The Canadian Securities Administrators (CSA) knows exactly what its capital-raising reforms produced. After it raised the ceilings on the exemption that lets already-listed companies raise money quickly without a full prospectus, companies raised almost $4 billion in the first year, eight times the pace under the old limits. A rule changed, the market responded, the regulator counted and reported the result.
Ask the same question about investor protection and the answer arrives in a different currency: alerts posted, websites taken down, Canadians reached.
That contrast runs through the CSA’s latest Year in Review. It is the most revealing thing in the document.
On the capital-formation side, the report measures outcomes. It describes what happened in the market after the rules changed, and it puts a number on it. That is how regulatory accountability is supposed to work.
By contrast, on investor protection, the report mostly counts activity rather than outcomes. The CSA issued 763 investor alerts. It deactivated 11,728 malicious websites. Its Spot the Red Flags of Fraud campaign reached 20.4 million Canadians. More than 85% of the alerts concerned crypto assets.
Those are serious operational numbers, and the work behind them is real. Fraud is one of the fastest-moving threats retail investors face. Taking down fraudulent sites is worth doing. But none of those figures is an outcome. They describe what the regulator did. They reveal little about what changed for the investors those actions were meant to protect.
The CSA’s own work illustrates the difference. During the year, it tested several anti-fraud messages and found that the language people preferred was not always what reduced susceptibility to scams. The relevant question, then, is not simply how many people saw a warning, as the headline figure of 20.4 million suggests, but whether the warning changed behaviour. Reach is not protection.
Registrant misconduct
The enforcement figures raise the same concern in a more concrete way. In the category of registrant misconduct, the CSA reports 15 concluded cases that produced $361,001 in fines, administrative penalties and other financial sanctions — but $0 in restitution, compensation and disgorgement ordered.
That figure doesn’t mean that no client of a registered firm was made whole. Money can move through settlements, internal complaint processes and civil claims the report does not track. The narrower point is that the report records the penalty imposed, but not whether investor harm was repaired.
That distinction matters beyond this category. The wider enforcement appendix reports almost $59.4 million in restitution, compensation and disgorgement across all categories. But those are amounts ordered; the report does not say how much was collected or how much reached investors. The same gap appears where the report turns to complaints and unfinished investor-protection reforms.
The Year in Review contains no complaint data. It also gives no completion date for two major investor-focused initiatives.
In July 2025, the CSA consulted on a framework that would allow an independent dispute-resolution service — expected to be the Ombudsman for Banking Services and Investments (OBSI) — to make binding decisions in investment disputes.
In June 2025, it proposed amendments that would prohibit advisor chargebacks in the distribution of prospectus-qualified investment funds, a practice the CSA has said creates an inherent conflict of interest between a dealing representative and client.
Both initiatives remain unfinished: OBSI is something the CSA is “fully committed” to finalizing, while on chargebacks the CSA has reviewed the comments received and is now “evaluating next steps.” No date is given for either.
Set that beside the CSA’s record on completed capital-formation initiatives.
The CSA introduced voluntary semi-annual financial reporting for eligible venture issuers. It raised the financing limits. It made permanent an expedited shelf prospectus regime for well-known seasoned issuers. And it reported what some of those changes produced.
The comparison is not meant to diminish the importance of capital formation. It is part of the CSA’s mandate, and reducing unnecessary burden can benefit investors as well as issuers.
The point is that the Year in Review gives capital-formation initiatives a clearer account of results than it gives investor protection.
Some investor-protection outcomes are harder to measure with precision; no one can know exactly how many people avoided a scam because a fraudulent website was taken down. But that makes the measurable questions more important. How much compensation reached investors? What happened to complaints? And when will unfinished investor-focused reforms be completed?
The CSA has shown that it can measure outcomes when it chooses to. It counted the $4 billion raised under revised financing limits and the eightfold increase that followed because those results mattered enough to report. Investor protection deserves the same discipline: not just a record of regulatory activity, but a clear account of what changed for investors.