Title Insurers and the Mortgage Sector

The mortgage sector came under the PCMLTFA first. Obligations for mortgage administrators, mortgage brokers and mortgage lenders came into force on October 11, 2024, under the implementing regulation SOR/2023-194, which added sections 64.1 to 64.6 to the PCMLTFR (the sector is brought in through PCMLTFA s. 5(i) via PCMLTFR s. 64.1). A common sourcing trap: this date does not appear on FINTRAC's current 'changes' page, which now covers only the Budget 2023/Fall Economic Statement 2023, Budget 2024, Budget 2025 and Borders Act initiatives — the mortgage sector requirements page is the place to confirm it.

Title insurers followed a year later. Their obligations came into force on October 1, 2025, as part of the Budget 2023 and Fall Economic Statement 2023 amendments, under implementing regulation SOR/2024-267, which added PCMLTFR sections 64.7, 64.8 and 102.2. The same October 1, 2025 date brought in acquirers of private automated banking machines — a reminder that these in-force dates arrive in waves, and each business needs to locate its own wave rather than assume a single 'real estate' start date.

Both sectors inherit the standard PCMLTFA architecture: a compliance program, client identification, record keeping and reporting. The compliance-program requirement sits in PCMLTFA s. 9.6(1) — every person or entity referred to in s. 5 must establish and implement one — and s. 9.6(2) requires it to include policies and procedures to assess, in the course of the business's activities, the risk of a money laundering or terrorist activity financing offence. PCMLTFR s. 156(1)(c) requires that risk to be assessed and documented. Note the horizon date: a new PCMLTFA s. 9.6(1.1), in force March 26, 2026, will require the program to be 'reasonably designed, risk-based and effective' — worth building toward now rather than retrofitting later.

For a mortgage broker, the operational shape is: know who your client is before the deal funds, keep records of what you verified, and have a written program that says who does what. For a title insurer, the client-facing moment is compressed — the policy is often issued at or near closing — so the identity, record-keeping and reporting steps set out in the sector-specific PCMLTFR provisions (ss. 64.7–64.8 and 102.2 for title insurers; ss. 64.1–64.6 for the mortgage sector) have to be wired into the closing workflow rather than bolted on afterward. For the sector-specific mechanics — exactly which records, which timing, which methods of identity verification — check the current FINTRAC guidance for your sector page.

The risk-assessment factors prescribed in PCMLTFR s. 156(1)(c) are: (i) clients, business relationships and correspondent banking relationships; (ii) products, services and delivery channels; (iii) the geographic location of activities; (iv) for financial entities referred to in PCMLTFA paragraphs 5(a) to (g), risk resulting from the activities of affiliated entities; and (v) any other relevant factor. A widespread misconception is that 'new technologies' is one of these enumerated factors — it is not. New developments and new technologies are handled separately by PCMLTFR s. 156(2), which requires the business to assess and document the risk before carrying out a new development or introducing a new technology that may affect clients, products, delivery channels or geography. (Another common mix-up: s. 156(3) is the two-year compliance-program effectiveness review, not the new-technology provision.)

Where the business considers a risk high, PCMLTFA s. 9.6(3) requires the special measures in the regulations — and those live in PCMLTFR s. 157, a single undivided section (there is no s. 157(2)). It requires written policies and procedures for enhanced identity-verification measures based on the assessed risk, and any other enhanced mitigation measure, including keeping client identification and s. 138 beneficial-ownership information up to date and conducting ongoing monitoring of business relationships at a frequency appropriate to the risk. For a mortgage lender, that typically means a documented rule for when a file gets escalated review — not just a gut call at funding.

Title insurers new to the regime tend to ask the same practical questions: whose identity do we verify when the insured is a corporation, when do we collect beneficial-ownership information, and how does that fit a closing timeline measured in days? The regulatory frame is the one described above — the s. 157 special measures expressly reference keeping s. 138 beneficial-ownership information up to date as part of high-risk mitigation, which tells you the regime expects that information to be collected and maintained, not gathered once and filed away. The exact collection and verification steps for the title-insurance sector are set out in the provisions added by SOR/2024-267; because the sector guidance is new and still settling, check the current FINTRAC guidance for title insurers before hardcoding a workflow.

Operationally, the businesses that adapt fastest treat the lender-instruction or policy-order intake as the trigger: identity and ownership questions go out with the first document request, so the compliance step never becomes the reason a closing slips.

Coverage under s. 5 pulls both sectors into the ministerial-directive and sanctions-reporting regimes immediately. Three ministerial directives issued under PCMLTFA s. 11.42 are currently in force — North Korea (December 9, 2017), Iran (July 25, 2020, amended February 15, 2024 and November 15, 2025, and as of November 15, 2025 applying to every person or entity referred to in s. 5) and Russia (February 24, 2024). Each requires treating every transaction originating from or bound for those jurisdictions, regardless of amount, as high-risk for s. 9.6(3) purposes, verifying the identity of anyone requesting or benefiting from it, applying due diligence attentive to sanctions evasion, and keeping a record; the Iran directive additionally requires reporting all such transactions to FINTRAC.

Sanctions screening itself is not mandated by the PCMLTFA or PCMLTFR — the freeze, dealings-prohibition and duty-to-determine obligations flow from the United Nations Act regulations, the Special Economic Measures Act, the Justice for Victims of Corrupt Foreign Officials Act and the Criminal Code. But the PCMLTFA bolts FINTRAC reporting onto that regime: s. 7.1(1) requires a report to FINTRAC whenever a disclosure must be made under Criminal Code s. 83.1 or the UN Act (in force March 1, 2025), or under SEMA Part 1 or JVCFOA s. 7(2) (in force October 1, 2025), and s. 7(c) requires a suspicious transaction report where there are reasonable grounds to suspect a transaction relates to a sanctions evasion offence as defined in PCMLTFA s. 2(1).

On mortgage-specific suspicious indicators, the pattern to internalize is structural: mortgage fraud and laundering typically show up as mismatches — a down payment whose source doesn't match the applicant's stated income or occupation, a borrower directed by an unrelated third party, or rapid early repayment from funds that never touched the borrower's known accounts. FINTRAC publishes indicator guidance; because indicator lists evolve, check the current FINTRAC guidance rather than working from a memorized list. The obligation is to document why a scenario did or didn't reach the 'reasonable grounds to suspect' threshold — a one-line note in the file at the time beats a reconstructed rationale later.

It helps to see the mortgage and title-insurance rules as chapters in a rolling expansion of the reporting-entity perimeter. April 1, 2025 brought in factors (PCMLTFR s. 24.1, a distinct reporting-entity class under PCMLTFA s. 5(i) — not an MSB-prescribed service), financing or leasing entities (PCMLTFR s. 24.15, under s. 5(j)) and cheque-cashing businesses (which are MSBs via the prescribed-service route in PCMLTFR s. 29.1, so they must register with FINTRAC). October 1, 2025 completed the wave with title insurers and PABM acquirers — the latter written directly into the Act's MSB definition at PCMLTFA s. 5(h)(iv.1) and (h.1)(iv.1). A business touching several of these lines — say, a lender that also factors receivables — needs to map each activity to its own s. 5 hook and its own sector-specific PCMLTFR provisions, because the obligations and in-force dates differ by activity, not by company.