Canada’s Stablecoin Act Is Law. What Issuers and Fintechs Need to Build Now

For years, a fiat-backed stablecoin in Canada lived in a gray zone. Provincial securities regulators had a say over the trading platforms, FINTRAC had a say over money movement, and nobody had a clear say over the issuer itself. That changed on March 26, 2026, when Bill C-15 received Royal Assent and the federal Stablecoin Act became law.

The details arrived more recently. On October 24, 2026, the Department of Finance published the draft Stablecoin Regulations in the Canada Gazette, Part I. Comments close on December 23, 2026, and the government plans to bring the framework into force in autumn 2027. South of the border, the US GENIUS Act takes effect on January 18, 2027.

That means two national stablecoin regimes go live within roughly nine months of each other, and most of what they demand is not paperwork. It is software: reserve reconciliation, redemption pipelines, smart contract controls, reporting systems and audit trails. This guide covers what Canada’s Stablecoin Act requires and what engineering teams should start building now.

What Canada’s Stablecoin Act Requires

Who Has To Register

The Act applies to issuers of fiat-backed stablecoins that are not prudentially regulated financial institutions. Banks, credit unions, and trust, loan and insurance companies sit outside it. Everyone else whose coin is made available to people in Canada must register with the Bank of Canada, whether the issuer is Canadian or foreign. A US dollar stablecoin sold to Canadians is treated the same as a Canadian dollar one.

“Made available” includes indirect distribution. An issuer that never markets in Canada can still be in scope if its coin reaches Canadians through an exchange or wallet. Closed-loop tokens that work only inside a merchant network and cannot be redeemed for cash are excluded, much like gift cards.

The Core Obligations

It Does Not Stop At The Issuer

Issuers will also register with FINTRAC as money services businesses dealing in virtual currency, which brings client identification, large virtual currency transaction reports at C$10,000 and above, suspicious transaction reporting and the travel rule. Separately, the draft regulations amend the Retail Payment Activities Act rules so that custodial wallets and crypto payment processors handling a registered issuer’s coin come under Bank of Canada payment oversight. The Department of Finance expects about five issuers and roughly 30 payment service providers to be newly in scope.

How Canada Lines Up With The US GENIUS Act

Many teams building for Canadian users will also want US distribution, so it helps to design once for both regimes. The overlap is large, but a few differences matter for architecture.

Two points stand out. First, the US freeze and burn requirement is a hard technical condition, so a coin designed for both markets needs those controls in its contracts from day one. Second, the Canadian custodian rule means reserves backing coins held by Canadians must sit with a Canadian institution, which affects treasury design for any US issuer entering Canada. In August 2026, the US Treasury also proposed rules defining what it means to issue a stablecoin in the United States or offer one to a US person, and that definition will decide which foreign issuers need a license.

What Issuers And Fintechs Need To Build Now

Autumn 2027 sounds distant, but existing issuers get only 30 days after the coming-into-force date to file a complete application. The systems behind that application need to be running, tested and auditable before then. Here is where engineering effort goes.

1. A Distribution Map And Residency Tracking

Under the draft rules, an outstanding stablecoin is one bought by a person who normally resides in Canada and not yet redeemed. That means issuance and sales records need to capture residency at the point of purchase, and the monthly report must name every exchange, wallet and peer-to-peer venue through which Canadians can get the coin. Build a distribution registry that combines off-chain partner data with on-chain flow analysis, so you can show regulators exactly where your coin reaches Canadians.

2. Daily Reserve Reconciliation

Reserves must cover outstanding coins at the end of every day, not just at month end. That calls for an automated engine that pulls total supply across every chain you issue on, pulls custodian balances and asset valuations, checks each holding against the eligible-asset list, and flags any gap before close. If you issue on several networks, cross-chain supply aggregation and bridge accounting become part of your compliance surface, not just your product.

3. A Redemption Pipeline With A Clock On It

Three business days, any amount, no more than 1% in fees. Redemption needs to be a tracked workflow with SLA timers, a statutory holiday calendar, fee cap enforcement in code, and a notice process that publishes fee changes at least seven days ahead. The rules allow daily redemption limits only when market liquidity for reserve assets genuinely prevents an issuer from meeting requests, so that logic should be documented, tested and logged.

4. Yield Removed From Contracts And Integrations

The ban covers interest paid directly and income shared through partners. Audit token contracts for rebasing or holder-reward mechanics, and audit integrations with exchanges, lending protocols and wallets for revenue-share arrangements tied to balances. Rewards linked to using the coin in a transaction can stay, so loyalty and payment incentives may need to be redesigned around activity rather than holdings.

5. Smart Contract Controls Built For Audit

Mint and burn functions need clear role separation, multisig or MPC key management, and an upgrade path governed by documented policy. Teams that plan to serve US users should add freeze, blocklist and burn-and-reissue capabilities that satisfy the GENIUS Act. Independent smart contract audits and formal change management also feed directly into the risk management and data security policies the Bank of Canada will review.

6. Reporting, Complaints And Records Infrastructure

The monthly report needs clean, reconciled data that an accountant can sign an opinion on, so build data lineage from on-chain events through to the report rather than assembling spreadsheets at month end. Add a complaints system with 7-day and 30-day timers, a five-year record retention layer, and a process for producing bilingual policy summaries whenever a policy changes.

7. AML And Compliance Tooling

FINTRAC registration means KYC onboarding, travel rule messaging, large virtual currency transaction reports and suspicious transaction reporting, all integrated with issuance and redemption flows. Teams serving the US will add Bank Secrecy Act programs and sanctions screening. Designing a single compliance data model for both regimes saves a second build later.

8. Recovery, Resolution And Wind-Down

The Act requires a recovery and resolution policy, and existing issuers must file an orderly wind-down plan with their application. Treat this like disaster recovery engineering: how holders get paid out, how contracts are paused, how reserves are liquidated, and how all of it is tested.

Not An Issuer? You May Still Be In Scope

Most Canadian fintechs will not issue their own stablecoin, but many will touch one. Custodial wallets and crypto payment processors handling a registered issuer’s coin will fall under Bank of Canada oversight through the Retail Payment Activities Act, with its own registration, risk management, incident response and safeguarding requirements. Exchanges and transfer providers serving Canadians already need FINTRAC registration. If your product holds, moves or settles stablecoins for users, now is the time to map which regime applies to each payment function you perform.

Key Dates

Conclusion

The fastest way to scope the work is a gap assessment against both regimes: map current contracts, reserve operations, redemption flows and reporting against the requirements above, then sequence the build so the highest-risk gaps (daily reserve coverage, redemption timing and yield mechanics) close first.

For most issuers and fintechs, the build will mix in-house work with outside engineering help. When choosing a partner, look for a team that has shipped production smart contracts and tokenization platforms, understands reserve and payment operations, and can document its controls to the standard a Bank of Canada or US federal examiner will expect. SOC 2 attestation, senior engineers in North American time zones and experience with both blockchain and enterprise systems are good signals that a team can carry a stablecoin product through both regimes.

This article is general information about the Stablecoin Act and the draft Stablecoin Regulations as published in October 2026. The regulations are a draft and may change after consultation. It is not legal advice.

Sources

• Canada Gazette, Part I: Stablecoin Regulations (October 24, 2026)
• Department of Finance Canada: Canada’s stablecoin framework
• Bank of Canada: Stablecoins
• Parliament of Canada: Bill C-15
• FINTRAC: Changes to legislation and regulations
• US Treasury: GENIUS Act Notice of Proposed Rulemaking