MSB vs PSP in Canada: What’s the Difference and Which Registration Do You Need?

April 12, 2026

Canada now has two mandatory financial registrations for payment and money services companies — and if you’re entering this market, there’s a good chance you need both.

Since September 2025, the Bank of Canada actively supervises Payment Service Providers (PSPs) under the Retail Payment Activities Act (RPAA), while FINTRAC continues to oversee Money Services Businesses (MSBs) under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA). These are separate frameworks with different regulators, different compliance obligations, and different penalties for non-compliance.

Getting this distinction wrong doesn’t just create compliance headaches — it means operating illegally. In Q1 2026 alone, FINTRAC revoked 86 MSB registrations for compliance failures. The Bank of Canada is ramping up its own supervisory activities with the first annual PSP reports due March 31, 2026.

This guide breaks down what each registration covers, who needs which, how they compare on cost and timeline, and when you need both. If you’re a fintech, remittance operator, crypto exchange, or payment processor considering the Canadian market, this is the comparison you need before making any licensing decisions.

Need an MSB now? Our ready-made MSBs come with all permission categories and full compliance programs — available immediately while you navigate the broader regulatory landscape.

What Is a Money Services Business (MSB)?

A Money Services Business is any person or entity that provides specific financial services to the public in or from Canada. MSBs are registered with and regulated by FINTRAC — the Financial Transactions and Reports Analysis Centre of Canada — under the PCMLTFA.

MSB Activities

FINTRAC recognizes the following MSB activity categories:

Foreign exchange dealing — buying or selling foreign currencies (details)
Money transferring — remitting or transmitting funds by any means (details)
Issuing or redeeming money orders — including similar negotiable instruments (details)
Dealing in virtual currencies — operating a crypto exchange or providing virtual currency transfer services (details)
Crowdfunding platform services — operating platforms that facilitate crowdfunding (details)
Payment services — invoice payment and merchant settlement services that involve touching client funds (details)

For a full overview of all MSB permission categories, see our permissions guide.

Who Needs MSB Registration?

Anyone providing these services to the public in Canada or from Canada — including foreign entities serving Canadian clients — must register with FINTRAC as an MSB or Foreign MSB (FMSB). There is no registration fee charged by FINTRAC, and MSB registration is valid for two years before renewal is required.

For a detailed walkthrough of the FINTRAC registration process, see our FINTRAC registration guide.

What Is a Payment Service Provider (PSP)?

A Payment Service Provider is any entity that performs retail payment activities for end users in Canada. PSPs are registered with and regulated by the Bank of Canada under the Retail Payment Activities Act (RPAA), which came into force in stages between November 2024 and September 2025.

Retail Payment Activities Under the RPAA

The RPAA defines five retail payment functions that trigger PSP registration:

Holding funds on behalf of an end user
Maintaining payment accounts for end users
Initiating electronic fund transfers (EFTs) at the request of an end user
Authorizing or facilitating EFTs — acting as an intermediary in the electronic payment chain
Providing clearing or settlement services for electronic fund transfers

Who Needs PSP Registration?

Any entity that performs one or more of these retail payment functions for an end user in Canada must register with the Bank of Canada. The registration application fee is $2,500 (non-refundable, no GST/HST), and registered PSPs also pay ongoing annual assessment fees calculated by formula based on size and supervisory costs.

Since September 8, 2025, PSPs must comply with all RPAA operational requirements — including risk management frameworks and end-user fund safeguarding — not just registration itself.

For a complete guide to dual MSB + PSP registration, see our RPAA + MSB guide.

MSB vs PSP: Key Differences at a Glance

Feature	MSB (FINTRAC)	PSP (Bank of Canada)
Governing law	PCMLTFA	RPAA
Regulator	FINTRAC	Bank of Canada
Primary focus	Anti-money laundering / counter-terrorist financing (AML/CTF)	Operational risk management & consumer protection
Activities covered	FX dealing, money transfer, money orders, virtual currency, crowdfunding, payment services	Holding funds, payment accounts, EFT initiation, EFT authorization, clearing/settlement
Registration fee	Free	$2,500 (non-refundable)
Registration timeline	3–4 months from scratch	6–12 months
Registration validity	2 years (must be renewed)	Ongoing — no expiry, continuous compliance
Key compliance obligations	5 AML pillars, KYC/CDD, STR/LSTR reporting, record-keeping	Risk management framework, fund safeguarding, incident management, annual reporting
Maximum penalties	$20M per very serious violation (Bill C-12)	Compliance orders, AMPs, registration revocation

Understanding the Core Distinction

The fundamental difference is what each registration is designed to protect against.

MSB registration exists to prevent money laundering and terrorist financing. The entire compliance framework revolves around knowing your customers (KYC), monitoring transactions for suspicious activity, and reporting to FINTRAC. The question at the heart of MSB compliance is: who are you dealing with and where is the money going?

PSP registration exists to protect consumers and ensure operational resilience in the payments ecosystem. The compliance framework focuses on safeguarding customer funds, managing operational risks, responding to incidents, and maintaining the integrity of payment systems. The question at the heart of PSP compliance is: how safe is your system and are end-user funds protected?

These are complementary frameworks, not competing ones. They address different risks in the same business — which is precisely why most payment companies need both.

Do You Need an MSB Registration, PSP Registration, or Both?

The simple rule: every PSP is almost certainly also an MSB, but not every MSB is a PSP.

If your business involves both MSB activities (handling foreign exchange, transferring money, dealing in virtual currency) and retail payment functions (holding customer funds, processing electronic transfers), you need registrations with both FINTRAC and the Bank of Canada. Neither registration exempts you from the other — they are independently required.

Real-World Scenarios

Remittance company — You transfer funds internationally for clients. You’re an MSB (money transfer activity). If you also hold client funds or initiate electronic fund transfers, you’re a PSP too. Verdict: Both registrations required.

Crypto exchange — You deal in virtual currencies and hold customer funds on your platform. You’re an MSB (virtual currency dealing). Since you hold funds and facilitate EFTs, you’re also a PSP. Verdict: Both registrations required.

Physical currency exchange bureau — You buy and sell foreign currencies at a physical location. You’re an MSB (foreign exchange dealing). If you don’t hold client funds electronically or initiate EFTs, you may not need PSP registration. Verdict: MSB only (unless you add electronic payment services).

Payment processor / gateway — You process electronic payments for merchants. You’re a PSP (EFT authorization/facilitation). Under FINTRAC’s expanded interpretation, you also likely qualify as an MSB since you touch client funds. Verdict: Both registrations required.

Not sure which registrations you need? Book a consultation — we’ll map your business activities to the correct registrations and explain exactly what’s required.

MSB vs PSP Compliance Obligations

MSB Compliance (FINTRAC)

Every registered MSB must maintain a compliance program built on five mandatory pillars:

Compliance officer — a designated person responsible for the program
Written compliance policies and procedures — covering all AML/CTF obligations
Risk assessment — identifying and mitigating money laundering and terrorist financing risks
Ongoing training program — keeping staff educated on obligations and red flags
Two-year effectiveness review — independent testing of the compliance program’s performance

On top of the structural requirements, MSBs must conduct KYC and customer due diligence (CDD) on all clients, monitor transactions for suspicious activity, file Suspicious Transaction Reports (STRs) and Large Cash Transaction Reports (LCTRs), report electronic fund transfers over $10,000, and maintain records for at least five years.

Bill C-12 changes everything. Following Royal Assent on March 26, 2026, FINTRAC now wields significantly increased penalty powers. Maximum administrative monetary penalties have increased 40 times over previous amounts: up to $40,000 for minor violations, $4 million for serious violations, and $20 million for very serious violations. All compliance program-related requirements — including risk assessments and effectiveness reviews — are now classified as “very serious” violations. Compliance programs must be “reasonably designed, risk-based and effective.”

For full details on MSB compliance, see our AML compliance guide and compliance program breakdown.

PSP Compliance (Bank of Canada)

Registered PSPs must comply with a separate set of operational requirements that became mandatory on September 8, 2025:

Risk management framework — establish, implement, and maintain a framework to identify, assess, and mitigate operational risks, including cybersecurity threats
End-user fund safeguarding — hold client funds in trust accounts, segregated accounts with insurance, or backed by guarantees. Funds must be protected in the event of the PSP’s insolvency
Incident management and reporting — notify affected end users, other PSPs, and the Bank of Canada of any incident that could significantly affect them
Annual reporting — submit annual compliance reports to the Bank of Canada (first reports were due March 31, 2026)
Security measures — maintain appropriate security controls for payment systems and infrastructure
Recordkeeping — keep all information current on the Bank of Canada’s online portal and respond promptly to regulatory information requests

For more on PSP compliance alongside MSB obligations, see our RPAA + MSB dual registration guide.

The Key Takeaway

MSB compliance asks: who are you dealing with? PSP compliance asks: how safe is your system? Operating a payment business in Canada means satisfying both regulators that you’ve answered both questions.

Registration Costs and Timelines: MSB vs PSP

MSB Registration

From scratch: FINTRAC charges no registration fee, but building a compliant MSB from the ground up takes 3–4 months. This includes developing a full AML/CTF compliance program, completing the risk assessment, training staff, and preparing and submitting the application. The total cost depends on the complexity of your business and whether you engage a compliance consultant.

Ready-made MSB: A ready-made (shelf) MSB is available immediately. It comes with an active FINTRAC registration, all permission categories, and a complete compliance program. This is the fastest path to operating legally in Canada.

For a detailed cost analysis, see our MSB costs breakdown and registration vs ready-made cost comparison.

PSP Registration

PSP registration with the Bank of Canada costs $2,500 upfront (non-refundable application fee), and the process typically takes 6–12 months. Once registered, PSPs pay annual assessment fees based on size and the Bank of Canada’s supervisory costs. Beyond the registration itself, building the required compliance infrastructure — risk management framework, fund safeguarding arrangements, incident response protocols — represents a significant additional investment.

For a detailed look at registration timelines, see our MSB registration timeline guide.

The Cost Equation

MSB registration is faster and cheaper. PSP registration requires more time and investment but is non-negotiable for businesses performing retail payment activities. The practical question isn’t which one is more affordable — it’s how to get both done as efficiently as possible.

Skip the 3–4 month MSB wait. Our ready-made MSBs are registered, compliant, and available now — view current inventory.

Start With a Ready-Made MSB While You Apply for PSP Registration

Here’s the smart strategy: since PSP registration takes 6–12 months and you need your MSB in place first, start with a ready-made MSB from canada-msb.com and use the time you save to focus on your PSP application.

A ready-made MSB from us includes:

All permission categories — foreign exchange, money transfer, money orders, virtual currency, crowdfunding, and payment services
Complete AML/CTF compliance program — all five pillars, ready to operate
Active FINTRAC registration — in good standing, transferable to your ownership
Optional RPAA registration — our MSB + RPAA packages include Bank of Canada registration for businesses that need both from day one

This approach gives you legal authority to operate MSB activities immediately while you work through the longer PSP registration process. And with our ongoing compliance support, you’re not left figuring out the regulatory landscape alone.

For businesses that need both MSB and PSP registration, our MSB + RPAA packages are the ultimate solution — full FINTRAC and Bank of Canada coverage in a single purchase.

Frequently Asked Questions: MSB vs PSP in Canada

What is the difference between MSB and PSP in Canada?

An MSB (Money Services Business) is registered with FINTRAC under the PCMLTFA and focuses on anti-money laundering compliance for activities like foreign exchange dealing, money transfer, and virtual currency dealing. A PSP (Payment Service Provider) is registered with the Bank of Canada under the RPAA and focuses on operational risk management and consumer protection for electronic payment activities. They are separate registrations governed by different regulators — most payment companies in Canada need both.

Do I need both MSB and PSP registration in Canada?

In most cases, yes. If your business involves MSB activities (forex, money transfer, virtual currency) and retail payment functions (holding funds, processing electronic transfers), you must register with both FINTRAC and the Bank of Canada independently. Neither registration exempts you from the other. The common rule: every PSP is almost certainly also an MSB.

How much does MSB vs PSP registration cost in Canada?

MSB registration with FINTRAC is free — there is no application or renewal fee. PSP registration with the Bank of Canada costs $2,500 (non-refundable application fee) plus ongoing annual assessment fees. Both registrations require significant investment in compliance infrastructure, though MSB is substantially less expensive and faster overall.

How long does it take to register as an MSB vs PSP in Canada?

MSB registration from scratch takes approximately 3–4 months, including compliance program development and FINTRAC application processing. PSP registration with the Bank of Canada takes 6–12 months. A ready-made MSB eliminates the MSB timeline entirely — it’s available immediately with full compliance and all permissions.

Can I operate as a payment company in Canada with only an MSB?

An MSB registration alone is not sufficient if you perform retail payment activities covered by the RPAA. Since September 8, 2025, all PSPs must be registered with the Bank of Canada and comply with operational requirements including fund safeguarding and risk management. Operating without required PSP registration is a regulatory violation that can result in enforcement action.

What happens if I have MSB but not PSP registration?

If your business performs retail payment activities requiring PSP registration and you only hold MSB registration, you are operating in violation of the RPAA. The Bank of Canada can impose administrative monetary penalties, issue compliance orders, or revoke your registration. Separately, FINTRAC can take its own enforcement action if your MSB compliance is deficient — with penalties now reaching $20 million per very serious violation under Bill C-12.

Take the Next Step

Understanding the MSB vs PSP distinction is the first step. Acting on it is what separates compliant businesses from those facing enforcement action.

Whether you need an MSB, a PSP registration, or both, we can help you get there faster:

Ready-made MSBs — all permissions, full compliance, available now → View inventory
MSB + RPAA packages — dual registration for businesses that need both → Learn more
Compliance consulting — ongoing AML/CTF and RPAA support → Our services

Contact us today:

WhatsApp / Telegram: Contact directly
Email: Get in touch
Phone: Call us
Book a consultation: Schedule a call