FINTRAC Compliance for Real Estate Brokers and Developers in 2026

A deposit arrives at a brokerage from someone who is not on the offer. The seller has no agent, and the buyer is a numbered company. In a transaction like this, several FINTRAC rules apply at once, and which ones depend on who is acting for whom. This guide sets out FINTRAC real estate compliance for brokers, sales representatives and developers as it stands in October 2026. It covers the federal AML requirements for real estate in Canada under the PCMLTFA only; provincial licensing rules are separate. Dollar amounts are in Canadian dollars.

Who FINTRAC's Real Estate Rules Apply To

Brokers and sales representatives. FINTRAC defines a real estate broker or sales representative as a person or entity authorized under provincial legislation to act as agent or mandatary for purchasers or vendors in a purchase or sale of real property, including land, houses and commercial buildings. The FINTRAC requirements for real estate brokers apply when you act in that capacity, even if you receive no commission and whatever fiduciary duties you owe.

Property management. FINTRAC states that these obligations do not apply to activities that relate to property management, such as leases or rental management, where no purchase or sale is involved. That is a statement about this sector's obligations. It does not mean a business can never have PCMLTFA obligations through another regulated activity; mortgage brokering, for example, is a separate reporting-entity sector.

Developers. A real estate developer is a person or entity, other than a broker or sales representative, that in any calendar year after 2007 has sold to the public five or more new houses or condominium units; one or more new commercial or industrial buildings; one or more new multi-unit residential buildings with five or more units each; or two or more such buildings that together contain five or more units. Sales to the public include sales to a person, corporation or other entity. A building is new if constructed within the past two years and not occupied for its intended purpose before sale. FINTRAC treats a substantially renovated home (90% or more of the interior) as new, and addresses prefabricated homes: the manufacturer is responsible when it sells directly to consumers, and the retailer is when it enters the agreement of purchase and sale.

Staying a developer. From the day you first meet any condition, you are a developer for the rest of that year and for following years, whether or not you meet a condition again, until there is a substantial and permanent change to your operations. There is no yearly reset. An incorporated developer is covered whether it sells on its own behalf or for a subsidiary or affiliate.

Broker, Sales Representative or Developer: Who Is Responsible?

In practice, the brokerage owns the operating framework: procedures, risk assessment, training, identity verification and records. The representative follows those procedures and keeps personal STR responsibility, so should know how to escalate.

What FINTRAC Requires From Real Estate Businesses: The Obligation Map

The table summarizes FINTRAC real estate requirements. The sections that follow explain the operationally important ones.

What Changed for Real Estate Compliance in 2025–2026

October 1, 2025. New regulations took effect on this date. Four matter to real estate businesses:

• Unrepresented parties. Brokers and sales representatives must verify the identity of any party to a purchase or sale who is not represented by a broker or sales representative, keep an information record on that party and make the associated third party determination.
• Agents and mandataries. Businesses may use an agent or mandatary to verify the identity of a corporation or other entity, not only a person, subject to FINTRAC's conditions.
• Beneficial ownership discrepancy reporting. For a federal (CBCA) corporation you have assessed as high risk, you must consult Corporations Canada's database and report a material discrepancy to Corporations Canada within 30 days.
• Listed person or entity property. The Listed Person or Entity Property Report now also covers disclosures required under the Special Economic Measures Act and the Justice for Victims of Corrupt Foreign Officials Act, in addition to the earlier United Nations Act and Criminal Code reports.

March 26, 2026. The Strengthening Canada's Immigration System and Borders Act (Bill C-12) received Royal Assent and, according to FINTRAC, several parts took effect that day. FINTRAC describes a new administrative monetary penalty framework: higher maximums, ability to pay as a criterion, compliance agreements in all cases where a penalty is imposed, compliance orders as a new tool, and certain compliance program violations elevated to very serious. Compliance programs must now be reasonably designed, risk-based and effective. Universal enrolment is not yet in force. Bill C-12 created the framework, but FINTRAC states that it will come into force in line with regulations still to be developed and published in the Canada Gazette, Part II, and that information on universal enrolment will be provided as it becomes available. As of October 6, 2026, FINTRAC's modernization page (last modified April 13, 2026) gives real estate businesses no enrolment deadline, form or renewal cycle. The business relationship, beneficial ownership and PEP structure discussed below dates from 2021 and is not new.

The FINTRAC Compliance Program Real Estate Businesses Need

A FINTRAC real estate compliance program consists of the elements a reporting entity is legally required to have: a compliance officer with the necessary authority, written policies and procedures, a documented risk assessment, a written and implemented ongoing training program and plan, and a two-year effectiveness review. The review must be carried out at least every two years and documented, and it tests the policies and procedures, the risk assessment and the training program. FINTRAC states that it is carried out by an internal or external auditor, or by the reporting entity itself if it does not have such an auditor, so a real estate business is not required to hire one. Since Bill C-12, the Act requires the program to be reasonably designed, risk-based and effective, which looks at how well it works, not only whether each document exists.

What sector-specific means. A useful real estate risk assessment reflects the business actually done. As a practical matter, consider client types, corporate and trust purchasers, foreign clients and high-risk jurisdictions, cash and virtual currency exposure, private financing, assignments, third parties and nominees, delivery channel, geography, property type and transaction patterns. This list is a ComplyFactor practical assessment, not an official FINTRAC checklist.

The National Risk Assessment. Finance Canada's 2025 Assessment of Money Laundering and Terrorist Financing Risks in Canada rates real estate brokers, sales representatives and developers as a high vulnerability sector. It says complex transactions can involve shell companies for investment purchases and assignment clauses in contracts to purchase and sell, and that the sector can be exposed to high-risk clients, including PEPs, foreign investors (including from high-risk jurisdictions or jurisdictions of concern) and individuals in vulnerable occupations and businesses. This is a sector-level inherent vulnerability rating, assigned before mitigation. The assessment states that it does not assess risks specific to individual organizations, so it does not make any particular client or transaction high risk. FINTRAC expects it to be a foundational input to your own risk assessment. ComplyFactor's National Risk Assessment article covers the report in more detail.

When Real Estate Businesses Must Verify Client Identity

FINTRAC requires verification for large cash transactions, large virtual currency transactions, suspicious transactions, receipt of funds and information records. Real estate has its own triggers. Do not import money services business thresholds.

Two sector points matter operationally. If you receive funds from a client represented by another broker, the broker who holds the relationship with the paying client identifies that client. And a developer is not the client of a broker it hires as an employee, so the developer identifies purchasers even when the employee does the work. The five prescribed methods and the records they require are in ComplyFactor's FINTRAC identity verification guide.

When a Business Relationship Begins

For real estate brokers, sales representatives and developers, you enter into a business relationship with a client the first time you are required to verify their identity. For money services businesses it is the second verification within five years. Do not apply that rule here. If an exception means you are not required to verify identity, no relationship is formed on that occasion. A suspicious transaction counts even where your reasonable measures to verify identity fail, or you believe verifying would tip off the person.

The relationship matters because it triggers the PEP and HIO determination, a record of the purpose and intended nature of the relationship, and ongoing monitoring, which includes keeping beneficial ownership information current.

Beneficial Ownership, Third Parties and Unrepresented Parties

These four concepts are often conflated. They answer different questions.

Beneficial ownership. Brokers and developers must obtain beneficial ownership information for entities and take reasonable measures to confirm its accuracy, when first obtained and during ongoing monitoring. Reasonable measures can include asking the client, open-source searches and commercially available information. For a high-risk federal corporation, consult Corporations Canada and report material discrepancies as described above. Do not confuse this with provincial land-owner or title registries. They are separate regimes, although a registry may be a useful source.

Third party determination. You must take reasonable measures to determine whether a third party is involved when FINTRAC's rules require you to report certain transactions or keep certain records, and, since October 1, 2025, for unrepresented parties. A person who merely supplies funds is not automatically a third party; what matters is whether they instruct the client to act on their behalf. Record the determination and its basis either way. ComplyFactor's third party determination article and beneficial ownership guide cover the mechanics.

Unrepresented parties in practice. The brokerage should identify the unrepresented party, keep an information record on them and record the third party determination. For a corporation, keep the part of its corporate records dealing with the power to bind. Brokerage forms and agent checklists that predate October 2025 may need updating if they assume everyone in the transaction is a client.

Ongoing Monitoring and High-Risk Clients

Once you have a business relationship, you must periodically conduct ongoing monitoring based on your risk assessment. Its purposes include detecting suspicious transactions you must report, keeping client identification information, beneficial ownership information and the record of the purpose and intended nature of the relationship up to date, and reassessing the risk associated with the client's transactions and activities. You must keep a record of the measures taken and the information obtained, for at least five years from the date the record was created.

Updating is not re-identifying. FINTRAC states that keeping client identification information up to date, at a frequency based on your risk assessment, does not require re-identifying the client by the original verification method. It means keeping information such as name, address, occupation or the nature of an entity's business current. If you previously verified identity by a prescribed method, kept the records and have no doubts, you need not verify again. No annual refresh is prescribed; frequency follows your risk assessment, and higher-risk relationships warrant more frequent monitoring and enhanced measures.

PEP and HIO Requirements

For non-account-based sectors, including real estate, you must take reasonable measures to determine whether a person is a politically exposed person (PEP), a head of an international organization (HIO), a family member of one, or in certain cases a close associate, at these points:

• when you enter into a business relationship;
• when you periodically monitor a business relationship;
• when you detect a fact that gives reasonable grounds to suspect the person is one; and
• when you receive $100,000 or more in cash or virtual currency equivalent, within 30 days after the day of the transaction.

This is not a rule to screen every client at every stage. It is tied to those points. If you have already determined someone is a foreign PEP or a family member of one, you need not repeat the determination.

What follows depends on the type. For a foreign PEP, or a family member or close associate of one, you must take reasonable measures to establish the person's source of wealth within 30 days and take enhanced measures, including extra identity verification and enhanced ongoing monitoring. For a domestic PEP, an HIO or their family members, those steps apply only where, on your risk assessment, you consider the risk of a money laundering or terrorist financing offence to be high. For a $100,000 or more cash or virtual currency receipt involving a foreign PEP, you must establish the source of the cash or virtual currency and the person's source of wealth, and have a member of senior management review the transaction. For a domestic PEP or HIO, those steps apply where you consider the risk high. Records are kept under two separate retention rules, set out in the record-keeping table below. ComplyFactor's PEP article explains the definitions.

Source of Funds: Required, or a Risk Control?

FINTRAC defines source of funds as the origin of the particular funds used in a transaction, and source of wealth as the origin of a person's total assets. The sector guidance reviewed for this article ties specific source-of-funds and source-of-wealth steps to the PEP and HIO situations above. Outside those, asking about source of funds is a risk-based control that your risk assessment may call for, for example with a high-risk client. It is not a universal evidentiary requirement for every buyer.

What Real Estate Businesses Must Report to FINTRAC

Real estate brokers, sales representatives and developers report four types of report to FINTRAC. Unlike money services businesses, they do not file electronic funds transfer reports.

The 24-hour rule. If you receive two or more cash amounts, or two or more virtual currency amounts, totalling $10,000 or more within a consecutive 24-hour window, and you know the transactions are by or on behalf of the same person or entity, they are aggregated into one report. You are also treated as having received cash or virtual currency when someone you authorized to receive it does. Large cash and virtual currency reports are subject to record-keeping as well as reporting, and exceptions exist for amounts received from financial entities and public bodies. ComplyFactor's LCTR guide, LVCTR guide and 24-hour rule article go deeper.

Real-Estate Money Laundering Indicators to Monitor

A single indicator is not a report trigger, and cash is not automatically suspicious. You assess facts, context and indicators together, and report when you have reasonable grounds to suspect. FINTRAC publishes indicators for developers, brokers and sales representatives, organized by themes including client behaviour, bribery and corruption, and terrorist financing. FINTRAC says it will review how your procedures use indicators within your STR process, and expects you to show an effective process to identify, assess and submit STRs.

FINTRAC and the CRA's operational alert on laundering the proceeds of tax evasion in real estate lists indicators including investment vehicles or offshore accounts used to buy property, brokers or representatives with past disciplinary issues engaged in development, brokers or representatives buying and quickly reselling properties with unknown or third-party funds (sometimes in cash), and family members controlling several services linked to the industry. FINTRAC's real estate indicators also address the use of a nominee, noting that there are legitimate reasons to use one but that criminals use nominees to distance themselves from transactions. As ComplyFactor's practical view, rather than FINTRAC's list, useful internal triggers include unexplained use of third parties, ownership that cannot be explained, a client indifferent to price, and activity inconsistent with what you know about the client. Record why an escalation was closed. ComplyFactor's article on documenting a decision not to file shows how.

Record-Keeping Requirements

Retention triggers differ by record. Do not assume five years from the transaction date for everything.

Records must be producible to FINTRAC within 30 days of a request, and may be electronic if a paper copy can easily be produced. When an employee or contractor kept records for you, you must obtain and keep them before that person's employment or contract ends. Retention can be longer than FINTRAC's minimum, for example because of another regulator, but not shorter. Identity verification, beneficial ownership and third party records have their own FINTRAC guidance and triggers.

What a FINTRAC-Ready Real Estate File Should Contain

This is a practical ComplyFactor file-readiness checklist. It is not an official FINTRAC checklist. A good file lets a reviewer reconstruct the transaction without the person who handled it.

Who

• Client and every relevant party, including any unrepresented party
• Identity verification method used, date and information relied on

What and why

• Property and transaction type, and your role (agent, developer, employee)
• Purpose and intended nature of the relationship, and commercial context where relevant

Money

• Receipt of funds record: amount, method, payer and payment path
• Cash or virtual currency flagged against the $10,000 and 24-hour tests

Ownership and third party

• Beneficial ownership information and the steps taken to confirm it; power-to-bind documents for a corporation
• Third party determination and its basis

Risk and reporting

• Risk rating, PEP and HIO determination and any enhanced measures
• Report filed, or the reason an escalation was closed

Evidence

• Supporting documents, dates, the reviewer and approver, and where the records are held so they can be produced within 30 days

Practical Real Estate Compliance Scenarios

These hypothetical examples are simplified. The facts of a real file may change the analysis.

Enforcement in 2026

Real estate is a FINTRAC-regulated sector, FINTRAC can examine compliance, and deficiencies can lead to enforcement. Since Bill C-12, FINTRAC's penalty framework has been strengthened and compliance agreements are used in all cases where a penalty is imposed. This article does not state penalty amounts, because FINTRAC's penalty guidance is evolving. See ComplyFactor's FINTRAC penalties article and examination readiness checklist.

How ComplyFactor Supports Real Estate FINTRAC Compliance

ComplyFactor is an AML advisory firm. Its real estate AML compliance page describes real-estate-specific program development, client file and risk assessment review, fractional compliance officer support and an independent effectiveness review. Underlying services include AML compliance program work covering written client identification and verification procedures, a customer risk rating framework with CDD and EDD trigger criteria, monitoring, training and governance; a fractional compliance officer; and an independent AML audit that includes risk-based sampling of KYC and EDD files. To discuss your brokerage or development business, speak with the AML advisory team.

Frequently Asked Questions

Does a lawyer's or bank's involvement remove the brokerage's obligations?

No. The obligations attach to your own activity as agent or developer. Another reporting entity's role does not transfer them. You can rely on identity verification done by another reporting entity or an agent only through FINTRAC's defined reliance and agent methods, which require written arrangements.

What if a client will not provide the required information?

Treat the refusal as a fact in your risk assessment. Whether a transaction was attempted and whether reasonable grounds to suspect exist is a case-by-case analysis. Keep any requests within your normal procedures so you do not tip off the client, and record what was asked and what happened.

Is a foreign buyer automatically high risk?

No. Finance Canada's assessment identifies foreign investors as one exposure for the sector, but your own risk assessment decides the rating, using the client, funds, structure and jurisdiction. The PEP rules also separate foreign from domestic PEPs.

Is FINTRAC's universal enrolment requirement already in force for real estate businesses?

No. Bill C-12 created the framework, but FINTRAC states that universal enrolment comes into force in line with regulations still to be developed and published in the Canada Gazette, Part II, and that information will be provided as it becomes available. As of October 6, 2026, FINTRAC's modernization page gives no enrolment deadline, form or renewal cycle for real estate businesses.

Does the $100,000 PEP trigger apply to every form of payment?

The separate transaction trigger in FINTRAC's PEP and HIO guidance for real estate lists receipt of $100,000 or more in cash or an equivalent amount of virtual currency. It does not list other payment forms for that trigger. Other payments still carry receipt-of-funds records, identity verification and STR duties, and business-relationship determinations are separate.