Canada has two regulatory frameworks that are particularly important for companies entering the payments market: Money Services Business registration with FINTRAC and Payment Service Provider registration with the Bank of Canada.
The two registrations are sometimes discussed as if they were alternatives. They are not. They address different regulatory objectives, and a payment company can fall within both frameworks at the same time.
For founders planning a remittance platform, payment service, digital wallet, foreign exchange business or another fintech product, the first task is therefore to understand what the company will actually do with customer funds and payment instructions. The answer determines which registrations may apply and what infrastructure will be required before the business can operate.
MSB registration with FINTRAC
A Money Services Business, or MSB, is a business performing certain activities covered by Canada’s anti-money laundering and anti-terrorist financing framework.
Canadian MSBs must register with the Financial Transactions and Reports Analysis Centre of Canada, commonly known as FINTRAC, before carrying out regulated MSB activities.
Foreign businesses can also fall within the Canadian framework. A company without a place of business in Canada may qualify as a Foreign Money Services Business, or FMSB, if it directs covered services at customers in Canada and provides those services to Canadian clients.
This means that setting up a Canadian corporation is not automatically necessary for every foreign fintech entering the market. The correct structure depends on whether the business will establish a place of business in Canada or operate as an FMSB.
An FMSB must appoint a representative for service in Canada who is authorised to receive regulatory communications on its behalf.
Importantly, FINTRAC registration is not a banking licence and should not be presented as one. It registers the company within Canada’s AML regulatory framework; it does not give the business the status of a bank or constitute regulatory endorsement.
What types of companies may need MSB registration?
The MSB framework covers several types of money services.
For fintech companies, some of the most relevant activities include remitting or transmitting funds, foreign exchange dealing and dealing in virtual currency.
A business allowing customers to send money from Canada to recipients abroad, for example, may be providing a money transmission service. A platform converting CAD into EUR or USD may be engaged in foreign exchange dealing. A company transferring or exchanging virtual currencies may fall within the virtual currency provisions.
FINTRAC’s current framework also covers issuing or redeeming money orders and similar negotiable instruments, crowdfunding platform services, certain armoured-car activities, cheque cashing and private ATM acquirer services.
The regulatory assessment should therefore be based on what the business actually does rather than the terminology used in its marketing.
A company calling itself a digital wallet, payment platform or fintech application can still be an MSB if its underlying activities meet the statutory criteria.
MSB compliance continues after registration
Registration is the beginning of the compliance process, not the end.
An MSB must establish and maintain an AML compliance programme appropriate to its activities and risk profile.
This includes appointing a compliance officer, developing written compliance policies and procedures, assessing money laundering and terrorist financing risks, maintaining an ongoing training programme and reviewing the effectiveness of the compliance programme at least every two years.
Customer identification, transaction monitoring, record keeping and regulatory reporting may also form part of the company’s ongoing obligations.
For an international fintech without a large internal compliance department, some of this work may be supported by external specialists or a Compliance-as-a-Service provider. External support can help develop policies, risk assessments, monitoring processes and training.
However, outsourcing compliance tasks does not outsource regulatory responsibility. The MSB itself remains responsible for meeting its FINTRAC obligations.
PSP registration with the Bank of Canada
The second major framework is relatively different.
Under the Retail Payment Activities Act, or RPAA, the Bank of Canada supervises businesses performing certain retail payment activities.
A company subject to the RPAA must register as a Payment Service Provider, or PSP, before conducting those activities.
The legislation identifies five payment functions that can bring a company within scope: providing or maintaining an account for an end user, holding funds on behalf of an end user, initiating an electronic funds transfer, authorising or transmitting payment instructions, and providing clearing or settlement services.
This makes Canada PSP registration relevant to many modern payment platforms.
Consider an application where a business customer logs into an account, maintains a CAD balance and instructs the platform to send money to a supplier. Several RPAA payment functions may exist within that simple customer journey.
The business may maintain the account, hold customer funds and initiate or transmit instructions relating to an electronic funds transfer.
MSB and PSP registrations can apply to the same company
The distinction between the two regimes is easier to understand by looking at their objectives.
FINTRAC primarily supervises the MSB from an AML and terrorist-financing perspective.
The Bank of Canada’s retail payments framework focuses on operational risk, payment activities and, where applicable, protection of end-user funds.
A remittance company can therefore be both an MSB and a PSP.
For example, transmitting money may bring a business within the FINTRAC MSB framework. If the same platform also performs one of the regulated retail payment functions under the RPAA, PSP registration may separately be required.
Holding customer money is an important example, but it is not the only trigger for PSP registration.
A company that does not itself hold customer funds may still perform other regulated payment functions, such as maintaining an end-user account or transmitting payment instructions.
Founders should consequently conduct two separate assessments rather than assuming that FINTRAC registration automatically satisfies all Canadian payment regulation.
Safeguarding customer funds under the PSP framework
Where a PSP holds end-user funds, additional safeguarding requirements apply.
Since September 2025, regulated PSPs have been subject to the Bank of Canada’s operational risk and safeguarding framework.
A PSP holding end-user money generally needs to safeguard those funds using one of the permitted structures. This can involve holding the funds in trust in a trust account or using a segregated account supported by qualifying insurance or a guarantee.
The company also needs a written safeguarding framework explaining how customers will maintain reliable access to their funds and how those funds would be protected if the PSP became insolvent.
This requirement has direct implications for the company’s banking architecture.
A normal corporate operating account cannot simply be treated as interchangeable with an account designed to protect customer funds.
The safeguarding model, ledger and banking arrangements therefore need to be considered together.
See also: How Wireless Technology Has Advanced
Core banking software forms the operational centre
Regulatory registrations establish what the company is permitted or required to do, but they do not provide the technology needed to run the service.
For payment businesses managing customer accounts and balances, core banking software can become the central operating layer.
The platform can maintain individual customer ledgers, record credits and debits, calculate fees, manage currencies, support payment workflows and provide the internal data required for reconciliation.
This becomes particularly important when customer money is held externally.
If the company’s core banking software shows that customers collectively hold CAD 3 million, the institution needs reliable processes to reconcile those internal ledger balances against the funds held through its banking and safeguarding arrangements.
The core platform may also need to integrate KYC and KYB tools, AML and transaction-monitoring systems, accounting software, banking APIs and payment providers.
A payment company should therefore choose its core system based on its regulatory and operational model rather than simply selecting the platform with the largest feature set.
Building the wider payment infrastructure
Core banking is only one component of the infrastructure.
A Canadian payment company may also require banking accounts, EFT capabilities, international payment connectivity, FX services and settlement partners.
A remittance business could require one provider for Canadian collection accounts, another for international payouts and an FX partner for currency conversion.
A digital wallet may additionally require customer account functionality, safeguarding accounts and payment APIs.
Businesses offering payment cards need issuing and processing partners. Companies working with virtual currencies can require fiat on-ramp and off-ramp infrastructure, liquidity providers and specialist banking relationships.
These providers will normally conduct their own onboarding and risk assessment. An MSB or PSP can therefore be legally registered but still face difficulty launching if suitable banking and payment partners have not been secured.
Provider discussions should begin early rather than after registration has been completed.
Treat MSB and PSP regulation as part of one operating model
Launching a Canadian payment business is not a matter of choosing between MSB registration and PSP registration.
The appropriate model may involve both.
A practical launch framework can be viewed as:
MSB assessment and FINTRAC registration → PSP assessment and Bank of Canada registration → compliance and safeguarding → core banking software → banking and payment infrastructure.
The precise combination will depend on the services being provided.
The most important step is therefore to map how the customer account works, where funds are held, who controls payment instructions and how money moves from the payer to the recipient.
Once that flow is clear, it becomes much easier to identify the regulatory obligations, technology and financial partners required to build a payment company that can operate in Canada in practice.
