🇨🇦Canada

Detailed overview

Canada: FINTRAC MSB Registration, Crypto Trading Platform Securities Regulation, Stablecoins, and Payments

Canada does not operate a single generic “crypto licence.” Digital-asset businesses are assessed under federal AML/ATF rules, provincial and territorial securities and derivatives laws, federal retail-payment supervision, the newly enacted but not yet fully operational federal stablecoin framework, and other banking, trust, consumer-protection, sanctions and tax regimes depending on the facts.

At federal AML level, cryptoasset businesses may be money services businesses or foreign money services businesses under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. The Act applies to persons and entities with a place of business in Canada that are engaged in “dealing in virtual currencies,” and also to foreign persons or entities without a place of business in Canada where they direct such services at persons or entities in Canada and provide those services to clients in Canada. FINTRAC states that MSBs operating in Canada and foreign MSBs that direct and provide services to clients in Canada must register with FINTRAC before operating. FINTRAC also states that registration is not an endorsement, licence, or certificate of registration.

FINTRAC-regulated crypto businesses must implement AML/ATF controls. Reporting entities must report large virtual currency transactions when they receive virtual currency equivalent to CAD 10,000 or more in a single transaction, and the 24-hour rule can aggregate multiple receipts. Reports must generally be submitted within five working days. FINTRAC’s Travel Rule guidance requires financial entities, MSBs and foreign MSBs to include required originator and beneficiary information when sending virtual currency transfers and to take reasonable measures to obtain missing information when receiving transfers.

Canadian securities regulators regulate many crypto trading platforms through provincial and territorial securities and derivatives laws. CSA Staff Notice 21-327 states that securities legislation applies where cryptoassets that are securities or derivatives are traded on a platform, and may also apply where the underlying cryptoasset is not itself a security or derivative but the platform gives the user only a contractual right or claim rather than immediate delivery of the cryptoasset. The CSA’s immediate-delivery analysis focuses on whether the platform transfers ownership, possession and control to the user, whether the user can freely use the cryptoasset without further reliance on the platform, and whether the platform retains control or exposes the user to platform insolvency, fraud, performance or proficiency risk.

CSA Staff Notice 21-329 sets out the platform-registration pathway for cryptoasset trading platforms dealing in security tokens or crypto contracts. Dealer platforms may require exempt market dealer, restricted dealer, investment dealer, or other registration; platforms serving retail clients and trading crypto contracts are generally expected to transition toward investment dealer status and self-regulatory organization membership, now CIRO, unless exemptive or interim relief applies. Marketplace platforms that bring together multiple buyers and sellers under non-discretionary methods may also require marketplace, ATS, exchange, dealer-registration, recognition, or exemptive-relief analysis.

Unregistered crypto trading platforms seeking to continue operating in Canada while pursuing registration have been subject to pre-registration undertaking expectations. CSA Staff Notice 21-332 identifies commitments on custody and segregation of client assets, no rehypothecation, no margin or leverage, capital, financial information, affiliate exposure and prior written CSA consent before allowing clients to buy or deposit value-referenced cryptoassets or proprietary tokens. The CSA’s undertaking approach is not a registration grant or exemption by itself, and a platform that fails to obtain registration or relief may be required to cease activity in Canada.

Canada has enacted a federal Stablecoin Act through the Budget Implementation Act, 2025, No. 1, S.C. 2026, c. 3, assented to on 2026-03-26. The Act defines a stablecoin as a digital asset intended or designed to maintain stable value relative to one fiat currency and having prescribed characteristics. It defines issuance by reference to creating the stablecoin and making it available for purchase, directly or indirectly, by a person in Canada. The Stablecoin Act prohibits issuance unless the issuer complies with the Act and appears on the Bank of Canada issuer list, but the Act itself provides that its provisions come into force on a day or days fixed by order of the Governor in Council. Department of Finance Canada states that supporting regulations are being developed, draft regulations will be published in the Canada Gazette, and the stablecoin framework is expected to come into force in 2027.

When operative, the federal stablecoin framework will require issuer registration with the Bank of Canada, 1:1 reserves of high-quality liquid assets in the reference currency, at-par redemption, and governance, risk-management, data-security, recovery and resolution policies. The Stablecoin Act itself requires par-value redemption, a redemption policy, a reserve at least equal to the par value of outstanding stablecoins, reserve assets composed of reference currency or high-quality liquid assets, qualified custody, segregation from issuer and custodian assets, and creditor protection for reserve assets. Issuers are also deemed to be engaged in dealing in virtual currencies for PCMLTFA purposes.

Canada’s Retail Payment Activities Act can also matter for wallet, transfer, payment and stablecoin-payment models. The Act applies to payment service providers with a place of business in Canada and to foreign payment service providers that direct retail payment activities at end users in Canada. A retail payment activity is a payment function performed in relation to an electronic funds transfer made in Canadian or foreign currency or using a prescribed unit. Department of Finance Canada states that payment service providers performing payment functions in a fiat-backed stablecoin will be supervised by the Bank of Canada under the Retail Payment Activities Act if that stablecoin is prescribed in regulation.

Regulators: FINTRAC for AML/ATF MSB and foreign MSB registration, reporting and Travel Rule compliance; provincial and territorial securities regulators, coordinated through the CSA, for securities, derivatives and crypto trading platforms; CIRO for investment dealer and marketplace conduct where applicable; Bank of Canada for retail payment service providers and future stablecoin issuer supervision; Department of Finance Canada for federal stablecoin and financial-sector policy.

Question presented and assumptions

Question presented: What Canada legal/regulatory entry should be added to the Licentium jurisdiction hub for cryptoasset / virtual-asset licensing and market-entry purposes?

Assumptions: The intended hub entry is for firms providing cryptoasset exchange, brokerage, custody, hosted wallets, transfers, OTC services, staking, token issuance, token listings, stablecoin issuance, stablecoin distribution, crypto trading platform services, securities-token trading, derivatives, value-referenced cryptoassets, payment services or wallet/payment functionality to Canadian users or from Canada. No facts are supplied about Canadian incorporation, place of business, provincial customer footprint, Quebec nexus, custody model, private-key control, immediate delivery, fiat rails, token legal rights, stablecoin reserve/redemption design, RPAA payment functions, retail access, leverage, margin, staking, or whether the business has signed a pre-registration undertaking or obtained registration / exemptive relief.

Jurisdiction profile

Canada is a federal jurisdiction with provincial and territorial securities regulation. Federal statutes and regulations are published through Justice Laws and official federal publication channels. The PCMLTFA page on Justice Laws states that the Act was current to 2026-03-17 and last amended on 2025-10-01. The PCMLTFA Regulations page states that the Regulations were current to 2026-03-17 and last amended on 2025-10-01. The Retail Payment Activities Act page states that the Act was current to 2026-03-17, last amended on 2025-09-08, and includes a staged commencement note.

The Stablecoin Act is not yet presented here as a Justice Laws consolidated standalone Act. It was verified through the official Statutes of Canada 2026, chapter 3 publication and Parliament / LegisInfo materials showing Royal Assent on 2026-03-26. The Department of Finance Canada page is used only as official administrative material for implementation timing, regulatory development and policy context.

Securities regulation is primarily provincial and territorial. CSA staff notices are official administrative materials issued by Canadian securities regulators, not statutes. They are used here to describe the current coordinated regulatory approach to crypto trading platforms, security tokens, crypto contracts, immediate delivery, pre-registration undertakings and value-referenced cryptoassets. Binding consequences arise through provincial / territorial securities legislation, registration decisions, exemptive-relief orders, recognition orders and platform-specific terms and conditions.

No case law is relied on in this session. Court judgments would need to be checked through the Supreme Court of Canada and provincial court repositories for any litigation-sensitive question.

Executive summary

• Canada is not a single “crypto licence” jurisdiction. Federal AML/MSB registration, provincial and territorial securities / derivatives regulation, RPAA payment-service supervision and the future Bank of Canada stablecoin regime may apply concurrently.
• The PCMLTFA applies to Canadian MSBs dealing in virtual currencies and to foreign MSBs that direct such services at persons or entities in Canada and provide those services to clients in Canada.
• FINTRAC states that MSBs operating in Canada and foreign MSBs directing and providing services to Canadian clients must register before operating; FINTRAC registration is not a licence, endorsement or certificate.
• Large virtual currency transaction reporting applies when a reporting entity receives virtual currency equivalent to CAD 10,000 or more, with submission generally due within five working days and possible 24-hour aggregation.
• FINTRAC Travel Rule guidance applies to financial entities, MSBs and foreign MSBs for virtual currency transfers, requiring originator and beneficiary information and risk-based handling of missing information.
• CSA Staff Notice 21-327 states that Canadian securities laws can apply not only where the cryptoasset itself is a security or derivative, but also where the platform creates a crypto contract or claim and does not immediately deliver ownership, possession and control to the user.
• CSA Staff Notice 21-329 outlines dealer-platform and marketplace-platform registration pathways, including restricted dealer / investment dealer / marketplace / exchange or exemptive-relief analysis.
• CSA Staff Notice 21-332 imposes pre-registration undertaking expectations for unregistered CTPs seeking to continue operating, including custody, segregation, no rehypothecation, no leverage or margin, and prior written CSA consent for value-referenced cryptoassets.
• The federal Stablecoin Act has been enacted but is subject to coming-into-force by Governor in Council order and supporting regulations; Department of Finance Canada expects the framework to come into force in 2027.
• When operative, the Stablecoin Act framework will require Bank of Canada issuer registration, 1:1 reserves, par redemption, custody / segregation protections, and governance, risk-management, data-security, recovery and resolution policies.

Analysis by issue

Federal AML/MSB registration under the PCMLTFA

Conclusion: A crypto exchange, broker, transfer service, custodial wallet, virtual-currency dealer, or similar Canada-facing business should first be reviewed for FINTRAC MSB or foreign MSB registration.

Rule: PCMLTFA section 5 applies to persons and entities with a place of business in Canada that are engaged in specified services, including “dealing in virtual currencies.” It also applies to persons and entities without a place of business in Canada where they provide such services directed at persons or entities in Canada and provide those services to clients in Canada. FINTRAC states that MSBs operating in Canada and foreign MSBs directing and providing services to clients in Canada must register with FINTRAC before beginning operations, and that FINTRAC registration is not a licence or endorsement.

Application: A Canadian entity dealing in virtual currencies will normally need FINTRAC registration and AML/ATF compliance. A foreign exchange, broker, custodian, wallet, payment processor or stablecoin service may also be in scope if it directs services at Canadian persons and provides those services to clients in Canada. Website language should say “FINTRAC MSB / foreign MSB registration and AML compliance,” not “Canadian crypto licence.”

Limitations / counterarguments: Whether an activity is “dealing in virtual currencies” depends on the precise service, custody, transfer, exchange and customer relationship. FINTRAC registration does not answer securities, derivatives, RPAA, stablecoin, provincial money-services, consumer-protection or tax questions.

AML/ATF operational obligations: LVCTR, Travel Rule and compliance controls

Conclusion: FINTRAC registration is only the gateway. A reporting entity must implement operational AML/ATF controls, including large virtual currency reporting, Travel Rule handling, suspicious-transaction escalation and recordkeeping.

Rule: FINTRAC’s large virtual currency guidance states that all reporting entities must comply, that legal responsibility cannot be delegated to a service provider, and that a large virtual currency transaction occurs when a reporting entity receives virtual currency equivalent to CAD 10,000 or more in a single transaction. FINTRAC further states that an LVCTR must be submitted within five working days after receipt and that the 24-hour rule can aggregate multiple receipts. FINTRAC’s Travel Rule guidance states that financial entities, MSBs and foreign MSBs must include Travel Rule information when sending virtual currency transfers and take reasonable measures to ensure the information is included when receiving virtual currency transfers requiring a record.

Application: A Canada-facing VASP should maintain customer due diligence, beneficial-ownership checks, sanctions and terrorist-financing screening, suspicious-transaction reporting, LVCTR processes, Travel Rule messaging, counterparty VASP due diligence, wallet risk assessment, recordkeeping, compliance training, and written policies. For crypto transfers, originator / beneficiary identity and wallet data must be operationally available.

Limitations / counterarguments: Exact reporting, recordkeeping and verification obligations depend on entity type, transaction type, custody model, wallet type, client type, threshold, and whether the entity is an MSB, foreign MSB, securities dealer, financial entity or another reporting-entity category.

Securities / derivatives perimeter for crypto trading platforms

Conclusion: Many Canadian crypto trading platforms require securities-law registration or exemptive relief, even when the underlying cryptoasset is not itself a security, if the platform structure creates a “crypto contract” or does not deliver ownership, possession and control immediately to the user.

Rule: CSA Staff Notice 21-327 states that securities laws apply if cryptoassets that are securities or derivatives are traded on a platform, and that securities legislation may also apply to platforms facilitating buying and selling of cryptoassets that are commodities because the user’s contractual right to the cryptoasset may itself be a security or derivative. The same notice states that a platform is generally not subject to securities legislation where the underlying cryptoasset is not a security or derivative and the contract is settled by immediate delivery of the cryptoasset to the platform’s user.

CSA Staff Notice 21-327 identifies immediate-delivery factors, including transfer of ownership, possession and control to the user, user freedom to use the cryptoasset without further platform involvement, no retained security interest or legal right by the platform, and no continued user exposure to platform insolvency, fraud, performance or proficiency risk. The notice also states that mere book-entry crediting is not delivery where the platform retains possession or control and only transfers cryptoassets out on user request.

Application: A custodial exchange, omnibus wallet platform, broker-dealer platform, app-based exchange, or platform where users see balances but cannot independently control assets immediately should assume securities / derivatives analysis is required. A non-custodial interface or platform that immediately delivers assets to user-controlled wallets may have a stronger outside-scope argument, but only if the user truly receives ownership, possession and control without continuing platform reliance.

Limitations / counterarguments: CSA notices are staff guidance, not legislation. Final legal consequences arise under provincial / territorial securities and derivatives laws, regulator decisions, exemptive relief, platform terms and conditions, and enforcement facts.

CTP registration pathways and pre-registration undertakings

Conclusion: A Canadian crypto trading platform generally needs a registration strategy: dealer registration, investment dealer / CIRO path, marketplace / ATS or exchange analysis, or exemptive relief. Unregistered platforms seeking to continue operating may need a pre-registration undertaking, but that undertaking is not itself registration.

Rule: CSA / IIROC Staff Notice 21-329 states that dealer platforms may need registration in categories such as exempt market dealer, restricted dealer or investment dealer, and that platforms serving retail clients trading crypto contracts will generally be expected to be investment dealers and SRO members, unless an interim approach applies. Marketplace platforms that bring together multiple buyers and sellers using established non-discretionary methods may also perform marketplace and dealer functions, requiring registration or recognition / exemptive relief depending on the model. CIRO is now the national SRO regulating investment dealers, mutual fund dealers and trading activity on Canada’s debt and equity marketplaces; BCSC states that IIROC and MFDA amalgamated on 2023-01-01 and the SRO changed its name to CIRO on 2023-06-01.

CSA Staff Notice 21-332 describes PRU expectations for unregistered CTPs continuing to operate while pursuing registration, including custody and segregation, no rehypothecation, no margin or leverage, financial information, capital, affiliate constraints, and prior written consent for value-referenced cryptoassets. The same notice makes clear that the PRU is not itself registration or exemptive relief; if the platform does not obtain registration or relief, it may be required to stop operating in Canada.

Application: A platform should determine whether it is a dealer platform, marketplace platform, ATS-like platform, exchange, custodian, or combined model. A realistic application package should cover custody, segregation, trust treatment, qualified custodian arrangements, financial resources, market integrity, conflicts, retail disclosures, token due diligence, platform rules, surveillance, complaint handling and wind-down planning.

Limitations / counterarguments: The precise registration category varies by province, token set, retail/professional access, immediate-delivery model, custody design, leverage, margin, staking, marketplace functions, proprietary trading and whether the platform lists value-referenced cryptoassets.

Value-referenced cryptoassets and federal stablecoin transition

Conclusion: Canada now has two relevant stablecoin layers: current CSA regulation of value-referenced cryptoassets on crypto trading platforms, and the newly enacted federal Stablecoin Act issuer regime that is expected to become operational after Governor in Council commencement and supporting regulations.

Rule: CSA Staff Notice 21-332 treats value-referenced cryptoassets as cryptoassets designed to maintain a stable value over time by referencing fiat currency or another value / right, and states that CSA members are of the view that fiat-backed cryptoassets generally meet the definition of security and/or derivative. The notice also requires prior written CSA consent before a CTP permits clients to buy or deposit value-referenced cryptoassets.

The Stablecoin Act defines a stablecoin as a digital asset intended or designed to maintain stable value relative to one fiat currency and having prescribed characteristics. The Act defines issuance by reference to creating the stablecoin and making it available for purchase, directly or indirectly, by a person in Canada. The Act applies only to stablecoins with, or capable of having, interprovincial or international applications, and includes exclusions for closed-loop, financial-institution and central-bank contexts, subject to regulations.

The Act prohibits issuing a stablecoin unless the issuer complies with the Act and is listed in the Bank of Canada issuer registry, but the Act’s provisions come into force on a day or days fixed by Governor in Council order. Department of Finance Canada states that supporting regulations are being developed and that the framework is expected to come into force in 2027.

Application: Until the federal framework is operative, a stablecoin issuer, distributor or platform listing must continue to analyse CSA VRCA expectations, PCMLTFA MSB/FMSB registration, securities / derivatives law, custody, payment, banking and consumer-protection issues. Once operative, non-financial institution issuers making fiat-backed stablecoins available to Canadians should expect Bank of Canada registration, reserve, redemption, governance and reporting obligations. Trading and exchange of fiat-backed stablecoins on CTPs will still be regulated according to use; Department of Finance Canada states that securities regulators will regulate exchange and trading on securities exchanges and crypto trading platforms.

Limitations / counterarguments: The final regulatory result depends on whether the token is fiat-backed, non-fiat-backed, closed-loop, issued by a prudentially regulated financial institution, CAD-denominated or foreign-currency-denominated, available to Canadians directly or indirectly, used for payments, listed on a CTP, or redeemable at par.

Stablecoin issuer obligations under the enacted Act

Conclusion: When brought into force, the Stablecoin Act will create a prudential-style issuer regime administered by the Bank of Canada, including reserves, redemption, custody, segregation and policy obligations.

Rule: The Act requires an issuer to redeem outstanding stablecoins in the reference currency at par value in accordance with regulations, and to establish a redemption policy covering conditions, timing, fees and third-party roles. The Act requires the reserve of assets to have a value equal to or greater than the par value of outstanding stablecoins and to be composed exclusively of the reference currency or high-quality liquid assets. Reserve assets must be denominated in the reference currency, not encumbered, placed with a qualified custodian, segregated from issuer and custodian assets, and protected from creditor claims other than holder redemption claims. The Act also requires governance, risk-management, data-security, and recovery / resolution policies.

Application: A stablecoin issuer preparing for Canada should build a compliance package around Bank of Canada registration, ownership and structure, reserve custody, par redemption, legal opinions on reserve segregation and insolvency treatment, monthly / periodic attestations, cybersecurity, operational resilience, third-party service providers, wind-down, recovery and resolution. The issuer should also prepare FINTRAC MSB/FMSB registration and AML/ATF controls because the Act deems issuers to be dealing in virtual currencies for PCMLTFA purposes.

Limitations / counterarguments: Regulations are still required for key details. Department of Finance Canada states that draft regulations will be published in the Canada Gazette before being finalized. Publication wording should therefore avoid saying that a fully operational Bank of Canada stablecoin issuer application route is already open unless confirmed through the Bank of Canada and Canada Gazette.

RPAA payment-service overlay

Conclusion: Crypto wallets, stablecoin payment flows and fiat-linked payment functions may require Retail Payment Activities Act analysis, especially if the business performs payment functions for Canadian end users or directs such activities at Canada.

Rule: The RPAA defines a payment service provider as an individual or entity that performs payment functions as a service or business activity that is not incidental to another service or business activity. Payment functions include account provision or maintenance, holding funds for end users, initiating electronic funds transfers, authorizing or facilitating transfer instructions, and clearing or settlement. The Act applies to PSPs with a place of business in Canada and to PSPs without a place of business in Canada that perform retail payment activities for end users in Canada and direct those activities at Canada. Retail payment activity is tied to electronic funds transfers made in Canadian or foreign currency or using a prescribed unit.

The RPAA Regulations prescribe securities-related transaction exclusions and incidental retail payment activity exclusions, while imposing written risk-management and incident-response framework requirements. Department of Finance Canada states that PSPs performing payment functions in fiat-backed stablecoins will be supervised under the RPAA subject to that stablecoin being prescribed in regulation.

Application: A wallet or payments product should analyse whether it provides or maintains accounts, holds funds, initiates transfers, transmits instructions, clears or settles payments, or performs payment functions in fiat, prescribed units or prescribed stablecoins. It should prepare operational-risk, safeguarding, incident-response, third-party risk and reporting controls where RPAA applies.

Limitations / counterarguments: RPAA treatment of stablecoin payment functions depends on future prescription in regulation. A securities-related transaction or incidental payment function may be excluded, but the exclusion is fact-specific and does not necessarily remove PCMLTFA, securities, consumer-protection or stablecoin obligations.