Canada Money Transfer License

Canada MSB Registration & the RPAA: The Complete Guide to Payment Licensing in Canada

Canada MSB registration is one of the fastest, cheapest full-country market entries in global payments, and since the Retail Payment Activities Act (RPAA) came fully into force on 8 September 2025, it has become a genuine two-regulator system: FINTRAC for anti-money-laundering registration, the Bank of Canada for payment-service-provider supervision, with Québec adding a provincial permit layer of its own. Canada rewards early movers twice over: registration remains inexpensive, and RPAA-registered PSPs are now eligible for Payments Canada membership, the road toward direct participation in national payment infrastructure including the Real-Time Rail.

This guide covers the whole system: who regulates what and under which statute, exactly what triggers each registration, the safeguarding and operational-risk obligations, the application process step by step with the honest 2026 timelines (which differ sharply from the statutory ones), how the active market in registered Canadian MSBs works, and the RPAA's unusual pre-closing re-registration rule that reshapes every acquisition.

Who Regulates Payments in Canada, and Under What Law

• FINTRAC (Financial Transactions and Reports Analysis Centre of Canada) registers money services businesses under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA). Both domestic MSBs and foreign MSBs directing services at persons in Canada must register, the latter a rule with real extraterritorial teeth that catches many offshore apps by surprise.

• Bank of Canada supervises payment service providers under the Retail Payment Activities Act: registration through the PSP Connect portal, operational risk-management and incident-reporting frameworks, and safeguarding of end-user funds. The RPAA's registration and supervisory provisions came fully into force on 8 September 2025.

• Revenu Québec administers Québec's Money-Services Businesses Act: a separate provincial permit for services offered in Québec, with its own background checks (including fingerprinting for key individuals) and fees.

• Payments Canada is not a regulator but the strategic destination: membership eligibility now extends to RPAA-registered PSPs, opening the path toward direct participation in national payment systems, including the Real-Time Rail (RTR), Canada's instant-payment system in development.

What Triggers Which Registration

FINTRAC MSB registration covers: foreign-exchange dealing; money transferring; issuing or redeeming money orders and similar instruments; dealing in virtual currencies (exchange and transfer); and payment-service activities within the PCMLTFA's scope. Registration is free, renewable every two years, and enforced through administrative monetary penalties that FINTRAC publishes by name.

RPAA registration captures retail payment activities: performing any payment function (provision or maintenance of accounts, holding funds, initiation, authorization or transmission of instructions, clearing or settlement) for end users, where performed by a PSP with a place of business in Canada or directing activities at Canadians. Banks and other prudentially regulated entities are excluded; virtually every non-bank fintech serving Canadian consumers or businesses with transfers, wallets, or processing is included.

Most operators need both, plus Québec if they serve that province, and the registrations are cumulative rather than alternative.

Capital, Safeguarding, and the Operational-Risk Framework

Canada prescribes no minimum capital under either regime, one reason entry is so cheap. The RPAA's protections work differently:

• Safeguarding of end-user funds: PSPs holding end-user funds must protect them via a trust account structure or insurance/guarantee arrangements, so that funds survive the PSP's insolvency.

• Operational risk management: a written framework proportionate to the business covering identification and mitigation of operational risks, incident response, third-party/outsourcing risk, and business continuity, filed expectations the Bank of Canada supervises against.

• Incident reporting and annual reporting: material incidents affecting end users or the payment system must be reported; annual reports keep the register current.

FINTRAC obligations layer the familiar AML program on top: compliance officer, policies and procedures, risk assessment, training, effectiveness reviews, KYC, record-keeping, and reporting (LCTRs, EFTRs, STRs, virtual-currency reports).

Canada MSB Registration Step by Step, With the Honest Timelines

The gap between the statutory clocks and the lived queue is the single most important planning fact in the Canadian market in 2026, and it flips the apply-versus-acquire calculus, as the acquisition section below explains.

Professional costs for the full stack (FINTRAC + RPAA + Québec + the AML and operational-risk builds) typically run C$80,000–C$150,000. Substance: incorporate federally or provincially, noting that federal (CBCA) incorporation requires 25% resident directors, which is why foreign groups usually incorporate in Ontario or British Columbia, which have no director-residency requirement. A Canadian compliance officer and a genuinely Canadian AML program are expected regardless of where the parent sits.

Banking Realities for Canadian MSBs

Canadian banks de-risk MSBs as aggressively as their peers anywhere: account opening is slow, closures are common, and a registered entity with stable, tested banking is worth a genuine premium in the secondary market. Payments Canada eligibility is the structural answer, direct participation reduces dependency on commercial-bank intermediaries, which is precisely why registering now and building supervisory history toward RTR participation is the highest-leverage move available in this market.

Also on the horizon: the federal Budget 2025 announced stablecoin-issuer legislation with Bank of Canada oversight delivered through RPAA amendments, meaning Canada's stablecoin regime will likely run through the same registration architecture described here, another argument for incumbency.

Buying a Registered Canadian MSB

Registered MSBs change hands continuously, in one of the world's most active small-ticket license markets, and the market divides into two classes whose economics differ completely:

Class One: FINTRAC-Registered (Non-RPAA) MSBs

Entities registered for AML purposes whose activities sit outside the RPAA perimeter. Because FINTRAC registration follows the entity and the change is handled through registration updates rather than a prior-approval gate, transfers complete in under a week. Indicative pricing for clean shells runs roughly €50,000–€80,000 (this market conventionally quotes in euros through international brokers). Standard terms are simple: a deposit of around 10% reserves the entity for a short exclusivity window of a few business days for diligence, with the balance due promptly if the file is clean.

The strategic use of this class: an immediate FINTRAC seat, letting an operator begin compliant corridor activity within days while longer builds run in parallel.

Class Two: RPAA-Registered PSPs

Entities holding Bank of Canada registration carry the structural quirk every buyer must understand: RPAA section 24 requires a new registration application in connection with an acquisition of control, filed and cleared before the transaction closes. The acquirer effectively re-registers the entity with itself as owner, with the 45-day review and national-security window running pre-closing. Practical clearance: 4–6 months.

Now run the 2026 arithmetic: fresh registration, 10–12 months in the queue; acquisition with section 24 re-registration, 4–6 months. Acquisition currently halves time-to-market into full RPAA status, which is why RPAA-registered entities command a visible premium, indicatively €80,000–€120,000 for clean structures, and why that premium is rational rather than sentimental.

Diligence Priorities for Canadian Targets

• FINTRAC compliance history, including any administrative monetary penalties (published) and examination findings.

• Banking relationships and their post-transfer continuity, the single largest value driver.

• Québec exposure: whether the entity holds, needs, or has ever been refused a Revenu Québec permit.

• Safeguarding and operational-risk framework quality against RPAA expectations, since the buyer inherits the supervisory file.

• Beneficial-ownership cleanliness of the seller, because your section 24 file will explain the entity's full history.

Apply vs. Acquire vs. Partner in Canada

Canada MSB Registration Cost

Common Mistakes in the Canadian Market

• Planning against the statutory 45-day clock and discovering the 10–12 month queue after signing customer commitments.

• Incorporating federally without noticing the CBCA's 25% resident-director rule, then re-domiciling to Ontario mid-application.

• Serving Québec customers "temporarily" without the Revenu Québec permit; the province enforces.

• Buying an RPAA-registered PSP and structuring the deal to close before section 24 clearance. The statute says before; the statute means before.

• Forgetting that foreign MSBs directing services at Canadians must register with FINTRAC even with no Canadian entity, a rule FINTRAC enforces against offshore apps by name.

Frequently Asked Questions

Do I need both FINTRAC and Bank of Canada registration?
Usually yes. FINTRAC handles AML registration under the PCMLTFA; the RPAA handles payment-service-provider supervision. Most transfer, wallet, and processing businesses serving Canadians fall under both, plus Québec's permit where applicable.

How long does Canada MSB registration take?
FINTRAC: weeks. RPAA: statutory clocks total roughly 105 days, but the practical queue in 2026 runs 10–12 months for new registrations. Plan the program around the lived number.

Is there a capital requirement in Canada?
No prescribed minimum under either regime. End-user funds must be safeguarded (trust or insurance/guarantee), and a proportionate operational risk-management framework is mandatory under the RPAA.

Can I buy a registered MSB instead of applying?
Yes, and the market is active. Non-RPAA MSBs transfer in under a week at roughly €50–80K. RPAA-registered PSPs require a section 24 re-registration cleared before closing (4–6 months), which in the current queue still beats a fresh 10–12 month registration.

What is RPAA section 24?
The provision requiring a new registration application in connection with an acquisition of control of a registered PSP, filed and cleared pre-closing. It makes every RPAA acquisition a pre-approved transaction and is the reason Canadian PSP deals are structured with registration clearance as a condition precedent.

Does foreign ownership cause problems?
Foreign ownership is permitted. The national-security review window (60 days, extendable) is the main checkpoint for foreign acquirers and applicants; clean, complete files manage it. Incorporate in Ontario or BC to avoid the federal resident-director rule.

What is Payments Canada membership worth?
Eligibility for direct participation in national payment infrastructure, including the Real-Time Rail as it launches, which means settlement without a commercial-bank intermediary. It converts a cheap registration into genuine payments infrastructure and is the best strategic reason to be registered early.

Does Canadian registration help with the United States?
Operationally it builds a North American compliance record, but legally no: the US requires separate FinCEN registration and state-by-state money-transmitter licensing, an entirely different program.

What about crypto in Canada?
Dealing in virtual currencies is a FINTRAC-registrable MSB activity with dedicated reporting obligations, and the announced stablecoin legislation will run through RPAA amendments under Bank of Canada oversight. Entities combining VC dealing with payments should expect both regulators' full attention.

How does Faisal Khan LLC help with Canada MSB Registration

Faisal Khan LLC advises on Canadian market entry end-to-end: registration strategy across all three regulators, buy-side acquisition of registered entities including section 24 re-registration, and positioning for Payments Canada and Real-Time Rail participation.

We work with money services businesses and payment service providers entering Canada end-to-end — starting with the decision that shapes everything else: whether to apply for fresh FINTRAC and RPAA registration, acquire a registered entity for speed, or operate as an agent of a registered business, and whether Québec's separate Revenu Québec permit applies to you. From there we help with the practical build — scoping the compliance program regulators expect, meeting local incorporation and director requirements, and connecting you with the right partners to get your project started.

This guide is published by Faisal Khan LLC for general informational purposes. It does not constitute legal, tax, accounting, or investment advice, and no regulatory outcome is guaranteed. Figures are indicative as of July 2026; confirm current requirements with FINTRAC, the Bank of Canada, Revenu Québec, and qualified Canadian counsel before acting.