Canadian crypto and DeFi regulation: where things stand

Who does what

The Canadian Securities Administrators (CSA) is the umbrella group for provincial and territorial securities regulators. Its regulation and enforcement page (last updated October 22, 2025) says crypto trading platforms, including crypto exchanges, must register with securities regulators and follow conditions covering custody of client assets, risk management including cybersecurity, limits on what can be traded, and disclosure to clients. Platforms outside Canada that serve Canadians must also register here.

The Canadian Investment Regulatory Organization (CIRO) is the self-regulatory organization for investment dealers. In August 2024 the CSA and CIRO said they expect crypto trading platforms to prioritise registering as investment dealers and becoming CIRO members. The Canada Deposit Insurance Corporation (CDIC) insures eligible deposits at member institutions; its coverage page lists cryptocurrencies, including stablecoins, as not covered.

Checking whether a platform is registered

The CSA keeps a list of crypto platforms authorized to do business with Canadians (last updated September 18, 2026), with links to each platform's regulatory decision. Platforms still working through registration may operate under a pre-registration undertaking; those are listed separately (last updated July 17, 2026). The CSA's National Registration Search lets you check a firm's or individual's registration and disciplinary history.

We don't list platform names here because the lists change. Check the live CSA pages on the day you need them, and read the decision for the specific platform: the terms, including any investment limits and the provinces they apply in, are platform-specific.

Investment limits on trading platforms

Platform decisions often include an annual investment limit for retail clients on crypto assets other than a short list of specified assets. One recent Ontario decision (March 25, 2026), used here only as an example of the typical terms, sets a $30,000 net limit over 12 months for most clients, $100,000 for “eligible crypto investors”, and no limit for “accredited crypto investors”. That decision's limit does not apply in Alberta, British Columbia, Manitoba, Québec or Saskatchewan.

Because these are terms of individual decisions rather than one national rule, the limit that applies to you depends on the platform and your province. The platform must explain it during onboarding.

Stablecoins on Canadian platforms

Securities regulators call stablecoins “value-referenced crypto assets”. CSA Staff Notice 21-333 (October 2023) set interim terms under which platforms may offer them, such as reserves held with a qualified custodian and public disclosure. After December 31, 2024, platforms may only offer stablecoins that meet the terms in their decisions or undertakings. The CSA's September 2024 update warned that these assets don't carry the protections of regulated deposits.

We found no new CSA stablecoin notice in 2025 or 2026 up to October 30, 2026. The CSA did issue a reminder to crypto-backed lending platforms on October 22, 2025, saying they may need registration or exemptive relief.

The federal Stablecoin Act

Budget 2025 (November 4, 2025) announced federal legislation for fiat-backed stablecoins, administered by the Bank of Canada. The Stablecoin Act was enacted through Bill C-15, which received Royal Assent on March 26, 2026. The consolidated Act carries the note “Act not in force”: it starts on a date to be fixed by order.

Finance Canada's framework page (modified March 31, 2026) describes the core requirements: reserves of high-quality liquid assets held 1:1 in the reference currency, redemption at par, and a ban on issuers offering interest or yield or presenting the coin as a deposit or insured. It expects the framework to come into force in 2027. Proposed regulations were published for consultation in the Canada Gazette on October 24, 2026.

CIRO's custody framework

On February 3, 2026, CIRO issued a Digital Asset Custody Framework for dealer members operating crypto trading platforms, effective immediately. Because CIRO has no permanent custody rule for digital assets yet, the requirements apply as interim terms and conditions of membership.

The framework is tiered and risk-based: custodians are classified by tier, with the highest tier able to hold up to all of a dealer's crypto assets and lower tiers limited to less. It covers crypto assets and tokenized assets, including stablecoins. For how custody failures happen and what to ask, see custody risk.

Tax reporting changes on the way

Canada has proposed implementing the international Crypto-Asset Reporting Framework (CARF), under which crypto service providers would report client transactions to CRA. Draft legislation was released on August 15, 2025; Budget 2025 deferred the start to January 1, 2027; and the measure is in Bill C-31, which was at report stage in the House of Commons with no Royal Assent as of October 30, 2026. It is proposed law, not yet in force.

CRA's own crypto pages were last modified between October and December 2025 and say CRA updates them as developments emerge. They don't yet address DeFi lending, liquidity pools or wrapped tokens. Treat those areas as unsettled and keep detailed records. See the Canadian crypto tax hub.

What isn't covered by any of this

Decentralized protocols run by smart contracts generally have no registered intermediary for you to complain to, no deposit insurance and no guaranteed recourse if something fails. Regulation of the on-ramp doesn't extend to what happens on-chain after you withdraw. That gap is the reason this site puts risk first: the risk hub covers smart-contract, oracle, depeg, custody and bridge risk in detail.