Crypto Licensing Requirements in Philippines by SEC: 2025 Rules & Penalties

The landscape for cryptocurrency business in the Philippines changed overnight. If you are running an exchange or a wallet service targeting Filipino users, the days of operating without a local license are over. The Securities and Exchange Commission (SEC) of the Philippines has enforced some of the strictest rules in Southeast Asia. This isn't just paperwork; it is a fundamental shift that has already led to the blocking of major global platforms like Binance and warnings for others like OKX and Kraken.

For founders, investors, and operators, understanding these rules is no longer optional-it is existential. The regulatory framework established in mid-2025 mandates specific capital requirements, physical presence, and rigorous reporting. Getting this wrong doesn't just mean a fine; it means your platform becomes inaccessible to millions of potential users.

Key Takeaways

• Mandatory Licensing: All Crypto Asset Service Providers (CASPs) must register with the SEC under Memorandum Circulars No. 04 and No. 05 (Series of 2025).
• High Capital Barrier: You need a minimum paid-up capital of PHP 100 million (approx. $1.8 million USD) excluding crypto-assets.
• Physical Presence Required: Digital-only operations are not allowed. You must maintain a physical office in the Philippines.
• Strict Enforcement: Non-compliant exchanges face website blocking, heavy fines up to PHP 10 million per violation, and daily penalties.
• Marketing Restrictions: Disclosure documents must be filed 30 days before any marketing or offering begins.

Understanding the New Regulatory Framework

To navigate this space, you first need to understand the entities involved. The central regulator here is the Securities and Exchange Commission (SEC) of the Philippines, which oversees corporate registration and securities offerings. They have partnered closely with the Anti-Money Laundering Council (AMLC), the body responsible for combating financial crimes. Together, they created the rules for Crypto Asset Service Providers (CASPs), defined as any entity facilitating the buying, selling, exchanging, or transferring of crypto assets.

The turning point came on May 30, 2025, when the SEC issued Memorandum Circulars No. 04 and No. 05. These circulars did not take effect immediately. There was a grace period ending on July 5, 2025. Since then, the enforcement has been aggressive. The goal is clear: bring transparency to a market where adoption is skyrocketing. With crypto penetration projected to hit 10.49% in 2025 and user numbers reaching nearly 13 million, the government sees both risk and opportunity. They want to protect investors from fraud while fostering a legitimate industry.

Unlike previous years where international exchanges operated in a gray area, the current stance is binary: you are either licensed and compliant, or you are banned. The PhiliFintech Innovation Office within the SEC serves as the primary contact point for all registrations and supervision.

Core Licensing Requirements for CASPs

If you plan to operate legally, you must meet specific structural and financial criteria. These are not suggestions; they are hard gates. Let’s break down what is required to get your license.

1. Corporate Structure and Capital

You cannot operate as a foreign entity without local incorporation. You must register as a domestic corporation with the SEC. More importantly, you need skin in the game. The regulation mandates a minimum paid-up capital of PHP 100 million. To put that in perspective, at current exchange rates, this is roughly $1.8 million USD. Crucially, this capital must be in fiat currency or other non-crypto assets. You cannot use Bitcoin or Ethereum to meet this requirement. This ensures that the company has liquid reserves to cover operational costs and potential liabilities without relying on volatile asset values.

2. Physical Presence

The era of "remote-first" crypto exchanges serving the Philippines is effectively over for legal operations. You are required to maintain a physical office presence in the country. This means leasing commercial space, hiring local staff, and establishing a tangible footprint. This requirement allows regulators to conduct physical inspections and ensures there is a local entity accountable for actions taken by the platform.

3. Operational Documentation

Before you can even think about launching, you must submit extensive documentation to the PhiliFintech Innovation Office. This includes:

• Business Rules: Clear terms of service and operational protocols.
• AML/KYC Systems: Detailed descriptions of your Anti-Money Laundering and Know Your Customer procedures. These must align with AMLC standards.
• Risk Control Mechanisms: Technical safeguards to prevent hacks, insolvency, and operational failures.
• Disclosure Plans: How you will communicate risks to users.

All of this must be submitted at least 30 days prior to commencing any crypto-related activities. Rushing this process is a common mistake that leads to immediate rejection or suspension.

Enforcement Actions and Real-World Consequences

Rules mean nothing without enforcement. The Philippines SEC has shown it is willing to act decisively. Here is how the regulatory hammer has fallen so far.

In 2024, authorities blocked Binance, the world’s largest exchange, after it failed to comply with local registration demands. Users were given 90 days to withdraw their funds. This set a precedent. Then, on August 1, 2025, the SEC issued public advisories against ten major exchanges, including OKX, Bybit, KuCoin, and Kraken. These platforms were targeted for continuing to serve Filipino users without proper licenses.

The message is clear: if you are targeting Filipino users, you play by their rules. The SEC clarified on July 5, 2025, that these rules do not prohibit trading itself, but they strictly regulate the intermediaries. The focus is on investor protection against fraud, fund losses, and money laundering.

Marketing and Disclosure Obligations

Even if you are licensed, how you talk to customers matters immensely. Under MC 4-2025, marketing crypto-assets is heavily regulated. You cannot simply run ads promising high returns. In fact, asserting future values of crypto-assets is largely prohibited, except for very specific statements allowed under Section 5.3 of the regulations.

Before you launch any marketing campaign or offer new tokens, you must produce disclosure documents. These documents must be:

1. Filed with the SEC.
2. Published on your website.
3. Shared via social media accounts and other communication channels.

This publication must happen at least 30 days before the actual marketing or offering begins. This cooling-off period allows regulators to review your claims and gives users time to digest the risks. Failure to follow this timeline can result in the same severe penalties as operating without a license.

Ongoing Compliance and Reporting

Getting the license is just the start. The SEC requires continuous oversight. Licensed CASPs must submit detailed monthly financial reports. These aren't just balance sheets; they include data on transaction volumes, user demographics, and security incidents.

You must also maintain strict separation between customer funds and company assets. This is known as the "segregation of funds" principle. It prevents exchanges from using user deposits to pay for operational expenses or speculative trades-a practice that led to the collapse of many unregulated platforms globally. Regular audits by independent third parties are often required to verify this separation.

Furthermore, you must adhere to evolving AML standards. This means regular reporting to both the SEC and the AMLC. Any suspicious transactions must be flagged immediately. The cost of compliance is high, but it is necessary to remain in business.

Market Impact and Competitive Landscape

These stringent rules have reshaped the competitive landscape. Smaller international exchanges, unable to meet the PHP 100 million capital requirement or establish a physical office, have exited the market. This has created a barrier to entry that favors established players with deep pockets.

However, it has also leveled the playing field for local and compliant international firms. Platforms like Youholder, Cex.io, Bitget, and Bigone have adapted by implementing enhanced security protocols and seeking full regulatory adherence. By positioning themselves as trusted, compliant entities, they are capturing market share from those who chose to ignore the rules.

Despite the crackdown, the market is growing. Annual growth rates remain positive at around 4.59%. Investors are becoming more discerning, preferring platforms that offer legal certainty over those that might offer slightly lower fees but carry higher regulatory risk. The government’s stance is protective, not prohibitive. They aim to build a sustainable ecosystem, not crush innovation.

Strategic Recommendations for Operators

If you are considering entering the Philippine market, here is a practical checklist:

• Assess Capital Readiness: Ensure you have access to PHP 100 million in fiat capital. Do not count crypto holdings.
• Establish Local Entity: Begin the process of incorporating a domestic corporation and securing office space early. Bureaucracy takes time.
• Build Robust AML/KYC: Invest in technology that automates identity verification and transaction monitoring. Manual checks will not scale and will fail audits.
• Prepare Disclosure Documents: Draft comprehensive risk disclosures and file them well in advance of any product launch.
• Engage Legal Counsel: Hire lawyers specializing in Philippine fintech law. The nuances of MC 04 and MC 05 are complex and subject to interpretation.

Ignoring these steps is not a viable strategy. The window for informal operation has closed. The Philippines is positioning itself as a regional hub for regulated crypto finance. Being part of that story requires compliance.