All reports
Daily Brief · Crypto · AI · FinTech

MAS Flags AML Gaps Across Singapore's Crypto Firms, Manila's IBPAP Cuts Its 2028 Outsourcing Targets on AI, and Fitch Says Malaysia's Data-Centre Capacity Will Overtake Singapore's

The Monetary Authority of Singapore published a July 16 supervisory paper flagging anti-money-laundering gaps across digital payment token providers — thin wealth-source verification, under-scrutinized large transfers, and incomplete Travel Rule screening — and told boards to own the fix. The Philippines' IT-BPM association IBPAP cut its 2028 industry roadmap from US$59 billion and 2.5 million jobs to a US$43.3–50.5 billion, 1.85–2.14 million-job range, citing AI adoption, slower buyer decisions and rising competition. And Fitch Ratings said Malaysia's data-centre capacity should reach roughly 2 gigawatts by year-end, overtaking Singapore's 1.4–1.5 gigawatts, though financing — not power or land — is now the sector's binding constraint.

July 16, 20264 min readSingapore · Philippines · Malaysia · Crypto · AML · AI · Data Centres · Outsourcing
A wide editorial photograph at golden hour of a monumental modern financial-regulator office tower in a Southeast Asian central business district, glass curtain wall and granite base, two anonymous office workers crossing the forecourt in the middle distance, hazy skyline behind, no legible text or logos.
Singapore's central bank used a supervisory paper this week to tell crypto firms their AML controls are unevenly implemented — and that boards now own the fix.

MAS Flags AML Control Gaps Across Singapore's Crypto Firms

On July 16, the Monetary Authority of Singapore published a supervisory information paper flagging weaknesses in how digital payment token (DPT) service providers implement anti-money-laundering controls, according to Fintech News Singapore. The findings span the compliance chain: some firms leaned too heavily on customer self-declarations when verifying the source of wealth for higher-risk clients rather than independently corroborating it; transaction-monitoring teams failed to investigate unusually large transfers or properly assess alerts generated by blockchain-analytics tools; firms lacked clear internal guidance for assessing and documenting the risk of a new token before listing it; and some providers did not fully screen originators and beneficiaries on token transfers as required under the crypto Travel Rule.

The paper supplements MAS Notice PSN02 and its accompanying guidelines — the existing AML/CFT framework for DPT providers — rather than introducing new rules. MAS said providers "generally understand their obligations but need to improve how some controls are implemented," a framing that shifts the burden from rule clarity to execution, and it directed that boards and senior management take direct ownership of reviewing the gaps and remediating them rather than leaving the fix to compliance teams alone.

Philippines' IT-BPM Industry Cuts Its 2028 Roadmap as AI Reshapes Outsourcing Demand

The IT & Business Process Association of the Philippines (IBPAP) has lowered its six-year growth targets for the country's outsourcing sector, president Jack Madrid said this week, according to The Manila Times. The industry's 2022 roadmap had targeted US$59 billion in annual revenue and 2.5 million full-time jobs by 2028; the "roadmap refresh" now points to a narrower US$43.3 billion to US$50.5 billion in revenue and 1.85 million to 2.14 million FTEs by the same year, with 2027 pegged at US$45.3 billion and 1.99 million jobs. For 2026 itself, IBPAP still expects growth — to US$42.3 billion in revenue and 1.96 million workers.

Madrid attributed the downgrade to "shifts in technology, buyer behavior and global competition, as countries adapt to new technology and businesses take longer to make decisions" — language that places AI adoption inside client operations, alongside slower enterprise decision cycles and rival outsourcing destinations, among the forces compressing the original targets. IBPAP is now pointing growth toward healthcare, banking and financial-services process work and AI-enabled analytics, engineering and digital services, rather than the traditional voice and back-office volume the 2022 roadmap was built on.

Fitch: Malaysia's Data-Centre Capacity Set to Overtake Singapore's This Year, Financing Now the Binding Constraint

Fitch Ratings does not see Malaysia's data-centre buildout facing near-term oversupply risk, Sajal Kishore, the agency's Asia-Pacific head of infrastructure and project finance, told The Edge Malaysia. Malaysia could reach roughly 2 gigawatts of operational and planned capacity by year-end — above Singapore's current 1.4 to 1.5 gigawatts — with Johor's proximity to Singapore, and its comparative abundance of land and power, positioning it to absorb cloud and AI-inference demand that Singapore's own land and power constraints won't allow it to host domestically.

Kishore's de-risking logic rests on repurposability: demand at Malaysian sites currently splits roughly 70% cloud and 30% AI, a ratio Fitch expects to invert over time, and a facility built for AI that can be repurposed for general cloud workloads is inherently less exposed if AI-specific demand cools. Fitch flagged financing, not power or land, as the emerging constraint: lenders are growing more cautious about AI-related contract-renewal risk, a shift that could push the sector toward capital-markets and structured-finance models resembling those already established for data-centre debt in the United States.

Eyes on the Day Ahead

Watch for MAS to follow its AML information paper with targeted inspections of the specific gaps named — wealth-source verification, large-transaction escalation and Travel Rule screening are the areas licensed Singapore exchanges should expect to be tested on first. In the Philippines, IBPAP's downgraded targets will likely draw reaction from BPO-reliant property and staffing names over the coming days. And Malaysia's AI Governance Bill public consultation, flagged in this week's weekly signal, remains open through July 31 — still the nearest hard deadline for anyone shaping the compliance regime that AI deployers and data-centre operators will eventually work under.

Layer 7 Ventures is a research-driven firm focused on AI and cryptocurrency in Southeast Asia. Views expressed are those of the firm and do not constitute investment advice.

More Research

Photorealistic photograph of a digital-asset compliance and transaction-monitoring floor in a Bangkok office at pre-dawn blue hour, an anonymous analyst reviewing multi-monitor data screens in the foreground while a second anonymous figure stands silhouetted at the window overlooking the skyline.
Weekly Signal · Crypto · FinTech7 min

SEA Signal: Thailand Locks In a Crypto Travel Rule, BitGo Plants Its APAC Flag in Singapore, and the Philippines Wires QR Ph to the World

Thailand's SEC finalized a Travel Rule that forces digital-asset operators to identify counterparties on every transfer, including self-custodial wallets, from February 2027. BitGo opened a Singapore office after tripling its APAC client base, a vote of confidence in the city-state's licensing regime from a major institutional custodian. And the Philippines connected its QR Ph network to Alipay+, giving 2.5 million local merchants a route into cross-border commerce without touching their existing infrastructure.

Photorealistic exterior photograph of a central bank headquarters building in Kuala Lumpur at golden hour, an anonymous security guard standing at the entrance and two office workers crossing the forecourt, with the city skyline visible in the background.
Daily Brief · FinTech · AI4 min

SEA Daily Brief: BNM's Sanctions-Screening Fines, Qualcomm's Vietnam AI Bet, and CIMB's Biometric Mandate

Bank Negara Malaysia fined Petronas' Setel and two Standard Chartered units a combined RM901,500 over sanctions-screening lapses. Qualcomm's CEO told Vietnam's top leader he wants the country to become the chipmaker's third-largest AI R&D hub globally. And CIMB will require biometric or passcode approval for all online banking transactions from September 19, ending password-only authorization.

A regulator addresses a conference audience from a lectern, a large digital screen behind them, seen from the back of the room.
Daily Brief · Crypto · AI4 min

SEA Daily Brief: Indonesia's OJK Maps a Crypto Roadmap, Singapore's Scam Data, and Alibaba's Malaysia AI Push

Indonesia's OJK laid out a 2026-2031 roadmap covering stablecoin regulation, real-world asset tokenization, and a single investor ID for crypto. Singapore's H1 2026 scam losses fell 17.9% to S$410.6 million, with crypto-linked losses down 43% but still 16% of the total. And Alibaba Cloud joined Malaysia's AI Untuk Rakyat programme, offering two free AI tools to 100,000 young Malaysians.

Stay Informed

Get the next report in your inbox.