Their master key to your money
A QCAD balance sits under a key only you hold, and looks like money you own outright. The company that issued it kept a master key that reaches it anyway. Canada now has more than one version of QCAD, and they do not give you the same control over your own money.
Canada now has a regulated Canadian dollar stablecoin, QCAD, issued under a new federal framework that brings private stablecoin issuers under national supervision.1 On its face the news reads like financial plumbing. Underneath, it shows what these instruments are, and what the companies that issue them can be ordered to do to money you appear to hold free and clear.
A stablecoin is a digital dollar. A private company issues it, holds it to a value of one dollar, and records it on a public blockchain, a ledger anyone in the world can read. Ownership on that ledger rests on a private key, a long string of characters known only to the holder, that authorizes every transfer out of an address. Whoever holds it can move the money, and unlike a bank password it can never be reset or restored. Keep that key yourself, in a wallet only you can open, and no exchange or platform stands between you and your balance. This is the arrangement crypto investors prize, summed up in the oldest maxim in the field, “not your keys, not your coins.” Hold them yourself, and what you own answers to no one else.
With a stablecoin, the promise stops short. You can hold the keys yourself in a self hosted wallet and still not control the money. The token is a piece of software, and its issuer built controls into it, out of the holder’s sight, that reach your balance while it sits in the wallet only you can open.
The issuer who deploys it writes the rules, and can rewrite them after the fact, because the contract is built to be upgradeable.
Two coins, one name
Two different tokens share the QCAD name. The first is the original, in circulation since 2019, its code open for anyone to read. The second is the new compliant token, issued by QCAD Digital Trust, an Ontario trust administered by Stablecorp Digital Currencies Inc., and qualified by prospectus; it had issued nothing at the close of 2025, and has since listed on Kraken, where individual Canadians can hold it alongside institutions, though what circulates is still small.2 This newer token is the QCAD a person buys today. Both are open and verifiable, and both, as their code shows, leave the issuer the power to rewrite them.
The master key
Every stablecoin is a token contract, an active program on the blockchain that sets how its units behave. The issuer who deploys it writes the rules, and can rewrite them after the fact, because the contract is built to be upgradeable. That power to replace the logic on money already issued is the master key, and every version of QCAD carries it. QCAD has shown, in the open, what an issuer does with that power. The version of QCAD that circulated from 2019 runs on a contract whose source is public and verified, and its code carries an explicit freeze.3 Every transfer has to clear a line like this one first.
require(!isBlocked(from), “Cannot send from blocked Address”);
Each transfer runs that check before it moves a cent. The contract keeps a register of blocked addresses, and an administrator can add yours with a single instruction. Once you are on it, nothing raids your wallet. Your key still works. Your balance still shows. The next time you try to send, the check fails and the transfer is refused. The money stays where it is and does nothing. The contract carries two further powers. A global pause can halt every transfer of the token at once. The upgrade power sits above both the freeze and the pause, since it can rewrite the contract itself and change what either one does.
Buy QCAD today on a Canadian exchange, and you receive a newer contract, also open and verifiable.4 Its code holds a single administrative power, the ability to upgrade. The issuer can replace the contract’s logic whenever it chooses, rewrite what the token does to balances already in wallets, and add a freeze that was not there before. The freeze the 2019 contract wears in the open is absent from this one for now. The switch is one update away, and you would not be asked. You hold the key to your wallet; the issuer holds the master key to the money.
The page that does not mention the switch
Read the prospectus for the compliant token and a further gap shows. It is detailed on structure, reserves, and audits. Nowhere does it describe a power to freeze an address, a power to pause every transfer, or a power to rewrite the contract after issue. The one control it discloses is the right to halt redemptions, the point where money leaves the system for cash.2
The controls travel with the design
Issuer control is standard equipment on every chain a QCAD runs on. On Ethereum it is the admin freeze and pause the 2019 contract already used. On Solana a token can carry a freeze authority, and a frozen account can neither send nor receive until the issuer thaws it. On Algorand and Stellar the issuer holds a freeze and a clawback, the power to pull tokens back out of a holder’s address.5 Every QCAD contract is upgradeable, so a token that ships without a freeze can be handed one later. Whichever QCAD a person ends up holding, the power to freeze rests with the issuer by design, written in today or added tomorrow.
It is in use today
These powers are used, and used at scale. In April 2026, after the US Treasury flagged addresses tied to Iran’s central bank, Tether, the issuer of the largest stablecoin in the world, froze around $344 million of its token, held across two addresses on the Tron network.6 The funds remain on the ledger for anyone to see, and they cannot move. Issuers act on orders like this as a matter of routine, for sanctions, theft, and fraud, and a frozen balance can sit untouched for as long as the freeze stands.
Canada has already shown the will to freeze. In 2022, under emergency powers, the government directed banks to freeze the accounts of people tied to the convoy protests, with no court order required, in an action later found unlawful.7 That was done to bank accounts. Money built as programmable software would make the same act faster and harder to reverse.
Two kinds of freeze
A frozen bank account and a frozen stablecoin look the same from outside. You cannot spend the money. Underneath, they run in opposite directions.
Your bank balance is an entry in the bank’s own records, its promise to pay you. Freeze the account, and the bank stops letting you reach the money. The lock is on your access.
A stablecoin freeze comes from the other side. The token sits in your own wallet, on a public ledger, under your own key. Nobody has locked you out. You can see it, point to it, prove it is yours. The freeze reaches past your access to the money itself, which has been instructed to refuse you. You hold the key, but the balance has been told not to move.
The people who hold their own keys are the ones who went furthest to own their money outright, who took it off the exchange so no one else could reach it. The override reaches them anyway. Holding your own keys is the strongest claim to ownership a stablecoin allows, and even it does not put the money beyond the issuer’s reach.
In fairness to the issuer, these controls are the price of building a stablecoin that operates legally. An issuer that can freeze a sanctioned address and halt the token during an attack is one that regulators and banks are willing to work with, and that is much of the point of a compliant coin. The same control that blocks a thief or a sanctioned address can be turned on a regular holder for their politics or their beliefs, as Canadians saw in 2022. These powers exist for good reasons. A single issuer can use them, a government can order it, and you would not be told until your own money stops moving.
What has no off switch
Set the politics aside. Money that lives as software answers, in the end, to whoever can change the software. A stablecoin, a central bank digital currency, a bank deposit; the form differs and the exposure is the same. Each is a claim inside a system someone else administers, and each carries, somewhere in its rules, a way to be switched off.
Gold is what this site is built around. Held in your own name, in a private vault, it is a physical thing, with no issuer behind it and no switch to flip. It is no one’s liability, and it has held value across centuries and through every kind of regime. A vault does not publish what you hold. Moving it is a physical act, beyond the reach of any code. In a world wiring conditions into the money itself, that is the kind of ownership worth building on.
A note on timing
This situation is fluid, and I will keep it current. What follows is how it stands in June 2026. The compliant QCAD now trades on Kraken, open to individual Canadians, with circulation still small. It is a public, verified, upgradeable contract that carries no freeze in its code yet, only the power to add one. The framework that governs these issuers is being phased in, with the supervisory regime expected to take effect around 2027.
The 2027 date is the regulatory timeline. The risk to you can arrive long before it. An upgradeable contract can be rewritten in an afternoon, and a freeze added the same day, with no vote and no warning. Your room to act is widest now, while the coin is young, cash is still in your pocket, and the decision is yours to make. It will not stay this wide.
If owning something with no off switch is a conversation worth having, I am glad to have it, in your own time.
Footnotes
-
The Stablecoin Act, within Bill C-15, received Royal Assent on 26 March 2026; expected in force around 2027. Lexology; Fasken. ↩
-
Compliant QCAD, qualified by the Amended and Restated Final Prospectus dated 21 December 2025 (QCAD Digital Trust; Stablecorp); listed on Kraken for individual Canadians and institutions on 20 April 2026. Stablecorp, Transparency. ↩ ↩2
-
Earlier QCAD (2019), an upgradeable contract with block and pause functions (proxy 0x4A16BAf4…5735DB2e0). Etherscan. ↩
-
The compliant QCAD trades publicly today, listed on Kraken on 20 April 2026 for individuals and institutions; a UUPS-proxy contract whose current source carries no freeze, blacklist, or pause. Newsfile, 20 Apr 2026; CoinGecko. ↩
-
Freeze and clawback authorities are built into the token standards of Solana, Algorand, and Stellar. Solana; Algorand; Stellar. ↩
-
In April 2026, after OFAC flagged addresses tied to Iran’s central bank, Tether froze about US$344 million of USDt across two Tron addresses. CoinDesk, 24 April 2026. ↩
-
In February 2022, under the Emergencies Act, the government directed banks to freeze convoy-linked accounts without a court order; the Federal Court later ruled the invocation unlawful (Jan 2024), upheld on appeal (2026 FCA 6). See The week the cards stopped working on this site. ↩