Building a Canadian money services business: what founders need beyond FINTRAC registration

Canada offers a relatively clear regulatory framework for companies involved in money transfers, foreign exchange, virtual currency and other money services. For that reason, Money Services Business registration is often one of the first regulatory routes considered by founders launching a payment, remittance or crypto-related company.

However, registering with FINTRAC is only one part of the process. A functioning MSB also needs an appropriate corporate structure, an effective compliance programme, banking and payment infrastructure and, for some business models, a separate registration with the Bank of Canada.

Understanding how these pieces fit together is essential before choosing Canada as the jurisdiction for a new financial business.

What is an MSB registration in Canada?

A Money Services Business, or MSB, is a business that provides one or more services falling within the scope of Canada’s Proceeds of Crime (Money Laundering) and Terrorist Financing Act.

MSBs operating in Canada must register with the Financial Transactions and Reports Analysis Centre of Canada, commonly known as FINTRAC, before beginning regulated activities.

FINTRAC registration is not a banking licence, and FINTRAC specifically states that registration does not mean that the regulator endorses or licenses the business. It confirms that the company has satisfied the legal registration requirements applicable to an MSB.

This distinction is particularly important for founders comparing different financial regulatory models.

An MSB does not become a bank simply by registering with FINTRAC. Founders researching how to apply for a banking charter in Canada are looking at an entirely different regulatory route involving the Bank Act, the Office of the Superintendent of Financial Institutions and federal approvals.

For many payment businesses, the MSB registration in Canada can nevertheless provide an appropriate regulatory foundation when the planned activities fall within FINTRAC’s scope.

Can an MSB be registered remotely?

A Canadian incorporated company is not always required.

FINTRAC distinguishes between a Canadian MSB and a Foreign Money Services Business, or FMSB.

A business is generally treated as a Canadian MSB if it provides relevant money services and has a place of business in Canada. FINTRAC considers incorporation in Canada, a physical Canadian location, or employees, agents or branches in Canada as indicators of a place of business.

A foreign company can take a different route.

If it has no place of business in Canada but directs its money services towards Canadian customers and actually provides those services to clients in Canada, it may instead qualify as an FMSB.

This means founders do not necessarily have to incorporate a separate Canadian company simply to obtain FINTRAC registration.

An FMSB does, however, need to appoint a representative for service in Canada. That representative must reside in Canada and must be authorised to receive FINTRAC notices and enquiries on behalf of the foreign business. The regulatory responsibility still remains with the FMSB itself.

This should not be confused with a corporate registered office. If a Canadian corporation is established, it will have corporate registered-office requirements. A foreign MSB, by contrast, does not need to establish a Canadian branch or operational office merely to satisfy the FINTRAC FMSB framework.

Which businesses can register as an MSB?

The scope is broader than traditional remittance companies.

FINTRAC’s current assessment framework identifies eight categories of activities that can bring a business within the MSB regime:

• foreign exchange dealing;
• remitting or transmitting funds;
• issuing or redeeming money orders, traveller’s cheques or similar negotiable instruments;
• dealing in virtual currency;
• providing crowdfunding platform services;
• transporting currency and certain negotiable instruments as an armoured-car business;
• cheque cashing;
• providing acquirer services for private automated banking machines.

The last two categories were added to the relevant framework more recently, which is why older explanations of Canadian MSB registration may refer to a smaller number of services.

For fintech founders, the most common categories are usually money transmission, foreign exchange and virtual currency.

A remittance platform sending customer funds internationally, for example, will normally need to assess the money transmission category. A fintech converting CAD into USD, EUR or other currencies may fall within foreign exchange dealing. A crypto platform exchanging, transferring or remitting virtual currency may fall within the virtual currency rules.

The actual business model matters more than the label used by the company. Calling a product a “wallet”, “payment platform” or “financial technology service” does not determine its regulatory treatment.

Compliance needs to exist beyond the application

Obtaining the registration number does not complete the regulatory work.

FINTRAC requires reporting entities to establish and implement a compliance programme. The programme has five core elements: an appointed compliance officer, written policies and procedures, a documented money laundering and terrorist financing risk assessment, an ongoing training programme and an effectiveness review conducted at least every two years.

The compliance officer plays a particularly important role.

This person must have sufficient authority and access to information to implement the programme properly. FINTRAC also expects the officer to understand the company’s structure, business activities, regulatory obligations and relevant financial-crime risks.

For companies without an established compliance department in Canada, specialist compliance support can therefore become an important part of the operating model.

A Compliance-as-a-Service provider may assist with AML policies, risk assessments, regulatory procedures, training, transaction-monitoring processes and ongoing compliance work. External specialists can also support the appointed compliance officer.

What cannot be outsourced is ultimate responsibility. FINTRAC makes clear that the reporting entity remains responsible for meeting its compliance obligations even when other people assist with individual compliance functions.

The same principle applies to KYC, transaction monitoring and reporting technology. Using a third-party platform does not remove the MSB’s responsibility to make sure the processes actually satisfy Canadian requirements.

MSB registration may not be the only registration required

Since the implementation of the Retail Payment Activities Act, founders also need to consider whether their business falls under the Bank of Canada’s supervision of Payment Service Providers.

This is separate from FINTRAC.

FINTRAC registration focuses primarily on AML and financial-crime obligations applicable to money services businesses. The RPAA creates a separate supervisory framework for businesses performing retail payment activities.

A PSP may need to register with the Bank of Canada if it performs one or more of five payment functions as a business activity: providing or maintaining an account for an end user, holding end-user funds, initiating an electronic funds transfer, authorising or transmitting payment instructions, or providing clearing or settlement services.

Holding customer fiat balances is therefore an obvious situation to examine.

For example, if a fintech provides an e-wallet where customers can leave CAD balances available for future payments or withdrawals, the Bank of Canada considers this a form of holding end-user funds.

But holding money is not the only trigger.

A company may still fall within the RPAA even if customer money is held at a partner bank rather than directly by the fintech. If the company maintains the customer account interface, initiates transfers or processes payment instructions, other payment functions can bring it within the PSP framework. The Bank of Canada specifically notes that an entity does not need to hold funds in order to perform the account-maintenance function.

As a result, founders should not assume that “we do not hold customer money” automatically means Bank of Canada registration is unnecessary.

FINTRAC MSB registration and Bank of Canada PSP registration should be analysed separately.

Registration still needs banking and payment infrastructure

Once the regulatory framework is established, the company needs the infrastructure required to deliver its product.

A remittance company may need Canadian operating accounts, payment partners, EFT capabilities, international payment routes and foreign exchange providers, in other words, connect to payment rails.

A wallet business may require customer account infrastructure, safeguarding arrangements, payment APIs and ledger software.

Crypto-related companies may additionally need fiat on-ramp and off-ramp infrastructure, liquidity providers and banking partners willing to support virtual-asset activity.

These relationships often take significant work to establish because banks and payment providers conduct their own due diligence. They will review ownership, target countries, customer types, compliance arrangements, expected transaction volumes and the flow of funds through the business.

An MSB registration should therefore be viewed as part of a wider launch plan rather than the final objective.

Build the operating model around the registrations

For a Canadian payment business, the practical structure may involve several layers:

FINTRAC MSB or FMSB registration → compliance programme → Bank of Canada PSP assessment → banking and payment infrastructure.

Not every company will require exactly the same combination.

A foreign exchange business may have a very different setup from an e-wallet holding customer funds. A crypto exchange may fall within the MSB framework while its RPAA position depends on whether its payment activities constitute separate retail payment services or are only incidental to another activity.

That is why the regulatory assessment should begin with the actual flow of funds and customer journey.

The most useful question is not simply, “Can we obtain an MSB registration?” It is, “What regulatory, compliance and infrastructure structure do we need to operate this particular business in Canada?”

Answering that question before launch makes it much easier to build an MSB that is not only registered, but operationally capable of serving customers and meeting its continuing obligations.