Running a cryptocurrency exchange or service provider targeting Filipino users without a license is no longer an option. As of July 2025, the Securities and Exchange Commission (SEC) of the Philippines has enforced strict licensing rules that apply to every Crypto Asset Service Provider (CASP) operating in the country. If you are a foreign exchange looking to enter the market, or a local startup planning to launch, ignoring these rules means facing massive fines, website blocks, or outright bans.

The regulatory landscape shifted dramatically with the issuance of SEC Memorandum Circular No. 04 and No. 05, Series of 2025. These documents established the most comprehensive crypto framework in Southeast Asia. The goal is clear: protect investors from fraud and money laundering while creating a structured environment for legitimate businesses. By mid-2026, the market has adapted, but the barriers to entry remain high. This guide breaks down exactly what you need to do to get licensed, how much it costs, and what happens if you try to bypass the system.

Who Needs a CASP License?

The term Crypto Asset Service Provider (CASP) covers a wide range of activities. You need a license if your business involves any of the following:

• Operating a crypto-to-crypto or crypto-to-fiat exchange.
• Providing wallet services or custody solutions for digital assets.
• Offering trading platforms where users can buy, sell, or trade tokens.
• Managing investment funds that hold significant amounts of cryptocurrency.
• Acting as a broker-dealer for crypto-assets.

If your platform allows Filipino residents to create accounts, deposit pesos, or trade tokens, you fall under this jurisdiction. It does not matter if your headquarters are in Singapore, Dubai, or the US. If you target the Philippines, you must comply. The SEC clarified on July 5, 2025, that these rules do not ban trading; they simply require proper authorization. This distinction is crucial because many operators mistakenly believe they can ignore local laws if their servers are offshore.

Core Licensing Requirements and Capital Rules

Getting approved by the PhiliFintech Innovation Office, the arm of the SEC handling fintech registrations, is not a simple paperwork exercise. The regulators want proof that you have the financial muscle and operational integrity to handle customer funds safely.

The first hurdle is corporate structure. You cannot operate as a sole proprietorship or a foreign branch office without local incorporation. You must register as a domestic corporation in the Philippines. This means setting up a legal entity within the country, appointing local directors, and maintaining a physical office presence. Virtual offices or mail-drop addresses will likely be rejected during the due diligence phase.

Then there is the capital requirement. The minimum paid-up capital is PHP 100 million (approximately $1.8 million USD). This amount must be in cash or liquid assets, excluding any crypto-assets. This rule is designed to filter out small, risky startups and ensure that only serious players with substantial backing can operate. For context, this requirement significantly raises the barrier compared to neighboring countries like Thailand or Vietnam, which have lower initial capital thresholds for certain types of licenses.

Step-by-Step Registration Process

Once you have your corporate structure and capital ready, you move to the application phase. The process is detailed and requires extensive documentation. Here is how it typically unfolds:

1. Prepare Business Rules and Governance Documents: Draft comprehensive internal policies covering risk management, cybersecurity, and dispute resolution. These must align with international best practices.
2. Implement AML/KYC Systems: Your Know Your Customer (KYC) and Anti-Money Laundering (AML) protocols must be robust. You need automated systems that can screen users against global sanctions lists and report suspicious transactions to the Anti-Money Laundering Council (AMLC).
3. Create Disclosure Plans: Under MC 4-2025, you must prepare disclosure documents for any crypto-assets you list or promote. These documents must be filed with the SEC and published on your website and social media channels at least 30 days before marketing begins.
4. Submit Application to PhiliFintech: File your complete dossier with the PhiliFintech Innovation Office. Incomplete applications are returned, delaying the timeline significantly.
5. Wait for Review and Approval: The SEC reviews your technical infrastructure, financial health, and compliance framework. This can take several months depending on the complexity of your operations.

During this period, you cannot commence any crypto-related activities. Launching early without approval is considered a violation and triggers immediate enforcement actions.

Compliance Costs and Ongoing Obligations

Obtaining the license is just the beginning. The ongoing costs of compliance are substantial. You will pay registration and supervision fees calculated based on your gross revenue. While the exact fee structure can vary, expect these costs to scale with your transaction volume.

You must also submit detailed monthly financial reports to the SEC. Transparency is non-negotiable. Additionally, you are required to maintain a strict separation between customer funds and company assets. This segregation prevents losses during insolvency events, a lesson learned from past exchange collapses globally. Regular audits by independent third parties may be required to verify this separation.

Marketing restrictions are another key area. You cannot make assertions about future crypto-asset values unless they meet specific criteria outlined in Section 5.3 of the regulations. Promising guaranteed returns or using misleading hype is prohibited. All promotional materials must include clear risk warnings and links to the official disclosure documents filed with the SEC.

Enforcement Actions and Penalties

The SEC has shown it is willing to act aggressively against non-compliant entities. On August 1, 2025, the Commission issued public advisories targeting ten major exchanges, including OKX, Bybit, KuCoin, and Kraken. These platforms were cited for continuing to serve Filipino users without proper licenses.

The consequences for violating the CASP framework are severe. Fines range from 50,000 to 10 million pesos per violation. If the violation continues, you face additional daily penalties of 10,000 pesos. Beyond fines, the government can block access to your website and app within the Philippines. We saw this happen with Binance in 2024, when authorities removed the world’s largest exchange from the domestic market after giving users 90 days to exit. This precedent signals that the SEC will not hesitate to cut off access to unlicensed platforms.

Market Impact and Future Outlook

Despite the strict rules, the Philippine crypto market continues to grow. Adoption rates are projected to reach 10.86% by 2026, with nearly 12.79 million users. Revenue is expected to hit ₱1.1 billion. The regulations have not killed the market; they have professionalized it. Smaller, less secure exchanges are being pushed out, making room for larger, compliant players.

This approach positions the Philippines as a potential regional hub for crypto innovation. By balancing investor protection with market accessibility, the SEC aims to attract serious institutional players. However, critics argue that the PHP 100 million capital requirement limits competition and favors incumbents. Time will tell if this model encourages diversity or creates monopolies among a few large licensed providers.

For entrepreneurs, the message is clear: plan for the long term. Building a compliant operation takes time and resources, but it provides a stable foundation for growth. Ignoring the rules might seem easier initially, but the risk of being blocked or fined makes it a unsustainable strategy.