In 2026, Canada tightened its crypto framework across six overlapping bodies rather than rebuilding one regulator. Canadian Investment Regulatory Organization (CIRO) updated its interim custody terms with a new Digital Asset Custody Framework, Parliament passed the country’s first federal Stablecoin Act, and Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) moved from writing rules to actively pulling licences, cancelling dozens of crypto firms’ registrations under a sharply higher penalty ceiling. This report covers all of it.
What Changed Across All Six Regulators
On February 3, 2026, CIRO issued its Digital Asset Custody Framework, requiring segregated wallets and stronger custody, governance, and cybersecurity controls, developed partly in response to past industry failures. The framework sets out formal expectations through terms and conditions of CIRO membership; a permanent rule under the CIRO Rules themselves is still pending.
On March 26, two federal bills received Royal Assent the same day. Bill C-15 created the Stablecoin Act under Bank of Canada supervision. Bill C-12, officially titled the Strengthening Canada’s Immigration System and Borders Act, an omnibus border and immigration bill, carried amendments that rewrote FINTRAC’s penalty framework, raising fines up to 40 times previous limits and adding new enforcement tools.
By mid-2026, that sharper toolkit was visibly in use. FINTRAC had cancelled 50 Money Services Business (MSB) licences so far this year, 47 tied to crypto firms. This built on record penalties already on the books from late 2025, including a $126 million fine against Cryptomus and a $14 million fine against KuCoin, still the largest crypto-related penalties in Canadian history. The Office of the Superintendent of Financial Institutions (OSFI) had already moved crypto-asset capital changes into force from late 2025/early 2026, then opened a further consultation in May. There is no single federal crypto licence covering all crypto activities.
Key Regulatory Bodies: Six Regulators, One Tightening Perimeter
| Regulator | Jurisdiction | What It Governs | Key 2026 Instrument |
| Canadian Securities Administrators (CSA) / Canadian Investment Regulatory Organization (CIRO) | Provincial securities law, national Self-Regulatory Organization (SRO) rules | Crypto Trading Platforms (CTPs) dealing in security tokens or crypto contracts; custody, capital, registration | Digital Asset Custody Framework (Feb 3, 2026) |
| FINTRAC | Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) (federal) | MSB/FMSB registration, Anti-Money Laundering and Counter-Terrorist Financing (AML/CTF) compliance, Travel Rule | Bill C-12 AMP overhaul (in force Mar 26, 2026) |
| Bank of Canada | Retail Payment Activities Act (RPAA); Stablecoin Act | Payment service providers; fiat-backed stablecoin issuers | Stablecoin Act, Bill C-15 (Royal Assent Mar 26, 2026) |
| OSFI | Bank Act, Insurance Companies Act | Capital/liquidity treatment of crypto exposures for banks, insurers | Draft 2027 Banking Guideline (consultation closed Jul 20, 2026) |
| Canada Revenue Agency (CRA) | Income Tax Act (as amended) | Crypto-Asset Reporting Framework (CARF) tax data collection | Draft CARF legislation (Aug 2025) |
| Provincial (Québec, BC) | Provincial MSB statutes | Provincial-level MSB registration | Québec MSBA; BC Money Services Businesses Act |
Canada’s model sits between the US’s fragmented, multi-agency system and the EU’s harmonized MiCA regime, which lets a single member-state authorization operate across all of Europe. Canada has no equivalent national licence, firms must satisfy coordinated provincial securities law plus federal AML and stablecoin rules simultaneously.
One point in its favour: Canada was the first country to approve a spot Bitcoin ETF, and has since approved spot Ether ETFs, giving institutions a regulated path into crypto that avoids direct custody.
Q1 2026 (January to March)
OSFI’s capital rules bite, then two bills land on the same day.
Q1 2026 was a busy quarter for Canada’s crypto rules. The Office of the Superintendent of Financial Institutions (OSFI) raised banks’ crypto exposure limit to 5% of Net Tier 1 capital, while the Canadian Investment Regulatory Organization (CIRO) rolled out its new Digital Asset Custody Framework for crypto platforms. On March 26, Parliament passed Bill C-15, creating Canada’s first Stablecoin Act, and Bill C-12, giving the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) stronger enforcement powers and higher penalties.
What’s Inside?
- Stablecoin issuers must register with the Bank of Canada.
- Coins must be backed 1:1 with liquid reserves.
- Users must be able to redeem them at face value.
- Issuers can’t offer interest or yield directly to holders.
- Rules are expected to fully take effect in 2027.
- Stablecoins are not protected by the Canada Deposit Insurance Corporation (CDIC).
Q2 2026 (April to June)
FINTRAC’s crackdown accelerates, and OSFI opens a new consultation.
Q2 2026 was all about tougher enforcement. The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) published its Bill C-12 rollout plan and stepped up its crackdown, revoking 50 Money Services Business (MSB) registrations so far in 2026, including 47 crypto firms. Meanwhile, the Canadian Investment Regulatory Organization (CIRO) completed most of the national registration transition, and the Office of the Superintendent of Financial Institutions (OSFI) launched a consultation on updated banking rules for crypto exposures.
What’s Inside?
- FINTRAC revoked 50 MSB registrations, including 47 crypto firms.
- The latest enforcement wave included 23 licence revocations.
- Affected firms have a 30-day appeal window.
- CIRO completed most of the Canadian Securities Administrators (CSA) registration transition, except in British Columbia and Manitoba.
- OSFI proposed recognizing cross-exchange hedging for certain crypto assets under its banking rules.
Q3 2026 (July, to date)
July 20: OSFI’s consultation on its proposed 2027 Capital and Liquidity Treatment of Crypto-asset Exposures (Banking) Guideline closed.
OSFI expects to publish the final guideline in September 2026. Implementation is expected on November 1, 2026 for institutions with October 31 fiscal year-ends and January 1, 2027 for institutions with December 31 year-ends.
As of the report’s publication date, July’s main focus remained the development of Bill C-12 enforcement guidance and preparations for Stablecoin Act regulations.
What is the Canadian government saying about crypto?
A leaked March 2026 Canadian intelligence report warns that many crypto-to-cash services are being used to facilitate money laundering, sanctions evasion, and other organized crime by allowing users to convert large amounts of crypto into cash with little or no identity checks. The report says these businesses often bypass traditional anti-money laundering safeguards, prompting regulators to step up enforcement. So far in 2026, FINTRAC has revoked the registrations of 123 crypto businesses, highlighting Canada’s tougher stance on illicit crypto activity.
Latest Crypto Crackdown
This is where 2026 has moved fastest. Beyond the 50 MSB revocations, regulators imposed the country’s two largest crypto-related penalties on record: Cryptomus, fined $126 million, for multiple violations including failing to report over 1,000 suspicious transactions, and KuCoin, fined $14 million, for operating without proper registration and failing to report large transactions. Both dwarf FINTRAC’s earlier C$33,000 penalty against CoinSeason Capital Inc. in September 2024, a jump lining up directly with Bill C-12’s higher AMP ceiling taking effect the same day as the Stablecoin Act.
Regulators frame this around structural weaknesses in crypto compliance rather than crypto being the dominant laundering channel in absolute terms, the Financial Action Task Force estimates 2–5% of global Gross Domestic Product (GDP) is laundered through traditional finance, versus under 1% through crypto, but the practical effect is a harder environment for smaller Canadian crypto firms facing steep new compliance costs.
Crypto Tax
- 50% of crypto capital gains are taxable in Canada.
- 100% of crypto income (such as staking and mining rewards) is taxed as ordinary income.
- Tax rates depend on your federal and provincial tax brackets, with federal rates ranging from 15% to 33%.
- Canadians can claim the Basic Personal Amount (BPA) to reduce their taxable income.
- Investors can legally reduce taxes through tax-loss harvesting and by realizing gains during lower-income years.
Crypto Adoption
Around 24.4% of Canadians own cryptocurrency, according to Triple-A. Statista projects crypto user penetration at 26.8% in 2026, showing continued growth in adoption. Canada remains one of the world’s most regulated crypto markets, with growing institutional participation through spot Bitcoin and Ethereum ETFs and licensed crypto trading platforms.
While global retail crypto volume fell 11% year-over-year to $979 billion in Q1 2026, Canada’s regulated market has remained relatively resilient thanks to stronger compliance and investor protections.
Conclusion
Canada’s 2026 crypto framework is converging rather than centralizing, and its enforcement posture has shifted from cautionary to aggressive: CIRO’s custody rules close a gap exposed by past failures, the Stablecoin Act extends Bank of Canada authority into issuance, and FINTRAC, armed with Bill C-12’s sharper penalties, is now actively removing non-compliant firms rather than just warning them.
With OSFI’s final guideline due in September and Stablecoin Act regulations still being drafted, 2026’s biggest story may ultimately be the crackdown itself.
FAQ
Is cryptocurrency legal in Canada?
Yes. It’s legal to buy, sell, and hold crypto; businesses dealing in it must follow applicable securities and AML law.
What changed for stablecoin issuers in Q1 2026?
Bill C-15 created the federal Stablecoin Act March 26, 2026, but its operative provisions aren’t fully in force yet, expected in 2027 once supporting regulations are finalized.
Why has FINTRAC cancelled so many crypto firm registrations in 2026?
Part of a broader AML push: 50 MSB licences revoked in 2026, 47 tied to crypto, alongside record fines against Cryptomus ($126M) and KuCoin ($14M), enabled partly by Bill C-12’s higher penalty ceiling.
Can crypto platforms still operate under a pre-registration undertaking?
No. The CSA stopped accepting these on August 6, 2024; full CIRO investment-dealer registration is required.
Are stablecoins insured in Canada?
No. They are not bank deposits and are not CDIC-protected, even once the Act is fully in force.
How does Canada compare with the US and EU?
More coordinated than the US’s fragmented multi-agency system, but without the EU’s single-passport MiCA licence.
