Payment Services Act Crypto Provisions and Requirements: Key Rules by Region

When you send crypto from one platform to another, you might think it's just a simple transfer. But behind the scenes, governments are watching closely. The Payment Services Act crypto provisions aren't just paperwork-they're rules that can shut down platforms, freeze accounts, or even lead to criminal charges if ignored. And these rules aren't the same everywhere. Singapore, Japan, the EU, and the US each have their own version, with deadlines, technical requirements, and penalties that don't overlap. If you're running a crypto business-or even just using services that handle your digital assets-knowing which rules apply to you isn't optional. It’s survival.

Singapore’s No-Excuse Deadline: FSMA and the Travel Rule

Singapore’s Monetary Authority of Singapore (MAS) doesn’t play around. Under the Financial Services and Markets Act (FSMA), every crypto platform operating in or targeting Singapore had to be licensed by June 30, 2025. No extensions. No grace periods. If you weren’t approved by that date, you were shut down. No warnings. No second chances.

The real kicker? The Travel Rule. This isn’t just about reporting large transactions. It’s about sharing detailed customer data-name, address, ID number-every time a transfer exceeds a certain amount, whether it’s Bitcoin, Ethereum, or a stablecoin. Both the sender and receiver must collect and exchange this information. It doesn’t matter if the blockchain is public or private. The rule applies regardless. This level of surveillance matches what banks have to do under anti-money laundering laws. For users, that means less anonymity. For platforms, it means building systems that can track, verify, and transmit personal data across borders.

Add to that a ban on credit card purchases of crypto. MAS found too many retail investors were using debt to gamble on volatile assets. So now, if you’re in Singapore, you can’t swipe your card to buy Bitcoin. You have to use bank transfers or wallet deposits. And platforms must assess whether you’re even suited to trade crypto-based on your income, experience, and risk tolerance. If they fail, they’re fined. If they ignore it, they’re out.

Japan’s Systematic Evolution: Cold Storage, Licensing Tiers, and 2025 Amendments

Japan didn’t just react to crypto. It built a roadmap. The Payment Services Act started in 2009 to regulate money transfers. When Bitcoin took off, Japan created a registration system in 2016. Then came the 2019 Amendment-and everything changed.

First, the term “virtual currency” was replaced with “crypto assets.” That wasn’t just a rename. It signaled a shift from treating crypto as a novelty to recognizing it as a financial instrument. Then came the cold wallet rule: all user funds must be stored offline. No exceptions. If a platform keeps more than 5% of assets online, it’s in violation. This was a direct response to exchange hacks that wiped out millions.

They also introduced a three-tier licensing system:

Type 1: Full exchange services with custody
Type 2: Exchange services without custody
Type 3: Payment processing and wallet services

Each tier has different capital requirements, reporting obligations, and audit frequencies. And in March 2025, Japan’s Cabinet approved new amendments. While details are still being finalized, early signals point to tighter advertising rules, clearer rules around DeFi protocols, and expanded oversight of derivatives trading involving crypto.

The message? Japan doesn’t ban innovation. It structures it. If you want to operate here, you play by their rules-step by step.

A Japanese crypto vault with digital assets stored in lantern-shaped cold wallets, lit by golden hour glow.

Europe’s PSD2 and MiCA Overlap: When Crypto Becomes a Payment

In Europe, things get messy because two big rules are trying to work together: the Payment Services Directive 2 (PSD2) and the Markets in Crypto-Assets (MiCA) regulation.

The European Banking Authority (EBA) said this: if you’re moving crypto to pay for goods or services, it’s a payment service. That means you need PSD2 authorization. The deadline? March 2, 2026. After that, any platform offering crypto-to-fiat transfers must be licensed under PSD2.

But here’s the twist: if you’re just swapping Bitcoin for Ethereum? That’s not a payment service. It’s excluded. Same if you’re trading crypto for crypto. Only transactions that convert crypto into real money-like paying rent with USDC-are covered.

So what do you need to comply?

Strong Customer Authentication (SCA) for wallet logins and transfers
Report all payment fraud within 24 hours
Calculate your own funds like a bank-no shortcuts

What’s ignored? Things like IBAN requirements, maximum transaction times, and open banking rules. The EBA says: focus on the core risks. Don’t overload platforms with unnecessary banking rules.

The goal? Protect consumers without strangling innovation. But if you’re a platform trying to serve EU customers, you now need to build two compliance tracks: one for MiCA (for asset tokens), and one for PSD2 (for payment functions). It’s complex. It’s expensive. And it’s mandatory.

The U.S. CLARITY Act: Categorizing Crypto, Not Regulating It

The U.S. didn’t pass one law. It passed a framework to stop the chaos.

The CLARITY Act divides crypto into three buckets:

Digital commodities (like Bitcoin and Ethereum): regulated by the CFTC
Investment contract assets (tokens that promise profit): regulated by the SEC
Permitted payment stablecoins (pegged 1:1 to USD): regulated under a new, lighter framework

This matters because it ends the “regulation by enforcement” era. Before, the SEC just sued platforms they didn’t like. Now, if your token is a commodity, the SEC can’t touch it. If it’s a security, they can. No gray area.

Broker-dealers can now custody and trade digital commodities without fear of SEC penalties. Exchanges can list both securities and commodities side by side. Recordkeeping rules were updated to accept blockchain ledgers as official books. Even DeFi protocols get exemptions if they meet certain conditions.

The U.S. approach isn’t about control. It’s about clarity. If you know which bucket your asset falls into, you know which regulator to talk to. No more guessing. No more surprise lawsuits.

Three glowing regulatory paths for crypto assets—commodity, security, stablecoin—guarded by gentle spirits at dawn.

Why This All Matters-Even If You’re Not a Company

You might think: “I’m just a user. I don’t run a business.” But that’s the problem.

If your favorite exchange gets shut down in Singapore because it didn’t meet Travel Rule standards, your funds are frozen. If Japan bans hot wallets, and your exchange doesn’t comply, you lose access. If Europe forces platforms to add SCA, and you can’t log in without two-factor authentication, you’re locked out.

These rules aren’t just for companies. They’re for you.

Platforms have to choose: comply or disappear. And if they disappear, you lose your assets. Or worse-you get caught in a legal gray zone where your transaction is flagged as suspicious because the platform didn’t collect your ID.

The global patchwork of rules means your crypto experience depends on where you live, where your exchange is based, and what kind of crypto you hold. There’s no universal standard. No global system. Just a collection of national laws, each with different deadlines, definitions, and punishments.

What You Need to Do Right Now

If you’re a user:

Check where your exchange is licensed. If it’s not licensed in Singapore and you’re based there, move your funds.
Make sure your exchange uses cold storage. If it doesn’t, ask why.
Never use a credit card to buy crypto. It’s banned in Singapore and risky everywhere.
Enable two-factor authentication everywhere. It’s not optional anymore.

If you’re a business:

Map your operations. Which countries do you serve? Which rules apply?
Build separate compliance systems for each jurisdiction. Don’t try to use one system for all.
Track deadlines: June 30, 2025 (Singapore), March 2, 2026 (EU), and ongoing U.S. rulemaking.
Don’t assume U.S. rules apply globally. Japan and Singapore don’t follow CLARITY.

The crypto world is no longer lawless. It’s regulated. And the rules are getting stricter, not looser. The question isn’t whether you’ll be affected. It’s whether you’re ready for what’s coming next.

What happens if a crypto platform doesn’t comply with the Payment Services Act in Singapore?

If a platform doesn’t comply with Singapore’s FSMA by June 30, 2025, it is immediately shut down. The Monetary Authority of Singapore (MAS) has no grace periods or extensions. The platform loses its license, must stop all operations, and cannot offer services to Singapore residents. Users may lose access to their funds until the platform is either licensed or assets are transferred to a compliant entity.

Does the Travel Rule apply to all crypto transactions?

No. The Travel Rule only applies to transfers above a certain threshold-typically $1,000 or equivalent in crypto. Both the sending and receiving platforms must collect and share customer information, including names, account numbers, and identification details. This applies regardless of the cryptocurrency used. Smaller transfers and peer-to-peer transactions outside regulated platforms are not covered.

Why does Japan require cold wallet storage for crypto assets?

Japan mandates cold wallet storage to protect users from hacks. After major exchange breaches in the past, regulators decided that keeping over 95% of customer assets offline is the only reliable way to prevent theft. Hot wallets (connected to the internet) are limited to 5% of total holdings, enough only for daily withdrawals. This rule is non-negotiable for licensed exchanges.

Can I use a U.S.-based crypto exchange in the EU?

Not without compliance. Even if your exchange is based in the U.S., if it serves EU customers, it must obtain PSD2 authorization by March 2, 2026, for any crypto-to-fiat payment services. U.S. regulatory frameworks like the CLARITY Act do not override EU law. Non-compliant platforms risk being blocked from operating in the EU market.

Are stablecoins treated differently under these regulations?

Yes. Stablecoins pegged 1:1 to fiat currency (like USDC or EURC) are often treated as payment instruments, not investment assets. In the EU, they fall under PSD2 if used for payments. In the U.S., the CLARITY Act gives them a separate category with lighter rules. In Singapore, they’re still subject to Travel Rule and anti-money laundering checks. But they’re not treated like Bitcoin or Ethereum-regulators see them as digital cash.