Bybit Added to MAS Investor Alert List in Singapore

Bybit added to MAS Investor Alert List amid consumer protection focus

Singapore’s Monetary Authority of Singapore (MAS) has added Bybit Fintech Limited and Bybit to its Investor Alert List, a registry intended to help consumers avoid entities that could be mistaken for MAS-licensed or MAS-regulated firms. The regulator posted the update on Wednesday, but did not provide a specific explanation for the listing.

MAS describes the Investor Alert List as a mechanism to identify investment offers and entities that may create a false impression of being licensed, authorised, regulated, or registered by the authority, or whose investment offerings might be mistakenly perceived as having received MAS approval. According to publicly available information, Bybit is not licensed or regulated by MAS. Cointelegraph reported that it contacted a Bybit spokesperson for comment, but did not receive a response by the time of publication.

Key takeaways

• MAS added Bybit Fintech Limited and Bybit to the MAS Investor Alert List on Wednesday.
• The MAS registry targets entities that may be wrongly perceived as licensed or regulated by MAS or as having received MAS approval for investment offerings.
• MAS did not disclose a specific rationale for the Bybit inclusion, leaving the basis of the alert to public investigation and further MAS communication.
• Public information indicates Bybit is not licensed or regulated by MAS, and Singapore access appears restricted on the firm’s website.
• The listing aligns with Singapore’s broader enforcement and oversight approach toward crypto firms and related conduct.

What the MAS Investor Alert List signals for consumers and institutions

The Investor Alert List is not a licensing register and does not indicate that an entity has been authorised by MAS. Instead, it functions as a consumer-protection tool to reduce the risk that investors interpret online branding, marketing, or references to Singapore as evidence of regulatory oversight.

For regulated businesses and institutional compliance teams, the practical value of the list is operational: it supports due diligence, controls around client onboarding and product distribution, and safeguards designed to prevent misrepresentation or misunderstanding of regulatory status. This is particularly relevant in cross-border contexts where digital asset platforms may be accessible globally even when they are not licensed in a given jurisdiction.

MAS’ description of the list also underscores that the underlying concern can be perception-driven—entities may be “wrongly perceived” as authorised—rather than solely conduct-based. Still, the absence of an explanation for Bybit’s inclusion means firms relying on regulatory signals must treat the update as an alert that may require follow-up review, including checks of marketing materials, corporate identifiers, and jurisdictional access controls.

Bybit’s Singapore footprint and stated service restrictions

Bybit Fintech Limited is the corporate entity behind the exchange. While the company was founded by Singaporean entrepreneur Ben Zhou, Bybit does not appear to operate in Singapore. The exchange’s website lists Singapore among its “Service Restricted Countries,” indicating that users in the jurisdiction are not permitted to access its services.

In an enforcement and compliance setting, service restrictions can matter for risk assessments, but they do not eliminate the possibility of confusion for consumers—particularly when a platform is widely marketed and accessible via the internet. Accordingly, MAS’ listing may serve as a guardrail against mistaken beliefs that the exchange is actively supervised by MAS.

As of the time of publication, MAS did not provide the specific reason for the inclusion. That uncertainty is significant for compliance monitoring: institutions typically need to distinguish between (i) licensing status, (ii) supervisory enforcement action, and (iii) perception-related consumer risk alerts. An Investor Alert List entry primarily corresponds to the latter, but internal controls should verify the scope and potential compliance implications.

Singapore’s broader regulatory stance in crypto

MAS’ action fits within a wider pattern of heightened oversight of crypto-related activity in Singapore. The country has maintained its position as a major digital-asset hub, including in adoption metrics reported by external researchers. However, regulators have repeatedly emphasised that participation in regulated markets requires clear licensing, robust risk management, and accurate disclosures.

In May, MAS revoked the Major Payment Institution license of crypto liquidity provider Bsquared Technology. MAS said the company had serious regulatory breaches, including weaknesses in risk management and conflict-of-interest policies, and that the firm provided false or misleading information during both its initial application and a later inspection.

Singaporean authorities have also pursued criminal enforcement relating to crypto. In May, police charged former Hodlnaut CEO Zhu Juntao with six counts of fraud, alleging that he misled customers about Hodlnaut’s exposure to the 2022 Terra ecosystem collapse. Hodlnaut had suspended withdrawals in August 2022 after the Terra implosion and later faced liquidation orders.

MAS has also used the Investor Alert List previously. For example, the regulator placed Binance.com on the list in 2021, according to reporting in The Straits Times. However, a Wednesday search of the list did not show Binance among 910 records in the query, highlighting that list entries and searchability can be dynamic and may require careful handling when institutions automate checks.

Compliance implications: licensing, marketing, and cross-border risk

The Bybit listing illustrates how regulators can address consumer risk even when a firm is not licensed locally. For exchanges, banks, payment providers, and other regulated intermediaries, this raises several compliance considerations:

• Regulatory status checks: institutions should confirm licensing and supervisory relationships rather than relying on branding or references to Singapore.
• Marketing review: consumer-facing materials may unintentionally imply authorisation; internal review should include corporate names, corporate registries, and jurisdiction references.
• Client and counterparty screening: registry-based alerts can inform enhanced due diligence and may trigger restrictions depending on the institution’s risk framework.
• Operational controls: where service is restricted in Singapore but not elsewhere, firms must still evaluate whether public materials could mislead or whether cross-border accessibility undermines perceived compliance.

From a regulatory policy perspective, the approach reflects the broader international challenge of supervising digital-asset services that operate across borders. Jurisdictions with licensing regimes must balance innovation with consumer protection, and consumer-risk registries like MAS’ Investor Alert List are one method to reduce misunderstanding when licensing does not apply.

What to watch next

MAS’ decision to list Bybit without a stated rationale means the immediate enforcement or conduct basis remains unclear. Investors and regulated firms will likely focus on whether MAS provides additional context, how Bybit responds operationally and communicationally, and whether further updates emerge across MAS compliance channels and other national or sector-specific regulators.