CSA Staff Notice 21-327: Crypto Asset Trading Guidance

The notice focuses on the regulatory perimeter for crypto asset trading platforms. A platform is subject to securities legislation when it trades a crypto asset that is itself a security or derivative. The CSA also states that legislation may apply when the underlying asset is commonly treated as a commodity, because the user’s contractual right or claim to that asset may itself be a derivative and, in some jurisdictions, a security.

This distinction directs attention away from the label attached to the crypto asset and toward the legal and economic relationship between the platform and its user. A platform that records a customer’s purchase but continues to hold and control the asset may have created a crypto-related contract rather than completed a spot transfer of the asset.

The notice says a platform would not generally be subject to securities legislation when two conditions are met: the underlying crypto asset is not itself a security or derivative, and the purchase, sale or delivery contract both requires and results in immediate delivery to the user according to the platform’s normal commercial practice.

There is no bright-line test. CSA staff considers the written and unwritten terms, the parties’ intention when entering the transaction, surrounding facts and the platform’s usual conduct. The analysis emphasizes substance over form, so contractual wording that promises immediate delivery may not be sufficient when the platform’s actual practice is to retain the asset.

Immediate delivery generally requires the platform to transfer ownership, possession and control so the user can use or dispose of the crypto asset without further involvement from, or reliance on, the platform or its affiliates. The platform and its affiliates should not retain a security interest or other legal right in the asset. Following delivery, the user also should not remain exposed to the platform’s insolvency, fraud, performance or proficiency risk.

The notice’s non-application example involves bitcoin purchased without margin or leverage and transferred immediately to a wallet under the user’s sole control, with the transfer reflected on the Bitcoin blockchain. The platform retains no ownership, possession or control, and the transaction cannot be settled by an alternative arrangement.

By contrast, a platform account entry is not treated as delivery when the user must later request a transfer to a user-controlled wallet. Until that transfer occurs, the user remains dependent on the platform and exposed to platform-level risks. The CSA therefore states that a mere internal ledger or book entry does not constitute delivery.

The notice also addresses cross-border reach. Platforms operating outside Canada but serving Canadian users are told to consider Canadian securities legislation. CSA members stated that they intended to pursue or continue enforcement action against platforms that do not comply where the legislation applies.

CSA Staff Notice 21-327 did not create a standalone crypto licensing statute. A Québec financial markets tribunal later described CSA notices as not legally binding, while recognizing that they guide the interpretation and application of securities legislation. Joint CSA/IIROC Staff Notice 21-329, published in 2021, built on the 21-327 perimeter analysis by outlining registration and regulatory approaches for crypto asset trading platforms.

As of June 25, 2026, the notice remains categorized as current by the BCSC and continues to be cited in Canadian platform decisions. For taxonomy purposes, this profile maps that current status to In force, while preserving the important qualification that the document is interpretive agency guidance with no stated effective date.