FINTRAC Identification: Canada’s Official Laws and Solutions [2026]

If you've ever opened a bank account or completed a major financial transaction in Canada, you've been part of FINTRAC's system—and probably didn't even know it.

FINTRAC is the Financial Transactions and Reports Analysis Centre of Canada. It's the federal agency that helps keep Canada's financial system secure by making sure businesses properly verify who their customers are. Think of it as a safeguard that protects everyone from financial crime.

The interesting part? FINTRAC has developed five specific ways that banks, credit unions, and other financial businesses can verify your identity. Each method is designed to be practical while maintaining security. Some are quick and straightforward, others are more thorough, but they all serve the same purpose: keeping the financial system trustworthy.

As of 2026, these methods are well-established and widely used across the country. Whether you're opening your first bank account, buying property, or starting a business, understanding how FINTRAC identification works can make the process smoother. Let's walk through what you actually need to know.

What are FINTRAC’s identification requirements under the PCMLTFA?

Canada’s anti-money laundering framework starts with the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA). Sections 6 and 7 say you have to ID your clients and keep records.

Let’s break down what this means in practice.

1. Transaction thresholds requiring verification

Reporting entities must verify client identity when certain monetary thresholds are reached. The specific thresholds vary by transaction type and reporting entity category:

• Cash transactions of $10,000 or more require identity verification
• Issuing or redeeming money orders, traveller's cheques, or similar negotiable instruments valued at $3,000 or more
• Electronic fund transfers exceeding $1,000
• Foreign currency exchanges of $3,000 or more
• Virtual currency transactions or transfers valued at $1,000 or above
• Non-electronic fund transfers at the $1,000 threshold
• International electronic fund transfers at the $1,000 threshold
• The 24-hour aggregation rule treats multiple cash transactions totaling $10,000 or more within a single day as one transaction for verification purposes

2. Account opening requirements

Reporting entities must verify identity when establishing new business relationships, regardless of initial transaction amounts.

Financial entities must verify client identity when opening any type of account, including deposit accounts, credit facilities, and other financial service arrangements. Similarly, real estate licensees must verify the identity of unrepresented parties in property transactions as of October 1, 2025

This amendment ensures that both sides of real estate transactions undergo identity verification

3. Individual verification requirements

When verifying individuals, reporting entities must employ one of the approved methods detailed in FINTRAC guidance. The verification process must establish that the person is genuinely who they claim to be, using information that meets standards for authenticity, validity, and currency.

“You cannot open an account for a person, corporation, or other entity if you cannot verify their identity in accordance with the Regulations.” ~ PCMLTFA, S.C 2000, c. 17, s. 9.2.

Authentic means the document or record is genuine, original, credible, and reliable. Valid means the document or information remains legally effective and has not expired. Current means the information accurately reflects present circumstances without having become outdated.

4. Entity verification requirements

For business clients, FINTRAC mandates confirmation of legal existence alongside verification of beneficial owners holding 25% or more control, plus directors, shareholders, and authorized representatives.

• Corporations require certificates of incorporation, articles of incorporation, or corporate registry records confirming the entity's name, address, registration number, and directors
• Partnerships require partnership agreements demonstrating legal formation and current authorization to conduct business
• Trusts require trust instruments establishing the trust structure and identifying trustees
• Unincorporated organizations require organizational bylaws or formation documents proving legal existence

5. Beneficial ownership requirements

Beneficial ownership verification involves two distinct scenarios: direct ownership and indirect ownership.

6. Beneficial ownership discrepancy reporting

Beginning October 2025, reporting entities must report to Corporations Canada any material discrepancies between beneficial ownership information they obtained and what appears in Corporations Canada's database for Canada Business Corporations Act corporations assessed as high-risk. Material discrepancies must be reported within 30 days unless resolved within that timeframe.

7. Politically Exposed Persons (PEP) requirements

Reporting entities must assess whether clients are politically exposed persons, heads of international organizations, or family members or close associates of such individuals. Upon discovering a customer is a politically exposed person, organizations must determine the source of the person's wealth and implement enhanced due diligence measures.

Transactions exceeding $100,000 involving politically exposed persons necessitate additional scrutiny and senior management approval.

8. Record keeping requirements

Verification remains incomplete without adequate documentation. Registered entities must be able to provide records to FINTRAC within 30 days of any request, requiring all verification records to be maintained in an organized, accessible format.

• Licensees must preserve all records for a minimum of five years from the date the business relationship ends or the transaction occurs
• Copies of Suspicious Transaction Reports must be retained for the full five-year period
• Large Cash and Virtual Currency Transaction Records are required for receipts of $10,000 or more in cash or equivalent virtual currency
• Receipt of Funds Records must contain detailed client and transaction information, even for amounts below reporting thresholds
• Information Records are required for each client involved in a transaction, including corporate documents for business entities
• Government-issued photo identification records must capture the document type, issuing jurisdiction, document number, and expiry date
• Credit file verification records must note which credit bureau was consulted and the date of consultation
• Records must be kept in a format that allows retrieval within 30 days during FINTRAC compliance examinations

9. Agent and Mandatary use

Beginning October 1, 2025, businesses can use agents or mandataries to verify the identity of corporations or other entities, expanding beyond the previous limitation to individual verification only. When employing an agent or mandatary, the reporting entity retains ultimate responsibility for ensuring compliance.

10. Ongoing monitoring obligations

Reporting entities must maintain current client identification information through continuous monitoring. The frequency and intensity of monitoring should align with the risk level assigned to each business relationship. During ongoing monitoring, reporting entities must observe for changes in client circumstances, unusual transaction patterns, or information contradicting what was initially provided.

11. Compliance program requirements

All identification requirements must be integrated into a comprehensive compliance program. A documented and thorough compliance program forms the foundation for meeting all reporting entity obligations under the Act and associated Regulations.

The compliance program must contain written policies and procedures explaining how the reporting entity will satisfy each identification requirement, including which verification methods will be applied in different circumstances, how document authenticity will be evaluated, what actions will be taken if verification fails, and how records will be preserved.

What happens if entities fail to comply with identification requirements?

Non-compliance now constitutes an offence under the PCMLTFA. Summary conviction can result in fines up to $250,000 or imprisonment for up to two years. An indictment can lead to fines up to $500,000 or imprisonment for up to five years.

Beyond criminal penalties, FINTRAC can impose administrative monetary penalties for violations of identification requirements. The severity of penalties underscores the importance of these requirements to the integrity of Canada's financial system.

How to conduct identity verification in Canada? FINTRAC-approved methods explored

FINTRAC has authorized five distinct methods for verifying the identity of individuals under the PCMLTFA. Reporting entities may select whichever method best suits their operational circumstances and client base.

Each method carries specific requirements for documentation, authentication, and record keeping.

FINTRAC Identification Method #1: Government-Issued Photo ID Method

This method requires a government-issued photo identification document that is authentic, valid, and current. The document must be issued by a federal, provincial, or territorial government, or an equivalent foreign government authority. The identification document must contain the individual's full name, photograph, and a unique identification number.

Examples of acceptable documents include Canadian passports, permanent resident cards, provincial and territorial driver's licenses, and equivalent foreign documents.

Step 1: Obtain the identification document

Request that the individual provide a government-issued photo identification document. The document must display the person's full name, photograph, and a unique identification number such as a driver's license number or passport number.

Step 2: Verify authenticity based on presence

For individuals who are physically present, examine the original document directly. Inspect security features such as holograms, watermarks, and embedded chips. Compare the photograph on the document to the person presenting it.

For individuals who are not physically present, require them to scan or photograph their identification document using a mobile phone or electronic device. Use software or technological tools capable of assessing document authenticity by evaluating security features, holograms, and other anti-fraud elements. Simply viewing a document through video conference is insufficient.

Step 3: Corroborate the identity

For remote verification, corroborate the information on the document through additional means. Request a selfie photograph or conduct a live video stream. Use facial recognition technology to compare the selfie to the photograph on the identification document, ensuring the features match.

Step 4: Verify the name matches

Compare the name on the government-issued photo identification document with the name provided to you by the individual. The names must match to complete verification.

FINTRAC Identification Method #2: Credit File Method

This method verifies identity using information from a Canadian credit bureau. The credit file must have existed for at least three years and must contain information from more than one source, typically demonstrated through multiple trade lines such as a mortgage and a credit card. This method works only for individuals with established Canadian credit histories and cannot be used for individuals who recently arrived in Canada, younger clients without credit histories, or those who do not use credit products.

Step 1: Obtain the individual's information

Collect the person's name, address, and date of birth from the individual seeking to conduct the transaction or establish the business relationship.

Step 2: Access the credit file

Contact a Canadian credit bureau such as Equifax Canada or TransUnion Canada directly, or use an authorized third-party vendor who has permission from credit bureaus to provide access to Canadian credit information. Request the credit file for the individual at the time of identity verification. You cannot rely on a credit file obtained weeks or months earlier.

Step 3: Verify the credit file meets requirements

Confirm that the credit file has existed for at least three years. Verify that the file contains information from more than one source, demonstrated through multiple trade lines. The credit file must include at least two trade lines, such as a mortgage and a credit card.

Step 4: Compare the information

Match the name, address, and date of birth in the credit file against the information provided by the individual. Slight typos or variations in names and addresses are acceptable, but errors in the date of birth indicate a mismatch and prevent successful verification. If the information does not match, the verification fails, and you must use a different method.

FINTRAC Identification Method #3: Dual-Process Method

This method combines information from two different reliable sources to verify identity. The flexibility of this approach makes it useful when individuals cannot provide government-issued photo identification or lack established credit files. A reliable source is one that originates or issues information, is well known and considered reputable, and is trusted to verify client identity. The source cannot be the reporting entity itself or the client.

Step 1: Determine which information combination to use

Select one of the following combinations: the client's name and date of birth from one source and the client's name and address from another source, the client's name and address from one source and confirmation that the client has a deposit account or credit card or loan account with a financial entity from another source, or the client's name and date of birth from one source and confirmation of a financial account from another source.

Step 2: Identify two independent, reliable sources

Select two different reliable sources from acceptable categories. Government-issued documents include property tax assessments, Canada Pension Plan statements, government benefit statements, vehicle registrations, Canada Revenue Agency documents such as notices of assessment and T4 statements, birth certificates, marriage certificates, and travel visas.

Financial entity documents include bank account statements, credit card or loan statements, and registered account statements such as RRSPs and GICs. Utility bills from recognized providers also qualify.

Ensure the two sources are truly independent. A bank statement and a credit card statement from the same bank do not qualify as two different sources. A bank statement from one institution and a driver's license from a government authority do qualify because they originate from different issuers.

Step 3: Obtain the information from each source

Collect documents or information from the two selected sources. You may rely on electronic images of documents for this method. Faxes, photocopies, scans, or electronic images of the required information are acceptable.

When using credit bureau information, ensure the credit file contains at least two trade lines that have existed for at least six months. Each trade line can be treated as a separate source when provided through a credit bureau aggregator.

Step 4: Verify the information matches

Compare the information from both sources against the information provided by the individual. Confirm that the name matches across sources. Verify that the address, date of birth, or financial account information matches as applicable to your chosen combination.

FINTRAC Identification Method #4: Affiliate or Member Method

This method allows reporting entities to rely on identity verification previously performed by an affiliate, foreign affiliate, or member of the same financial services or credit union group. This approach reduces duplication when multiple entities within a corporate group serve the same client.

An entity is affiliated with another entity if one is wholly owned by the other, if both are wholly owned by the same entity, or if their financial statements are consolidated.

The initial verification must have been completed using one of the primary methods: government-issued photo ID, credit file, or dual-process.

Step 1: Confirm affiliate or member relationship

Verify that your organization has an affiliate, foreign affiliate, or member relationship with the entity that performed the original verification. Confirm that one entity wholly owns the other, both are wholly owned by the same entity, financial statements are consolidated, or both are members of a financial services cooperative or credit union central.

Step 2: Verify the original verification method

Confirm that the affiliate or member used one of the primary verification methods: government-issued photo ID, credit file, or dual-process. The affiliate or member method cannot be based on another affiliate or reliance verification.

Step 3: Obtain verification information from the affiliate or member

Request and receive from the affiliate or member the individual's name, address, and date of birth, the verification method used, the information the affiliate or member referred to when verifying identity, the date the affiliate or member verified the identity, and confirmation that the information is still valid and current.

Step 4: Compare the information

Match the name, address, and date of birth received from the affiliate or member against the information provided by the individual. All three data points must match to complete verification.

Step 5: Confirm validity and currency

Assess whether the information obtained from the affiliate or member is still valid and current. If there are concerns about the adequacy of the original verification, conduct your own verification or obtain additional information. Remember that your organization remains responsible for ensuring the identity was correctly verified.

FINTRAC Identification Method #5: Reliance Method

This method permits reporting entities to rely on identity verification performed by another reporting entity or its affiliated foreign entity. This differs from the affiliate method because the entities do not need to be part of the same corporate group.

For foreign affiliated entities, the entity must operate outside Canada in a manner consistent with a Canadian reporting entity and must be subject to competent supervision in its jurisdiction. The reliance method requires particular attention to money laundering and terrorist financing risks.

Step 1: Establish a written agreement

Create and execute a written agreement with the reporting entity or affiliated foreign entity whose verification you will rely upon. The agreement must require the other entity to provide all information related to the verification process. For foreign entities, ensure the agreement confirms the entity follows verification procedures consistent with PCMLTFA requirements.

Step 2: Verify the original verification method

Confirm that the other reporting entity or affiliated foreign entity used one of the primary verification methods: government-issued photo ID, credit file, or dual-process. Verify that the information was valid at the time it was obtained and was verified in a manner consistent with the PCMLTFA.

Step 3: Assess risk appropriateness

Evaluate whether relying on another entity's verification is appropriate given the risk profile of the business relationship. Consider money laundering and terrorist financing risks associated with the client. Higher-risk clients may require independent verification rather than reliance on another entity's work.

Step 4: Obtain verification information

Request and receive from the other reporting entity or affiliated foreign entity the information they referred to when verifying identity, the verification method used, the date they verified the identity, and all documentation supporting the original verification.

Step 5: Confirm validity and currency

Check that identification documents have not expired and that the information remains accurate. If the original identification document has expired and the expiry occurred after the agreement with the other reporting entity was established, you may still rely on the verification. However, if the document expired before the agreement, re-verification is necessary.

How to conduct identity verification at scale with Signzy?

Manual identity verification works adequately when onboarding dozens of clients per month. The process breaks down when dealing with hundreds or thousands of users weekly. Manual reviews create bottlenecks, disconnected tools generate data silos, and messy records complicate audit preparation. FINTRAC requirements remain constant regardless of growth trajectory.

"Credit file verification was taking 3-4 days because we'd submit requests and wait for bureau responses. Signzy's API pulls credit data in real time. Our account opening went from nearly a week to same-day for most applicants." — Operations Director, Credit Union

"PEP screening was completely separate from our ID verification. Someone would pass identity checks and then fail PEP screening days later. Signzy does both simultaneously, which eliminates that gap. Better compliance and faster onboarding." — AML Officer, Investment Firm

Signzy's One Touch KYC platform addresses these scalability challenges through a unified API suite that handles document verification, biometric authentication, liveness detection, and compliance checks.

🟢 Automates all five FINTRAC-approved verification methods through a single integration, supporting over 14,000 document types from 120 countries

🟢 AI-powered document authentication evaluates security features and anti-fraud elements, with advanced liveness checks detecting deepfakes and spoofing attempts

🟢 Integrated AML screening flags politically exposed persons using global watchlists and databases in real time

🟢 Identity verification completes within seconds through API processing, scaling automatically as user volumes increase without additional infrastructure

🟢 Comprehensive audit trails maintain all records for five years in an organized format that simplifies FINTRAC compliance reporting and audit preparation

Schedule a demo here to know more.