Canada launders an estimated $45 to $113 billion every single year. That staggering figure -equivalent to the entire GDP of a small nation -does not stay hidden in dark corners. It moves through banks, real estate transactions, casinos, and money service businesses, often right under the noses of professionals who simply did not know what to look for. For businesses, compliance officers, and financial professionals across the country, understanding AML regulations in Canada is no longer optional. In 2026, it is a legal obligation with serious financial and reputational consequences if ignored.
This guide breaks down everything you need to know: the legal framework, who must comply, what a proper compliance program looks like, the latest legislative changes, and what happens when organizations fall short.
If you are looking to get your team up to speed quickly and practically, our fully online Anti-Money Laundering (CA) certification course covers all FINTRAC compliance requirements in a flexible, accessible format -ideal for professionals across every regulated sector. You can complete it on your own schedule and walk away with certification the same day.
What Is the Legal Framework for AML in Canada?
Canada's Anti-Money Laundering (CA) regime is built on two interconnected pillars: federal legislation and a dedicated financial intelligence agency. Together, they create one of the most comprehensive AML frameworks in the world -though, as a 2023 FATF mutual evaluation noted, significant implementation gaps remain, particularly in real estate and beneficial ownership transparency.
The Role of the PCMLTFA
The Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), originally enacted in 2000 and amended numerous times since, is the cornerstone of Canadian AML law. It establishes the legal obligations for reporting entities, sets out what must be reported, and creates the enforcement framework for non-compliance.
The PCMLTFA does three essential things. First, it mandates specific record-keeping requirements so that financial trails can be reconstructed during investigations. Second, it requires businesses to report certain transactions -including suspicious transactions, large cash transactions, and international electronic fund transfers -to FINTRAC. Third, it requires regulated businesses to implement formal compliance programs, which we will explore in detail later. The full text is available through Justice Canada.
FINTRAC: Canada's Financial Intelligence Unit
The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) is the agency responsible for collecting and analyzing financial intelligence under the PCMLTFA. Think of it as the brain at the center of Canada's AML system -it receives millions of reports from regulated entities, analyzes patterns, and discloses actionable intelligence to law enforcement partners such as the RCMP, CBSA, and CSIS.
In its 2022–23 fiscal year, FINTRAC received over 35,000 Suspicious Transaction Reports and made 2,057 disclosures to law enforcement, contributing to investigations involving money laundering, terrorist financing, and major crime. Beyond analysis, FINTRAC also conducts compliance examinations of reporting entities and can issue administrative monetary penalties for violations. You can find FINTRAC's compliance guidance directly at fintrac-canafe.gc.ca.
Who Must Comply? (Reporting Entities)
Not every business in Canada falls under FINTRAC's jurisdiction -but the list of reporting entities is broader than most people expect. As of 2024, it includes more than 31,000 registered entities across multiple industries. Understanding whether your organization qualifies is the first compliance step.
Financial Institutions and Securities Dealers
Banks, credit unions, caisses populaires, trust and loan companies, and securities dealers are the backbone of FINTRAC's reporting network. These institutions face some of the most stringent obligations, including Know Your Client (KYC) verification, Enhanced Due Diligence (EDD) for high-risk relationships, and ongoing transaction monitoring. For organizations in this sector, a robust AML compliance program is not a recommendation -it is a regulatory prerequisite before doors open.
For a deeper understanding of the risks these institutions must monitor, our internal resource on Common AML Red Flags is a valuable starting point.
Real Estate Brokers and Developers
Canada's real estate sector has been under the microscope since the Cullen Commission (2022) in British Columbia found that approximately $5.3 billion was laundered through real estate in BC alone in a single year. Real estate brokers and agents, as well as developers involved in pre-sale condo assignments, are required to verify client identity, keep transaction records, and file STRs when suspicious activity is detected.
The 2024 regulatory updates have tightened these obligations further, expanding the definition of transactions that require reporting. Anyone working in real estate today needs to be familiar with FINTRAC's sector-specific guidance for real estate.
Precious Metals and Stones Dealers
Dealers in precious metals and stones (DPMS) -including gold, silver, diamonds, and other high-value commodities -are reporting entities when they buy or sell above the $10,000 cash threshold in a single transaction. This sector is particularly vulnerable to trade-based money laundering, where high-value portable assets are used to move value across borders. DPMS must implement full compliance programs, conduct client identification, and file the required reports.
Money Services Businesses (MSBs) and Casinos
Money services businesses -including foreign exchange dealers, money transfer operators, and cryptocurrency exchanges -must register with FINTRAC and maintain comprehensive compliance programs. The rapid growth of virtual currencies has made this sector one of FINTRAC's highest-priority oversight areas, with updated guidance on virtual currency reporting issued in 2025.
Casinos and gaming establishments face similarly strict obligations and have historically been significant vectors for cash-based money laundering. Their reporting requirements include both transaction reports and the obligation to verify the identity of every patron conducting regulated transactions.
The 5 Pillars of a FINTRAC Compliance Program
Under the PCMLTFA, every reporting entity must establish and maintain a compliance program. FINTRAC defines this program around five essential elements. Failing to implement even one of these can result in penalties. Understanding what each pillar requires is central to staying compliant -and to building a workplace culture that takes AML seriously.
1. Compliance Officer Every reporting entity must designate a compliance officer who is responsible for implementing and overseeing the compliance program. This individual needs adequate authority, resources, and knowledge of the PCMLTFA to function effectively. For larger organizations, this is typically a senior role; for smaller businesses, it may be the owner or principal.
2. Policies and Procedures Documented policies and procedures must outline how the organization identifies, assesses, and mitigates money laundering and terrorist financing risks. These documents must be written, approved, and kept current. Generic templates rarely satisfy a FINTRAC examination -policies must reflect the specific business, its client base, and its risk profile.
3. Risk Assessment A formal, written risk assessment is required to identify and evaluate the threats and vulnerabilities specific to the entity. Factors include the nature of products and services offered, geographic exposure, client types, and delivery channels. For a practical, step-by-step approach, our AML Risk Assessment Guide provides detailed frameworks applicable to Canadian businesses.
4. Ongoing Training All employees who engage with clients or handle financial transactions must receive regular AML training. This includes not just understanding the PCMLTFA obligations but recognizing suspicious activity indicators and knowing how to escalate concerns internally. Requirements may vary depending on workplace role and provincial guidelines, but FINTRAC expects training to be documented, updated regularly, and tailored to the staff member's responsibilities.
5. Two-Year Effectiveness Review Compliance programs must be reviewed every two years -at minimum -to assess whether policies, procedures, and controls are working effectively. This review must be documented and any identified gaps must be addressed. It is not a formality; FINTRAC examiners look for evidence that the review actually produced improvements.
For a comprehensive look at who carries compliance responsibilities across different industries, see our resource on Who Needs AML Training?
Recent Changes to Canadian AML Laws (2024–2026)
Canada's AML regulatory landscape has undergone its most significant transformation in over a decade. The combination of the 2023 FATF evaluation, the Cullen Commission findings, and the government's broader commitment to combating financial crime has produced a wave of legislative and regulatory updates that professionals cannot afford to miss.
New Reporting Requirements for Mortgage Entities
One of the most significant 2024 changes was the formal inclusion of mortgage lenders, administrators, and brokers as reporting entities under the PCMLTFA. Effective June 1, 2024, these businesses must now:
-
Verify the identity of clients and beneficial owners
-
Maintain prescribed records for all regulated transactions
-
File Suspicious Transaction Reports (STRs) when money laundering is suspected
-
Implement a full five-pillar FINTRAC compliance program
This change affects thousands of mortgage professionals who previously operated outside FINTRAC's direct oversight. The Department of Finance's 2024 regulatory announcement outlines the transition requirements and timelines.
Updated Beneficial Ownership Transparency
Beneficial ownership -knowing who ultimately owns and controls a legal entity -has been a longstanding gap in Canada's AML regime. The 2023 FATF evaluation specifically flagged this as a priority area. In response, Canada has enacted regulations requiring corporations to maintain accurate, up-to-date beneficial ownership information accessible to law enforcement and regulators.
For reporting entities, this means enhanced due diligence when dealing with corporate clients. Identifying the ultimate beneficial owners (UBOs) of a business -not just the legal representatives -is now a clear regulatory expectation. FINTRAC's guidance on beneficial ownership requirements provides detailed compliance steps.
Penalties for Non-Compliance
The consequences of failing to meet AML obligations in Canada are not abstract. FINTRAC has demonstrated a consistent willingness to use its enforcement powers, and the financial and reputational costs of non-compliance have grown significantly in recent years.
Under the PCMLTFA, administrative monetary penalties (AMPs) can reach:
-
Up to $1,000 per day for minor violations
-
Up to $100,000 for serious violations involving record-keeping and reporting failures
-
Up to $500,000 for corporations and $100,000 for individuals for very serious violations
-
Criminal prosecution under Part 5 of the PCMLTFA can result in fines of up to $2 million and/or five years imprisonment
In 2024, FINTRAC imposed a combined $8.4 million in administrative penalties across multiple sectors, a sharp increase from prior years that signals a more aggressive enforcement posture. A notable recent case involved a major Canadian bank receiving a multi-million-dollar penalty for systematic failures in its STR filing and customer due diligence programs.
Beyond financial penalties, non-compliance carries serious reputational risk. Regulatory findings are published publicly on the FINTRAC website, and for financial institutions, a FINTRAC finding can trigger scrutiny from other regulators including OSFI. For a broader analysis of why staying compliant is a business imperative, see our guide on Why AML Compliance Matters.
How to Implement an AML Training Program for Your Staff
Building a compliant, confident team is one of the most practical things a compliance officer or business owner can do. FINTRAC does not just check whether training happened -it looks for evidence that training was appropriate, documented, and regularly updated. Here is how to approach it effectively.
Conduct a training needs assessment. Before selecting a program, evaluate which staff interact with clients, process transactions, or hold compliance-adjacent roles. Front-line staff, management, and compliance officers often need different training content. A teller and a senior relationship manager face different risk exposures.
Choose training that matches regulatory expectations. Your training program should cover the fundamentals of the PCMLTFA, FINTRAC reporting obligations, client identification procedures, risk indicators, and internal escalation processes. For a detailed breakdown of what employees can expect from structured training, our resource on AML Training for Employees: What to Expect walks through typical program structure and content in detail.
Keep records of all training completed. FINTRAC examiners will ask for documentation. This means dates, names, training content covered, and confirmation of completion. A simple training log maintained in a spreadsheet or HR system is sufficient for most organizations.
Build in regular refreshers. AML risks and regulations evolve. Annual training at minimum is a reasonable baseline, but organizations in higher-risk sectors -or those with high staff turnover -should consider more frequent updates. Whenever the PCMLTFA is amended or FINTRAC issues new guidance, training should be updated accordingly.
Our fully online Anti-Money Laundering (CA) certification course is designed for exactly this purpose. It covers all five pillars of FINTRAC compliance, is structured for professionals across all regulated sectors, and can be completed at any pace -making it a practical solution for both individual professionals seeking certification and organizations training entire teams. Many learners complete their certification the same day they enroll, with immediate application to real-world compliance challenges.
For a broader look at how certification pathways work in Canada, see our guide on How to Get AML Certified Online and our roundup of the Best AML Certification Course in Canada.
Conclusion
Canada's AML regulatory landscape in 2026 is more demanding, more enforceable, and more scrutinized than at any previous point in its history. From the PCMLTFA's foundational obligations to FINTRAC's expanding enforcement activity, from the inclusion of mortgage entities to the push for beneficial ownership transparency, the direction of travel is clear: compliance is tightening, and organizations that lag behind face real consequences.
The good news is that compliance does not have to be complicated. Understanding the five pillars of a FINTRAC compliance program, staying current with recent legislative changes, and investing in practical, well-documented staff training are the three most impactful steps any organization can take right now.
Whether you are a compliance officer building your program from the ground up, a manager ensuring your team is ready, or a professional seeking to formalize your AML knowledge, the path forward starts with education.
Ready to get certified? Our Anti-Money Laundering (CA) online course is available right now -flexible, comprehensive, and built for Canadian compliance professionals. Start today and earn your certification at your own pace.
Leave a Comment