Anti-Money Laundering (AML) in Canada: Complete Guide (2026)

In October 2025, Canada's financial regulator FINTRAC handed a single money service business a penalty of $176.96 million — the largest in Canadian history — for over 2,590 violations. These included failures to report transactions linked to darknet markets, ransomware operations, and child exploitation. Just months earlier, another foreign MSB had been hit with a $19.5 million fine. By the first six weeks of 2026 alone, four more public penalties had landed across real estate and financial services.

The message is unmistakable: anti-money laundering in Canada is no longer a back-office formality. It is a front-line business risk with nine-figure consequences.

Whether you work in banking, real estate, insurance, or financial services, this guide covers everything you need to know — from foundational legislation to the sweeping March 2026 changes that reset what FINTRAC expects from your compliance program. If you want to build solid, practical knowledge fast, our fully online Anti-Money Laundering (CA) certification course gets you certified at your own pace, on any device, right away.

Understanding Anti-Money Laundering in Canada

Anti-money laundering in Canada rests on a legal and institutional framework that has grown significantly over the past two decades. Two pillars sit at its core: the primary legislation and the agency responsible for enforcing it.

What Is the PCMLTFA?

The Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), enacted in 2000, is Canada's foundational AML statute. It requires designated businesses — called reporting entities — to:

• Collect and verify client identification

• Keep detailed transaction records

• Conduct risk assessments

• Report certain financial transactions to FINTRAC

The PCMLTFA has been amended several times, with the most significant wave of changes arriving in March 2026. At its core, the Act has always pursued three goals: make it harder for criminals to move illicit money through Canada, detect suspicious activity when it occurs, and hold those who enable financial transactions accountable for compliance failures.

You can read the full PCMLTFA on the Government of Canada's Justice Laws website.

The Role of FINTRAC: Canada's Financial Watchdog

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) is Canada's financial intelligence unit and AML regulator. Established under the PCMLTFA, FINTRAC has a dual mandate:

• It receives and analyzes financial transaction reports from reporting entities

• It supervises and examines those entities to ensure compliance

When FINTRAC identifies patterns consistent with money laundering or terrorist financing, it discloses financial intelligence to the RCMP, CSIS, Canada Border Services Agency, and the CRA. FINTRAC does not investigate or prosecute crimes — it is the analysis and intelligence layer of Canada's broader anti-financial crime system.

On the enforcement side, FINTRAC can conduct audits, issue compliance directives, and impose Administrative Monetary Penalties (AMPs). As 2025 demonstrated, it uses these powers aggressively.

Official FINTRAC resources: fintrac-canafe.canada.ca

The 2026 AML Landscape in Canada: What's Changed?

Canada's anti-money laundering framework underwent its most significant transformation in years on March 26, 2026, when two pieces of federal legislation received Royal Assent simultaneously. For any business with compliance obligations under the PCMLTFA, the landscape after that date looks materially different.

The Impact of Bill C-12 & Bill C-15: A Breakdown of the March 26, 2026 Legislative Updates

Bill C-12 — formally the Strengthening Canada's Immigration System and Borders Act — carried sweeping amendments to the PCMLTFA that dramatically expand FINTRAC's enforcement power.

The most immediate change: maximum AMPs have been raised by a factor of 40.

For high-volume entities, cumulative penalties on a single notice can reach the greater of $20 million or 3% of gross global revenue. The Xeltox case showed exactly how per-instance penalty stacking works — over 1,000 individual STR violations were penalized separately, producing a $177M total.

Bill C-12 also introduces universal enrolment, requiring all PCMLTFA-covered businesses to register with FINTRAC — not just MSBs and casinos as before. FINTRAC published its implementation roadmap on April 13, 2026: fintrac-canafe.canada.ca.

Bill C-15 — the Budget 2025 Implementation Act — complements these changes with client identification updates deemed in force since October 1, 2025. Together, the two bills represent the most comprehensive overhaul of Canada's AML legislative framework since the PCMLTFA was introduced.

The PCMLTFA applies to a defined set of businesses and individuals called reporting entities. The list has expanded considerably in recent years. If your business handles any kind of financial transaction, it is worth confirming whether you are covered.

Financial Institutions and Credit Unions

Banks, trust companies, loan companies, credit unions, and caisses populaires form the traditional core of Canada's AML framework. Even well-resourced institutions are not immune — FINTRAC's record enforcement activity in 2025 included penalties against established financial businesses whose programs failed to meet the regulator's effectiveness expectations.

Real Estate Developers, Brokers, and Agents

Real estate is one of Canada's most significant money laundering vulnerabilities, and enforcement reflects this. Real estate agents, brokers, and developers must comply with client identification, beneficial ownership, and reporting obligations. In the first six weeks of 2026, two Ontario brokerages received penalties: one fined $107,250 and another $148,912.50.

For more on red flags in this sector, see our blog on Common AML Red Flags.

Casinos and Precious Metals Dealers

Casinos face strict reporting requirements due to high cash volumes. Dealers in precious metals and stones — including jewellers — are also regulated. One well-known Canadian jeweller was fined over $260,000, a reminder that enforcement reaches well beyond banks and fintech companies.

Mortgage Administrators and Brokers (Newer Regs)

The regulatory perimeter now includes mortgage brokers and administrators, title insurers, cheque cashers, and white-label ATM service providers — sectors that were historically outside the main PCMLTFA framework. If you operate in any of these areas, your AML obligations are real and actively audited.

Know Your Customer (KYC) and Due Diligence Under Canada's AML Rules

KYC is a legal obligation, not just best practice. Knowing who your client is — and understanding the nature of your business relationship with them — sits at the heart of effective anti-money laundering in Canada.

Verifying Identity: The 2026 Standards

Reporting entities must verify client identity when conducting certain transactions or establishing business relationships. Accepted verification methods include:

• Government-issued photo ID — viewing a valid, unexpired document

• Credit file method — using information from a Canadian credit bureau

• Dual-process method — combining two independent sources of information

• Affiliate reliance — using a third party to verify identity on your behalf

Bill C-15 updated client identification standards effective October 1, 2025. Importantly, verification must happen before the transaction is completed — not after a suspicious pattern has already emerged. Full FINTRAC guidance is available at fintrac-canafe.canada.ca.

Beneficial Ownership: Who Really Owns the Company?

Reporting entities must take reasonable steps to determine whether a corporate or trust client is ultimately owned or controlled by individuals not visible on the surface of the transaction.

Canada's 2025 National Risk Assessment identified private corporations as one of the highest-vulnerability sectors for money laundering precisely because of their ability to obscure real ownership. The obligation to verify and record beneficial ownership applies at account opening and must be kept current throughout the business relationship.

For a deeper dive, see our article on AML Regulations in Canada Explained.

Reporting Requirements to FINTRAC

Failing to file required reports is one of the most frequently cited violations in FINTRAC's public enforcement notices. Here is what every reporting entity needs to know.

Suspicious Transaction Reports (STRs)

An STR must be submitted when you have reasonable grounds to suspect a transaction is related to money laundering or terrorist financing.

Key facts:

• No minimum dollar threshold — suspicion, not size, triggers the obligation

• Must be filed within 30 days of when suspicion is first formed

• Strict confidentiality — you cannot disclose to the client that an STR has been or will be filed

Large Cash Transaction Reports (LCTRs)

An LCTR is required when a client makes a cash transaction of $10,000 CAD or more, or multiple related cash transactions totalling $10,000 within 24 hours.

• Triggered by objective thresholds, not subjective suspicion

• Must be filed within 15 calendar days of the transaction

• Client identification and source of funds documentation is still required

Terrorist Property Reports

If you know or believe that property you hold belongs to a terrorist group or is being used to facilitate terrorism, file a Terrorist Property Report immediately with both FINTRAC and the RCMP. There is no waiting period — the obligation arises at the point of forming the belief.

Penalties for Non-Compliance with Anti-Money Laundering in Canada

The regulatory and financial stakes for non-compliance with anti-money laundering rules in Canada have never been higher — and the trajectory points toward continued escalation.

Administrative Monetary Penalties (AMPs) vs. Criminal Charges

FINTRAC has two primary enforcement tools:

Administrative Monetary Penalties (AMPs) are the more commonly used. They are civil penalties imposed directly by FINTRAC without criminal proceedings. The post–Bill C-12 framework:

To understand how quickly these numbers compound: FINTRAC issued 30 AMPs in 2025 compared to just 8 in 2021. Total penalties since July 2025 alone have crossed $197 million. FINTRAC penalizes each individual contravention separately — in the Xeltox case, over 1,000 violations were counted individually.

Criminal charges under the PCMLTFA are reserved for the most serious cases, pursued by the Public Prosecution Service of Canada. They can result in substantial fines and imprisonment.

Adding further pressure: Canada's FATF Mutual Evaluation findings are expected in 2026. This international peer review assesses the effectiveness of Canada's AML/CFT regime. The outcome could increase regulatory pressure on FINTRAC to demonstrate even more rigorous enforcement.