Key takeaways
- The fastest APAC routes (India, NZ, Labuan, Uzbekistan) take 3–10 months; Japan is the longest at 15–24.
- Capital ranges from no statutory minimum to USD 400M (Vietnam IFC pilot) — pick the regime by client base, not headline figure.
- Banking is the practical bottleneck in Korea, Philippines, Indonesia and Vietnam.
- The application clock starts at the regulator pre-consultation, not at filing.
- Build the AML programme and substance for the regulator that will audit you, not for the licence on paper.
Getting an APAC crypto licence in 2026 is no longer about choosing the friendliest jurisdiction; every active regime now has substance, capital and AML expectations that rule out shell-company structures. The work is in matching the right regime to the business model, then running a clean application that the regulator can approve without remand.
This guide sets out the actual sequence we run — eight steps, in the order they become rate-limiting. We do not cover marketing, fundraising or token economics; we cover the regulatory file and the people who will look at it.
Step 1 — Shortlist three jurisdictions
Open the 15-jurisdiction comparison and shortlist three by client base, banking access and tax residency of founders. Singapore and Hong Kong dominate institutional shortlists; Labuan and Uzbekistan dominate cost-led shortlists; India and New Zealand dominate speed-led shortlists.
The shortlist is judged on three things: where the customers are (or will be), where the banking partners are, and where the founders can credibly hold residency. Adding a fourth criterion at this stage usually means you have not done the first three properly.
Step 2 — Pick the regime within the country
Most APAC countries have multiple licence categories. Singapore has SPI vs MPI vs DTSP; Thailand has six SEC categories; Japan has CAESP, EPISP, ECISB and the upcoming FIEA migration; Hong Kong has VATP, HKMA Stablecoin and the upcoming SFC VA Dealer / Custodian regime. The regime within the country is shaped by:
- Whether you hold client assets (custody triggers higher capital and a separate licence in some regimes).
- Whether you list security tokens (triggers SFO Type 1+7 in HK, FIEA in Japan from FY2027).
- Whether you serve only foreign clients (triggers FSMA Part 9 DTSP in Singapore — discretionary licence).
- Whether you offer earn / lend / yield products (prohibited under SEC Thailand from 30 August 2023).
Step 3 — Pre-consultation with the regulator
The application clock starts here, not at filing. A formal or informal pre-consultation with the regulator (and, in Japan, with JVCEA before JFSA) gives you the dossier shape the regulator expects. Skipping pre-consultation produces remand cycles that can add 3–6 months to the end-to-end timeline.
Pre-consultation is also where the regulator tells you what they will and will not accept on substance, governance, custody architecture and capital structure. Take notes; the regulator's verbal feedback is the brief for the file you will submit.
Step 4 — Incorporate the entity and seat the directors
Local incorporation under the country's prescribed vehicle: Singapore Pte Ltd, HK Limited, Japan KK, Korea Co., Ltd., Indonesia PT-PMA, Vietnam JSC inside the IFC, AIFC Private Company in Astana, and so on. See company formation for the full list. If timing is critical, see ready-made companies.
Seat the directors and key officers per the regime — Singapore-resident director, Hong Kong-resident RO, KZ-resident SEO/CO/MLRO, Japan-resident representative director, Korea-resident CISO and AMLO. Each appointment carries fit-and-proper review.
Step 5 — Capital deposit and bank certification
Deposit and certify the regulator's required paid-up capital. Specific figures by regime are on the country pages; common pitfalls:
- Borrowed or pledged funds disqualified — Uzbekistan NAPP rule, mirrored elsewhere.
- Bank certification of the deposit — required for Uzbekistan, common practice for Indonesia OJK fit-and-proper.
- Capital must remain unimpaired by losses — Labuan FSA, MAS MPI security deposit.
- Plan for capital uplifts — Malaysia SC PCP 3/2025 proposes MYR 5M → MYR 15M during 2026.
Step 6 — AML programme, technology framework, custody architecture
Build the AML/CFT programme to the regulator's specific framework — MAS Notice PSN02, AMLO Schedule 2, AML/CTF Act Part 6A, PMLA Rules 2005, NAPP AML rules. Integrate Travel Rule at the regime threshold (SGD 1,500 / JPY 100,000 / KRW 1M / etc.). See AML/KYC programme.
Build the technology framework to MAS Notice PSN05 / SFC's VATP Guidelines / equivalent. Cold/hot wallet split (≥98% cold under HK, ≥95% under Japan, ≥80% under Korea VAUPA). Insurance covering hot-storage VAs (50% under HK). Proof-of-reserves cadence aligned with regulator expectations.
Step 7 — File and run the regulator dialogue
Submit the application via the prescribed portal — MAS via the FI Connect, SFC WINGS, OJK ITSK, AUSTRAC enrol portal, FIU-IND FINgate 2.0, Labuan FSA business division. Expect 2–3 rounds of clarification questions over 4–12 months. Respond same-week, in the format the regulator prefers — track every change against the original submission.
For VATP and CAESP applications, an external assessor runs in parallel. Treat that workstream as part of the file, not as a side project.
Step 8 — Approval, banking, post-licensing
On approval, three things happen in parallel: the regulator publishes the licence on its register, the corporate banking partner activates production accounts, and the post-licensing compliance regime starts. Renewal is typically annual; AML audit annual or biennial; on-site supervisory inspections at the regulator's discretion. We retain most clients on a multi-year retainer for that work; see AML/KYC programme.
Where to go next
Open the 15-jurisdiction comparison for the live capital and timeline figures, then read the country page for your shortlist. For cost analysis: crypto licence cost. For the speed/cost trade-off: cheapest licence and fastest licence. When ready: book a 30-minute scoping call with the country lead for your jurisdiction.