What Is FINTRAC? Canada's Financial Intelligence & Compliance Authority Explained (2026)

FINTRAC — the Financial Transactions and Reports Analysis Centre of Canada — is the federal agency responsible for detecting money laundering and terrorist financing, and ensuring that financial businesses comply with Canada's AML/ATF laws. If you've seen "FINTRAC-registered" on a payment provider's website and want to understand what that means, this guide covers who FINTRAC is, what it does, which businesses must register, how to verify registration on the public MSB registry, and why working with a FINTRAC-registered provider matters for your business.

What Is FINTRAC?

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) was established in 2000 under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA). It is an independent federal agency within the portfolio of the Department of Finance, headquartered in Ottawa.

FINTRAC's role differs fundamentally from conduct regulators like the UK's FCA. It does not regulate how firms treat customers, set product standards, or authorize firms to offer specific services. Instead, FINTRAC operates with two core mandates:

Financial intelligence. FINTRAC receives, analyzes, and discloses financial intelligence to law enforcement and national-security agencies. It is Canada's financial intelligence unit (FIU) — the body that connects suspicious transaction patterns to potential criminal investigations.
Compliance supervision. FINTRAC ensures that entities subject to the PCMLTFA — banks, money services businesses, casinos, real estate brokers, and others — implement effective AML/ATF programs, verify client identity, keep records, and report suspicious and large transactions. It conducts compliance examinations and can impose administrative penalties for violations.

FINTRAC is also a member of the Egmont Group — an international network of 170+ financial intelligence units — and shares intelligence with counterpart agencies in over 100 countries. This cross-border cooperation is essential for tracking illicit financial flows that span multiple jurisdictions.

What FINTRAC Does

Financial Intelligence

Every day, thousands of transaction reports flow into FINTRAC from reporting entities across Canada. These include:

Suspicious Transaction Reports (STRs) — filed when a reporting entity has reasonable grounds to suspect a transaction is related to money laundering or terrorist financing
Large Cash Transaction Reports — filed for cash transactions of $10,000 or more
Electronic Funds Transfer Reports — filed for international wire transfers of $10,000 or more
Casino Disbursement Reports — filed for large cash payouts at Canadian casinos

FINTRAC analysts examine these reports, link them to known patterns of illicit activity, and produce intelligence disclosures to police, CSIS, and other authorized recipients. Since its inception, FINTRAC has disclosed over 40,000 intelligence packages — many of which have led to criminal investigations, asset seizures, and prosecutions.

Compliance Supervision

Under the PCMLTFA and its regulations, FINTRAC sets the compliance requirements that reporting entities must follow. These requirements include:

Client identification and verification — firms must verify the identity of clients before opening accounts or processing certain transactions, using prescribed methods and documents
Record keeping — firms must maintain transaction records, client identification records, and compliance-program documentation for specified retention periods
Risk assessment — firms must document their assessment of money-laundering and terrorist-financing risks relevant to their business
Compliance programs — firms must implement a written compliance program that includes policies, procedures, training, and a designated compliance officer

FINTRAC conducts compliance examinations — on-site and remote — to verify that entities are meeting these obligations. When violations are found, FINTRAC can issue compliance notices requiring corrective action, or impose administrative monetary penalties (AMPs) of up to $500,000 for serious or repeated non-compliance. In the most severe cases, FINTRAC can refer matters to law enforcement for criminal prosecution.

The Public MSB Registry

Money Services Businesses (MSBs) — including foreign-exchange dealers, money-transfer services, and virtual-currency exchangers — must register with FINTRAC before operating in Canada. The registry is publicly accessible and searchable at FINTRAC's website.

The registry lists each registered MSB's:

Legal name and any operating names
Registration number
Registration status (active, expired, revoked)
Business address
Types of services offered (currency exchange, funds transfer, virtual currency dealing, etc.)

This registry is the primary tool for businesses and consumers to verify that a payment or money-transfer provider is legally operating in Canada. An MSB that is not on the registry is operating outside the law — and its customers have no assurance that it meets AML/ATF compliance standards.

Who Must Register with FINTRAC

The PCMLTFA defines a broad range of entities that must register with FINTRAC or comply with its reporting and compliance obligations:

Money Services Businesses (MSBs) — the only category that requires formal registration. MSBs include:
- Foreign-exchange dealers
- Money-transfer and remittance services
- Cheque cashing services
- Virtual-currency exchangers and dealers (since 2020 amendments)
Financial entities — banks, credit unions, trust companies, and insurance companies that offer financial services. These are already regulated by OSFI or provincial bodies; FINTRAC requires them to report and comply with AML/ATF rules but they do not register on the MSB registry.
Casinos and gambling establishments — must report large transactions and suspicious activity
Real estate brokers and developers — must verify client identity and report suspicious transactions in property deals
Dealers in precious metals and stones — must comply with client-identification and reporting rules for large cash purchases
Accountants and lawyers — subject to partial compliance obligations when engaging in certain financial activities (legal profession rules vary by province)

The key distinction: registration (the MSB registry) applies only to MSBs. Other entities must comply with reporting and client-identification obligations but do not appear on the public registry. If you are evaluating a payment provider, money-transfer service, or virtual-currency platform, you should check the MSB registry specifically — because those are the businesses that must be registered to operate legally.

FINTRAC vs Other Canadian Financial Regulators

FINTRAC is not Canada's only financial regulator, and understanding the difference matters when you're evaluating a financial-service provider:

Regulator	Primary Focus	What They Do
FINTRAC	AML/ATF compliance + financial intelligence	Registers MSBs, supervises AML compliance, analyzes suspicious transactions, shares intelligence with law enforcement
OSFI (Office of the Superintendent of Financial Institutions)	Prudential regulation	Supervises banks, insurance companies, and pension plans for financial soundness and stability
Provincial securities commissions (e.g., OSC, AMF)	Investment regulation	Regulate securities trading, investment advisors, and capital markets within their province
CDIC (Canada Deposit Insurance Corporation)	Deposit protection	Insures eligible deposits up to $100,000 per depositor per insured institution if a bank fails
Consumer protection agencies (provincial)	Fair treatment and consumer rights	Handle complaints about unfair business practices, misleading advertising, and contract disputes

The practical takeaway: FINTRAC registration confirms that a payment provider meets AML/ATF compliance standards — it does not guarantee consumer protection, deposit insurance, or financial stability. Those protections come from other bodies. When evaluating a financial provider, you should check multiple factors: FINTRAC registration (for AML compliance), OSFI regulation (for banks), CDIC membership (for deposit insurance), and provincial consumer-protection coverage.

Why FINTRAC Registration Matters for Your Business

If your business uses a payment or money-transfer service, FINTRAC registration is not a marketing label — it has concrete implications:

Legal compliance. Under the PCMLTFA, any business operating as a Money Services Business in Canada without FINTRAC registration is violating federal law. Penalties for operating an unregistered MSB include administrative fines of up to $500,000 and potential criminal prosecution. A registered MSB, by contrast, has demonstrated that it meets the compliance threshold — client verification, record keeping, reporting, and a documented compliance program.
Trust signal. FINTRAC registration means the provider has undergone the registration process, identified its compliance officer, documented its risk assessment, and committed to ongoing compliance examinations. That is a meaningful due-diligence signal — particularly for B2B payment services handling international transfers or virtual-currency operations, where AML risk is heightened.
International credibility. FINTRAC is Canada's link to the global AML/ATF intelligence network. A FINTRAC-registered provider operates within a framework that is recognized by financial intelligence units in over 100 countries. For businesses that send or receive international payments, this matters — counterpart institutions and foreign regulators often check whether a payment provider is registered with its home country's FIU before allowing transactions to proceed.

PhotonPay is a next-generation payment operating system registered with FINTRAC , offering multi-asset accounts that let Canadian businesses manage fiat and stablecoin balances side by side — fund virtual corporate cards, send international transfers, and settle supplier payments from a single platform.

FAQ about FINTRAC Regulation

Is FINTRAC the same as a bank regulator?

No. FINTRAC does not regulate banks' financial soundness, lending practices, or customer treatment. The Office of the Superintendent of Financial Institutions (OSFI) is Canada's prudential regulator — it supervises banks, insurance companies, and trust companies for financial stability. FINTRAC's role is specifically AML/ATF compliance and financial intelligence. Banks must comply with both OSFI prudential rules and FINTRAC AML obligations, but the two agencies have separate mandates and do not overlap.

What happens if a Money Services Business is not registered with FINTRAC?

An MSB that operates in Canada without FINTRAC registration is in violation of the PCMLTFA. FINTRAC can issue compliance notices, impose administrative monetary penalties (up to $500,000 for serious or repeated non-compliance), and refer the matter to law enforcement for criminal prosecution. An unregistered MSB also cannot demonstrate AML compliance to its clients, counterpart institutions, or foreign regulators — which can block international transaction flows and undermine business credibility.

Does FINTRAC protect my money if a company fails?

No. FINTRAC does not provide deposit insurance or compensation if a financial institution or MSB fails. Deposit protection for banks is provided by the Canada Deposit Insurance Corporation (CDIC), which covers eligible deposits up to $100,000 per depositor per insured institution. MSBs are not CDIC members — they are not banks and do not hold insured deposits. If you are concerned about fund safety at a payment provider, check whether the provider safeguards client funds in separate accounts (a requirement under FINTRAC's compliance regime for MSBs), and whether its banking partner is CDIC-insured.

How do I check if a money services business is FINTRAC-registered?

Visit FINTRAC's public MSB registry on its website and search by the business name or registration number. The registry shows the firm's legal name, registration status, services offered, and business address. If a payment or money-transfer provider claims to be "FINTRAC-registered" but does not appear on the registry, it may be using a different operating name — or it may not actually be registered. Always verify directly on the official registry rather than relying on claims made on a provider's website.