CSA Crypto Trading Platform Registration: What Business Address Goes on a PRU Filing

Key takeaways

• The Canadian Securities Administrators (CSA) is not a single regulator with one office address you can copy onto a filing. It is the coordinating body for the thirteen provincial and territorial securities regulators — including the Ontario Securities Commission (OSC) in Toronto, the British Columbia Securities Commission (BCSC) in Vancouver, and the Autorité des marchés financiers (AMF) in Québec. Your filing is made with the regulator (or regulators) in the province(s) where you do business, not with "CSA the company."
• The business address that goes on a crypto trading platform's application is your own registered business location in Canada — the place the platform actually operates from. Regulator head office addresses on the CSA Authorized Crypto Asset Trading Platforms page (such as 20 Queen Street West for OSC, 701 West Georgia Street for BCSC) are the regulators' addresses, not addresses you put on your own filing.
• CSA registration (securities side) and FINTRAC MSB registration (anti-money-laundering side) are two separate registrations with two separate address fields. Both can apply to a crypto platform at the same time. The CSA filing covers securities-law registration as a dealer; FINTRAC MSB registration covers PCMLTFA obligations for dealing in virtual currency. Different statutes, different filings; the same Canadian business address can satisfy both fields if it is chosen consistently from the start.
• The address you choose flows through five downstream records: incorporation, CRA Business Number, GST/HST, T2 corporation tax, and the crypto-transactions reporting tail under the CRA's published guide for crypto-asset users and tax professionals. Picking it once at the top — a stable Canadian commercial address in proper Canada Post Unit/# format — saves you from reconciling five different records later.

Scope note. This article is about your business being the entity that files with the CSA (and likely with FINTRAC as well) — the registrant, the applicant for Pre-Registration Undertaking (PRU) or CIRO Dealer Member status, the party whose own address goes on the form. It is not investment, legal, or tax advice on whether to register, and it does not substitute for the published filing requirements at securities-administrators.ca and the relevant principal regulator's site. As of this article's publication date, the CSA's crypto platform framework is set out in CSA Staff Notice 21-332 (2023) and subsequent staff notices, and the federal context is summarised at canada.ca on crypto assets — verify the current notice and version directly on the official pages before filing.

What the CSA actually is — and what it isn't

The Canadian Securities Administrators is not itself a federal regulator. Securities regulation in Canada is provincial and territorial, and the CSA is the coordinating umbrella for the thirteen members: every province and territory has its own securities commission, and they harmonise rules and notices through the CSA. The CSA Secretariat is in Montréal; the OSC, the largest provincial securities regulator by registered firm count, is in Toronto; the BCSC is in Vancouver; the AMF, which regulates securities in Québec, is in Montréal and Québec City. There is no single CSA office that grants registration to a crypto trading platform across Canada — a platform registers with the principal regulator in the province where it is based, and that registration is then recognised by the other CSA members for the activity it covers.

This is the source of a common misconception in careless summaries: that there is "a CSA address" you can put on a filing the way you would put a federal agency's address on a federal form. There isn't. The address on your filing is your business's own registered address. The regulator's address — for example the OSC's Toronto head office at 20 Queen Street West, or the BCSC's Vancouver head office at 701 West Georgia Street — is the regulator's address, not yours.

The CSA crypto framework, in plain language

The CSA's policy framework for crypto asset trading platforms was set out in CSA Staff Notice 21-327 in early 2020 and then significantly expanded through CSA Staff Notice 21-329 and subsequent notices culminating in the Pre-Registration Undertaking (PRU) regime announced in 2022 and operationalised through CSA Staff Notice 21-332 in 2023. The shape of it, as of this article's publication, is:

1. A crypto asset trading platform that operates in Canada or solicits Canadian clients is generally treated as carrying on securities or derivatives activity and is required to register, or to file a Pre-Registration Undertaking on the path to full registration.
2. Full registration is as an investment dealer and as a Dealer Member of the Canadian Investment Regulatory Organization (CIRO) — the self-regulatory organisation formed in 2023 from the merger of the Investment Industry Regulatory Organization of Canada (IIROC) and the Mutual Fund Dealers Association (MFDA).
3. The CSA maintains a public list of platforms that have either completed registration or filed a Pre-Registration Undertaking. The CSA also publishes warnings about platforms that are not authorised to operate in Canada.

The exact requirements, transition timelines, and notice versions are revised periodically. Treat the policy summary above as background and confirm the live version on securities-administrators.ca before filing — staff notices are the source of truth, and they are revised.

The address required on the application — and why

The PRU filing and the CIRO Dealer Member application both ask for the registered business address of the applicant. That field is the applicant's own address — the place the business genuinely operates from in Canada — and it has the same character as the address on an incorporation filing or a CRA Business Number record: a real Canadian commercial location, not a PO box, and in proper Canada Post format (Unit/# notation where applicable).

Three address-shaped fields tend to appear across the securities-side filings and the entities behind them:

Two practical consequences follow from this. First, the address you put on the CSA-side filing should be the same address you used on your incorporation and on your CRA Business Number record. Reconciling three addresses later, after the principal regulator's review has started, is the kind of operational friction that reads as instability in a registration where stability is a virtue. Second, the mailing latency on that address matters. The principal regulator and CIRO both correspond in writing with applicants and registrants, and response windows are real — a letter that sits unopened at an address you don't monitor is a missed deadline, not just a delayed envelope.

CSA (securities) vs FINTRAC (AML) — two registrations, same address possible

A crypto trading platform that takes Canadian clients typically attracts two federal-or-coordinated registrations, not one:

• CSA / CIRO registration under provincial securities law (and the harmonised CSA framework) — dealer registration, Dealer Member status, and the PRU step on the way there.
• FINTRAC MSB registration under the federal Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), because dealing in virtual currency is a listed money services business activity.

These are separate filings with separate forms, separate timelines, and separate compliance programs. They are not interchangeable, and being registered with one does not satisfy the other. But the business address can — and should — be the same on both, because there is no benefit to listing two different "primary places of business" with two federal-or-coordinated bodies for the same entity. The AML side of the address discipline is covered in detail in FINTRAC MSB Registration: The Business Address Rule, the No-PO-Box Test, and the 30-Day Notice, and the address logic carries straight across to the CSA filing: real Canadian commercial location, no PO box as the primary, same-day mail handling, and consistency across every downstream record.

Where the regulator's head office address fits in (and where it doesn't)

The CSA's public-facing pages and the secondary summaries that quote them sometimes prominently display the OSC and BCSC head office addresses — 20 Queen Street West in Toronto for the OSC, 701 West Georgia Street in Vancouver for the BCSC, plus the AMF's offices for Québec. These addresses are useful for two narrow purposes:

1. Service of process and correspondence to the regulator — if you need to write to the principal regulator, that is where you write to.
2. Verifying a platform — the CSA's "Need to Verify a Platform?" resources and the OSC/BCSC investor-warning pages tell members of the public where to check whether a platform is authorised or has been the subject of a warning.

These regulator addresses are not addresses that go on your own application. They are the regulator's mailing addresses, not the applicant's. A correctly filed PRU has the regulator on one side of the envelope and the platform's own registered Canadian business address on the other side — never the other way around.

The five-tier address chain behind the filing

Once the platform's registered business address is set, it needs to flow through every record the regulator will eventually cross-check or that you will need to keep in good standing during operation:

1. Canada Post Unit/# format — the address itself, written the way Canada Post recognises it, so that mail from CIRO, the principal regulator, FINTRAC, and the CRA does not bounce or sit at a misformatted address.
2. Incorporation (federal CBCA or provincial) — the registered office on the incorporation matches the address on the CSA filing. For the federal-vs-Ontario-vs-BC choice that sits behind that, see Federal vs Ontario vs BC Incorporation: which one is actually right for your Canadian business?.
3. CRA Business Number — the program-account-level record (RC, RT, RP, RM) carries the same address, so a later GST/HST registration or T2 filing does not surface a mismatch.
4. GST/HST registration — required at the standard turnover threshold and earlier in many crypto-platform business models; same address again.
5. T2 corporation tax and crypto-transactions reporting — annual T2 and the reporting tail for crypto transactions, including the positions described in the CRA Guide for crypto-asset users and tax professionals and the broader CRA guidance on crypto asset transactions at canada.ca. The CRA does not run the CSA filing, but its records are pulled into the bigger picture, and the cleanest version of that picture is one address everywhere.

A platform that picks one Canadian commercial address at the top of this chain, in proper Unit/# format, has one address to maintain across all five records. A platform that uses a residential address at one tier and a different "office" at another tier has five records to reconcile every time it moves desks.

Authorised, undertaking, and barred — what the CSA actually publishes

The CSA publishes three different lists that matter to anyone filing a PRU or running a registered crypto platform:

• The CSA list of authorised crypto asset trading platforms — platforms that have completed registration as an investment dealer and CIRO Dealer Member, or that are currently operating under a Pre-Registration Undertaking with the principal regulator.
• Investor warnings and barred platforms — platforms the CSA or member regulators have warned the public about, including platforms operating without authorisation. These are published by the principal regulator (for example the OSC's investor warnings page or the BCSC's) and are also surfaced via the CSA's central resources for verifying a platform.
• Buying and selling crypto assets — general investor-education resources that point users back to the verification list before they put money on any platform.

For a platform that intends to operate legally in Canada, the first list is the destination and the second list is what you do not want to end up on. The address on your filing has no direct effect on either list — but a misformatted address, a PO box used as a primary location, or an address that contradicts other federal records is the kind of administrative signal that complicates a registration review that already has plenty of substantive review work ahead of it.

Where home / coworking / a virtual mailbox each fit

The address question for a crypto platform looks like a regulator question, but at the surface it is the same question any operating business faces in Canada — with three patterns that founders tend to default to:

• A home address. It is real, it is in Canada, and it usually meets the literal "physical location" test. It also goes into a registration that intersects with public-facing regulator records, AML beneficial-ownership records, and (separately) the CRA Business Number record. Many founders are comfortable with that during incorporation and become much less comfortable once a securities filing and an MSB registration are both running through the same residence.
• A coworking address. It is commercial, but it usually shares a single suite across hundreds of members, and operators commonly cap mail-receiving service or end it when the membership ends. The address can move from one location to another within the same provider's network, which is convenient until it triggers an address-change notice on filings where stable addresses are a virtue.
• A commercial virtual business address — a real downtown Toronto or Vancouver property, in proper Canada Post Unit/# format, with same-day mail scanning to a dashboard. It is Canadian-owned, it sits in the two cities most CSA filings end up keyed to (OSC and BCSC principal regulators), and it gives you the CRA-ready posture that downstream T2 and GST/HST filings rely on. For a platform that has chosen Toronto or Vancouver as its principal regulator's jurisdiction, that is the address pattern that holds up across the whole five-tier chain above.

The Auteur address pattern is built around exactly that profile: Canadian-owned, Toronto and Vancouver only, in proper Canada Post Unit/# format, with mail scanned the same business day so a regulator's letter is on the dashboard before the close of business. None of that changes the substantive review the principal regulator and CIRO will do on your application — the registration is theirs, not ours — but it removes the address-shaped friction from a process that has plenty of other substantive work in it.

Updating the address after registration

The CSA framework, like FINTRAC, treats post-registration changes to the registered address as a notice obligation rather than an optional update. The exact form and timeline depend on the principal regulator and on whether you are at the PRU stage or fully registered as a Dealer Member, but the practical operating posture is the same as on the AML side: a stable address does not start a notice clock every time the team moves desks, and a stable address that does not change when your operations move is the cleaner posture. Confirm the current notice obligation directly with your principal regulator before assuming a generic timeline applies.

FAQ

Is crypto trading legal in Canada, and does that affect what address I put on a filing?

Yes — crypto asset trading is legal in Canada when conducted through a platform that is registered with the CSA member regulator(s) and (where applicable) registered as a CIRO Dealer Member, or that is operating under a Pre-Registration Undertaking on the path to registration. The address question is downstream of that: the legality question is about whether you are authorised to operate, and the address question is about which Canadian business address you put on the application. The address does not make an unauthorised operation legal, and a legal operation does not get a pass on the address rules.

What is the difference between a Pre-Registration Undertaking (PRU) and full CIRO Dealer Member registration?

The Pre-Registration Undertaking (PRU) is a transitional commitment a platform makes to its principal regulator on the path to full registration as an investment dealer and CIRO Dealer Member. The PRU sets out terms and conditions the platform agrees to operate under during the registration process. Full Dealer Member registration is the end state. Both stages require a Canadian business address on the filing — the platform's own address, not the regulator's. Confirm the live process on securities-administrators.ca, as staff notices are revised periodically.

Do I need separate registrations with the CSA and with FINTRAC, and can the address be the same?

A crypto trading platform serving Canadian clients typically needs both — a CSA / CIRO registration on the securities side and a FINTRAC MSB registration on the AML side — because they are separate statutory regimes (provincial securities law and the federal PCMLTFA). They are not interchangeable. The business address, however, should be the same on both: there is no benefit to listing two different primary places of business for the same entity, and consistency across the federal-or-coordinated records is what regulators expect. The AML-side address requirements are covered in FINTRAC MSB Registration: The Business Address Rule, the No-PO-Box Test, and the 30-Day Notice.

Can I just put the OSC or BCSC address on my application?

No. The OSC's address (20 Queen Street West, Toronto) and the BCSC's address (701 West Georgia Street, Vancouver) are the regulators' own head office addresses, used for service of process and correspondence sent to the regulator. Your application goes the other way — it carries your own registered business address in Canada. The regulator's address belongs on the envelope flap when you mail something to them, not in the "registered address" field on your filing.

Can I use a "Crypto LLC" set up in the US for my Canadian operation?

A US LLC is a US entity. If your platform is operating in Canada or soliciting Canadian clients, you are generally going to need a Canadian-registered entity for the securities-side filing, and the address on that filing is the Canadian entity's address — not the US LLC's mailing address in a US state. Treating a US LLC as if it can stand in for a Canadian registered entity in a CSA filing is one of the easier ways to start the process on the wrong foot. The Canadian entity, its registered office, and a Canadian commercial business address are the foundation.

Where do I check whether a platform is on the authorised list?

The CSA maintains central resources for verifying a platform, and each principal regulator (OSC, BCSC, AMF, and the other CSA members) publishes its own authorised-platform and investor-warning information. Start from securities-administrators.ca and follow the verification resources from there.

My platform is based outside Canada — can I file from my overseas head office address?

A platform that operates in Canada or solicits Canadian clients is generally expected to register with the principal regulator in the relevant Canadian province(s) and to have a Canadian operating posture — including a Canadian business address on the filing. The FINTRAC side has an explicit Foreign MSB pathway with a named Canadian principal place of business or representative for service; the CSA side has its own framework that you need to confirm with the principal regulator. Treat an overseas head office address as insufficient on its own and confirm the live requirements before filing.

Bottom line

A CSA crypto trading platform filing — whether it is a Pre-Registration Undertaking or a full CIRO Dealer Member application — runs on a single, simple address premise: the business address on the filing is your business's registered Canadian address, not the principal regulator's head office. Real Canadian commercial location, proper Canada Post Unit/# format, no PO box as the primary, same-day mail handling so a regulator's letter does not sit unopened past a response window, and the same address flowing through incorporation, the CRA Business Number, GST/HST, T2, and the crypto-transactions reporting tail under CRA's published guidance.

A commercial Toronto or Vancouver address in proper Canada Post format does not register your platform — only the CSA member regulator and CIRO can do that — and it does not change the substantive review the principal regulator will run. What it does is remove the address-shaped friction from a registration that has plenty of substantive work ahead of it: it sits cleanly in the OSC's or BCSC's jurisdiction, it carries the Canadian-owned profile the federal and provincial records expect, and it is one address you can maintain across all five downstream tiers without reconciling later.

If your CSA filing will route through Toronto or Vancouver as the principal regulator's jurisdiction, reserve an Auteur address — both cities, proper Canada Post Unit/# format, scanned same business day, stable enough that you are not starting a fresh address-change notice every time the operation moves. If the AML side of the same business sits next to the securities side, the parallel address rule is the FINTRAC MSB registration address rule. And if the founders are filing from outside Canada with a non-resident corporate structure, the entity and Canadian-address mechanics that sit behind the bank account — and behind the CSA filing — are in How to open a Canadian business bank account as a non-resident.