Self-custodial wallet / non-custodial software in Canada
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Canada without local incorporation, subject to AML obligations and none licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations under FINTRAC for a non-custodial software publisher — the publisher never holds, controls, or has access to user funds, so it does not fall within the definition of a money services business (MSB) under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act.
- No client identification, record-keeping, or reporting obligations attach when no custody exists.
Key Restrictions
- The publisher must not hold, control, or have access to user private keys or funds — any custody function would trigger FINTRAC MSB registration and provincial securities dealer registration.
- If the software integrates fiat on-ramps/off-ramps or any trading functionality that the publisher controls, that may trigger VASP/MSB classification and risk securities dealer registration requirements.
- No geofencing requirement specific to self-custodial software publishing, but if the software offers any in-app swaps or aggregation services, CSA Staff Notice 21-327 may apply to those functions.
Key Risks
- Regulatory ambiguity: CSA and provincial securities regulators have taken aggressive enforcement positions against crypto platforms (e.g., Binance, KuCoin, Bybit), and could argue that publishing self-custodial wallet software that includes embedded DeFi features constitutes carrying on business as a platform.
- If the wallet integrates token swaps via third-party APIs and the publisher earns fees, this could be recharacterized as operating a crypto trading platform, triggering registration obligations under CSA Staff Notice 21-327.
- Enforcement precedent: Provincial regulators have ordered platforms to cease operations in Canada or pay substantial penalties where they failed to register — the boundary between 'software publisher' and 'platform operator' is not clearly delineated in guidance.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FINTRAC — AML/CFT, MSB registration, transaction reporting
Proceeds of Crime (Money Laundering) and Terrorist Financing Act (2000) — AML/CFT, MSB registration
VASP: FINTRAC MSB registration (2-4 weeks) + provincial Restricted Dealer registration via CSA (6-18 months). Foreign platforms serving Canadians must register or face enforcement. Binance exited Canada rather than comply.
CSA — Provincial securities regulation — crypto trading platform registration (Staff Notice 21-327)
CSA Staff Notice 21-327: Guidance on Securities Legislation for Crypto Asset Trading (via BCSC or CSA sites).
Ongoing Focus on Unregistered Platforms: Securities regulators continue to target platforms operating in Canada without registration. This often results in cease trading orders, financial penalties, and requirements for platforms to either register or exit the Canadian market.
Bybit: In March 2023, the OSC reached a settlement with Bybit, requiring the platform to pay $2,468,982 and provide an undertaking that it would not operate in Ontario without registration.
KuCoin: In June 2022, the OSC obtained orders against KuCoin (Mechbit Technology Ltd.) permanently banning it from participating in Ontario's capital markets and requiring it to pay an administrative penalty of $1,650,000 and $99,754 for costs.
Binance: Following a pattern of non-compliance, Binance entered into an undertaking with the OSC in December 2022 to cease all operations in Ontario. Later, in May 2023, the AMF imposed an administrative monetary penalty of $2.25 million on Binance for operating an unregistered platform and offered non-compliant derivatives in Quebec.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a pure self-custodial wallet publisher (no custody of keys or funds, no trading platform functions) is not classified as a VASP/MSB or securities dealer under Canadian law and faces no FINTRAC AML obligations, but any integration of controlled swap/trading features risks triggering provincial securities registration requirements with aggressive enforcement exposure.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?