For years, Filipino crypto traders operated in a gray area. You could sign up for any global exchange, deposit pesos, and trade Bitcoin without much friction. But that era ended abruptly on July 5, 2025. The Securities and Exchange Commission (SEC) of the Philippines enforced its new comprehensive framework, effectively closing the door on unlicensed international platforms. If you are a Crypto Asset Service Provider (CASP) looking to operate in or target Filipino users, the rules have changed from "optional compliance" to "mandatory registration."
This isn't just about filling out a form. It is a structural overhaul requiring significant capital, physical presence, and rigorous operational standards. With penalties reaching millions of pesos and daily fines for non-compliance, understanding the exact requirements under SEC Memorandum Circular No. 04 and No. 05, Series of 2025 is critical for survival in this market.
The New Reality: What Are CASP Rules?
To understand the licensing process, you first need to define who needs a license. The SEC introduced the term Crypto Asset Service Provider (CASP). This covers any entity that facilitates transactions between crypto-assets and fiat money, exchanges one crypto for another, manages wallets, or participates in offerings of digital assets.
If your platform serves Filipino residents, you fall under this definition. The previous landscape allowed giants like Binance to operate freely until they were blocked in 2024 after failing to comply with local demands. Now, the path is clear: register as a domestic corporation or get blocked. The enforcement action on August 1, 2025, which targeted ten major exchanges including OKX, Bybit, KuCoin, and Kraken, signaled that the SEC is serious. These platforms were issued public advisories for operating without proper licenses while continuing to serve the Philippine market.
The goal here is investor protection. The regulator aims to prevent fund losses, curb fraud, and stop money laundering. For businesses, this means higher barriers to entry but also a more stable, trusted environment for long-term growth.
Core Licensing Requirements for CASPs
Getting licensed is not cheap or easy. The SEC has set high bars to ensure only serious, financially stable players enter the market. Here are the non-negotiable pillars of the CASP license:
- Domestic Corporation Status: You cannot be a foreign entity operating remotely. You must register as a domestic corporation with the SEC.
- Minimum Paid-Up Capital: The requirement is PHP 100 million (approximately $1.8 million USD). Crucially, this amount must be in cash or equivalent liquid assets, excluding any crypto-assets held by the company.
- Physical Office Presence: A virtual office won’t cut it. You must maintain a physical office within the Philippines where regulatory authorities can conduct inspections and audits.
- Registration with PhiliFintech Innovation Office: All applications go through this specific office within the SEC, which acts as the central hub for fintech regulation.
These requirements immediately filter out smaller startups and informal operators. They favor established platforms that have the resources to build infrastructure in Southeast Asia. For example, companies like Youholder and Bitget have moved quickly to implement enhanced security protocols and regulatory adherence, positioning themselves as compliant leaders in this new era.
Documentation and Operational Standards
Capital is just the entry ticket. To keep your license, you need robust systems. The application process requires extensive documentation submitted to the SEC before you can launch any activities. You must submit these documents at least 30 days prior to commencing operations.
Your submission must include detailed business rules, comprehensive Anti-Money Laundering (AML) policies, and Know Your Customer (KYC) procedures. The SEC wants to see exactly how you verify user identities and track suspicious transactions. Additionally, you need to outline your risk control mechanisms and disclosure plans.
One of the most critical operational mandates is the segregation of funds. Licensed CASPs must strictly separate customer funds from company assets. This rule was designed to protect users in the event of an exchange collapse, ensuring that client money isn't used to cover corporate debts or losses. Monthly financial reports must be submitted to the SEC to prove this separation is maintained.
Marketing and Public Offering Restrictions
How you talk about your product matters as much as how you run it. Under MC 4-2025, marketing crypto-assets in the Philippines is heavily regulated. You cannot simply sell or offer crypto-assets without regulatory compliance.
CASPs must produce disclosure documents that are filed with the SEC and published on their websites, social media accounts, and other communication channels. These disclosures must be live at least 30 days before any marketing activity or actual offering begins. This cooling-off period ensures investors have time to review the risks.
Furthermore, the rules prohibit assertions regarding future crypto-asset values, except for very specific statements allowed under Section 5.3 of the regulations. This prevents hype-driven marketing that often leads to retail investor losses. You must communicate transparently, avoiding promises of guaranteed returns or speculative price predictions.
Penalties for Non-Compliance
The cost of ignoring these rules is steep. The SEC has equipped itself with substantial penalty powers to enforce the CASP framework. Violations result in fines ranging from 50,000 to 10 million pesos per violation.
If a violation continues day after day, an additional daily penalty of 10,000 pesos is applied. This cumulative structure makes prolonged non-compliance financially unsustainable for any business. Beyond fines, the ultimate penalty is exclusion from the market. As seen with Binance in 2024, the government can block access to the platform entirely, forcing users to exit within a set timeframe (90 days in Binance's case).
| Scenario | Requirement | Consequence of Failure |
|---|---|---|
| Capital Adequacy | Maintain PHP 100M paid-up capital | License revocation; inability to operate legally |
| Fund Segregation | Separate customer vs. company funds | Daily fines of PHP 10,000; loss of trust |
| Marketing Disclosure | File docs 30 days prior to launch | Fines up to PHP 10M per violation |
| AML/KYC Systems | Implement strict verification protocols | Public advisory; potential blocking |
Market Impact and Future Outlook
Despite the strictness, the Philippine crypto market is growing. Adoption is projected to reach a 10.49% penetration rate in 2025, rising to 10.86% by 2026. The number of users is expected to hit 12.79 million, with crypto revenue growing to ₱1.1 billion. Annual growth rates remain positive at 4.59%, suggesting that regulation hasn't killed the market-it has matured it.
The framework positions the Philippines as a competitive hub in Southeast Asia. While some analysts criticize the high capital requirements for limiting competition, others praise the balance between investor protection and market development. The SEC’s approach creates a level playing field where compliant operators can thrive without being undercut by shady, unregulated competitors.
Looking ahead, the SEC indicates potential refinements based on market feedback. However, the core principles-domestic registration, capital adequacy, and transparency-are likely to remain. For businesses, the message is clear: adapt now, or be left out.
Who needs a CASP license in the Philippines?
Any entity operating as a Crypto Asset Service Provider (CASP) that targets or serves Filipino users needs a license. This includes exchanges, wallet providers, and firms facilitating crypto-to-fiat transactions. Even if your headquarters is abroad, if you accept Philippine Peso deposits or serve Philippine IP addresses, you fall under SEC jurisdiction.
What is the minimum capital required for a crypto license?
The SEC requires a minimum paid-up capital of PHP 100 million (approx. $1.8 million USD). This capital must be in cash or liquid equivalents and cannot include cryptocurrency holdings. It must be maintained throughout the operation of the business.
Can I operate a crypto exchange remotely from outside the Philippines?
No. The regulations mandate that CASPs register as domestic corporations and maintain a physical office presence in the Philippines. Remote-only operations targeting Filipino users are subject to enforcement actions, including fines and website blocking.
What happens if I don't file my monthly reports?
Failure to submit required monthly financial reports and maintain compliance with AML/KYC standards results in penalties. Fines can range from PHP 50,000 to PHP 10 million per violation, plus daily fines of PHP 10,000 for ongoing non-compliance.
How do I apply for a CASP license?
Applications must be submitted to the SEC's PhiliFintech Innovation Office. You need to provide extensive documentation including business rules, AML/KYC systems, risk controls, and proof of capital. Applications should be filed at least 30 days before starting operations.