A Guide to Digital Bank Regulation in Singapore
You may have heard about digital banks generally, or even that Singapore has allowed a limited number of organisations to operate as digital banks here, and are curious about what this means for you. You may also be the owner of an organisation looking to apply for a digital banking licence in Singapore.
In both cases, this article will cover the following topics which may be able to address some of the common questions that one may have on the subject:
What are Digital Banks and How Do They Differ From Traditional Banks?
Digital banks are institutions that offer the same banking services as traditional banks, except that they operate entirely online, without any physical infrastructure. This includes not having any physical branches, automated teller machines (ATMs) or cash deposit machines (CDMs).
As the name suggests, all banking services offered by digital banks are done digitally (i.e. online), and customers can access these services from their computers or smartphones.
Who is Permitted to Operate a Digital Bank?
Currently, the Monetary Authority of Singapore (MAS) has awarded Singapore’s first four digital bank licenses to the following applicants:
- A consortium comprising Grab Holding Inc. and Singapore Telecommunications Ltd.
- An entity wholly-owned by Sea Ltd
- A consortium comprising Greenland Financial Holdings Group Co. Ltd, Linklogis Hong Kong Ltd, and Beijing Co-operative Equity Investment Fund Management Co. Ltd.
- An entity wholly-owned by Ant Group Co. Ltd.
These four licensees were chosen out of 21 applicants including e-commerce companies, technology and telecommunications firms, and financial-technology firms such as Razer, ByteDance Technology, Xiaomi Finance etc. MAS considered all of the applications and selected the eventual licensees based on the following criteria:
- Whether they have a strong value proposition and whether they have a plan and ability to incorporate innovative use of technology to serve customer needs and reach under-served segments.
- Whether they are able to maintain a digital banking business that is prudent and sustainable;
- Their growth prospects and other contributions to Singapore’s status as a financial centre.
What are the Types of Digital Bank Licences Currently Available?
There are currently two types of digital bank licences under the digital bank licensing framework:
- A digital full bank (DFB) licence; and
- A digital wholesale bank (DWB) licence.
The main difference between the two types of licenses pertains to the type of banking services that they can provide, and the customer pool that they can offer their services to.
However, even for licensees which have been awarded a DFB licence, they will commence operations as a restricted DFB, before becoming a full functioning DFB. There is no fixed time period before a restricted DFB becomes a full functioning DFB, but the estimated length of the transition phase, as provided by MAS, is 3 to 5 years from the commencement of its operations. The purpose of this transition phase is to minimise the risk to retail users, as well as to generally guard against the risk of a qualifying but untested business model. Thus, during this transition phase, the performance of the restricted DFB will be assessed by MAS, which will look out for the strength of the internal controls, track record of compliance with regulations, sustainability of the business etc.
As mentioned above, the differences between a DFB (full functioning DFB and restricted DFB) and a DWB are broadly summarised in the following table:
|Digital Full Bank (DFB)||Digital Wholesale Bank (DWB)|
|Restricted DFB||Full functioning DFB|
|Permissible activities||DFBs can conduct all banking businesses.||DWBs can only conduct the proposed businesses outlined in their application.
However, after 2-3 years, DWBs may seek MAS’ approval to expand their business scope.
|Allowed customer pool||For the first 1 – 2 years, a restricted DFB will not be able to widely take deposits from the public. Instead, it will be able to take deposits from its shareholders, employees, related entities and any other persons who are familiar with the DFB’s parent or major shareholders’ businesses.
After the first 1 – 2 years, the restricted DFB will then be able to take deposits from the public (i.e. both retail and corporate customers).
|Full functioning DFBs can take deposits from and provide banking services to the public (i.e. both retail and corporate customers).||DWBs can only take deposits from and provide banking services to small- and medium-sized enterprises and other corporate customers.
However, MAS may allow DWBs to serve retail customers (e.g. provide financial advice) on an exceptional basis, but the DWB have to make its intention to do so known in their application, and explain how serving retail customers is connected to and is necessary to its provision of banking services to its corporate customers.
|Deposit cap||S$50 million in aggregate (which can be progressively increased after the first 1 – 2 years).
S$75,000 per individual
|No deposit cap||No deposit cap|
How to Apply For a Digital Banking Licence
Regardless of whether you are thinking of applying for a DFB licence or a DWB licence, the general application process is the same. The two steps in the application process are:
- First, you need to fill in the Application Form which can be downloaded from the MAS website. In the application form, you will have to provide information like the background information and financial information of your institution, and documents like a letter from your home country’s supervisory authority approving the establishment of a digital bank in Singapore etc.
- Next, you have to email your application to Digital_Banks@mas.gov.sg during the stipulated application period. You can find out more about the timelines for the application on the MAS website.
However, there are certain requirements that you will have to meet before you are even eligible to apply for a digital banking licence. These requirements are:
- For DWBs, applicants must be incorporated in Singapore. As for DFBs, applicants must be anchored in Singapore, controlled by Singaporeans, and headquartered in Singapore. Whether an applicant is anchored in Singapore will be assessed by MAS based on the following factors:
- Whether the DFB and its parent entity publicly identify Singapore as their home country.
- Whether the DFB’s parent entity’s global head office is in Singapore.
- Whether the effective management of the DFB and its parent entity is situated in Singapore.
- If the DFB has no parent entity, whether the shareholder with the largest shareholding and has effective control over the DFB is a Singaporean individual or entity that fulfils the conditions above.
- At least 1 entity in your applicant group must have 3 or more years of track record in operating an existing business in the technology or e-commerce field.
- The following persons must be fit and proper, in accordance with the MAS Guidelines on Fit and Proper Criteria:
- The applicant group and their directors.
- The substantial shareholders of the proposed digital bank, and controllers holding not less than 12% of the total number of issued shares of the proposed digital bank or are in a position to control voting power of not less than 12% of the proposed digital bank.
- The directors and executive officers of the proposed digital bank.
- You will have to demonstrate your ability to meet the applicable minimum paid-up capital requirement at the onset and the minimum capital funds requirement on an ongoing basis. You can do this by submitting a written confirmation provided by your shareholders on their commitment of funds.
- The minimum paid-up capital for a full functioning DFB is S$1.5 billion. However, as DFBs start out as restricted DFBs, the minimum paid-up capital required is S$15 million, which will be progressively increased.
- The minimum paid-up capital for DWBs is S$100 million.
- You must demonstrate how your applicant group will satisfy the selection criteria discussed above, and to do so, must:
- Provide a clear value proposition, incorporating the innovative use of technology to serve customer needs and reach under-served segments of the Singapore market;
- Demonstrate that the proposed digital bank’s business model is sustainable;
- Provide a 5-year financial projection of the proposed digital bank, which must show a path towards profitability. The assumptions of the financial projection must be reviewed by an external and independent expert; and
- Submit a feasible plan that can facilitate the orderly exit of the proposed digital bank. This plan must include details such as what will trigger the digital bank to exit the market, what strategies/solutions it intends to implement when exiting the market, and how this will play out in different hypothetical scenarios.
- The shareholders of the proposed digital bank must also commit to providing a letter of responsibility and a letter of undertaking that MAS may require in respect of the operations of the proposed digital bank.
Are Digital Banks Regulated Differently From Traditional Banks?
DFBs are subject to the same regulatory requirements as existing full banks, while DWBs are subject to the same regulatory requirements as existing wholesale banks. Full banks and wholesale banks refer to two types of existing traditional banks – just like the difference between DFBs and DWBs, full banks can provide the full suite of banking services to the public, whereas wholesale banks can provide all banking services except Singapore dollar retail banking activities.
The requirements that apply to the existing banks, DFBs and DWBs generally relate to cyber security, money-laundering and terrorism financing risks, and the conduct of non-financial businesses. These requirements are set out in the Banking Act and are captured in the Notices and Guidelines published by MAS, which can be found here for full banks, and here for wholesale banks.
The main regulatory obligations of existing banks, which would also apply to digital banks, span the following key areas:
- Anti-Money Laundering and Countering the Financing of Terrorism Requirements: A digital bank must comply with the requirements in the MAS Notices on Prevention of Money Laundering and Countering the Financing of Terrorism. This includes having systems in place for risk assessment and mitigation, record keeping and customer due diligence.
- Risk Management Practices – Technology Risk: A digital bank must abide by the technology risk management principles and best practices set out by the MAS. This is to guide the financial institutions to establish sound and robust technology risk governance and oversight, as well as maintain IT and cyber resilience.
- Other related regulations also include:
- Putting in place frameworks and processes to identify critical system failures which could cause significant disruption to the operations of the bank or access to the bank’s services;
- Maintaining high availability, recoverability, data protection and incident reporting for such critical system failures; and
- Adopting measures to improve and ensure the digital bank’s cyber hygiene (i.e. the health, and security of the bank’s users, devices, networks, and data).
- Outsourcing: The Guidelines on Outsourcing sets out MAS’ expectations of a bank that has entered or is planning to enter into an arrangement to outsource any of its business functions to a service provider. The guidelines include that the bank should have a framework to evaluate the risks and materiality of all outsourcing arrangements, and have a proper approval chain for outsourcing arrangements, among others.
Additional regulatory requirements
Additionally, in light of SMS-phishing scams that have become prevalent nowadays, MAS and the Association of Banks in Singapore are also introducing a set of additional measures to bolster the security of digital banking. Broadly, these measures require banks to have in place measures to prevent and detect scams, and how incidents will be handled in the event of a scam. Specifically, banks will be required to implement measures like:
- Removing clickable links in emails or SMSes to customers.
- Having more frequent scam education alerts.
- Sending notifications to existing known contact channels whenever there is a request to change a customer’s contact information.
- Providing an emergency self-service “kill switch” for customers to suspend their accounts quickly if they suspect their bank accounts have been compromised.
If a digital bank intends to carry out certain regulated activities or financial advisory services, it would also have to meet the relevant regulatory requirements under the Securities and Futures Act (e.g. having measures in place to provide monthly statements of account to customers and deposit customers’ assets into a separate custody account) and the Financial Advisers Act (e.g. having measures in place to carry out due diligence exercises to ascertain whether the marketed product is suitable for the target customers ).
More information about what these activities regulated under the Securities and Futures Act or financial advisory services entail, or how one can go about applying for the relevant licences, can be found on the MAS website.
While there are some differences between digital banks and traditional banks, the regulations that apply to both are largely identical, some of which have been summarised above.
If you are looking to apply for a digital bank licence or are considering setting up a digital bank, you should consult a lawyer with expertise in banking and finance-related matters for further advice or information on digital banking licences and the regulatory obligations of digital banks in Singapore. The lawyer will also be able to assist you with the preparation of your application for a digital banking licence if you decide to apply for one and ensure that your application satisfies the selection criteria so as to maximise your chances of successfully obtaining the licence.
- What is a Nominee Director, How to Appoint and Other FAQs
- Independent Directors: Who are They and What is Their Role?
- Board of Advisors: Who Are They and What Is Their Role?
- Appointing Company Directors in Singapore: Eligibility, Process etc.
- Managing Director vs CEO in Singapore: Roles and Obligations
- Guide to Directors' Remuneration in Singapore
- Directors' Duties in Singapore
- Shadow Directors: Who are They and What Duties Do They Owe to the Company?
- How to Remove a Director from a Company in Singapore
- Removal and Resignation of Company Auditor in Singapore
- Appointing a Company Secretary: Roles and Responsibilities
- Appointing an Authorised Representative for Foreign Companies in Singapore
- Process Agents in Singapore
- Share Buybacks in Singapore: Procedure, Cost and More
- How to Split Shares (or Stocks) in a Singapore Company
- 2 Ways to Remove a Singapore Company Shareholder ASAP
- What are Treasury Shares? Guide for Singapore Companies
- Guide to Paid-Up Capital in Singapore (Is $1 Enough?)
- Preparing a Register of Shareholders for a Singapore Company
- How to Issue Shares in a Singapore Private Company
- Guide to Transferring Shares in a Singapore Private Company
- Your Guide to Share Certificates in Singapore: Usage and How to Prepare
- Shareholder Rights in Singapore Private Companies
- Shareholder Roles and Obligations in Singapore Companies
- Dividend Payments Guide for Singapore Business Owners
- Share Transmission: What Happens If a Shareholder Dies in Singapore?
- How to Reduce the Share Capital of Your Singapore Company
- Buy-Sell Agreements: How to Write & Fund Them in Singapore
- Oppression of Minority Shareholders
- Is Your Business Collaboration Competition Law-Compliant?
- Explained: Registered Filing Agent for Singapore Businesses
- Transfer Pricing Obligations of Singapore Companies
- Adhering to Trading Sanctions and Restrictions in Singapore
- Cyber Hygiene Compliance Guide for Singapore Companies
- Essential Regulatory Compliance Guide for Singapore Companies
- Dormant Companies and Their Filing Obligations in Singapore
- Anti-Money Laundering Regulations and Your Business: What You Need to Know
- Price-Fixing, Bid-Rigging and Other Anti-Competitive Practices to Avoid
- Legally Conducting Lucky Draws for Singapore Businesses
- Restaurant Inspection and Food Safety Rules in Singapore
- Does Your Company Need a Legal Team (In-House Counsel)?
- Acqui-Hiring of Singapore Companies: How Does It Work?
- How to Change the Name of Your Singapore Company
- Can Directors be Liable for Company Debts in Singapore?
- Company Loans to Directors/Shareholders in Singapore
- 3 Types of Insurance Every Singapore Business Needs
- Creating and Registering Charges in Singapore: Guide for Companies
- Guide to Effective Business Continuity Planning in Singapore
- Business Asset Sale & Disposal in Singapore: How Do They Work?
- Business Partnership Disputes in Singapore: How to Resolve
- How to Commence a Derivative Action on Behalf of a Company in Singapore
- Business Will: How to Pass on Your Business to Your Successors in Singapore
- Record-Keeping Requirements for Singapore Companies
- Company Constitutions in Singapore and How to Draft One
- Company Memorandum and Articles of Association
- Company Resolutions: What are They?
- Board Resolutions in Singapore
- Minutes of Company Meeting in Singapore: How to Record
- How to Set Up a Register of Controllers
- How to Set Up a Register of Nominee Directors
- Guide to Filing Financial Statements for Singapore Business Owners
- Filing Annual Returns For Your Business
- Carbon Tax in Singapore: What is the Rate and Who Must Pay?
- Laws and Penalties for GST Evasion in Singapore
- 6 Common Taxes in Singapore For Individuals & Businesses
- Singapore Corporate Tax: How to Pay, Tax Rate, Exemptions
- Start-Up Tax Exemption Guide for New Singapore Companies
- GST Registration: Requirements and Procedure in Singapore
- What is Withholding Tax and When to Pay It in Singapore
- Singapore Influencers: Here's How to Calculate Your Income Tax
- Tax Investigation of Tax-Evading Business Owners in Singapore
- Small Business Accounting Services in Singapore
- Company Audits in Singapore: Requirements and Exemptions
- Suspect a PDPA Data Breach? Here's What to Do Next
- Must You Notify PDPC About a Data Breach in Your Business?
- Data Room: Should Your Singapore Company Set Up One?
- Victim of a Data Breach? Here’s What You Can Do
- Summary: Your Organisation's 10 Main PDPA Obligations
- Essential PDPA Compliance Guide for Singapore Businesses
- PDPA Consent Requirements: How Can Your Business Comply?
- Is It Legal for Businesses to Ask for Your NRIC in Singapore?
- Here's a 7-Step Plan for Companies to Prevent Unauthorised Disclosure When Processing and Sending Personal Data
- Cloud Storage of Personal Data: Your Business’ Data Protection Obligations
- GDPR Compliance in Singapore: Is it Required and How to Comply
- Appointing a Data Protection Officer For Your Business: All You Need to Know
- How Can Companies Dispose of Documents Containing Personal Data?
- Check the Do-Not-Call Registry Before Marketing to Singapore Phone Numbers
- How to Legally Install CCTVs for Home/Business Use in Singapore
- Is Web Scraping or Crawling Legal in Singapore?
- Legal Options If Employees Breach Confidentiality in Singapore
- Social Media Marketing: Legal Guide for Singapore Businesses
- Your Guide to E-commerce Website Terms of Service in Singapore
- Dealing with Defamation of Your Business: Can You Sue?
- Sending Email Newsletters That Comply With Singapore Law
- A legal guide to drafting a social media policy for your company
- Your Guide to a Media Release Form in Singapore
- Your Guide to an Influencer Marketing Agreement in Singapore
- Outdoor Advertising: How to Legally Display Public Ads in Singapore
- A Guide to Digital Bank Regulation in Singapore
- Applying for a Major Payment Institution Licence in Singapore
- Applying to the MAS FinTech Regulatory Sandbox
- Payment Services Act Licensing Guide for Fintech Businesses
- How to Get a Payment Service Provider Licence in Singapore
- Financial Adviser's Licence Guide for Singapore Businesses
- Capital Markets (CMS) Licence Requirements in Singapore
- How to Offer E-Wallet Services in Singapore: Licensing Guide
- Digital Payment Token Services Licence Guide in Singapore
- How to Legally Offer Crypto Services in Singapore
- How to Restore a Struck-Off Company in Singapore
- Claw-Back of Assets From Unfair Preference and Undervalued Transactions
- Should You Save or Close Your Zombie Company in Singapore?
- Voluntary Suspension of Business in Singapore: How to Handle
- Winding Up a Singapore Company: Grounds and Procedure
- Closing Your Singapore Business: What You Need to Settle
- Striking Off a Company
- Restoring a Company That was Struck Off Without You Knowing
- Dissolution of partnerships in Singapore
- What Should a Creditor Do When a Company Becomes Insolvent?
- How to File a Proof of Debt Against a Company in Liquidation
- Validation of Payments Made by Companies Being Wound Up