Canada payment registration for foreign fintechs under RPAA and FINTRAC

The company plans to attract Canadian senders through a Canadian-facing app and advertising. Its Canadian banking partner holds settlement accounts. The platform initiates transfers and controls parts of the customer ledger. Overseas partners complete payout.

Before choosing a registration route, document who contracts with the sender, accepts the payment order and promises delivery or refund. Identify each account holder, the party owing any balance and the persons authorised to move it. Record when the recipient gains access to the promised funds.

The initial product should use immediate fiat remittances without a reusable customer balance. This proposed design narrows the holding-funds question while preserving the platform's other registration and operating duties. Scheduled transfers, prefunded balances and uncollected payouts need separate treatment. The Canada licensing hub places these payment registrations within the wider Canadian regime.

Under section 5, a payment service provider (PSP) without a Canadian place of business can fall within the RPAA. It must direct retail payment activities at individuals or entities in Canada and perform them for an end user in Canada. The app and advertising support the directing element. Providing transfers for senders physically in Canada supplies the end-user element under the Bank's interpretation. Canadian residence alone is insufficient. A Canadian place of business instead engages section 4. (Bank of Canada, Criteria for Registering Payment Service Providers, step 3.)

The Act covers electronic transfers in Canadian or foreign currency. Its definition of end user includes businesses. Calling a service business-to-business, wholesale or a supplier-payment product therefore supplies no general exemption. (RPAA, ss. 2, 4–5.)

Map the five functions separately:

1. Providing or maintaining an account. Examine whether the platform stores customer information for future electronic transfers. A ledger can perform this function even where the underlying money is with a bank. A record used only for internal accounting needs a different assessment.
2. Holding end-user funds. Identify the debtor, account ownership and whether money is at rest for later use. The bank's physical custody does not answer who holds funds for RPAA purposes.
3. Initiating transfers. The platform initiates transfers at its customers' request, a function expressly covered by the Act. It can require registration without the platform holding funds.
4. Authorising or transmitting instructions. Determine whether the app approves, receives, routes or facilitates executable payment instructions. Document the platform's permissions and the instructions it handles.
5. Clearing or settlement. Check whether the platform calculates or settles payment obligations between participants. Merely using the bank's settlement service does not establish that the platform performs that function itself.

These classifications apply the statutory definitions and the Bank's supervisory interpretation to the proposed operations. (RPAA, s. 2; Bank of Canada, Criteria for Registering Payment Service Providers, payment-function sections.)

The incidental-activity exclusion requires a real relationship to another business activity. A remittance platform cannot treat payments as incidental merely because software delivers them. Banks have their own entity exclusion, but that exclusion does not extend automatically to their fintech customers. Using a designated payment system also leaves separate functions outside that system to be assessed. (RPAA, ss. 2, 6–9; Retail Payment Activities Regulations (RPAR), s. 3.)

Section 10 excludes an agent or mandatary only when it acts within its authority for a registered PSP and appears on that PSP's required agent list. An ordinary banking agreement does not establish those conditions. A bank excluded under section 9 is not, through that exclusion, the registered PSP principal required by section 10. Independent services outside an agency mandate still require their own assessment. (RPAA, ss. 9–10, 29(1)(e), 59(1).)

The company can consider a genuine agency model if a registered PSP will assume the principal role. The agreement and actual product must assign customer obligations, instruction powers and controls consistently. The principal remains liable for violations by agents acting within their authority. (RPAA, s. 87.)

The sponsor or own-authorisation guide addresses that commercial choice in other markets. Canadian exclusions must be tested under Canadian law.

The foreign money services business test asks four separate questions. Does the company carry on a covered money services business? Does it lack a Canadian place of business? Does it direct services at persons or entities in Canada? Does it provide those services to clients in Canada? Remitting or transmitting funds is a covered service. (PCMLTFA, s. 5(h.1)(ii).)

The proposed remittance service with the platform acting as principal supports this classification if the company has no Canadian place of business. Check offices, personnel and agents before choosing that route. A Kenyan incorporation does not prevent the company from falling within the domestic MSB provision where it has a Canadian place of business. (PCMLTFA, s. 5(h); FINTRAC, Money Services Businesses, registration criteria.)

Bank of Canada registration does not satisfy FINTRAC MSB requirements. Neither registration is a universal banking, crypto-trading or money-transmission licence. A genuine MSB agency arrangement requires a separate FINTRAC assessment; the RPAA agent exclusion does not decide it.

The FINTRAC agent route requires inclusion on the principal's list and acting in that capacity. For a domestic MSB principal under paragraph 5(h), eligibility and criminal-record checks must precede a new appointment. The 1 October 2027 deadline concerns agents engaged before 1 October 2025. These specific checking provisions address domestic principals. A foreign MSB must still document its agents and meet its own compliance duties. (PCMLTFA, ss. 9.9–9.93, 11.12; PCMLTF Regulations, ss. 37.1, 156; FINTRAC, Money Services Businesses, agency guidance.)

Build the compliance programme around the platform's own duties: a responsible compliance officer, policies, risk assessment, training and effectiveness review. Allocate identity verification, beneficial-ownership checks, monitoring, records and required reports across the customer journey. Ensure transfer instructions carry the information required by the applicable travel rule. The platform must be able to retrieve compliance evidence from its bank and payout partners. Each reporting entity remains responsible for its applicable obligations; a bank's checks do not automatically discharge the platform's duties. (PCMLTFA, ss. 6–9.6; PCMLTF Regulations, ss. 95, 123.1, 124, 138, 156.)

A new entrant must receive its Bank of Canada registration decision before performing in-scope activities. Appearing on the applicant list or submitting a complete application is insufficient. Section 108 preserves a separate position for qualifying applicants from the transition ending on 7 September 2025. That history does not provide this new launch with a waiting-period exemption. (RPAA, ss. 23, 25–26, 103–108; Bank of Canada, Frequently Asked Questions, “When can I operate as a payment service provider?”)

Prepare the corporate and ownership records, directors' details, payment-function description, funds-flow evidence and required agent information. Document operating risks and the safeguarding method where funds will be held. File through PSP Connect and pay the current prescribed fee, which is indexed under the Regulations. National-security screening and requests for information can affect the timetable. (RPAA, ss. 29, 32–48; RPAR, ss. 24–27.)

FINTRAC registration is free. Prepare ownership and management details, compliance-officer information, required criminal-record checks and the identity of a person resident in Canada authorised to receive notices. This representative does not replace the business's compliance duties. (PCMLTFA, ss. 11.1, 11.12; FINTRAC, Register Your Money Services Business.)

Negotiate banking terms and prepare the account evidence before filing, but make activation conditional on the applicable registration. Covered financial institutions must not open or maintain an account or correspondent banking relationship for an unregistered foreign MSB. Do not build the application plan around opening that prohibited relationship first. (PCMLTFA, s. 9.31(1).)

A pooled account in the platform's name can leave the platform indebted to its customers. If their balances remain available for later transfer or withdrawal, the platform can be holding end-user funds even though the account is with a Canadian bank.

A genuine account in each customer's name produces a different starting point. Where the customer contracts directly with the bank and the bank owes the deposit, the platform may provide the interface without performing the holding function. Its initiation, account-maintenance or instruction services still need classification.

Immediate remittances require a third analysis. The Bank of Canada treats funds as in transit where an immediate-transfer instruction applies throughout processing, even if execution takes several days. Money saved for a later transfer, or awaiting a recipient's separate withdrawal instruction, can instead be at rest. Inspect failed payments and refunds too; product labels do not determine their treatment. (Bank of Canada, Case Scenarios About Holding Funds, wallet, money-transfer and online-deposit-account scenarios.)

Where section 20 applies, establish a valid trust in a dedicated trust account or a dedicated account supported by qualifying insurance or a guarantee. Ordinary segregation alone does not complete either route. Bank deposit insurance does not replace protection against the platform's insolvency. The account provider cannot assert set-off against funds in the prescribed safeguarding accounts. (RPAA, s. 20; RPAR, ss. 13–14; Bank of Canada, Safeguarding End-User Funds, paras. 2.4–2.30.)

Obtain the account mandate, trust documentation or policy, and records identifying each customer's entitlement. Prepare the written safeguarding arrangements, reconciliation process, insolvency payout instructions and required reviews. If using the trust route, obtain a written legal opinion on its validity for the Bank's assessment process. (RPAR, ss. 15–17; Bank of Canada, Frequently Asked Questions, safeguarding section.)

The platform's senior management should assign each operating duty to a person with access to the necessary records and systems. Outsourcing performance leaves the PSP responsible for its own RPAA obligations. Assess payment suppliers before contracting, renewal, extension or substantial amendment, and at least annually. Include the bank where it supplies such services. Record the allocation of data and security responsibilities. (RPAA, s. 17; RPAR, s. 5(3)–(5).)

The bank retains its own regulatory responsibilities. Guideline B-10 of the Office of the Superintendent of Financial Institutions (OSFI) expects a federally regulated bank to manage third-party risk and retain accountability for outsourced work. That supervisory expectation supports the bank's diligence and contract requirements; it does not transfer the platform's registrations to the bank. (OSFI, Guideline B-10, ss. A1, 1.1.1, 2.3.1 and Annex 2.)

Prepare three connected agreements:

• The customer terms should identify the remittance provider, fees, exchange rate, promised payout, delivery conditions, cancellation and refund rights, and complaints contact. Define evidence of recipient payment; a settlement message alone should not discharge a promise of available funds.
• The bank agreement should establish account ownership, permitted use, safeguarding treatment, instruction authority, reconciliation evidence, data access and incident cooperation. Include continuity, termination and transfer arrangements that allow pending payments and customer claims to be handled.
• The payout agreement should identify permitted countries, services, subagents and foreign exchange (FX) providers. Allocate recipient checks, transaction information, prefunding, failed-payout handling, refunds, settlement discrepancies, audit rights and exit assistance. Verify permissions for the actual recipient country and delivery method.

These are proposed contract requirements for this operating model. Mandatory duties remain governed by each applicable regime. A contractual indemnity supplies a recovery claim against a partner; it does not complete a failed customer payment or replace available refund liquidity.

Implement the written risk-management and incident-response arrangements before launch. A material-impact incident requires notice without delay to the Bank and the affected parties covered by section 18. Partner notification clauses must let the platform meet that duty. Calendar the annual report by 31 March and the applicable advance notices for significant changes or new activities. (RPAA, ss. 17–22; RPAR, ss. 5–12, 18, 20.)

Choose the sender provinces before completing the launch plan. Quebec separately licenses paid funds-transfer businesses, subject to its statutory exclusions. Its application requires a respondent resident in Quebec. A foreign business without a Quebec establishment has a specific exception to the respondent's usual director, officer or partner qualification. Federal registration supplies no substitute. If Quebec is included, resolve the licence and respondent arrangements before accepting affected customers. (Money-Services Businesses Act, CQLR c. E-12.000001, ss. 1–5.)

British Columbia has enacted a Money Services Businesses Act, but the latest official published record still marks its core licensing provisions as not in force. Do not treat that future regime as an existing application requirement. Monitor commencement before expanding or launching there. (Money Services Businesses Act, S.B.C. 2023, c. 19, ss. 1–54, 66.)

For Quebec customers, examine the French-language contract rules, including the conditions for choosing another language and the cross-border exception. Address the privacy assessment and contractual safeguards applicable to overseas processing of customer information. Check consumer disclosures, cancellation rights and complaints procedures for the selected product and provinces; do not assume every remittance carries an unconditional cooling-off period. (Charter of the French Language, s. 55; Act respecting the protection of personal information in the private sector, s. 17; Consumer Protection Act, ss. 54.4–54.8.)

Canadian registrations do not authorise business conducted in or from Kenya. Identify what the Kenyan entity itself does, including contracting, processing, FX and payout instructions. Establish the Kenyan licensing or permission basis for its proposed FX activities before committing to that route. The National Payment System Act separately requires authorisation for payment-service-provider business in Kenya. A Canadian bank relationship supplies no substitute. (National Payment System Act, ss. 2, 12–13.)

The 2013 Money Remittance Regulations describe remittances without creating payment accounts in the payer's or payee's name. They address licensing, permitted activities, agents and bank accounts. A reusable balance or wallet therefore needs further analysis beyond the remittance route. Assess the National Payment System Act position for the initial product too; removing balances does not prove that the platform performs no payment service. (Money Remittance Regulations 2013, regs. 2–4, 22–25, 30; National Payment System Act, ss. 2, 12.)

The continuing effect of the older implementing regulations raises a separate question. Promitto and Kimanthi treated the statutory ten-year expiry provision as repealed; Gikenyi subsequently described the position as legally unsettled. None decided the validity of the 2013 remittance or 2014 payment regulations. Continued reliance on them by the Central Bank of Kenya does not resolve that conflict. (Promitto Limited v Capital Market Authority [2025] KECMT 8, paras. 41–47; Kimanthi v Attorney General [2025] KEHC 11098, paras. 32–37; Gikenyi B v Cabinet Secretary, Interior [2025] KEHC 15505, paras. 94–100.)

Before launch, establish the current legal basis and scope of the Kenyan permissions being relied on. If the platform's own route is unresolved, use a bank or provider whose authorisations cover the assigned functions, with the platform's role lawfully limited. Obtain the actual licence conditions and required agency or partner approvals. Keep any unresolved activity outside the launch; the expiry dispute creates no permission to disregard the parent Acts.

A Canadian office, employee or agent can change the territorial classification. A different contracting principal can change the registration analysis. A reusable balance, delayed collection or account where the bank owes the customer changes the holding inquiry. Quebec customers, new payout countries or a digital-asset settlement leg require their own assessment. Record these changes before product teams enable them.

1. Product and legal teams should settle the contracting entity, sender provinces, destination countries, currencies and functions. Record the own-registration or qualifying agency route separately for RPAA and FINTRAC.
2. Treasury and legal teams should obtain conditional banking terms and determine the debtor, account holder, holding periods and safeguarding method. Prepare the opinion and protection documents required by that design.
3. Compliance should complete the required registrations, representative arrangements and provincial permissions. Verify the Kenyan and payout providers' exact authorisations and any approval conditions.
4. Operations and security should test onboarding, instruction permissions, reconciliation, partner outages, failed payouts, refunds and incident escalation. Retain the results and assign unresolved failures to an owner.
5. Management should enable only the approved product and corridors once the registration decisions, account arrangements, contracts and operating controls are effective. A later wallet, new principal or different settlement asset requires a fresh scope assessment.

The payment and e-money licensing service describes the wider activity-assessment and application work. For a different settlement design, the UK-to-Kenya remittance analysis examines fiat payout with a proposed stablecoin settlement leg.