FINTRAC MSB License Revocation: What It Means and How to Respond

🛡️

ComplyFactor — Canadian MSB Compliance Services

Facing a FINTRAC revocation notice or concerned your MSB registration is at risk? ComplyFactor provides fractional CAMLO services, FINTRAC audit preparation, AML program remediation, and re-registration support for Canadian MSBs and PSPs. Our team of ex-regulatory practitioners ensures your compliance posture is defensible — before FINTRAC comes knocking. Contact us today →

What Does FINTRAC MSB Revocation Actually Mean?

FINTRAC — Canada’s Financial Transactions and Reports Analysis Centre — holds broad statutory authority over money services businesses operating in Canada. When FINTRAC revokes an MSB registration, it is not a warning or a fine. It is the forced removal of your legal authority to operate.

Under Canada’s Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), every business that conducts money services activities in Canada — including foreign exchange, international remittances, cryptocurrency dealing, prepaid card issuance, and virtual asset exchange — must be registered with FINTRAC. Operating without a valid registration is not a grey area: it is a federal offence under the Act, carrying significant criminal and civil penalties.

Revocation strips you of the legal right to offer any regulated money services activities i<dn Canada. From the moment a revocation takes effect, every transaction you process in a regulated activity becomes a potential criminal act. Understanding what triggers revocation, how the process unfolds, and what you can do to respond is not merely operationally important — it is existentially critical for your business.

This guide is written specifically for compliance officers, MLROs, fintech founders, and business owners who are either facing a revocation notice from FINTRAC, concerned they may be at risk, or simply seeking to understand the enforcement landscape they operate within. It draws on FINTRAC’s published enforcement actions, the PCMLTFA statutory framework, and over a decade of practitioner-level experience navigating Canadian regulatory examinations.

The Legal Framework: PCMLTFA and FINTRAC’s Revocation Authority

FINTRAC’s authority to revoke MSB registrations flows directly from the PCMLTFA and its accompanying Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations (PCMLTFR). Understanding the statutory basis matters — it determines the grounds on which FINTRAC can act, and the grounds on which you can push back.

The PCMLTFA’s Part 1 registration framework provides the foundation for all MSB registration, renewal, and revocation decisions. Under the registration provisions of the Act, FINTRAC may revoke a registration on several grounds, including:

  • The registrant has contravened or failed to comply with the Act or its regulations
  • The registrant has provided false or misleading information in their registration or in any report or record required under the Act
  • The registrant has been convicted of a designated offence
  • The registrant has ceased to carry on the activities in respect of which they were registered, or has failed to comply with the conditions of registration

The Act also provides registrants with procedural protections: FINTRAC is required to give notice of its intention to revoke and provide the registrant an opportunity to make representations before revocation takes effect — except where FINTRAC determines that the urgency or severity of the situation makes prior notice contrary to the public interest.

This procedural nuance is critical. FINTRAC is not legally obligated to engage in lengthy pre-revocation dialogue in all cases. In circumstances involving serious and ongoing non-compliance, deliberately false registration information, or activity that FINTRAC considers poses acute systemic risk, it retains discretion to move with relative speed.

For a complete overview of the MSB registration requirements underpinning this framework, see our FINTRAC AML Requirements Guide and our Canada MSB License — Complete Guide to Registration and Compliance 2025.

Top Causes of MSB Registration Revocation

FINTRAC does not revoke registrations arbitrarily. Every revocation action is preceded by an examination, investigation, or review that identifies specific, documented deficiencies. Based on FINTRAC’s published administrative monetary penalty (AMP) records, effectiveness review findings, and the legislative framework of the PCMLTFA, the following are the leading causes of revocation.

1. Failure to Maintain a Compliant AML/CTF Program

The PCMLTFA requires every registered MSB to maintain a written, risk-based AML/CTF compliance program with five mandatory elements:

  • Compliance officer appointment with documented authority and resources
  • Written policies and procedures reflecting the MSB’s actual business activities and risk profile
  • Risk assessment covering clients, products, services, and delivery channels
  • Ongoing compliance training for employees and agents
  • Effectiveness review (independent AML audit) conducted at minimum every two years

MSBs that fail to implement any of these elements — or that have documented programs that bear no relationship to actual operational practice — are primary targets for revocation. FINTRAC’s examination process specifically tests whether your program is real and operational, not just on paper. The existence of a policies manual that no employee has read, in a jurisdiction where your business model has fundamentally changed since the document was drafted, will not satisfy an examiner.

Our FINTRAC-Compliant AML Program: 5-Element Framework article provides a detailed breakdown of exactly what FINTRAC examiners look for in each of the five elements.

2. Failure to Submit Mandatory Reports

FINTRAC receives mandatory reports from MSBs across multiple report types:

  • Large Cash Transaction Reports (LCTRs) — for cash transactions of CAD 10,000 or more conducted within a 24-consecutive-hour period by or on behalf of the same individual
  • Electronic Funds Transfer Reports (EFTRs) — for international EFTs of CAD 10,000 or more
  • Suspicious Transaction Reports (STRs) — filed where there are reasonable grounds to suspect money laundering or terrorist financing
  • Terrorist Property Reports (TPRs) — when a registrant holds or controls property owned by a listed terrorist entity

Systematic failure to file these reports — whether through negligence, inadequate transaction monitoring, or deliberate avoidance — is one of the most direct paths to enforcement action. The STR obligation is particularly heavily scrutinised: FINTRAC examiners routinely compare the volume and quality of STRs filed against the risk profile of the MSB’s business to assess whether reporting is genuine, proportionate, and timely.

3. Failure to Conduct Customer Due Diligence (KYC)

Under PCMLTFA regulations, MSBs must conduct identity verification for prescribed transactions and apply ongoing monitoring across client relationships. The specific identity verification thresholds vary by transaction type — for example, foreign exchange transactions of CAD 3,000 or more trigger identity verification obligations for MSBs, while Large Cash Transaction Reports are required at the CAD 10,000 threshold. MSBs must also apply enhanced due diligence (EDD) to high-risk relationships. Common deficiencies include:

  • Failure to verify identity at the applicable transaction thresholds
  • Failure to identify the beneficial owner of corporate clients
  • Absence of politically exposed person (PEP) and head of an international organisation (HIO) screening
  • No documented EDD procedures for high-risk client relationships
  • Inadequate ongoing monitoring of existing client relationships, particularly where client risk profiles change over time

Our KYC Requirements for Canadian MSBs: CDD, EDD, Ongoing Monitoring & PCMLTFA guide covers these obligations in full.

4. False, Misleading, or Materially Incomplete Registration Information

FINTRAC’s registration database is only as useful as the information it contains. Registrants who fail to update material changes — new business lines, new agents, new operating addresses, changes to officers or directors — leave FINTRAC unable to accurately assess their actual risk profile. Where FINTRAC finds that the gap between registered and actual operations is substantial, it may treat this as a failure to provide accurate registration information, which is itself grounds for revocation under the Act.

This is particularly common in MSBs that have expanded their product offering — for example, adding cryptocurrency exchange or prepaid card issuance — without amending their FINTRAC registration to reflect the new regulated activity.

5. Failure to Conduct or Act on an Independent Effectiveness Review

The two-year effectiveness review is not a formality. It is FINTRAC’s expectation that an independent, qualified reviewer will systematically test the MSB’s compliance program — not merely describe it. MSBs that conduct perfunctory self-reviews, or that conduct genuine reviews but then fail to implement the resulting recommendations, face significant regulatory exposure.

FINTRAC examiners specifically look for evidence that effectiveness review findings have been actioned. An effectiveness review that identified material deficiencies 18 months ago, with no documented evidence of subsequent remediation, signals to FINTRAC that the MSB was aware of its non-compliance and chose not to address it — a significantly more serious finding than simple ignorance.

See our analysis of FINTRAC 2026 MSB Revocations for a breakdown of recent enforcement patterns and the compliance failures most commonly underlying revocation decisions.

6. Failure to Renew the Two-Year Registration

FINTRAC MSB registrations must be renewed every two years. Failure to renew before expiry means the registration lapses — and from that point, the business is effectively operating without a valid registration, which engages the PCMLTFA’s registration requirements and exposes the business to enforcement action. This is among the most avoidable causes of compliance failure, yet it continues to catch operators off guard, particularly businesses that established their initial registration and then allowed it to drift without active compliance oversight.

See our full guide on FINTRAC MSB Renewal: Two-Year Registration Requirements for the renewal process, timelines, and common pitfalls.

7. Agents and Third-Party Distribution Failures

MSBs that operate through a network of agents bear full regulatory responsibility for those agents’ compliance under the PCMLTFA. FINTRAC examiners test whether the MSB has written agent agreements in place, whether agents have received documented AML training, whether the MSB actively monitors agent activity for compliance, and whether the MSB has mechanisms to identify and address non-compliant agent behaviour. Failures in agent oversight are a growing cause of enforcement action, particularly for remittance MSBs with extensive retail agent networks in high-risk corridors.

⚠️

COMMON MISTAKE

Many MSB operators assume that because they have never received an AMP or a formal warning from FINTRAC, their compliance posture is acceptable. This is dangerously wrong. FINTRAC’s examination cycle means your business may not be examined for several years — but when it is, the examiner will look back at the entire period since your last examination. Years of accumulated non-compliance become a single catastrophic finding — and there is no statute of limitations on the underlying violations.

The Revocation Process: How FINTRAC Triggers and Executes a Revocation

Understanding the procedural sequence of a FINTRAC revocation gives you the best chance of intervening effectively at the right moment.

Step 1: Examination or Investigation

Most revocations begin with a FINTRAC compliance examination — either a scheduled examination, a risk-based targeted examination, or an examination triggered by intelligence, STR pattern analysis, or referral from another agency such as the RCMP, CSIS, or the Canada Revenue Agency.

FINTRAC conducts examinations both on-site and by correspondence. During this process, examiners request documentation packages, interview staff at various levels, and test your actual transaction records against your stated policies and procedures. The examination is not designed to catch you off guard — it is designed to test whether your documented compliance program reflects what your business actually does.

Step 2: Notice of Non-Compliance

Following an examination, FINTRAC typically issues a Notice of Non-Compliance identifying specific violations of the PCMLTFA and Regulations. This is your first formal signal that enforcement action — up to and including revocation — may be on the table.

At this stage, many MSBs believe the matter can be resolved with a written response. That may be true — but only if the response is substantive, credible, and backed by a genuine remediation plan rather than promises. A response that restates your existing compliance documentation without demonstrating that the identified deficiencies have been addressed is unlikely to satisfy FINTRAC.

Step 3: Notice of Intent to Revoke

Where FINTRAC is not satisfied by the MSB’s response to its non-compliance notice — or where the violations are serious enough to warrant direct escalation — it issues a formal Notice of Intent to Revoke. Under the PCMLTFA’s procedural framework, the registrant has the right to make written representations to FINTRAC within the period specified in the notice, setting out why revocation should not proceed.

The representations window is determined by FINTRAC in the notice itself and varies depending on the complexity of the matter. It is not a fixed statutory period and it is not automatically extendable — missing it means forfeiting your primary opportunity to halt the process.

This is the most critical intervention point in the entire process. A well-constructed representations package — demonstrating that the non-compliance has been fully remediated, that systemic controls are in place, and that leadership has taken genuine and documented accountability — can halt the revocation.

Step 4: Revocation Order

If FINTRAC is not persuaded by the representations made, or if no representations are received within the specified period, it issues a formal Revocation Order. The revocation is immediately reflected in FINTRAC’s public MSB registry, meaning counterparties, banks, foreign regulators, and the general public can see that your registration has been cancelled.

Step 5: Judicial Review

A registrant whose registration has been revoked may seek judicial review in the Federal Court of Canada. This is a formal legal proceeding requiring experienced counsel with administrative law and PCMLTFA expertise. The standard of review applied by the Federal Court is typically reasonableness — the Court assesses whether FINTRAC’s decision falls within a range of acceptable and defensible outcomes based on the facts and applicable law, rather than substituting its own view of the correct outcome.

Consequences of Having Your MSB Registration Revoked

Revocation is not a temporary inconvenience. Its consequences cascade through every dimension of your business, often simultaneously.

Immediate Operational Cessation

From the effective date of revocation, you must cease all regulated money services activities in Canada immediately. This means no foreign exchange, no remittances, no cryptocurrency transactions, no prepaid card issuance. The PCMLTFA’s registration requirements make continuing to operate in regulated activities without a valid registration a serious legal matter with criminal and civil dimensions.

Banking Relationship Termination

Canadian financial institutions conduct regular KYC and ongoing due diligence on their MSB clients — specifically checking FINTRAC’s public registry as part of that process. A revoked MSB registration will almost certainly trigger account termination by your banking partners, typically with minimal notice. Given how difficult it already is for MSBs to establish and maintain banking relationships in Canada, losing them due to a revocation is extremely difficult to recover from — even after re-registration. For background on the MSB banking landscape, see our guide on How to Get Banking for Your Canadian MSB or PSP.

Reputational Damage

FINTRAC’s public MSB registry is accessible to all. Your clients, partners, investors, and counterparties worldwide can immediately see that your registration was revoked. Where FINTRAC also publishes an AMP notice in connection with the same enforcement action — which it does for all AMP decisions — the specific violations are publicly documented alongside your entity name. The reputational damage from a public revocation is frequently more lasting than any financial penalty.

Criminal and Civil Liability

Where revocation follows findings of serious non-compliance, FINTRAC and the RCMP may refer the matter to prosecutors for criminal investigation. Officers and directors of the MSB can face personal liability where they were responsible for compliance failures or where they knowingly permitted ongoing violations to continue.

Downstream Tax and Corporate Compliance Complications

A revoked MSB with outstanding compliance issues may face complications in CRA filing obligations, particularly around GST/HST reporting tied to money services activities. See our guide on MSB Compliance vs. Tax Compliance in Canada for a full picture of how regulatory and tax obligations interact, and our Common Tax Mistakes Canadian MSBs Make with the CRA for the specific pitfalls most likely to compound an already difficult situation.

Immediate Steps to Take When You Receive a Revocation Notice

If you have received a FINTRAC Notice of Intent to Revoke — or even a Notice of Non-Compliance that you believe may be escalating — your response in the first 72 hours matters enormously.

1. Do not ignore it or assume it will resolve itself. FINTRAC timelines are procedurally driven and non-negotiable. Missing the representations window means forfeiting your most effective intervention opportunity.

2. Engage qualified compliance counsel immediately. This is not the moment for internal self-help. You need advisors who understand the PCMLTFA enforcement framework, have hands-on experience constructing FINTRAC representations, and can credibly demonstrate remediation to an experienced regulator.

3. Preserve all documentation. Do not delete, modify, or reorganise any files, communications, or records relating to your AML program, transaction monitoring, or KYC processes. FINTRAC and potentially the courts will need to assess what actually existed during the examination period.

4. Conduct an emergency gap assessment. Before you can respond substantively to FINTRAC, you need to know exactly what is broken and what you can credibly commit to fixing — and on what timeline. This requires an experienced compliance practitioner to rapidly assess your AML program against the PCMLTFA requirements with genuine independence.

5. Brief your board and senior management. Revocation risk is a material business issue. Officers and directors need to be immediately informed, and governance documentation of that briefing should be created and retained.

6. Contact ComplyFactor. Our FINTRAC MSB Audit and Independent AML Effectiveness Review service is designed specifically to provide the independent assessment and remediation documentation that FINTRAC expects to see in a credible representations package. Reach out via our contact page for an urgent consultation.

💡

PRO TIP

When constructing your representations to FINTRAC, the strongest submissions do not merely dispute findings — they demonstrate that deficiencies have already been remediated. An independent AML effectiveness review conducted after the FINTRAC examination, showing with evidence that identified gaps have been closed, is exponentially more persuasive than a written commitment to fix things in the future. FINTRAC has seen every version of a future promise. Completed remediation is what moves the needle.

How to Respond: Building Your Remediation Case

A credible response to FINTRAC’s revocation notice is built around three pillars: acknowledgement, remediation, and assurance. FINTRAC’s decision-makers are experienced regulators — they respond to substance, not rhetoric, and they can identify a box-ticking exercise immediately.

Pillar 1: Acknowledge the Deficiencies Accurately

Do not dispute findings that are clearly documented and internally consistent. If FINTRAC’s examination found that your STR filing rate was near zero for a multi-year period across an MSB processing high-risk transaction volumes, disputing that finding will damage your credibility across the entire representations package. Acknowledge what was wrong, clearly and precisely, with specific reference to the PCMLTFA provisions engaged.

Pillar 2: Document Completed Remediation

The most powerful element of any representations package is evidence that the deficiencies have already been fixed — not that you intend to fix them. A comprehensive remediation package includes:

  • A revised, PCMLTFA-compliant written compliance policies and procedures manual, dated after the examination and reflective of current business activities
  • A newly appointed or re-qualified compliance officer with documented authority, relevant credentials, and operational resources
  • An updated, documented risk assessment covering clients, products, services, and delivery channels — with risk ratings supported by evidence
  • Records of completed staff AML training with attendance logs, test scores where applicable, and training materials
  • Transaction monitoring logs demonstrating post-examination STR filing activity at a rate proportionate to your risk profile
  • An independent AML effectiveness review conducted after remediation, validating that the program now meets PCMLTFA requirements

ComplyFactor’s AML Audit Services, AML Compliance Program practice, and AML Advisory Services are designed for exactly this scenario — delivering independent, credible assessments and program documentation that carry weight with FINTRAC examiners.

Pillar 3: Provide Structural Assurance

FINTRAC needs confidence that the non-compliance was not a symptom of a fundamentally broken compliance culture that will simply reproduce itself after the representations process ends. Structural assurance means demonstrating:

  • Board-level accountability for the compliance failures, with board minutes evidencing discussion and direction
  • Structural changes to the compliance function — not just new documents, but new oversight mechanisms and reporting lines
  • A forward-looking compliance monitoring calendar with specific milestones and responsible parties
  • Engagement of an ongoing external compliance advisor — a fractional CAMLO or MLRO — providing continuity of independent oversight

Our Global MLRO Services practice provides ongoing fractional CAMLO support to Canadian MSBs — giving FINTRAC the assurance that an experienced, independent professional is maintaining oversight of the compliance function on a continuing basis. You can also review our 5 Reasons Why You Should Outsource Your MLRO for more on the strategic case for this model.

Re-Applying for MSB Registration After Revocation

If your revocation has already taken effect — either because FINTRAC proceeded despite your representations, or because you missed the representations window — you are not permanently barred from re-registration in most circumstances. However, re-registration after revocation is significantly more demanding than initial registration, and the bar for demonstrating genuine compliance transformation is high.

Is Re-Registration Possible?

The PCMLTFA does not impose an automatic permanent bar on re-registration following revocation. However, FINTRAC will scrutinise a re-registration application from a previously revoked entity with exceptional care. Any application that does not demonstrate a fundamentally transformed compliance posture — with structural evidence, not just documentation — will be rejected. FINTRAC will also consider whether the officers and directors involved in the original compliance failures remain in operational control of the re-applicant entity.

What FINTRAC Expects in a Re-Registration Application

A post-revocation re-registration application should include:

  • A full, written AML compliance program covering all five PCMLTFA elements, prepared specifically after the revocation event
  • An independent pre-registration AML program review by a qualified external compliance practitioner, confirming the program meets current PCMLTFA requirements
  • Evidence that the underlying causes of the revocation have been structurally addressed — through personnel changes, system upgrades, governance reforms, or compliance function restructuring
  • A detailed, honest explanation of the circumstances that led to revocation and the specific, documented remedial actions taken in response
  • Updated and fully current beneficial ownership, officer, director, and agent information

Timing Considerations

FINTRAC is not obligated to expedite a re-registration from a previously revoked entity. Processing timelines for complex applications — and a post-revocation re-registration is by definition complex — can extend to several months. During this period, you cannot legally conduct any regulated money services activities in Canada. For a full guide to the registration process and what a new or re-registration application must contain, see our How to Apply for a FINTRAC MSB License guide and our Common Mistakes to Avoid in MSB Registration article.

How to Prevent MSB Revocation: A Proactive Compliance Framework

Prevention is categorically preferable to remediation. The compliance investments required to avoid a FINTRAC revocation are a fraction of the cost — financial, operational, and reputational — of responding to one. The following framework is built around the specific failure modes that FINTRAC enforcement actions consistently reveal.

1. Build a Real AML Program, Not a Paper One

FINTRAC examiners are trained to distinguish between documented compliance programs and operational compliance programs. The test is not whether you have a policies and procedures manual — it is whether your staff understand it, whether they follow it in practice, and whether it actually reflects the current state of your business.

Use our Complete AML Program Blueprint as a foundation, and ensure that your program is reviewed and updated at least annually — not only when a FINTRAC examination triggers a scramble.

2. Conduct Independent Effectiveness Reviews on Schedule — or More Frequently

The two-year effectiveness review is a minimum regulatory standard, not an optimal compliance posture. MSBs operating in higher-risk segments — cryptocurrency exchange, international remittance, high-volume foreign exchange — should be conducting effectiveness reviews annually.

Critically, the review must be genuinely independent. A compliance officer reviewing their own program is not an independent review and does not satisfy FINTRAC’s expectations. See our AML Review vs AML Audit guide for a clear articulation of what independence means in the PCMLTFA context, and our MSB AML Audit Requirements article for the specific standards FINTRAC expects an independent reviewer to apply.

3. Maintain Your Registration Currency — Actively

Set calendar reminders for your MSB registration renewal well in advance of the two-year expiry date. Do not assume FINTRAC will proactively remind you. Update your registration promptly when material changes occur — new business lines, new agents, new officers, new addresses, new beneficial owners. Registration maintenance is an ongoing administrative obligation, not a one-time event.

See our detailed guide on FINTRAC MSB Renewal: Two-Year Registration Requirements for the renewal process and what triggers a mandatory registration update.

4. Invest in Calibrated Transaction Monitoring

Your transaction monitoring system must be calibrated to your actual client base, transaction volumes, and risk profile. Generic monitoring rules that generate high volumes of low-quality alerts are not effective monitoring — they are alert fatigue that causes your team to miss genuine red flags. FINTRAC examiners assess your STR rate, the quality of your STR narratives, the timeliness of your filing, and the completeness of your record-keeping. All of these signal the quality of your monitoring function.

5. Engage a Qualified Compliance Officer or Fractional CAMLO

The PCMLTFA requires the appointment of a compliance officer with the authority and resources to implement the compliance program effectively. For smaller and mid-sized MSBs, a fractional CAMLO — an experienced compliance professional engaged on a part-time or project basis — can deliver the expertise that a full-time hire would cost exponentially more to provide.

ComplyFactor’s Global MLRO Services practice provides experienced, practitioner-level compliance officers who serve as your regulatory interface with FINTRAC, keep your program current, and provide the board-level reporting that good compliance governance requires.

6. Identify Your Vulnerabilities Before FINTRAC Does

Use our AML Risk Assessment Calculator to map where your program is most exposed, and read our Hidden Compliance Pitfalls That Sink MSB Effectiveness Reviews for the specific weaknesses FINTRAC examiners identify most frequently. Our AML Audit Checklist for 2025 also provides a practical self-assessment framework you can use internally before commissioning a formal review.

🔍

INDUSTRY INSIGHT

FINTRAC’s published enforcement data consistently shows that the MSBs subject to revocation are overwhelmingly businesses operating without meaningful compliance infrastructure — not businesses whose well-resourced programs failed at the margins. Investment in a genuine compliance program is not a cost centre; it is the single most important risk management decision an MSB can make, and it is categorically cheaper than the enforcement alternative.

FINTRAC’s Enforcement Track Record: What the Data Shows

FINTRAC has significantly escalated its enforcement posture over the past several years, and the MSB sector is not insulated from this trend.

FINTRAC publishes all Administrative Monetary Penalty (AMP) decisions on its public enforcement actions page, providing a transparent record of the violations that attract penalties and the businesses that receive them. Reviewing this data reveals a consistent pattern: the most severe enforcement actions — and the revocations that accompany or follow them — target businesses with systemic, multi-element compliance failures rather than isolated procedural lapses. A business with one reporting gap is a candidate for an AMP. A business with no compliance program, no STR filing history, and unverified KYC across its entire client base is a candidate for revocation.

For context on what significant enforcement actions look like and what lessons they carry, see our analysis of Canada’s Historic $176M FINTRAC AML Penalty — the largest AML penalty in Canadian history, issued to a major financial institution. The findings in that case — inadequate transaction monitoring, STR filing failures, and governance breakdowns — are the same deficiencies FINTRAC finds in MSBs at every scale.

The 2025 Canada Assessment of Money Laundering and Terrorist Financing Risks published by the Department of Finance identifies MSBs — particularly those operating in high-risk segments such as cryptocurrency exchange and international remittance — as priority areas for regulatory attention. For MSBs specifically, FINTRAC’s published revocation data — analysed in our FINTRAC 2026 MSB Revocations Analysis — shows a consistent pattern: the majority of revoked operators were businesses with no documented compliance program, no effective transaction monitoring, and no independently reviewed AML framework.

Canada’s ongoing AML reform agenda — including the Canada Anti-Money Laundering Action Plan and continued legislative reform — signals continued intensification of enforcement. The message from Ottawa is unambiguous: regulatory scrutiny of MSBs is increasing, and businesses that do not invest in genuine compliance are carrying existential risk on their balance sheets.

Frequently Asked Questions

Q: Can FINTRAC revoke my MSB registration without warning?

In most cases, FINTRAC is required to provide notice and an opportunity for representations before revoking a registration. However, the Act preserves FINTRAC’s discretion to act more quickly where it determines that prior notice is contrary to the public interest — for example, where there is evidence of ongoing criminal activity or deliberate evasion of reporting obligations. If your circumstances involve those factors, you should not assume that the standard procedural protections will apply in full.

Q: How long does the FINTRAC revocation process take from start to finish?

From the initial examination to a final revocation order can take anywhere from several months to over a year, depending on the severity of the findings, the MSB’s responsiveness, and whether the matter is contested through representations or judicial review. The representations window specified in the Notice of Intent to Revoke is set by FINTRAC and varies by case — it is not a fixed statutory period, and it is generally not automatically extendable.

Q: Will my revocation be made public?

Yes. FINTRAC maintains a public registry of registered MSBs, and revocations are immediately reflected in that registry. Where FINTRAC also issues an AMP in connection with the same enforcement action, the penalty details — including the entity name, violation types, and penalty amount — are published on FINTRAC’s website and remain publicly accessible.

Q: Can I continue operating while I appeal a revocation?

This question requires legal advice from counsel with administrative law expertise. Filing a judicial review application does not automatically stay a revocation order — a specific stay must be obtained from the Federal Court. Continuing to operate in regulated activities without a valid registration while litigation is pending carries serious legal risk and should not be undertaken without explicit legal advice confirming a stay is in effect.

Q: Can the officers and directors of a revoked MSB face personal liability?

Yes. Where compliance failures were the result of decisions made by officers or directors — or where they were aware of ongoing non-compliance and failed to act — personal liability under the PCMLTFA is a well-documented risk. FINTRAC and the RCMP can, and do, refer serious cases for criminal prosecution, and individual officers can be named in those proceedings.

Q: How does a PSP revocation differ from an MSB revocation?

Payment Service Providers (PSPs) registered under the Retail Payment Activities Act (RPAA) are supervised by the Bank of Canada, not FINTRAC. Many businesses are dually regulated — registered as both an MSB with FINTRAC and a PSP with the Bank of Canada. A FINTRAC revocation does not automatically trigger a Bank of Canada PSP de-registration, but it will almost certainly be factored into the Bank of Canada’s ongoing supervisory assessment and may trigger an independent supervisory response. For more on PSP obligations, see our RPAA Compliance Guide and PSP Annual Reporting Requirements for Bank of Canada.

Q: What is the difference between an AMP and a revocation?

An Administrative Monetary Penalty (AMP) is a financial penalty imposed by FINTRAC for specific, proven violations of the PCMLTFA — calculated according to FINTRAC’s published penalty structure. A revocation is the cancellation of the MSB registration itself. These are separate enforcement tools that can be deployed independently or together. An AMP does not automatically lead to revocation, but the pattern of violations underlying an AMP significantly elevates revocation risk, particularly where violations are systematic, multi-element, or repeat occurrences.

Q: What should I do if I discover my MSB registration has already lapsed through non-renewal?

If your registration has expired without renewal — as distinct from being revoked for cause — you should cease regulated activities immediately and apply for re-registration as quickly as possible. Do not continue operating between expiry and re-registration. See our guide to Common Mistakes to Avoid in MSB Registration for context on how FINTRAC treats registration lapses, and our FINTRAC MSB Renewal guide for the renewal process.

Q: Does a FINTRAC revocation affect my ability to operate as an MSB in other countries?

Yes, in practice — though not necessarily through direct regulatory linkage. Many international regulators and banking partners conduct due diligence checks against FINTRAC’s public registry as part of their own onboarding and monitoring processes. A visible revocation will be identified. It may also constitute a material disclosure obligation if you hold licences or registrations in other jurisdictions. See our Ultimate Guide to VASP Compliance: Global AML/CTF/PF Standards for a broader view of how enforcement actions in one jurisdiction can cascade internationally.

Q: Can I convert to a PSP registration to avoid the FINTRAC MSB framework?

No. The PCMLTFA and the RPAA are separate regulatory frameworks with separate obligations. Holding a PSP registration with the Bank of Canada does not exempt a business from FINTRAC MSB registration requirements if it conducts activities that meet the PCMLTFA definition of money services. Many businesses require both registrations. For a detailed comparison of the two frameworks, see our MSB vs PSP Licenses in Canada guide.

Scroll to Top
Telegram WhatsApp