How crypto trading platforms are regulated in Canada

Who does the regulating

Canada has no single national securities regulator. Each province and territory has its own, and they coordinate their work through the Canadian Securities Administrators (CSA). When people talk about “crypto platform rules” in Canada, they usually mean the requirements these regulators apply to crypto trading platforms, often called exchanges, that let you buy, sell or hold crypto assets.

According to the CSA’s regulation and enforcement page (last updated 2025-10-22), crypto platforms must register with provincial or territorial securities regulators and follow conditions covering how client assets and funds are controlled, risk management including cybersecurity, limits on which assets can be traded, delivery obligations and disclosure to clients.

Regulators treat these platforms as dealers subject to securities rules. That is why registration, custody and investor-protection conditions apply to the company holding your crypto, even when the crypto asset itself is not a security.

Registration: from undertakings to investment dealers

A platform that was already operating when it applied can keep serving clients while its application is reviewed, but only if it signs a pre-registration undertaking with regulators. The CSA publishes a list of these crypto undertakings (last updated 2026-07-17), separate from its list of authorized platforms (last updated 2026-09-18).

The end point is full registration. On 2024-08-06, the CSA and the Canadian Investment Regulatory Organization (CIRO) said they expect crypto trading platforms to prioritize registering as investment dealers and becoming CIRO members. An earlier interim approach, set out in CSA Staff Notice 21-329 on 2021-03-29, had allowed time-limited registration as a restricted dealer. The 2024 release said CSA members do not intend to continue that interim approach going forward.

1. Pre-registration undertaking: the platform has made written commitments to regulators while its registration is reviewed.
2. Restricted dealer: some platforms were registered this way under the earlier interim approach, with terms set in a regulatory decision.
3. Investment dealer and CIRO member: the path regulators said on 2024-08-06 they expect platforms to prioritize.

Each authorized platform’s terms live in its own decision document, linked from the CSA list. That is why two platforms can operate under slightly different conditions, and why it is worth reading the decision for any platform you use. The check a platform guide walks through how.

See the full infographic with notes.

What the enhanced undertakings require

On 2023-02-22, through CSA Staff Notice 21-332, regulators strengthened what platforms operating under pre-registration undertakings had to commit to. The main expectations were:

• Client crypto assets held with qualified custodians.
• Client assets kept segregated from the platform’s own assets.
• No margin, credit or other leverage offered to clients.
• No letting clients buy stablecoins or the platform’s own proprietary tokens without the CSA’s consent.

QuadrigaCX, a Canadian crypto exchange, collapsed in 2019; an Ontario Securities Commission staff review in 2020 found its founder had committed fraud. Custody and segregation rules exist so that a platform’s failure is less likely to take client assets down with it.

Stablecoins and investment limits on platforms

Regulators call stablecoins value-referenced crypto assets (VRCAs). CSA Staff Notice 21-333 (2023-10-05) set interim terms for platforms offering them, including a reserve of assets held with a qualified custodian for holders and public disclosure about governance, operations and reserves. After two extensions, the CSA said on 2024-09-26 that after 2024-12-31, platforms may only offer VRCAs that comply with the terms of their decisions or undertakings. The same update warned that VRCAs do not carry the protections of regulated deposits.

Many platform decisions also cap how much a retail client can buy of riskier crypto assets over 12 months. These caps are terms in each platform’s decision, not a general rule written into law. As one current example, an Ontario Securities Commission director’s decision for one authorized platform, dated 2026-03-25, sets these terms:

In that decision, the limit does not apply to “specified crypto assets”, listed as Bitcoin, Ether, Litecoin, Bitcoin Cash, Solana and a specified VRCA. It also does not apply in Alberta, British Columbia, Manitoba, Québec or Saskatchewan, or to permitted clients. An Eligible Crypto Investor there means someone with net assets over $400,000, or net income over $75,000 (over $125,000 with a spouse) in each of the last two years with the same expected this year, or an Accredited Crypto Investor.

Custody under CIRO’s 2026 framework

On 2026-02-03, CIRO issued guidance and Guidance Note 26-0033 setting out a digital asset custody framework for dealer members that operate crypto trading platforms. The key points:

• It is tiered and risk-based. Assets can be held with approved custodians, where the top tier may hold up to 100% of a dealer’s crypto assets and lower tiers less, or in internal custody.
• It covers crypto assets and tokenized assets, including stablecoins.
• It was effective immediately.
• Because CIRO had no permanent rule for digital asset custody, the framework is interim and imposed through terms and conditions of membership.

For you, this means custody at a CIRO-member platform is supervised by CIRO, but the details are interim and may change. Reading the platform’s own disclosures about where your assets are held is still worth the few minutes.

What these rules don’t cover: DeFi protocols

Everything above regulates platforms and dealers: companies that take your money, hold your assets and owe you obligations under a registration decision. When you connect your own wallet to a DeFi protocol and interact with its smart contracts directly, you get none of these protections.

• No registered dealer holds your assets, so there are no custody or segregation terms.
• No investment limits, account-opening checks or required risk disclosures.
• No CIRO oversight of the code or of the people who wrote it.
• No CDIC coverage. Crypto assets, including stablecoins, are not covered by CDIC whether they sit on a platform or in your wallet.

On 2025-10-22, the CSA also reminded crypto-backed lending platforms that their activity may involve securities requiring registration and a prospectus, and asked investors to check for registration or exemptive relief. That reminder is aimed at lending businesses serving Canadians. It does not turn a lending protocol you use from your own wallet into a protected product.

FINTRAC and the travel rule

Securities rules are one layer; anti-money-laundering rules are another. FINTRAC treats dealing in virtual currency as a money services business (MSB) activity, and MSBs must register with FINTRAC.

Since 2021-06-01, virtual currency transfers by reporting entities must carry information about the originator and the beneficiary, often called the travel rule. That is why a platform may ask who owns the wallet you are withdrawing to or receiving from.

FINTRAC registration and securities registration are different things. A business registered with FINTRAC as an MSB is not, for that reason alone, authorized by securities regulators to operate a crypto trading platform.

Your checklist

• Find the platform on the CSA authorized list or the crypto undertakings list.
• Open its decision and note any investment limit and whether it applies in your province.
• Read where client assets are held and whether they are segregated.
• Check whether the stablecoins it offers are covered by its decision terms.
• Remember that assets you move to your own wallet or into DeFi leave these protections behind.

Sources and dates

• Crypto platforms: regulation and enforcement actions — Canadian Securities Administratorsin force
  Page date 2025-10-22 · checked 2026-10-30. Platforms serving Canadians, including foreign ones, must register; operating platforms sign a pre-registration undertaking while under review.
• Crypto platforms authorized to do business with Canadians — Canadian Securities Administratorsreference
  Page date 2026-09-18 · checked 2026-10-30. The official list of authorized platforms, with links to each decision.
• Crypto undertakings (pre-registration undertakings) — Canadian Securities Administratorsreference
  Page date 2026-07-17 · checked 2026-10-30. Platforms operating under a pre-registration undertaking.
• CSA and CIRO expect crypto trading platforms to prioritize investment dealer registration and CIRO membership — CSA / CIROin force
  Page date 2024-08-06 · checked 2026-10-30. Crypto trading platforms are expected to register as investment dealers and join CIRO; the interim restricted-dealer approach is ending.
• CSA strengthens oversight of crypto asset trading platforms (Staff Notice 21-332) — Ontario Securities Commission (CSA release)in force
  Page date 2023-02-22 · checked 2026-10-30. Enhanced undertakings: custody with qualified custodians, segregation, no margin or leverage, no stablecoin purchases without CSA consent.
• CSA clarifies interim approach to value-referenced crypto assets (Staff Notice 21-333) — Canadian Securities Administratorsin force
  Page date 2023-10-05 · checked 2026-10-30. Terms for stablecoins (VRCAs) on platforms: reserves with a qualified custodian, public disclosure.
• CSA update to crypto asset trading platforms about value-referenced crypto assets — Canadian Securities Administratorsin force
  Page date 2024-09-26 · checked 2026-10-30. After December 31, 2024, platforms may only offer stablecoins that meet their decision terms; stablecoins lack deposit protections.
• Director's decision — Newton Crypto Ltd. (example of platform terms) — Ontario Securities Commissionin force
  Page date 2026-03-25 · checked 2026-10-30. Example terms: $30,000 net 12-month limit for most retail clients on non-specified crypto assets; not applied in AB, BC, MB, QC, SK; BTC, ETH, LTC, BCH, SOL listed as specified.
• CIRO issues guidance on digital asset custody for crypto-asset trading platforms — CIROin force
  Page date 2026-02-03 · checked 2026-10-30. Tiered, risk-based custody framework for dealer members operating crypto platforms; effective immediately.
• Guidance Note 26-0033 — CIRO's Digital Asset Custody Framework — CIROin force
  Page date 2026-02-03 · checked 2026-10-30. Interim framework imposed through membership terms; approved custodians by tier or internal custody.
• CSA reminds crypto-backed lending platforms of potential regulatory requirements — Canadian Securities Administratorsin force
  Page date 2025-10-22 · checked 2026-10-30. Crypto-backed lending may involve securities requiring registration; check registration or exemptive relief.
• What's covered — Canada Deposit Insurance Corporationin force
  No date shown on page · checked 2026-10-30. Up to $100,000 per category per member institution; cryptocurrencies, including stablecoins, are not covered.
• Money services businesses (MSBs) — FINTRACin force
  No date shown on page · checked 2026-10-30. Dealing in virtual currency is an MSB activity; MSBs must register with FINTRAC.
• Travel rule for electronic funds and virtual currency transfers — FINTRACin force
  No date shown on page · checked 2026-10-30. Since June 1, 2021, virtual currency transfers by reporting entities must carry originator and beneficiary information.
• How are crypto assets regulated? (learning path) — Ontario Securities Commission — GetSmarterAboutMoneyreference
  No date shown on page · checked 2026-10-31. Plain-language investor education on crypto regulation in Canada.