What Singapore Founders Learn the Hard Way: A Law Firm Guide to PSA,

What Singapore Founders Learn the Hard Way: A Law Firm Guide to PSA, Shareholders Agreements and Crypto Licensing

A Singapore fintech founder launches an e-wallet product, builds a user base, and begins processing remittances — only to receive a letter from the Monetary Authority of Singapore (MAS) asking why the company is operating without a Payment Services Act (PSA) licence. The product is functional. The traffic is real. The gap was legal all along.

This scenario plays out across Singapore's startup ecosystem with regularity that belies its evitability. Business owners who arrive at PSA compliance questions, shareholders agreement drafts, and crypto licensing frameworks after they have already built the product are paying more in catch-up costs — in legal fees, restructuring charges, and regulatory goodwill — than they would have spent engaging qualified counsel from the beginning. The purpose of this article is to walk through the three areas where that pattern repeats most, and to give business owners a framework for knowing when they need a law firm guide rather than a template.

PSA 2019 and the Activity-Based Licensing Framework

Singapore's Payment Services Act 2019 replaced two older statutes — the Money-Changing and Remittance Businesses Act and the Payment Systems (Oversight) Act — with a single activity-based regime. The structural shift matters for every founder working in payments: the pre-PSA framework asked what kind of business you were; PSA 2019 asks what activities you conduct. That distinction matters because it catches business models that did not exist when the earlier statutes were written.

PSA 2019 covers seven regulated activities across three licence tiers: the Money-Changing licence, the Standard Payment Institution (SPI) licence, and the Major Payment Institution (MPI) licence, with thresholds calibrated to monthly transaction volumes and stored e-money. Businesses that issue prepaid cards, operate e-wallets, or provide cross-border remittance services routinely fall within one of these categories, regardless of whether the founders ever consciously decided to enter regulated financial services.

The question of whether a PSA licence is required cannot be answered by product type alone. It requires mapping the actual customer journey — from account funding through transaction execution to fund withdrawal — against the seven regulated activities and their respective thresholds. That analysis, when done properly, takes weeks, involves genuine regulatory familiarity, and routinely surfaces activities the founders did not realise they were conducting. A law firm guide prepared by lawyers with active FinTech practice experience will do this analysis properly; a template will not.

Cryptocurrency Licensing and MAS Supervision

The PSA framework extends to digital payment token (DPT) services with specific requirements that separate Singapore's regime from jurisdictions with lighter-touch approaches. A cryptocurrency law firm advising a Singapore-based exchange or token platform will typically walk clients through the distinction between SPI and MPI thresholds, the Customer Due Diligence obligations under MAS Notice PSN02, and the MAS licensing application process before any product launch begins.

MAS has been explicit since 2020 that DPT service providers are regulated under the PSA framework. The practical consequence is that fundraising through token issuance, operating a digital asset exchange, or providing custodial wallet services for digital assets all require either an SPI or MPI licence, depending on transaction volumes. Founders who structure around token economics without first characterising the activity under PSA 2019 routinely discover at Series A diligence that the corporate structure needs rebuilding before institutional capital can enter.

The licensing process itself runs for several months and involves a regulatory business plan, an AML/CFT policy framework, and ongoing engagement with MAS through the pre-application discussion process. Prepaid cards and e-wallets storing DPT are subject to additional classification distinctions that affect the licence tier and the supervision obligations that follow. A cryptocurrency loan dispute — where a lender or borrower challenges the enforceability of on-chain terms under Singapore law — adds a contractual layer on top of the regulatory one that requires counsel with both PSA expertise and commercial litigation capability.

Shareholders Agreements: The Clause That Costs More to Fix Than to Draft

The ACRA Model Constitution provides the default constitutional framework for every Singapore private limited company. It covers directors, share transfers, general meetings, and the basic corporate machinery. A shareholders agreement sits above that constitution as a private, contractual document that binds only the parties who sign it. The two documents are not interchangeable, and the failure to understand their relationship is one of the most common sources of preventable disputes in Singapore startups.

Economic terms that founders care most about — preference shares, anti-dilution provisions, drag-along rights, vesting schedules — typically need to appear in both the SHA and the constitution to be enforceable in the way the parties intend. A template-based shareholders agreement may produce a document that looks complete and costs less upfront, but it produces a document that will do what the parties need only if the relationship stays cooperative. The moment a cofounder departs, a funding round collapses, or an acquirer makes an offer, the cost of an ambiguous or absent clause is substantially higher than the legal fees saved at drafting.

Singapore's contract law framework, including the Civil Law Act for cross-border matters and the common law of contract, provides the enforcement backdrop. A breach of contract claim requires establishing that a contract existed, that the other party failed to perform an obligation, and that damages resulted. None of that is obvious from a template. Founders who draft DIY SHA clauses without understanding how those clauses interact with the Model Constitution and the Companies Act frequently discover, only when the dispute arrives, that the provision they relied on is unenforceable in the form they understood it.

Photo by Mikhail Nilov on Pexels

Corporate Governance, IP Protection and the Takeover Code

Beyond PSA compliance and SHA drafting, Singapore companies face ongoing obligations that receive insufficient attention until a problem surfaces. ACRA fines qualified individuals — directors and company secretaries — for failures to file annual returns, maintain registers, and comply with the Companies Act's administration requirements. Companies operating with a non-compliant constitution, or without clarity on whether their activities trigger sector-specific regulations, carry latent exposure that surfaces during fundraising due diligence.

The Singapore takeover code, formally the City Code on Takeovers and Mergers, applies to companies with a primary listing on the Singapore Exchange (SGX). Even private companies structuring for eventual listing benefit from understanding the 30% threshold at which a mandatory general offer is triggered and the continuing obligations that follow a change of control. Founders building for an SGX listing who have not modelled the code's implications on their shareholder structure are building a cap table that may require reconstruction before the listing is possible.

Intellectual property protection in Singapore runs through the Copyright Act 2021, which covers original literary, dramatic, musical and artistic works, and the Patent Act, which governs invention protection for qualifying innovations. Founders building content platforms, AI-powered tools, or software products should understand that AI-generated content does not currently qualify for copyright protection in Singapore, and that IP assignment from founders, contractors, and employees requires explicit written documentation to be effective against the company.

Photo by Yan Krukau on Pexels

When to Engage Counsel Rather Than a Template

The common thread across PSA compliance, SHA drafting, and corporate governance is that the areas where templates fail most are the areas where the stakes are highest. A law firm guide is not necessary for every legal question — straightforward incorporations, simple employment contracts, and basic NDAs are reasonably handled with standard documentation. But the moment the structure involves multiple shareholders, regulated activities, digital assets, or institutional investors, the cost of a template-based approach compounds with every transaction.

Boutique multi-disciplinary law firms in Singapore offer an advantage here that large firms price out of reach for early-stage companies: the ability to address corporate, regulatory, and contentious matters across the full lifecycle without requiring clients to engage a different firm for each discipline. For founders building across Singapore and ASEAN, membership in international networks such as Multilaw provides access to coordinated cross-border legal advice that templates and AI-generated documents cannot replicate.

The decision framework is straightforward. If the document being drafted is the one that will govern what happens when parties disagree, the document deserves proper legal input. That is not a sales position — it is the lesson that every founder who has sat across from opposing counsel in a shareholders dispute or an MAS enforcement proceeding tends to arrive at too late.

Photo by Markus Spiske on Pexels

FAQ

When does a Singapore company need a PSA licence?
A PSA licence is required when a company conducts any of the seven regulated activities — including e-wallet issuance, cross-border remittance, merchant acquisition, and digital payment token services — above the relevant thresholds. The determination requires mapping the actual customer journey against the PSA's activity definitions, not relying on product category alone.

Can a shareholders agreement replace the Model Constitution?
No. The Model Constitution is a public document filed with ACRA that binds the company and its members. The SHA is a private contract binding only the signatories. Economic terms such as preference shares and anti-dilution provisions should appear in both documents for enforceability.

Does copyright protect AI-generated content in Singapore?
Under the Copyright Act 2021, copyright attaches to original works of human authorship. AI-generated content does not currently qualify, which means founders using AI in content or product development should ensure human authorship in the creative process and document IP assignments clearly.

For a matter-specific consultation on PSA compliance, shareholders agreements, FinTech licensing, or any corporate matter, contact Quahe Woo & Palmer LLC at +65 6622 0366 or via the form below.