Security
Custody controls
Segregated Accounts
Cold Storage
Blockchain Auditability
No Rehypothecation
Custodian Independence
Security scope and shared responsibility
DWM Canada's Responsibilities
Custodian's Responsibilities
Client's Responsibilities
External & Inherent Risks (No Party Controls)
Operational Controls
Access Controls
Transaction Monitoring
Segregation of Duties
Change Management
Audit Logging
Vendor Management
Account and user protection
Email Verification
Verify that emails come from @dwmcanada.com before clicking links or providing information.
Withdrawal Confirmation
Account Takeover Protection
Support Verification
- Your password
- Account login credentials
- Private keys or seed phrases
- Immediate action via email or text links
If someone claiming to be DWM Canada requests these, it's a scam. Contact us
directly through the verified website or phone number.
Phishing Awareness
- Emails claiming "urgent action required"
- Links to fake login pages that look like DWM Canada
- Requests to "verify" your account via email
- Impersonation of DWM Canada support staff
Always access your account directly through dwmcanada.com, not through email
links.
Technical security
Encryption
Multi-Signature Requirements
Infrastructure Security
Data Protection
Secure Development
Penetration Testing
Risk management
Collateral Monitoring
Margin Call Procedures
Conservative Underwriting
Liquidity Management
Custodian Due Diligence
Regulatory Risk
Compliance and regulatory
Regulatory Status
DWM Canada is in the process of obtaining FINTRAC Money Services Business (MSB) registration and OSC licensing. We are not yet a licensed or registered entity. We will update our regulatory status publicly as approvals are obtained.
AML/KYC Procedures
All clients undergo identity verification (Know Your Customer) and anti-money laundering screening before account approval. We verify:
- Government-issued identification
- Proof of address
- Source of funds for large transactions (when required)
Sanctions Screening
We screen clients against Canadian and international sanctions lists. We cannot provide services to individuals or entities on prohibited lists.
Privacy Compliance (PIPEDA)
DWM Canada complies with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). We collect, use, and disclose personal information only as necessary for business operations and regulatory compliance.
Record Keeping
Client records, transaction history, and compliance documentation are retained in accordance with Canadian regulatory requirements.
Business continuity and resilience
DWM Canada is designed to operate reliably even if individual staff members are unavailable or key personnel leave.
Multi-Person Controls
No single person can execute critical operations alone. Withdrawals, system changes, and sensitive decisions require multiple authorized parties. This prevents single points of failure and internal fraud.
Custodian Independence
The custodian operates independently from DWM Canada. Even if DWM Canada’s operations are disrupted, your Bitcoin remains securely held by the custodian in segregated accounts.
Documented Procedures
Operational procedures are documented and accessible to multiple staff members. Critical functions can be performed by backup personnel if primary operators are unavailable.
Succession Planning
DWM Canada maintains succession plans for key roles. If leadership changes, operations continue without disruption to client services.
Disaster Recovery
Systems and data are backed up regularly. In the event of infrastructure failure, DWM Canada can restore operations from backups hosted in geographically separate locations.
What DWM does not do
DWM Canada does not hold your Bitcoin directly. A qualified third-party custodian holds all client Bitcoin in segregated accounts.
DWM Canada coordinates with the custodian but cannot unilaterally withdraw your Bitcoin. Withdrawals require proper authorization following documented procedures.
Your Bitcoin collateral is never lent to others, staked, or used for any purpose other than securing your loan.
Your Bitcoin is held in segregated accounts, separate from other clients and from DWM Canada's corporate assets.
Bitcoin is volatile. We do not guarantee protection against price declines, and we cannot prevent margin calls or liquidations if Bitcoin's price falls significantly.
DWM Canada provides Bitcoin-backed loans, not investment advice. Consult your own financial and tax advisors before borrowing.
DWM Canada will never ask for passwords, private keys, or sensitive information via email, text, or social media.
Frequently Asked Questions
How is my Bitcoin protected from theft?
Your Bitcoin is held by a qualified custodian in multi-signature cold storage wallets, isolated from internet-connected systems. The custodian maintains physical and technical security controls, and your Bitcoin is held in segregated accounts separate from other clients.
What happens if DWM Canada is hacked?
DWM Canada does not hold your Bitcoin directly—a third-party custodian does.
Even if DWM Canada’s platform is compromised, your Bitcoin remains securely held by the custodian in segregated accounts. Withdrawals require proper authorization and cannot be executed by attackers who compromise DWM Canada’s systems alone.
What happens if the custodian is hacked?
The custodian uses multi-signature cold storage, meaning Bitcoin cannot be moved without multiple parties authorizing the transaction. The custodian also maintains insurance coverage for custodied assets, subject to policy terms and exclusions.
What if I lose access to my account?
Contact DWM Canada support immediately. We’ll verify your identity through documented procedures and restore access. You may need to provide government ID and answer security questions.
How do I know an email from DWM Canada is legitimate?
Legitimate emails come from @dwmcanada.com. We will never ask for your password, private keys, or immediate action via email links. If you’re unsure, contact us directly through the verified website or phone number.
What if someone impersonates DWM Canada support?
Do not provide any sensitive information. Hang up or ignore the message, then contact DWM Canada directly through verified channels (website, official phone number). Report the impersonation attempt to us.
Is my personal information protected?
Yes. DWM Canada complies with PIPEDA (Canada’s privacy law). Your personal information is encrypted, stored in Canadian data centers, and never sold to third parties. We collect only what’s required for operations and compliance.
What happens if I don't respond to a margin call?
If your LTV reaches margin call thresholds and you don’t add collateral or reduce your loan, DWM Canada may liquidate your Bitcoin collateral to repay the loan and protect both parties. Specific procedures are disclosed in your loan agreement.
Can DWM Canada freeze my account?
Yes, if we detect suspicious activity, potential account compromise, or legal requirements. We’ll contact you through verified channels to resolve the issue.
Where can I report a security concern?
Email security@dwmcanada.com with details. We take all security reports seriously and investigate promptly.
Security-first Bitcoin lending