🛡️ Facing a revocation notice, or concerned your MSB registration is at risk? ComplyFactor provides fractional CAMLO services, FINTRAC audit preparation, AML programme remediation, and re-registration support for Canadian MSBs and PSPs — ensuring your compliance posture is defensible before FINTRAC comes knocking.
Key takeaways
- Revocation strips your legal right to offer regulated money services in Canada — every subsequent regulated transaction becomes a potential offence.
- The Notice of Intent to Revoke representations window is the single most critical intervention point.
- The strongest representations demonstrate completed remediation, not future promises.
- Revocation cascades: banking termination, public reputational damage, and potential personal liability for officers and directors.
What does FINTRAC MSB revocation actually mean?
FINTRAC holds broad statutory authority over money services businesses in Canada. When it revokes an MSB registration, it is not a warning or a fine — it is the forced removal of your legal authority to operate.
Under the PCMLTFA, every business conducting money services activities in Canada — foreign exchange, international remittances, cryptocurrency dealing, prepaid card issuance, virtual asset exchange — must be registered with FINTRAC. Operating without a valid registration is not a grey area: it is a federal offence carrying significant criminal and civil penalties. From the moment a revocation takes effect, every transaction you process in a regulated activity becomes a potential criminal act.
The legal framework: PCMLTFA and FINTRAC's revocation authority
FINTRAC's authority to revoke flows directly from the PCMLTFA and its regulations (PCMLTFR). FINTRAC may revoke a registration on several grounds, including:
- The registrant has contravened or failed to comply with the Act or its regulations.
- The registrant has provided false or misleading information in their registration or in any required report or record.
- The registrant has been convicted of a designated offence.
- The registrant has ceased to carry on the registered activities, or failed to comply with conditions of registration.
The Act also provides procedural protections: FINTRAC must give notice of its intention to revoke and an opportunity to make representations — except where it determines that urgency or severity makes prior notice contrary to the public interest. In cases of serious, ongoing non-compliance or deliberately false registration information, FINTRAC retains discretion to move with relative speed.
Top causes of MSB registration revocation
Every revocation is preceded by an examination or review identifying specific, documented deficiencies. The leading causes:
- Failure to maintain a compliant AML/CTF programme — the five mandatory elements: compliance officer, written policies, risk assessment, ongoing training, and an effectiveness review every two years. FINTRAC tests whether your programme is real and operational, not just on paper.
- Failure to submit mandatory reports — LCTRs, EFTRs, STRs, TPRs. Systematic failure to file is one of the most direct paths to enforcement, with STR obligations particularly scrutinised.
- Failure to conduct customer due diligence (KYC) — missing identity verification at applicable thresholds (e.g. FX of $3,000+), no beneficial-owner identification, absent PEP/HIO screening, no EDD for high-risk relationships, inadequate ongoing monitoring.
- False, misleading, or materially incomplete registration information — failing to update new business lines, agents, addresses, or officers, leaving FINTRAC unable to assess your actual risk profile.
- Failure to conduct or act on an independent effectiveness review — perfunctory self-reviews, or genuine reviews whose recommendations are never implemented. Unactioned findings signal the MSB knew of non-compliance and chose not to address it.
- Failure to renew the two-year registration — lapsed registration means operating without a valid registration. Among the most avoidable causes.
- Agent and third-party distribution failures — MSBs bear full responsibility for agents' compliance; weak agent oversight is a growing cause of enforcement, especially in high-risk remittance corridors.
⚠️ Common mistake. Many operators assume that because they've never received an AMP or warning, their compliance posture is acceptable. This is dangerously wrong. When FINTRAC does examine you, the examiner looks back at the entire period since your last examination — and years of accumulated non-compliance become a single catastrophic finding. There is no statute of limitations on the underlying violations.
The revocation process: how FINTRAC triggers and executes it
Step 1 — Examination or investigation. Most revocations begin with a compliance examination — scheduled, risk-based, or triggered by intelligence, STR pattern analysis, or referral from the RCMP, CSIS, or CRA. Examiners request documentation, interview staff, and test transaction records against your stated policies.
Step 2 — Notice of Non-Compliance. FINTRAC identifies specific violations. This is your first formal signal enforcement may be on the table. A response only helps if it's substantive and backed by a genuine remediation plan, not restated documentation.
Step 3 — Notice of Intent to Revoke. Where FINTRAC isn't satisfied, it issues a formal Notice of Intent to Revoke. You have the right to make written representations within the period specified — a window set by FINTRAC, not a fixed statutory period, and not automatically extendable. This is the most critical intervention point. A well-constructed package demonstrating full remediation, systemic controls, and genuine leadership accountability can halt the revocation.
Step 4 — Revocation Order. If FINTRAC isn't persuaded, it issues a formal Revocation Order, immediately reflected in the public MSB registry — visible to counterparties, banks, foreign regulators, and the public.
Step 5 — Judicial review. A revoked registrant may seek judicial review in the Federal Court. The standard of review is typically reasonableness — the Court assesses whether FINTRAC's decision falls within a range of defensible outcomes, rather than substituting its own view.
Consequences of having your registration revoked
- Immediate operational cessation — from the effective date, you must stop all regulated money services activities. Continuing is a serious legal matter with criminal and civil dimensions.
- Banking relationship termination — banks check FINTRAC's registry during due diligence; a revoked registration almost certainly triggers account termination, which is extremely difficult to recover from even after re-registration.
- Reputational damage — the public registry is accessible to all; where an AMP accompanies the action, the specific violations are publicly documented alongside your entity name.
- Criminal and civil liability — serious non-compliance may be referred to prosecutors; officers and directors can face personal liability.
- Downstream tax and corporate complications — including GST/HST reporting tied to money services activities.
Immediate steps when you receive a revocation notice
If you've received a Notice of Intent to Revoke — or a Notice of Non-Compliance you fear is escalating — your first 72 hours matter enormously:
- Do not ignore it. FINTRAC timelines are procedurally driven and non-negotiable; missing the representations window forfeits your most effective intervention.
- Engage qualified compliance counsel immediately — advisors who understand the PCMLTFA enforcement framework and can credibly demonstrate remediation.
- Preserve all documentation — do not delete, modify, or reorganise any files relating to your AML programme, monitoring, or KYC.
- Conduct an emergency gap assessment — know exactly what's broken and what you can credibly commit to fixing, and by when.
- Brief your board and senior management — revocation risk is a material business issue; document the briefing.
💡 Pro tip. The strongest representations don't merely dispute findings — they demonstrate deficiencies have already been remediated. An independent AML effectiveness review conducted after the FINTRAC examination, showing with evidence that gaps have been closed, is exponentially more persuasive than a written commitment to fix things later. FINTRAC has seen every version of a future promise. Completed remediation is what moves the needle.
How to respond: building your remediation case
A credible response is built around three pillars. FINTRAC's decision-makers respond to substance, not rhetoric, and can identify a box-ticking exercise immediately.
Pillar 1 — Acknowledge the deficiencies accurately. Do not dispute findings that are clearly documented; doing so damages your credibility across the entire package. Acknowledge what was wrong, precisely, with reference to the PCMLTFA provisions engaged.
Pillar 2 — Document completed remediation. The most powerful element is evidence the deficiencies are already fixed: a revised PCMLTFA-compliant policies manual dated after the examination; a qualified compliance officer with documented authority; an updated, evidence-supported risk assessment; completed staff training records; transaction-monitoring logs showing post-examination STR activity proportionate to risk; and an independent AML effectiveness review conducted after remediation.
Pillar 3 — Provide structural assurance. Demonstrate board-level accountability (with minutes), structural changes to the compliance function, a forward-looking monitoring calendar with milestones, and engagement of an ongoing external compliance advisor — a fractional CAMLO or MLRO — for continuity of independent oversight.
Re-applying for MSB registration after revocation
The PCMLTFA does not impose an automatic permanent bar on re-registration. However, FINTRAC scrutinises a re-application from a previously revoked entity with exceptional care, and will reject any application that doesn't demonstrate a fundamentally transformed compliance posture — with structural evidence, not just documentation. It will also consider whether the officers and directors involved in the original failures remain in operational control.
A post-revocation application should include a full five-element AML programme prepared after the revocation, an independent pre-registration programme review, evidence the underlying causes have been structurally addressed (personnel, systems, governance), an honest explanation of what led to revocation and the remedial actions taken, and fully current beneficial ownership/officer/director/agent information. Processing can extend to several months — during which you cannot legally conduct regulated activities.
How to prevent revocation: a proactive framework
- Build a real AML programme, not a paper one. The test isn't whether you have a manual — it's whether staff understand it, follow it, and whether it reflects your current business. Review and update at least annually.
- Conduct independent effectiveness reviews on schedule — or more often. Two years is a minimum; higher-risk segments (crypto, remittance, high-volume FX) should review annually. The review must be genuinely independent.
- Maintain your registration currency actively. Set renewal reminders well in advance; update promptly on material changes. FINTRAC won't remind you.
- Invest in calibrated transaction monitoring. Generic rules generating low-quality alerts cause fatigue and missed red flags. FINTRAC assesses your STR rate, narrative quality, timeliness, and record-keeping.
- Engage a qualified compliance officer or fractional CAMLO — an experienced professional engaged part-time delivers expertise a full-time hire would cost far more to provide.
- Identify your vulnerabilities before FINTRAC does — map where your programme is most exposed and self-assess before commissioning a formal review.
🔍 Industry insight. FINTRAC's enforcement data consistently shows that revoked MSBs are overwhelmingly businesses operating without meaningful compliance infrastructure — not well-resourced programmes that failed at the margins. A genuine compliance programme is not a cost centre; it's the single most important risk-management decision an MSB can make, and categorically cheaper than the enforcement alternative.
FINTRAC's enforcement track record
FINTRAC has significantly escalated its enforcement posture, and the MSB sector is not insulated. Its published AMP data reveals a consistent pattern: the most severe actions — and the revocations that accompany them — target businesses with systemic, multi-element compliance failures rather than isolated lapses. A business with one reporting gap is a candidate for an AMP; a business with no programme, no STR history, and unverified KYC across its entire client base is a candidate for revocation.
The 2025 Canada assessment of money laundering and terrorist financing risks identifies MSBs — particularly in high-risk segments such as cryptocurrency exchange and international remittance — as priority areas for regulatory attention. Canada's ongoing AML reform agenda signals continued intensification of enforcement. The message is unambiguous: regulatory scrutiny of MSBs is increasing, and businesses that do not invest in genuine compliance are carrying existential risk.
ComplyFactor's independent AML audit, compliance programme, and fractional MLRO services are designed for exactly this scenario — delivering the independent assessment and remediation documentation FINTRAC expects in a credible representations package.
Frequently asked questions
Can FINTRAC revoke my MSB registration without warning?
How long does the revocation process take?
Will my revocation be made public?
Can I continue operating while I appeal a revocation?
Can officers and directors of a revoked MSB face personal liability?
How does a PSP revocation differ from an MSB revocation?
What is the difference between an AMP and a revocation?
Can I convert to a PSP registration to avoid the FINTRAC MSB framework?
ComplyFactor is a specialist AML and regulatory compliance advisory firm working exclusively with MSBs, PSPs, fintechs, and VASPs across Canada's FINTRAC framework. Our advisors hold CAMS certification and bring direct FINTRAC examination experience to every engagement.
