Crypto asset trading platforms operating in Canada sit inside a regulatory perimeter that has tightened materially over the last three years. The Canadian Securities Administrators (CSA) — the umbrella for provincial securities regulators — has used the Restricted Dealer category as the primary on-ramp, paired with pre-registration undertakings (PRUs) for platforms that haven't completed full registration yet.
What's caught
The CSA's position is that most centralized crypto platforms offering buying, selling, holding, or trading of crypto assets to Canadian retail users are performing activities that fall under securities and derivatives regulation. The framework distinguishes between two broad cases:
- Crypto assets that are themselves securities or derivatives — caught directly under the relevant provincial securities act.
- Crypto contracts — the position that an arrangement between a platform and its user, even over a non-security crypto asset, can itself be a security or derivative when the user does not have effective possession of the asset.
The practical effect: if your platform custodies user assets in pooled or omnibus wallets, the CSA treats your offering as a regulated product, regardless of whether the underlying token would be a security in another jurisdiction.
The Restricted Dealer category
Restricted Dealer registration is the CSA's tailored category for crypto platforms. It allows the regulator to apply terms and conditions specific to the activity — custody arrangements, asset listing standards, marketing rules, withdrawal practices, and capital requirements — that don't sit cleanly in the full Investment Dealer framework.
Registration is granted with conditions. The standard package generally includes:
- A custody arrangement, often with a qualified third-party custodian for the bulk of customer assets, with strict limits on hot-wallet exposure.
- An asset listing and de-listing framework with documented diligence on every supported asset.
- Capital and insurance commitments calibrated to the platform's custody model.
- Restrictions on margin, derivatives, and yield products absent further regulatory engagement.
- An AML program registered with FINTRAC (the regimes overlap — registration with one regulator does not satisfy the other).
Pre-registration undertakings
Platforms that haven't completed Restricted Dealer registration but are operating with Canadian users are typically asked to file a pre-registration undertaking. A PRU commits the platform to a set of investor-protection measures — including holding requirements, marketing limits, prohibited products, and reporting obligations — while the registration assessment proceeds.
PRUs are not a permanent registration substitute. They're a bridge. Platforms that linger on a PRU without making progress toward registration draw closer regulatory attention.
The Ontario overlay
Ontario is supervised by the Ontario Securities Commission (OSC), which has historically applied the framework with the most operational detail. Platforms serving Ontario users should expect:
- Direct OSC engagement in addition to the CSA process, with the OSC often leading the registration file.
- Detailed asset-listing reviews — particularly for any token resembling a staking product, yield product, or governance-rights token.
- Tighter expectations on retail marketing, including the language used in advertising and onboarding flows.
- Disclosure expectations around custody, segregation, and insurance that may exceed what the platform faces in other provinces.
What 2026 has changed
Two shifts are worth noting for platforms applying or operating today:
- Stablecoin treatment. The CSA's position on retail-distributed stablecoins has formalized. Platforms supporting fiat-referenced stablecoins should expect specific terms on which stablecoins can be offered to Canadian retail users.
- Foreign platform access. The framework for foreign-domiciled platforms onboarding Canadian users without local registration has narrowed. Platforms relying on a no-action position should re-confirm the basis with current counsel.
The shape of a clean file
- A detailed business description that distinguishes platform-side activity from custody activity from listing activity.
- A custody architecture with named providers, segregation arrangements, hot/cold wallet ratios, and reconciliation processes.
- An asset-onboarding methodology with documented review steps for each currently supported asset.
- A marketing and onboarding-disclosure package consistent with provincial expectations, particularly Ontario's.
- An AML compliance program, FINTRAC registration, and the documented relationship between the two regimes.
Restricted Dealer registration is the most paper-intensive of the Canadian fintech registrations. The platforms that move through it fastest are the ones that build the operational documentation as the application is written, not after it lands.