Who Needs to Register Under the RPAA in Canada? 

• Any individual or entity that performs one or more retail payment activities as a standalone business activity in Canada must register with the Bank of Canada under the Retail Payment Activities Act. This obligation typically applies to payment processors, digital wallet providers, remittance companies, and fintech platforms that hold, transfer, or move end-user funds. Businesses that also handle currency exchange or fund transmission are also subject to FINTRAC MSB Requirements under a separate federal framework, and non-compliance with either statute carries significant regulatory consequences. 

• This article explains who needs to register as a payment service provider in Canada, how registration works, and how it intersects with MSB license in Canada obligations. 

• Quick Answer: 

• Businesses that provide or maintain payment accounts, hold end-user funds, initiate or authorize electronic funds transfers, or act as an intermediary in clearing and settlement generally fall within the RPAA registration requirements in Canada framework. If the same business also exchanges currency or deals in virtual currency, it will likely also need to satisfy FINTRAC MSB Requirements. There is no single test for every business model; the answer depends on which payment functions are performed and whether an exclusion applies. 

What Is the Retail Payment Activities Act? 

• The Retail Payment Activities Act (RPAA) is federal legislation establishing a supervisory framework for payment service providers operating in or into Canada. 

• It is administered by the Bank of Canada, which assesses applications, maintains the public registry, and enforces compliance. 

• The statute came into force in phases: the registration window opened November 1, 2024, and full operational supervision began on September 8, 2025. 

• Its purpose is to protect end users and supporting a payments ecosystem that is safe, competitive and innovative. 

• Practical takeaway: Founders building a payments product for Canada should map their features against the statute before launching, not after a compliance inquiry arrives. 

Who Needs to Register as a Payment Service Provider in Canada? 

• Determining who needs to register as a payment service provider in Canada starts with the five payment functions under Section 2 of the RPAA. An entity generally falls within scope if it performs, on a standalone basis, one or more of the following: 

• Provision or maintenance of a payment account held on behalf of an end user. 

• Holding of end-user funds until they are withdrawn or transferred. 

• Initiation of an electronic funds transfer at the request of an end user. 

• Authorization of a transfer or transmission of payment instructions. 

• Provision of clearing or settlement services between other providers. 

Sub-pointers on scope: 

• The entity may be based in Canada, or abroad while directing its activities at Canadian end users. 

• Revenue generation is irrelevant; a business performing in-scope functions must register even without generating current income from the activity. 

• Certain entities are excluded, including banks under the Bank Act, credit unions, insurance companies, trust and loan companies, and securities participants already regulated under Canadian securities legislation. 

• Verdict: If a platform touches customer funds or sits in the settlement chain, Retail Payment Activities Act registration should be assumed necessary until a documented exemption analysis proves otherwise. 

What Are the RPAA Registration Requirements in Canada? 

• Understanding the RPAA registration requirements Canada regulators expect is essential before applying. The process runs through the Bank of Canada’s PSP Connect portal and generally follows these steps: 

1. Pre-assessment. Confirm which payment functions the business performs and whether any exclusion applies. 

2. Application submission. Create a PSP Connect account, complete the application, and pay the registration fee. 

3. Risk management framework. Submit evidence of an operational risk and incident response framework covering compliance, fraud and cybersecurity controls. 

4. Safeguarding of funds. Where the applicant holds end-user funds, demonstrate that they are safeguarded through a trust account, guarantee or another approved mechanism. 

5. National security screening. Applicants undergo screening coordinated with the Department of Finance before a decision is issued. 

6. Ongoing reporting. Registered providers file annual reports and notify the Bank of any material changes to their profile. 

• Practical takeaway: Any business already performing retail payment activities without an application on file is operating in violation of the RPAA and should pursue registration immediately. 

How Does Bank of Canada PSP Registration Work in Practice? 

• Registered status confirms a provider has met the legal criteria and cleared national security screening closer to supervised registration than traditional licensing. 

• It does not mean that the regulator endorses or has assessed the commercial soundness of the provider’s product. 

• Registered entities remain subject to ongoing risk supervision and potential monetary penalties for non-compliance. 

• The public registry of registered, refused and revoked providers is checked routinely by banks, making Bank of Canada PSP registration a practical prerequisite for obtaining business banking services. 

How Do FINTRAC MSB Requirements Overlap With RPAA Registration? 

• Many payment businesses assume RPAA registration is the only federal obligation they face, but FINTRAC MSB Requirements frequently apply in parallel. FINTRAC, the Financial Transactions and Reports Analysis Centre of Canada, administers a separate regime under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. 

• A business qualifies as a money services business, and must satisfy FINTRAC MSB Requirements, if it deals in foreign exchange, funds transmission, money orders, or virtual currency exchange or transfer. 

• Core obligations include appointing a compliance officer, maintaining a written risk-based compliance program, conducting an ongoing risk assessment, delivering staff training, and performing a periodic effectiveness review. 

• Meeting FINTRAC MSB Requirements does not remove a separate RPAA obligation, and vice versa, where both regimes apply to the same activity. 

• Operating an unregistered money services business is a criminal offence, carrying substantial penalties and possible imprisonment. 

• Businesses evaluating market entry often secure a Canada MSB license alongside RPAA registration to present a coherent compliance profile to banking partners, since satisfying FINTRAC MSB Requirements strengthens credibility with institutional counterparties. 

Comparing RPAA and MSB Compliance Obligations 

Criteria	RPAA (Bank of Canada)	FINTRAC MSB Compliance
Regulator	Bank of Canada	FINTRAC
Governing law	Retail Payment Activities Act	Proceeds of Crime (Money Laundering) and Terrorist Financing Act
Core focus	Operational risk, safeguarding funds	Anti-money laundering, counter-terrorist financing
Typical trigger	Holding accounts, moving funds, settlement	Currency exchange, funds transmission, virtual currency
Renewal	Ongoing, annual reporting	Every two years
Penalty exposure	Administrative monetary penalties	Penalties up to CAD 2 million, imprisonment

• Practical takeaway: Map every product feature against both regimes before launch. A single feature, such as holding customer balances, can trigger both frameworks at once. 

What Happens If a Business Fails to Register? 

• Under the RPAA, operating without registration risks monetary penalties, public enforcement notices, and operating restrictions. 

• Under the PCMLTFA, operating without meeting the applicable MSB obligations is a regulatory offence with penalties that can reach into the millions of dollars. 

• Banking access becomes harder, since Canadian institutions check both registries during onboarding. 

• Investor confidence is affected, as counterparties treat registration status as a baseline trust signal. 

How can we help? 

• Tetra Consultants supports fintech founders, payment processors and remittance businesses through the compliance lifecycle when entrering into the Canadian payments market. Our team assists clients with: 

• Offshore company incorporation to set up the correct structure before applying for RPAA or MSB registration, through our offshore company incorporation service. 

• Corporate bank account opening, since banking partners expect a registered entity with a compliant banking relationship already in place, through our corporate bank account opening service. 

• Brand protection as the business scales into Canada, through our international trademark registration service. 

• For entrepreneurs seeking additional information, Tetra Consultants has also published guidance on Industries That Require a Canada MSB License in 2026 and Canada MSB compliance officer services. These resources provide further information on the industries that may require a Canada MSB License and the compliance support available to businesses operating in this sector. 

Conclusion 

• Payment businesses entering the Canadian market should treat Retail Payment Activities Act registration and FINTRAC MSB Requirements as related but independently mandatory obligations. Founders who hold customer funds or exchange currency should complete a scope assessment early and build their compliance program before launch rather than in response to enforcement activity.  

• Tetra Consultants works with fintech and payments businesses to structure the correct entity, prepare compliance documentation, and manage registration for both frameworks. 

• Contact us and we will revert within 24 hours. 

FAQs