Canada

Sitting alongside the crypto-contract doctrine is a 2021 joint CSA/IIROC framework establishing an interim, time-limited 'restricted' dealer and marketplace registration category, conditional on platforms forgoing leverage and margin, pending a longer-term registration solution that does not appear, from this cycle's evidence, to have been finalized. In 2023 the CSA layered an 'enhanced' pre-registration undertaking on top of this interim category, requiring unregistered platforms operating in Canada to commit to custody segregation, a ban on margin and leverage, and a ban on selling stablecoins without CSA permission, or to exit the Canadian market while pursuing full registration.

Enforcement under the federal money-services-business track runs in parallel to the securities perimeter: FINTRAC's action against Peken Global Limited (KuCoin) for failing to register as a foreign money services business, alongside reporting failures on large and suspicious Canadian-client transactions, shows that registration exposure is backstopped by federal AML enforcement even where provincial securities registration remains exemption-based.

Industry pressure for consolidation is a defining feature of this cycle. Coinbase Canada has publicly advocated codifying current CSA exemptive-relief practice into a single harmonized national instrument, implicitly characterizing today's patchwork of provincial guidance, interim registration categories, and case-by-case exemptions as friction for platforms seeking durable market access.

A material caveat governs how this module should be read: essentially the entire evidentiary base is Tier-4 secondary reporting. A systemic sourcing-defect correction was applied this cycle, downgrading several materiality-4/5 claims -- including the pre-registration undertaking commitments and the KuCoin enforcement action -- from Confirmed to Probable confidence after review found zero Tier-1-to-Tier-3 primary sources retrieved despite the ready public availability of primary material such as the CSA Crypto Undertakings register. The licensing perimeter described here should be treated as directionally accurate but pending direct confirmation against CSA and FINTRAC primary texts.

Outlook

The trajectory is one of tightening applied through interim and exemptive mechanisms rather than durable codification. The near-term signal to watch is whether the CSA moves toward the harmonized national instrument industry is now openly requesting, or continues layering additional interim undertakings onto the existing structure. A second signal worth watching is whether a reported 2026 OSC decision involving Coinbase Canada -- referenced but not directly retrieved this cycle -- provides the first judicial test of the crypto-contract doctrine underpinning the entire registration perimeter; any judicial affirmation or narrowing of that doctrine would have first-order consequences for which platforms fall within scope. Given the near-total reliance on secondary reporting this cycle, priority backfill should target the CSA Crypto Undertakings register and any resulting OSC or provincial tribunal decisions before this module's confidence profile can be upgraded.

Stablecoins receive separate, more concrete classificatory treatment through the Value-Referenced Crypto Asset (VRCA) category, which the Ontario Securities Commission administers on behalf of the CSA. Exchange listing of a VRCA requires authorization, and Circle Internet Financial's USDC was identified this cycle as the only approved VRCA issuer at time of reporting -- giving USDC a first-mover regulatory status among Canadian-listed stablecoins that is likely to shape near-term competitive dynamics among issuers seeking similar authorization.

Taken together, the classification regime rests on two pillars: a broad, judicially untested contractual-claim doctrine covering exchange-held crypto generally, and a narrower, operative VRCA authorization gate specifically for stablecoins. Both pillars share a common evidentiary weakness this cycle -- the crypto-contract doctrine's primary source is 2021 secondary commentary, and the VRCA authorization claim was downgraded from Confirmed to Probable confidence after this cycle's systemic Tier-4-sourcing correction found no Tier-1-to-Tier-3 primary anchor.

Outlook

The most consequential open question for this module is whether a reported 2026 Ontario Securities Commission decision involving Coinbase Canada provides the first judicial test of the crypto-contract doctrine; a ruling either way would clarify or destabilize the current classification split between platform-held claims and underlying commodity-type tokens. On the stablecoin side, watch for additional VRCA authorizations beyond USDC, which would signal whether the current single-issuer landscape is a temporary first-mover artifact or a durable feature of a still-tight authorization gate. Direct retrieval of the OSC's crypto-business guidance page and any published VRCA guidance would materially improve confidence in both strands of this module.

DeFi presents a starkly different picture. Coinbase Canada has publicly sought a regulated pathway for DeFi services and higher-yield lending products, explicitly arguing that no settled DeFi-specific regime currently exists in Canada beyond case-by-case exemptions. This is a non-normative industry statement, but it corroborates what the broader licensing picture already suggests: Canada's crypto regulatory architecture is built around custodial exchange relationships and securities doctrine, and has not yet produced an analogous framework for non-custodial or protocol-level DeFi activity. Mining and validator/node-operation activity remain entirely unaddressed in the evidence gathered this cycle -- no federal or provincial posture on electricity or environmental nexus rules for crypto mining could be established, a gap flagged for targeted research at Innovation, Science and Economic Development Canada and provincial energy regulators.

This module is a designated thin-evidence area, and its Uncertain-confidence rating reflects that staking is the only sub-area with direct regulatory-relevant evidence this cycle; DeFi and mining sit in a genuine regulatory and evidentiary gap rather than a confirmed light-touch or prohibitive stance.

Outlook

The key forward question is whether Canada moves to formalize a DeFi-specific exemptive or licensing pathway in response to industry advocacy, or continues to handle DeFi activity through ad hoc, case-by-case exemptive relief indefinitely. Staking's integration into regulated ETF and custody structures may serve as a template for how regulators eventually approach other on-chain yield-generating activities, but this cannot be assumed to extend to DeFi given the different custodial and disintermediation characteristics involved. Mining and validator regulation remains a genuine blind spot requiring dedicated research before any assessment of trajectory can be made with confidence.

Beneath the still-forming federal layer, two already-binding mechanisms operate. First, the CSA's Value-Referenced Crypto Asset (VRCA) framework, rolled out since 2023, requires exchange-level authorization for stablecoin listings, with Circle's USDC the only approved issuer identified this cycle. Second, at the provincial level, Tetra Trust has launched CADD, a CAD-pegged stablecoin approved by Alberta Treasury Board and Finance, with reserves held in trust under Canadian law and dedicated to redemption -- a live, operating provincial stablecoin predating and potentially interacting with the federal Act once it takes effect.

This module is designated thin-evidence, and a Challenger corroboration this cycle specifically recommended verifying the VRCA and CADD claims against the OSC's VRCA guidance page before publication; that verification has not yet occurred, and confidence on the VRCA and CADD claims has been held at Probable pending it.

Outlook

The central open question is the Stablecoin Act's implementing regulations and in-force date -- until confirmed, Canada's stablecoin regime should be read as mid-transition, with binding provincial and CSA-level authorization already operative but the overarching federal framework not yet fully in force. Watch for the Retail Payment Activities Act amendments to surface with a concrete legislative timeline, which would materially firm up the payments-supervision dimension of this file, and for additional VRCA-authorized issuers beyond USDC, which would signal whether the current concentrated authorization landscape is temporary. Direct retrieval of Bank of Canada implementing materials and the OSC VRCA guidance page are the two highest-priority backfill items for this module.

Legal and industry commentary this cycle characterizes CIRO's custody framework as expressly interim guidance, and notes that CSA relief for novel crypto business models remains limited to case-by-case pilot-project exemptions rather than a settled consumer-protection regime -- a non-normative but corroborating signal that consumer protections, while real and binding in specific respects, are still being built out rather than finalized.

The unresolved proposal is a nationwide ban on bitcoin and other crypto ATMs, floated by the federal government in its Spring Economic Update and justified by reference to FINTRAC findings that the machines have become a primary vector for fraud and money laundering targeting Canadian consumers. This proposal's current enactment status could not be confirmed from the evidence gathered this cycle, and it should be treated as a live but unresolved policy signal rather than a settled rule.

As with several other modules this cycle, the custody-framework and pre-registration-undertaking claims were downgraded from Confirmed to Probable confidence following the systemic Tier-4-sourcing correction, reflecting the absence of retrieved Tier-1-to-Tier-3 primary material despite the materiality-5 status of both claims.

Outlook

The custody-and-segregation pillar of Canadian consumer protection appears durable and likely to tighten further given its direct lineage to the QuadrigaCX collapse, a precedent regulators continue to cite explicitly. The crypto ATM ban is the single most consequential near-term unknown in this module: its enactment would represent a significant tightening of retail-facing consumer protection, while its abandonment or indefinite delay would leave a consumer-fraud vector regulators have themselves flagged as significant. Direct review of subsequent federal budget and legislative filings is the priority action to resolve this open question.

What has changed is the enforcement picture, and it is the enforcement gap -- acknowledged by the CRA itself -- that is the more consequential development this cycle. The CRA has stated it believes there is no reliable way to identify taxpayers operating in the crypto space and assess income-tax reporting compliance, a striking admission from the tax authority responsible for enforcing the very rules described above. This acknowledged gap has produced concrete enforcement action: the CRA obtained a Federal Court order compelling Dapper Labs to disclose data on 2,500 of its users, narrowed down from an initial request covering 18,000, executed via a dedicated 35-person crypto audit team that has worked on over 230 files to date. This indicates a meaningful, resourced compliance effort operating despite the CRA's own acknowledged visibility limitations.

In response to the broader enforcement gap, the Department of Finance has announced plans for new legislation to combat financial crime, including crypto tax evasion, alongside a dedicated Financial Crimes Agency, targeted for introduction by Spring 2026. This announcement's exact date is reported only imprecisely as late October 2025, and its current enactment or operational status could not be confirmed this cycle.

This module is designated thin-evidence, and several of its claims -- including the compelled-disclosure litigation and the Financial Crimes Agency announcement -- carry no confirmed recency date because underlying secondary reporting left the relevant articles undated.

Outlook

The trajectory here is unambiguously tightening: an acknowledged enforcement gap is being met with escalating compelled-disclosure litigation and a proposed dedicated enforcement agency, even as the underlying substantive tax rules remain unchanged. The Financial Crimes Agency's actual establishment and the fate of the associated tax-evasion legislation are the single most important forward signals for this module, given their potential to materially close the visibility gap the CRA has itself acknowledged. Review of subsequent Department of Finance and parliamentary filings is the priority action to resolve this open question.

The most significant single event in this module is the 2022 use of emergency powers: financial institutions, including crypto exchanges, were directed under the federal Emergency Economic Measures Order (Emergencies Act) to cease trading and freeze the assets of 'designated persons' and associated crypto wallets, based on designated-persons information shared by the RCMP. This claim was itself the subject of a correction this cycle: an earlier attribution jointly naming the Ontario Provincial Police and RCMP as the ordering authority was found unsupported and has been corrected to the primary Department of Finance description of the federal order, with the claim's source tier upgraded from T4 to T1 as a result -- one of the few claims in this baseline resting on confirmed primary-source material rather than secondary reporting.

A Canada-specific crypto 'travel rule' threshold and originator/beneficiary data-field requirement under FINTRAC's PCMLTFR regime, distinct from general FATF Recommendation 16 expectations, could not be verified this cycle. This module is designated thin-evidence across the broader crypto monitor estate, and this travel-rule gap has been flagged for prioritized backfill.

Outlook

Enforcement intensity in this module is trending upward, with FINTRAC's $25 million-plus annual fine total and continued foreign-MSB actions against major offshore exchanges signaling sustained regulatory attention to cross-border transaction reporting. The Emergencies Act precedent, now resting on confirmed primary sourcing, demonstrates that emergency sanctions-freeze powers extend to crypto wallets without requiring bespoke crypto legislation -- a capability worth tracking for any future use. The most consequential unresolved question is whether Canada has, or will adopt, a crypto-specific travel-rule threshold distinct from general FATF expectations; direct review of FINTRAC's PCMLTFR virtual-currency provisions is the priority action to close this gap.