FINTRAC Obligations in Ontario: Which Businesses Must Report and Why

If you've heard the term "FINTRAC" and wondered whether it applies to you, you're not alone. Many Ontario business owners assume anti-money laundering rules are something only banks worry about — until they open a business in currency exchange, real estate, insurance, or another regulated sector and discover they have FINTRAC obligations of their own.

FINTRAC — the Financial Transactions and Reports Analysis Centre of Canada — is the federal agency that collects and analyzes financial information to help detect and deter money laundering and terrorist financing. It doesn't regulate every business. But for the sectors it does cover, the obligations go well beyond a form you file once; they typically mean building and running an ongoing compliance program.

This article explains, at a general level, which kinds of Ontario businesses tend to have FINTRAC obligations, what those obligations usually involve, and what to do if you're not sure whether your business is one of them.

What FINTRAC Does and Why It Regulates Certain Businesses

FINTRAC is Canada's financial intelligence unit. Businesses in specified sectors — generally called "reporting entities" under the federal anti-money laundering framework built around the Proceeds of Crime (Money Laundering) and Terrorist Financing Act and its regulations — are required to register where applicable, verify certain clients' identities, keep records, and report specified kinds of activity to FINTRAC. FINTRAC analyzes that information and, where warranted, shares it with law enforcement and national security agencies.

The underlying logic is that money laundering and terrorist financing tend to move through a predictable set of business types, so the law places compliance duties on those business types rather than on every business in the economy.

Which Types of Businesses Typically Have FINTRAC Obligations

Federal anti-money laundering law identifies a defined list of sectors as reporting entities. Businesses commonly caught include:

• Financial entities — banks, credit unions, and similar institutions.
• Money services businesses (MSBs) — currency exchange, funds transfer or remittance services, and businesses dealing in virtual currency.
• Securities dealers and other regulated capital markets participants.
• Life insurance companies, brokers, and agents.
• Casinos.
• Real estate brokerages, brokers, and sales representatives, and in some circumstances real estate developers.
• Dealers in precious metals and stones, for certain qualifying activity.
• Several other federally regulated financial and money-services categories.

Because this is federal legislation, the obligations attached to a given sector are the same across Canada — an Ontario business in one of these categories carries the same underlying duties as an equivalent business anywhere else in the country. The list of covered sectors, and the details for each, has been expanded more than once in recent years, so don't assume a sector is (or isn't) covered based on something you read a while ago — confirm your current status directly.

What Being a "Reporting Entity" Usually Involves

If your business falls into a regulated category, obligations generally include:

1. Registration, where your sector requires it — most notably, money services businesses must register with FINTRAC before operating.
2. A written compliance program, including a designated compliance officer, written policies and procedures, a risk assessment of your business, and ongoing staff training.
3. Client identification and verification in defined circumstances — before certain transactions, or before establishing an ongoing business relationship.
4. Record-keeping of client identification information and transaction records for a set retention period.
5. Reporting specified transactions to FINTRAC as they arise — for example, certain large transactions, electronic funds transfers, or activity your business has reasonable grounds to suspect is connected to money laundering or terrorist financing.
6. Periodic review of the compliance program's effectiveness.

Exact thresholds, forms, and retention periods are set out in FINTRAC's own guidance and the underlying regulations and are adjusted from time to time. This article deliberately doesn't quote specific dollar figures or day-counts — verify the current requirement for your sector directly with FINTRAC or a lawyer before relying on a number you find elsewhere.

What Happens If a Business Doesn't Comply

Non-compliance can lead to administrative monetary penalties and, in serious cases, referral for investigation and prosecution under federal law. Beyond direct legal exposure, businesses found to be operating without required registration or a functioning compliance program often face real friction with banks, insurers, and business partners who expect to see evidence of compliance before they'll do business with you.

Practical Next Steps

• [ ] Identify honestly whether your business's actual activity — not just its industry label — falls within a FINTRAC-regulated category.
• [ ] Register with FINTRAC where your sector requires it, before you begin operating.
• [ ] Build (or have a lawyer or compliance professional help you build) a written compliance program scaled to your business's size and risk.
• [ ] Revisit your FINTRAC status whenever your business model changes — a new service line can move you into a regulated category without you realizing it.

Frequently asked questions