Cointime

Download App
iOS & Android

Singapore Should Stop Beating Itself Up on Crypto Regulations

Validated Individual Expert

“Code is law.” While the catchphrase has caught on with the crypto crowd, it has little cache with the crew that actually formulate law — legislators and those who execute the law — regulators.

And therein lies one of the biggest challenges of regulating the cryptocurrency space — lawmakers are literally writing law on paper, while the blockchain is built on code.

And while regulators can produce reams of legislation, few (if any) can write a single line of code.

Even as the law struggles (at best) to keep pace with technological advances, rushing to regulate in a piecemeal manner can and often does result in unintended consequences.

Right Code Not Law

Take for instance Singapore’s Payment Services Act (“PSA”).

When the idea of the PSA was first mooted, it was heralded (especially by those in the cryptocurrency industry) as a forward-looking piece of legislation that would help cement Singapore’s position as a global hub for digital assets.

Whilst the PSA may have been hyped as the first attempt by a major financial center to regulate the rough-and-tumble cryptocurrency sector, a bit of legislative history would reveal that its thrust and parry was far more limited both in scope, scale and ambition.

In the aftermath of the initial coin offering (ICO) bubble and bust, instead of using existing legislation (as has been the approach in the U.S.) and enforcement action to bring the cryptocurrency industry to heel, lawmakers in Singapore chose a different approach — to start (sort of) from scratch.

The Monetary Authority of Singapore (MAS), which serves as both the central bank and regulator for financial services in Singapore, mooted a bill that would cover not just digital tokens, but payments as well.

Before the PSA came into effect in January 2020, payment service providers were regulated by the Payment Systems (Oversight) Act (“PSOA), while money changers and remittance companies by the Money-Changing and Remittance Businesses Act (“MCRBA”).

There were overlaps between the PSOA and the MCRBA and at the time it was believed that since cryptocurrencies were growing in usage, there was a need to regulate them in a more effective manner, especially since the nascent asset class didn’t fit neatly within the existing legal framework.

Instead of trying to rework existing legislation, Singapore’s approach was to start over and bring everything under one piece of legislation.

Enter the Payment Services Act

At its core, the PSA was intended to do two things — streamline the existing two pieces of legislation, the PSOA and the MCRBA, and create an “activity-based” piece of law that would better cope with everything from digital payments (such as digital wallets in apps) to digital tokens (such as cryptocurrencies).

At first blush, Singapore’s approach to regulating cryptocurrencies looked promising.

On the one hand MAS would have expanded powers under the designation regime of the PSA to ensure innovations in payment systems would not undermine financial stability, while on the other hand, a licensing regime would be put in place covering not just existing payment services providers, but aspiring cryptocurrency companies as well.

Under the PSA, there are seven key payment services that attract licensing requirements:

  1. account issuance services;
  2. domestic money transfer services;
  3. cross-border money transfer services;
  4. merchant acquisition services;
  5. e-money issuance services;
  6. digital payment token services; and
  7. money-changing services.

Relevant to the cryptocurrency industry were licensing requirements under 5 and 6, e-money issuance services and digital payment token services and the licensing regime consisted of two broad categories:

  1. Money-changing License
  2. Standard or Major Payment Institution License (with the distinction between the two being one of amounts processed and base capital requirements)

With Singapore’s licensing regime now in place, crypto companies (both foreign and domestic), eager to burnish their credentials and appearance of compliance in an industry rife with fraud, raced to apply.

Whose license is it anyway?

Unfortunately for the legion of “Crypto Bros” intending to apply for a license under the auspices of the PSA, the list of admission requirements was long and daunting, and for most of them, given their lack of experience in financial services, unfamiliar.

An e-money issuance service for the purposes of the PSA allows users to use e-money to pay merchants or transfer e-money to another individual and a plain interpretation of the act would cover everything from stablecoins to prepaid digital wallets.

Digital payment token services under the PSA on the other hand dealt only with buying or selling digital payment tokens (“DPTs”), otherwise known as cryptocurrencies, or providing a platform to allow persons to exchange DPTs.

The main issue of course is that the PSA can’t (nor was it designed to), capture all of the activities ancillary to e-money and DPTs, under the umbrella of a payment services license.

For instance, a cryptocurrency exchange operating in Singapore would be required to apply for a license under the PSA, but outside of the following ongoing requirements for maintaining such a license, almost no guidance is provided for how it should operate the exchange:

  1. AML/CFT requirements
  2. Periodic Returns — e.g. volume of transfers
  3. Cyber Hygiene — primarily cybersecurity
  4. Business conduct — including safeguarding of customers’ monies, record of transactions, issuance of receipts, etc.
  5. Disclosures and Communications — accurate representations on the scope of its license and activities to customers
  6. Annual audit requirements

Nowhere in the PSA or its attendant legislation and regulations does it mention that a crypto exchange operating in Singapore needs to hold client’s crypto separate from its own, or that its owners ought not also have their own proprietary trading firm that can trade against customers on its exchange.

The PSA certainly does not stipulate any restrictions on common shareholding between the owners of a crypto exchange and a market maker that plies the same exchange, despite the glaring conflict of interest.

Such requirements are found instead in an entirely different piece of law — the Securities and Futures Act (“SFA”), a well-established piece of legislation that governs activities in the capital markets and ensures such basics as the need for exchanges to maintain independent custodians and other common sense measures to avoid conflicts of interest.

At its core of course is the struggle with what exactly a cryptocurrency is.

While U.S. Securities and Exchange Commission Chairman Gary Gensler considers that most cryptocurrencies fall under the definition of securities, the Chimera-like quality of many of them resists easy classification.

And at the time that the PSA was mooted, cryptocurrencies were treated as distinct and apart from traditional securities.

Because of the classification bifurcation, regulators operating under the PSA would be hard pressed to properly police the space, let alone oversee it.

To Securitize or Not Securitize, That is the Question

For instance, what if a Singapore company was to offer crypto lending and borrowing activities in Singapore, how exactly would that be governed?

According to the PSA, the definition of a “digital payment token service” means:

(a) any service of dealing in digital payment tokens (other than any such service that the Authority may prescribe);

(b) any service of facilitating the exchange of digital payment tokens (other than any such service that the Authority may prescribe);

Presumably, borrowing and lending crypto would fall under “dealing” for the purposes of the PSA.

Yet neither the PSA nor its ancillary regulations provide for how such “dealing” ought to be conducted.

How much can you borrow and how much can you lend?

Who should you lend to and who can you borrow from?

How much of customer assets can you lend out to and to whom?

There are no requirements that Singapore-based crypto companies segregate users’ crypto from their own, or maintain capital reserves in case some of that lending goes awry, only an obligation to “safeguard” customer monies, whatever that means.

Also absent from the PSA are requirements that licensees maintain sufficient reserves to meet withdrawals or other well-established risk management measures required by the SFA and the Banking Act.

But it should come as no surprise that the PSA couldn’t cover all these scenarios — it was never designed to nor is it clear that it was ever intended to in the first place.

Gimme a License, Make it Two

Because the PSA offers a licensing regime, crypto companies with a license, receive an almost instant halo-like stamp of approval from a regulator in a major global financial center.

And that halo doesn’t even need to be crystalized to bear fruit, as was the case for Hodlnaut, a Singapore company that offered eye-popping yields on crypto deposits and was granted an in-principle license under the PSA.

On August 8, 2022, one day before Singapore’s National Day (Independence Day), Hodlnaut shocked customers by announcing that it was freezing all customer withdrawals citing “recent market conditions.”

In reality, Hodlnaut, which in March 2022, had been granted an “in-principle” PSA license was off to the races by April of that same year, taking exposure to the ultimately doomed algorithmic stablecoin UST.

Upon receiving its “in-principle” qualification to receive a PSA license from MAS, yield-hungry depositors flocked to Hodlnaut.

Only a month after being sprinkled with MAS pixie dust, Hodlnaut was offering 14% annualized returns on 180-day fixed deposits, that it deployed to the ultimately doomed Anchor Protocol using UST, an algorithmic stablecoin where it earned yields of almost 20%, clearing a cool 6% in the process.

When UST eventually lost its peg and its sister token LUNA became almost worthless, thousands of Hodlnaut’s customers, lured by the promise of 14% annualized returns, would soon find that they were no longer able to withdraw money from the platform.

Part of the problem of course was that companies like Hodlnaut don’t actually have “assets” in the traditional sense — they have liabilities.

When you deposit money with a bank, that’s not the bank’s asset, it represents an unsecured loan to the bank (apart from government deposit insurance to a fixed amount) and a liability on the bank’s books.

In return for having the privilege of borrowing money from you, banks need to maintain what’s known as capital adequacy ratios — the ratio of a bank’s capital in relation to its risk-weighted assets and current liabilities.

If the bank carries a lot of risky assets on its books, it wouldn’t be able to receive very much as deposits, which is why banks carry a lot of Tier 1 capital (CET1), the highest quality of regulatory capital, which has the ability to absorb losses immediately should they occur.

Hodlnaut’s customers enjoyed no such privilege.

While companies like Hodlnaut boasted of their assets under management, these “assets” were really unsecured loans that the company owed to its customers.

But because these “assets” were cryptocurrencies and Singapore has specific legislation governing DPTs — they didn’t come under the auspices of the SFA or the Banking Act, but the PSA instead, legislation that is particularly ill-suited to cover such scenarios as in the case of Hodlnaut.

If it Acts Like a Bank, Regulate it Like One

It’s been said that if it looks like a duck, walks like a duck and quacks like a duck, odds are it’s a duck.

Although companies such as Hodlnaut aren’t banks, they behave as if they are and ought to be regulated as if they were — using a combination of the SFA, Banking Act and the PSA.

Instead, the PSA provided companies like Hodlnaut with a veneer of legitimacy and regulatory stamp of approval as if they were operating to the same standards as companies governed by the Banking Act and the SFA, without holding them accountable to such.

So was Singapore wrong to have cobbled together the PSA in such a hurry?

“Yes” and “no.”

The PSA represents a progressive piece of legislation emanating from one of the world’s major financial centers, and stitched together by lawmakers intent on building the future.

Often mentioned in the same breath as New York, London, Zurich and Hong Kong, but lacking the same hinterlands and geographical advantages of those cities, Singapore is merely doing what it can to maintain its edge as a financial center.

Which explains why in 2018, Singapore embarked on a process to take a stab at governing what many other regulators had determined was “ungovernable” — cryptocurrencies.

Because Singapore doesn’t benefit from the massive hinterland like New York, or the strategic location of Hong Kong and London, it has to leverage the advantages that it does have — speed and agility.

Unfortunately, legislating for any new technology, especially cryptocurrencies, calls for a “Goldilocks Approach” — not too fast, but not too slow either.

And perhaps legislators can lean on the Hippocratic Oath for guidance — primum non nocere — first, do no harm.

While a haste to regulate doesn’t prima facie do harm, arguably the creation of a licensing regime without the necessary infrastructure to support such a framework does.

First Do No Harm

Rather than try and fit the round peg of cryptocurrencies into the square hole of the PSA, an alternative could have been to not issue licenses to begin with.

Singapore could have used all the existing tools at the disposal of regulators to police the cryptocurrency industry which U.S. Securities and Exchange Commission Chairman Gary Gensler famously labeled the “Wild West.”

And that means the PSA, SFA and Banking Act, whilst catering for such exceptions and carve outs where existing law proved cumberson and inapplicable.

External observers may be quick to judge Singapore’s early experiment with regulating cryptocurrencies to have failed based on the number of high-profile insolvencies and collapses associated with the city state.

But that observation would be misguided.

Cryptocurrencies aren’t (yet) part of the greater financial system and it’s unclear if they ever will be.

By carving out crypto and protecting the most feckless of investors from unnecessary exposure, it could be argued that at the very least, Singapore’s lawmakers are committing to “do no harm.”

And while many of recent high-profile crypto failures are proximate to Singapore, lawmakers in the financial center could hardly be said to have been their proximate cause.

Disgraced crypto hedge fund Three Arrows Capital (“3AC”) may have had its office in Singapore, but its fund and approved investment manager were in the British Virgin Islands.

By the time 3AC’s founders Kyle Davies and Zhu Su ghosted investors, its investment management license issued by MAS had long lapsed.

Terra-Luna’s Terraform Labs may have had an office and been incorporated in Singapore, but it wasn’t regulated by MAS and its founders and principal staff were not from the city state.

And even if Singapore’s investors bemoan how the city state’s sovereign wealth fund’s investment in FTX gave the cryptocurrency exchange the aura of “investability” and “reliability,” neither the exchange nor its officers are regulated by MAS nor is the company incorporated in Singapore.

Instead, cryptocurrency investors and traders regardless of jurisdiction need to recognize that keeping their assets safe ultimately falls on personal responsibility more than anything else.

Regulation, licensing and official endorsement will do almost nothing to guarantee funds are SAFU — to move forward, law and regulation alone is a paper tiger, legislation needs to be combined with technology.

No More Paper Tigers

One possible way of giving teeth to legislation is requiring practical implementation of safeguards for customers.

For instance, a license under the PSA, whether in-principle or otherwise, could require a declaration of all public wallet addresses managed by the license-seeking entity to the regulator.

Even if the licensee is loathe to make its public wallet addresses known to all and sundry (doubtful at best, else how would you take deposits?), surely the authority issuing the license ought to be entitled to oversight?

Third party companies or auditors could then be tasked for validating and verifying assets within those wallets are sufficient to meet customer withdrawals, and instead of periodically, this monitoring could be done in real-time.

Regulators could leverage the very blockchain technology that they seek to govern, utilizing its inherent transparency as a tool for oversight, rather than relying on it posthumously after things have gone wrong.

Whereas financial institutions operate in a far more structured environment, lawmakers who want to properly police the cryptocurrency sector need to use the very infrastructure that the industry depends on for adequate policing.

And that includes real-time crypto asset monitoring, unsecheduled inspections and wallet identification — the ability to do so already exists, but active policing and whistleblowing has been left largely to the community.

This can’t be the way forward.

Last November, the Financial Times suggested Hong Kong was well-positioned to wrestle the crypto capital crown from Singapore, given the latter’s recent setbacks and its knee-jerk response to hold back on all things crypto-related — but such a view would be somewhat premature.

Singapore is often lauded as an example of a startup country that succeeded, but that process was not without trial and error and the PSA is likely to be no different.

Whilst expedient, the PSA and its implementation needs to evolve, but perhaps at a faster pace than already quick regulators and lawmakers in Singapore are already accustomed to.

The speed at which Singapore rolled out the PSA is no small feat, but far from resting on its laurels, lawmakers in the country could do more to make it useable and to spread its ambition beyond its current iteration.

If the raison d’etre of licensing is to provide a safe framework for stakeholders to operate in, then arguably, the PSA has moved too quickly.

Without adequate infrastructure to support a comprehensive licensing regime, which includes using technological tools to oversee the licensed, the PSA risks becoming nothing more than a marketing tool, providing licensees with a coat of credibility, even as they “crypto” covertly.

Comments

All Comments

Recommended for you

  • Bitcoin Layer 2 Project Bitlayer Launches $50 Million Ecosystem Incentive Program

    Bitlayer, a Bitcoin Layer2 infrastructure project based on the BitVM paradigm, announced the launch of a $50 million ecological incentive plan to promote the development of its mainnet ecosystem. The first phase of the incentive program, named "Ready Player One," will begin registration at 09:00 UTC on March 29th, 2024 and end at 09:00 UTC on April 29th, 2024, and will officially start after the Bitlayer mainnet is launched. Specific rules and reward allocation guidelines for the event will be disclosed in subsequent announcements. Through the "Ready Player One" and other ecological incentive plans, Bitlayer aims to accelerate ecosystem development and incentivize projects to deploy on the Bitlayer mainnet. In addition, Bitlayer promises comprehensive ecosystem support for all projects, including potential foundation and institutional investment, initial liquidity support, comprehensive product development resources, guidance and investment opportunities from top incubators, support from the Bitcoin community and OGs, ecosystem cooperation, and co-creation.

  • Stablecoin protocol Ethena on BNBChain has been hacked

    The stablecoin protocol Ethena on BNBChain has been hacked, causing a loss of 480 BNB, worth about $290,000, as monitored by PeckShieldAlert.

  • Singapore-based Bitcoin Layer2 Project BEVM Raises Tens of Millions in Seed and Series A Funding

    Singapore-based Bitcoin Layer2 project, BEVM, has completed its seed round and part of its Series A round, raising tens of millions of USD from over 20 investors including RockTree Capital, Waterdrip Capital, and ViaBTC Capital. The project's Series A valuation has reached $200m and aims to accelerate its international development and roll-out. BEVM is an EVM-compatible Bitcoin Layer2 network built on Taproot Consensus, which uses $BTC as gas and aims to bring 10% of $BTC into its Layer2 network environment. The project's mainnet is scheduled to launch on March 28th and has already implemented decentralized Bitcoin cross-chain custody services through Schnorr Signature, MAST, and Bitcoin SPVs.

  • Ethereum on-chain DEX transaction volume exceeded $2.1 billion yesterday

    According to DeFiLlama data, the trading volume of DEX on the Ethereum blockchain on March 28th was 2.111 billion US dollars, ranking first. The daily trading volume of DEX on the BSC chain was 1.398 billion US dollars, ranking second; the daily trading volume of DEX on the Solana chain was 1.097 billion US dollars, ranking third.

  • Taiwan’s Ministry of Interior has approved the establishment of a cryptocurrency industry association

    Taiwan's Ministry of the Interior has approved the application of the local cryptocurrency industry to establish an industry association. The local cryptocurrency industry working group, which was established last year to prepare for the establishment of the industry association, said that the working group now needs to complete all preparations and officially establish the cryptocurrency industry association by the end of June as required by the government. The working group is currently composed of 22 cryptocurrency companies, including Taiwan's major exchanges such as MaiCoin and BitoPro. The working group pointed out that ACE Exchange has been expelled from the group because the troubled exchange is under investigation by prosecutors for improper behavior by its former executives.

  • Grayscale ETH Trust negative premium rate is 22.77%

    According to ChainCatcher news and Coinglass data, the Grayscale Bitcoin Trust Fund (GBTC) has a premium rate of 0.02%. The Grayscale ETH Trust has a negative premium rate of 22.77%, and the ETC Trust has a negative premium rate of 36.58%.In addition, the Grayscale BCH Trust has a premium rate of 238.13%, the LTC Trust has a premium rate of 380.60%, the SOL Trust has a premium rate of 515.93%, the MANA Trust has a premium rate of 726.65%, the LINK Trust has a premium rate of 713.66%, and the FIL Trust has a premium rate of 3057.89%.

  • Net inflows into spot Bitcoin ETFs reached $179 million on March 28

    Spot on Chain, a blockchain data monitoring platform, posted on social media that the net inflow of spot bitcoin ETF on March 28th reached 179 million US dollars, a decrease of 26.9% compared to the previous trading day. After 54 trading days, the total net inflow accumulated to 12.13 billion US dollars, which is the level before the last fully negative trading week. BlackRock's iShares Bitcoin ETF (IBIT) and Grayscale's GBTC both saw a significant slowdown in daily inflows and outflows on March 28th.

  • Bitcoin spot ETF had a total net inflow of US$179 million yesterday, and the ETF net asset ratio reached 4.25%

    According to SoSoValue data, the Bitcoin spot ETF had a total net inflow of $179 million yesterday (March 28th, US Eastern Time).Yesterday, Grayscale's ETF GBTC had a net outflow of $104 million, and its historical net outflow is $14.77 billion. The Bitcoin spot ETF with the highest net inflow yesterday was BlackRock's ETF IBIT, with a net inflow of approximately $95.12 million, and its historical total net inflow has reached $13.96 billion. The second is Fidelity's ETF FBTC, with a net inflow of approximately $68.09 million yesterday, and its historical total net inflow has reached $7.56 billion.As of now, the total net asset value of Bitcoin spot ETF is $59.1 billion, and the ETF net asset ratio (market value compared to the total market value of Bitcoin) is 4.25%, with a historical total net inflow of $12.12 billion.

  • MAS: Singapore is working on global first-tier fund tokenization regulation

    Chia Der Jiun, Managing Director of the Monetary Authority of Singapore, introduced some fund tokenization pilots at an event for asset managers. These pilots are part of the Project Guardian and MAS Global Layer 1 (GL1) tokenization plans. Chia Der Jiun emphasized the advantages of tokenization in real-time settlement and process automation, which can improve efficiency and achieve greater customization of funds. UK asset management company Schroders and fund distribution platform Calastone are exploring this as part of the Project Guardian public blockchain trial in Singapore. A recent survey by Calastone showed that 96% of asset management companies in the Asia-Pacific region plan to launch tokenized products within three years. Chia stated that as these Project Guardian pilot projects approach commercialization, MAS is working with the pilot project managers to study the legal and regulatory treatment and impact of tokenized investment funds."

  • Singapore issued a budget statement for fiscal year 2024, planning to allocate S$2 billion to strengthen the digital economy

    Singapore's Deputy Prime Minister and Finance Minister Heng Swee Keat presented the country's budget statement for the fiscal year 2024 in February. The budget proposes an allocation of 2 billion Singapore dollars to strengthen its digital economy, marking Singapore's strong push for financial innovation and integration of digital assets, sending a clear signal of incorporating digital assets into its economic framework.