FINTRAC stands for the Financial Transactions and Reports Analysis Centre of Canada. It is Canada’s financial intelligence unit, created in 2000 under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA). Its job is to collect, analyze, and share financial intelligence to help detect money laundering and terrorist financing.
If you run a money services business, deal in cryptocurrency, handle large cash transactions, or work in Canadian financial services in any form, FINTRAC has direct authority over your operations.
Here is everything you need to know.
- What FINTRAC does and how it operates
- The law that gives FINTRAC its authority
- Which businesses FINTRAC regulates, including MSBs
- Registration, reporting, and compliance program obligations
- FINTRAC examinations and enforcement outcomes
- How FINTRAC relates to other Canadian regulators
- What FINTRAC compliance means when buying or selling an MSB
What Does FINTRAC Actually Do?
FINTRAC sits at the centre of Canada’s anti-money laundering (AML) system. It does not arrest people, freeze accounts, or lay charges. That is the job of law enforcement. What FINTRAC does is build the intelligence picture that makes those actions possible.
It collects transaction reports from thousands of regulated businesses across Canada. It analyzes that data for patterns that suggest money laundering or terrorist financing. When it finds something, it discloses actionable intelligence to CSIS, the RCMP, CBSA, and other law enforcement agencies.
The Three Core Functions
Regulated businesses file reports with FINTRAC when specific transaction thresholds are met or when suspicious activity is identified. Those reports feed FINTRAC’s database.
FINTRAC’s analysts look for patterns across reports from multiple businesses and sectors. A single suspicious transaction report from one MSB might not flag anything on its own. Paired with data from other sources, it can build a case.
When FINTRAC believes there are reasonable grounds to suspect money laundering or terrorist financing, it sends a financial intelligence disclosure to the appropriate agency. Since 2000, it has made thousands of such disclosures leading to investigations, charges, and convictions.
What Law Gives FINTRAC Its Authority?
FINTRAC’s authority comes from the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, commonly called the PCMLTFA. This is the federal statute that defines which businesses must register with FINTRAC, what they must report, how long they must keep records, and what happens when they do not comply.
The PCMLTFA has been amended multiple times since it was first passed in 2000. Each amendment has generally expanded FINTRAC’s reach, added new reporting categories, and increased penalties for non-compliance.
FINTRAC also operates under the Privacy Act, which governs how it handles the personal financial information it collects.
Who Does FINTRAC Regulate?
FINTRAC covers a wide range of businesses. The common thread is that they all handle money in ways that could be used to move, hide, or clean illegal funds.
The main categories of regulated entities are:
- Money services businesses (MSBs)
- Banks and federally regulated financial institutions
- Credit unions and caisses populaires
- Life insurance companies and brokers
- Securities dealers
- Accountants and accounting firms
- Real estate brokers and agents
- Casinos
- Dealers in precious metals and stones
- Mortgage administrators and lenders
- British Columbia notaries
What Makes a Business a Money Services Business?
This is where most operators get confused. An MSB is not just a currency exchange kiosk. Under the PCMLTFA, a business is classified as an MSB if it provides any of the following services:
- Foreign currency exchange
- Funds or value transfer (sending or receiving money on behalf of someone else)
- Issuing or redeeming money orders, traveller’s cheques, or similar instruments
- Dealing in virtual currency (buying or selling cryptocurrency)
- Crowdfunding platform services
- Payment service provider services
If your business falls into any of these categories, you are an MSB under Canadian law. That means you must register as an MSB with FINTRAC before you start operating, build a compliance program, file required reports, and keep specific records. Operating without registration is a federal offence.
What Are Your Obligations Under FINTRAC?
Being regulated by FINTRAC is not a one-time filing. It is an ongoing set of operational requirements. Here is what the PCMLTFA requires from regulated businesses.
1. Registration
MSBs must register with FINTRAC before they begin operations. Foreign MSBs serving Canadians must also register, even if they have no physical presence in Canada. Registration must be renewed every two years, and any significant changes to ownership, structure, or services trigger a new notification obligation.
2. Compliance Program
Every FINTRAC-regulated business must have a written compliance program in place. For MSBs, this is one of the most detailed requirements. The program must include:
- A written AML and CTF policy document
- A designated compliance officer
- A written risk assessment
- Know Your Client (KYC) procedures
- Ongoing employee training
- A review of the program at least every two years
A compliance program that exists only on paper will not survive a FINTRAC examination. The program needs to reflect how the business actually operates day to day.
For more on what an MSB compliance program must include, see our overview of MSB law in Canada.
3. Transaction Reporting
FINTRAC requires regulated businesses to file specific reports when certain transactions occur. The main report types for MSBs are:
| Report Type | When to File | Threshold |
|---|---|---|
| Large Cash Transaction Report (LCTR) | Filed when a business receives $10,000 or more in cash in a single transaction or in two or more transactions within 24 hours by the same client. | $10,000+ |
| Suspicious Transaction Report (STR) | Filed when there are reasonable grounds to suspect that a transaction is linked to money laundering or terrorist financing. There is no dollar threshold. If it looks suspicious, it must be reported. | No threshold |
| Electronic Funds Transfer Report (EFTR) | Filed when an MSB sends or receives electronic funds transfers of $10,000 or more internationally on behalf of a client. | $10,000+ |
| Terrorist Property Report | Filed when an MSB knows or suspects it holds property belonging to a listed terrorist entity. | Any amount |
Missing a required report is a compliance violation. A pattern of missed reports is one of the most common reasons FINTRAC takes enforcement action against MSBs.
4. Record Keeping
FINTRAC requires regulated businesses to keep specific records for specific periods. For most records, the requirement is at least five years. This includes client identification records, transaction records, beneficial ownership information, and reports that were filed.
During an examination, FINTRAC will ask to see these records. If they do not exist or are incomplete, that is a finding.
What Happens When FINTRAC Finds a Problem?
FINTRAC has the authority to examine any regulated business at any time. Examinations can be announced or unannounced, and they can be conducted on-site or by requesting documents remotely.
During an examination, FINTRAC reviews your compliance program, your reporting history, your KYC records, and your transaction records. It is looking for gaps between what the program says and what actually happened in practice.
Non-Compliance Findings and What They Lead To
If FINTRAC identifies violations, it can take several forms of action:
Compliance Agreements
A formal written commitment from the business to fix specific issues within a set timeline.
Administrative Monetary Penalties
FINTRAC can issue administrative monetary penalties for specific violations of the PCMLTFA. Penalties are calculated per violation and can reach into the hundreds of thousands of dollars for serious or repeated failures. See our overview of administrative monetary penalties for MSBs.
Revocation of Registration
FINTRAC can cancel an MSB’s registration entirely, which ends the business’s legal authority to operate. This can happen even when the violations are non-criminal in nature.
Criminal Charges
For the most serious violations, the PCMLTFA allows for criminal prosecution. Charges can result from operating without registration, structuring transactions to avoid reporting requirements, or knowingly facilitating money laundering.
FINTRAC vs. OSFI: What Is the Difference?
A common question from MSB operators is how FINTRAC relates to other Canadian financial regulators.
FINTRAC is specifically an intelligence and AML agency. It does not regulate the financial safety or soundness of institutions. It does not set interest rates or capital requirements.
OSFI (the Office of the Superintendent of Financial Institutions) regulates federally chartered banks, insurance companies, and pension funds for financial stability and consumer protection. A bank must comply with both OSFI and FINTRAC, but they serve different purposes.
For MSBs, FINTRAC is the primary federal regulator. OSFI is not involved in MSB oversight.
| FINTRAC | OSFI | |
|---|---|---|
| Primary Purpose | Financial intelligence, AML/CTF detection | Financial stability, consumer protection |
| Regulates | MSBs and all PCMLTFA-covered entities | Banks, insurers, pension funds |
| Relevant for MSBs? | Yes, primary federal regulator | Not involved in MSB oversight |
| Key Tools | Examinations, AMPs, registration revocation | Capital requirements, prudential supervision |
What FINTRAC Means If You Are Buying or Selling an MSB
FINTRAC compliance history is one of the most important factors in any MSB transaction.
If you are buying an MSB in Canada, the target MSB’s FINTRAC examination history, outstanding findings, and AMP record all transfer with the business. A clean compliance history supports the valuation. Open findings and enforcement history do not go away when ownership changes.
If you are selling an MSB, a strong, documented compliance program and a clean FINTRAC examination record make your business significantly more attractive to buyers and more defensible in the sale process.
Both sides of the transaction require legal counsel who understands what FINTRAC looks at and what it means for the deal. See our pages on buying an MSB in Canada and selling an MSB in Canada for more.
Final Word
FINTRAC is not a background regulator. For any business that handles money transfers, foreign exchange, or cryptocurrency in Canada, it is the central compliance authority that governs daily operations.
Understanding what FINTRAC requires, staying current with your reporting and record-keeping obligations, and maintaining a compliance program that reflects how your business actually operates is not optional. The consequences of falling short range from financial penalties to the loss of your registration entirely.
If you have questions about your MSB’s FINTRAC obligations, need to build or update a compliance program, or are facing an examination or enforcement action, Cloudhaus Law handles MSB law in Canada as a core part of our practice. Contact us for a free consultation.
Questions About Your FINTRAC Obligations? We Can Help.
Cloudhaus Law handles MSB law in Canada as a core part of our practice. Free consultation. No commitment. Flat-fee pricing.
