PCMLTFA amendments: what changed and how it affects regulated firms
Recent amendments to the PCMLTFA expand obligations for MSBs, PSPs, crypto firms, and others. A practical breakdown of what's new and what your program needs to absorb.
The Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) has gone through one of its most consequential rounds of amendments in a decade. Taken together, the changes broaden the scope of who is regulated, deepen what regulated firms must do, and tighten the timelines for doing it. This is a practical summary of what compliance officers at non-bank reporting entities need to internalize.
1. Who counts as a reporting entity now?
The definition of what counts as a money services business has been clarified to capture more payment-adjacent business models. Payment service providers operating retail payment activities, certain crypto-asset service providers, and armoured car services have all been pulled more firmly into the regime. If your firm has been operating on the edge of the definition, the safe assumption is now that you are in scope.
2. What is the new beneficial ownership standard?
The amendments raise the standard for identifying and verifying beneficial owners of entity customers. Reasonable measures are no longer enough on their own, you must document the steps taken, the sources used, and the conclusion reached. Where ownership is opaque, the expectation is that the relationship is escalated, not approved by default.
3. What changed for PEP and sanctions screening?
Screening obligations have been extended and the response timelines tightened. Firms are expected to screen at onboarding, on an ongoing basis, and against updated lists within a defined window. Hits must be triaged, decisioned, and documented, and the documentation must survive an examination years later.
4. How should firms apply ministerial directives?
The framework for ministerial directives, country-specific or activity-specific enhanced measures, has been formalized. Firms need a defined process to absorb a directive when it is issued, apply it across the relevant book of business, and evidence the application.
5. What are the new STR timeline and quality expectations?
Suspicious transaction reporting standards have moved meaningfully. Reports are expected sooner after the suspicion forms, with stronger narratives, and with clear supporting evidence. The era of brief, formulaic STRs is ending.
What do the amendments mean operationally?
- Risk assessments must be re-baselined to reflect the expanded scope and the new enhanced-measures framework.
- Onboarding flows need to capture beneficial ownership at a higher evidentiary standard, with clear escalation paths.
- Screening must be continuous, list-aware, and produce a defensible record per hit.
- STR workflows need to compress time-to-report while improving narrative and evidence quality.
- Training and policies must be updated and re-attested across the team, and the attestation must be recorded.
The takeaway
These amendments don't ask compliance teams to do new things in spirit, they ask them to do familiar things at a higher standard, faster, and with better evidence. That is exactly the kind of work that breaks under spreadsheets and rewards firms that have moved to a connected operating model.
FAQ
What is the PCMLTFA and who does it apply to?
The Proceeds of Crime (Money Laundering) and Terrorist Financing Act, or PCMLTFA, is Canada's primary anti-money-laundering statute, and it applies to a defined set of reporting entities rather than to everyone who touches money. That set includes financial entities, money services businesses (including foreign MSBs that operate into Canada), payment service providers carrying on defined retail payment activities, certain crypto-asset service providers, real estate firms, casinos, accountants, and others. The recent amendments clarified the money services business definition so that more payment-adjacent business models are captured, and pulled payment service providers, crypto-asset service providers, and armoured car services more firmly into the regime. If your firm has been operating on the edge of the definition, the safe assumption is now that you are in scope. Confirming where you sit against the amended definitions is the starting point for everything else the Act requires.
What did the recent PCMLTFA amendments change for regulated firms?
The amendments broaden who is regulated, deepen what regulated firms must do, and tighten the timelines for doing it. Scope expanded: the money services business definition was clarified to capture more payment-adjacent models, and payment service providers, certain crypto-asset service providers, and armoured car services were pulled more firmly in. Beneficial ownership moved to a higher bar, where reasonable measures alone are no longer enough and the steps, sources, and conclusion must be documented. PEP and sanctions screening obligations were extended and their response timelines tightened, with screening at onboarding, on an ongoing basis, and against updated lists within a defined window. The framework for ministerial directives and enhanced measures was formalized. Suspicious transaction reporting standards moved too, expecting reports sooner, with stronger narratives and clearer supporting evidence. In short, familiar obligations now have to be met at a higher standard, faster, and with better evidence.
Do the amendments affect foreign MSBs operating into Canada?
Yes. Foreign money services businesses that direct their services at customers in Canada are treated as reporting entities under the PCMLTFA, and they carry registration and ongoing compliance obligations on substantially the same basis as domestic MSBs. The recent amendments matter here because they clarified what counts as a money services business, capturing more payment-adjacent business models and closing several edge-case ambiguities about who is in scope. A firm that previously read the old definition narrowly, or assumed that operating from outside Canada kept it outside the regime, should re-test that assumption against the amended language. The practical takeaway mirrors the domestic one: if the firm has been operating on the edge of the definition, the safe assumption is now that it is in scope. Confirming enrolment status and mapping the customer base against the amended definition is the first concrete step for any foreign MSB serving Canadian users.
What should a regulated firm do first after the amendments?
Start by re-mapping current activities and the customer base against the amended scope, so you know which new obligations now apply to the firm. Refresh, or re-baseline, the money-laundering risk assessment to incorporate the expanded scope and the new enhanced-measures framework, because the risk assessment calibrates every other control. Verify enrolment status. Then work through the operational implications: onboarding flows need to capture beneficial ownership at a higher evidentiary standard with clear escalation paths, screening has to be continuous, list-aware, and produce a defensible record per hit, and suspicious transaction reporting workflows need to compress time-to-report while improving narrative and evidence quality. Update policies, procedures, and training to reflect the amended language, then re-attest across the team and record the attestation. Throughout, document what changed and why, so the audit trail shows when the program was updated and survives an examination years later.
Sources
Reading is useful. A conversation is faster.
Book a platform demo and we will walk you through real-time sanctions, PEP, and adverse-media screening and the data coverage that fits your firm.
Book a call