Canadian MSB Requirements 2026 — Complete Checklist

Operating a money services business in Canada is more accessible than in most G7 countries — no minimum capital requirements, no discretionary licensing decisions, and free registration with FINTRAC. But “accessible” does not mean “simple.” Before you process a single transaction, your business must meet a specific set of corporate, regulatory, and compliance requirements. After registration, you must maintain them continuously or face administrative penalties, registration revocation, or criminal prosecution.

This page lists every requirement in one place, organised by category: corporate structure, FINTRAC registration, compliance program, KYC obligations, reporting, record-keeping, RPAA, and Quebec provincial licensing. It complements our MSB registration guide, which covers the full process from incorporation through launch, and our FINTRAC registration guide, which explains FINTRAC’s system in detail.

If building from scratch sounds like a lot, it is. A ready-made MSB comes with all requirements already met — registered with FINTRAC, all six permission categories active, compliance program in place, and ready to operate. Contact us via WhatsApp, Telegram, email, or phone to see current inventory.

Corporate Structure Requirements

Canadian Legal Entity

Every MSB must be operated through a Canadian legal entity — a corporation, partnership, or sole proprietorship registered in Canada. Federal incorporation under the Canada Business Corporations Act (CBCA) is the most common structure because it provides national name protection and allows the business to operate across all provinces without extra-provincial registration.

Provincial incorporation is also acceptable. British Columbia, Ontario, and Alberta are popular choices, particularly for non-resident founders, because these provinces have eliminated director residency requirements. However, a provincially incorporated MSB may need to register as an extra-provincial corporation to operate in other provinces.

FINTRAC requires a certificate of incorporation (or equivalent formation document) as part of the registration application.

Director Residency

If your MSB is incorporated under the CBCA, at least 25% of directors must be resident Canadians. If the board has fewer than four directors, at least one must be a resident Canadian. This is a strict statutory requirement — there are no exemptions for small businesses or foreign-owned entities.

Non-resident founders who choose federal incorporation typically address this through nominee director services, where a Canadian resident serves on the board to satisfy the statutory requirement. Costs for nominee director services typically range from C$5,000 to C$10,000 per year.

Provinces that have eliminated director residency requirements include British Columbia, Ontario, Alberta, Quebec, Nova Scotia, and New Brunswick. Non-resident entrepreneurs who want to avoid the nominee director requirement may prefer provincial incorporation in one of these jurisdictions.

Beneficial Ownership Disclosure

All persons owning or controlling 20% or more of the MSB must be disclosed to FINTRAC during registration. For each such person, you must provide:

Full legal name and date of birth
Country of residence
Criminal record check — issued by a competent authority in their country of residence, less than six months old, in English or French (or with a certified translation)

Since October 2025, federally incorporated reporting entities must consult the Corporations Canada beneficial ownership registry when verifying beneficial ownership of entity clients. This is part of FINTRAC’s enhanced transparency requirements.

Registered Office and Business Address

Your MSB must have a Canadian business address. For corporations, this means a registered office in the province or territory of incorporation. The business address is disclosed on FINTRAC’s public MSB registry.

A virtual office is technically acceptable for some structures, but a physical address signals legitimacy — particularly important given that FINTRAC may conduct on-site examinations. The address also appears on public records, and banking partners (which MSBs depend on) tend to look more favourably on businesses with established physical premises.

FINTRAC Registration Requirements

Registration with FINTRAC is mandatory before commencing any MSB activity. There is no grace period, no provisional registration, and no volume threshold below which registration becomes optional. Operating an unregistered MSB is a criminal offence under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), carrying fines up to C$2 million and imprisonment up to five years on indictment.

Key facts about FINTRAC registration:

Cost: Free. FINTRAC charges no registration fees.
Process: Pre-registration form → compliance officer contact → full registration form → review → approval → registry listing.
Timeline: Two to six months from initial submission, depending on completeness and current FINTRAC workload.
Validity: Registration is valid for two years. Biennial renewal is required.
Scope: You register for one or more of six MSB activity categories — foreign exchange dealing, money transferring, money orders, virtual currency dealing, crowdfunding platform services, and payment service provider activities. See our permissions overview for details on each category.

Both domestic MSBs and Foreign MSBs (FMSBs) directing services at Canadian clients must register. For foreign entities, see our FMSB guide.

For a detailed walkthrough of each registration step, see our FINTRAC registration guide.

Compliance Program Requirements

FINTRAC mandates that every registered MSB maintain a documented compliance program with five specific elements. This is not optional, and it is not a formality — FINTRAC actively examines compliance programs and has significantly increased enforcement in recent years. In Q1 2026 alone, FINTRAC revoked 86 registrations, including 51 in a single day on March 24.

Compliance Officer

Every MSB must designate a named compliance officer responsible for implementing and maintaining the entire compliance program. This person must:

Be at senior management level with the authority to implement changes
Have sufficient knowledge of the PCMLTFA, its regulations, and ML/TF risks relevant to the business
Be documented in writing as the appointed compliance officer
Be the primary point of contact for FINTRAC during registration and examinations

The compliance officer cannot be a figurehead. FINTRAC examinations evaluate whether the designated officer has genuine operational involvement. A compliance officer who cannot explain the business’s risk assessment or describe monitoring procedures will trigger examination failures.

Written AML/ATF Policies and Procedures

Your MSB must maintain written policies and procedures covering every obligation under the PCMLTFA and its regulations. These must address:

Client identification and verification procedures
Transaction monitoring methodology
Reporting procedures (STRs, LCTRs, EFTRs, LVCTRs, TPRs)
Record-keeping requirements
Sanctions screening processes
PEP (Politically Exposed Persons) screening
Procedures for each MSB service category offered

Policies must be current, reflect actual operations, and be reviewed whenever the business model changes. FINTRAC examinations test whether policies are implemented in practice — not just whether they exist on paper. Boilerplate compliance manuals downloaded from the internet will not pass examination.

Risk Assessment

Every MSB must conduct and document a risk assessment specific to its ML/TF exposure. The assessment must consider:

Products and services offered
Client types and risk profiles
Geographic risk (jurisdictions served, correspondent relationships)
Delivery channels (in-person, online, agent-based)
Third-party relationships and reliance

The risk assessment is not a one-time exercise. It must be reviewed and updated periodically — at minimum when new products are launched, new jurisdictions are served, or the client base changes materially. The intensity of your monitoring and due diligence obligations is driven directly by your risk assessment findings: higher-risk areas require enhanced measures.

Ongoing Training Program

All staff involved in MSB activities must receive AML/ATF training. The training must cover:

How to recognise indicators of suspicious transactions
Reporting obligations and internal escalation procedures
Sanctions screening obligations
Business-specific procedures and controls
Changes to regulations or FINTRAC guidance

Training must be documented — who received it, when, and what was covered. It is not a one-time onboarding requirement; regular refresher training is mandatory. FINTRAC expects training records to be available upon request during examinations.

Effectiveness Review (Two-Year Cycle)

Every two years, your MSB must conduct an independent review of its compliance program. “Independent” means the reviewer cannot be the compliance officer or anyone who implemented the program being reviewed. Best practice is to engage an external third-party reviewer with AML/ATF expertise.

The review must assess:

Whether policies and procedures are being followed in practice
Whether the risk assessment remains current and appropriate
Whether training is adequate and documented
Whether reporting obligations are being met
Whether any gaps or deficiencies exist

Results must be documented and acted upon. Identified gaps must be addressed with specific remediation plans and timelines. FINTRAC examinations will review effectiveness review reports and may follow up on whether identified issues were resolved.

Know Your Customer (KYC) Requirements

Client Identification and Verification

MSBs must verify the identity of individual clients for transactions of C$1,000 or more. Acceptable identification methods include:

Government-issued photo identification (passport, driver’s licence, provincial ID)
Dual-process method (two independent reliable sources where photo ID is not available)

For entity clients (corporations, trusts, partnerships), MSBs must obtain:

Certificate of incorporation or equivalent formation documents
Names of directors and officers
Beneficial ownership information — identifying all natural persons who own or control 25% or more of the entity

Beneficial Ownership of Clients

Determining beneficial ownership is a distinct and critical obligation. For every entity client, you must identify the individuals who ultimately own or control the entity. This applies to corporations, trusts, partnerships, and other legal arrangements.

Since October 2025, MSBs must consult the Corporations Canada beneficial ownership registry for federally incorporated entity clients. This is an ongoing obligation — beneficial ownership information must be kept current throughout the business relationship, not just verified at onboarding.

Ongoing Monitoring

KYC is not a one-time onboarding task. MSBs must continuously monitor business relationships to detect transactions that are inconsistent with the client’s known risk profile. This includes:

Monitoring transaction patterns for anomalies
Periodic review and updating of client information
Enhanced due diligence for high-risk clients — including Politically Exposed Persons (PEPs), clients in high-risk jurisdictions, and any relationship flagged by the risk assessment

Reporting Obligations

Suspicious Transaction Reports (STRs)

MSBs must file an STR with FINTRAC whenever there are reasonable grounds to suspect that a transaction is related to money laundering or terrorist financing. There is no monetary threshold — suspicion alone triggers the obligation at any transaction amount. STRs must be filed “as soon as practicable” after the determination of suspicion.

Quality matters. FINTRAC evaluates STR narratives during examinations and expects detailed, analytical descriptions of why the transaction was deemed suspicious — not template phrases or vague statements.

Large Cash Transaction Reports (LCTRs)

Any cash transaction of C$10,000 or more triggers an LCTR filing obligation. Transactions in cash received within a 24-hour period from the same client must be aggregated — so five separate C$2,500 cash transactions from the same person in one day constitute a C$12,500 reportable transaction.

LCTRs must be submitted to FINTRAC within 15 calendar days of the transaction.

Electronic Funds Transfer Reports (EFTRs)

International electronic funds transfers of C$10,000 or more (or equivalent in foreign currency) require EFTR filing. The same 24-hour aggregation rule applies.

EFTRs must be submitted within 5 business days. The travel rule applies to international EFTs: MSBs must include originator and beneficiary information with the transfer and ensure it accompanies the funds through the payment chain.

Large Virtual Currency Transaction Reports (LVCTRs)

Virtual currency transactions of C$10,000 or more (or equivalent) trigger LVCTR filing. The same aggregation rules and filing timeline as LCTRs apply. LVCTRs were introduced as part of the 2022 virtual currency regulatory enhancements and carry requirements specific to virtual currency — including blockchain transaction identifiers and wallet addresses where available.

Terrorist Property Reports (TPRs)

If an MSB knows or has reasonable grounds to believe that it possesses or controls property owned by a listed terrorist entity or individual, it must immediately report to FINTRAC. There is no suspicion threshold for TPRs — knowledge alone triggers the obligation.

Sanctions Compliance

MSBs must screen clients and transactions against Canadian sanctions lists on an ongoing basis. The applicable sanctions regimes include:

Special Economic Measures Act (SEMA)
United Nations Act
Justice for Victims of Corrupt Foreign Officials Act (Sergei Magnitsky Law)
Any applicable United Nations Security Council sanctions

Sanctions screening must occur at client onboarding, before processing transactions, and periodically against the existing client base when sanctions lists are updated.

Record-Keeping Requirements

All MSB records must be retained for a minimum of five years from the date the record was created. Records must be kept in English or French and be accessible within 30 days of a FINTRAC request.

Specific records that must be maintained include:

Large cash transaction records
Foreign currency exchange records
Virtual currency exchange and transfer records
Electronic funds transfer records (both sending and receiving)
Client identification and verification records
Beneficial ownership records
Compliance program documentation (policies, risk assessments, training logs, effectiveness review reports)
Internal reports and escalation records

Records can be stored electronically, but they must be reproducible in paper form if FINTRAC requests it. Cloud storage is acceptable provided data residency, access, and business continuity requirements are met.

RPAA Registration — The Additional Requirement

Since November 2024, MSBs that perform retail payment functions have been required to register under the Retail Payment Activities Act (RPAA) with the Bank of Canada. This is a separate regulatory layer from FINTRAC — while FINTRAC focuses on AML/ATF obligations, the RPAA addresses operational risk management, safeguarding of end-user funds, and incident response.

Key RPAA facts:

Registration fee: C$2,500 (non-refundable application fee to the Bank of Canada)
Safeguarding requirements in force: Since September 8, 2025, registered PSPs must actively safeguard end-user funds through trust accounts at Schedule I/II banks, credit unions, or trust/loan companies
Annual reporting: Required, with the first reporting deadline of March 31, 2026
Ongoing obligations: Operational risk management framework, incident reporting, annual board-level review of the risk management framework

Not every MSB requires RPAA registration — it depends on whether you “perform a payment function” as defined in the Act. MSBs that only deal in foreign exchange without holding client funds, for example, may be exempt. See our RPAA guide for a detailed analysis of which activities trigger RPAA obligations.

For businesses that need both, a ready-made MSB with RPAA registration included eliminates months of dual applications and the complexity of coordinating compliance with two separate regulators. Contact us for availability.

Quebec Provincial Requirements

Quebec is the only Canadian province that requires a separate provincial MSB licence, issued by Revenu Québec under the Money-Services Businesses Act (MSBA). This requirement applies if your MSB:

Operates from a location in Quebec, OR
Directs services at Quebec residents, even if operating from another province

The Quebec licence is in addition to FINTRAC registration — not a replacement. You need both to legally serve Quebec clients.

Licence issuance depends on security clearance reports from the Sûreté du Québec. The annual licence fee is tiered by transaction volume. Penalties for operating without a Quebec MSB licence range from C$5,000 to C$50,000 for individuals and C$15,000 to C$200,000 for legal persons or entities. Additional penalties apply for failure to meet ongoing disclosure and record-keeping obligations.

Other Canadian provinces require standard business registration but do not impose a separate MSB-specific licensing requirement.

Requirements Summary Checklist

Use this checklist to confirm your MSB meets every requirement before commencing operations:

☐ Canadian legal entity (federal or provincial incorporation)
☐ Canadian resident director(s) per CBCA requirements (if federally incorporated)
☐ Criminal record checks for all 20%+ owners (less than 6 months old)
☐ FINTRAC registration (free, 2–6 months processing time)
☐ Named compliance officer at senior management level
☐ Written AML/ATF policies and procedures
☐ Documented ML/TF risk assessment
☐ Staff training program with records
☐ Independent effectiveness review cycle (every 2 years)
☐ KYC procedures for client identification and verification
☐ Transaction monitoring and reporting systems
☐ Record-keeping systems (5-year retention, English or French)
☐ Sanctions screening capability
☐ RPAA registration with Bank of Canada (if performing payment functions)
☐ Quebec provincial MSB licence (if serving Quebec clients)

Every box on this list is already checked when you purchase one of our ready-made MSBs. All six FINTRAC permission categories — foreign exchange, money transfer, virtual currency, money orders, crowdfunding, and payment services — are active from day one. Browse available inventory, or contact us via WhatsApp, Telegram, email, or phone to discuss your requirements.

Frequently Asked Questions

What are the basic requirements to start an MSB in Canada?

You need a Canadian legal entity, FINTRAC registration (free but takes 2–6 months), a named compliance officer, a written AML/ATF compliance program (policies, risk assessment, training program, and two-year effectiveness review cycle), KYC procedures, transaction monitoring and reporting systems, and record-keeping systems with five-year retention. If your MSB performs retail payment functions, you also need RPAA registration with the Bank of Canada.

Does FINTRAC charge a fee to register an MSB?

No. FINTRAC registration is free. The costs of setting up an MSB come from incorporation, compliance program development, legal and consulting fees, and potentially nominee director services for non-resident owners. RPAA registration, if required, carries a separate C$2,500 application fee payable to the Bank of Canada.

Do I need a Canadian director to register an MSB?

If your MSB is incorporated under the federal CBCA, at least 25% of directors must be resident Canadians (minimum one director if the board has fewer than four). Several provinces — including British Columbia, Ontario, Alberta, and Quebec — have eliminated director residency requirements, making provincial incorporation an alternative for non-resident founders.

What compliance program does an MSB need?

FINTRAC requires five mandatory elements: a designated compliance officer, written AML/ATF policies and procedures, a documented risk assessment, an ongoing training program for all staff involved in MSB activities, and an independent effectiveness review conducted at least every two years. The compliance program must be in place before you submit your FINTRAC registration application.

Do MSBs need to register with the Bank of Canada too?

If your MSB performs retail payment functions — such as holding customer funds, processing payments, or operating e-wallets — you likely need to register under the Retail Payment Activities Act (RPAA) with the Bank of Canada. Registration opened November 1, 2024, and safeguarding requirements have been in force since September 8, 2025. See our RPAA guide for details on which activities trigger this obligation.

Is there a minimum capital requirement for Canadian MSBs?

No. FINTRAC does not impose minimum capital requirements for MSB registration. This is a significant advantage over jurisdictions like the EU, where Electronic Money Institution (EMI) licences require €350,000 in initial capital and Crypto-Asset Service Provider (CASP) authorisation under MiCA requires €50,000–€150,000. However, RPAA registration may require demonstrable safeguarding of end-user funds, which has practical capital implications.

What happens if an MSB doesn’t meet these requirements?

FINTRAC can deny registration, revoke an existing registration, or impose administrative monetary penalties (AMPs). Criminal penalties apply for operating an unregistered MSB — up to C$2 million in fines and five years imprisonment on indictment. In 2026, FINTRAC has significantly escalated enforcement, revoking 86 registrations in Q1 alone. Quebec imposes additional penalties of C$5,000–C$50,000 (individuals) or C$15,000–C$200,000 (entities) for operating without a provincial MSB licence.