For Canadian reporting entities, understanding FINTRAC isn't optional homework. It's the difference between a defensible compliance program and a costly, public examination outcome.
This guide covers what FINTRAC is, who has to report to it, what your core compliance obligations look like, and what happens when things go wrong. We'll also walk through how to prepare for an examination before one lands on your desk.
Key Takeaways
- FINTRAC is Canada's financial intelligence unit and AML/CFT regulator, established in 2000 under the PCMLTFA
- FINTRAC collects intelligence reports (STRs, LCTRs, EFTRs) and directly supervises and examines reporting entities
- Non-compliance can trigger administrative monetary penalties, public disclosure, and lasting reputational damage
- Reporting entities need AML programs that operate effectively in practice under real conditions
What Is FINTRAC and What Does It Do?
FINTRAC — the Financial Transactions and Reports Analysis Centre of Canada — is Canada's financial intelligence unit and its anti-money laundering/anti-terrorist financing supervisor. It operates under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, reporting to the Minister of Finance, who answers to Parliament.
FINTRAC wears two hats:
- Intelligence analyst: collecting reports from businesses and turning them into actionable intelligence for police and national security agencies
- Regulator: auditing and examining reporting entities to confirm they're meeting their PCMLTFA obligations
FINTRAC's Place in the Wider System
FINTRAC doesn't operate alone. It's part of the Egmont Group of financial intelligence units (joined in 2002) and contributes to FATF's global policy work; Canada has been a FATF member since the task force was founded in 1989.
Domestically, FINTRAC works with law-enforcement and national-security partners and other federal authorities, including:
- RCMP on criminal investigations and related cooperation
- CBSA on cross-border reporting and border-related matters
- OSFI on prudential oversight of federally regulated financial institutions
FINTRAC is Canada's financial intelligence unit and AML/ATF supervisor under the PCMLTFA. It collects and analyzes financial intelligence and supervises reporting entities. It is not a criminal law-enforcement agency; investigation and prosecution sit with law-enforcement and prosecutorial authorities. Do not confuse FINTRAC's supervisory and intelligence roles with partner mandates.
That dual structure (supervisor and intelligence hub) is why practitioner-level insight matters in practice. AlphaDelta's advisory work draws on practical Canadian regulatory and program experience, which shows how FINTRAC actually evaluates programs, not just how the guidance reads on paper.
Who Must Report to FINTRAC?
Which Businesses Are Reporting Entities
FINTRAC's obligations reach far beyond banks. Reporting entities include:
- Banks, credit unions, and trust and loan companies
- Securities dealers
- Money services businesses (MSBs), including foreign MSBs
- Real estate brokers, sales representatives, and developers
- Mortgage administrators, brokers, and lenders
- Casinos
- Life insurance companies, brokers, and agents
- Dealers in precious metals and stones
- Accountants and accounting firms
Obligations vary considerably by sector. A casino's reporting duties look different from a mortgage broker's, and a securities dealer faces different thresholds than a real estate developer. Each sector has its own guidance tailored to how money moves through that business.
What Transactions Are Reported to FINTRAC?
Reporting entities file several main types of reports, including:
- Suspicious Transaction Reports (STRs) — filed when there are reasonable grounds to suspect money laundering, terrorist financing, or sanctions evasion. No dollar threshold applies. File as soon as practicable after the reporting entity has completed the measures that enable it to establish reasonable grounds to suspect (FINTRAC STR guidance).
- Large Cash Transaction Reports (LCTRs) — cash receipts of $10,000 or more (including 24-hour aggregation where applicable), within the applicable FINTRAC deadline (commonly described as within 15 calendar days).
- Large Virtual Currency Transaction Reports (LVCTRs) — virtual currency of $10,000 or more where the obligation applies, within the applicable FINTRAC deadline (commonly within 5 working days).
- Electronic Funds Transfer Reports (EFTRs) — international transfers of $10,000+ where applicable, within the applicable FINTRAC deadline (commonly within 5 working days).
- Listed Person or Entity Property Reports — when property of a listed person or entity is identified; timing follows the applicable listed-property rules (distinct from the STR "as soon as practicable" standard).
| Report type | Typical threshold | Timing (current FINTRAC framing) |
|---|---|---|
| STR | None (reasonable grounds to suspect, including sanctions evasion where applicable) | As soon as practicable after measures establishing reasonable grounds to suspect are complete |
| LCTR | $10,000+ cash (plus aggregation rules) | Applicable FINTRAC deadline (often within 15 calendar days) |
| LVCTR | $10,000+ virtual currency where applicable | Applicable FINTRAC deadline (often within 5 working days) |
| EFTR | $10,000+ international EFT where applicable | Applicable FINTRAC deadline (often within 5 working days) |
| Listed property | No amount threshold | Per listed-person/entity property reporting rules |
The $10,000 threshold rule for certain report types includes 24-hour aggregation where FINTRAC's rules require it for the same reportable type and applicable aggregation basis.
Since August 2024, the STR requirement has expanded to cover transactions suspected of being tied to sanctions evasion — a meaningful widening of scope that many compliance programs haven't fully adjusted for yet.
Core Compliance Obligations Under FINTRAC
Under FINTRAC's compliance-program guidance, reporting entities must implement a compliance program that includes these five prescribed elements (FINTRAC compliance program requirements):
- Appoint a compliance officer.
- Develop and apply written compliance policies and procedures and keep them current.
- Assess and document money-laundering, terrorist-financing and applicable sanctions-evasion risks, including prescribed considerations.
- Develop and maintain a written, ongoing compliance training program.
- Institute and document a plan to review the effectiveness of the compliance program at least every two years.
Operational obligations such as client identification, record-keeping, monitoring and transaction reporting remain important in practice; they are not substitutes for these five prescribed compliance-program elements.
The Effectiveness Review Requirement
FINTRAC requires reporting entities to conduct an effectiveness review at least every two years. The next review must start no later than 24 months from the start of the previous one, and one review must finish before the next begins. This review has to test whether the program actually works, not just whether it exists.
That distinction matters. Many programs fail examinations not because policies are missing, but because documented policy and actual practice have drifted apart.
FINTRAC's own 2024–25 annual report notes that financial entities accounted for most voluntary non-compliance declarations related to reports simply not being filed. That gap between what policy requires and what happens on the ground is what examiners look for.
Entities approaching or overdue for an effectiveness review need an independent, evidence-based assessment of where that gap exists. AlphaDelta focuses on that assessment through document review, interviews, and evidence-based testing such as file sampling and walkthroughs, not a checkbox pass over the policy binder.
What Happens If You Don't Comply With FINTRAC?
FINTRAC's enforcement toolkit centres on administrative monetary penalties (AMPs), and recent numbers show the scale has changed dramatically.
The largest AMP on record, $176,960,190 against a virtual-currency MSB, was imposed in October 2025 for 2,593 contraventions spanning six violation types. That penalty is currently under appeal to Federal Court where that status applies, but it signals how seriously FINTRAC is now weighing systemic failures.
Not every penalty sits in that territory. Recent published notices show a much wider range:
| Entity | Penalty | Violations |
|---|---|---|
| A virtual-currency MSB (under appeal to Federal Court where that status applies) | $176,960,190 | 2,593 |
| A Canadian lottery/gaming reporting entity | $212,025 | 3 |
| A Canadian real estate reporting entity | $33,000 | 1 |
FINTRAC now publishes penalty notices publicly, and they stay on its website for five years. That means the reputational cost often outlasts the financial one: clients, partners, and regulators can all see exactly who was penalized and why.
In FINTRAC's 2024–25 fiscal year alone, it issued 23 Notices of Violation totaling more than $25 million. It also disclosed 32 non-compliance cases to law enforcement for possible criminal investigation.
One pattern shows up consistently in examinations: entities with documented, defensible reasoning behind their decisions tend to receive lighter outcomes than those with weak or absent records. A program that can explain why it made a call, backed by evidence, fares far better than one that simply asserts compliance.
Preparing for a FINTRAC Examination
A FINTRAC examination typically reviews:
- Your documented business risk assessment
- Policies and procedures, including senior-officer sign-off
- Training records and delivery evidence
- Sample transaction filings and supporting documentation
- Governance records, including the compliance officer's authority and reporting lines
Examination readiness isn't something you build in the final weeks before FINTRAC arrives. It reflects the regulatory posture your organization has maintained for months, sometimes years.
Examiners test operational reality against documented policy, interview staff, and expand sampling when they find issues. Gaps tend to surface quickly.
Entities in examination benefit from senior guidance on strategy, examiner correspondence, and structured response planning—especially when that guidance comes from people who have sat on both sides of the table.
AlphaDelta's practitioners bring direct regulatory examination experience, including work as an IIROC (now CIRO) examiner and enterprise AML program ownership. That background shapes how findings get interpreted, tested, and defended under scrutiny.
Frequently Asked Questions
What is FINTRAC and what does it do?
FINTRAC is Canada's financial intelligence unit and AML/CFT supervisor. It analyzes reports from businesses to detect money laundering and terrorist financing, and examines reporting entities for PCMLTFA compliance.
What transactions are reported to FINTRAC?
The main report types are Suspicious Transaction Reports (STRs), Large Cash Transaction Reports, Large Virtual Currency Transaction Reports, and Electronic Funds Transfer Reports. Most carry a $10,000 threshold, except STRs, which have none. STRs have no dollar threshold and must be filed as soon as practicable after the reporting entity has completed the measures that enable it to establish reasonable grounds to suspect.
What happens if I don't comply with FINTRAC?
Non-compliance can trigger administrative monetary penalties, which have reached over $176 million in the most severe case. FINTRAC also publishes penalty notices publicly and can refer serious cases to law enforcement.
How often must reporting entities complete an effectiveness review?
FINTRAC requires effectiveness reviews at least every two years, with each new review starting no later than 24 months after the previous one began.
Is FINTRAC a regulator or a financial intelligence unit?
It's both. FINTRAC analyzes financial intelligence and supervises reporting entities directly, similar in structure to how FinCEN operates in the United States.
How is FINTRAC different from FATF?
FATF sets global AML/CFT standards and assesses how countries implement them. FINTRAC is Canada's domestic supervisor, enforcing those standards through the PCMLTFA within Canada.
