Crypto Licensing in Philippines: SEC Rules, Fees & Penalties for 2026

Running a cryptocurrency exchange or wallet service in the Philippines without a license is no longer an option. If you are targeting Filipino users, the Securities and Exchange Commission (SEC) has implemented strict rules that require every Crypto Asset Service Provider (CASP) to register locally. The days of international platforms operating freely while ignoring local laws ended with the enforcement of SEC Memorandum Circulars No. 04 and No. 05, Series of 2025. These regulations took effect on July 5, 2025, creating one of the most comprehensive regulatory frameworks in Southeast Asia.

If you are a business owner, legal counsel, or investor looking to understand what it takes to operate legally in this market, this guide breaks down the exact requirements, costs, and penalties involved. We will look at the capital needed, the documentation required, and how the SEC enforces these rules against non-compliant entities.

Who Needs a CASP License?

The term Crypto Asset Service Provider (CASP) covers almost any business interacting with digital assets in the Philippines. You need a license if your platform allows users to buy, sell, trade, or hold cryptocurrencies. This includes centralized exchanges, custodial wallets, and brokers.

The rule applies whether your company is based in Manila or London. If your services are accessible to people in the Philippines, you fall under the jurisdiction of the SEC. The regulator made it clear in July 2025 that trading itself is not banned, but the *platform* facilitating that trade must be registered. This distinction is crucial because it means individual investors can still trade, but they must do so on licensed platforms.

• Exchanges: Platforms matching buyers and sellers of crypto-assets.
• Custodians: Services holding private keys on behalf of clients.
• Brokers: Intermediaries executing trades for clients.
• Payment Processors: Companies converting crypto to fiat currency (PHP) or vice versa.

International giants like Binance were blocked in 2024 for failing to comply with earlier directives. In August 2025, the SEC issued public advisories against ten major exchanges, including OKX, Bybit, KuCoin, and Kraken, for continuing to serve Filipino users without proper registration. This shows the SEC is actively monitoring traffic and enforcing bans.

Core Licensing Requirements

To get approved, your business must meet several structural and financial hurdles. The SEC wants to ensure that only serious, solvent companies operate in the space. Here is what you need to prepare:

1. Corporate Structure

You cannot operate as a foreign entity alone. You must register as a domestic corporation with the SEC. This means incorporating a local company in the Philippines. This local entity will be the legal holder of the CASP license. It ensures that the SEC has direct legal recourse against the company if things go wrong.

2. Minimum Capital Requirement

This is often the biggest barrier to entry. The rules mandate a minimum paid-up capital of PHP 100 million (approximately $1.8 million USD). Importantly, this capital must be in cash or traditional assets. You cannot use cryptocurrency holdings to satisfy this requirement. This ensures the company has liquid funds to cover operational risks and potential customer losses.

3. Physical Presence

Digital-only operations are not enough. You must maintain a physical office in the Philippines. This office serves as the headquarters for your local operations and is where regulators can conduct inspections. It also demonstrates a long-term commitment to the Philippine market rather than a fly-by-night scheme.

4. Submission Timeline

You cannot launch tomorrow. Applications must be submitted to the SEC's PhiliFintech Innovation Office. All disclosure plans and marketing materials must be filed at least 30 days prior to commencing any crypto-related activities. This cooling-off period allows the SEC to review your documents for compliance.

Documentation and Compliance Systems

Beyond money and offices, you need robust systems. The SEC requires extensive documentation proving your platform is secure and transparent. When applying, you must submit:

• Business Rules: Clear terms of service outlining user rights, fee structures, and dispute resolution mechanisms.
• AML/KYC Systems: Detailed procedures for Anti-Money Laundering and Know Your Customer checks. You must integrate with the Anti-Money Laundering Council (AMLC) reporting systems.
• Risk Control Mechanisms: Technical safeguards to prevent hacking, fraud, and system failures. This includes cybersecurity audits and insurance details.
• Segregation of Funds: Proof that customer funds are kept separate from company operational accounts. This prevents the company from using client money for its own expenses, a common cause of exchange collapses elsewhere.

The AMLC integration is critical. You must report suspicious transactions regularly. Failure to do so can result in immediate revocation of your license. The SEC views financial crime prevention as a top priority, especially given the high volume of remittances flowing through crypto channels in the region.

Marketing and Disclosure Rules

How you talk about your product matters just as much as how you build it. Under MC 4-2025, you cannot simply run ads promising huge returns. The SEC has strict rules on marketing crypto-assets.

You must produce disclosure documents that are filed with the SEC and published on your website, social media, and other channels at least 30 days before any offering begins. These documents must explain the risks clearly. You are prohibited from making assertions about future values of crypto-assets, except for specific statements allowed under Section 5.3 of the regulations. This means no "guaranteed profits" or speculative hype.

This transparency requirement protects retail investors who may not understand the volatility of digital assets. It forces companies to educate their users rather than exploit their lack of knowledge. Platforms like Youholder and Cex.io have adapted by focusing on educational content and clear risk warnings, positioning themselves as trusted partners in the regulated ecosystem.

Fees and Ongoing Costs

Getting the license is just the start. Operating legally involves ongoing costs. The SEC calculates registration and supervision fees based on your gross revenue. This means as your business grows, your regulatory fees increase proportionally.

In addition to fees, you face significant administrative overhead. You must submit detailed monthly financial reports to the SEC. These reports provide real-time visibility into your financial health, allowing regulators to spot trouble early. Regular AML audits are also mandatory, adding to the operational budget.

These costs create a barrier for smaller startups but favor established players who can absorb the expense. For many international exchanges, the cost of setting up a local entity and raising PHP 100 million outweighs the profit from the Philippine market, leading them to exit voluntarily or face blocking.

Penalties for Non-Compliance

The consequences of ignoring these rules are severe. The SEC has shown it is willing to take aggressive action. Violations of the CASP framework result in fines ranging from PHP 50,000 to PHP 10 million per violation. If the violation continues, an additional daily penalty of PHP 10,000 is applied until compliance is achieved.

But fines are not the only risk. The primary enforcement tool is website blocking. Internet Service Providers (ISPs) in the Philippines can be ordered to block access to non-compliant platforms. This effectively cuts off your entire user base in the country. The blocking of Binance in 2024 serves as a stark warning. Users were given 90 days to withdraw their funds before access was completely severed.

Furthermore, executives of non-compliant companies can face legal liability. The SEC has the power to pursue criminal charges for fraud or money laundering facilitation. This personal risk makes it difficult for founders to argue that they "didn't know" about the regulations.

Market Impact and Future Outlook

Despite the strict rules, the Philippine crypto market is growing. Adoption is projected to reach 10.49% penetration in 2025, rising to 10.86% by 2026. The number of users is expected to hit 12.79 million, with crypto revenue growing to ₱1.1 billion. The annual growth rate remains steady at 4.59%, suggesting that regulation has not killed demand; it has merely formalized it.

The government’s stance is protective, not prohibitive. The central bank maintains oversight but does not hold crypto reserves, keeping a neutral, regulatory role. The goal is to position the Philippines as a regional hub for fintech innovation by balancing consumer protection with market accessibility.

For compliant operators, this creates a safer environment. Users are more likely to trust platforms that display their SEC license prominently. This trust can lead to higher user retention and larger average account sizes. Companies that invest in compliance now are building a moat against competitors who may try to enter later.

However, challenges remain. The high capital requirement may limit competition, potentially leading to oligopolies where a few large players dominate the market. Smaller, innovative startups might struggle to raise the necessary funds, slowing down product diversity. The SEC may refine these rules in the future based on feedback, but for now, the bar is high.

Next Steps for Businesses

If you plan to operate in the Philippines, start by assessing your capital structure. Can you raise PHP 100 million? If yes, begin the process of incorporating a local entity. Engage with local legal counsel specializing in fintech to navigate the application process. Prepare your AML/KYC systems for audit well in advance. Do not wait until you are ready to launch; the 30-day disclosure window is strict.

If you are already operating without a license, consider the risks. Will you pay the fines? Can you survive being blocked? The trend is clear: the SEC is closing loopholes. Voluntary compliance is always cheaper and less damaging than forced shutdowns.