All reports
Daily Brief · Crypto · AI · FinTech

MAS Flags AML Gaps Across Singapore's Crypto Firms, Manila's IBPAP Cuts Its 2028 Outsourcing Targets on AI, and Fitch Says Malaysia's Data-Centre Capacity Will Overtake Singapore's

The Monetary Authority of Singapore published a July 16 supervisory paper flagging anti-money-laundering gaps across digital payment token providers — thin wealth-source verification, under-scrutinized large transfers, and incomplete Travel Rule screening — and told boards to own the fix. The Philippines' IT-BPM association IBPAP cut its 2028 industry roadmap from US$59 billion and 2.5 million jobs to a US$43.3–50.5 billion, 1.85–2.14 million-job range, citing AI adoption, slower buyer decisions and rising competition. And Fitch Ratings said Malaysia's data-centre capacity should reach roughly 2 gigawatts by year-end, overtaking Singapore's 1.4–1.5 gigawatts, though financing — not power or land — is now the sector's binding constraint.

July 16, 20264 min readSingapore · Philippines · Malaysia · Crypto · AML · AI · Data Centres · Outsourcing
A wide editorial photograph at golden hour of a monumental modern financial-regulator office tower in a Southeast Asian central business district, glass curtain wall and granite base, two anonymous office workers crossing the forecourt in the middle distance, hazy skyline behind, no legible text or logos.
Singapore's central bank used a supervisory paper this week to tell crypto firms their AML controls are unevenly implemented — and that boards now own the fix.

MAS Flags AML Control Gaps Across Singapore's Crypto Firms

On July 16, the Monetary Authority of Singapore published a supervisory information paper flagging weaknesses in how digital payment token (DPT) service providers implement anti-money-laundering controls, according to Fintech News Singapore. The findings span the compliance chain: some firms leaned too heavily on customer self-declarations when verifying the source of wealth for higher-risk clients rather than independently corroborating it; transaction-monitoring teams failed to investigate unusually large transfers or properly assess alerts generated by blockchain-analytics tools; firms lacked clear internal guidance for assessing and documenting the risk of a new token before listing it; and some providers did not fully screen originators and beneficiaries on token transfers as required under the crypto Travel Rule.

The paper supplements MAS Notice PSN02 and its accompanying guidelines — the existing AML/CFT framework for DPT providers — rather than introducing new rules. MAS said providers "generally understand their obligations but need to improve how some controls are implemented," a framing that shifts the burden from rule clarity to execution, and it directed that boards and senior management take direct ownership of reviewing the gaps and remediating them rather than leaving the fix to compliance teams alone.

Philippines' IT-BPM Industry Cuts Its 2028 Roadmap as AI Reshapes Outsourcing Demand

The IT & Business Process Association of the Philippines (IBPAP) has lowered its six-year growth targets for the country's outsourcing sector, president Jack Madrid said this week, according to The Manila Times. The industry's 2022 roadmap had targeted US$59 billion in annual revenue and 2.5 million full-time jobs by 2028; the "roadmap refresh" now points to a narrower US$43.3 billion to US$50.5 billion in revenue and 1.85 million to 2.14 million FTEs by the same year, with 2027 pegged at US$45.3 billion and 1.99 million jobs. For 2026 itself, IBPAP still expects growth — to US$42.3 billion in revenue and 1.96 million workers.

Madrid attributed the downgrade to "shifts in technology, buyer behavior and global competition, as countries adapt to new technology and businesses take longer to make decisions" — language that places AI adoption inside client operations, alongside slower enterprise decision cycles and rival outsourcing destinations, among the forces compressing the original targets. IBPAP is now pointing growth toward healthcare, banking and financial-services process work and AI-enabled analytics, engineering and digital services, rather than the traditional voice and back-office volume the 2022 roadmap was built on.

Fitch: Malaysia's Data-Centre Capacity Set to Overtake Singapore's This Year, Financing Now the Binding Constraint

Fitch Ratings does not see Malaysia's data-centre buildout facing near-term oversupply risk, Sajal Kishore, the agency's Asia-Pacific head of infrastructure and project finance, told The Edge Malaysia. Malaysia could reach roughly 2 gigawatts of operational and planned capacity by year-end — above Singapore's current 1.4 to 1.5 gigawatts — with Johor's proximity to Singapore, and its comparative abundance of land and power, positioning it to absorb cloud and AI-inference demand that Singapore's own land and power constraints won't allow it to host domestically.

Kishore's de-risking logic rests on repurposability: demand at Malaysian sites currently splits roughly 70% cloud and 30% AI, a ratio Fitch expects to invert over time, and a facility built for AI that can be repurposed for general cloud workloads is inherently less exposed if AI-specific demand cools. Fitch flagged financing, not power or land, as the emerging constraint: lenders are growing more cautious about AI-related contract-renewal risk, a shift that could push the sector toward capital-markets and structured-finance models resembling those already established for data-centre debt in the United States.

Eyes on the Day Ahead

Watch for MAS to follow its AML information paper with targeted inspections of the specific gaps named — wealth-source verification, large-transaction escalation and Travel Rule screening are the areas licensed Singapore exchanges should expect to be tested on first. In the Philippines, IBPAP's downgraded targets will likely draw reaction from BPO-reliant property and staffing names over the coming days. And Malaysia's AI Governance Bill public consultation, flagged in this week's weekly signal, remains open through July 31 — still the nearest hard deadline for anyone shaping the compliance regime that AI deployers and data-centre operators will eventually work under.

Layer 7 Ventures is a research-driven firm focused on AI and cryptocurrency in Southeast Asia. Views expressed are those of the firm and do not constitute investment advice.

More Research

A shopkeeper in a plaid shirt and a helmeted delivery rider face each other across the counter of a Kuala Lumpur shophouse in harsh midday sun, with a card payment terminal and stacked cartons on the counter and motorbikes parked at the kerb.
Daily Brief · FinTech · Geopolitics4 min

SEA Daily Brief: Malaysia Lifts SME Financing to RM57 Billion and Tops Up BNM's Relief Facility, Thailand Plans an SME Credit Portal, and Vietnam Wins Its First Investment-Grade Rating

Malaysia's Budget 2027 raises SME loan facilities and financing guarantees to RM57 billion from RM50 billion, while Bank Negara Malaysia adds RM5 billion to its SME Stabilisation Relief Facility after RM3.8 billion of the first tranche was approved. The Bank of Thailand outlined an SME credit portal, an alternative data exchange and a five-year guarantee scheme aimed at about 100 billion baht of new SME lending a year, after a four-year decline. Japan's R&I upgraded Vietnam to BBB-, the first investment-grade rating from an international agency, while Moody's, S&P Global and Fitch still rate it sub-investment grade.

High-angle view of a Kuala Lumpur financial district at pre-dawn blue hour, with office towers, a river bend and a few tiny pedestrians crossing a floodlit plaza and a marked crosswalk.
Daily Brief · FinTech · AI4 min

SEA Daily Brief: Malaysia's Budget 2027 Backs Startups and Crowdfunding, the SC Reports 2025 Restitution Figures, and UOB Explores a Dedicated AWS Cloud for ASEAN

Malaysia's Budget 2027, tabled on 9 October, earmarks RM450 million for startups through Jelawang Capital and Dana Perintis and RM270 million to draw private capital into equity crowdfunding and P2P platforms, with no distribution mechanism disclosed. The Securities Commission told Parliament it returned RM1.98 million to 239 investors in 2025 and has set aside RM8.6 million for 933 more. UOB signed an MoU with AWS to explore a dedicated Singapore cloud environment for its five ASEAN markets, with no financial terms or timeline given.

Office workers and a security guard walk across a stone forecourt toward a modern government building with a sweeping roofline in Kuala Lumpur, lit by low golden-hour sun with palm trees and a lawn in the foreground.
Daily Brief · FinTech · Crypto · AI4 min

SEA Daily Brief: Malaysia's Budget 2027 Proposes Tokenised Retail Sukuk, Singapore Licenses Large Data Centres, and the NSRC Plans an AI Scam-Check App

Prime Minister Anwar Ibrahim proposed a blockchain-based retail savings sukuk in Budget 2027, tabled on 9 October, with no launch date, minimum investment or return disclosed. Singapore's Parliament passed the Digital Infrastructure Bill on 7 October, creating licensing regimes for data centres of 10MW or more and large cloud providers. Malaysia's National Scam Response Centre also plans an AI application to check suspicious numbers, accounts and links, with no funding or launch date stated.

Stay Informed

Get the next report in your inbox.