Crypto Exchange License Canada: FINTRAC MSB Registration

Canada has no single crypto exchange license. To run a crypto exchange for Canadian clients you must register with FINTRAC as a Money Services Business (MSB) or Foreign MSB, and, where your platform offers crypto contracts, also register under provincial securities law. The two regimes are cumulative, not alternatives.

That single fact reshapes most plans we see. Founders arrive expecting one application and one approval. Canada instead layers a federal anti-money-laundering registration on top of a provincial securities-law obligation, and the securities side changed materially on 6 August 2024. This guide maps both tracks from primary FINTRAC and Canadian Securities Administrators (CSA) sources, names the obligations and reporting thresholds, and flags the figures that are not officially fixed so you do not build a budget on numbers no regulator publishes.

By Magnus Müller · Reviewed by Magnus Müller · Last updated: 2026-06-14

Is there a crypto exchange license in Canada?

There is no document called a "crypto exchange license" in Canada. Operating a crypto exchange that serves Canadian clients triggers two separate registrations: a federal anti-money-laundering registration with FINTRAC, and, in most custodial cases, a provincial securities-law registration overseen by the CSA and the Canadian Investment Regulatory Organization (CIRO). You hold both, not one.

The short answer (no single license, two registrations)

If you want the snippet-sized version: a crypto exchange in Canada is not licensed, it is registered, and it is registered twice. First, with FINTRAC as a Money Services Business (MSB) or Foreign MSB (FMSB), because "dealing in virtual currencies" is a statutory money-services activity. Second, with the relevant provincial securities regulator under the CSA framework, because most platforms that hold customer assets are offering what Canadian regulators call a "crypto contract." FINTRAC MSB overview confirms the AML obligation; CSA guidance confirms the securities obligation. FINTRAC registration on its own does not authorise you to run a custodial trading platform.

Why "license" is the wrong word for Canada

Most jurisdictions issue an instrument: a permit, an authorisation, a license. Canada does not. FINTRAC operates a registration regime, and once you register you appear in a public registry rather than receiving a license certificate. Securities oversight is provincial, administered through the CSA umbrella and CIRO, and works through registration categories such as investment dealer, not through a crypto-specific license. The practical effect is that searching for a single "Canada crypto exchange license" leads founders down the wrong path. The correct mental model is registration with FINTRAC plus registration under securities law, layered, with federal AML rules applying regardless of any provincial step.

Who regulates crypto exchanges in Canada?

Two authorities matter. FINTRAC handles anti-money-laundering and counter-terrorist-financing oversight at the federal level. The CSA, a council of the provincial and territorial securities regulators, together with CIRO, handles securities-law oversight of crypto asset trading platforms. They operate in parallel and their obligations stack.

FINTRAC (federal AML/CTF)

FINTRAC, the Financial Transactions and Reports Analysis Centre of Canada, is the federal regulator that administers MSB and Foreign MSB registration. Its authority rests on the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), which sets out the compliance-program, know-your-client, record-keeping, reporting and Travel Rule obligations every registrant carries. Because "dealing in virtual currencies" is a listed MSB service, every crypto exchange falls inside FINTRAC's perimeter, and registration is mandatory before you begin operating. FINTRAC's MSB pages state that even a business already registered or licensed provincially must still register federally with FINTRAC.

CSA and CIRO (securities overlay)

The CSA sets the securities-law expectations for crypto asset trading platforms, and CIRO is the self-regulatory organisation whose membership most custodial platforms must now hold. The trigger is the "crypto contract" concept introduced in CSA Staff Notice 21-327, published 16 January 2020: where a customer does not get immediate delivery of the crypto asset, the platform is generally offering a security or derivative and is subject to securities legislation. From there the path runs to dealer registration and CIRO membership.

How the two regimes stack (cumulative, not alternatives)

This is the point the old version of this page missed and the single most expensive misunderstanding we correct. FINTRAC registration satisfies your federal AML duties. It does not authorise you to hold customer crypto and run a custodial order book. That authorisation comes from the securities side. A platform that offers crypto contracts must therefore be both a FINTRAC-registered MSB or FMSB and a securities-registered dealer with CIRO membership. Treating the two as a choice, or assuming the FINTRAC registry entry is the end of the story, is the mistake that stalls Canadian launches.

FINTRAC MSB and Foreign MSB registration explained

For most operators, the FINTRAC track is the part they actually file. It is well documented in primary sources, carries no registration fee, and has no minimum capital requirement. The key decision is whether you register as a domestic MSB or a Foreign MSB, and that turns on where your business is located.

What counts as an MSB ("dealing in virtual currencies")

Under the PCMLTFA, a Money Services Business is an entity that provides one or more listed services, including foreign exchange dealing, money transfer, issuing or redeeming negotiable instruments, and "dealing in virtual currencies." FINTRAC treats virtual-currency exchange and transfer services as squarely within that definition, so a crypto exchange is an MSB and must register before it begins to operate. The same source notes that stablecoin issuers are expected to register as MSBs dealing in virtual currency.

MSB vs Foreign MSB (FMSB): the place-of-business test

The distinction is a place-of-business test. If your business has a place of business in Canada and provides an MSB service, you register as an MSB. If you have no place of business in Canada but direct your services at, and provide them to, clients in Canada, you register as a Foreign MSB. Both register with FINTRAC; the obligations are broadly the same.

Source: FINTRAC MSB overview and FINTRAC registration page.

The FMSB representative-for-service requirement

A foreign operator cannot register from a distance with no Canadian touchpoint. FINTRAC's registration page requires every FMSB to designate a representative for service in Canada: a person who resides in Canada and is authorised to accept notices from FINTRAC on the business's behalf. In practice this is the regulator's way of ensuring it can always reach a foreign registrant, and it is a step foreign founders routinely forget until the form demands it.

The CSA securities track: crypto contracts, PRUs and CIRO

If the FINTRAC track is the part you file, the securities track is the part that decides whether you can actually run a custodial platform. This is the regulatory depth that separates a serious Canadian plan from a wishful one, and it is the area where the old guidance was most out of date.

When securities law applies (the "crypto contract" test)

CSA Staff Notice 21-327, published 16 January 2020, sets the test. Where a customer trades crypto on your platform but does not receive immediate delivery of the asset, the platform is generally offering a "crypto contract," which Canadian regulators treat as a security or derivative. That brings the platform under securities legislation and a dealer-registration requirement. Custodial exchanges, which by design hold customer assets rather than delivering them instantly to a self-custody wallet, almost always fall on the securities side of this line.

Pre-Registration Undertakings (PRUs) and Staff Notice 21-332

To keep operating in Canada while pursuing full registration, unregistered crypto asset trading platforms were expected to file a Pre-Registration Undertaking (PRU) with their principal regulator, agreeing to investor-protection conditions consistent with those imposed on registered platforms. CSA Staff Notice 21-332 added requirements through this mechanism, including restrictions around value-referenced crypto assets and stablecoins. The exact current terms of those conditions are part of an evolving framework, so treat the PRU route as a regulator-managed transition rather than a fixed product, and confirm the live conditions before relying on them.

What changed in 2024-2026 for Canadian crypto platforms?

The headline change, and the reason this page exists in its current form, is the closing of the interim "restricted dealer" shortcut. Older guidance leaned heavily on that route. New applicants can no longer count on it.

End of the interim "restricted dealer" route (6 Aug 2024)

On 6 August 2024 the CSA announced that it does not intend to continue the interim, time-limited "restricted dealer registration" approach for crypto asset trading platforms. The CSA's statement signalled that the temporary shortcut featured in earlier guidance is effectively closing for new entrants. If your strategy was built on the restricted-dealer category, it needs rebuilding.

Full investment dealer registration plus CIRO membership

In its place, custodial platforms that have not already registered or entered a PRU are now directed to seek full investment dealer registration and CIRO membership through their principal provincial regulator. The CSA and CIRO expect platforms to prioritise these applications. This is a higher bar than the interim approach, and it is the practical reason a Canadian custodial exchange today is a securities-dealer project, not just an AML-registration project.

How much does it cost to register a crypto exchange in Canada?

On the FINTRAC side the cost answer is unusually clean: there is no registration fee and no minimum capital. The real costs sit on the securities side and in operations, and those are not fixed in a way we can quote with a number, so we will not invent one.

No FINTRAC registration fee, no MSB minimum capital

FINTRAC does not charge registration fees for an MSB or Foreign MSB, and the MSB regime imposes no minimum capital requirement. Your FINTRAC-side outlay is therefore the cost of building a real compliance program, not a government charge: an appointed compliance officer, documented policies, KYC tooling, reporting infrastructure and the periodic independent review the law expects.

Where costs do arise (securities/CIRO overlay and operations)

The securities track is where capital, custody and insurance conditions live: investment dealer registration, CIRO membership, asset-segregation and proof-of-reserves expectations, and value-referenced-asset restrictions. The exact current figures and conditions are not publicly fixed in the sources reviewed for this guide, and we will not print numbers a regulator does not publish. For a sense of how exchange budgets are built across jurisdictions, see our exchange licensing costs guide, and verify any Canadian securities-track figure against live CSA and CIRO rules before committing.

FINTRAC registration process and documents

The FINTRAC registration flow is short to describe and document-heavy to complete. The steps below are drawn directly from FINTRAC's registration page.

Step-by-step (pre-registration to public registry)

1. Pre-registration. Complete the online request to register a money services business or foreign money services business.
2. Compliance-officer contact. A FINTRAC compliance officer contacts you and provides the full registration form.
3. Complete the form. Supply the required data, including bank-account details, compliance-officer details, employee numbers, incorporation information, owner and senior-management information, estimated annual transaction amounts per service, and detailed location and agent information.
4. Submission. Submit the completed form and supporting documents through the secure Canada Post Connect message your compliance officer provides.
5. Registration and public registry. Once registered, your business appears in FINTRAC's public Money Services Business Registry.

Source: FINTRAC registration page.

Supporting documents (criminal-record checks, translations, governance)

FINTRAC requires criminal record checks for the CEO, the president, the directors, and any owner or shareholder holding 20 percent or more, issued within 6 months before submission by the competent authority where the person resides. You must also provide documents confirming the entity's existence and governance, such as a certificate of incorporation or a partnership agreement, plus ownership and control documentation. Any document not in English or French must be accompanied by a certified translation, and FMSBs must name their Canadian representative for service.

How long does FINTRAC registration take?

We do not state a processing time, because no primary FINTRAC source we reviewed publishes one. Older guidance circulating online quotes ranges such as "two to eight weeks of preparation" and "three to six months of review," but those figures are not confirmed by FINTRAC and should be treated as unverified. Preparation time is largely within your control, since the gating items are documents like criminal record checks and certified translations. Treat the official review timeline as not fixed until FINTRAC states one.

AML compliance and reporting obligations for a Canadian crypto MSB

Registration is the start, not the finish. The PCMLTFA imposes a continuing compliance program and a set of mandatory reports that define day-to-day operations for a Canadian crypto MSB.

The PCMLTFA compliance program (officer, policies, review)

FINTRAC treats a documented, comprehensive compliance program as the foundation of every other obligation. It comprises an appointed compliance officer, written policies and procedures, a risk assessment, ongoing training, and a biennial independent review of the program's effectiveness. The exact scope of each element should be confirmed against FINTRAC's dedicated compliance-program guidance, but the five components are the recognised backbone.

KYC and record keeping (five-year retention)

You must verify the identity of persons and entities for prescribed transactions and activities, and monitor business relationships on an ongoing basis. Records, covering accounts, transactions and client identification, must be kept for at least five years from the date each record is created, and must be producible to FINTRAC within 30 days of a request. These are concrete, sourced obligations, and they shape how you design your data retention from day one.

The four FINTRAC reports (STR, LCTR, LVCTR, EFT)

A crypto MSB files four report types to FINTRAC: Suspicious Transaction Reports (STR), with no minimum threshold; Large Cash Transaction Reports (LCTR), for cash at or above the prescribed threshold; Large Virtual Currency Transaction Reports (LVCTR); and Electronic Funds Transfer Reports (EFT). The LVCTR rule is the one with hard numbers worth memorising: you must report receipt of virtual currency worth CAD 10,000 or more in a single transaction, or two or more amounts totalling 10,000 or more within a consecutive 24-hour window for the same person, entity or beneficiary, filed within 5 working days of receipt. "In receipt" means the point at which the transaction can no longer be reversed. The exact LCTR cash threshold is widely understood to be the same figure, but confirm it against live FINTRAC LCTR guidance before relying on a specific number.

The Travel Rule for virtual currency transfers

The Travel Rule applies to both electronic funds transfers and virtual currency transfers, requiring originator and beneficiary information to accompany qualifying transfers. For exchanges, this means your transfer pipelines must capture and pass the prescribed counterparty data. For the wider mechanics and how Canada's approach compares internationally, see our Travel Rule compliance deep dive.

Should you register in Canada or choose another jurisdiction?

Canada is a credible, transparent place to run a regulated exchange, but it is not the lightest-touch option, and the dual regime means more moving parts than a single-license jurisdiction. The right answer depends on where your customers are and how much securities-grade infrastructure you are prepared to build.

When Canada makes sense (and when it does not)

From our practice, Canada suits operators whose strategy genuinely targets Canadian retail or institutional clients and who are prepared to run a securities-dealer-grade operation with CIRO membership. It is a harder fit for founders who want a low-overhead base from which to serve a global audience, because the federal AML registration is the easy half and the securities track is the demanding half. Weigh it against peers: US exchange licensing (BitLicense and MSB) for the closest North American comparison, Japan FSA exchange registration for an APAC benchmark, and Brazil's VASP registration regime for another Americas option. To frame the decision properly, start from our overview of how to start a licensed crypto exchange and compare crypto jurisdictions side by side. The compliance program you build in Canada also reuses cleanly elsewhere, so our crypto AML and KYC compliance guidance applies whichever jurisdiction you choose.