Philippines Crypto Licensing: SEC CASP Requirements Explained
If you’re running a crypto exchange or planning to launch one in the Philippines, the days of operating in the gray zone are over. The Securities and Exchange Commission (SEC) has drawn a hard line with its new rules for Crypto Asset Service Providers (CASPs). As of July 2025, if you want to serve Filipino users, you need a license. Period.
This isn’t just bureaucratic red tape. It’s a massive shift that has already seen giants like Binance blocked and ten other major exchanges hit with public advisories. For local entrepreneurs and international platforms eyeing the Southeast Asian market, understanding these requirements is no longer optional-it’s the difference between staying open and getting shut down.
The New Regulatory Landscape
The Philippines has become one of the most strictly regulated crypto markets in Southeast Asia. Why? Because adoption is exploding. By 2026, roughly 12.79 million Filipinos will use cryptocurrency, representing a penetration rate of nearly 11%. With revenue projected to hit ₱1.1 billion, regulators couldn’t ignore the sector any longer.
In May 2025, the SEC issued Memorandum Circulars No. 04 and No. 05. These documents form the backbone of the CASP Rules. They mandate that any platform offering crypto services to Filipinos must register locally. This applies whether you’re a homegrown startup or a global giant like Coinbase or Kraken. If your website targets Filipino users, you fall under this jurisdiction.
Who Needs a License?
You might think only big exchanges need to worry. Not true. The definition of a CASP is broad. If your business does any of the following, you likely need registration:
- Custodial Services: Holding customer funds or private keys on their behalf.
- Trading Platforms: Facilitating the buying and selling of crypto assets.
- Exchange Services: Swapping fiat currency for crypto or vice versa.
- Lending and Borrowing: Offering yield products based on crypto holdings.
Even if you don’t hold funds, if you facilitate trades or provide infrastructure for others to do so, the SEC expects you to be compliant. The goal is consumer protection. After high-profile collapses worldwide, regulators want to ensure that when a Filipino user deposits money, there’s a legal entity accountable for it.
Core Licensing Requirements
Getting licensed isn’t as simple as filling out a web form. The SEC requires substantial proof of financial stability and operational integrity. Here is what you actually need to have in place before applying.
| Requirement Category | Specific Mandate | Why It Matters |
|---|---|---|
| Legal Structure | Must be a domestic corporation registered with the SEC. | Ensures local legal accountability and jurisdiction. |
| Capital | Minimum paid-up capital of PHP 100 million (~$1.8M USD). | Prevents underfunded startups from failing mid-operation. |
| Physical Presence | Mandatory physical office in the Philippines. | Allows for direct regulatory oversight and audits. |
| Fund Separation | Customer funds must be segregated from company assets. | Protects user money if the company goes bankrupt. |
| AML/KYC | Robust Anti-Money Laundering and Know Your Customer systems. | Compliance with the Anti-Money Launderance Council (AMLC). |
The PHP 100 million capital requirement is the biggest hurdle for smaller players. Note that this capital cannot be in crypto; it must be cash or equivalent liquid assets. This rule effectively filters out hobbyist projects and forces serious operators to demonstrate they can survive market volatility without dipping into user funds.
The Application Process
Applications go through the PhiliFintech Innovation Office. This specialized unit within the SEC handles fintech registrations. You’ll need to submit a comprehensive dossier at least 30 days before you plan to start operations.
Your submission package must include:
- Business Plan: Detailed description of your services, target market, and revenue model.
- Risk Management Framework: How you handle technical failures, cyberattacks, and market crashes.
- AML/CFT Policies: Specific procedures for detecting suspicious transactions and reporting them to authorities.
- Disclosure Documents: Clear terms of service and risk warnings for users.
Once approved, you aren’t done. You face ongoing obligations. Monthly financial reports are mandatory. You must also pay supervision fees calculated based on your gross revenue. Think of it as a tax for the privilege of operating legally.
Marketing and Public Offerings
Here’s where many foreign exchanges trip up. You can’t just run ads on Facebook targeting Manila. Under MC 4-2025, any marketing activity for crypto offerings requires prior compliance checks.
You must file disclosure documents with the SEC and publish them on your website and social media channels at least 30 days before launching a campaign. There are strict limits on what you can promise. You generally cannot guarantee future value appreciation. Phrases like "guaranteed returns" or "next Bitcoin" are risky and often prohibited unless backed by specific disclosures allowed under Section 5.3.
The SEC wants transparency. If you’re promoting a token sale or an exchange feature, the average Filipino investor needs to understand the risks immediately, not buried in fine print.
Enforcement: Who Got Caught?
The SEC isn’t bluffing. In August 2025, they issued public advisories against ten major exchanges, including OKX, Bybit, KuCoin, and Kraken. These platforms were serving Filipino users without proper licenses. Prior to this, Binance was completely blocked in 2024 after failing to secure approval, giving users 90 days to withdraw funds.
Penalties are steep. Violations can cost between ₱50,000 and ₱10 million per incident. Worse, ongoing violations incur daily penalties of ₱10,000. For a large exchange, those daily fines add up quickly. The message is clear: operate illegally, and you risk losing access to the entire Philippine market.
Strategic Implications for Operators
Is this framework good for the industry? It depends on who you ask. Established players like Youholder, Bit Get, and Bigone have adapted, using their compliance status as a competitive advantage. They market themselves as "safe" and "regulated," which appeals to cautious investors.
For smaller international startups, the barrier to entry is high. Setting up a physical office and securing $1.8 million in capital is expensive. Some analysts argue this limits competition and favors incumbents. However, others believe it creates a healthier ecosystem by weeding out scams and fly-by-night operators.
If you’re entering the market now, consider partnering with a local entity that already holds a license. This allows you to leverage their regulatory status while focusing on technology and user experience. It’s a common workaround for tech-focused firms that lack the capital structure for full CASP registration.
Future Outlook
The Philippines is positioning itself as a regional hub for responsible crypto innovation. While the Central Bank maintains a watchful eye, it hasn’t taken ownership of crypto reserves, leaving the market dynamic but supervised. Expect further refinements to the rules as the SEC gathers data from the first year of enforcement.
For now, the golden rule is simple: Don’t touch the Philippine market without a license. The regulatory clarity is worth the investment for long-term operators, but the short-term pain of compliance is real.
Can I trade crypto in the Philippines without a license?
Yes, individual trading is legal. The licensing requirements apply to service providers (exchanges, custodians), not individual investors. You can buy and sell freely, but the platform you use must be registered with the SEC.
What happens if my favorite exchange isn't licensed?
The SEC may issue advisories warning users about the risks. In severe cases, they can block websites or restrict banking partnerships. Users should monitor official SEC announcements and consider moving funds to licensed platforms to avoid withdrawal issues.
Does the minimum capital requirement include crypto assets?
No. The PHP 100 million minimum paid-up capital must be held in cash or traditional liquid assets. Crypto assets do not count toward this threshold because of their volatility and valuation complexities.
How long does the registration process take?
While applications must be submitted 30 days prior to operation, the actual review time varies. Depending on the completeness of your documentation and the complexity of your business model, it can take several months to receive final approval from the PhiliFintech Innovation Office.
Are DeFi protocols required to get a license?
This is a gray area. Fully decentralized protocols without a central entity controlling funds may not need a CASP license. However, if there is a centralized interface or team managing the protocol's treasury and marketing, the SEC may require registration to ensure consumer protection.