CANADA MSB GUIDE
Canadian MSB Registration for Payment Service Providers
A payment service provider can be within FINTRAC's MSB framework when it performs covered payment or money-transmission activity. The same business may also fall within the Bank of Canada's Retail Payment Activities Act.
These are separate frameworks. FINTRAC focuses on AML and ATF obligations, while the RPAA focuses on retail payment supervision, operational risk and safeguarding where applicable.
The correct route begins with a function-by-function map rather than a single PSP label.
Map the payment chain
Start with the end user's instruction and follow the transaction through authorization, account maintenance, funds holding, message transmission, clearing and settlement. Identify which legal entity performs each function.
A platform can be the customer-facing brand while regulated functions are divided among banks, processors and technology providers. Contracts and actual control matter more than interface labels.
- End users and merchants
- Payment accounts
- Authorization and instruction flow
- Funds holding and safeguarding
- Clearing and settlement
- Processors, banks and other providers
Assess FINTRAC activity separately
FINTRAC has published criteria explaining when payment services can constitute remitting or transmitting funds or dealing in virtual currency. The assessment turns on the service actually provided and the business's role in moving value.
Document the covered services, customer types, expected annual values, locations and agents. The AML/ATF program then needs controls for the identified activities.
- Money transmission
- Foreign exchange
- Virtual-currency activity
- Other covered payment activity
- FINTRAC registration and compliance program
Assess the RPAA payment functions
The Bank of Canada identifies five payment functions under the RPAA, subject to geographic scope and exclusions. A provider may need to register before performing in-scope retail payment activities.
Do not use FINTRAC registration as a substitute for this analysis. Record the payment functions, exclusions and conclusion in a separate assessment.
- Maintaining payment accounts
- Holding funds
- Initiating electronic funds transfers
- Authorizing or transmitting instructions
- Providing clearing or settlement services
Build two connected compliance systems
The FINTRAC program covers the compliance officer, policies, risk assessment, training, KYC, records, monitoring and reports. RPAA work can add operational-risk governance, incident response, safeguarding and regulatory reporting.
The systems should share accurate data without collapsing different legal duties into one generic policy. Assign accountable owners and maintain an obligation register for each framework.
- AML and ATF governance
- KYC and transaction monitoring
- Operational-risk framework
- Incident response
- Safeguarding of end-user funds
- Separate reporting obligations
Prepare for banking and provider scrutiny
Banks and payment partners will examine the business model, ownership, customer base, corridors, funds flow and compliance systems. They can require controls beyond the minimum registration information.
Use the same diagrams, service definitions and volume assumptions across the regulatory and commercial files. Explain provider dependencies and do not claim direct control over functions performed by another institution.
- Banking and settlement strategy
- Provider contracts
- KYC and monitoring vendors
- Safeguarding arrangements
- Business-continuity dependencies
Coordinate the launch sequence
The project plan should identify which activities can begin only after a regulatory decision, which provider accounts are needed and which operational controls must be tested.
MSB Desk coordinates the Canadian MSB work and includes an initial RPAA applicability screen. Any separate RPAA analysis or application is expressly scoped so the launch plan does not hide a second regulatory dependency.
- FINTRAC preparation
- RPAA decision path
- Provider onboarding
- Control implementation
- Testing and go-live approval
Turn the guidance into a project-specific route
Choose your company status and planned services to receive an immediate scope and fee estimate before sharing contact details.
See the complete registration service