Canada AML/CTF Requirements Under the PCMLTFA

The Regulatory Framework

Primary legislation. The PCMLTFA and the Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations (PCMLTFR) establish the legal framework.

FINTRAC is the supervisory authority. Its functions include issuing guidance, receiving reports (STRs, LCTRs, EFTRs), conducting examinations, imposing administrative monetary penalties, and sharing information with law enforcement and foreign counterparts.

FATF 40 Recommendations inform the interpretation of PCMLTFA obligations and provide context for the risk-based approach. FATF Recommendations are international standards, not Canadian domestic law.

Provincial variations. AML/CTF is a federal matter. Several provinces have complementary legislation. Regulated entities operating across multiple provinces should map obligations against both federal PCMLTFA requirements and applicable provincial professional rules.

Who Is Regulated Under the PCMLTFA

Customer Due Diligence Requirements

Standard CDD must be performed when opening an account or establishing a business relationship. It requires identifying and verifying the customer’s identity, identifying persons acting on behalf of the customer, and understanding the purpose and intended nature of the business relationship.

Enhanced due diligence applies in higher-risk situations: complex or unusually large transactions with no apparent economic purpose, non-face-to-face relationships, and customers who are PEPs or heads of international organisations.

Simplified due diligence may be applied in lower-risk situations. Regulated entities must document their risk assessments and be prepared to demonstrate that simplified measures were appropriately applied.

Ongoing monitoring is a continuous obligation. A static compliance programme that focuses only on onboarding will not satisfy the requirements of the PCMLTFA.

Beneficial Ownership Identification

Canada has introduced specific beneficial ownership obligations. Regulated entities must identify individuals who own or control a legal entity customer. For corporations, trusts, and partnerships, this means determining every individual who owns 25% or more of the entity, as well as any individual who exercises control or direction over the entity.

Recent amendments have introduced requirements to obtain and retain certain beneficial ownership information. The Government of Canada has also established a beneficial ownership registry initiative.

PEP Screening: Domestic and Foreign Politically Exposed Persons

The PCMLTFA defines PEPs broadly to include heads of state, ministers, members of parliament, judges of superior courts, senior executives of state-owned entities, and senior officials of international organisations. Family members and close associates are also within scope.

When a customer is identified as a PEP, enhanced due diligence applies: senior management approval, source of wealth and source of funds investigation, and enhanced ongoing monitoring.

PEP screening must occur at onboarding and on an ongoing basis throughout the customer relationship. MemberCheck provides automated PEP screening capabilities that support both initial and ongoing screening.

Terrorist Property and Sanctions Screening

The PCMLTFA prohibits dealing in property owned or controlled by or on behalf of a terrorist or terrorist group. The United Nations Act and the Criminal Code provide the legal basis for Canada’s sanctions regime.

The consequence of identifying a sanctions match is immediate: regulated entities must not deal in the property or make it available, must report immediately to FINTRAC, and must ensure no property is made available to a terrorist or terrorist group.

Suspicious Transaction Report Filing

One of the most significant obligations under the PCMLTFA is the requirement to file an STR when a regulated entity knows, suspects, or has reasonable grounds to suspect that a transaction is related to money laundering or terrorism financing.

The STR obligation applies regardless of the amount involved. A transaction does not need to be large to be suspicious.

The tipping-off prohibition is strict. A regulated entity or its employees must not disclose that an STR has been or will be filed in a way that could prejudice an investigation.

Large Cash Transaction Reports and Electronic Funds Transfer Reports

Large cash transaction reports (LCTRs). Any regulated entity that receives cash of 10,000 Canadian dollars or more in a single transaction must file an LCTR with FINTRAC within 15 days. Multiple cash transactions from the same customer totalling 10,000 dollars or more within 24 hours must be treated as a single transaction.

Electronic funds transfer reports (EFTRs). Electronic funds transfers of 10,000 dollars or more require reporting to FINTRAC.

Record-Keeping Requirements

The PCMLTFA requires retaining records for a minimum of seven years . Records that must be retained include copies of identification information, account opening records, transaction records, copies of all STRs filed, compliance programme documentation, and records of risk assessments.

FINTRAC Examination Powers and Supervisory Expectations

FINTRAC may examine records and other information, enter premises where business is carried on, and require production of documents. Examinations assess whether compliance programmes include a designated compliance officer, written policies and procedures, risk assessments, ongoing training, and an independent review function.

FINTRAC may impose administrative monetary penalties for non-compliance. It may also refer matters to law enforcement.

Conclusion

The PCMLTFA imposes a comprehensive and operationally demanding set of AML/CTF obligations on a wide range of regulated entities. From determining whether an entity is regulated, through customer due diligence and beneficial ownership verification, to PEP and sanctions screening, STR filing, and record-keeping, the obligations span the full customer lifecycle.

Compliance teams should approach these obligations as interconnected. A strong customer identification programme feeds effective screening, which in turn supports transaction monitoring and reporting.

Regulated entities remain responsible for designing and implementing AML/CTF programmes that satisfy their specific obligations. Technology solutions such as MemberCheck and FraudShield can support these obligations, but they are tools that must be deployed within a properly governed compliance framework.

This article was accurate at the time of publication in August 2026 and is intended for general informational purposes only. It does not constitute legal, regulatory or compliance advice. Organisations should seek qualified professional guidance in relation to their specific obligations.