Canada

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) is the financial intelligence unit and anti-money laundering supervisor. It receives suspicious transaction and $10,000 threshold reports and imposes penalties. Others sit alongside it: OSFI supervises federal banks and insurers prudentially, provincial securities regulators and CIRO oversee crypto trading platforms, and Ontario's AGCO regulates private online gambling operators.

Yes. The federal AML regulations set five identification methods, all usable remotely. A photo ID checked without the customer present must be authenticated by technology, then matched to the person by a selfie with facial comparison or live video; viewing the card on a video call is not enough. Credit file and dual-process checks offer a non-biometric route.

Since 26 March 2026, FINTRAC penalties reach $20 million per very serious violation, and one notice is capped at the greater of $20 million and 3% of an entity's gross global revenue. FINTRAC must now require a compliance agreement after any violation, and programmes must be risk-based and effective. Mandatory enrolment with FINTRAC is law but has no start date.

Generally yes. The Office of the Privacy Commissioner of Canada treats biometric information that can uniquely identify a person, including face templates, as sensitive, with express consent as the general rule. In Québec, a biometric identity check also needs prior disclosure to the Commission d'accès à l'information, and the characteristics must be destroyed once verification is complete.

Telecom and healthcare providers, online marketplaces, travel businesses, public bodies and non-life insurers are outside the PCMLTFA unless they also remit funds, exchange currency or deal in virtual currency. Their identity duties come from other rules, such as CRTC customer information rules, provincial health privacy laws, seller reporting under the Income Tax Act, aviation security law and Treasury Board standards.