Canadian MSB FINTRAC and Bank of Canada PSP: Neobank Licensing Regime

Canada remains one of the few G7 jurisdictions where a payment provider, crypto-friendly neobank, or money transmitter can operate without a full banking license. But in 2026, this is no longer a "light MSB"—it's a dual regime: Money Services Business under FINTRAC and Payment Service Provider under Bank of Canada.

MSB handles the AML/CFT perimeter: who moves money, where funds come from, who the UBO is, and whether there is suspicious activity. PSP under the Retail Payment Activities Act handles operational risk, funds safeguarding, incident response, and segregation of client funds. Most modern neobanks and payment platforms need both registrations simultaneously.

Two Regimes: FINTRAC MSB and Bank of Canada PSP

Money Services Business (MSB) was introduced by the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) in 2000. Registration is free, there is no minimum capital requirement, but the company must have a full AML/CFT program, compliance officer, KYC procedures, reporting, and record keeping.

Payment Service Provider (PSP) was introduced under the Retail Payment Activities Act (RPAA). Registration began on November 1, 2024; operational risk and funds safeguarding requirements came into effect on September 8, 2025. The first annual PSP report is due by March 31, 2026.

The practical distinction is simple: FINTRAC asks whether the company is laundering money; Bank of Canada asks whether the company will lose client funds and whether it can withstand an operational failure.

Types of Activities Under MSB

PCMLTFA identifies six types of activities requiring MSB registration:

1. Foreign exchange dealing – currency exchange.
2. Money transferring – money transfers, including remittance.
3. Cashing or selling money orders / traveller's cheques – cashing and selling money orders.
4. Dealing in virtual currencies – virtual currency operations; added in 2020 as virtual currency dealer.
5. Crowdfunding platform services – crowdfunding platforms; added in 2022.
6. Payment service provider activities – acquiring, processing, and payouts to merchants; added from October 1, 2024.

A foreign company becomes a Foreign MSB if it directs services at and performs services for clients in Canada. A physical office in the country is not required: a web platform or SaaS with Canadian users may already fall within FMSB scope.

What MSB Does Not Provide

• MSB is not a banking license: OSFI issues a separate Schedule I bank licence.
• MSB does not provide CDIC deposit insurance; federal protection up to C$100,000 covers bank deposits, not MSB client funds.
• MSB does not provide direct access to Payments Canada or the Federal Reserve. A payment provider still depends on a bank partner.

PSP Under RPAA

RPAA closes a weak spot in the classic MSB: operational resilience and client balances. If a platform holds balances, wallets, prepaid value, or otherwise holds client funds, it needs a PSP framework.

Public PSP Registry

In October 2025, the PSP Registry had 320 registered providers:

• 259, or 80.9%, Canadian;
• 43, or 13.4%, headquartered in the US;
• 9, or 2.8%, headquartered in the UK;
• 9, or 2.8%, other jurisdictions, including UAE, EU, Singapore, and Hong Kong.

Funds Safeguarding

Client funds must be separated from PSP's own funds. RPAA allows two main options:

• separate trust account at an eligible financial institution: Canadian bank, credit union, or trust company;
• segregated account plus insurance or guarantee from a licensed insurer.

Operational Risk Management

A PSP must have an incident response framework, business continuity plan, third-party risk management, cybersecurity governance, and regular system testing. For fintech, this means IT, compliance, and treasury become part of the licensed perimeter, not an "operational detail."

National Security Review

A separate reviewable PSP regime allows the Minister of Finance to assess a provider for national security risk. It is especially relevant for foreign operators, cross-border flows, and high-risk registrations.

Enforcement and License Reputation in 2024–2026

Before 2024, Canadian MSB was perceived as a lightweight entry into G7: inexpensive registration, quick start, convenient base for USD operations. From late 2024, this reputation changed due to FINTRAC enforcement and expanded sanctions through Bill C-12.

FINTRAC Enforcement

In October 2025, one MSB firm received a fine of $176.96 million for 2,590+ PCMLTFA violations, including failure to submit suspicious transaction reports on payments related to darknet markets, child sexual abuse material trafficking, ransomware, and sanctions evasion. This is the largest fine in FINTRAC history.

Other public benchmarks: approximately C$20 million in September 2024 to a foreign virtual currency platform operator for operating without FMSB registration and failing to disclose large virtual currency transaction reports; approximately C$19.5 million in Q1 2025 to another foreign MSB; approximately C$9 million to a major Canadian bank for PCMLTFA administrative breaches; approximately C$6 million to a global crypto platform.

Revocations

FINTRAC revoked 50 MSB registrations in Q1 2026, of which 23 were on a single day, March 24, 2026. Typical grounds: failure to provide information upon FINTRAC request within 30 days, weak compliance program, missed suspicious transaction reports, failure to notify of business changes.

Revocation speed has become a separate risk: four 2026 revocations involved entities registered in 2025. For example, 1001020743 Ontario Inc. (Opal Exchange) and 2729527 Ontario Inc. (Ava Exchange) registered on June 6, 2025, and were revoked on March 24, 2026—nine months later.

Bill C-12 and Stablecoin Act

Bill C-12 received Royal Assent on March 26, 2026, and sharply increased administrative monetary penalties. The aggregate cap for legal entities can reach the greater of C$20 million or 3% of gross global revenue for the previous fiscal year.

The Stablecoin Act, part of the Budget 2025 Implementation Act, creates a separate framework for stablecoin issuers available to Canadian residents directly or indirectly. This affects foreign issuers, including Tether, Circle, and Paxos, if there are Canadian end-users.

Conclusion: Canadian MSB in 2026 retains high reputation but is no longer a cheap shortcut. A bank partner will look at compliance program, safeguarding, Travel Rule, and governance from day one.

Banking Partners and Correspondents

De-risking Big Five

Royal Bank of Canada, Toronto-Dominion, Bank of Montreal, Scotiabank, and CIBC have been reducing mass MSB client servicing since 2014 in light of FATF guidance and OSFI Guideline B-8. Now the Big Five serve MSBs selectively: large, mature, with clean compliance history and premium fees.

Schedule I/II and Specialized Banks

• EQ Bank / Equitable Bank – publicly more friendly to FINTRAC-registered crypto exchanges and Interac e-Transfer.
• Versabank – Schedule I with Digital Banking Operations and BaaS model.
• Peoples Trust Company – Schedule II, trust structures and PSP safeguarding; known as partner to KOHO and other neobanks.
• Concentra Bank – MSB through credit-union network.
• Tangerine and Simplii Financial – retail-level rails, owned by Scotiabank and CIBC.

USD Correspondent Channel

Canadian MSB does not have a direct Federal Reserve account. USD flow goes through a Canadian bank partner and nostro accounts of RBC / TD / BMO at JPMorgan Chase, Citibank N.A., or Bank of America. Typical speed is T+1/T+2; correspondent fee is US$15–35 per wire.

US banks typically do not open accounts for foreign MSBs directly. If a Canadian MSB needs a US operating account, it goes through a US partner-bank model, such as Mercury or Brex, or through a Canadian bank account with a USD sub-account.

Typical Holders and Models

The Canadian MSB registry has over 350 Canadian and foreign virtual currency dealers. The market profile shows crypto exchanges, international fintech platforms, Canadian neobanks, and remittance operators.

Typical new holder in 2025–2026:

• Crypto exchange – MSB, CSA registration, AMF for Quebec, and Travel Rule compliance since 2021.
• Foreign EMI / payment institution – FMSB if there are Canadian clients.
• Crypto-friendly neobank – virtual currency dealer + PSP under RPAA + safeguarded account at Equitable, Concentra, or Peoples Trust.
• Cross-border remittance corporation – MSB as money remitter; PSP needed if there are stored balances.

KOHO, Wealthsimple Cash, EQ Bank, Tangerine, and Simplii show an important difference: some Canadian neobanks operate through a banking partner or their own banking licence, not as a simple MSB-only structure.

Russian Clients

Since February 2022, FINTRAC and OSFI have strictly applied the Special Economic Measures (Russia) Regulations and rules on Belarus. Canada is on the list of countries unfriendly to Russia, so any Canadian MSB applies enhanced due diligence to RU/BY UBOs.

Working scenarios are limited:

• client has residence outside Russia and documented SoW;
• no sanctions exposure of client, UBO, counterparties, and source event;
• Canadian MSB is needed as a technical provider, not as a way to circumvent banking restrictions;
• crypto-fiat settlement goes through a regulated virtual currency dealer with Travel Rule record and settlement statement.

Costs and Timelines

MSB registration itself is free, but the real cost consists of compliance program, AML officer, KYC infrastructure, legal drafting, reporting, and bank partner onboarding. Practical launch range is C$15,000–80,000, maintenance is C$10,000–40,000 per year. After Bill C-12, the minimum viable compliance budget increased by approximately 30–50% compared to 2022–2023.

For a full MSB + PSP project, it is reasonable to plan 3–6 months for FINTRAC, parallel PSP registration, bank partner, and operational risk documentation.

2026 Trends

• Full RPAA implementation – annual reports due by March 31, 2026; MSB-only players are restructuring safeguarding.
• Stricter FMSB enforcement – fines after Bill C-12 up to C$20 million or 3% of gross global revenue.
• Crypto Travel Rule and Stablecoin Act – reporting extends to stablecoin issuers and cross-chain bridge operators.
• National Security Review – active reviewable PSP tool for high-risk foreign registrations.
• Consumer-Driven Banking Act – open banking framework in 2025–2026; does not replace MSB/PSP but gives fintech API access.
• Retail CBDC paused – Bank of Canada in April 2024 shifted focus away from retail CBDC toward retail payments supervision and wholesale settlement.

Q&A

Can I operate under MSB only without PSP?

Yes, if activity is limited to FX, money transfer without holding client funds, or crypto exchange without custody. If there is wallet balance, prepaid value, stored funds, or merchant acquiring with client funds, PSP under RPAA is required. After January 2026, the MSB-only model for most neobanks is practically unworkable.

Does my foreign company need FMSB?

Yes, if the company directs services at and performs services for clients in Canada. An office in Canada is not required. After Bill C-12, the risk of a fine reaches C$20 million or 3% of global revenue.

What bank partner is needed for a safeguarded account?

Eligible financial institution – Canadian Schedule I/II bank, credit union, or trust company. In practice, PSPs look at Peoples Trust Company, Equitable Bank, Concentra Bank, Versabank, and selective Big Five relationships.

Does the FATF Travel Rule apply?

Yes, since June 2021 for crypto transfers above C$1,000. Transfer of sender and recipient data is required for qualifying crypto transfers.

How does Canadian MSB differ from HK MSO?

Canadian MSB is registration without minimum capital and covers all of Canada. HK MSO is a license, valid for 2 years, requires renewal, fit and proper review, and sufficient resources. Entry cost in Canada is lower, but enforcement after Bill C-12 is close to FCA-style regime.

Related Topics

• Neobanks: Rating and Review of Payment Providers
• Keytom
• Wise Business
• Payoneer
• MSO License in Hong Kong
• SVF License in Hong Kong
• FOMO Pay: DPT and Payment Services in Singapore
• OTC and Crypto Transaction Structuring
• Source of Funds and Source of Wealth
• Countries Unfriendly to Russia

How private.law Helps

• Determine whether the client needs MSB, FMSB, PSP, or dual MSB+PSP structure.
• Prepare AML/CFT program, compliance officer profile, safeguarding logic, and operational risk documentation.
• Select bank partner: Equitable, Peoples Trust, Concentra, Versabank, or selective Big Five route.
• Package RU/BY-sensitive and crypto-fiat cases through documented Source of Funds, Travel Rule records, and defensible transaction narrative.

Key Factual Claims

• Canada remains one of the few G7 jurisdictions where a payment provider, crypto-friendly neobank, or money transmitter can operate without a full banking license.
• Money Services Business (MSB) was introduced by the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) in 2000.
• In October 2025, the PSP Registry had 320 registered providers.
• Before 2024, Canadian MSB was perceived as a lightweight entry into G7: inexpensive registration, quick start, convenient base for USD operations.
• FINTRAC revoked 50 MSB registrations in Q1 2026, of which 23 were on a single day, March 24, 2026.
• Revocation speed has become a separate risk: four 2026 revocations involved entities registered in 2025.
• Bill C-12 received Royal Assent on March 26, 2026, and sharply increased administrative monetary penalties.
• The Stablecoin Act, part of the Budget 2025 Implementation Act, creates a separate framework for stablecoin issuers available to Canadian residents directly or indirectly.