Mandatory Cyber Hygiene For Digital Token Service Providers (DTSPs) In Singapore

The Monetary Authority of Singapore (MAS) has issued Notice FSM-N31on Cyber Hygiene effective 30^th June, 2025. It mandates all licensed Digital Token Service Providers (DTSPs) to adopt robust cyber hygiene measures.

This notice applies to all DTSPs licensed under Section 138 of the Financial Services and Markets Act, 2022 (FSM Act) and is aimed at safeguarding critical systems, administrative accounts and customer data against cyber threats.

Whom does DTSPs apply to?

It applies to every DTSPs licensed under the FSM Act. An exception to compliance applies only where a DTSP is unable to exercise direct or indirect control over a system to comply with the requirements of this notice and it is not reasonably practicable to engage an alternative provider over whom such control can be exercised. In such cases, the DTSP is exempt from the relevant requirement to that extent.