FINTRAC, the Financial Transactions and Reports Analysis Centre of Canada, is the country's AML regulator and financial intelligence unit rolled into one. It receives suspicious and threshold reports, supervises reporting entities, and shares intelligence with law enforcement and foreign FIUs.
What is FINTRAC, in plain English?
FINTRAC is Canada's financial intelligence unit and AML supervisor in a single body. On the intelligence side, it receives suspicious-transaction reports, large cash and virtual-currency transaction reports, and other filings, then analyzes them and passes intelligence to police and to foreign FIUs through the Egmont network. On the supervision side, it registers and examines reporting entities and can penalize those that fall short.
Reporting entities under FINTRAC cover a broad sweep: banks, credit unions, money-service businesses, securities dealers, and others. Each must register where required, maintain a compliance program, verify customer identity, keep records, and file the required reports on time and in the right format.
Because FINTRAC both sets the reporting expectations and enforces them, it is the natural first stop for any firm that touches Canada. Its guidance tells you what to file and how, and its penalties tell you what it cares about most right now.
How FINTRAC obligations work
A Canadian reporting entity moves through a predictable set of duties:
- Register — Get on the books. Businesses such as money-service businesses must register with FINTRAC before operating.
- Build — Stand up a program. A compliance program with policies, risk assessment, training, and a designated officer is mandatory.
- Report — File on time. Suspicious, large cash, and virtual-currency transaction reports go to FINTRAC in set formats.
- Examine — Face supervision. FINTRAC reviews programs and can levy administrative monetary penalties for failures.
Who is involved?
Who | Their role |
FINTRAC | Receives and analyzes reports, supervises reporting entities, and shares intelligence. |
Reporting entities | Banks, MSBs, dealers, and others obligated to register, report, and keep records. |
Law enforcement | Consumes FINTRAC intelligence to build money-laundering and terrorist-financing cases. |
Foreign FIUs | Egmont counterparts that exchange intelligence with FINTRAC across borders. |
What it looks like in practice
In practice
A Canadian money-service business notices a customer making a series of cash deposits just under the large-cash reporting threshold, then buying virtual currency and sending it abroad. Structuring plus rapid conversion looks like layering, so the compliance officer files a suspicious-transaction report and, where thresholds are met, the corresponding large-transaction reports.
Some months later FINTRAC opens an examination and reviews the firm's compliance program, its risk assessment, and a sample of filings. Because the firm registered properly, filed on time, and documented its reasoning, the examination finds gaps to fix rather than grounds for a penalty, and the officer can point to the structuring case as evidence the program works.
Why FINTRAC matters to operators
If your business touches Canada, FINTRAC obligations are not optional, and the details matter. Late filings, wrong formats, or a missing risk assessment are exactly the kinds of failures that draw administrative monetary penalties, and the penalties are public. Watching where FINTRAC has recently penalized firms tells you which parts of a Canadian program to shore up first.
FINTRAC's guidance and typology publications are also a strong read on current Canadian supervisory priorities. As with other national FIUs, understanding what your supervisor expects and where it has been active lets you aim monitoring and controls at the risks it is chasing rather than guessing.
What to watch
- Registration status. Operating a reportable business without registering is a basic, costly failure; confirm your status first.
- Filing timeliness and format. Reports must be on time and in the prescribed format; technical errors are common penalty grounds.
- Virtual-currency reporting. Large virtual-currency transaction reporting is an active area; make sure your controls capture it.
- Compliance-program completeness. A missing or stale risk assessment or training record is a frequent examination finding.
- Published penalties. FINTRAC names penalized firms and reasons; use them to spot the gaps most likely in your own program.
Quick questions
Is FINTRAC a regulator or an FIU?
Both. It supervises reporting entities for AML compliance and serves as Canada's financial intelligence unit, receiving and analyzing reports. That combined role mirrors how FinCEN works in the US.
Who has to report to FINTRAC?
A broad set of reporting entities including banks, credit unions, money-service businesses, securities dealers, and others. Requirements vary by sector, so each business must check which obligations apply to it.
What reports does FINTRAC receive?
Suspicious-transaction reports, large cash transaction reports, large virtual-currency transaction reports, and certain others such as terrorist-property reports. Each has its own trigger, threshold, and format.
What is an administrative monetary penalty?
It is a financial penalty FINTRAC can impose for non-compliance, such as late filings or a deficient program. These penalties are published, which is why they signal supervisory priorities.
Does FINTRAC share information internationally?
Yes. Through the Egmont Group it exchanges intelligence with foreign FIUs, so a report on a cross-border flow can reach the counterpart working the same network.
How is FINTRAC different from FATF?
FATF sets global standards and evaluates countries. FINTRAC is a national body that supervises real Canadian firms and receives their filings, implementing standards that ultimately trace back to FATF.