Money Services Business (MSB) — is a financial business that provides currency exchange, money transfer, issuance of money instruments, and cryptocurrency transactions. MSB companies are required to comply with the Proceeds of Crime (Money Laundering) and Terrorist Financing Act to help combat financial crime in Canada.
Before starting operations in Canada, you must register your business with FINTRAC, even if you already have a provincial license. FINTRAC does not charge registration fees; however, the process requires strict compliance with documentary requirements and the presence of a compliance program.
Currency exchange includes transactions in which one type of currency is exchanged for another, for example, U.S. dollars for Canadian dollars. In addition to classic fiat currency exchange, MSB registration is required for domestic and international money transfer services, issuance of traveler’s checks and money orders, as well as virtual currency operations — exchanging or trading cryptocurrencies.
Any transactions involving digital assets exceeding 10,000 Canadian dollars require reporting, in line with FATF recommendations. Cryptocurrency exchanges, OTC platforms, and cryptoasset transfer services fall under the same MSB compliance regime as traditional currency exchangers.
MSB requires a physical presence in Canada — an office and local representatives acting on your behalf, whereas FMSB is intended for a foreign business that provides services to Canadians. The key difference is the company’s place of registration and the presence of an office on Canadian territory.
Both types must register and comply with the same AML obligations; however, foreign MSBs must appoint a local agent in Canada. When choosing between MSB and FMSB, a business should consider its operating model, access to banking services, and long-term development plans in the Canadian market. MapleBiz helps assess the optimal registration type depending on the business model and client geography.
MSB registration — is only the initial stage. Ongoing compliance with KYC requirements, accurate reporting to FINTRAC, and a transaction monitoring system determine whether the business can avoid major fines and maintain banking relationships.
Customer identification must be verified for any cash transaction of 10,000 Canadian dollars or more, which is absolutely necessary for FINTRAC compliance and preventing money laundering. The 24-hour rule requires that multiple cash transactions totaling 10,000 dollars or more within 24 hours be treated as a single transaction, so even smaller transactions require verification once the threshold is reached.
The growth of cryptocurrency has made identity verification necessary in virtual currency transactions — any virtual currency transaction over 10,000 dollars requires verification. Verification methods include checking government-issued photo ID, using a credit file that has existed for at least three years, or a dual process with multiple data sources.
A common mistake is underestimating the risk of repeated transactions just below the threshold. If a client regularly conducts transactions of 9,500 dollars, this may indicate intentional avoidance of reporting, known as structuring.
A suspicious transaction report is a type of report that must be submitted to FINTRAC when a financial transaction occurs or is attempted in the course of your business and there are reasonable grounds to suspect that the transaction is related to money laundering or terrorist financing. It is important to understand: a suspicious transaction has no threshold — you must report even a 1,000-dollar transaction if it raises suspicion.
MSBs must submit reports to FINTRAC, including suspicious transaction reports (STR), large cash/virtual currency transaction reports (from 10,000 Canadian dollars), electronic funds transfer reports (from 10,000 Canadian dollars), and terrorist property reports (TPR). The need to maintain detailed records of clients, transactions, and other data forms the basis of effective MSB compliance.
A copy of each report submitted to FINTRAC must be kept for at least 5 years after the day it is filed, and MSB companies must retain a record of a large cash transaction when receiving 10,000 dollars or more in cash. For foreign MSBs, this applies when receiving funds from a person or legal entity in Canada.
Xeltox Enterprises Ltd. (Cryptomus) received a fine of 176.9 million dollars — the largest in Canadian AML history, for failing to report more than 2,500 large virtual currency transactions and 1,000+ suspicious transactions, lacking a written compliance program, and failing to notify FINTRAC of changes to MSB registration.
Peken Global Limited (KuCoin) was fined 19.5 million dollars for operating as an unregistered foreign MSB in Canada. These cases show that the absence of a basic compliance program, a designated officer, and an automated reporting system leads to catastrophic consequences.
FINTRAC inspections focus not only on the existence of policies, but also on their practical implementation. MapleBiz specialists help build a functioning compliance system that can withstand a regulatory audit.
An anti-money laundering and counter-terrorist financing program is not an optional document, but a functional risk management system that must be tailored to the specifics of the business.
The compliance officer must be appointed at the MSB registration stage, preferably with experience in the financial sector. This person bears personal responsibility for implementing and updating AML/KYC policies, staff training, transaction monitoring, and interaction with FINTRAC.
The designated anti-money laundering officer must be knowledgeable, keep up with evolving regulations, and have real authority. A common mistake is formally appointing a person without giving them authority and resources. The officer must have direct access to management, the right to suspend suspicious transactions, and the ability to block clients.
In addition, the program requires a regular risk assessment that takes into account operations, clients, products and services, and geographic considerations. This assessment must be current and applied in practice, not just exist as a formal document.
MSBs and PSPs must keep detailed transaction logs, including customer identification and risk assessment, for at least five years. To comply with record-keeping requirements, records must be stored so they can be provided to FINTRAC within 30 days upon request; records may also be requested by law enforcement through a court order.
The transaction monitoring system must automatically detect suspicious patterns: multiple transactions just below the 10,000-dollar threshold, transactions from high-risk jurisdictions, a mismatch between the client profile and transaction volume, and a client’s refusal to provide documents. Automated rule-based and machine-learning tools make it possible to detect anomalies in real time.
The prescribed review assesses the effectiveness of the compliance program and is required at least every two years; 41% of organizations received penalties related to their prescribed review, and 65% of them failed to conduct and document the review. The absence of an independent assessment of the program is one of the most common reasons for administrative penalties. MapleBiz lawyers conduct independent compliance audits and help close identified gaps before a FINTRAC inspection.
Most registration delays and refusals are related to incomplete documentation, misunderstanding of beneficial ownership requirements, and the absence of a well-developed compliance policy.
You must provide FINTRAC with a criminal background check for everyone who owns or controls directly or indirectly 20% or more of the company; the document must be issued by the competent authority in the country of residence no more than 6 months before the registration application is submitted. If the document is in a language other than English or French, a translation by a certified translator is required.
Non-compliance is now an offense under the PCMLTFA, punishable on summary conviction by a fine of up to 250,000 dollars or imprisonment for up to two years, or on indictment by a fine of up to 500,000 dollars or imprisonment for up to five years.
Errors also include: providing outdated police clearance certificates, using a virtual address instead of a physical office, incomplete disclosure of beneficial owners, lack of a detailed risk assessment, and copying template policies without adapting them to the specifics of the business.
The MapleBiz legal team specializes in supporting MSB and FMSB registration, helping businesses complete the process without delays or mistakes. We provide:
Maximum administrative monetary penalties have increased to 20 million Canadian dollars per violation, and aggregate penalties can reach 3% of global revenue. In an environment of tightening oversight and record fines, professional legal support becomes not an expense, but an investment in protecting the business.
Contact MapleBiz for advice on MSB registration, building a compliance program, and preparing for FINTRAC inspections. We help avoid costly mistakes and ensure compliance with all current requirements of the Canadian regulator.
