Language selection

Government of Canada / Gouvernement du Canada

Search

Assurance of data protection and resumption of online systems

From: Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)

On this page:

Assurance of data protection

Following extensive forensic analysis and due diligence, FINTRAC found no evidence that information was lost or that data was removed through a cyber incident on March 2, 2024.

During the incident, FINTRAC, the Canadian Centre for Cyber Security, Shared Services Canada and the Treasury Board of Canada Secretariat worked diligently to contain, investigate and mitigate the impact of this incident, ensure that affected environments were isolated, and that the right security precautions and measures are in place to protect data.

There has been extensive consultation with the Canadian Centre for Cyber Security, which has validated that FINTRAC's security controls are up-to-date and robust, in alignment with the Treasury Board of Canada Secretariat policy framework.

Availability of online systems

FINTRAC understands the critical nature of the services it provides and has assessed that it is safe to reconnect to its systems in accordance with the channels, instructions and guidance that will be provided on its website. FINTRAC has taken every precaution to maintain the integrity and security of its systems, and ensure that they continue to remain robust and resilient as FINTRAC continues to modernize its technology infrastructure.

API report submission is available for entities that submit higher volumes of Suspicious Transaction Reports, Large Cash Transaction Reports and Large Virtual Currency Reports. Consult: FINTRAC API report submission.

The following systems remain offline and are being replaced as part of FINTRAC's modernization of its technology infrastructure:

For information on the upcoming availability of new online systems, consult: Implementing Online Systems

Interim measures to identify and report transactions

As FINTRAC works to resume its full range of operations, businesses are reminded that they must continue to identify and document all reportable transactions and be prepared to file them once systems are back online.

I report transactions through API report submission.

API report submission is available for entities that submit higher volumes of Suspicious Transaction Reports, Large Cash Transaction Reports and Large Virtual Currency Reports. Consult: FINTRAC API report submission.

To find out when you will be able to use FINTRAC API report submission for Electronic Funds Transfer Reports and Casino Disbursement Reports, please consult: Schedule to implement changes to FINTRAC's reporting forms.

FINTRAC will provide instructions for entities to submit reports they have been identifying for submission since March 2, 2024, that are based on previous legislative requirements (i.e., 1st generation reporting forms).

I need to submit a priority Suspicious Transaction Report.

Priority suspicious transaction reports are on transactions or attempted transactions that are related to one of the following situations:

How to submit a priority Suspicious Transaction Report

If your organization has identified a priority suspicious transaction report meeting one of the requirements above, please contact us for additional information on how to submit this report to FINTRAC.

I report transactions through the FINTRAC Web Reporting System or through batch transmission software.

FINTRAC is encouraging entities that report higher volumes of reports and have API capabilities to test and transition to FINTRAC API report submission.  

Entities that report lower volumes of transactions through the FINTRAC Web Reporting System must identify all reportable transactions and be prepared to backfile them once web reporting becomes available for the submission of modernized reporting forms (2nd generation reporting forms). FINTRAC will be reasonable and work with reporting entities to sequence reporting windows and volumes.

Expectations about filing modernized reporting forms

FINTRAC will provide instructions for entities to submit reports they have been identifying for submission since March 2, 2024, that are based on previous legislative requirements (i.e., 1st generation reporting forms).

Additional guidance will follow on filing reports for which an entity may not have received an acknowledgment of receipt from FINTRAC through either the FINTRAC Web Reporting System or through the use of batch transmission software.

For information on the upcoming availability of new online systems, consult: Implementing Online Systems

I need to register my money services business.

If you are a money services business or foreign money services business seeking to register with FINTRAC, please send an email to MSBRegistration@fintrac-canafe.gc.ca, and the Centre will respond to you as soon as it is feasible to do so.

If you are a money services business or foreign money services business seeking to renew your registration, update your registration information or cancel your registration, please submit a request via the Request for money service business and foreign money services business registration web form

Date Modified: