Karsten Wenzlaff, Advisor
August 26th, 2025
Regulation | December 15, 2025

AI generated image
On December 11, 2025, the Canadian Securities Administrators (CSA) and the Canadian Investment Regulatory Organization (CIRO) released new guidance for finfluencers, investment firms, and issuers on how securities laws apply to online investing activity (Download CSA and CIRO Staff Notice 31-369 13 page PDF). Social media now plays a real role in how Canadians make investment decisions, and regulators expect existing securities law to apply when online influence impacts behaviour. The guidance clarifies when creators must register, how disclosure must work in short-form content, what counts as advice or trading activity, and where firms and issuers remain responsible when they work with finfluencers. Keep reading to learn about the practical implications, including some use case examples covered in the report.
Regulators are responding to what they see in the market today. Social media is no longer a side channel for financial education. It is where many investors first encounter investment ideas, products, and promotions, often without realizing when education turns into influence.
As NCFA previously reported, based on the CSA's 2024 Investor Index, 53% of Canadian investors now use social media as a source of investment information. Among younger investors aged 18 to 24, reliance on social platforms is even higher. Those investors face materially higher risk.
The OSC also tests causation, not just correlation. In a controlled experiment involving 1,465 Canadians managing a simulated $10,000 portfolio, 38% of participants exposed to finfluencer style promotional posts purchased the promoted asset, compared with 8% in the control group. Exposure alone drives different investment choices, even without personalized advice.
Canadian securities regulators examined 87 finfluencers and 9 issuers and repeatedly found undisclosed compensation, promotional framing that functions as recommendations, and content drifting into advising or trading activity without registration.
The CSA and CIRO aren't introducing new rules. They are making it clear how existing securities law already applies when online content influences investment decisions. There's a clear message that Finfluencers should take seriously:
Labels and intent matter less than impact. What counts is how a reasonable investor experiences the content, not how the creator describes it.
Finfluencers need to register when they provide investment advice or help facilitate securities trading for a business purpose, unless a specific exemption applies.
A business purpose doesn't require a formal firm, a full-time role, or a registered brand. Regulators look at how the activity actually operates. Repetition, promotion, compensation, solicitation, and continuity over time all matter. Paid courses, subscription communities, affiliate arrangements, and recurring sponsored content often meet this threshold.
The guidance is explicit that finfluencers cannot avoid registration by saying their content is not advice. Disclaimers do not change how regulators assess the activity.
Investment advice includes opinions about the merits of investing in a specific business or security, as well as recommendations to buy or sell. The guidance notes that even promotional language or emojis that imply opportunity can be interpreted as recommendations.
Trading activity is defined broadly. It includes not only executing trades, but any act done in furtherance of a trade. The guidance specifically points to copycat trading enablement, such as linking followers who pay a subscription fee to replicate trades in a self-directed account. These lines are crossed more often than many creators realize.
Some finfluencers rely on the general advice exemption when providing broad and non-personalized commentary, however the regulator's guidance makes clear that this exemption is narrow and conditional.
If a finfluencer relies on it, they must clearly disclose any financial or other interest in the securities discussed. Financial or other interest is interpreted broadly and includes indirect incentives, compensation arrangements, and related party interests.
The exemption does not apply to trading activity. This distinction becomes critical when education is paired with transaction pathways.
Disclosure needs to be clear, prominent, and specific enough for an audience to understand the security involved, the incentive, who paid it, and who received it.
The guidance is direct about what fails. Statements like “I may have a financial interest” are not enough. Disclosure also fails when it is buried at the end of a video, hidden behind extra clicks, or written in a way viewers are unlikely to notice.
A simple acid test applies. If a viewer has to look for the disclosure, it likely does not meet expectations.
The example scenarios below highlight when creators drift into regulated activity without intending to. These aren't rare cases but common growth paths.
In one example, a creator starts with general investing education. That activity stays outside registration. When the creator adds buy and sell signals in a paid course, the activity becomes advising. When the creator begins answering personalized questions through comments and direct messages, charges fees, and scales tailored advice, registration becomes necessary or the activity needs to stop.
In a second example, a crypto-focused creator promotes a token without compensation. When that creator later joins an airdrop program tied to promotional tasks, the activity becomes compensated promotion. Disclosure obligations arise immediately and need to stay current. Linking to trading platforms and receiving payments from followers or platforms can also push the activity into trading facilitation.
In a third example, a creator promotes issuer securities for payment but hides the sponsorship because disclosure reduces engagement. Disclosure is buried behind “show more” links. Regulators treat this as a breach and move to enforcement. Not knowing the rules does not change the outcome.
Registered firms that work with finfluencers are expected to govern those relationships. That includes due diligence, written agreements, training, ongoing monitoring, and corrective action when content becomes misleading or non-compliant.
Order-execution-only dealers face added sensitivity. Because they cannot provide advice, regulators caution against indirectly enabling recommendations or registerable activity through referral arrangements, hosted content, outbound links, or copycat trading features.
For fintech platforms, this brings compliance into product design. Referral flows, creator landing pages, and trading enablement features all carry regulatory weight.
When issuers work with finfluencers, social media content counts as public disclosure. Issuers remain responsible for statements made on their behalf.
Regulators expect issuers to ensure content stays factual, balanced, consistent with filed disclosure, and clear about paid relationships. Issuers need to provide guidance and controls rather than leaving disclosure discipline to third parties.
Promotional shortcuts can surface later during diligence and capital raising.
Securities law applies regardless of whether content is created by a human, a digital avatar, or an AI system. Anyone deploying AI to generate investment related content remains responsible for that content as if they created it themselves.
For platforms experimenting with automated education or AI powered engagement, note that technology does not reduce accountability.
Finfluencer activity now sits firmly inside the regulatory perimeter. Data shows that influence impacts behaviour, and behaviour drives investment decisions. This new guidance gives founders, platforms, creators and issuers clarity. Teams that design content, monetization, referral flows, and product features with these expectations in mind can move faster with fewer surprises.
Teams that treat finfluencer activity as casual marketing often discover where the line sits only after they cross it. That is the practical message regulators are sending, and it is one the market needs to take seriously now.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Leave a Reply