Home › Blog › Canada MSB

Crypto MSB Licence in Canada: Virtual Currency Registration (2026)

Published 15 July 2026 · Last reviewed 17 October 2026 · Buckingham Capital Consulting
Contents
  1. Crypto MSB registration in Canada in brief
  2. What counts as dealing in virtual currency
  3. The obligations specific to virtual currency
  4. The compliance programme FINTRAC expects
  5. The registration process and timeline
  6. Penalties and enforcement for crypto MSBs
  7. Stablecoins and the Stablecoin Act
  8. Other Canadian regimes to check
  9. Banking a crypto MSB
  10. Running a registered crypto MSB
  11. What FINTRAC looks for in a crypto MSB
  12. How Buckingham Capital Consulting can help
  13. Frequently asked questions
Key takeaways
  • Dealing in virtual currency has been an MSB activity since 1 June 2020; registration with FINTRAC is free, has no capital requirement and most complete files are processed within three months.
  • Crypto MSBs apply the travel rule to virtual currency transfers of CAD 1,000 or more and report virtual currency receipts of CAD 10,000 or more within 24 hours.
  • FINTRAC imposed a CAD 176,960,190 penalty on Xeltox Enterprises (Cryptomus) on 16 October 2025, now under appeal.
  • Since 26 March 2026, FINTRAC's maximum penalties have risen up to 40 times the previous limits, with a compliance agreement in every penalty case.
  • The Stablecoin Act will require stablecoin issuers to register as MSBs, but its regulations and in-force date are still to be published.

Crypto MSB registration in Canada in brief

A crypto business that deals in virtual currency for clients in Canada registers with the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) as a money services business (MSB) before it begins to operate. Dealing in virtual currency has been an MSB activity since 1 June 2020. FINTRAC charges no fee, sets no minimum capital and processes most complete applications within three months.

Registration is the entry point, not the finish line. FINTRAC supervises crypto MSBs closely, its largest published penalties have been against virtual currency businesses, and since 26 March 2026 its maximum penalties have risen up to 40 times the previous limits. This guide covers what triggers registration, the virtual currency obligations, the process and the other Canadian regimes a crypto business checks.

PointPosition in 2026
RegulatorFINTRAC, under the PCMLTFA
Regulated since1 June 2020 for virtual currency dealing
Registration fee and capitalNone
FINTRAC processingMost complete applications within 3 months
Travel ruleVirtual currency transfers of CAD 1,000 or more
Large virtual currency transaction reportCAD 10,000 or more within 24 hours
RenewalEvery 2 years; changes reported within 30 days

What counts as dealing in virtual currency

Dealing in virtual currency covers exchanging virtual currency for fiat currency, exchanging one virtual currency for another, and transferring virtual currency at a client's request. It applies whether the business acts as principal or as agent. In practice it captures:

  • Centralised exchanges and brokerage apps.
  • Over-the-counter (OTC) trading desks.
  • Crypto payment processors that receive and convert crypto for merchants.
  • Custodial wallet providers that move assets for users.
  • Crypto ATM operators.

Common crypto business models

Business modelFINTRAC positionAlso check
Centralised exchange serving CanadiansMSB or foreign MSB dealing in virtual currencyProvincial securities rules for crypto trading platforms
OTC desk for institutional clientsMSB dealing in virtual currencyLarge virtual currency transaction reports
Crypto ATM networkMSB dealing in virtual currencyLarge cash transaction reports; Quebec licence
Merchant crypto payment processorMSB where it receives and converts crypto for merchantsBank of Canada RPAA registration
Self-hosted wallet softwareGenerally outside scope if it never controls client assetsAny custodial or swap features

A provider of software that never holds or controls client assets, such as a self-hosted wallet developer, is generally outside the definition. The test is control of client value, not the technology used.

Foreign businesses serving Canadians

A crypto platform with no place of business in Canada that directs its services at people in Canada and provides them to Canadian clients registers as a foreign MSB. It designates a representative for service who resides in Canada, and carries the same obligations as a domestic MSB. Marketing to Canadians and onboarding Canadian users are the usual triggers.

The obligations specific to virtual currency

The travel rule

For every virtual currency transfer of CAD 1,000 or more, a crypto MSB includes the originator's and beneficiary's information with the transfer, and takes reasonable measures to obtain it for incoming transfers. It also has procedures for transfers where the counterparty cannot receive the data, including transfers to and from self-hosted wallets, and for deciding whether to accept, hold or return a transfer that arrives without the required information.

The travel rule is an operating system, not a policy statement. FINTRAC and banks look for the tool used to exchange data with other providers, the process for checking counterparties, and records that show the rule working in practice.

Large virtual currency transaction reports

A crypto MSB reports to FINTRAC when it receives virtual currency worth CAD 10,000 or more in a single transaction, or in several transactions within 24 hours that together reach that amount.

The rest of the programme

Crypto MSBs carry every other MSB obligation: client identification and beneficial ownership, politically exposed person checks, ongoing monitoring, suspicious transaction reports at any amount, sanctions and ministerial directives, large cash and international electronic funds transfer reports where relevant, and records kept for at least five years. Blockchain analytics and wallet screening sit inside the monitoring and risk assessment, because they are how a crypto business identifies the source and destination of funds.

The compliance programme FINTRAC expects

The compliance programme is in place and working before the business opens to clients. It has five required elements, and a programme missing any one does not meet the requirement:

  1. A compliance officer with authority, resources and direct access to senior management.
  2. Written, up-to-date policies and procedures approved by a senior officer.
  3. A documented risk assessment covering the business's tokens, clients, delivery channels, geography and new technologies.
  4. A written, ongoing training programme with records.
  5. An effectiveness review at least every two years.

Since 26 March 2026 the PCMLTFA also requires programmes to be reasonably designed, risk-based and effective. For a crypto business, that means a risk assessment that addresses the specific assets listed, privacy-enhancing coins if any, mixers and high-risk exchanges as counterparties, and the corridors its clients use, with monitoring rules that follow from it. Our financial crime page covers how the firm builds programmes to that standard.

The registration process and timeline

Registration runs in two stages online. A pre-registration form lets FINTRAC check basic eligibility; a FINTRAC officer then sends a secure link to the full registration form, which expires within 15 days. The full registration covers:

  • Legal and operating names, addresses and incorporation documents.
  • Ownership and control, including every person owning or controlling 20% or more.
  • The chief executive, president, directors and compliance officer.
  • The services, expected volumes, agents and places of business.
  • Banking details.
  • Criminal record checks for the chief executive, president, directors and 20% owners, issued no more than six months before submission, with certified translations where needed.

FINTRAC accepts only complete applications and states that it processes most within three months of receiving the full package. Preparing a crypto-specific compliance programme, travel rule process and analytics set-up takes a few weeks with experienced help. Registered businesses appear on FINTRAC's public MSB Registry.

StageTypical duration
Scope, structure and adjacent regimes1 to 2 weeks
Compliance programme, travel rule and analytics2 to 4 weeks
Pre-registration and full registration formForm submitted within 15 days of the link
FINTRAC processingMost complete files within 3 months

Domestic or foreign route

The domestic route uses a Canadian entity, which also helps with Canadian banking. The foreign route needs no Canadian company or office, only a Canadian representative for service. Our step-by-step Canada MSB guide covers both in detail.

Penalties and enforcement for crypto MSBs

FINTRAC does not approve business models at registration; it supervises through examinations and enforces through administrative monetary penalties and revocation. Its published penalties show the weight it places on virtual currency businesses:

BusinessPenaltyImposed
Xeltox Enterprises Ltd. (Cryptomus)CAD 176,960,190 for 2,593 contraventions16 October 2025
Peken Global Limited (KuCoin), foreign MSBCAD 19,552,00028 July 2025
MP Technology Services Ltd. (MoonPay subsidiary), foreign MSBCAD 536,853.3520 November 2025

All three penalties are under appeal to the Federal Court, according to FINTRAC's public notices.

The 26 March 2026 reforms

The Strengthening Canada's Immigration System and Borders Act received Royal Assent on 26 March 2026. For violations on or after that date, FINTRAC applies increased maximum penalties, up to 40 times the previous limits; every penalty case includes a compliance agreement; FINTRAC can issue compliance orders, and contravening one is a new violation; and certain compliance programme violations are reclassified as very serious. Registration can also be revoked, and operating without a valid registration is an offence under the PCMLTFA.

Stablecoins and the Stablecoin Act

The Budget 2025 Implementation Act, which received Royal Assent on 26 March 2026, includes the Stablecoin Act. It will require stablecoin issuers to register with FINTRAC as MSBs dealing in virtual currency. The requirement takes effect on a date set by regulations still to be published in the Canada Gazette, Part II, so it has no in-force date yet.

Until it does, businesses that exchange or transfer stablecoins for clients are already dealing in virtual currency and register on that basis. Issuers planning a Canadian launch prepare for registration now, because the compliance programme they will need is the same one FINTRAC already expects of crypto MSBs. Our article on stablecoin licensing worldwide covers the US, EU and UK regimes.

Other Canadian regimes to check

  • Quebec: money services in Quebec also need a licence under Quebec's Money-Services Businesses Act, administered by the Autorité des marchés financiers, with its own application, fees and renewal.
  • Bank of Canada: payment service providers performing retail payment functions for end users in Canada register under the Retail Payment Activities Act. Since 8 September 2025 they have operated under risk management and funds safeguarding frameworks and file annual reports.
  • Provincial securities regulation: crypto trading platforms whose client arrangements are treated as securities or derivatives are regulated by the provincial securities regulators through the Canadian Securities Administrators. This is separate from, and in addition to, FINTRAC registration.
  • Universal enrolment: legislated in March 2026 for reporting entities that do not already register with FINTRAC, with an in-force date still to be set. Registered MSBs are already known to FINTRAC.

Banking a crypto MSB

Canadian banks treat crypto businesses as higher risk, and FINTRAC registration does not oblige any bank to open an account. Banks review the substance of the compliance framework: the crypto-specific risk assessment, blockchain analytics and wallet screening, the travel rule process, source of funds procedures for large clients, and a clear account of how fiat moves in and out of the platform.

Banking is therefore a parallel workstream that starts with the registration, using the same documents. A crypto MSB that presents its programme as it presents it to FINTRAC shortens both processes. Our banking and payment processing page covers how the firm arranges accounts and fiat on- and off-ramps.

Running a registered crypto MSB

Registration starts a continuing supervisory relationship. A registered crypto MSB files suspicious transaction reports as soon as practicable, large virtual currency and large cash transaction reports within the prescribed deadlines, and, since 1 October 2025, reports of sanctioned property under the Special Economic Measures Act and the Justice for Victims of Corrupt Foreign Officials Act. It applies FINTRAC's ministerial directives, which impose enhanced measures on transactions with specified jurisdictions or entities.

The compliance officer keeps the risk assessment current as the business lists new assets, enters new markets or adds products such as staking or lending, and the programme is reviewed for effectiveness at least every two years. Changes to the registered information go to FINTRAC within 30 days, and the registration is renewed before its two-year expiry.

FINTRAC examines crypto MSBs by desk review and on site. Examiners test travel rule records, analytics alerts and their resolution, client identification files and report timeliness against the written programme, so the evidence that the programme runs as written is kept from the first day.

What FINTRAC looks for in a crypto MSB

  • A working travel rule. A tool, a process and records, including for self-hosted wallets.
  • A risk assessment specific to the business. Its tokens, corridors, clients and counterparties, not a generic money laundering assessment.
  • Current registration details. Changes to the compliance officer, ownership or services reported within 30 days.
  • Timely renewal. Registration renewed before it expires after two years; a lapsed registration ends automatically.
  • Banking planned alongside registration. So the registered business can open to clients when registered.

Our comparison of MSB registration in the US, Canada and the UK shows how the Canadian route fits with US and UK requirements for international crypto platforms.

How Buckingham Capital Consulting can help

The firm confirms scope and category, writes the crypto compliance programme and risk assessment, designs the travel rule and wallet screening framework, prepares and submits the domestic or foreign MSB registration, manages FINTRAC correspondence and prepares the banking documentation. It identifies Quebec, Bank of Canada and securities questions before the structure is fixed. The Canada MSB registration page sets out the scope.

Frequently asked questions

Do crypto businesses need an MSB licence in Canada?

Yes. Exchanging or transferring virtual currency for clients has been an MSB activity since 1 June 2020, and foreign platforms serving Canadian clients register as foreign MSBs.

How long does crypto MSB registration take?

FINTRAC processes most complete applications within three months. Preparing the compliance programme and travel rule process takes a few weeks beforehand.

What is the travel rule in Canada?

For virtual currency transfers of CAD 1,000 or more, the MSB sends originator and beneficiary information with the transfer and takes reasonable measures to obtain it for incoming transfers.

Do I need a Canadian company for a crypto MSB?

No. A foreign MSB needs only a representative for service resident in Canada, though a Canadian entity often helps with banking.

Do stablecoin issuers register with FINTRAC?

The Stablecoin Act will require it, but the requirement awaits regulations. Businesses exchanging or transferring stablecoins for clients already register as virtual currency dealers.

What happens if a crypto MSB does not comply?

FINTRAC can impose administrative monetary penalties, now up to 40 times the previous maximums, and revoke registration; operating unregistered is an offence.

Which other Canadian regimes apply to crypto businesses?

The Quebec money services licence, Bank of Canada registration under the Retail Payment Activities Act, and provincial securities regulation for crypto trading platforms.

References

  1. FINTRAC: Money services businesses
  2. FINTRAC: MSB registration
  3. FINTRAC: Implementation of legislative amendments
  4. FINTRAC: Changes to the administrative monetary penalties framework
  5. FINTRAC: Public notice of administrative monetary penalties
  6. Bank of Canada: Retail payments supervision

About Buckingham Capital Consulting

Buckingham Capital Consulting has prepared FINTRAC registrations for crypto exchanges, OTC desks and payment platforms, including the travel rule and wallet screening frameworks FINTRAC and Canadian banks expect. Its regulatory practice has worked on cryptoasset and payments licensing since 2013 across Canada, the US, the UK and the EU.

Speak to an expert: WhatsApp +44 7563 115980, Telegram @buckinghamcapital or info@buckinghamcapitalconsulting.co.uk.

This article is general information, reviewed against the regulator’s published requirements on the date shown. It is not legal advice; the regulator’s current publications take precedence.