MSB DeskGet My Estimate

CANADIAN MSB GUIDE

FINTRAC MSB Registration vs Bank of Canada RPAA

FINTRAC registration and Bank of Canada registration under the Retail Payment Activities Act are separate federal frameworks. A business can fall within one, both or neither depending on what it actually does.

FINTRAC focuses on anti-money laundering and anti-terrorist-financing obligations for reporting entities such as MSBs and FMSBs. The Bank of Canada supervises in-scope payment service providers under the RPAA, including operational risk, incident response and safeguarding of end-user funds.

This guide explains why an MSB registration should never be treated as an automatic answer to the RPAA question.

What FINTRAC registration covers

FINTRAC's framework applies to covered money services and requires registration, reporting, recordkeeping, client identification and a compliance program. Covered activities include foreign exchange, money transmission, virtual-currency dealing and other listed services.

FINTRAC states that registration is not a licence or endorsement. It confirms that the business has fulfilled the legal requirement to register under the anti-money laundering framework.

  • AML/ATF compliance program
  • Client identification and beneficial ownership
  • Transaction records and prescribed reports
  • Suspicious transaction escalation
  • Registration updates and renewal

What the RPAA covers

The RPAA applies to in-scope payment service providers performing payment functions related to electronic funds transfers in Canadian or foreign currencies, subject to geographic scope and exclusions. The Bank's framework includes providers in Canada and certain foreign providers directing retail payment activities at end users in Canada.

The Bank identifies five payment functions: maintaining accounts for EFTs, holding funds for transfer, initiating EFTs, authorizing or transmitting instructions and providing clearing or settlement services.

  • Payment accounts
  • Holding end-user funds
  • Initiating electronic funds transfers
  • Authorization or transmission of payment instructions
  • Clearing and settlement services

Why one business may need both

A remittance platform or digital wallet may provide a FINTRAC-covered money transmission service while also performing one or more in-scope retail payment functions. Separate analysis is required because the definitions, exclusions, application processes and ongoing duties are different.

The Bank explicitly states that a foreign PSP can require RPAA registration even if it is not incorporated in Canada or registered as an FMSB with FINTRAC. Conversely, FINTRAC status does not by itself decide whether the RPAA applies.

  • Map money services for FINTRAC
  • Map payment functions for the RPAA
  • Apply each geographic test
  • Check statutory and regulatory exclusions
  • Document both conclusions separately

Different compliance systems

The FINTRAC compliance program is built around money laundering and terrorist-financing risk, client due diligence, records and transaction reporting. RPAA supervision adds operational-risk management, incident response, safeguarding and regulatory reporting where applicable.

Some policies and data overlap, but a single generic manual is unlikely to satisfy both regimes. Governance should define which officer or team owns each obligation and how incidents, customer funds and regulatory reports are handled.

  • FINTRAC: AML/ATF governance
  • FINTRAC: transaction reporting and records
  • RPAA: operational-risk framework
  • RPAA: incident response
  • RPAA: safeguarding of end-user funds
  • RPAA: annual and significant-change reporting

Current registration position

For applications made after September 8, 2025, the Bank states that in-scope businesses must receive a registration decision before performing retail payment activities. The registration application carries a non-refundable fee; the Bank's current published materials identify the base fee and explain that it is adjusted over time.

Do not assume that submitting a FINTRAC package or appearing in the MSB registry allows payment activity to begin under the RPAA. The project timetable should reflect both regulators where both routes apply.

  • Separate application portals
  • Separate information and supporting materials
  • RPAA registration decision before new in-scope activity
  • Distinct regulatory communication
  • Coordinated launch dependencies

A combined assessment sequence

Map the business from the customer's instruction through authorization, funds custody, transfer and settlement. Classify each legal entity's role and then assess FINTRAC and RPAA scope separately.

MSB Desk can coordinate the Canadian MSB work and screen the payment model for a separate RPAA workstream. Where RPAA analysis or registration is required, it should be expressly scoped rather than implied to be part of the core FINTRAC project.

  • Map entities, customers and funds
  • Identify FINTRAC-covered services
  • Identify RPAA payment functions
  • Test geography and exclusions
  • Build separate obligation registers
  • Coordinate implementation and launch

See what your MSB project is likely to cost

Choose your company status and planned services to receive an immediate estimate before sharing contact details.

Get My Estimate