{"id":566,"date":"2023-07-12T05:05:55","date_gmt":"2023-07-12T09:05:55","guid":{"rendered":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/?p=566"},"modified":"2023-07-12T23:11:14","modified_gmt":"2023-07-13T03:11:14","slug":"monetary-authority-of-singapores-proposed-measures-to-regulate-dptsps-and-enhance-customer-protection","status":"publish","type":"post","link":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/2023\/07\/12\/monetary-authority-of-singapores-proposed-measures-to-regulate-dptsps-and-enhance-customer-protection\/","title":{"rendered":"Monetary Authority of Singapore\u2019s Proposed Measures to Regulate DPTSPs and Enhance Customer Protection"},"content":{"rendered":"
\"\"<\/a>
By <\/span>Leon Yee<\/em><\/a> and <\/span>Yeo Ming Ze<\/a><\/strong><\/figcaption><\/figure>\n

I.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Introduction<\/strong><\/p>\n

The Monetary Authority of Singapore (\u201cMAS<\/strong>\u201d) published the \u201cResponse to Feedback Received on Proposed Regulatory Measures for Digital Payment Token Services (Part 1)\u201d (\u201cMAS\u2019 Response to the October 2022 Consultation Paper<\/strong>\u201d) on 3 July 2023, announcing new measures for Digital Payment Token service providers (\u201cDPTSPs<\/strong>\u201d) with regards to the safekeeping of customers\u2019 digital assets. The lack of protection and segregation of customer deposits appear to be the chief concern that MAS intends to tackle with their new slate of measures. It is hoped that with the stricter rules in place, it will reduce the risk of loss or misuse of customers\u2019 assets by DPTSPs and facilitate customer\u2019s fund recovery in the event of a DPTSP\u2019s insolvency. This proactive approach demonstrates Singapore’s commitment to creating a more secure environment \u2013 taking lessons from the past experiences of renowned crypto exchanges like Voyager and Celsius. These developments lay the foundation for a resilient and trusted crypto space in Singapore. <\/p>\n

These new measures are proposed following the Consultation Paper on \u201cProposed Regulatory Measures for Digital Payment Token Services\u201d published on 26 October 2022 (the \u201cOctober 2022 Consultation Paper<\/strong>\u201d) aimed at enhancing investor protection and market integrity in digital payment token (\u201cDPT<\/strong>\u201d) services. MAS is now seeking public feedback on the draft legislative amendments to the Payment Services Regulations 2019 (\u201cPSR<\/strong>\u201d), which is expected to be in force by October 2023.<\/p>\n

II.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Hold Digital Assets on Trust<\/strong><\/p>\n

MAS proposes to enact a new Regulation 16C in the PSR which sets out customer assets segregation and custody requirements for licensed DPTSPs. All references to legislation below are based on their draft form.<\/p>\n

Previously, safeguarding obligations under section 23 of the Payment Services Act 2019 (\u201cPSA\u201d) only applied to major payment institutions, which were (among other things) institutions that had an average monthly transaction value exceeding S$3 million for one payment service; or S$6 million for 2 or more payment services (as the case may be). However, MAS will now extend the existing requirements on the safeguarding of customers\u2019 moneys to all DPTSP licensees regardless of whether they constitute major payment institutions. As with the existing requirements, customers\u2019 moneys held by DPTSPs will now be required to be safeguarded with financial institutions in Singapore, which will facilitate the recovery of customers\u2019 moneys in the event of a DPTSP\u2019s insolvency.<\/p>\n

A.\u00a0\u00a0\u00a0 Safeguarding Customers\u2019 Assets in Custody Accounts<\/em><\/p>\n

Regulation 16C(1) stipulates that, among other things, a DPTSP that provides a DPT service must, no later than the next business day after any assets (including DPTs) are received from, or on account of, a customer, deposit the assets (including DPTs) belonging to the customer in a custody account held on trust for the customer that is maintained with a safeguarding institution; or return the assets (including DPTs) to the customer.<\/p>\n

In addition, Regulation 16C(2) provides that all assets (including DPTs) deposited in the custody account mentioned under Regulation 16C(1) cannot be used for the payment of the debts of the DPTSP; and the assets are not liable to be taken under or pursuant to an enforcement order or a process of any court.<\/p>\n

Regulation 16C(3)I further states that a licensed DPTSP must treat and deal with all assets received from a customer as belonging to the customer and deposit all customers\u2019 assets in the custody account.<\/p>\n

(1)\u00a0\u00a0 Who may act as a safeguarding institution? Must a safeguarding institution also be a custodian licensed to provide custodial services under the Securities and Futures Act 2001 (\u201cSFA<\/strong>\u201d)?<\/em><\/p>\n

According to Regulation 16C(8)(e) of the PSR, a safeguarding institution refers to the person that the custody account is maintained with. Section 23 of the PSA further defines a safeguarding institution as including a bank or any other financial institution in Singapore.<\/p>\n

In the October 2022 Consultation Paper, MAS had considered that it might be useful to require DPTSPs to appoint an independent custodian to hold customers\u2019 assets. However, after reviewing the responses to the consultation paper, MAS decided that it would not mandate the use of independent custodians for customers\u2019 assets since there are only a limited number of independent third-party custodians in Singapore currently. In fact, the licensed DPTSP may maintain the custody account itself pursuant to Regulation 16C(9). However, the DPTSP must ensure operational independence of its custody function from other business units. An example of a DPTSP that is already conducting self-custody on behalf of its customers is the Gemini Trust Company (\u201cGTC<\/strong>\u201d) based in New York. GTC custodies its clients\u2019 digital assets in either a depository account or custody account in trust for its clients.<\/p>\n

Putting aside the lack of a statutory definition of \u201cindependent\u201d, it is important to note that there is no legislative requirement for the independent custodians (as referred to herein) to hold a Singapore Capital Markets Services (CMS) license for providing custodial services, as the assets being safeguarded are specifically related to DPTs. Nevertheless, investors may feel more confident with DPTSPs that already work with independent custodians for digital assets that possess such CMS licences as well (as they custodise security tokens). According to market sources, an example would be Hydra X which is licensed by MAS to provide independent custody of digital assets. It appears that HydraX is one of the few independent regulated custodians in the region \u2013 with an emphasis on providing institution-grade digital asset custody solutions for regulated issuers, marketplaces, and operators. Please note that if any such DPTs are considered as a form of security (i.e. security tokens) or some other type of capital market products, the independent custodian would require a CMS license when providing DPT safeguarding services for such security tokens.<\/p>\n

Where it maintains the custody account with a safeguarding institution other than itself:\u2013<\/p>\n

(a)\u00a0\u00a0 Regulations 16C(3)(a), (e) and (f) provide that the licensed DPTSP must assess and be satisfied of the suitability of the safeguarding institution before opening the custody account with the safeguarding institution and, on an annual basis, keep records of the grounds on which the licensed DPTSP was satisfied;<\/p>\n

(b)\u00a0\u00a0 Regulation 16C(3)(b)(i) provides that the licensed DPTSP must give written notice to the safeguarding institution and obtain an acknowledgment from the safeguarding institution that:\u2013<\/p>\n

(i)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 all the customer\u2019s assets deposited in the custody account are held on trust by the licensed DPTSP for the customer;<\/p>\n

(ii)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 the safeguarding institution must not claim any lien, right of retention or sale over any asset standing to the credit of the custody account, except where the licensed DPTSP has obtained the customer\u2019s written consent or in respect of any charges as agreed upon in the terms and conditions relating to the administration or custody of the customer\u2019s assets; and<\/p>\n

(iii)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 the account is designated as a trust account, or a customer\u2019s or customers\u2019 account.<\/p>\n

(c)\u00a0\u00a0 Regulation 16C(3)(b)(ii) provides for the disclosures that the licensed DPTSP must provide to the customers.<\/p>\n

B.\u00a0\u00a0\u00a0 No Commingling or Unauthorised Application of Customer\u2019s Assets\u00a0<\/em><\/p>\n

Regulation 16C(3)(d) provides that the licensed DPTSP must not commingle customers\u2019 assets with any other assets. However, the assets belonging to one customer may be commingled with the assets belonging to other customers, but this pool must be kept separate from the DPTSP\u2019s own assets as provided under Regulation 16C(4).<\/p>\n

Regulation 16C(3)(g) provides that the licensed DPTSP must not transfer any right, interest, benefit or title in the customer\u2019s assets unless the transfer is in accordance with the customer\u2019s written instructions obtained prior to each transfer or is authorised by law in accordance with Regulation 16C(5).<\/p>\n

Regulation 16C(3)(h) provides that the licensed DPTSP must apply the customer\u2019s assets solely for the purposes agreed to by the customer.<\/p>\n

III.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Disclosures, Record-keeping and Reconciliation<\/strong><\/p>\n

A.\u00a0\u00a0\u00a0 Adequate Notice of Risk<\/em><\/p>\n

MAS highlighted that DPTSPs would have to inform customers of the risks of having their digital assets held by the DPTSP. Regulation 16C(3)(b)(ii) provides that the licensed DPTSP must disclose to every customer:\u2013<\/p>\n

(a)\u00a0\u00a0 that the customer\u2019s assets will be held on behalf of the customer in a custody account with a safeguarding institution;<\/p>\n

(b)\u00a0\u00a0 whether or not the customer\u2019s assets are commingled with the assets of other customers and, if so, the risks of such commingling;<\/p>\n

(c)\u00a0\u00a0 the consequences for the customer in respect of the customer\u2019s assets if the safeguarding institution becomes insolvent;<\/p>\n

(d)\u00a0\u00a0 where the DPTSP maintains the custody account itself, the terms and conditions that would apply to its safeguarding of the customer\u2019s assets (including DPTs); and<\/p>\n

(e)\u00a0\u00a0 where the DPTSP maintains the custody account with a safeguarding institution, the terms and conditions agreed with the safeguarding institution that would apply to the safeguarding institution\u2019s safeguarding of the customer\u2019s assets (including DPTs).<\/p>\n

B.\u00a0\u00a0\u00a0 Book-keeping and Reconciliation Obligations<\/em><\/p>\n

Regulation 16C(3)(i) provides that the licensed DPTSP must record and maintain a separate book entry for each customer in relation to the customer\u2019s assets, with the details set out in Regulation 16C(6) which include, recording the description and quantity of assets in each transaction; the price and fee arising from the transaction; and the name of the customer on whose behalf the transaction is entered into.<\/p>\n

Regulation 16C(11) also provides that the licensed DPTSP must conduct daily reconciliation of customers\u2019 assets, including computing the total amount of assets deposited in the customers\u2019 custody accounts.<\/p>\n

IV.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Adequate Systems in Place<\/strong><\/p>\n

Regulation 16C(3)(j) states that the licensed DPTSP must, in a manner that is commensurate with the nature, scale and complexity of its business, maintain adequate systems, processes, controls, human resources, and governance arrangements to:\u2013<\/p>\n

(a)\u00a0\u00a0 ensure the integrity and security of the transmission and storage of customers\u2019 assets; and<\/p>\n

(b)\u00a0\u00a0 reduce the risk of any loss of customers\u2019 assets belonging to its customers due to fraud or negligence.<\/p>\n

Regulation 16C(3)(l) further provides that the licensed DPTSP must ensure effective controls and segregation of duties to mitigate potential conflicts of interest that may arise from the safeguarding of customers\u2019 assets.<\/p>\n

V.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Segregation and Custody Requirements for Exempt DPTSPs<\/strong><\/p>\n

Exempt DPTSPs are DPTSPs that do not require a licence to carry out payment services such as banks licensed under the Banking Act 1970, a merchant bank approved as a financial institution under the MAS Act 1970 or a finance company licensed under the Finance Companies Act 1967. MAS proposes to enact a new Regulation 16D which sets out customer assets segregation and custody requirements for exempt DPTSPs. Regulation 16D is expected to be similar to Regulation 16C and accordingly, exempt DPTSPs will be regulated with the same vigour.<\/p>\n

VI.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Market Integrity<\/strong><\/p>\n

MAS also published a consultation paper on market integrity to mitigate unfair trading practices, concomitant with the proposed amendments to the PSR.<\/p>\n

A.\u00a0\u00a0\u00a0 Fairly, Orderly and Timely Handling and Execution of Customers\u2019 Orders<\/em><\/p>\n

To ensure a fair, orderly and timely execution of customers\u2019 orders, MAS has proposed that DPTSPs should maintain the following policies and procedures:\u2013<\/p>\n

(a)\u00a0\u00a0 The policies and procedures should include the factors which the DPTSP takes into account (such as price, costs, speed, likelihood of execution and settlement, size and nature of the order) and the considerations for determining the relative importance of the various factors (such as the type of customer and the characteristics of the customer\u2019s order), when handling and executing a customer\u2019s orders.<\/p>\n

(b)\u00a0\u00a0 DPTSPs should not receive any commission or other form of payment from other persons for routing customers\u2019 orders to them.<\/p>\n

(c)\u00a0\u00a0 When comparable orders are received from different customers, DPTSPs should handle and execute the orders in accordance with the time of receipt.<\/p>\n

Additionally, DPTSPs should have procedures to correct or cancel error trades, taking into consideration the nature of transaction execution (e.g., on-chain or off-chain) and the processes required to correct or cancel those transactions. Electronic systems for entering customers\u2019 orders should have pre-trade risk controls to mitigate the occurrence and severity of operational errors (e.g., \u201cfat finger\u201d errors).<\/p>\n

The policies and procedures above should also be disclosed to customers for transparency.<\/p>\n

B.\u00a0\u00a0\u00a0 Prevention and Detection of Unfair Trading Practices<\/em><\/p>\n

DPTSPs should conduct surveillance on transactions for signs of unusual or suspicious activities, on a real-time basis. Automated surveillance systems should be used. When there is an unfair trading practice detected, DPTSPs should take an appropriate action like suspending the relevant trade. DPTSPs should also maintain proper records with adequate details of all on-chain and off-chain orders for a period of five (5) years.<\/p>\n

C.\u00a0\u00a0\u00a0 Prohibition of Unfair Trading Practices<\/em><\/p>\n

MAS also intends to introduce statutory provisions to prohibit unfair trading practices for DPTs that are similar to those stipulated in the SFA including, amongst others, prohibitions against false trading, market rigging, market manipulation and insider trading.<\/p>\n

D.\u00a0\u00a0\u00a0 Lending or Staking<\/em><\/p>\n

Lending refers to the process where the DPTSP lends the crypto tokens that it manages on exchanges to other crypto companies to earn interest. Staking refers to the process of locking up the customers\u2019 digital tokens for a period to validate transactions on the blockchain in order for customers to get more tokens as a reward.<\/p>\n

MAS has stated that it would restrict DPTSPs from facilitating lending or staking of their retail customers\u2019 tokens, as these activities are not suitable for the retail investor. DPTSPs can however provide such activities for institutional and accredited investors as they are more sophisticated with more investing experience.<\/p>\n

E.\u00a0\u00a0\u00a0 Cold Wallet<\/em><\/p>\n

Cold wallets, which are not connected to the Internet, are less vulnerable to online hacking and internal fraud attempts. In the October 2022 Consultation Paper, it was proposed that customers\u2019 DPTs could be stored in cold wallets to mitigate the risk of loss of customers\u2019 assets due to security breaches or external theft. In MAS\u2019 Response to the October 2022 Consultation Paper, MAS opined that DPTSPs keep at least 90% of their customers\u2019 DPTs in cold wallets. This would strike a balance between safeguarding the DPTs by preventing fraud via cold wallets and having operational efficiency where if the DPTs were stored in a hot wallet, there would be faster access speed.<\/p>\n

VII.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Conclusion<\/strong><\/p>\n

It appears that MAS is seeking to ensure the safety of Singapore’s crypto space for all investors, including retail, corporate, and institutional players, through the proposed robust safeguarding measures. These measures seek to prevent a repeat of high-profile failures witnessed in the 2022 crypto industry \u2013 such as the recent Gemini lawsuit against Digital Currency Group (\u201cDCG<\/strong>\u201d). The lawsuit alleged a breach of agreement where DCG diverted millions of dollars\u2019 worth of cryptocurrencies intended for an independent custodian, exposing the risks associated with inadequate safeguards. The implementation of these proposed measures by MAS will surely stabilise the crypto market in Singapore and inspire increased demand from investors who will now trust that their assets are protected. With quick regulatory responses aimed at allaying the fears of investors, Singapore\u2019s crypto landscape is poised for a more secure and promising future.<\/p>\n

For More Information<\/strong><\/p>\n

If you have any questions about this article, please contact Leon Yee,<\/a> Chairman of Duane Morris & Selvam\u00a0 if you would like to discuss this update.<\/p>\n

About Duane Morris & Selvam LLP<\/strong><\/em><\/p>\n

Duane Morris & Selvam LLP (DMS) is a joint law venture between international firm Duane Morris LLP (DM) and Singapore-based firm Selvam LLC. DMS runs a unique Latin American-Asian practice out of Singapore, with a team of international lawyers qualified in multiple jurisdictions including Singapore, the US, the UK, Canada, Mexico and Colombia, with substantial experience in international transactions and disputes. DMS also has a wide cooperation network with some of the best Latin American and Asian law firms.<\/em><\/p>\n

Disclaimer: This Alert has been prepared and published for informational purposes only and is not offered, nor should be construed, as legal advice. For more information, please see the firm’s\u00a0full disclaimer<\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

I.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Introduction The Monetary Authority of Singapore (\u201cMAS\u201d) published the \u201cResponse to Feedback Received on Proposed Regulatory Measures for Digital Payment Token Services (Part 1)\u201d (\u201cMAS\u2019 Response to the October 2022 Consultation Paper\u201d) on 3 July 2023, announcing new measures for Digital Payment Token service providers (\u201cDPTSPs\u201d) with regards to the safekeeping of customers\u2019 digital … <\/p>\n

Continue reading “Monetary Authority of Singapore\u2019s Proposed Measures to Regulate DPTSPs and Enhance Customer Protection”<\/span><\/a><\/p>\n","protected":false},"author":435,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[115,2,26],"tags":[],"ppma_author":[79,91],"class_list":["post-566","post","type-post","status-publish","format-standard","hentry","category-blockchain","category-general","category-singapore"],"authors":[{"term_id":79,"user_id":435,"is_guest":0,"slug":"duanemorrisselvam","display_name":"Duane Morris and Selvam","avatar_url":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-content\/uploads\/sites\/51\/2020\/10\/dmlogo.jpg","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""},{"term_id":91,"user_id":434,"is_guest":0,"slug":"lyee","display_name":"Leon Yee","avatar_url":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-content\/uploads\/sites\/51\/2020\/04\/yeeleon-125x150.jpg","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-json\/wp\/v2\/posts\/566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-json\/wp\/v2\/users\/435"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-json\/wp\/v2\/comments?post=566"}],"version-history":[{"count":0,"href":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-json\/wp\/v2\/posts\/566\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-json\/wp\/v2\/media?parent=566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-json\/wp\/v2\/categories?post=566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-json\/wp\/v2\/tags?post=566"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/duanemorrisandselvam\/wp-json\/wp\/v2\/ppma_author?post=566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}