Virtual Currency MSB in Canada: The Complete 2026 Guide for Crypto Businesses
Canada remains one of the most accessible jurisdictions in the world for launching a cryptocurrency business — but 2026 has fundamentally changed the compliance landscape. FINTRAC revoked 86 crypto-linked MSB registrations in Q1 2026 alone, including 51 in a single day on March 24. The regulator imposed a record CAD $176.9 million penalty against Cryptomus (Xeltox Enterprises Ltd.) for 2,593 AML violations and a CAD $19.6 million fine against KuCoin’s operator Peken Global Limited for failing to register, file suspicious transaction reports, and report large virtual currency transactions. Minister Champagne issued a directive in February 2026 ordering FINTRAC to mobilise additional resources for enforcement.
The message is clear: Canada welcomes crypto businesses, but only those that take compliance seriously.
This guide covers everything you need to know about operating a virtual currency MSB in Canada in 2026 — from what activities trigger registration, to the compliance obligations you must meet, to the fastest way to get operational without waiting months for approval.
Looking for the fastest path? A ready-made MSB with all six permission categories already active — including virtual currency dealing — lets you skip the 3–4 month registration queue and start operating in as little as two weeks. Contact us to see current inventory.
What Is a Virtual Currency MSB in Canada?
Canada does not issue a standalone “crypto license.” Instead, businesses that deal in virtual currencies must register as a Money Services Business (MSB) with FINTRAC — Canada’s financial intelligence unit — under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA).
Virtual currency dealing is one of six MSB service categories defined under the Act, alongside foreign exchange dealing, money transferring, payment services, crowdfunding, and issuing or redeeming money orders.
Virtual currency was formally brought into Canada’s AML/CTF framework in June 2021, with enhanced reporting and record-keeping obligations added in June 2022. Since then, any business that exchanges, transfers, or otherwise deals in virtual currencies on behalf of customers must hold valid FINTRAC registration.
This applies to both Canadian-incorporated entities and foreign businesses serving Canadian customers. Foreign operators must register as a Foreign MSB (FMSB) with FINTRAC — or, alternatively, purchase a Canadian-incorporated ready-made MSB for a stronger domestic presence. For more detail on that distinction, see our foreign MSB guide and non-resident MSB guide.
The key point: if your business touches virtual currency and serves customers in or from Canada, MSB registration is not optional — it is a legal requirement.
What Crypto Activities Require MSB Registration?
The scope of “virtual currency dealing” under the PCMLTFA is broad. The following activities trigger MSB registration when conducted on behalf of customers:
Exchanges and trading platforms — fiat-to-crypto on-ramps and off-ramps, crypto-to-crypto exchanges, and OTC trading desks all require registration. This is the most common trigger for VC MSB registration.
Bitcoin and crypto ATM operators — every crypto ATM operating in Canada (or serving Canadian customers remotely) must be operated by a registered MSB. ATM operators face particularly strict transaction monitoring obligations.
Stablecoin issuers and exchanges — stablecoins are classified as virtual currencies under the PCMLTFA. Issuing, buying, selling, or exchanging stablecoins for customers requires registration.
DeFi platforms with customer intermediation — while purely decentralised protocols operating without intermediaries may fall outside scope, platforms that facilitate or intermediate customer transfers of virtual currencies are caught by the definition.
Peer-to-peer marketplaces — P2P platforms that intermediate between buyers and sellers (escrow services, matching engines) require registration.
Payment processors accepting cryptocurrency — businesses that process crypto payments on behalf of merchants must register as MSBs.
Custodial wallet services — providing custody of virtual currencies on behalf of customers constitutes dealing in virtual currencies.
NFT marketplace operators — where NFTs function as virtual currencies (i.e., they can be used as a medium of exchange or payment), marketplace operators must register.
This list is not exhaustive, and FINTRAC interprets the scope broadly. The safe approach: if your platform touches customer virtual currency at any point in the transaction flow, assume registration is required.
Critically, these obligations apply to businesses both inside and outside Canada. A crypto exchange based in Singapore, the UK, or anywhere else that serves Canadian customers must register as a Foreign MSB. For details on that process, see our non-resident MSB guide and foreign MSB guide.
FINTRAC’s 2026 Crypto Crackdown: What It Means for MSB Owners
2026 has been FINTRAC’s most aggressive enforcement year on record. The numbers tell the story:
86 MSB registrations revoked in Q1 2026. Enforcement came in waves — revocations in January, 11 on March 6, 22 on March 16, and a massive 51 on March 24 alone. Virtual currency dealing was near-universal across the revocation cohort, confirming that crypto MSBs are FINTRAC’s primary enforcement target.
CAD $176.9 million penalty against Cryptomus. Xeltox Enterprises Ltd., a B.C.-incorporated MSB operating as Cryptomus, was hit with the largest administrative monetary penalty in FINTRAC history — for 2,593 violations of the PCMLTFA. The violations included 1,068 instances of failing to file suspicious transaction reports on transactions linked to child sexual abuse material, fraud, ransomware, and sanctions evasion. Cryptomus is appealing the penalty to the Federal Court of Canada.
CAD $19.6 million fine against KuCoin. Peken Global Limited, operating the KuCoin exchange, was penalised for operating without proper FMSB registration, failing to file large virtual currency transaction reports, and failing to submit suspicious transaction reports.
Ministerial directive. In February 2026, Minister Champagne directed FINTRAC to mobilise additional resources toward enforcement, signalling that the crackdown is not a one-off event but a sustained policy priority.
The grounds for revocation across the Q1 cohort included: failure to respond to information requests from FINTRAC, non-compliance with registration eligibility conditions, failure to update registration records, and connections to money laundering or terrorist financing. Notably, 83% of Q1 2026 revocations were affirmative — meaning FINTRAC actively revoked them, rather than simply letting expired registrations lapse.
The takeaway is stark: FINTRAC is actively hunting non-compliant crypto operators. Registration alone is not enough — you must maintain a live, operational compliance program and meet all ongoing obligations. You can verify any MSB’s current status on the FINTRAC registry before doing business with them.
Compliance Obligations Every VC MSB Must Meet
Once registered, a virtual currency MSB faces a comprehensive set of ongoing compliance requirements. Failure to meet any of them can trigger penalties or revocation — as the 2026 enforcement wave has made painfully clear.
Reporting Obligations
Large Virtual Currency Transaction Reports (LVCTRs) — any virtual currency transaction of CAD $10,000 or more (or multiple transactions totalling $10,000+ within 24 hours to the same counterparty) must be reported to FINTRAC. This is the VC equivalent of the large cash transaction report.
Suspicious Transaction Reports (STRs) — where there are reasonable grounds to suspect a transaction is related to money laundering or terrorist financing, an STR must be filed regardless of amount. Cryptomus’s $176.9M penalty was driven largely by failure to file STRs.
Terrorist Property Reports (TPRs) — any property in your possession or control that you know or suspect is owned by a listed person or entity must be reported immediately.
Travel Rule
For virtual currency transfers of CAD $1,000 or more, the sending MSB must collect and transmit beneficiary information to the receiving institution. Canada’s $1,000 threshold is lower than many other jurisdictions, making non-compliance an easy audit target for FINTRAC examiners.
KYC and Customer Due Diligence
MSBs must verify customer identity before establishing a business relationship or conducting transactions above prescribed thresholds. This includes beneficial ownership verification and ongoing monitoring of business relationships for unusual activity.
AML/CTF Compliance Program
Every MSB must maintain a documented compliance program that includes: appointment of a designated compliance officer, a documented risk assessment, written policies and procedures, a staff training program, and an independent effectiveness review every two years. For a detailed breakdown, see our guide on what a compliance program must contain.
Record-Keeping
All records must be retained for a minimum of five years and made available to FINTRAC on request. This includes transaction records, customer identification records, and compliance documentation.
Registration Renewal
MSB registration must be renewed every two years. Material changes to the business — including changes to beneficial ownership, directors, or business activities — must be reported to FINTRAC within 30 days.
Our ready-made MSBs come with a full compliance program framework — policies, procedures, risk assessment templates, and AML documentation ready for customisation to your specific business. For ongoing support, see our compliance consulting and AML support services.
CARF Reporting: Canada’s New Crypto Tax Framework (2026)
As if AML compliance weren’t enough, 2026 introduces a second compliance layer for virtual currency MSBs: the Crypto-Asset Reporting Framework (CARF).
CARF is an OECD-developed framework for the automatic exchange of tax information related to crypto-asset transactions. Canada adopted CARF with an effective date of January 1, 2026, with the first reports due to the CRA in 2027 covering the 2026 calendar year.
Who It Applies To
CARF applies to Reporting Crypto-Asset Service Providers (RCASPs) — a category that includes exchanges, OTC desks, custodial wallet services, crypto ATM operators, and any business that facilitates the exchange or transfer of crypto assets on behalf of customers. If you operate a virtual currency MSB, you are almost certainly a RCASP.
What Must Be Reported
RCASPs must collect and report to the CRA:
- The annual aggregate value of crypto-to-fiat exchanges per customer
- The annual aggregate value of crypto-to-crypto exchanges per customer
- The annual aggregate value of crypto asset transfers per customer
- Customer identification data: full name, address, date of birth, and tax identification number (TIN)
Retail payment transactions are only reportable if they exceed USD $50,000 in aggregate annually.
What This Means for VC MSB Operators
CARF adds a tax compliance layer on top of your existing AML compliance obligations. Your systems must now capture and retain additional data points, your onboarding processes must collect TINs, and you must prepare to file annual CARF reports beginning in 2027. This is a meaningful operational burden, especially for smaller operators.
For context on how CARF fits into the broader 2026 regulatory landscape — including RPAA enforcement and the evolving supervisory framework — see our RPAA 2026 update.
5 Mistakes That Get Virtual Currency MSBs Shut Down
Based on the 2026 enforcement data and FINTRAC’s published compliance deficiency reports, these are the most common and most costly mistakes:
1. Operating without registration. This includes foreign businesses serving Canadian customers without FMSB registration — the exact violation that cost KuCoin CAD $19.6 million. If you serve Canadian customers, you need to be registered. Period.
2. Registering for virtual currency only. Many operators register for a single permission category, locking themselves out of adjacent revenue opportunities. A ready-made MSB from our inventory comes with all six permission categories active — foreign exchange, money transfer, virtual currency dealing, payment services, crowdfunding, and money orders — giving you maximum operational flexibility from day one.
3. Neglecting the compliance program. Registration without a live, operational compliance program is a revocation trigger. FINTRAC doesn’t just check that you registered — they examine whether your policies, procedures, training, and effectiveness reviews are current and functional. See our AML compliance guide for what this entails.
4. Missing LVCTR filing deadlines. Cryptomus was penalised $176.9M in part for systematically failing to file required reports. LVCTRs must be filed within 15 calendar days of the transaction. STRs must be filed as soon as practicable after forming suspicion. Late filing — or non-filing — is one of FINTRAC’s most reliable grounds for enforcement action.
5. Ignoring the travel rule. Canada’s CAD $1,000 threshold for the virtual currency travel rule is lower than many other jurisdictions. If your systems aren’t configured to collect and transmit beneficiary information for VC transfers at this threshold, you have a compliance gap that FINTRAC examiners will find.
For a broader look at common pitfalls in the MSB acquisition process, see our MSB requirements guide.
The Fastest Way to Get a Virtual Currency MSB in Canada
You have two options for getting a virtual currency MSB in Canada:
Option 1: Register From Scratch
Apply directly to FINTRAC, submit all required documentation, designate a compliance officer, prepare your AML program, and wait. The typical FINTRAC registration process takes 3–4 months or longer from application to approval — and there is no guarantee of approval. FINTRAC has been increasingly selective, and the 86 revocations in Q1 2026 show they are not hesitant to remove registrations that don’t meet their standards.
Option 2: Buy a Ready-Made MSB
A ready-made (shelf) MSB is a Canadian-incorporated company that is already registered with FINTRAC and has all six permission categories active. Ownership transfer can be completed in as little as two weeks, giving you:
- Active FINTRAC registration — no application queue, no waiting period
- All six permission categories — virtual currency dealing, foreign exchange, money transfer, payment services, crowdfunding, and money orders
- Compliance program framework — AML policies, procedures, and documentation ready for customisation
- Clean registration history — fully verified before sale
For businesses that also need Bank of Canada PSP status under the Retail Payment Activities Act, we offer ready-made MSBs with RPAA registration — the ultimate package for full regulatory coverage. See our RPAA + MSB dual registration guide for why this combination matters.
Ready to move fast? Contact us to see available inventory:
- WhatsApp / Telegram: Direct messaging available
- Email: Contact us
- Phone: Available on our contact page
- Book a consultation: Schedule a call to discuss your specific needs
Frequently Asked Questions About Virtual Currency MSBs in Canada
Do I need an MSB to operate a crypto exchange in Canada?
Yes. Any business that buys, sells, exchanges, or transfers virtual currency on behalf of customers must register as an MSB with FINTRAC under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. Canada does not issue a standalone crypto license — MSB registration with the virtual currency dealing permission is the required path. See our guide on crypto licensing in Canada for more detail.
What is the penalty for operating a crypto business without MSB registration?
FINTRAC can impose administrative monetary penalties of up to $500,000 per violation for individuals and up to $1 million per violation for entities. Criminal penalties under the PCMLTFA include up to 5 years imprisonment and up to $2 million in fines. In practice, penalties can accumulate to massive totals — Cryptomus faced CAD $176.9M for 2,593 violations, and KuCoin’s operator was fined CAD $19.6M.
How long does it take to register a virtual currency MSB?
Traditional FINTRAC registration takes approximately 3–4 months from application to approval. A ready-made MSB with virtual currency dealing permission already active can be transferred in as little as 2 weeks.
Does CARF affect my virtual currency MSB?
Yes. Starting January 1, 2026, all crypto-asset service providers in Canada — including MSBs dealing in virtual currencies — must collect and report customer transaction data to the CRA under the Crypto-Asset Reporting Framework. The first CARF reports are due in 2027, covering the 2026 calendar year.
Can a foreign company get a virtual currency MSB in Canada?
Yes. Foreign companies serving Canadian customers can register as a Foreign MSB (FMSB) with FINTRAC, or purchase a Canadian-incorporated ready-made MSB for a stronger domestic market presence. See our foreign MSB guide for the full comparison.
What reports must a virtual currency MSB file with FINTRAC?
Three main report types: Large Virtual Currency Transaction Reports (LVCTRs) for transactions of CAD $10,000 or more, Suspicious Transaction Reports (STRs) for any transaction with reasonable grounds to suspect money laundering or terrorist financing, and Terrorist Property Reports (TPRs) for property owned or controlled by listed persons or entities.
Don’t Wait Until Enforcement Catches Up
The 2026 enforcement landscape is not slowing down. With 86 MSB revocations in Q1 alone, record-breaking penalties, a ministerial enforcement directive, and CARF reporting obligations now live, the cost of non-compliance has never been higher — and the cost of delay is measured in months of lost market access.
A ready-made MSB with all permissions gets you operational now. Add RPAA registration for complete regulatory coverage. Our team provides compliance consulting and ongoing AML support to keep you compliant long after the purchase.
Get started today:
- WhatsApp / Telegram: Direct messaging available
- Email: Contact us
- Phone: Available on our contact page
- Book a consultation: Schedule a call to discuss your specific needs
