Reading Canadian AML Sources: the Act, the Regulations, and FINTRAC Guidance

Canadian AML obligations arrive in three layers, and each does distinct work. The Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) is the governing statute: it sets the architecture of the regime, defines who is covered, and creates the core duties. The Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations (PCMLTFR) and related regulations carry most of the day-to-day operational obligations — the detail that determines what a business actually has to do. FINTRAC guidance is the third layer: the regulator's published explanation of how it reads those obligations and what it expects from reporting entities.

The money services business rules show how the layers divide the work. The Act establishes the categories — PCMLTFA s.5(h) covers domestic MSBs and s.5(h.1) covers foreign MSBs directing services at persons in Canada — and s.11.1 requires registration. The definitions that decide close cases live in the Regulations: PCMLTFR s.1(2) supplies the defined terms, and s.29.1 prescribes additional MSB services, including cheque-cashing services and crowdfunding platform services. FINTRAC guidance then explains how the agency applies those provisions to real business models.

When two sources appear to disagree, rank them. The current Act and current Regulations sit at the top — they are the law. Current FINTRAC guidance sits below them: it is not binding legislation, but it is how FINTRAC communicates its expectations, and it is what examiners assess against in practice. Archived policy interpretations and informal commentary sit at the bottom. An old policy interpretation is never stronger authority than the current Act or Regulations, no matter how directly it seems to address your situation.

This ranking cuts both ways. Treating guidance as if it were statute overstates its force; dismissing it because it is "only guidance" understates its practical weight. Most businesses follow current guidance by default and, where they depart from it, record the reasoning — a written explanation of why the statutory text supports a different reading is far easier to defend than an undocumented judgment call.

Canadian AML law moves, and a citation that was accurate last year can mislead today. Two recent examples: transporting currency or negotiable instruments (armoured-car services) became a reporting-entity obligation in force July 1, 2024, and acquirer services for private automated banking machines became a registerable MSB obligation in force October 1, 2025. A business model that sat outside the regime when a memo was written may now be squarely inside it.

The practical habit: read the consolidated version of the Act and Regulations on the Justice Laws website rather than a saved PDF, and check the in-force status of any provision you rely on. When a section number appears in an older analysis, treat the date of that analysis as part of the citation.

FINTRAC's policy interpretations answered specific questions from specific businesses, based on the facts presented and the law in force at the time. The archive is genuinely useful — it shows the kinds of questions businesses have asked and how FINTRAC has historically reasoned through fact patterns. What it cannot do is tell you the current answer, because interpretations can be superseded by legislative change or retracted outright.

PI-7670 is the cautionary example. FINTRAC withdrew its PI-7670 positions on merchant servicing and payment processing effective April 27, 2022, with a further notice on July 21, 2022. A payments company that shaped its registration analysis around PI-7670 after those dates was building on reasoning the regulator had already retracted. Before using anything from the archive, validate it against the current Act, current Regulations, and current FINTRAC guidance — and if the answer still matters and remains unclear, ask FINTRAC directly rather than assuming the old position holds.

When writing a policy, a risk assessment, or an internal memo, label every load-bearing point with its layer: a statutory or regulatory obligation (cite the provision), a FINTRAC guidance expectation (link the guidance page and note when you checked it), or historical context (mark it clearly as such). A payroll platform working through whether it handles funds in a way that triggers MSB registration, for example, should be able to see at a glance which parts of its analysis rest on the Regulations and which rest on guidance.

This discipline pays off when the law changes. If your documents say exactly which conclusions rest on which layer, an amendment to the Regulations or a revised guidance page tells you precisely what to revisit — instead of forcing a full re-read of everything you have ever written.