Money Services Business (MSB) is required to verify a client’s identity in strictly defined situations. Understanding these triggers is critically important: an error in determining the moment of verification can lead to administrative fines or revocation of registration. The Canadian regulator FINTRAC applies a risk-based approach, but it sets clear quantitative thresholds.
For transfers of 1000 CAD and above (except electronic transfers), identity verification is required. For transactions involving traveler’s cheques or money orders in the amount of 3000 CAD or more, ID verification is mandatory. When receiving cash of 10,000 CAD or more, the MSB must verify the client. These thresholds are not subject to interpretation: an amount of 9999 CAD does not trigger the obligation, while 10,000 CAD does so immediately.
The trade-off is obvious: low thresholds increase the operational burden on the MSB (each verification takes time and resources), but at the same time they increase sector transparency and reduce the risk of the business being used for laundering. The alternative is delegating verification to third parties, but responsibility for the accuracy of the data remains with the MSB.
The 24-hour rule requires aggregating multiple cash transactions totaling 10,000 CAD within a day and treating them as a single transaction, triggering the verification procedure. This rule closes the structuring loophole, a method by which a client deliberately breaks a large amount into smaller payments to avoid scrutiny.
For cryptocurrency transactions, heightened attention to ID verification is required for large transactions, since tracking the movement of crypto assets is more difficult. A second-order risk: excessive strictness in verifying crypto clients may drive away legitimate business and push it into the gray zone, where there is no control at all. The balance between protecting the system and maintaining the MSB’s competitiveness is a key issue for the business owner.
Any suspicious transaction, regardless of amount, must lead to identity verification and the filing of a suspicious transaction report (STR) to prevent money laundering and terrorist financing. What counts as “suspicious”? FINTRAC does not provide an exhaustive list, but it identifies indicators: the client avoids providing documents, the transaction does not match the client’s profile, the funds originate from high-risk jurisdictions.
Subjectivity arises here: the MSB compliance officer must exercise professional judgment. Mistakes in either direction are painful: missing a truly suspicious transaction leads to fines, while excessive vigilance creates friction with clients. MapleBiz helps MSBs develop internal policies that formalize suspicion criteria and reduce subjectivity in decision-making.
FINTRAC recognizes three main methods of verifying the identity of individuals, and each has its own strengths and weaknesses. The choice of method depends on the MSB’s business model, the risks of the client base, and available resources.
The primary method is a government-issued photo ID: passport, driver’s license. The document must appear genuine, without signs of alteration or removal of information, and must be valid according to the issuing authority. This method is simple and fast, but vulnerable to forgery. In the era of high-quality printers and Photoshop, physical document verification requires trained staff.
An extreme case: if the client is in a jurisdiction where issuing photo IDs is difficult or impossible (for example, refugees, stateless persons), the MSB must use alternative methods and document the reason for deviating from the standard. The risk-based approach allows alternative identification, but requires enhanced monitoring of such clients and demonstration of reasonable timelines for obtaining full documents (6–12 months).
If a government document is unavailable, the MSB may use two-step verification: two independent sources of information confirm the client’s name, plus one source confirms the address and date of birth. Examples of sources include a credit file, a bank statement, a utility bill. The advantage of this method is resilience to a single forgery (it is harder to falsify two unrelated documents). The drawback is the time and cost of verification.
A compromise: the MSB may use the two-step method for high-risk clients (large amounts, non-standard jurisdictions), and use a government document for routine transactions. Such grading improves efficiency without reducing system protection.
The MSB may rely on verification performed by other reporting entities or affiliated foreign entities, provided the information is valid, current, and meets standards, with the need for regular updates and checks. A written agreement describing the verification process is required.
Second-order effect: delegation reduces the burden on the MSB, but creates dependence on the counterparty’s quality of work. If the third party makes an error, the responsibility still falls on the MSB. MapleBiz recommends including indemnification provisions in agreements with delegates and conducting regular audits of their procedures.
Verification of corporations and other legal entities differs from verifying individuals. Here the task is not to establish identity, but to confirm the organization’s existence and identify persons with significant control (beneficial owners).
To confirm existence, official documents are required: for corporations — a certificate of incorporation, annual reports, or other records containing the name, address, and names of directors; for other organizations — a partnership agreement, founding documents. Beneficial owners are persons who directly or indirectly own or control 25% or more of the shares of a corporation or an interest in another structure; for trusts, these are trustees, known beneficiaries, and settlors.
Starting in October 2025, MSBs must compare data on beneficial ownership of MSBs of federal corporations with the Corporations Canada database for high-risk clients and, if a material discrepancy is identified, file a discrepancy report within 30 days. This change complicates compliance, but closes a loophole through which the real ownership structure was concealed.
Risk: incomplete information on 25%+ beneficial owners leads to refusal of MSB registration. The assumption here is one: the MSB must make “reasonable efforts” to confirm the accuracy of the data. It is important to review official documentation to confirm the correctness of beneficial ownership data, since the persons named in the documents may not reflect the actual owners, and several layers of information must be worked through. MapleBiz structures this process: we help collect corporate documents, identify ownership chains, and prepare the package for MSB registration.
Simplified identification is permitted for low-risk entities — government bodies and publicly traded companies that are subject to strict transparency requirements and close regulatory oversight, including verification through public registries or official websites. A corporation or trust with minimum net assets of 75 million CAD according to the latest audited balance sheet, whose shares or units are traded on a Canadian exchange or an exchange listed under the Income Tax Act, operating in an FATF member country.
The counterargument: public companies can also be used for laundering, but the regulatory burden on them is so high (exchange reporting, audits, disclosure) that the likelihood of abuse is lower. The MSB must document the rationale for using simplified verification: if the client formally meets the criteria but has red flags (for example, a headquarters in an offshore jurisdiction despite being listed), standard verification must be applied.
Requirements for MSB beneficial ownership, MSB record-keeping, and client verification form a complex system of procedures. MapleBiz specializes in legal support for MSBs in Canada: we develop KYC/AML policies, prepare documents for FINTRAC registration, and advise on the interpretation of regulatory acts. We help business owners avoid costly mistakes at the outset and ensure compliance with changing regulatory requirements.
FINTRAC publishes detailed guidance for each sector, including MSBs. These documents are not law in the formal sense, but courts and the regulator treat them as a standard of due diligence.
FINTRAC provides guidance to help organizations understand obligations under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act and related Regulations, but this is not legal advice, and the Act itself must be consulted for a full understanding of the requirements. The guidance describes when to verify, which methods to use, how to keep records, and how to file reports.
An important nuance: following the guides does not guarantee complete immunity from liability, but it demonstrates the MSB’s good faith in the event of an inspection. If the business deviates from FINTRAC recommendations, it must document the reason and the alternative approach.
Reporting entities are required to keep certain records of accounts, transactions, and client identification, which must be stored so that they can be provided to FINTRAC within 30 days upon request. Records are provided to FINTRAC within 30 days upon request or by court order of law enforcement for investigations of money laundering or terrorist financing. Copies of reports must be retained for at least 5 years after the day of filing or the date of creation.
Trade-off: paper storage is cheap, but slow to search; electronic storage is fast, but requires investment in IT infrastructure and data protection. Records may be kept in machine-readable or electronic form, provided that a paper copy can be easily printed. Compromise: a hybrid system with electronic indexing and the ability to produce paper copies on request.
Interpreting sector guides is not always straightforward. For example, what counts as “reasonable measures” to confirm beneficial ownership data? How should “business relationship” be interpreted — does a second client verification trigger ongoing monitoring? MapleBiz provides legal advice on applying FINTRAC guidance to a specific business. We help create written compliance procedures that both satisfy the regulator and do not paralyze the MSB’s operations.
Consequences of non-compliance can be catastrophic. Non-compliance is classified as an offense under the PCMLTFA, punishable summarily by a fine of up to 250,000 CAD or imprisonment for up to 2 years, or on indictment by a fine of up to 500,000 CAD or imprisonment for up to 5 years. The fine for a first violation reaches 500,000 CAD, and for subsequent violations — 1 million CAD. FINTRAC has established four levels of harm and a penalty scale up to a maximum of 100,000 CAD for MSB registration violations. The reputational damage is no less severe: publication of the fine on FINTRAC’s website deters clients and banking partners. Registration may be canceled if the MSB does not respond to FINTRAC requests, does not cooperate, or is found ineligible.
Contact MapleBiz for comprehensive support with MSB registration and compliance setup. We will help you avoid fines, structure internal policies, and prepare all documents for interaction with FINTRAC. Investing in professional support at the outset pays off many times over by protecting your business from regulatory risks.
