the UAE alternative), and permissible investments held in trust by state statute (the United States). Two regimes protect nothing: Hong Kong's MSO creates no duty to segregate customer money, and the Swiss fintech licence states outright that on bankruptcy client assets are neither privileged nor covered by depositor protection. Both are legitimate licences; neither makes a customer balance safe. What each structure actually delivers, across eight regimes, is set out in safeguarding and correspondent accounts.

The remaining three axes decide the shape of the company rather than the price. A passport exists in exactly one place: an EMI or PI authorisation in any EEA state reaches the other twenty-nine by notification, and nothing else on the grid travels — the UK lost it in 2020 and no equivalence replaced it. An agent model exists where the regulator wants a fast on-ramp with someone else carrying the liability: the EU and the UK register agents in days, Japan created an intermediary tier in June 2026, and Singapore and Hong Kong have no such route, so a white-label partner there is a commercial arrangement inside the licensee's own perimeter. And the crypto leg is a separate permission almost everywhere: MiCA's CASP in the EU, VATP with the SFC in Hong Kong, DTSP under FSMA for outbound Singapore services, state overlays in the United States, and in the United Kingdom a new FSMA regime whose gateway opens on 30 September 2026 and which goes live on 25 October 2027.

Choosing by product

The licence follows the product, and five products cover most of the practical range.

The new jurisdictions are unpacked in dedicated articles: US MSB and MTLs — FinCEN plus the state map; the UK — FCA EMI/PI, the safeguarding reform and the crypto regime from 2026; Lithuania — EMI/PI and the specialised bank; Bulgaria — EMI/PI under the BNB, with a presence test written into the statute; Switzerland — the 1b licence and the DLT Act; the UAE — which of the five doors is yours; Kazakhstan — AFSA, the National Bank and Alatau City; Japan and Korea — the three Japanese funds transfer tiers, what the FSA registers actually show, and Korea's real-name bank account gate.

Every crypto entry on this grid is a pointer rather than an answer, because the token leg carries its own regulator, its own capital and its own custody rules in each of those places. Twelve of them — MiCA CASP, Dubai's VARA, the ADGM FSRA, the DFSA, the SFC's VATP, MAS DPT and DTSP, the US trio of state MTL, BitLicense and OCC trust charter, the FCA regime that goes live on 25 October 2027, FINMA, the AIFC and the Japanese and Korean registrations — are compared on capital, published fees, custody and segregation, substance, retail access and the travel rule in the map of crypto licences.

Canada: MSB/FMSB + PSP

Canada is no longer the land of the "light MSB registration." In 2026 a payment product lives in a dual perimeter: MSB/FMSB with FINTRAC covers AML/CFT — who moves the money, where funds come from, what to report — while PSP registration with the Bank of Canada under the Retail Payment Activities Act covers operational risk and safeguarding of client funds. A foreign company falls under the FMSB regime if it effectively directs services at Canadian clients: no office in Canada is required. MSB registration itself is free with no minimum capital, but the real launch budget is C$15–80K for the compliance program, AML officer and bank partner, with C$10–40K per year in maintenance; plan 3–6 months for a full MSB + PSP project.

RPAA has been in full force since September 8, 2025: safeguarding via a trust account or segregation plus insurance, an operational risk framework, an annual report, and a public PSP registry — 1,562 registered in the Bank of Canada snapshot of 13 August 2026, with 459 applications still in review, 253 of the registrations foreign and 46% of registrants declaring that they hold end-user funds. In spring 2026 the PCMLTFA amendments (Royal Assent March 26, 2026) sharply raised penalties — up to C$20M or 3% of gross global revenue for companies — added a ban on cash payments of C$10,000 and above, and mandatory FINTRAC enrolment. The gate is real on the RPAA side too: by 13 August 2026 the Bank had refused 44 applications and revoked 15 registrations, and 257 applicants from the November 2024 window had been waiting 21 months for a decision.

It matters what MSB does not give you: it is not an OSFI banking license, there is no CDIC insurance, and no direct access to Payments Canada — without a bank partner the product will not move. For crypto, add virtual currency dealer status, provincial securities, custody and the Travel Rule (since June 2021 for transfers above C$1,000).

Singapore: PSA — SPI, MPI, e-money and DPT

The Payment Services Act 2019 covers seven services with a single license: account issuance, domestic and cross-border transfers, merchant acquiring, e-money issuance, digital payment token operations and currency exchange. The class is set by volume, not by the service mix: SPI holds as long as turnover stays under S$3M per month per service (S$6M for two or more, average daily e-money float up to S$5M) with S$100K base capital; MPI operates without limits with S$250K capital and a security deposit of S$100–200K with MAS. The narrow Money-Changing License covers only cash currency exchange. The thresholds, section 23 safeguarding and the MAS register numbers are unpacked separately in the guide to Singapore's PSA payment licences.

To launch you need a Singapore company with a permanent place of business, at least one resident director, an appointed AML/CFT officer and fit-and-proper clearance for controllers and management. MAS reviews thoroughly — several months to a year. There is no agent entry as in the EU: either your own license, or white-label on top of a licensed MPI, with responsibility to MAS resting on the license holder.

Crypto within Singapore is a DPT service under the PSA and needs no separate license. Token services from Singapore to clients outside it require a DTSP license under Part 9 of FSMA 2022 from June 30, 2025 (S$250K capital, S$10K annual fee, a compliance officer on the island) — and MAS grants these only in exceptional cases. The retail block is tight: mandatory segregation of client assets, no leverage or referral incentives. Stablecoins await separate amendments: the single-currency stablecoin framework (100% reserves, redemption at par within five business days) was finalized back in August 2023.

Hong Kong: MSO, SVF, SFC Type 9 and VATP

Hong Kong splits its licenses along one question: do you hold the client's money.

MSO

MSO (Customs and Excise Department, AMLO Cap. 615) is the license for remittance and currency exchange without holding balances: no formal capital minimum (the regulator checks "sufficient resources"), a real office and an AML officer as director are required, timeline 6–10 months, license valid 2 years with mandatory renewal. It is the working format for OTC crypto-fiat settlement — as long as there is no public order book (that moves you into the SFC's VASP perimeter). Operating without a license is a criminal offense: up to HK$1M fine and 2 years.

SVF

SVF (HKMA, Cap. 584) is needed the moment a client stores a balance with the issuer: wallets, prepaid cards, B2B programs with real monetary value. The bar is bank-grade: paid-up capital from HK$25M, maintained continuously and scaling with the float, a CEO and CRO approved by HKMA, trust-based float protection, and 12+ months for the full cycle. The register is narrow — 11 non-bank licensees on the HKMA register as of September 2026 (Octopus, Alipay HK, WeChat Pay HK, PayPal HK and HKT Payment among them), with essentially one business-payments licensee: UniCard Solution Limited (SVF0009), Airwallex's Hong Kong vehicle. Office from HKD 15,000/month and CEO/CRO salaries from HKD 80,000/month each come on top of the capital requirement.

SFC Type 9 and VATP

SFC Type 9 is asset management: at least two Responsible Officers (one an executive director, one resident), liquid capital from HK$100K under a license condition not to hold client assets. Boutiques often start by accreditation with an existing Type 9 LC — Hong Kong's analogue of the host AIFM: faster and cheaper than own licensing. VATP (SFC, mandatory since June 2023) is the crypto exchange license; issuance of fiat-referenced stablecoins has been licensed by HKMA under the Stablecoins Ordinance since August 1, 2025 with the same HK$25M threshold — the first licenses went to HSBC and Anchorpoint Financial in April 2026, with only a handful of the 36 applicants making the first round.

Luxembourg: PI, EMI and CASP Under One CSSF Roof

Luxembourg is the "premium" door into the EU: more expensive and slower than Lithuania, but a CSSF license and an account in a local bank raise no questions with correspondents and institutional partners. A PI under PSD2 costs €20–125K in capital depending on services; an EMI under EMD2 — €350K in cash on an account with a Luxembourg bank. Filing runs around €30K in regulatory costs, review takes 6–12 months, and the CSSF's main attention goes to substance: real presence, local management, dedicated compliance and AML functions. Any license passports to 30 EEA countries by notification. PayPal (a full banking license since 2007), Amazon Payments Europe, J.P. Morgan Mobility, Vivid and 3S Money all sit here. The detailed EMI breakdown is in Luxembourg: EMI and payment licence (CSSF).

CASP under MiCA is the single crypto license with an EU-wide passport; in Luxembourg it is issued by the same CSSF. Capital by class: €50K (advice, reception-transmission and execution of orders), €125K (plus custody and exchange), €150K (trading platform); with several classes the highest threshold applies. The fixed-overheads test runs alongside it from the first day of services: the CASP must hold the higher of that figure and a quarter of the preceding year's fixed overheads, and until it has been providing services for a full year it uses the projected fixed overheads for its first 12 months of service provision, as submitted with the licence application (MiCA Art. 67(1)–(2)). The formal Article 63 clock is 25 business days for completeness and 40 for a decision, but the CSSF expects a preliminary presentation meeting, so in practice the process runs longer; the full procedure, budget and choice of jurisdiction are set out in the guide to the MiCA CASP licence. The transition period for old VASP registrations expired on July 1, 2026: without a CASP, crypto business in the EU is now illegal (sanctions from €5M or up to 5% of turnover).

Luxembourg's strength is the combination: a stablecoin under MiCA is an e-money token, which only a bank or an EMI may issue, so a serious issuer holds EMI + CASP under one regulator. That is what Ripple did (EMI on February 2, 2026), Coinbase (EMI on March 5, 2026, MiCA license back in June 2025) and Banking Circle — the first institution with a banking license, EMT and CASP at once (April 15, 2026).

Dominica: Offshore Banking License (FSU)

The exotic entry on the list — a full banking license under the Offshore Banking Act No. 8 of 1996, supervised by the Financial Services Unit at the Ministry of Finance. The regime covers banking in currencies other than the East Caribbean dollar, for non-residents: deposits, cards, lending, custody. Minimum paid-up capital is US$1M in liquid form at the start, but the real project budget is noticeably higher: compliance team, IT, audit, correspondent relationships. For comparison: the CRD sets minimum initial capital for an EU bank at €5 million, while real authorisations are capitalised at €20–50 million and above, because the ECB tests own funds against the losses of the first three business-plan years; the dual national-regulator-then-ECB procedure runs 12–24 months, as the ECB route sets out.

The bottleneck is not obtaining the license but the bank's ability to move payments: WIRE chains from Dominica pass through heightened compliance scrutiny at receiving banks in the EU, Hong Kong and Singapore. There is no deposit insurance; Dominica participates in CRS, and FATCA Model 1 IGA applies with the US. Within this framework operate EQIBank (since 2015: OTC desk, USD/USDT escrow, lombard loans against digital assets; opening from $1,000, transaction fees 0.5–0.75% capped at $500–950) and Nodabank (since 2023: "bank + family office", SEPA 0.35–0.55%, SWIFT 0.6–0.95%, crypto FX 0.75%, onboarding €1,500, €250 monthly). Neither bank works with Russian or Belarusian passports regardless of residence permits elsewhere.

Bank Licences Side by Side

The eighteen regimes above stop short of deposit-taking, and the Dominican licence is the only bank among them. When a product needs deposits, lending on its own balance sheet or a deposit guarantee for its clients, the choice moves to banking licences, and those differ by an order of magnitude in capital and in where the licence works. Lending without deposit-taking is licensed separately: the regimes for non-bank lenders are compared in lending licences by jurisdiction.

The grid splits into three groups. The EU, the UK, the United States and Switzerland sell the full package — deposit guarantee, access to the central bank and the right to lend — and charge for it in capital that nobody publishes as a single figure: the ECB tests own funds against three years of planned losses, which puts real projects at €20–50m against a €5m floor, the OCC and FDIC set capital case by case, and the Bank of England's new bank unit authorises with restrictions first, letting a new bank take no more than £50,000 of deposits during a mobilisation of up to twelve months. Of the four, only an EU licence travels: it passports across the EEA, while a Swiss, UK or US bank serves its own market and reaches Europe only through a separately licensed subsidiary.

The second group is the non-resident bank. A Puerto Rico IFE and a Dominican offshore bank are both barred from serving local residents and both come without deposit insurance; the difference is the dollar. An IFE sits inside the US system and may apply for a Federal Reserve account, and since the 2024 reform it costs US$10m of paid-in capital and eight people on the island. The Dominican licence costs US$1m and settles through correspondents, which is where its real constraint lies. The third group — Georgia, the UAE and Kazakhstan — are domestic licences: a Georgian digital bank goes through the ordinary prudential regime on a staged timetable, the UAE has effectively stopped issuing universal licences, and Kazakhstan's 2026 banking law introduced a basic licence with lower capital, while the fastest entry there has been buying an existing bank.

How to Choose

Does the product hold client money

For transfers, FX or OTC settlement without balances, the light regimes suffice: Canada's MSB/FMSB and Hong Kong's MSO run without a formal capital minimum. The moment a client stores a balance — wallet, prepaid, float — the perimeter changes: Singapore MPI (S$250K), Luxembourg EMI (€350K), Hong Kong SVF (HK$25M) or Canadian PSP registration with safeguarding.

Client geography

A CSSF license passports to 30 EEA countries by notification: one application covers the whole European market. Singapore, Hong Kong and Canadian licenses are point solutions — they cover their own market and demand local substance: a Singapore company with a resident director, a real office and an AML officer in Hong Kong. Canada's FMSB is the entry exception: it reaches Canadian clients without an office in the country.

The crypto component

In the EU, a crypto service without a CASP is illegal since July 1, 2026, and a stablecoin issuer needs the EMI + CASP pairing under one regulator. In Hong Kong, OTC crypto-fiat lives under MSO, an exchange under VATP, stablecoin issuance under HKMA. In Singapore, domestic DPT services sit inside the PSA, while outbound services (DTSP) are licensed by MAS only in exceptional cases. In the United Kingdom the crypto leg is a separate FSMA authorisation rather than an extension of a payments permission: the application gateway opens on 30 September 2026, the regime goes live on 25 October 2027, and a qualifying stablecoin is expressly not electronic money, so an issuer that also wants to issue e-money needs both permissions.

Budget and horizon

The range is wide: a free MSB registration with a real budget of C$15–80K and a 3–6-month timeline — against an SVF with HK$25M of capital, or a banking license from US$1M in Dominica. Read the horizon from what the regulator publishes rather than from the statute: three months in the UK regulations against a 207-day median and a 20% approval rate for payment institutions, and a met 90-business-day service standard in Ireland against an average file of 763 days. When the economics do not close at these numbers, the rational answer is not an own license but renting one: an agent scheme, white-label or BaaS.