Before July 5, 2025, anyone could run a crypto exchange in the Philippines without permission. That changed overnight. The Securities and Exchange Commission (SEC) didn’t just tighten rules - it rewrote the entire game. Now, every platform serving Filipino users must be licensed. No exceptions. No loopholes. If you’re trading Bitcoin, Ethereum, or any other crypto in the Philippines, you’re now under the SEC’s watch.
Who Needs a License?
The SEC calls them Crypto Asset Service Providers, or CASPs. That’s any company offering services like trading, custody, staking, or even marketing crypto assets to people in the Philippines. It doesn’t matter if you’re based in Singapore, the U.S., or Estonia. If your website accepts Filipino users, you need a license. This rule targets big names like OKX, Bybit, KuCoin, and Kraken - all of which were publicly warned in August 2025 for operating illegally. The same fate befell Binance in 2024, when it was blocked from the local market after failing to register.
The Minimum Requirements
Getting licensed isn’t easy. The SEC set hard numbers that most international exchanges can’t meet without major changes. First, you must be a registered domestic corporation in the Philippines. That means setting up a legal entity here, not just a PO box or a virtual office. Second, you need at least PHP 100 million in paid-up capital - roughly $1.8 million USD - and this money must be in Philippine pesos or fiat currency. Crypto assets don’t count. You can’t use Bitcoin to prove you’re solvent.
You also need a physical office in the Philippines. No remote teams. No outsourcing. The SEC wants someone on the ground who can show up for audits, answer questions, and handle emergencies. This alone blocks many small exchanges that can’t afford to open a local branch.
What You Must Submit
When you apply, you’re not just filling out a form. You’re handing over a full compliance package. The SEC requires:
- Business rules detailing how you operate
- Full AML (Anti-Money Laundering) and KYC (Know Your Customer) systems
- Clear risk control plans for market volatility and cyberattacks
- A disclosure plan for all crypto offerings
- Proof that customer funds are kept separate from company funds
All of this must be submitted at least 30 days before you start marketing or accepting users. No exceptions. Even if you’re just planning to launch a new token, you can’t promote it until the SEC has reviewed and approved your disclosure documents.
Marketing Rules: No False Promises
The SEC doesn’t allow crypto ads that say things like “Earn 20% monthly returns” or “Bitcoin will hit $100K next year.” Those are banned. You can mention historical performance, but you can’t predict future prices. Every marketing campaign - whether it’s on Facebook, TikTok, or YouTube - must include a disclosure document filed with the SEC. That document must be published on your website, app, and all social media channels. You can’t hide it behind a login page. It has to be public, clear, and easy to find.
Financial Reporting and Oversight
Licensing isn’t a one-time event. Once approved, you’re under constant supervision. You must submit detailed monthly financial reports to the SEC. These include revenue, user numbers, transaction volumes, and asset holdings. The SEC also requires regular audits by independent firms to check your AML controls. If you fail an audit, your license can be suspended or revoked.
Another key rule: customer funds must be held in segregated accounts. This means your users’ Bitcoin or Ethereum can’t be mixed with your company’s money. If your exchange goes bankrupt, users still get their assets back. This rule was added after the collapse of several global exchanges in 2022 and 2023, where users lost millions because companies used their funds to cover losses.
Fines and Penalties
Breaking the rules isn’t a slap on the wrist. The SEC can fine you anywhere from PHP 50,000 to PHP 10 million per violation. That’s $900 to $180,000 USD. If you keep operating illegally, you’ll pay an extra PHP 10,000 per day - roughly $180 - until you comply. In practice, this means a non-compliant exchange could rack up millions in fines within weeks.
The SEC has already started enforcing this. After issuing public advisories against ten major exchanges in August 2025, the next step could be website blocking. If a platform refuses to register, the government may order internet providers to cut off access. This already happened with Binance. Filipino users couldn’t load the site unless they used a VPN.
Who’s Winning Under the New Rules?
The regulations have created a two-tier market. On one side, you have global giants like Bybit, Cex.io, Bitget, and Bigone - all of which have moved quickly to comply. They’ve opened local offices, hired compliance teams, and updated their systems. They’re now marketing themselves as the “safe” choices for Filipinos.
On the other side, smaller exchanges and startups are struggling. The PHP 100 million capital requirement is too high for most. Many simply can’t afford to set up a physical office. As a result, the market is becoming less diverse. The SEC says this protects investors. Critics say it protects big players and kills innovation.
What About Everyday Users?
Here’s the good news: you can still trade crypto. The SEC didn’t ban Bitcoin or Ethereum. You can still buy, sell, and hold crypto. But now, you’re safer. Licensed platforms must follow strict rules. Your funds are segregated. Your identity is verified. Your ads are honest. If something goes wrong, there’s a regulator holding the platform accountable.
That’s why the SEC says this isn’t about stopping crypto - it’s about making it safer. The Philippines has one of the highest crypto adoption rates in Southeast Asia. Over 12 million people already use crypto. Revenue from crypto activities hit ₱1.1 billion in 2025. The goal isn’t to kill this growth. It’s to make sure it lasts.
The Bigger Picture
The Philippines didn’t just copy rules from Europe or the U.S. It built something new. A system that balances consumer protection with market access. Other countries in Southeast Asia - Indonesia, Thailand, Vietnam - are watching closely. If this model works, it could become the blueprint for the whole region.
For now, the message is clear: if you want to serve Filipino crypto users, you need to play by SEC rules. No shortcuts. No exceptions. The era of unregulated crypto is over.
Do I need a license if I’m just buying crypto as a personal user?
No. The SEC rules apply only to businesses that offer crypto services - like exchanges, wallets, or staking platforms. If you’re buying Bitcoin or Ethereum for yourself, you don’t need a license. But you should only use platforms that are licensed by the SEC to protect your funds.
Can foreign companies apply for a CASP license?
Yes, but they must first register as a domestic corporation in the Philippines. That means setting up a legal entity with a local office, local directors, and a physical presence. You can’t apply as a foreign branch. The SEC requires full integration into the local business system.
What happens if I use an unlicensed exchange?
You won’t be fined, but you’re at high risk. Unlicensed platforms have no legal obligation to protect your funds. If they get hacked, go bankrupt, or disappear, you have no recourse. The SEC warns users to avoid these platforms entirely. Only use services listed on the SEC’s official registry.
How do I check if a crypto platform is licensed?
Visit the SEC’s PhiliFintech Innovation Office website and look for the official list of registered CASPs. Only platforms on that list have passed the full licensing process. If a platform claims to be licensed but isn’t on the list, it’s a lie.
Are staking and yield farming allowed under the new rules?
Yes, but only if the platform offering them is licensed. Staking and yield farming are considered crypto asset services, so they fall under the CASP rules. Any platform promising fixed returns must disclose risks and comply with marketing rules. If a platform offers staking without a license, it’s operating illegally.
