Skip to content
Licensing
HOME / Licensing
The operator’s job to be done

Licensing

Which licence a stablecoin or tokenisation operator needs, who regulates it, who already holds it, and what the landscape implies for sequencing, jurisdiction by jurisdiction and activity by activity. Asia is covered in depth; the US and EU are carried as the reference regimes operators benchmark against.

The matrix

16 jurisdictions · 62 licences
RegionActivity
Required licences by jurisdiction and operator activity, each cell sourced or marked research-needed
JurisdictionStablecoin issuancePayments & transfersExchange & dealingCustodyTokenised securities
Research needed
Research needed

Research-needed cells mean no independently sourced licence covers that activity yet, not that the activity is unregulated. Click a jurisdiction name to jump to its detail.

By jurisdiction

click a row to expand
Singapore4Reviewed 2026-08-19 · MASMAS

Reviewed 2026-08-19 · MASMAS

Go-to-market notes
  • An issuer sequencing SGD stablecoin issuance ahead of foreign-stablecoin distribution can apply for the payment-instrument-issuance and DPT permissions within the same MPI application rather than filing twice, since both sit on the same licence chassis.
  • A firm building a wholly offshore Singapore-incorporated entity should model the DTSP perimeter before incorporating, not after: the regime's no-de-minimis design and place-of-incorporation trigger mean restructuring after the fact (as the 2025 relocation wave showed) is costlier than choosing the incorporation jurisdiction up front.
  • A team assuming an MPI licence implies digital-asset-dealing rights should verify the specific permission scope on the MAS Financial Institutions Directory register entry before committing to a go-to-market date; Stripe's Singapore entity is the cautionary case.
  • A distributor of tokenised funds weighing DigiFT-style market access against building bilateral relationships should note that Singapore's CMS/RMO route has no passporting into other APAC markets, so a Hong Kong or Japan leg still needs its own licence stack.

Interpretation, not advice. Not investment, legal or regulatory advice.

Hong Kong3Reviewed 2026-08-19 · HKMAHKMA·SFC (co-regulator)·FSTB (co-regulator)

Reviewed 2026-08-19 · HKMAHKMA·SFC (co-regulator)·FSTB (co-regulator)

Go-to-market notes
  • An operator planning HKD stablecoin issuance should model an entry point behind an existing VATP-licensed distributor (HashKey, OSL) for secondary liquidity, since neither of the 2 Ordinance licensees has confirmed a public launch date and the VATP perimeter already admits regulated stablecoins as tradeable products.
  • A custody-only business should track the 2026 VA dealer and custodian bill rather than filing for a full VATP licence, since the pending regime targets exactly the standalone-custody gap the current VATP wrapper forces custody-only firms to route around.
  • Treasury and compliance teams sizing the addressable licensee pool should discount the "36 applicants" figure to the 2 granted so far; the HKMA's deliberately small first round signals a multi-year second-wave timeline rather than a fast-follow queue.

Interpretation, not advice. Not investment, legal or regulatory advice.

Japan4Reviewed 2026-08-19 · FSA

Reviewed 2026-08-19 · FSA

Go-to-market notes
  • An issuer choosing between the FTSP and trust routes should model the reserve structure difference before committing: FTSP reserves sit segregated but at the issuer, while the trust route places reserves with a third-party trust company, a meaningfully different counterparty-risk profile for institutional allocators to underwrite.
  • A foreign exchange planning to list JPYC or Progmat product should budget for the separate EPI distributor registration rather than assuming CAESP registration alone covers it, since the two registration categories are distinct and neither substitutes for the other.
  • A bank evaluating the bank-direct EPI route should treat the absence of any named production issuer as a market-structure signal worth investigating (cost, balance-sheet treatment, or demand) rather than assuming the route is simply unexplored.

Interpretation, not advice. Not investment, legal or regulatory advice.

South Korea3Reviewed 2026-08-19 · FSC·FIU (co-regulator)·FSS (co-regulator)

Reviewed 2026-08-19 · FSC·FIU (co-regulator)·FSS (co-regulator)

Go-to-market notes
  • A stablecoin issuer targeting Korea should treat the FSC-BoK bank-ownership deadlock as the single variable to model before committing resources: a 51% bank-ownership outcome forecloses a pure-fintech issuance play, while a broader-access outcome opens it, and the drafts do not yet say which way DABA lands.
  • A firm exploring token securities ahead of the February 2027 effective date should file into the Innovative Financial Services sandbox rather than wait, since the sandbox is the only live route to test distribution and custody mechanics before the statutory regime activates.
  • A payments or custody business already holding VASP registration under the AML statute should audit its cold-storage ratio and KRW on/off-ramp banking relationship against the VAUPA thresholds now, since those obligations are already enacted and enforced independent of the DABA timeline.

Interpretation, not advice. Not investment, legal or regulatory advice.

Australia5Reviewed 2026-08-19 · ASIC·AUSTRAC (co-regulator)·RBA / Treasury (co-regulator)

Reviewed 2026-08-19 · ASIC·AUSTRAC (co-regulator)·RBA / Treasury (co-regulator)

Go-to-market notes
  • An exchange already AUSTRAC-registered should not read that as sufficient for platform operation once the DAP/TCP regime commences 9 April 2027; the two registrations sit on independent statutory bases and neither substitutes for the other.
  • A stablecoin issuer should treat the Stablecoin Distribution Exemption's 1 June 2028 sunset as the real planning horizon rather than waiting on the Payments System Modernisation bill, since Tranche 2 consultation is still open and the bill's 12-months-post-Royal-Assent commencement clock has not started.
  • A tokenised-securities platform should budget for the full existing AFSL and PDS regime under INFO 225 now, rather than waiting for a bespoke security-token category that does not exist in the DAP/TCP Act: the Act regulates the platform layer, not the underlying issuance framework.

Interpretation, not advice. Not investment, legal or regulatory advice.

United Kingdom4Reviewed 2026-08-19 · FCAFCA·BoEBoE (co-regulator)

Reviewed 2026-08-19 · FCAFCA·BoEBoE (co-regulator)

Go-to-market notes
  • An exchange or custody firm already MLR-registered should not assume that registration carries over: FSMA authorisation is a separate application, and the FCA is actively discouraging fresh MLR applications in favour of the FSMA pathway, so a firm entering now should plan for the FSMA gateway (opens 30 September 2026) as the real target, not the MLR register.
  • A sterling stablecoin issuer should model the systemic-designation threshold as a discrete regulatory-regime change, not a scaling milestone: crossing into Banking Act 2009 systemic recognition swaps sole FCA supervision for a joint BoE-FCA regime with materially different reserve and issuance-cap mechanics, and the designation looks to be effectively irreversible once made.
  • A tokenised-gilt or tokenised-securities platform should treat HSBC's Gate 2 approval as proof the DSS route to live activity works end to end, not just a testing exercise; a firm still deciding between the DSS and building outside the sandbox should weight that precedent alongside the multi-gate approval timeline it took HSBC roughly a year to clear.

Interpretation, not advice. Not investment, legal or regulatory advice.

United Arab Emirates5Reviewed 2026-08-19 · VARA·DFSA (co-regulator)·ADGM FSRA (co-regulator)·CBUAE (co-regulator)

Reviewed 2026-08-19 · VARA·DFSA (co-regulator)·ADGM FSRA (co-regulator)·CBUAE (co-regulator)

Go-to-market notes
  • An operator planning UAE-wide reach should budget for stacking registrations rather than picking one regulator: none of VARA, DFSA, ADGM FSRA or CBUAE recognises another's licence, so an ADGM or DIFC issuance vehicle for institutional work, a separate VARA licence for Dubai mainland distribution, and a CBUAE track for any AED-denominated product are 3 separate filings, not one.
  • A dirham stablecoin issuer should treat the DDSC precedent as the template for cross-regime distribution: even a fully CBUAE-licensed federal product needed a distinct No Objection Certificate to reach VARA-regulated exchanges, so the distribution clearance is a separate workstream from the issuance licence, not a formality that follows automatically.
  • A firm choosing between ADGM's FRT route and VARA's ARVA category for a tokenised real-world asset should map the underlying reference asset first: fiat-referenced designs sit more naturally under ADGM's dedicated FRT framework, while broader asset classes (real estate, commodities, bonds) fit VARA's ARVA category, and the two are not interchangeable wrappers for the same product.

Interpretation, not advice. Not investment, legal or regulatory advice.

Taiwan4Reviewed 2026-08-19 · FSC·CBC (co-regulator)

Reviewed 2026-08-19 · FSC·CBC (co-regulator)

Go-to-market notes
  • An exchange already AML-registered should start the VASA transition clock now rather than at commencement: the 12-month application and 21-month full-approval windows are measured from the Act's still-unset commencement date, so preparing licence-grade governance and custody controls ahead of time is the only way to avoid being caught by the shorter end of that runway.
  • A stablecoin issuer should note the initial financial-institutions-only restriction forecloses a pure-fintech entry: a non-bank issuer's realistic path is partnering with a Taiwan financial institution for the CBC-facing reserve and custody arrangement, not applying directly.
  • A tokenised-securities platform should route through the existing STO regime now rather than wait for VASA, since Cathay Securities' 2023 debut proves the route works end to end and VASA's tokenised-securities treatment, if any, is not yet specified.

Interpretation, not advice. Not investment, legal or regulatory advice.

Thailand4Reviewed 2026-08-19 · SECSEC·MOF (co-regulator)·BOT (co-regulator)

Reviewed 2026-08-19 · SECSEC·MOF (co-regulator)·BOT (co-regulator)

Go-to-market notes
  • An operator weighing entry via the Broker category (InnovestX's route) against the Exchange category should model the THB 50 million versus THB 10 million capital split against the decentralised-versus-centralised structuring question early, since that split is a design decision, not just a compliance cost.
  • A foreign platform historically serving Thai users informally should treat the 2025 extraterritoriality amendment as a hard deadline to license or exit, not a soft-touch grey zone, given the BOT and SEC's joint July 2026 audit of high-volume stablecoin transactions signals active enforcement rather than passive monitoring.
  • A baht-stablecoin issuer should prioritise a Programmable Payment Sandbox slot over waiting for the formal framework, since the sandbox is the only live route to production testing ahead of regulations expected no earlier than late 2026.

Interpretation, not advice. Not investment, legal or regulatory advice.

Malaysia5Reviewed 2026-08-19 · SC·BNM (co-regulator)

Reviewed 2026-08-19 · SC·BNM (co-regulator)

Go-to-market notes
  • An exchange operator already holding a CMSL for securities dealing should weight the January 2026 broking clarification against filing for a separate RMO-DAX registration, since the CMSL route may cover digital-asset securities broking without duplicating the exchange-operator licensing track.
  • A stablecoin issuer eyeing ringgit exposure should treat DAIH pilot participation as the practical entry point rather than waiting for BNM's end-2026 guidance, given the Standard Chartered-Capital A and bank tokenised-deposit pilots are already the closest thing to a sanctioned route today.
  • A custody-only provider should register as a DAC rather than assume RMO-DAX registration covers safekeeping by default, since the SC treats exchange operation and custody as separate registration tracks even for commonly owned entities.

Interpretation, not advice. Not investment, legal or regulatory advice.

Indonesia3Reviewed 2026-08-19 · OJK·BI (co-regulator)

Reviewed 2026-08-19 · OJK·BI (co-regulator)

Go-to-market notes
  • An exchange operator should model the IDR 500 billion capital bar as the real 2026 gate, not the earlier Bappebti-era threshold that many secondary sources still cite: Law 4/2026 raised it materially, so a business case built on the older figure understates the entry cost.
  • A token issuer should treat the draft AKD offering regulation's IDR 1 billion cumulative-offering trigger as the design constraint for a phased Indonesia launch: structuring an initial offering to stay under that threshold buys a notification-only path while the licensing route around larger raises is still in consultation.
  • A rupiah-stablecoin issuer should watch Bank Indonesia's Project Garuda tokenised-government-bond-backed CBDC design as a signal of where reserve composition norms are heading, even though BI does not license private stablecoin issuers directly; the draft OJK offering regulation is the nearer-term licensing route to track.

Interpretation, not advice. Not investment, legal or regulatory advice.

Philippines3Reviewed 2026-08-19 · BSP·SECSEC (co-regulator)

Reviewed 2026-08-19 · BSP·SECSEC (co-regulator)

Go-to-market notes
  • A new exchange entrant should assume the BSP VASP moratorium rules out a direct licence application and plan around it: partnering with or acquiring an existing "stable"-rated BSP-supervised institution is the realistic route while the freeze holds.
  • A sovereign or quasi-sovereign issuer weighing a tokenised-bond programme should read the Bureau of the Treasury's 2023 issuance as a template: building the DLT layer on top of an existing BSP-licensed VASP's infrastructure (PDAX) avoided creating a new licence category, a path likely faster than seeking a bespoke framework.
  • A stablecoin issuer should treat the EMI-plus-sandbox route as the only current path, not a placeholder for a future bespoke licence: PHPC's exit from the BSP sandbox after meeting its KPIs (key performance indicators) suggests the sandbox-to-production pattern is the operative route, not an interim step to something else.

Interpretation, not advice. Not investment, legal or regulatory advice.

Vietnam4Reviewed 2026-08-19 · MOF·SSC (co-regulator)·SBV (co-regulator)

Reviewed 2026-08-19 · MOF·SSC (co-regulator)·SBV (co-regulator)

Go-to-market notes
  • An exchange operator should treat the VND 10 trillion capital bar and the domestic-enterprise-only rule as a partnership decision, not a compliance line item: with only 5 pilot licences available and every applicant already a bank- or securities-firm-backed local entity, a foreign platform's realistic route to Vietnam is a joint venture with one of the 5 named applicants, not a direct application.
  • A stablecoin issuer should not read the new legal-recognition law as an opening: the pilot's own asset-scope rule excludes fiat- and securities-backed tokens outright, so USD- or VND-pegged stablecoins have no listing route on any licensed Vietnamese platform regardless of the issuer's home-jurisdiction licence.
  • A firm assuming the new trading-pilot law loosens the payment-use prohibition should model them as two separate regimes: licensed trading as an investment asset does not touch the standing SBV prohibition on using crypto as a means of payment, which remains fully in force.

Interpretation, not advice. Not investment, legal or regulatory advice.

India3Reviewed 2026-08-19 · FIU-IND·RBI (co-regulator)·SEBI (co-regulator)

Reviewed 2026-08-19 · FIU-IND·RBI (co-regulator)·SEBI (co-regulator)

Go-to-market notes
  • An exchange or custody operator should treat FIU-IND registration as a compliance gate, not a market-entry endorsement: the registration carries no conduct or prudential backing, so a counterparty diligence process should separately assess capital adequacy and governance rather than reading registration itself as a quality signal.
  • A stablecoin issuer should shelve India entirely rather than wait for the discussion paper: RBI's July 2026 testimony reiterating a should-not-be-legalised posture, on top of a twice-shelved paper, makes near- term licensing unlikely regardless of GENIUS Act or MiCA precedent elsewhere.
  • A tokenised-securities platform should track the SEBI pilot's outcome before committing India-specific engineering resources, since the pilot is explicitly time-boxed to 6-9 months and no permanent regulation exists to build against yet.

Interpretation, not advice. Not investment, legal or regulatory advice.

United States5Reviewed 2026-08-19 · OCC·Fed (co-regulator)·FDIC (co-regulator)·SECSEC (co-regulator)·CFTC (co-regulator)·NYDFS (co-regulator)

Reviewed 2026-08-19 · OCC·Fed (co-regulator)·FDIC (co-regulator)·SECSEC (co-regulator)·CFTC (co-regulator)·NYDFS (co-regulator)

Go-to-market notes
  • An issuer choosing the OCC federally qualified non-bank route over a state charter should model the 360-day forced-transition clock against projected issuance growth, since crossing the USD 10 billion state-issuer cap mid-scale forces a federal migration on a fixed deadline rather than a chosen one.
  • A custody provider should treat the OCC trust charter and a state trust charter (NYDFS or otherwise) as complements rather than substitutes: the federal charter buys single-regulator reach, while an existing state charter's operating history remains the credibility signal institutional counterparties underwrite today.
  • A tokenised-securities platform should not wait on CLARITY Act passage to launch, since the existing broker-dealer plus ATS plus transfer-agent stack (the Securitize pattern) is already a production route; CLARITY would add a CFTC-side alternative for pure digital-commodity flow, not replace the securities-side path.
  • A foreign stablecoin issuer eyeing US distribution should track comparability determinations as the gating event, not GENIUS's effective date; no jurisdiction had cleared the reciprocal comparability test as of the most recent check, meaning even a fully GENIUS-compliant foreign design has no confirmed entry route yet.

Interpretation, not advice. Not investment, legal or regulatory advice.

European Union3Reviewed 2026-08-19 · ESMA·EBA (co-regulator)·NCAs (co-regulator)

Reviewed 2026-08-19 · ESMA·EBA (co-regulator)·NCAs (co-regulator)

Go-to-market notes
  • An issuer weighing an EMT versus ART structure should model the significance thresholds early: an EMT crossing 10 million holders or EUR 5 billion in reserves moves from home-state NCA supervision to direct EBA oversight, a materially different compliance posture to plan a operating model around before scale, not after.
  • A CASP applicant choosing an authorising member state should weight NCA throughput alongside domicile preference, since the passport travels regardless of which NCA grants it; Circle's ACPR route and OKX's MFSA route both demonstrate the choice is about processing speed and supervisory relationship, not market access.
  • A tokenised-fund platform should route new EU market infrastructure through the DLT Pilot Regime rather than assume MiCA covers it, since MiCA's perimeter explicitly excludes tokenised securities; the Pilot Regime's exemption structure is the only sandboxed route to reduced MiFID II/CSDR friction ahead of any future permanent framework.

Interpretation, not advice. Not investment, legal or regulatory advice.

Methodology

“Required” means the perimeter test a citable regulator statement or statute names, not a general reading of the law; a licence entry without a source and an as-of date renders as research-needed rather than as an asserted fact. Status follows a single 4-value vocabulary shared with the wider regulatory tracker: enacted (law or operative through an existing licensing layer), consultation (a formal consultation is open without draft legislation), proposed (a bill or working draft exists but has not passed), and none (no dedicated framework appears on record).

Licensee rosters are editorial highlights, not the register itself: every licence entry with a roster links the official register, and a register exceeding roughly 20 names is represented by a curated high-profile subset rather than a full copy. Where the record does not support a call, the map says so rather than estimating.

This map orients; it does not substitute for counsel. Perimeter questions (reverse solicitation, intra-group exemptions, structuring around a threshold) turn on facts a matrix cell cannot carry. Nothing here is investment, legal or regulatory advice.