Canada Crypto Licence Requirements (2026 Guide)

Canada has no crypto licence — you register as a Money Services Business with FINTRAC and stand up a full AML/CFT compliance program. Most operators come to Canada expecting a “crypto licence” and a fee schedule. There is neither. What Canada actually requires is a FINTRAC Money Services Business (MSB) registration — no minimum capital, no government fee — and the real work is the compliance programme sitting behind it. In our practice, the teams who stall are the ones who treat registration as a form to file rather than an anti-money-laundering system to build and run.

This guide sets out exactly what you have to satisfy in 2026, in the order it matters: who must register, the registration itself, the mandatory AML/CFT programme, and KYC, reporting and the Travel Rule. It ends on the point most guides bury — FINTRAC registration is federal AML only, and serving Canadian retail also drags in provincial securities registration. Get that distinction wrong and you are non-compliant on day one.

Who must register: dealing in virtual currency

Under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), any business dealing in virtual currency must register as an MSB with FINTRAC before it operates. “Dealing in virtual currency” is defined by two activities:

• Virtual-currency exchange — exchanging crypto for fiat, fiat for crypto, or one virtual currency for another.
• Virtual-currency transfer — transferring virtual currency on behalf of a client, or receiving a transfer for remittance.

If your model does either, the obligation is triggered. Since the 2020 amendments and the 2024–2025 tightening, the perimeter clearly captures exchanges, brokers, OTC desks, custodial wallets that move client funds, and money-transfer firms adding a crypto rail. There is no de-minimis exemption that lets a real business skip registration.

The second thing to settle is domestic MSB versus foreign MSB. A business with a place of business in Canada registers as a domestic MSB. A business without a place of business in Canada that nonetheless directs and provides services to clients in Canada must register as a foreign MSB (FMSB). The obligations are the same either way — a foreign MSB does not get a lighter compliance load for being offshore. For the wider picture of how the MSB category works and where it fits among global options, our flagship Canada crypto licence guide is the companion to this requirements page.

The registration itself: no fee, no capital

This is where Canada is genuinely unusual. FINTRAC charges no registration fee, and the PCMLTFA sets no minimum capital. The barrier is not money paid to the regulator — it is the quality of the file you submit and the programme behind it.

The filing itself asks for detailed entity, ownership and senior-management information, expected transaction volumes and business locations, any agents you use, and criminal-record checks for the CEO, president and directors — and for anyone owning or controlling 20% or more of the entity. Because there is no fee and no capital gate, the whole cost sits in the compliance build and banking; for how that adds up in practice see our Canada crypto licence cost breakdown.

The mandatory AML/CFT programme

Registration is the visible step; the compliance programme is the requirement that actually matters. FINTRAC expects a documented, operable AML/CFT programme with five pillars:

• A compliance officer — a designated individual responsible for the programme, with the authority and seniority to run it.
• Written policies and procedures — kept current, covering client identification, monitoring, reporting and record-keeping.
• A risk assessment — a documented assessment of your money-laundering and terrorist-financing risk across clients, products, geographies and delivery channels, with mitigation mapped to it.
• Ongoing training — a training programme for staff and agents on obligations and red flags.
• A two-yearly effectiveness review — an independent review of the programme at least every two years, testing whether it actually works.

KYC, record-keeping, reporting and the Travel Rule

On top of the programme sit the operational obligations that run for the life of the registration.

KYC and record-keeping. You verify client identity, keep client-identification and transaction records to FINTRAC standards, and retain them for the statutory period. Sanctions and watch-list screening is expected, not optional.

Reporting. As a reporting entity you file with FINTRAC on defined triggers, including Large Virtual Currency Transaction Reports (LVCTRs) for virtual-currency amounts at or above the CAD 10,000 threshold, and Suspicious Transaction Reports (STRs) whenever you have reasonable grounds to suspect a transaction is linked to money laundering or terrorist financing. STRs carry no minimum amount and no fixed deadline beyond acting “as soon as practicable.”

The Travel Rule. Since June 2021 the PCMLTFA has required originator and beneficiary information to travel with virtual-currency transfers, and the obligations were tightened through 2024–2026. Your systems must attach, transmit, screen and retain this data on transfers, and handle transfers to and from unhosted wallets under the applicable rules. This is a hard technical requirement — build it into your stack before you file, not after.

These obligations run continuously, not just at onboarding. A registered MSB has to keep its programme current as products and volumes change, refresh its risk assessment when the business shifts, and be ready for FINTRAC examination at any point. Registration is the start of a supervised relationship, not a one-off approval — which is exactly why FINTRAC status carries more weight with banking partners than a bare company registration in an unregulated jurisdiction.

The honest caveat: federal AML vs provincial securities

Here is the point that turns a clean MSB file into a compliant business. FINTRAC MSB registration is anti-money-laundering regulation at the federal level — and nothing more. It does not authorise you to offer securities or derivatives to Canadians, because in Canada that is regulated provincially, not federally.

A crypto trading platform that offers services to Canadian retail investors generally falls under the Canadian Securities Administrators (CSA) framework. In practice that has meant registering as a restricted dealer, signing a pre-registration undertaking (PRU) while the application is processed, and accepting conditions on products, leverage, custody and marketing. This is a separate track from FINTRAC, with its own regulator (the provincial securities commissions), its own timeline and its own cost.

Which side of that line you sit on drives the whole scope of your project, so it is the first thing to settle — not the last. We map both layers before anyone files, so the obligation is fully costed rather than discovered halfway through onboarding.

Assembling the file in the right order

The sequence that avoids rework is: confirm that MSB applies and whether provincial securities registration is also in scope; build the AML/CFT programme — compliance officer, policies, risk assessment, Travel-Rule tooling and training; prepare the entity, ownership, volume and criminal-record documentation; then file the FINTRAC registration and manage the review. Filing before the programme is real is what turns a four-month path into a longer one.

None of it needs local capital or a government fee — what it needs is a genuine, operable compliance system and an honest read of whether you are touching Canadian retail. Vantegris handles the MSB file end to end and scopes the provincial-securities layer alongside it, through the Canada crypto licence service. Want a straight answer on which layers your model actually triggers before you spend a dollar? Book a free consultation and we will map the full picture first.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.