Confidentiality is workable so long as the regulated firm can identify parties and disclose on demand.
What Singapore actually says
The one jurisdiction in this section that declined to exclude anonymity-enhancing assets and chose to price the risk instead. MAS set the position in Parliament in October 2022: privacy coins, privacy wallets and mixers attract enhanced obligations rather than prohibition. The notice requires providers to risk-assess such tokens before dealing and to pay special attention to technologies favouring anonymity, and MAS has observed that most licensed firms simply choose not to offer them anyway. That restraint sits alongside a travel rule with no minimum value and a deliberately narrow licensing door. COSMIC is worth noting for what it shows about the underlying logic: Singapore legislated a carve-out from bank secrecy so banks could share data privately with each other, not publicly.
The instruments that matter
- MAS Notice PSN02
- providers must risk-assess privacy tokens before dealing and pay special attention to technologies that favour anonymity, with enhanced transaction monitoring, but no prohibition
- No travel rule threshold
- transfers at or below SGD 1,500 still carry originator and beneficiary names and account numbers; above it the originator's identity must be verified
- DTSP regime, from 30 June 2025
- Part 9 of the Financial Services and Markets Act 2022 commenced with no transition, and MAS said it will generally not licence firms serving only offshore customers
- COSMIC, live 1 April 2024
- a statutory carve-out from banking confidentiality letting six banks share customer red-flag data with each other
What this means for confidential transactions
Bubble is built for exactly this shape of obligation: amounts and balances live on chain as ciphertexts, computation happens without decryption, and the only disclosure path is an on-chain access list through which an authorized party - an auditor, a supervisor, a counterparty - can request scoped decryption. That is confidentiality from the public, not from the regulator.
Related entries
- AustraliaAsia-Pacific · Travel rule without a threshold, no coin ban
- United KingdomEurope · Risk-based, with an explicit central bank no-access pledge
- South KoreaAsia-Pacific · Identity-maximalist, and exporting the model
- Hong Kong SARAsia-Pacific · Retail exclusion by liquidity gate, not by anonymity rule
- IndiaAsia-Pacific · No crypto statute, regulated through AML and tax
- JapanAsia-Pacific · Untraceability barred by self-regulation, now moving into ordinance
Compliant by default.
See how selective disclosure satisfies a supervisor without publishing your book to the world.