On this page
Three ways to hold crypto, and what each really means
A “wallet” is not where your coins live. Coins live on a blockchain. A wallet holds the private keys that let you move them, and the real question is who holds those keys: a company, an app on your phone, or a small device in your drawer.
In Singapore that question also decides which rules protect you. If a licensed exchange holds the keys, the Payment Services Act and MAS consumer measures apply to how it treats your tokens. If you hold the keys yourself, nobody regulates the arrangement. You get full control and full responsibility, in equal measure.
None of the three options is wrong. A sensible pattern for many Singapore buyers is to buy on a licensed platform, keep a small “spending” balance in an app wallet, and move long-term savings to a hardware wallet once the amount would genuinely hurt to lose. Below we go through each, with the local detail other wallet lists leave out.
Wallet types compared
| Option | Who holds the keys | Regulated in Singapore? | Main risk | Best for |
|---|---|---|---|---|
| MAS-licensed exchange account | The exchange | Yes: MPI licence, segregation and statutory trust | Account takeover, platform failure, withdrawal freezes | Small balances, frequent trading, beginners |
| App / software wallet | You, on your phone or browser | No: software is not a licensed service | Malware, fake apps, approving a drainer | Using stablecoins and apps on-chain |
| Hardware wallet | You, on an offline device | No | Tampered device, lost seed phrase | Long-term savings |
Notice what the table does not say: none of these options is insured like a bank deposit. A licence changes who answers to a regulator, not whether the price can halve.
Leaving coins on a MAS-licensed exchange
For a lot of people this is the right answer, at least at first. Since MAS’s consumer measures took effect, Singapore licensees must keep retail customers’ tokens separate from their own and hold them on statutory trust. They are also barred from lending out or staking retail customers’ tokens. These rules were written with the collapses of 2022 in mind, when Singapore users of lenders and exchanges found their coins had been used for the company’s own business.
The protection only applies to the Singapore entity. Coinbase Singapore, Crypto.com (Foris DAX Asia), OKX SG, Coinhako, Independent Reserve and Gemini all appear in the MAS Financial Institutions Directory, and you can check any name yourself on our list of MAS-licensed exchanges. An international platform serving Singapore from abroad may keep assets well, but the Singapore trust rules don’t cover your account there.
The weaknesses are practical rather than legal. Your account is only as safe as your email and password, so use an authenticator app rather than SMS and a unique password. Platforms can pause withdrawals for compliance checks. And you cannot use exchange-held coins directly with on-chain apps. If those limits are fine for you, exchange custody is not lazy, it is just honest about what you need.
App wallets: MetaMask, Trust Wallet and OKX Wallet
MetaMask, Trust Wallet and OKX Wallet are non-custodial: the app generates your keys on your device, and the company behind it cannot see, freeze or recover your funds. That is the whole point, and also the whole risk. If you lose your phone without a backup of the seed phrase, the coins are gone.
These apps are not regulated by MAS as payment services. The Payment Services Act licenses businesses that deal in, transfer or hold tokens for customers. Publishing software that lets you hold your own keys is not one of those services, so you will not find the wallet apps themselves in the MAS directory.
One trap is specific to OKX: OKX Wallet, the group’s self-custody wallet, is a different thing from your OKX SG exchange account, which is held by a licensed entity. Know which one you are looking at before you send anything. The same goes for Trust Wallet, which has its own history in the Binance group but is a separate non-custodial app.
App wallets are ideal for a modest balance you actually use: holding USDC or USDT to pay with, trying a decentralised exchange, or keeping a float you can move quickly. They are a poor home for your life savings, because a phone is online, runs other apps and is easy to trick. Download only from the official App Store or Google Play listing linked from the wallet’s own website, check the developer name, and never install a wallet from a link someone sends you.
Hardware wallets, and where to buy them safely in Singapore
A hardware wallet, such as a Ledger or Trezor, keeps your keys on a small offline device. To send coins you confirm the transaction on the device’s own screen, so malware on your laptop cannot sign anything on its own. For savings you intend to hold for years, this is the standard recommendation, and we agree with it.
The weak point is the supply chain. A hardware wallet is only trustworthy if nobody has interfered with it before it reaches you, and October 2026 showed exactly why that matters.
Ledger has paused reseller sales in Singapore
On 9 October 2026 Ledger said it was investigating fund losses among Southeast Asian customers who bought devices from CryptoBilis, a Malaysian reseller; press reports put the losses at more than US$86 million, and at least one device contained an unauthorised hardware implant. On 13 October Ledger asked resellers and distributors in Singapore, Malaysia, Indonesia, Thailand, the Philippines, Vietnam and Hong Kong to suspend sales and remove its wallets from shelves. Ledger said it had no indication its own direct sales channel was compromised. Trezor has also cut back its reseller network as a precaution.
So, as of 20 October 2026, our advice on where to buy a Ledger in Singapore is short: from ledger.com, and nowhere else, until Ledger publicly clears local sellers. The same principle applies to Trezor: buy from the official Trezor Shop at trezor.io or a reseller listed on Trezor’s own website, and check at checkout that it ships to your Singapore address. We are deliberately not naming local shops. Lists you find online of “authorised Ledger resellers in Singapore” may describe sellers that have just been asked to stop selling.
Whichever brand you choose:
- Never buy second-hand, from a marketplace listing, a social-media shop or a Telegram seller, however cheap.
- A genuine device makes you create a new seed phrase during setup. If it arrives with words already printed or a “recovery card” filled in, it is compromised. Do not use it.
- Run the maker’s official genuineness check in its own app (Ledger Wallet, formerly Ledger Live, or Trezor Suite) during setup.
- If you bought a Ledger from a Southeast Asian reseller recently, follow Ledger’s guidance: don’t set up a device bought from CryptoBilis in the last 90 days, and consider moving funds to a new device with a new seed.
Handling your seed phrase
The seed phrase, usually 12 or 24 words, is the master key. Anyone who has it owns your coins, from anywhere in the world, without your phone or device. Treat it like the deed to a property that can be sold in seconds.
Write it on paper, or better, stamp it on a metal backup plate that survives fire and floods. Keep it out of sight, not taped under the device. Some people keep a second copy in a different place, such as a safe deposit box or with a trusted family member, which protects against loss but adds a second place it could be found. Weigh that honestly for your situation.
Never type the words into a website, never photograph them, never store them in Notes, email, WhatsApp or a password manager you also use for daily logins. No real support agent, exchange or wallet company will ever ask for them. In a Singapore humid flat, also check paper backups now and then; ink fades and paper goes mouldy faster than people expect.
Get your first coins, then move them safely
Buy a small amount, practise a test withdrawal to your own wallet, and only then move a larger balance.
Withdrawing from an exchange to your own wallet
When you withdraw from a Singapore-licensed platform, you will notice extra questions. MAS applies the “travel rule” to licensed digital payment token providers through its anti-money-laundering notice for payment service providers (PSN02): the platform has to collect and keep information about who is sending and receiving a transfer.
For a self-hosted wallet there is no other company on the receiving end, so platforms ask you instead. Gemini asks you to confirm you own the wallet you are withdrawing to. Crypto.com only lets Singapore users withdraw to non-custodial wallets they own themselves, caps those transfers at S$20,000 a month, and requires a “Satoshi test”, a tiny transfer proving control of the address, above that. Other platforms use a declaration or a signed message. These are platform-specific policies, so expect some variation.
Two practical habits help. First, send a small test amount and confirm it arrives before the main withdrawal. Second, check the network: USDT on Tron and USDT on Ethereum are not interchangeable, and a token sent on a network your wallet doesn’t support can be very hard to recover. Our USDT and stablecoin guide goes through network choice in detail.
Wallet scams to know
The Singapore Police Force reported S$182.2 million lost in cryptocurrency scams in 2025, about one dollar in five of all scam losses. Self-custody removes exchange risk, but it adds scams aimed squarely at wallet users. Three patterns come up again and again:
Fake wallet apps. Copycat versions of MetaMask, Trust Wallet or a hardware wallet’s companion app appear in search ads, on lookalike websites and occasionally in app stores. They ask you to “import” your existing seed phrase, and the moment you do, the scammer has it. Install from the link on the official website only.
Wallet drainers. A drainer is a malicious website, often a fake airdrop, NFT mint or “claim your reward” page, that asks you to connect your wallet and approve a transaction. The approval quietly gives the contract permission to move your tokens. Read what your wallet asks you to sign, be suspicious of unlimited token approvals, and revoke old approvals you don’t recognise.
Seed phrase phishing. Messages claiming your wallet is “suspended”, a fake support agent in a Telegram group, or a form asking you to “validate” or “sync” your wallet. All of them end with a request for your seed phrase. The answer is always no.
If you lose money, report it quickly to the police and through ScamShield. Our crypto scams guide explains what to collect and who to call, and why “recovery services” that contact you afterwards are usually a second scam.
If something happens to you: inheritance planning
Self-custody has an uncomfortable side. If only you know where the seed phrase is, your family may never be able to reach your coins. Exchange accounts are easier for executors, because a licensed platform can deal with grant of probate or letters of administration through its normal process, but even then your family must know the account exists.
You don’t need to hand anyone your seed phrase today. A practical middle ground is a short, sealed letter, kept with your will, that lists which platforms and wallets you use, where the backup is kept and how to reach it, without writing the words themselves in the letter. Tell your executor the letter exists. If your holdings are significant, speak to a Singapore lawyer about how to reference digital assets in your will, and consider whether a Lasting Power of Attorney should cover them if you lose mental capacity.
Finally, keep records of what you bought and when. They help your family, and they help you if IRAS ever asks whether you were investing or trading. Our crypto tax guide explains why that distinction matters. If you are still choosing where to buy, the exchange comparison and our guide to cashing out cover the other ends of the journey.
Frequently asked questions
What is the best crypto wallet in Singapore?
It depends on how much you hold and how often you move it. For small amounts you trade often, a MAS-licensed exchange account is simplest. For money you use on-chain, an app wallet such as MetaMask or Trust Wallet works. For savings you plan to keep for years, a hardware wallet such as a Ledger or Trezor, bought directly from the maker, is the safest common choice.
Where can I buy a Ledger in Singapore?
As of 20 October 2026, the safest answer is directly from ledger.com. On 13 October 2026 Ledger asked resellers and distributors in Singapore and six other Asian markets to suspend sales and pull devices from shelves while it investigates tampered devices linked to a Malaysian reseller. Until Ledger says local resellers are cleared, avoid shops, marketplaces and second-hand listings.
Is a hardware wallet regulated by MAS?
No. A hardware wallet is a device you own, and a software wallet is an app where only you hold the keys. MAS licenses businesses that provide digital payment token services, such as exchanges that hold tokens for customers. Self-custody tools sit outside that regime, which means no licence checks and no regulator to complain to if something goes wrong.
Is it safe to keep crypto on Coinbase, Crypto.com or OKX SG?
Their Singapore entities hold Major Payment Institution licences, and MAS rules require customer tokens to be segregated and held on statutory trust. That reduces the risk of losing them in an insolvency, but it is not deposit insurance, and it does not protect you from a hacked account or a scam you authorise yourself.
Can I store my seed phrase in a photo or in the cloud?
Please don’t. Photos sync to cloud accounts, and phishing kits and malware look specifically for images and notes that contain twelve or twenty-four seed words. Write it on paper or stamp it on metal, and keep it somewhere private and fire-safe.
Why does my exchange ask me to prove I own the wallet I withdraw to?
Under MAS anti-money-laundering rules, licensed platforms must collect information about who sends and receives transfers. For a self-hosted wallet they often ask you to confirm the address is yours, by a declaration, a signed message or a tiny test transfer. Crypto.com, for example, only allows withdrawals to non-custodial wallets you own.
