Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Canada — Ontario CA-ON

Domains covered
8 of 8
Sources
176
Role actions
8
Horizon <90d
0
Jurisdiction profile
FATF status: Largely Compliant Tier: A Risk direction: Stable Enablement vs enforcement: Mixed

Ontario sits inside Canada's federal AML/CFT/CPF perimeter (Proceeds of Crime (Money Laundering) and Terrorist Financing Act, FINTRAC as FIU/supervisor, CBCA beneficial-ownership registry for federally incorporated firms) overlaid by provincial securities regulation (Ontario Securities Commission) and a non-participating provincial corporate registry that has not joined the federal BO-transparency push, leaving Ontario-incorporated entities comparatively opaque.

Key deficiencies
  • Legal counsel, law firms and (nationally) Quebec notaries remain outside AML/CFT preventive obligations after a Supreme Court ruling declared such measures inoperative for the legal profession, a gap the FATF calls significant
  • FINTRAC's intelligence-disclosure function is structurally constrained: the Cullen Commission found FINTRAC disclosed only 2,057 of 31 million reports received in 2019-20 to law enforcement nationally, with just 355 reaching British Columbia authorities
  • Ontario has not committed provincial corporate-registry data to the federal public beneficial-ownership registry, leaving most Ontario-incorporated (as opposed to federally incorporated) companies outside beneficial-ownership transparency reform
  • Persistent 'snow-washing' real-estate laundering vulnerability in Toronto-area property markets tied to anonymous corporate ownership
  • Unregistered virtual-currency cash-exchange shops operating in the Toronto area without FINTRAC MSB registration, some processing tens of millions of dollars including sanctioned-entity-linked flows
Recent developments (18m)
  • FINTRAC's record-breaking penalty of almost CAD 177 million against Russia-linked crypto payment processor Cryptomus in October 2025
  • FINTRAC revocation of dozens of unregistered crypto-firm MSB registrations following an ICIJ/Toronto Star 'Coin Laundry' investigation into unregistered Toronto-area crypto shops
  • OSC-led, Chainalysis/TRM/USSS/NCA-supported crypto-fraud crackdowns (Project Atlas, Operation Avalanche, Operation Atlantic) freezing tens of millions in scam proceeds tied to Ontario
  • Ontario Securities Commission statement of allegations against Purpose Investments/Som Seif (October 2025)
  • Canada's Special Economic Measures (Russia) Regulations listings targeting drone makers and roughly 100 'shadow fleet' vessels, announced at a G7 foreign ministers meeting held in Ontario (November 2025)

Canada federal law that applies in Canada – Ontario is covered once, on the Canada page. This page covers Canada – Ontario’s own layer: its own law, regulators and enforcement.

Brief

Lead signal

Lead Signal

Ontario's securities regulator has continued to process crypto-asset trading platforms through its established pattern of individually negotiated, time-limited relief rather than a settled licensing code. The Ontario Securities Commission's public registrant records show a new undertaking and exemptive relief dated October 22, 2026 for CADC Reserve Trust concerning CADC tokens, alongside a separate decision dated October 26, 2026 for an immediate-delivery value-referenced-crypto-asset trading platform. The underlying decision documents behind both entries were not independently opened this period, so the entries are read from the OSC's own registrant table rather than from the full text of the decisions themselves.

Read full brief

Lead Signal

Ontario's securities regulator has continued to process crypto-asset trading platforms through its established pattern of individually negotiated, time-limited relief rather than a settled licensing code. The Ontario Securities Commission's public registrant records show a new undertaking and exemptive relief dated October 22, 2026 for CADC Reserve Trust concerning CADC tokens, alongside a separate decision dated October 26, 2026 for an immediate-delivery value-referenced-crypto-asset trading platform. The underlying decision documents behind both entries were not independently opened this period, so the entries are read from the OSC's own registrant table rather than from the full text of the decisions themselves.

Taken together, the two entries are consistent with the probable reading that Ontario remains the most procedurally active Canadian province on crypto-platform registration, maintaining its case-by-case exemptive-relief approach as the operative mechanism for bringing platforms into a supervised posture.

Other Developments

No material movement elsewhere in the spine. Sanctions exposure, beneficial-ownership and corporate-transparency questions, enabler-jurisdiction dynamics, conflict-finance signal, compliance-technology developments and the federal anti-money-laundering and counter-terrorist-financing regime each showed no Ontario-specific change this period. Ontario carries no provincial anti-money-laundering statute of its own, so the federal regime continues to apply directly to firms operating in the province regardless of the crypto-specific activity described above.

Cross-Monitor Connections

The exemptive-relief pattern at the OSC sits adjacent to matters that a digital-assets or market-structure monitor would track as infrastructure risk: the terms attached to an undertaking shape how a platform's custody, client-asset segregation and operational resilience are supervised going forward, which is a question that also touches broader financial-market-infrastructure oversight. Nothing in this period's record extends into conflict-finance or state-capture territory, so no further routing is indicated this cycle.

Outlook

Absent a reading of the full decision documents, the durable question is whether Ontario's reliance on bespoke undertakings continues indefinitely or gives way to a generalized crypto-platform registration framework; as scheduled, no such shift has yet been confirmed. Further registrant-table entries would be consistent with continuation of the current case-by-case model.

Earlier periodic briefs (8)
4 Nov 2026 · fim-2026-11-04

Lead Signal

Ontario's securities regulator has continued to process crypto-asset trading platforms through its established pattern of individually negotiated, time-limited relief rather than a settled licensing code. The Ontario Securities Commission's public registrant records show a new undertaking and exemptive relief dated October 22, 2026 for CADC Reserve Trust concerning CADC tokens, alongside a separate decision dated October 26, 2026 for an immediate-delivery value-referenced-crypto-asset trading platform. The underlying decision documents behind both entries were not independently opened this period, so the entries are read from the OSC's own registrant table rather than from the full text of the decisions themselves.

Taken together, the two entries are consistent with the probable reading that Ontario remains the most procedurally active Canadian province on crypto-platform registration, maintaining its case-by-case exemptive-relief approach as the operative mechanism for bringing platforms into a supervised posture.

Other Developments

No material movement elsewhere in the spine. Sanctions exposure, beneficial-ownership and corporate-transparency questions, enabler-jurisdiction dynamics, conflict-finance signal, compliance-technology developments and the federal anti-money-laundering and counter-terrorist-financing regime each showed no Ontario-specific change this period. Ontario carries no provincial anti-money-laundering statute of its own, so the federal regime continues to apply directly to firms operating in the province regardless of the crypto-specific activity described above.

Cross-Monitor Connections

The exemptive-relief pattern at the OSC sits adjacent to matters that a digital-assets or market-structure monitor would track as infrastructure risk: the terms attached to an undertaking shape how a platform's custody, client-asset segregation and operational resilience are supervised going forward, which is a question that also touches broader financial-market-infrastructure oversight. Nothing in this period's record extends into conflict-finance or state-capture territory, so no further routing is indicated.

Outlook

Absent a reading of the full decision documents, the durable question is whether Ontario's reliance on bespoke undertakings continues indefinitely or gives way to a generalized crypto-platform registration framework; as scheduled, no such shift has yet been confirmed. Further registrant-table entries would be consistent with continuation of the current case-by-case model.

3 Nov 2026 · fim-2026-11-03

Lead Signal

Ontario's securities regulator continued to build out its oversight of crypto-asset trading platforms through individually negotiated relief rather than a settled licensing code. In late October 2026 the Ontario Securities Commission recorded an undertaking and exemptive relief granted to CADC Reserve Trust, dated October 22, 2026, and a separate decision concerning an immediate-delivery virtual-currency trading platform, dated October 26, 2026. Both entries currently exist as registrant-table line items; the substantive terms of each have not been independently retrieved beyond that listing. The pattern this discloses is structural rather than episodic: Ontario continues to supervise this sector case by case, through bespoke undertakings and exemptive orders, rather than through a generally applicable rulebook for virtual-currency trading platforms.

This matters architecturally because case-by-case relief produces a patchwork of binding terms that differ from one registrant to the next, each legible only to those who read the individual order. The approach is probable rather than confirmed as the operative registrant-level mechanism, since the underlying decision documents were not opened this pass; the dated registrant-table entries themselves are the evidence available.

Other Developments

No sanctions, beneficial-ownership, or enabler-jurisdiction movement surfaced. The research pass that supports this brief was scoped to Ontario, and within that scope only the crypto-asset oversight thread showed dated, substantive movement. Absence of new material elsewhere in the eight-part typology spine is not itself reported here as a finding; it reflects the bounds of what the research covered.

Federal AML and CTF rules continue to govern directly. Ontario does not operate a distinct provincial anti-money-laundering or counter-terrorist-financing statute; obligations in this area apply through the federal proceeds-of-crime and terrorist-financing framework administered by Canada's financial intelligence unit, applying uniformly regardless of province. This is standing structural context for reading the provincial crypto-platform activity above, not a new development.

Cross-Monitor Connections

The OSC's exemptive-relief approach to crypto trading platforms sits at a point where financial-integrity oversight intersects with digital-asset market structure questions tracked elsewhere in the broader monitoring architecture: each undertaking functions simultaneously as an integrity control and as a de facto licensing instrument for the platform concerned. Where a platform's exemptive relief governs custody arrangements, proof-of-reserve claims, or redemption mechanics, the same order carries implications for market-conduct and consumer-protection monitoring that sit outside this monitor's own typology spine, even though those implications are not detailed in the registrant-table entries reviewed this pass. No conflict-finance, sanctions-evasion, or extractive-industry connection was identified.

Outlook

The near-term picture is one of continued incremental registrant activity rather than a wholesale regulatory reset. If the substantive terms of the CADC Reserve Trust undertaking and the immediate-delivery platform decision become available, they would most likely refine rather than overturn the structural reading set out above, given the Commission's established pattern of negotiated, platform-specific relief. Whether Ontario moves toward a more codified crypto-platform regime, or continues indefinitely with bespoke undertakings, remains open; nothing in the current record points decisively to either path, and the position should be read as probable continuation of the existing case-by-case posture rather than as a settled trajectory.

18 Oct 2026 · fim-2026-10-18

Lead Signal

Ontario's financial-integrity picture this cycle is defined by the concrete enforcement outcome of its dual-layer AML supervisory architecture: AGCO fined NorthStar Gaming C$100,000 in August 2026 for failing to apply its own enhanced due diligence obligations under the Registrar's Standards for Internet Gaming, sections 6.02 and 6.03, which themselves require AML policies and procedures aligned with obligations under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. That alignment requirement sits beside a separate federal development: Bill C-12, which received Royal Assent on March 26, 2026 and inserted PCMLTFA section 11.4001 et seq, establishes a universal FINTRAC enrolment regime requiring every person or entity covered by section 5 of the Act to enrol, with limited exceptions, but as of this cycle the enrolment provisions remain adopted and not yet in force, pending regulations to be published in the Canada Gazette, Part II.

Other Developments

Sanctions-regime divergence on a Venezuela designation. The US Department of the Treasury's Office of Foreign Assets Control removed Jorge Jesus Rodriguez Gomez from the Specially Designated Nationals list on October 14, 2026, with no reason stated in the published action. A secondary source reports that Canada's listing of the same individual under the Special Economic Measures (Venezuela) Regulations remains in place, though this comparative claim rests on a single lower-tier aggregator and has not been independently verified against the Canada Gazette's consolidated SEMA Venezuela list this cycle.

Ontario Securities Commission amends a registered platform's exemptive relief. The OSC's registered crypto-trading-platform list shows an amended exemptive-relief decision for Coinsquare Capital Markets Ltd., operating as Bitbuy, dated October 9, 2026, issued within the Canadian Securities Administrators' enhanced pre-registration-undertaking and registration framework that requires third-party custody, client-asset segregation, and a prohibition on re-hypothecation. The specific content of the amendment was not independently retrieved this cycle.

FATF grey list standing at 22 jurisdictions. As of the FATF statement published June 19, 2026, the grey list of jurisdictions under increased monitoring contained 22 entries; no confirmed outcome from the next scheduled plenary had been located as of this cycle's dispatch date.

Cross-Monitor Connections

The NorthStar Gaming enforcement action connects directly to the gambling-regulatory monitor's own enforcement tracking of AGCO registrant penalties, since the same Registrar's Standards sections 6.02 and 6.03 obligation underlies both readings of the fact. The Coinsquare/Bitbuy exemptive-relief amendment likewise connects to crypto-asset-regulation monitoring of Ontario Securities Commission registration and custody obligations for crypto asset trading platforms, since the custody and segregation conditions referenced in the amendment framework are the same conditions tracked under that monitor's consumer-protection and licensing modules.

Outlook

The FINTRAC universal enrolment regime under PCMLTFA section 11.4001 is expected to move from adopted-but-not-commenced toward an in-force state once implementing regulations are gazetted, with an estimated impact date in the first quarter of 2027, though this remains unconfirmed pending publication. Whether the FATF grey list's October 2026 plenary produced a change to the 22-jurisdiction count had not been confirmed as at this cycle's dispatch date and should be watched for in subsequent reporting. The unresolved question of whether Canada's own SEMA Venezuela listing of Rodriguez Gomez has in fact been affected by the OFAC delisting also remains open pending independent verification against the Canada Gazette's consolidated list.

11 Oct 2026 · fim-2026-10-11

Lead Signal

Canada's first full FATF/APG mutual evaluation since 2016 placed the country on normal follow-up rather than the FATF grey list, crediting Canada with progress on beneficial-ownership transparency and a mature AML/CFT architecture while flagging weak mutual-legal-assistance execution and under-prosecution of complex money laundering relative to the country's assessed risk. The evaluation also recorded an upgrade of Canada's rating on FATF Recommendation 8, covering non-profit organisations, from Partially Compliant to Largely Compliant. This outcome lands alongside a separate and materially consequential domestic development: amendments to the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, given Royal Assent on 26 March 2026 through Bill C-12, raised FINTRAC's maximum administrative monetary penalties by up to forty times the prior limits and introduced mandatory compliance agreements and compliance orders for prescribed violations. Reporting entities, which include casinos and iGaming operators alongside the wider FINTRAC-regulated population, must now maintain a compliance program that is reasonably designed, risk-based and effective, with minor violations now subject to penalties up to C$40,000, serious violations up to C$4,000,000, and very serious violations up to C$20,000,000.

Other Developments

Canada's crypto-asset integrity architecture advanced on two fronts. The federal Stablecoin Act, enacted via Bill C-15 with Royal Assent on 26 March 2026, designates the Bank of Canada as supervisor of fiat-backed stablecoin issuers, though the regime is not yet operative pending implementing regulations. Separately, the Canadian Investment Regulatory Organization's Digital Asset Custody Framework, set out in Guidance Note 26-0033 and effective 3 February 2026, imposes tiered custody and segregation requirements on dealer members operating crypto-asset trading platforms, a response to the custody gap exposed by prior industry failures such as the QuadrigaCX collapse. Canada's payments infrastructure saw a significant ownership change. Francisco Partners agreed to acquire Moneris Solutions, the BMO/RBC joint venture that stands as Canada's largest merchant acquirer, for approximately C$2 billion (US$1.44 billion), announced 2 September 2026.

Cross-Monitor Connections

The Stablecoin Act and CIRO custody framework are tracked in parallel by world-payments as part of its stablecoin and digital-money and commercial-intelligence modules, and the structural question of whether Canada's emerging stablecoin supervisory architecture adequately addresses money-laundering and terrorist-financing risk, rather than only prudential and consumer-protection risk, is a live cross-monitor question this cycle. The Moneris sale to Francisco Partners is likewise tracked by world-payments under its commercial-intelligence module as a major acquiring-sector transaction; from a financial-integrity perspective, a change of ownership at Canada's largest merchant acquirer is architecturally significant regardless of enforcement history, since acquiring infrastructure sits at a structurally important node for payment-system integrity. No sanctions, conflict-finance, or enabler-jurisdiction finding specific to Canada arose this cycle.

Outlook

The FATF/APG mutual evaluation's criticism of under-prosecution relative to Canada's assessed money-laundering risk, despite a credited mature architecture, is the structural signal most worth monitoring: an architecture that scores well on paper but has a weak enforcement-conversion record is a different risk profile than either a weak architecture or a strong enforcement record alone. On the AML/CFT front, FINTRAC's forthcoming Universal Enrolment regime, expected around the first quarter of 2027, would require all PCMLTFA reporting entities to enrol with FINTRAC in prescribed form, closing a current gap in which most reporting-entity types face no formal registration requirement at all. On the crypto and digital-asset front, the Stablecoin Act's implementing regulations, also expected around the first quarter of 2027, are the development that would move Canada's stablecoin regime from enacted-but-dormant to fully operative, including the Bank of Canada's planned public registry for non-prudentially-regulated issuers.

4 Oct 2026 · fim-2026-10-04

Lead Signal

Canada avoided placement on the FATF grey list following the June 2026 FATF-APG joint mutual evaluation, with the report published on 29 September 2026 placing the country into normal follow-up, an improvement from the enhanced follow-up status assigned after the 2016 evaluation. This is a federal-level finding that sets the AML/CTF baseline for every FINTRAC-regulated reporting entity in Ontario, including Ontario-based financial institutions, money services businesses, and the provincially-regulated crypto-asset trading platforms the Ontario Securities Commission supervises. The improved follow-up status should be read alongside a continuing weakness FATF flagged in the same evaluation: Canada's administrative monetary penalty regime and its conviction and asset-recovery outcomes track record remain comparatively weak despite a technically strong rulebook. The federal government also amended the Special Economic Measures (Russia) Regulations on 4 September 2026 to add eight individuals linked to the unlawful deportation, forcible transfer, indoctrination and militarization of Ukrainian children to Schedule 1, a routine but continuing expansion of the sanctions-designation architecture that binds all Ontario reporting entities equally.

No Ontario-specific delta was identified in beneficial ownership, conflict finance, or compliance technology this cycle, which is recorded as a coverage gap rather than a confirmed stable finding. The material Ontario-specific signal this cycle sits instead in enforcement posture and in the architecture of financial innovation: the Ontario Securities Commission continues to run what available evidence characterises as the most enforcement-active provincial posture in Canada toward unregistered crypto-asset trading platforms, evidenced by a permanent ban and a CAD 2,000,000 administrative monetary penalty against KuCoin, while the newly enacted federal Stablecoin Act creates an unresolved classification overlap with Ontario's existing securities-law treatment of value-referenced crypto assets.

Other Developments

Russia sanctions designation expansion. Global Affairs Canada further amended the Special Economic Measures (Russia) Regulations, adding eight individuals to Schedule 1 and repealing subsections 8(3) and 8(4), alongside removal of one item from Schedule 7. This is incremental designation-list maintenance rather than a structural change to the sanctions regime, and applies uniformly across Canada with no Ontario-specific variance.

Stablecoin Act Royal Assent and the classification overlap. The Stablecoin Act, enacted via the Budget 2025 Implementation Act (Bill C-15), received Royal Assent on 26 March 2026, establishing a Bank of Canada-administered prudential regime for fiat-backed stablecoins. This creates a classification question for Ontario reporting entities: the Ontario Securities Commission and the Canadian Securities Administrators have historically treated value-referenced crypto assets as presumptively subject to securities law, and the two regimes will now need to be reconciled as implementing regulations are published.

Ontario securities enforcement intensity. Within the pan-Canadian, CSA-harmonized securities framework, the Ontario Securities Commission has pursued binding pre-registration undertakings and Capital Markets Tribunal sanctions against non-compliant crypto platforms more actively than other provinces appear to have done, despite all provinces sharing the same underlying legal basis. This characterisation of comparative intensity is a seed-sourced assessment not independently re-verified this cycle and should be read as probable rather than confirmed.

FINTRAC universal enrolment regulations pending. Universal enrolment regulations, expected around Q2 2026 pending Canada Gazette Part II publication, would extend FINTRAC registration obligations to a broader class of businesses covered by the Proceeds of Crime (Money Laundering) and Terrorist Financing Act beyond money services businesses and casinos. As of this cycle the implementing regulations had not yet been published, so the expanded registration population and effective date remain unconfirmed.

Cross-Monitor Connections

The Stablecoin Act's classification overlap with Ontario securities law is a shared fact between this monitor's D5 finding and the crypto monitor's token-classification and stablecoin-regime tracking for CA-ON: both monitors are watching the same unresolved boundary between a payment-instrument test administered by the Bank of Canada and a presumptive-securities test administered by the Ontario Securities Commission and the Canadian Securities Administrators. The Ontario enforcement-posture finding under D3 also connects to the crypto monitor's crypto-licensing module, where the same KuCoin enforcement action is the evidentiary anchor for Ontario's registration-pathway stringency. Payments-side infrastructure changes tracked elsewhere, including the federal Real-Time Rail and the Retail Payment Activities Act's own enforcement debut, sit adjacent to this monitor's AML/CTF baseline but were not analysed here as they fall outside this monitor's sourced claims this cycle.

Outlook

The FATF follow-up review cycle will test whether Canada's administrative monetary penalty regime and enforcement-outcomes track record improve enough to close the gap FATF identified between a technically strong rulebook and weak practical enforcement; this is a multi-year process rather than a near-term resolution. For Ontario specifically, the more immediate development to watch is whether the Bank of Canada publishes implementing regulations for the Stablecoin Act that clarify how federally-registered stablecoin issuers will interact with the Ontario Securities Commission's existing value-referenced crypto asset framework, since the two regimes currently coexist without confirmed delineation. Continued designation-list amendments to the Special Economic Measures (Russia) Regulations are expected to continue incrementally and are not independently a signal of structural change.

28 Sep 2026 · fim-2026-09-28

Lead Signal

Ontario's crypto-adjacent financial-integrity picture this period is shaped principally by two structural developments layered on top of one another: a federal enforcement wave against Money Services Businesses and a newly enacted statutory penalty regime that raises the ceiling on what FINTRAC can do to non-compliant reporting entities. FINTRAC revoked 50 MSB registrations in 2026, 47 of them crypto-linked, including 23 in a single day in March, described as the largest single-day action of its kind. This federal-layer enforcement wave is inherited by Ontario without provincial variance, sitting alongside the Ontario Securities Commission's own securities-law registration and exemptive-relief overlay for crypto asset trading platforms, which remains the load-bearing Ontario-specific compliance requirement layered atop federal MSB registration.

At the same time, Bill C-12, the Strengthening Canada's Immigration System and Borders Act, received Royal Assent on March 26, 2026, giving FINTRAC a new administrative monetary penalty regime, a mandatory compliance agreement and compliance order regime, and a new violation category for firms lacking a reasonably designed, risk-based and effective compliance program. This is a federal statutory change inherited by Ontario reporting entities without a distinct provincial variant, and it materially raises the stakes of non-compliance for any Ontario-based obliged entity going forward.

Other Developments

Canada's first FATF/APG mutual evaluation since 2016 was adopted at the June 2026 Plenary. The Financial Action Task Force, jointly with the Asia-Pacific Group on Money Laundering, adopted Canada's mutual evaluation report at its June 2026 Plenary, with publication expected in the fourth quarter of 2026 pending Global Network quality review. Press reporting suggests provisional ratings are likely sufficient to avoid grey-listing, though FATF and Finance Canada have declined to confirm this pending final publication; readers should treat the avoid-grey-listing outcome as probable rather than confirmed until the report itself is published.

The OSC's crypto asset trading platform registration regime continues to layer provincial securities oversight atop federal registration. Ontario-facing crypto platforms must register with, or hold exemptive relief from, the OSC in addition to federal FINTRAC MSB registration; a prior OSC compliance sweep (Staff Notice 33-757, December 10, 2024) found gaps in account-appropriateness and client-limit practices among registered restricted-dealer platforms, establishing standing context for the compliance environment these platforms operate within.

Cross-Monitor Connections

The FINTRAC MSB revocation wave and the OSC's crypto-platform registration overlay both connect directly to the crypto monitor's tracking of Ontario's stablecoin and licensing posture, particularly as the federal Stablecoin Act (enacted, not yet in force) brings a further Bank of Canada supervisory layer into a space already governed by FINTRAC and OSC requirements. The Bill C-12 compliance-order and AMP regime also connects to world-payments' tracking of payment-services-provider obligations under the Retail Payment Activities Act, since PCMLTFA reporting-entity obligations and RPAA safeguarding obligations both apply to overlapping categories of payment and crypto firms operating in Ontario.

Outlook

The determinative date to watch is Q4 2026, when the FATF/APG mutual evaluation report on Canada is expected to be published, converting provisional plenary ratings into a citable technical-compliance and effectiveness record with a time-bound Key Recommended Actions roadmap that will likely shape FINTRAC's supervisory priorities for the next several years. Confirmation of the FINTRAC MSB revocation figures against a FINTRAC primary release, rather than secondary press corroboration, would upgrade that finding's confidence from Probable to Confirmed.

11 Aug 2026 · fim-2026-08-05

Lead Signal

On April 23, 2026, the US Treasury Office of Foreign Assets Control designated Kok An, a sitting Cambodian senator, along with 28 associated individuals and entities, for operating a network of casinos and scam compounds used to launder proceeds from fraud schemes targeting Americans. The designation is corroborated by TRM Labs blockchain-forensics analysis and represents a direct state-capture finding: a national legislator identified as controlling illicit-finance infrastructure that sits inside a casino, legal, and accountancy sector already flagged by a 2023 FATF follow-up mutual evaluation for persistent fit-and-proper supervisory weaknesses. The designation removes a visible node from that ecosystem without addressing the underlying supervisory gap the FATF review identified.

The same architectural logic runs through the 21st EU Russia sanctions package, adopted around July 23, 2026, which added 218 designations including 94 Russian financial institutions and the Moscow Exchange, and for the first time targeted vessels that refuel shadow-fleet tankers rather than the tankers alone. A fifth shadow-fleet tanker seizure by France in 2026 corroborates continued enforcement pressure at the logistics layer. Taken together, this cycle two lead sanctions actions mark a shift from listing visible endpoints toward listing the infrastructure and financial-institution layers that sustain evasion and laundering networks.

Other Developments

CJNG fuel-smuggling network sanctioned. A FinCEN supplemental alert paired with new OFAC designations targeted the fuel-smuggling and tax-evasion network of the Cartel de Jalisco Nueva Generacion; FinCEN has received over 160 Suspicious Activity Reports detailing more than seven billion dollars in suspicious activity since a prior alert issued in May 2025. Dual Tier-1 Treasury and FinCEN sourcing corroborates the action, which overlaps with earlier special-measures actions against named Mexican financial institutions.

Sudan gold trade and eastern DRC minerals both sanctioned. The EU banned the purchase, import, and transfer of Sudanese-origin gold and the export of gold-processing chemicals on July 13, 2026, with the UK sanctioning illicit gold and finance networks days later on July 16, 2026. Separately, the OFAC designation of March 2, 2026 targeting the Gasabo Gold Refinery and the Rwanda Defence Force addressed RDF support for the exploitation by M23 of mineral-rich eastern DRC territory. Both actions aim directly at the pipeline connecting conflict minerals to war-economy financing.

Beneficial-ownership reporting expands in Canada. Mandatory CBCA discrepancy-reporting took effect October 1, 2025, and PCMLTFA amendments are expanding reporting-entity coverage and administrative-monetary-penalty ceilings on a staggered basis through 2026. This development rests on Tier-4 corroboration only this cycle, with no direct FINTRAC primary text retrieved.

AMLA supervisory build-out advances. The EU Anti-Money Laundering Authority finalized supervisory-cooperation standards and set an August 15, 2026 deadline for national supervisors to submit calibration data, ahead of a 2027 selection of up to 40 entities for 2028 direct supervision.

US stablecoin issuers face prospective BSA classification. A joint FinCEN/OFAC proposed rule under the GENIUS Act would classify Permitted Payment Stablecoin Issuers as financial institutions under the Bank Secrecy Act; the comment period closed June 9, 2026. Corroboration this cycle is Tier-4 only despite the underlying primary rulemaking.

Cross-Monitor Connections

The Cambodian casino-network designation and the CJNG fuel-smuggling action both surface a state-capture or paramilitary-enmeshment pattern relevant to WDM-style analysis: in each case, formal political or armed structures are alleged to be directly embedded in illicit-finance infrastructure rather than merely tolerating it nearby. The Sudan gold-trade sanctions and the Gasabo Gold Refinery and RDF designation are conflict-finance findings with a direct SCEM and ERM read, targeting the conversion of extracted minerals into war-economy financing while leaving downstream refining and laundering hubs outside EU, UK, and US jurisdiction comparatively untouched. The convergence toward classifying stablecoin issuers as regulated financial institutions across the US GENIUS Act, the Canadian Stablecoin Act, and EU crypto-sanctions-evasion provisions is this cycle clearest financial-innovation throughline, and warrants continued tracking as pre-enforcement frameworks move toward implementation.

Outlook

The coming cycles will test whether this cycle architectural sanctions escalations, including shadow-fleet bunkering-vessel designations, financial-institution listings, and sectoral gold-trade bans, translate into measurable disruption of the underlying networks, or whether persistent enablement gaps, such as weak casino AML supervision in Cambodia and external gold-refining hubs outside EU and UK jurisdiction, absorb the pressure. The August 15, 2026 AMLA data-collection deadline and the subsequent 2027 entity-selection process are the clearest near-term EU AML Package milestones to watch. On the crypto and stablecoin front, the US, Canadian, and EU frameworks remain pre-enforcement; the compliance obligations they will eventually impose on stablecoin issuers have not yet crystallized into force, and sourcing for several of this cycle most consequential developments remains thinner than the underlying primary actions would warrant.

13 Jul 2026 · fim-2026-07-11

Lead Signal

The first full-baseline financial-integrity assessment for Ontario centres on a single architecture-over-incident case: a record-setting administrative penalty issued by FINTRAC, approximately CAD 177 million, against the Russia-linked crypto payment processor Cryptomus, assessed against Xeltox Enterprises Ltd. This is the largest penalty FINTRAC has ever issued and, considered in isolation, would read as a decisive enforcement outcome. It is not. Following the penalty, the ecosystem of the operator relaunched under a parallel brand, Heleket, preserving customer relationships, including flows linked to the sanctioned exchange Garantex, entirely outside a regulated environment. The penalty functioned as a data point; the sanctions-evasion and AML-displacement infrastructure that enabled the underlying activity persisted through rebrand, a resilience pattern documented across Russia-linked virtual-asset service providers facing enforcement more broadly.

This displacement pattern sits alongside a second, structurally distinct finding: Ontario has not committed provincial corporate registry data to the federal beneficial-ownership registry established under the Canada Business Corporations Act. Because most Canadian companies are incorporated provincially rather than federally, this non-participation substantially limits the practical reach of federal transparency reform and sustains billions of CAD in Toronto-region real-estate acquisitions through anonymous private entities exploiting weak provincial disclosure. Read together, these two findings describe a jurisdiction where enforcement capacity in one domain has meaningfully outpaced the architecture of transparency in another; enforcement intensity and structural closure are not the same signal, and the gap between them is the primary analytical object of this baseline.

Other Developments

A registration-revocation wave led by FINTRAC extended beyond the Cryptomus case. Following an investigation by ICIJ and the Toronto Star into unregistered storefront crypto-cash exchange operations, FINTRAC revoked dozens of Toronto-area money-services-business registrations, with one shop reported to have moved over CAD 120 million through a single wallet in a year. This is regulatory follow-through on a previously undocumented unregistered-MSB architecture rather than an isolated compliance failure.

Decade-long AML control failures at a Toronto-headquartered systemically important bank compound the transparency picture. A consent order issued by FinCEN documents control failures from 2014 through 2023 at TD Bank, including transaction-monitoring coverage gaps that in 2023 alone left several trillion dollars of transactions unscreened. Separately, TD Bank and RBC are reported to have retained mortgage financing for an individual publicly alleged to be an organised-crime figure, illustrating onboarding and retention control weakness at major Toronto-headquartered institutions even where the underlying enforcement outcome is now contained.

The legal profession in Canada, and nationally Quebec notaries, remain outside AML/CFT preventive obligations following a ruling by the Supreme Court that FATF has flagged as a significant loophole given the gatekeeper role of lawyers in corporate structuring and real estate. This is a standing structural gap rather than a single-cycle development, and it interacts directly with the beneficial-ownership and real-estate exposure described above.

A trade-based laundering corridor tied to fentanyl-precursor payments between China and Ontario is intensifying. Ontario is one of the two provinces most frequently identified in cross-border financial-intelligence reporting by FinCEN on payments for PRC-sourced precursor chemicals, increasingly routed through cryptocurrency and layered financial channels.

Sanctions-schedule divergence continues to complicate cross-border screening. The SEMA regime of Canada added roughly 100 vessel and drone-maker designations targeting the shadow fleet of Russia, announced at a G7 foreign ministers meeting held in Ontario, while the 20th sanctions package of the EU Council added 120 listings and OFAC combined new Russia-related designations with SDN removals under Executive Order 14024. None of these three regimes moves on a common schedule, creating a persistent reconciliation burden for Ontario-headquartered institutions with US and EU correspondent exposure.

The intelligence-disclosure function of FINTRAC remains structurally constrained. The Cullen Commission found that FINTRAC disclosed only 2,057 of 31 million reports received nationally in 2019-20 to law enforcement, with just 355 reaching British Columbia authorities. Against this backdrop, Project Atlas and Operation Atlantic, led by the Ontario Securities Commission and Ontario Provincial Police jointly with Chainalysis, TRM Labs, the US Secret Service and the UK National Crime Agency, identified over USD 45 million in fraud schemes and froze over USD 12 million across more than 20,000 identified victims, illustrating a technology-enabled active-defence posture operating in parallel to the disclosure bottleneck.

A statement of allegations brought by the Ontario Securities Commission against Som Seif and Purpose Investments marks a contested enforcement proceeding against a prominent capital-markets participant, with the outcome still pending.

Canada remains off both FATF monitoring lists, continuing in enhanced follow-up from its 2016 Mutual Evaluation, compliant on 11 Recommendations, largely compliant on 23, partially compliant on 5, and non-compliant on 1, pending a still-unconfirmed 5th-round onsite assessment date.

Cross-Monitor Connections

Shadow-fleet designations by Canada under SEMA, targeting approximately 100 vessels alongside Russian drone makers, are relevant to ERM commodity-flow evasion tracking and warrant cross-referencing against EU and OFSI shadow-fleet lists for scope overlap and gaps. The same independently-scheduled SEMA regime, running parallel to but not synchronised with EU, OFAC and OFSI timing, is a macro-relevant divergence signal for GMM sanctions-as-macro-variable tracking. The displacement pattern documented in the Cryptomus and Heleket case, moving funds tied to both Russia-linked and Iran-linked networks, sits at the intersection of sanctions architecture and digital-asset infrastructure that FIM tracks structurally rather than episodically, and the same pattern is a candidate reference point for any adjacent monitor tracking VASP enforcement resilience.

Outlook

The trajectory for Ontario this cycle is mixed rather than uniformly improving or deteriorating: enforcement capacity in crypto and MSB supervision is intensifying, while beneficial-ownership transparency, legal-profession preventive coverage, and FIU intelligence-disclosure throughput remain unresolved structural gaps. The near-term watch items are whether the displacement pattern seen in the Cryptomus and Heleket case recurs with a further successor entity, whether Ontario commits provincial registry data to the federal beneficial-ownership framework, and how the 5th-round FATF Mutual Evaluation of Canada, once scheduled, assesses these same weaknesses under the 2022 Methodology against a jurisdiction that remains off both FATF monitoring lists.

Domain intelligence (D1–D8)

D1 Sanctions

no_changeno_changestanding position

Sanctions Architecture and Evasion

Ontario itself maintains no autonomous sanctions list; sanctions exposure for Ontario-based obliged entities, including iGaming operators and crypto asset trading platforms, flows through Canada's federal Special Economic Measures regime and through the comparative-exposure dynamics generated by divergence between allied sanctions regimes. This cycle's clearest example of that divergence concerns a Venezuela-related designation: the US Department of the Treasury's Office of Foreign Assets Control removed Jorge Jesus Rodriguez Gomez from the Specially Designated Nationals list on October 14, 2026, with no reason stated in the published action. A secondary, lower-tier source reports that Canada continues to list the same individual under the Special Economic Measures (Venezuela) Regulations, though this comparative claim has not been independently verified against the Canada Gazette's consolidated SEMA Venezuela list this cycle, and should be read with that caveat.

Continue reading

For Ontario-regulated obliged entities, including the iGaming operators and registered crypto asset trading platforms whose AML obligations are described elsewhere in this cycle's record, a sanctions-list divergence of this kind is a direct screening-architecture concern: a counterparty cleared under one allied jurisdiction's list may remain designated under another's, and an obliged entity relying on a single reference list risks a false negative for the jurisdiction whose list it did not consult. The structural point is architecture-over-incident: what matters for an Ontario-based compliance function is not the single Rodriguez Gomez delisting itself, but the standing fact that US and Canadian autonomous-sanctions lists can diverge in either direction and at any time, without a stated reason in either direction.

No other CA-ON-specific sanctions-architecture development was located this cycle. The FATF grey list, which is a distinct instrument from autonomous sanctions designations, stood at 22 jurisdictions as of the FATF statement published June 19, 2026; this is increased-monitoring status, not a sanctions designation, and no jurisdiction on that list was reported this cycle as directly connected to CA-ON-based entities.

Outlook

Whether Canada's SEMA Venezuela listing of Rodriguez Gomez has in fact remained unchanged following the OFAC delisting is not yet independently confirmed and should be verified against the Canada Gazette's consolidated list in subsequent reporting. More broadly, Ontario-based obliged entities should expect continued divergence events of this kind between US and Canadian autonomous-sanctions regimes as a standing feature of the architecture, rather than as an occasional anomaly, given that neither regime is obliged to align its delisting timing or reasoning with the other.

Judgment: No CA-ON-specific sanctions development identified this cycle. Uncertain
Cumulative analysis

Sanctions Architecture and Evasion — Cumulative Analysis

The standing sanctions-architecture picture for this jurisdiction file has, across recent cycles, combined two recurring structural themes: a persistent scheduling divergence among allied sanctions regimes, and a demonstrated pattern of evasion-infrastructure displacement surviving individual enforcement actions. The prior cycle's baseline centred on the FINTRAC penalty against the Russia-linked crypto processor Cryptomus — at roughly CAD 177 million the largest administrative penalty FINTRAC has issued — and the subsequent relaunch of the same operator ecosystem under the Heleket brand, preserving customer relationships including flows linked to the sanctioned exchange Garantex entirely outside a regulated environment. That case established the core analytical lesson for this file: enforcement intensity and architectural closure are not equivalent, and the residual risk sits in the gap between a penalty and the survival of the underlying evasion channel. The same cycle documented an independently-scheduled Canadian SEMA sanctions regime, layered against EU and OFAC Russia measures without a common calendar, creating a persistent reconciliation burden for institutions with cross-border correspondent exposure.

This cycle extends both themes onto a wider canvas. The EU's 21st Russia sanctions package (218 designations, 94 financial institutions, Moscow Exchange, and for the first time shadow-fleet bunkering-vessel designations) represents the same architectural principle observed in the Cryptomus case — targeting connective infrastructure rather than only end-nodes — now applied at EU-regime scale, corroborated by continued French tanker seizures. OFAC's designation of Cambodian Senator Kok An's casino and scam-compound network, the CJNG fuel-smuggling and tax-evasion action in Mexico, and the Rwanda Defence Force and Gasabo Gold Refinery designation tied to M23 mineral exploitation each reinforce the pattern of enforcement reaching for enabling infrastructure — political, financial, and logistical — rather than isolated transactions. The Sudan gold-trade sectoral sanctions from the EU and UK apply the same logic at commodity-sector scale.

The integrated state of this domain through the current cycle is one of sustained, broadening escalation: sanctions instruments are increasingly targeting structural nodes — bunkering vessels, refining and logistics chains, state-adjacent political protection, sectoral commodity flows — rather than relying solely on individual or entity-level designations. The unresolved question carried forward from the prior cycle, whether displaced evasion infrastructure (of the Cryptomus/Heleket type) recurs following enforcement, remains open and should be read alongside this cycle's new designations as a standing risk rather than a closed file. Cross-jurisdictional sanctions-schedule divergence, documented previously between Canada, the EU, and OFAC, also remains a durable operational burden that this cycle's EU and UK Sudan measures — issued three days apart with diverging designee lists — further illustrate rather than resolve.

domain_sub_briefs · D1 · Cumulative analysis
Periodic updates (3)
4 Oct 2026 · fim-2026-10-04

Sanctions Architecture and Evasion

Canada amended the Special Economic Measures (Russia) Regulations on 4 September 2026, adding eight individuals to Schedule 1 of the regulations. The amendment also repealed subsections 8(3) and 8(4) and removed one item from Schedule 7. Global Affairs Canada's own designation page identifies the targeted individuals as linked to the unlawful deportation, forcible transfer, indoctrination and militarization of Ukrainian children. This is an incremental expansion of an existing designation list rather than a new sanctions architecture or a change to the legal basis of the regime, and it applies to all Canadian reporting entities uniformly, with no Ontario-specific variance identified. The sanctions-architecture reading of Canada's broader regulatory posture this cycle is one of continuity: the Special Economic Measures (Russia) Regulations framework remains the operative instrument, and this amendment maintains the designation list's currency rather than altering its structure. Ontario-based banks, money services businesses, and provincially-regulated financial institutions are bound by this federal designation list identically to entities in every other province, since sanctions screening obligations under Canadian law operate at the federal level regardless of provincial regulatory overlay.

For institutions assessing their sanctions-screening posture, the practical implication is routine: screening lists must be updated to reflect the eight new Schedule 1 names, and any nexus to the repealed Schedule 7 item or the repealed subsections should be reviewed for continuing relevance to existing control frameworks. No structural finding - such as a new sanctions regime, a new legal instrument, or a change in designation methodology - was identified this cycle. The absence of any Ontario-specific sanctions finding beyond this federal baseline is itself consistent with the structural reality that Canada's sanctions regime, unlike its securities law, does not have a provincial layer; Ontario entities experience sanctions obligations purely as a function of federal law.

Outlook

Further incremental amendments to the Special Economic Measures (Russia) Regulations and other country-specific sanctions regulations are expected to continue on an ongoing basis, consistent with Canada's practice of periodic designation-list maintenance in coordination with allied jurisdictions. No structural change to the sanctions architecture itself is indicated by this cycle's evidence, and no Ontario-specific sanctions development is anticipated given the federal exclusivity of this domain. Reporting entities should treat designation-list amendments as routine screening-list maintenance rather than as signals requiring a reassessment of underlying compliance architecture.

11 Aug 2026 · fim-2026-08-05

Sanctions

This cycle sanctions signal is dominated by five distinct designation actions across four sanctioning authorities, and read through an architecture lens rather than an incident lens, the pattern is consistent: enforcement is increasingly reaching into logistics, financial-institution, and political-protection layers rather than stopping at the visible endpoint of a scheme. The OFAC designation of Cambodian senator Kok An and 28 associated individuals and entities on April 23, 2026 is the starkest example: the designation reaches a sitting legislator alleged to control casino and scam-compound infrastructure, corroborated by TRM Labs blockchain-forensics analysis, and lands atop a sector already found structurally weak on fit-and-proper testing by a 2023 FATF follow-up mutual evaluation. That combination, political protection plus supervisory weakness, is the textbook architecture-over-incident case the FIM register is built to surface.

The CJNG fuel-smuggling and tax-evasion action follows a related but distinct logic: a FinCEN supplemental alert paired with new OFAC designations, corroborated by dual Tier-1 Treasury and FinCEN sourcing, documents over 160 Suspicious Activity Reports detailing more than seven billion dollars in suspicious activity since a prior alert in May 2025. This action overlaps with earlier special-measures actions against named Mexican financial institutions, indicating that the sanctions architecture here is layered on top of an existing enforcement track rather than opening a new one.

The conflict-adjacent designations, the Sudan gold-trade sectoral sanctions from the EU (July 13, 2026) and UK (July 16, 2026), and the OFAC designation of the Gasabo Gold Refinery and Rwanda Defence Force (March 2, 2026), extend sanctions architecture into extractive-industry chokepoints. Both are sectoral or entity-specific rather than country-wide, reflecting a targeting philosophy that isolates the financing conduit rather than the broader economy.

The most structurally significant action this cycle is the 21st EU Russia sanctions package (around July 23, 2026), which added 218 designations including 94 Russian financial institutions and the Moscow Exchange, and for the first time sanctioned vessels that refuel shadow-fleet tankers rather than the tankers themselves. A fifth French shadow-fleet tanker seizure in 2026 corroborates continued enforcement pressure at the logistics layer. Listing the refuelling and bunkering layer, rather than only the vessels performing the evasive voyages, is a genuine architectural escalation: it targets the support infrastructure that allows shadow-fleet operations to persist regardless of how many individual tankers are listed or seized.

Across all five actions, corroboration quality varies materially. The Cambodia, CJNG, Sudan, and Rwanda designations rest on Tier-1 or dual Tier-1 primary sourcing (OFAC, Treasury, and EU Council releases), supporting High or Assessed confidence. The EU 21st package itself, despite its primary-source underpinning, is corroborated this cycle only through Tier-4 secondary reporting, capping confidence at Assessed pending direct EU Council or OFAC primary retrieval in a future cycle.

Outlook

The near-term test for this domain is whether the shift toward infrastructure-layer and financial-institution-layer designations produces measurable disruption or whether enablement gaps, weak casino supervision in Cambodia, external gold-refining hubs outside EU and UK reach, and continued Russian correspondent workarounds, absorb the pressure. Watch for direct EU Council or OFAC primary-source corroboration of the 21st sanctions package in the next cycle, and for any follow-on Rwanda or DRC-linked designations building on the Gasabo Gold Refinery action.

13 Jul 2026 · fim-2026-07-11

Sanctions Architecture and Evasion

The sanctions-architecture profile of Ontario this baseline cycle is defined by two distinct but reinforcing findings: a documented VASP-displacement pattern that undercuts the durability of individual enforcement, and a persistent scheduling divergence between the sanctions regime of Canada and its principal allied partners. The penalty issued by FINTRAC against Cryptomus, at roughly CAD 177 million the largest administrative monetary penalty in the history of the agency, targeted a Russia-linked crypto payment processor whose customer base included flows to Iranian exchanges. Read on its own, the penalty is a strong enforcement signal. Read architecturally, its significance is different: following the penalty, the ecosystem of the operator relaunched under a parallel brand, Heleket, preserving customer relationships, including flows connected to the sanctioned exchange Garantex, entirely outside a regulated environment. The enforcement action taken by FINTRAC is a data point; the sanctions-evasion infrastructure it targeted survived essentially intact under new branding.

This displacement pattern sits alongside a structural, independently-scheduled sanctions regime. The Special Economic Measures Act framework of Canada generally mirrors EU, OFAC and OFSI Russia measures in substantive targeting but issues its own listings on its own timeline. This cycle, Canada added roughly 100 shadow-fleet vessel and drone-maker designations, announced at a G7 foreign ministers meeting held in Ontario itself, while the 20th sanctions package of the EU Council added 120 listings (37 individuals, 83 entities) and OFAC combined new Russia-related designations with parallel SDN delistings under Executive Order 14024. None of these three actions moved on a common calendar. For Ontario-headquartered financial institutions with US and EU correspondent banking exposure, the result is a continuous reconciliation burden: three sanctions lists updating independently, with listing-scope and timing mismatches complicating screening even where substantive designation targets overlap across regimes.

The combination of these two findings describes an enforcer jurisdiction whose architecture nonetheless carries exploitable seams. A financial institution based in Ontario faces both the compliance cost of reconciling three independently-scheduled sanctions regimes and the practical reality that enforcement against a single sanctioned entity does not close the underlying evasion channel, since the operator can relaunch under new branding faster than the reputational and counterparty-due-diligence consequences of the original penalty can propagate. This is the central sanctions-architecture lesson of the cycle: enforcement intensity and architectural closure are not the same thing, and the residual risk sits precisely in that gap.

The obligation architecture underlying this cycle findings sits primarily under the Russian Harmful Foreign Activities Sanctions programme of OFAC (Executive Order 14024), which requires continuous screening by crypto-asset operators and payment companies with VASP-counterparty and MSB exposure. The enforcement action by FINTRAC was itself framed against this obligation set, underscoring the extent to which Canadian AML/CFT enforcement in the sanctions space is now conducted with direct reference to a foreign sanctions programme screening obligation, not solely the SEMA architecture of Canada itself. This cross-referencing is itself a structural feature worth noting: the practical operating standard for Ontario-headquartered crypto and payment firms increasingly reflects a composite of SEMA, OFAC and, to a lesser extent, EU criteria, rather than any single national list.

The active-scheme inventory for this jurisdiction file now records the Cryptomus and Heleket sequence as CRITICAL severity and an evolving, rather than resolved, status. The red-flag indicators associated with this scheme are narrow but distinctive: a parallel-brand relaunch preserving customer relationships, including sanctioned-entity-linked flows, immediately following an enforcement penalty, and high-volume crypto-to-fiat routing to exchanges operating in or serving sanctioned jurisdictions. Both indicators are, per the assessment of the interpreter, observable on-chain, which is analytically significant: the displacement pattern this cycle documents is not concealed behind opaque intermediation but is instead visible to any counterparty conducting adequate blockchain-analytics due diligence on customer wallets and counterparty exchanges.

The standing Russian Sanctions-Evasion Architecture tracker for this jurisdiction has been updated to record the dual character of Ontario: a jurisdiction functioning primarily as target and enforcer, with an Ontario-connected crypto processor nonetheless moving funds tied to both Russia-linked and Iran-linked networks. Next-watch items include further FINTRAC crypto and VASP enforcement, whether the SEMA schedule of Canada converges with or continues to diverge from the most recent EU package, and G7 sanctions-coordination follow-through given that this cycle Canadian shadow-fleet designations were announced at a G7 ministerial meeting hosted in Ontario.

Outlook

The near-term sanctions-architecture question for Ontario is whether the displacement pattern seen in the Cryptomus and Heleket case recurs following further enforcement action, and whether a successor entity attracts renewed attention from FINTRAC or international partners before it, too, can rebrand outside the regulated perimeter. Cross-border screening reconciliation between the independently-scheduled SEMA regime of Canada and the EU, OFAC and OFSI timetables remains an unresolved operational cost for Ontario-headquartered institutions, with nothing in the findings from this cycle indicating that harmonisation is imminent.

D2 Beneficial Ownership

no_changeno_changestanding position

Beneficial Ownership and Corporate Transparency

Canada sits outside the European Union's legal perimeter, and the EU AML Package is not the primary subject matter for this jurisdiction's beneficial-ownership exposure. The directly relevant development for Ontario this cycle is domestic and structural: Ontario has not committed its provincial corporate registry data to the federal Canada Business Corporations Act public beneficial-ownership registry established under Bill C-42. Since most Canadian companies are incorporated provincially rather than federally, this non-participation substantially limits the practical reach of Canada's federal transparency reform, leaving the majority of Ontario-incorporated entities' beneficial ownership opaque to the very registry the federal government designed to close this gap.

Continue reading

This structural gap sustains a persistent laundering channel: billions of CAD in Toronto-region housing have been acquired through anonymous private entities exploiting weak provincial corporate-registry disclosure, a pattern long documented as Toronto real-estate "snow-washing." The gap is not new to this cycle, but this baseline pass establishes it as the jurisdiction's principal corporate-transparency exposure, a finding corroborated by the persistence of anonymous-ownership real-estate acquisition patterns despite years of federal registry development elsewhere in the country.

A separate, contested development in the same domain is the Ontario Securities Commission's statement of allegations against Som Seif and Purpose Investments, a prominent capital-markets participant. The proceeding remains contested with outcome pending, and is best read as a signal of OSC enforcement posture toward established asset managers rather than as a corporate-transparency finding in the beneficial-ownership sense; it is included here because it falls within the same domain tracker and because OSC enforcement intensity is itself a relevant contextual data point when assessing whether Ontario's capital-markets oversight architecture is closing gaps elsewhere even as beneficial-ownership opacity persists at the corporate-registry level.

Globally, the EU AML Package, comprising three distinct instruments, sets the structural direction against which beneficial-ownership regimes worldwide are increasingly measured, even where a given jurisdiction sits outside its direct legal perimeter. The AML Regulation (AMLR, Regulation (EU) 2024/1624) is directly applicable across EU member states without national transposition; the sixth AML Directive (6AMLD) requires transposition by each member state into domestic law; and the AMLA Regulation (Regulation (EU) 2024/1620) establishes the Anti-Money Laundering Authority, which is shifting supervision of high-risk cross-border obliged entities from a purely national model toward a hybrid EU-level regime, with AMLA beginning direct supervision of a first cohort of such entities in 2028. Canada is not itself subject to AMLR, 6AMLD or the AMLA Regulation; no Canada-specific EU high-risk third-country listing changes occurred this cycle. This architecture is best read as durable global backdrop, illustrating one model of closing exactly the kind of provincial-federal registry gap that defines Ontario's own beneficial-ownership exposure, rather than as a directly applicable regulatory development for this jurisdiction.

Canada's own FATF standing is relevant context here: the country remains off both FATF monitoring lists, in enhanced follow-up from its 2016 Mutual Evaluation, pending a still-unconfirmed 5th-round onsite assessment. That evaluation, once scheduled, will test Canada's effectiveness on beneficial-ownership transparency, VASP supervision, PEP coverage and DNFBP oversight, precisely the areas this cycle's Ontario-specific findings suggest are structurally weak.

Outlook

The principal watch item is whether Ontario makes any budget or legislative commitment to feed provincial registry data into the federal beneficial-ownership framework; absent such a commitment, the snow-washing exposure documented this cycle is likely to persist as a standing structural finding rather than resolve. Confirmation of Canada's 5th-round FATF onsite assessment date will also determine the timeline on which this gap receives external multilateral scrutiny.

Judgment: No CA-ON-specific beneficial-ownership development identified this cycle. Uncertain
Cumulative analysis

Beneficial Ownership and Corporate Transparency — Cumulative Analysis

The standing beneficial-ownership picture for this jurisdiction file has centred, across recent cycles, on a structural gap between federal transparency reform and provincial non-participation. The prior baseline cycle established that this province has not committed its own corporate registry data to the federal beneficial-ownership registry created under the Canada Business Corporations Act, and because most Canadian companies are incorporated provincially rather than federally, that non-participation has substantially limited the practical reach of federal transparency reform, sustaining billions of dollars in real-estate acquisitions through anonymous private entities exploiting weak provincial disclosure. The same cycle noted that Canada's legal profession, including notaries nationally, remains outside AML/CFT preventive obligations following a Supreme Court ruling FATF has flagged as a significant loophole given the gatekeeper role lawyers play in corporate structuring and real estate — a standing structural gap that interacts directly with the provincial beneficial-ownership shortfall.

This cycle adds a federal-level development that sits alongside, rather than resolves, that provincial gap: mandatory CBCA discrepancy-reporting has applied to FINTRAC reporting entities since October 1, 2025, and PCMLTFA amendments extend reporting-entity coverage and administrative-penalty ceilings through 2026. This is a genuine expansion of the federal reporting architecture, but it does not by itself close the provincial registry-participation gap documented previously, and this cycle's corroboration for the federal development itself rests on Tier-4 sourcing only, with no primary FINTRAC text retrieved. The integrated read through this cycle is therefore one of incremental federal-level tightening proceeding in parallel with an unresolved provincial-participation and legal-profession-coverage gap that continues to define the practical limits of Canada's beneficial-ownership transparency regime as experienced at this jurisdiction's level.

Globally, the EU AML Package continues to provide the structural comparison point rather than a direct obligation on this jurisdiction. The three-instrument architecture — the directly applicable AMLR (Regulation (EU) 2024/1624), the nationally transposed 6AMLD, and the AMLA Regulation (Regulation (EU) 2024/1620) establishing the Anti-Money Laundering Authority — continues its build-out on schedule, with AMLA's supervisory-cooperation standards finalized and a data-collection deadline of August 15, 2026 set ahead of 2027 entity selection and 2028 direct supervision. That hybrid national/EU-level supervisory model remains the clearest available comparator for assessing how far behind, or ahead, this jurisdiction's own federal-provincial transparency architecture sits relative to a peer regime actively closing analogous gaps. The unresolved provincial-participation and legal-profession gaps carried forward from the prior cycle remain the dominant open item in this domain going into the next cycle.

domain_sub_briefs · D2 · Cumulative analysis
Periodic updates (2)
11 Aug 2026 · fim-2026-08-05

Beneficial Ownership

Canada, the subject jurisdiction for this brief, sits outside the direct perimeter of the EU AML Package: the AML Regulation, the sixth AML Directive, and the AMLA Regulation apply to EU Member States, not to Canadian federal or provincial beneficial-ownership registers. The development most directly relevant to Canadian obliged entities this cycle is therefore domestic: mandatory CBCA discrepancy-reporting has applied since October 1, 2025, requiring reporting entities to flag discrepancies against the federal beneficial-ownership register, and PCMLTFA amendments are separately expanding reporting-entity coverage and raising administrative-monetary-penalty ceilings on a staggered basis through 2026. The sourcing behind this Canadian development is Tier-4 only this cycle, with no direct FINTRAC primary text retrieved, a gap the interpreter has logged explicitly and one that caps confidence at Assessed rather than High. The affected population is described as cross-sector, touching corporate customer typologies broadly rather than a single regulated-sector subset, consistent with a register-integrity measure rather than a sector-specific enforcement action. The jurisdiction-risk read for Canada this cycle notes explicitly that sixth AML Directive transposition obligations are not applicable, underscoring that the Canadian beneficial-ownership trajectory runs on its own domestic statutory clock, decoupled from the EU instrument timeline even where both move in the same substantive direction toward tighter ownership verification.

Globally, the EU AML Package sets the structural direction against which beneficial-ownership regimes elsewhere are increasingly read, even where, as with Canada, it has no direct legal effect. The durable structural fact is that the EU AML Package is not one instrument but three: the AML Regulation, Reg (EU) 2024/1624, directly applicable across Member States without national transposition; the sixth AML Directive, transposed individually by each Member State into domestic law; and the AMLA Regulation, Reg (EU) 2024/1620, which establishes the Anti-Money Laundering Authority itself. AMLA own build-out continued this cycle: the Authority finalized supervisory-cooperation standards and requires national supervisors to submit calibration data by August 15, 2026, ahead of a 2027 process to select up to 40 entities for AMLA direct supervision beginning in 2028. That selection is the mechanism by which the supervisory perimeter shifts from a purely national model toward a hybrid EU-level regime, with the AMLR July 10, 2027 application date operating as a related but separate track. For any Canadian entity with EU-facing correspondent relationships or EU subsidiaries, this AMLA build-out is the structural backdrop against which group-level beneficial-ownership and transparency obligations will increasingly be read, even though it imposes no direct obligation on the Canadian entity itself.

The practical read this cycle is therefore two-track: a domestic Canadian beneficial-ownership tightening running on a compressed but thinly sourced timeline, and a parallel EU supervisory build-out that is well sourced, Tier-1 throughout, but has no direct jurisdictional bite on Canadian entities absent an EU nexus. Both tracks point the same direction, toward more granular ownership verification and more centralized enforcement of it, but neither track is complete: the Canadian PCMLTFA amendments have staggered in-force dates running through 2026, and the AMLA entity-selection process does not conclude until 2027.

Outlook

Watch for the FINTRAC-side primary corroboration this Canadian development still lacks; until a FINTRAC guidance document or bulletin is retrieved, the Canadian beneficial-ownership finding should be read as Assessed rather than High confidence. On the EU side, the August 15, 2026 supervisory-data-collection deadline is the concrete near-term checkpoint, and the 2027 entity-selection process is the substantive shift to track for any Canadian entity with EU-facing exposure.

13 Jul 2026 · fim-2026-07-11

Beneficial Ownership and Corporate Transparency

Canada sits outside the European Union AML Package perimeter; the AML Regulation, the sixth Anti-Money Laundering Directive and the AMLA Regulation apply to EU and EEA obliged entities and Member States, not to Ontario-incorporated companies or Canadian financial institutions. The directly relevant beneficial-ownership development for this jurisdiction is domestic: Ontario, home to the majority of provincially incorporated businesses in Canada, has not committed provincial corporate registry data to the federal CBCA public beneficial-ownership registry established under Bill C-42. Because most Canadian companies are incorporated provincially rather than federally, this non-participation substantially limits the practical reach of the federal transparency reform of Canada: a large share of Ontario company ownership remains opaque to public and, in important respects, regulatory scrutiny, notwithstanding the existence of a functioning federal registry for federally incorporated entities.

This structural gap sustains a documented laundering channel. Billions of CAD in Toronto-region housing continue to be acquired through anonymous private entities exploiting weak provincial corporate-registry disclosure and limited oversight from designated non-financial businesses and professions, a pattern researchers and journalists have described as snow washing. The mechanism does not depend on any single transaction; it depends on the standing absence of a beneficial-ownership data feed linking Ontario-incorporated numbered companies to identifiable natural persons. Enforcement activity elsewhere in the capital markets of Ontario, including a contested statement-of-allegations proceeding brought by the Ontario Securities Commission against Som Seif and Purpose Investments, does not address this underlying registry gap; it is a separate securities-conduct matter, notable for targeting a prominent asset manager but analytically distinct from the beneficial-ownership question.

Globally, the EU AML Package sets the structural direction against which beneficial-ownership regimes worldwide are increasingly measured, and it is useful standing context for reading the Ontario gap even though Canada is not itself bound by it. The Package comprises three distinct instruments: the AML Regulation, Regulation (EU) 2024/1624, known as the AMLR, which is directly applicable across EU Member States without national transposition; the sixth Anti-Money Laundering Directive, known as 6AMLD, which each Member State transposes into national law on its own timeline; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority itself. The direct and indirect supervisory perimeter of AMLA is designed to shift a meaningful share of EU AML supervision away from purely national authorities toward a hybrid EU-level regime, with AMLA taking direct supervisory responsibility for a first cohort of high-risk, cross-border obliged entities. No equivalent institutional mechanism exists in the federal-provincial system of Canada; the CBCA registry model relies on voluntary provincial participation rather than a supranational authority with direct supervisory reach, and the non-participation of Ontario illustrates precisely the kind of jurisdictional fragmentation that a hybrid supervisory model is designed to close in the EU context.

The accountability mechanism of Canada for this gap remains the FATF Mutual Evaluation process. Canada continues in enhanced follow-up from its 2016 Mutual Evaluation Report, rated compliant on 11 Recommendations, largely compliant on 23, partially compliant on 5 and non-compliant on 1, and remains off both FATF Increased Monitoring and Call for Action lists. The 5th-round onsite evaluation of Canada, whose date remains unconfirmed, will test beneficial-ownership transparency, VASP supervision, PEP screening and DNFBP coverage under the 2022 FATF Methodology, precisely the areas this baseline identifies as weak.

This structural gap is compounded by a related enabler-jurisdiction finding tracked separately under D3: the legal profession in Canada and, nationally, Quebec notaries remain outside AML/CFT preventive obligations following a ruling by the Supreme Court, a carve-out FATF has flagged as significant precisely because lawyers and notaries perform gatekeeper functions in the corporate structuring and real-estate transactions that beneficial-ownership opacity most directly enables.

Outlook

The principal watch item for the beneficial-ownership posture of Ontario is whether any federal-provincial finance-ministers coordination or Ontario budget announcement commits provincial registry data to the federal CBCA framework; nothing in the findings from this cycle indicates that commitment is imminent. Separately, the outcome of the contested proceeding brought by the OSC against Purpose Investments remains pending and does not itself bear on the registry question. The unscheduled 5th-round FATF onsite evaluation of Canada remains the most consequential near-term external check on this structural gap.

D3 Enabler Jurisdictions

no_changeno_changestanding position

Enabler Jurisdictions and Professional Facilitators

Ontario's enabler-jurisdiction profile this cycle is deteriorating, driven by three converging findings that together outweigh, in analytical significance, the enforcement activity occurring alongside them. The most consequential is a Toronto-headquartered systemically important bank's decade-long AML control failure. A FinCEN consent order documents 2014-2023 control failures at TD Bank, including transaction-monitoring coverage gaps that in 2023 alone left several trillion dollars of transactions unscreened. This is a two-source, high-confidence finding corroborated by both a T1 FinCEN consent order and T2 press reporting, and it represents the kind of systemic, structural enabler-jurisdiction exposure that architecture-over-incident analysis is designed to surface: a single bank's control failure, sustained over a decade, at a scale measured in trillions of dollars annually, is a far more significant enabler-jurisdiction signal than any individual laundering transaction it may have facilitated. Separately, TD Bank and RBC are reported, via a single T2 investigative source, to have retained mortgage financing for an individual publicly alleged to be an organised-crime figure, illustrating an onboarding and retention control weakness at both institutions even as the underlying TD Bank enforcement matter itself is now formally contained.

Continue reading

The second converging finding is Canada's legal-profession AML/CFT preventive-obligation carve-out. Following a Supreme Court ruling, legal counsel, and nationally Quebec notaries, remain outside preventive AML/CFT obligations, a gap FATF's own 2016 Mutual Evaluation Report calls significant given lawyers' gatekeeper role in corporate structuring and real estate, both channels directly implicated in the Toronto real-estate opacity findings documented elsewhere in this cycle's Ontario file. This is a structural, persistent gap rather than a single-cycle incident, and it interacts directly with the beneficial-ownership exposure: a lawyer facilitating an anonymous corporate real-estate purchase in Toronto currently faces no preventive AML/CFT obligation in doing so.

The third finding is an intensifying China-Ontario fentanyl-precursor trade-based laundering corridor. Ontario is one of the two provinces most frequently identified in FinCEN cross-border financial-intelligence reporting on payments for PRC-sourced precursor chemicals and laboratory equipment, with payment increasingly routed through cryptocurrency and layered financial channels. This finding is corroborated by both a T1 FinCEN Financial Trend Analysis and T2 Bloomberg reporting on Canadian government engagement with Chinese authorities on precursor controls, meeting the two-source high-confidence standard.

Together, these three findings, systemic bank AML control failure, legal-profession carve-out, and an intensifying TBML corridor, describe an enabler-jurisdiction profile in which capacity gaps and choice-driven exclusions compound one another. The TD Bank finding demonstrates that even a systemically important institution can sustain multi-year, multi-trillion-dollar transaction-monitoring gaps; the legal-profession carve-out is a deliberate policy choice rather than a capacity constraint; and the fentanyl-precursor corridor demonstrates active exploitation of both gaps by cross-border trade-finance actors.

Outlook

The near-term watch items are whether Canada moves to close the legal-profession preventive-obligation gap, which FATF's forthcoming 5th-round evaluation is likely to scrutinise directly, and whether further FinCEN or FINTRAC action targets the fentanyl-precursor corridor's crypto-routed payment channels. TD Bank's remediation progress under its consent order also bears monitoring, though this cycle's finding is that the underlying enforcement matter is already contained even as broader systemic exposure questions remain open.

Judgment: No CA-ON-specific enabler-jurisdiction development identified this cycle. Uncertain
Cumulative analysis

Enabler Jurisdictions and Professional Facilitators — Cumulative Analysis

This jurisdiction file's enabler-jurisdiction domain has, in prior cycles, focused primarily on domestic Ontario infrastructure: FINTRAC's revocation of dozens of Toronto-area money-services-business registrations following an ICIJ/Toronto Star investigation into unregistered storefront crypto-cash exchange operations, with one shop reported to have moved over CAD 120 million through a single wallet in a year, and separately, decade-long AML control failures at a Toronto-headquartered systemically important bank documented in a FinCEN consent order covering 2014 through 2023, alongside reports that two major Toronto-headquartered institutions retained mortgage financing for an individual publicly alleged to be an organised-crime figure. Those findings established a domestic enabler profile centred on unregistered MSB infrastructure and onboarding/retention control weaknesses at major regulated institutions, persisting despite active FINTRAC enforcement.

This cycle broadens the domain's evidentiary base beyond the domestic file to two international cases that illustrate the same underlying dynamic in different jurisdictions: Cambodia's casino sector, where OFAC's designation of a sitting senator's casino and scam-compound network sits against a 2023 FATF follow-up finding of persistent fit-and-proper weaknesses in casino, lawyer, and accountant vetting, and Mexico, where a CJNG-linked fuel-smuggling network's use of named financial institutions and gambling establishments as facilitators persists despite repeated FinCEN alerts and OFAC designations across multiple cycles. Integrating these cases with the domestic file's findings, the durable analytical pattern across this domain is now well established across at least three distinct jurisdictions: enforcement action against a specific illicit-finance network does not, on its own, degrade the enabling infrastructure — regulated or unregistered financial intermediaries, casino sectors, or gambling establishments — that made the activity possible in the first place. That infrastructure persists, and in the domestic Ontario case documented previously, has been shown to relaunch under new branding entirely outside the regulated perimeter.

The integrated state of this domain through the current cycle is therefore one of confirmed, cross-jurisdictional enabler-infrastructure persistence, with the domestic file's registration-revocation and control-failure findings now joined by international evidence of the same structural pattern in Cambodia and Mexico. The open question carried forward is whether any of the three jurisdictions — this one, Cambodia, or Mexico — moves from enforcement-against-networks toward enforcement-against-the-enabling-infrastructure-itself in a subsequent cycle.

domain_sub_briefs · D3 · Cumulative analysis
Periodic updates (3)
4 Oct 2026 · fim-2026-10-04

Enabler Jurisdictions and Professional Facilitators

The Ontario Securities Commission's enforcement record against unregistered crypto-asset trading platforms is the principal D3-relevant signal this cycle, framed here through the enabler-jurisdiction lens of provincial enforcement-intensity variance within a nationally harmonized legal framework. Canada's securities-law treatment of crypto-asset trading platforms operates through the Canadian Securities Administrators' harmonized approach, meaning the underlying legal basis for registration and enforcement is shared across all provinces. Within that shared framework, available evidence characterises Ontario, acting through the Ontario Securities Commission, as the most enforcement-active province, evidenced concretely by the Capital Markets Tribunal's order against KuCoin imposing a permanent ban from Ontario capital-markets participation together with a CAD 2,000,000 administrative monetary penalty. This is a Confirmed enforcement action drawn directly from the Ontario Securities Commission's own notice.

The comparative characterisation of Ontario as more enforcement-active than other provinces is itself a Probable finding, carried forward from prior research and not independently re-verified against other provincial regulators' enforcement records this cycle. The architecture-over-incident reading here is that Ontario's posture functions as a structural enforcement differential rather than a series of unrelated incidents: a jurisdiction can share an identical statutory basis with its peers while diverging materially in practical enforcement intensity, and that divergence is itself the signal worth tracking, since it shapes where non-compliant platforms are likely to concentrate residual exposure or seek comparatively permissive treatment. No Ontario-specific enabler-jurisdiction finding beyond the crypto-platform enforcement record was located this cycle; corporate-services-provider or professional-facilitator findings specific to Ontario remain a coverage gap.

Outlook

The KuCoin enforcement action, if it continues to anchor Ontario's crypto-platform compliance strategy, is likely to reinforce the province's comparatively stringent practical posture relative to other Canadian provinces operating under the same CSA-harmonized rules. Whether other provincial securities regulators begin to match Ontario's enforcement intensity, or whether platforms instead gravitate toward provinces perceived as less active, is a dynamic worth monitoring but not resolved by this cycle's evidence. No structural change to the underlying enabler-jurisdiction architecture is indicated.

11 Aug 2026 · fim-2026-08-05

Enabler Jurisdictions

This cycle enforcement actions in Cambodia and Mexico read, from an enabler-jurisdiction lens, as confirmation that designation activity is outpacing the underlying supervisory reform needed to close the gaps enforcement is trying to plug. In Cambodia, the OFAC designation of sitting senator Kok An and 28 associated individuals and entities for casino and scam-compound money laundering lands atop a casino, legal, and accountancy sector that a 2023 FATF follow-up mutual evaluation had already found structurally weak on fit-and-proper testing. The jurisdiction-risk read for Cambodia this cycle is explicitly structural rather than episodic: the risk direction is increasing, the enforcement-versus-enablement read is mixed, and the primary domains implicated are both sanctions and enabler-jurisdiction categories simultaneously. The designation targets one node in a network operating under apparent political protection, but it does not, on its own, alter the underlying fit-and-proper testing regime for casinos, lawyers, and accountants that the FATF review identified as the structural weakness enabling this activity in the first place.

Mexico presents a related but distinct enabler pattern. The FinCEN supplemental alert and OFAC designations targeting the CJNG fuel-smuggling network describe named Mexican financial institutions and gambling establishments as separately identified facilitators, alongside the core designation targets. The jurisdiction-risk tracker for Mexico characterizes the structural-versus-episodic read as mixed, and the enforcement-versus-enablement read as enforcement-dominant this cycle, reflecting the fact that the primary action is a designation and alert rather than a finding of jurisdiction-wide regulatory failure. Even so, the scale disclosed, over 160 Suspicious Activity Reports detailing more than seven billion dollars in suspicious activity since May 2025, indicates a facilitation channel that has operated at volume for well over a year before this cycle action, which is itself an enabler-jurisdiction signal: the absence of earlier disruption is as analytically significant as the disruption itself.

Both cases illustrate the FIM principle that enablement is signal in its own right. Neither Cambodia nor Mexico has, this cycle, produced a structural regulatory reform alongside the enforcement action, an accreditation overhaul for Cambodian casinos, or new financial-institution supervisory measures in Mexico beyond the designations themselves. The absence of such reform, set against confirmed high-volume illicit-finance activity, is the enabler-jurisdiction finding this cycle actually supports, distinct from the sanctions-mechanics reading of the same underlying designations.

Outlook

The question for the coming cycles is whether either jurisdiction pairs enforcement with structural reform: a revised fit-and-proper testing regime for Cambodian casinos, lawyers, and accountants, or enhanced supervisory measures for the Mexican financial institutions and gambling establishments named as facilitators. Absent such reform, the enabler-jurisdiction pattern identified this cycle is likely to recur in future designation actions rather than resolve.

13 Jul 2026 · fim-2026-07-11

Enabler Jurisdictions and Professional Facilitators

The enabler-jurisdiction exposure of Ontario this cycle rests on three distinct findings that together outweigh, in structural terms, any single enforcement action: a decade-long AML control failure at a systemically important Toronto-headquartered bank, a Supreme-Court-mandated carve-out removing the legal profession from preventive AML/CFT obligations, and an intensifying trade-based-laundering corridor tied to fentanyl-precursor payments. Each is a standing architectural feature rather than an episodic incident, and each interacts with the beneficial-ownership and sanctions findings documented elsewhere in this baseline.

A consent order issued by FinCEN against TD Bank documents AML control failures spanning 2014 through 2023, including transaction-monitoring coverage gaps that in 2023 alone left several trillion dollars of transactions unscreened. This is a US regulatory action against a Canadian-headquartered institution, itself notable: the primary enforcement instrument disciplining the AML architecture of a Toronto-headquartered bank originated outside Canada. Separately, TD Bank and RBC are reported to have retained mortgage financing for an individual publicly alleged to be an organised-crime figure, a finding that, while sourced to a single investigative report rather than a formal enforcement action, illustrates onboarding and retention control weakness at major Toronto-headquartered institutions independent of the now-contained US enforcement outcome.

The legal-profession carve-out compounds this exposure. Following a ruling by the Supreme Court of Canada, lawyers and, nationally, Quebec notaries remain outside AML/CFT preventive obligations, a gap the 2016 Mutual Evaluation Report of FATF identifies as significant given the gatekeeper role legal professionals play in corporate structuring and real-estate transactions, precisely the mechanisms sustaining the beneficial-ownership opacity of Toronto documented under D2. This is not a new finding this cycle but a persistent structural gap that this baseline formally incorporates into the jurisdiction file of Ontario for the first time; its durability, a decade after the ruling of the Court and the finding of FATF, is itself the analytical point.

The third finding, an intensifying China-Ontario fentanyl-precursor trade-based laundering corridor, is documented by the own Financial Trend Analysis of FinCEN, which identifies Ontario as one of the two Canadian provinces most frequently reported in cross-border financial-intelligence reporting on payments to PRC-based precursor-chemical and laboratory-equipment suppliers. Payment for this corridor is increasingly routed through cryptocurrency and layered financial channels, intersecting directly with the crypto-enforcement findings documented under D5: the same digital-asset rails that FINTRAC is targeting for VASP displacement and unregistered MSB activity are, per the assessment of FinCEN, also carrying fentanyl-precursor trade payments.

The obligation architecture flagged against the fentanyl-precursor corridor carries a partial control-gap signal in this cycle assessment: an advisory issued by FinCEN imposes reporting expectations on banks, payment companies and cross-sector obliged entities, but the control-gap coding from the interpreter indicates that coverage of this corridor remains incomplete relative to the stated reporting expectations of the advisory. This is a modest but material qualifier on the corridor finding: the relevant obligation exists and is documented at the T1 tier, but the assessed control gap suggests that documented reporting to date has not fully closed the exposure the advisory itself describes.

Taken together, these three findings describe Ontario less as a jurisdiction that actively courts illicit financial flows and more as one whose enabler exposure arises from unresolved structural gaps: an offshore-enforced bank control failure, a professional-obligation carve-out untouched for a decade, and a payment corridor whose crypto-routing outpaces the enforcement reach of the province documented elsewhere in this file.

Outlook

The enabler-jurisdiction trajectory of Ontario is assessed as deteriorating relative to a jurisdiction-wide picture that shows enforcement intensifying elsewhere; none of the three findings above shows evidence of near-term structural remediation. The legal-profession carve-out in particular has no scheduled legislative or judicial review identified in the research for this cycle, and the increasing reliance of the fentanyl-precursor corridor on crypto-routing suggests it will continue to intersect with, rather than be resolved by, the crypto-enforcement posture of this jurisdiction.

D4 Conflict Finance

no_changeno_changestanding position

Conflict Finance and Extractive-Industry Integrity

This cycle produced two directly comparable conflict-finance actions, each targeting a distinct link in a minerals-to-war-economy financing chain. In Sudan, the EU banned the purchase, import, or transfer of Sudanese-origin gold and the export of gold-processing chemicals from July 13, 2026, and the UK sanctioned illicit gold and finance networks from July 16, 2026, both measures explicitly aimed at cutting off Sudanese Armed Forces and Rapid Support Forces war financing. The two actions moved in close alignment on timing and objective, though their designee lists diverged, and the UAE remains outside EU/UK jurisdiction as the dominant external refining and laundering hub for Sudanese gold — meaning the sectoral ban, however structurally significant within the EU/UK perimeter, leaves the principal external processing node for the underlying flows untouched by this cycle's action.

Continue reading

In eastern DRC, OFAC's March 2, 2026 designation of Gasabo Gold Refinery and the Rwanda Defence Force targets a structurally comparable minerals-financing chain, but with a materially different actor profile: rather than a commercial refining and trading network, the designation reaches directly into a state military institution alleged to be actively supporting, training, and fighting alongside the M23 armed group in its exploitation of mineral-rich DRC territory. This is a stronger and more direct form of conflict-finance designation than the Sudan sectoral ban, since it names a state defence institution rather than only commercial intermediaries, though this cycle's corroboration for the Rwanda case rests on a single source and is capped at Assessed confidence rather than High.

Read together, the two cases describe conflict-finance architecture operating at two different points along comparable value chains — commodity-sector sanctions targeting trade flows in Sudan, and direct institutional designation targeting a state military's operational role in mineral exploitation in the DRC. Both target gold specifically, underscoring gold's continued centrality as a conflict-finance vector precisely because of its fungibility and the ease with which illicit-origin material can be blended into licit gold-trade channels once it clears an external refining hub outside the sanctioning jurisdictions' reach.

Outlook

The principal watch item for Sudan is whether the UAE, or any other external refining and laundering hub for Sudanese gold, becomes the subject of a coordinated EU/UK/US sanctions or diplomatic response in a subsequent cycle, since the current sectoral ban's practical effectiveness depends heavily on whether the external processing node remains available. For Rwanda and the DRC, the watch item is whether additional corroborating sourcing becomes available to raise the Gasabo/RDF designation's confidence rating above Assessed, and whether the designation is followed by further action against downstream buyers of the refinery's output.

Judgment: No CA-ON-specific conflict-finance development identified this cycle. Uncertain
Cumulative analysis

Conflict Finance and Extractive-Industry Integrity — Cumulative Analysis

This domain carries no substantive prior-cycle content in this jurisdiction file's compose history, and this cycle's content is accordingly seeded directly as the domain's first integrated synthesis. The domain's opening state-of-play, established this cycle, centres on two parallel minerals-to-war-economy financing actions: new EU (July 13, 2026) and UK (July 16, 2026) sectoral sanctions on Sudan's gold trade, aimed at severing SAF/RSF war financing but leaving the UAE's external refining and laundering role outside EU/UK reach, and OFAC's March 2, 2026 designation of Gasabo Gold Refinery and the Rwanda Defence Force for direct state-military support of M23's mineral exploitation in eastern DRC.

The integrated analytical frame for this domain going forward is that gold functions as the recurring conflict-finance vector across both African cases documented so far, precisely because its fungibility allows illicit-origin material to be blended into licit trade channels once it clears an external processing hub beyond sanctioning-jurisdiction reach. The Rwanda case additionally establishes, as a standing feature of this domain, that conflict-finance designations in this jurisdiction file's tracking are not confined to commercial intermediaries but can reach directly into state military institutions when the underlying evidence supports it, though this cycle's Rwanda evidence itself rests on a single source and is capped at Assessed confidence.

As a first-cycle synthesis, this domain's cumulative essay through the current cycle is substantively identical to this cycle's standalone content, and future cycles should build on this baseline by tracking whether the Sudan sectoral sanctions extend to external refining hubs, whether the Rwanda designation's confidence rating is raised by additional corroboration, and whether either case generates secondary designations against downstream trading or financing intermediaries.

domain_sub_briefs · D4 · Cumulative analysis
Periodic updates (1)
11 Aug 2026 · fim-2026-08-05

Conflict Finance

Two separate but structurally parallel conflict-finance actions landed this cycle, both targeting the conversion of extracted natural resources into war-economy financing. The EU sanctions of July 13, 2026 banned the purchase, import, and transfer of Sudanese-origin gold and the export of gold-processing chemicals, explicitly designed to cut off financing for the Sudanese Armed Forces and Rapid Support Forces conflict. The UK followed on July 16, 2026 by sanctioning illicit gold and finance networks, though the two jurisdictions designee lists diverged, illustrating the continued autonomous-listing pattern between EU and UK sanctions regimes even where the two align closely on substantive policy direction. Neither action reaches the UAE, which remains the dominant external refining and laundering hub for Sudanese gold outside EU and UK jurisdiction, meaning the sectoral ban addresses the origination and export side of the conflict-gold pipeline without directly touching the downstream processing and monetization side.

The OFAC designation of March 2, 2026 targeting the Gasabo Gold Refinery and the Rwanda Defence Force addresses a structurally similar pipeline in eastern Democratic Republic of the Congo: RDF support, training, and direct fighting alongside M23 in connection with the exploitation of mineral-rich territory. This designation is corroborated by a single source this cycle, capping confidence at Assessed rather than High, but the substantive finding, a state military directly implicated in resource capture and mineral-financed conflict, is a structural rather than episodic conflict-finance signal. The jurisdiction-risk tracker for Rwanda characterizes this as structural, with sanctions and conflict-finance as the two primary domains implicated simultaneously, mirroring the dual-domain pattern seen in the Sudan case.

Both actions this cycle exemplify the conflict-finance principle that sectoral and entity-specific sanctions on extractive-industry chokepoints are the primary tool available for interrupting mineral-to-war-economy financing, precisely because direct military or territorial intervention is not a financial-integrity lever. The gold-processing-chemical export ban and the refinery-specific designation both target the physical conversion step, gold extraction into a saleable, launderable commodity, rather than the financial-flow step that follows. This is consistent with a broader pattern in which conflict-finance sanctions architecture increasingly targets physical and logistical chokepoints alongside, or instead of, financial-institution-level designations.

Outlook

The structural gap in both cases is the same: refining and laundering capacity located outside the sanctioning jurisdictions, the UAE for Sudanese gold, and unspecified regional buyers for DRC minerals, remains a channel through which the underlying financing can continue even as origination-side sanctions tighten. Watch for any UAE-directed measures or DRC-adjacent designations building on the Gasabo Gold Refinery action in coming cycles, which would indicate the sanctioning authorities are moving to close the downstream gap rather than only the upstream one.

D5 Crypto / Digital Assets / Financial Innovation

stableactivestanding position

Crypto / Digital Assets / Financial Innovation

Ontario's oversight of crypto-asset trading platforms moved forward in late October 2026 through two dated registrant-table entries at the Ontario Securities Commission. The first records an undertaking and exemptive relief granted to CADC Reserve Trust, dated October 22, 2026. The second records a decision concerning an immediate-delivery virtual-currency trading platform, dated October 26, 2026. Neither entry has been traced to its underlying decision document beyond the registrant-table listing itself, so the substantive conditions attached to the relief and to the decision remain unverified at this remove; what is established is that both actions occurred, on the dates stated, within the Commission's crypto-platform registrant process.

Continue reading

The structural reading is that Ontario continues to regulate virtual-currency trading platforms through individually negotiated instruments rather than a single settled licensing code. Each undertaking or exemptive-relief grant functions as a bespoke rulebook for the registrant concerned, with terms that may differ materially from platform to platform. This is consistent with the Commission's established posture over preceding cycles and is read here as a continuation of that posture rather than a new departure. The judgment that this case-by-case approach remains the operative mechanism for crypto-platform oversight in the province is assessed as probable, resting on the dated registrant-table entries rather than on the full text of either order.

Framed against enablement rather than enforcement alone, the absence of any adverse enforcement action against either CADC Reserve Trust or the immediate-delivery platform in this cycle is itself worth noting. Exemptive relief and undertakings are permissive instruments: they authorize continued or adjusted operation under agreed conditions rather than sanctioning past conduct. Where the Commission grants relief rather than withholding it, the practical effect is to keep the registrant within the regulated perimeter under bespoke terms, rather than excluding it. Whether those bespoke terms are materially protective or materially permissive cannot be assessed from the registrant-table listing alone, since the operative conditions have not been independently reviewed.

No parallel movement was identified in sanctions exposure, beneficial-ownership transparency, enabler-jurisdiction dynamics, conflict finance, compliance technology, broader AML or counter-terrorist-financing architecture, or general commercial-activity oversight for the province this cycle. The crypto-platform registrant activity is therefore the only dated, substantive development available for this jurisdiction in the current pass, and the brief accordingly concentrates on it rather than attempting to manufacture movement elsewhere.

Outlook

The most likely near-term path is further incremental registrant-table activity of the same kind: additional undertakings, exemptive-relief grants, or platform-specific decisions issued by the Commission on a rolling basis, continuing the case-by-case pattern rather than consolidating into a single codified regime. Should the substantive terms of either the CADC Reserve Trust undertaking or the immediate-delivery platform decision surface in a later pass, they would most plausibly confirm and particularize this structural reading rather than contradict it, given the consistency of the Commission's approach across preceding registrant entries. A shift toward a generally applicable licensing framework for virtual-currency trading platforms in Ontario, rather than continued bespoke relief, remains a plausible but unconfirmed alternative trajectory; nothing in the current record points decisively toward it, and the position is stated here as open rather than resolved.

Judgment: OSC continues its pre-registration-undertaking, case-by-case exemptive-relief model for crypto trading platforms, with two new registrant-list entries this cycle (CADC Reserve Trust undertaking/relief 22 Oct; VRCA-platform decision 26 Oct), consistent with Ontario's position as the most procedurally active Canadian province on crypto-platform registration. Probable
Cumulative analysis

Crypto, Digital Assets, and Financial Innovation — Cumulative Analysis

This jurisdiction file's crypto and digital-asset domain has, in the prior cycle, centred on the Cryptomus and Heleket case: a record FINTRAC administrative penalty of roughly CAD 177 million against the Russia-linked crypto payment processor Cryptomus, followed by the operator ecosystem's relaunch under the Heleket brand, preserving customer relationships including flows linked to the sanctioned exchange Garantex entirely outside a regulated environment. That case established the domain's central lesson: crypto-sector enforcement in this jurisdiction has demonstrated capability but has not yet demonstrated durability, since the underlying evasion architecture survived the largest penalty FINTRAC has issued.

This cycle shifts the domain's centre of gravity from enforcement toward regulatory-framework build-out. Canada's own Stablecoin Act, enacted via Royal Assent on March 26, 2026 but not yet in force, is the directly relevant domestic development, sitting alongside the enforcement-side Cryptomus/Heleket history as a second, framework-level track within the same domain. Globally, the US GENIUS Act rulemaking, which would classify Permitted Payment Stablecoin Issuers as BSA financial institutions, and the EU's crypto-focused sanctions-evasion and CASP-supervision build-out under the AMLA perimeter, represent parallel international tracks converging on the same regulatory question: whether stablecoin issuers should be treated as regulated financial institutions.

Integrating the enforcement history with this cycle's framework developments, the domain's state through the current cycle is one of a jurisdiction with demonstrated crypto-enforcement capacity but an as-yet-incomplete stablecoin-specific regulatory framework, moving toward completion via the Stablecoin Act's 2027 in-force date. The open question carried forward from the prior cycle — whether displaced crypto-processor infrastructure of the Cryptomus/Heleket type recurs — remains unresolved and should be read against the new stablecoin framework as it comes into force: a completed regulatory framework does not, on the evidence of the prior cycle, guarantee that enforcement against a specific entity closes the underlying evasion channel.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

federal_prudential_regime_enacted_implementing_regs_pending

OSC granted undertaking/exemptive relief to CADC Reserve Trust (22 Oct 2026) and issued a decision on an immediate-delivery VRCA trading platform (26 Oct 2026).

Periodic updates (7)
3 Nov 2026 · fim-2026-11-03

Crypto / Digital Assets / Financial Innovation

Ontario's oversight of crypto-asset trading platforms moved forward in late October 2026 through two dated registrant-table entries at the Ontario Securities Commission. The first records an undertaking and exemptive relief granted to CADC Reserve Trust, dated October 22, 2026. The second records a decision concerning an immediate-delivery virtual-currency trading platform, dated October 26, 2026. Neither entry has been traced to its underlying decision document beyond the registrant-table listing itself, so the substantive conditions attached to the relief and to the decision remain unverified at this remove; what is established is that both actions occurred, on the dates stated, within the Commission's crypto-platform registrant process.

The structural reading is that Ontario continues to regulate virtual-currency trading platforms through individually negotiated instruments rather than a single settled licensing code. Each undertaking or exemptive-relief grant functions as a bespoke rulebook for the registrant concerned, with terms that may differ materially from platform to platform. This is consistent with the Commission's established posture over preceding cycles and is read here as a continuation of that posture rather than a new departure. The judgment that this case-by-case approach remains the operative mechanism for crypto-platform oversight in the province is assessed as probable, resting on the dated registrant-table entries rather than on the full text of either order.

Framed against enablement rather than enforcement alone, the absence of any adverse enforcement action against either CADC Reserve Trust or the immediate-delivery platform is itself worth noting. Exemptive relief and undertakings are permissive instruments: they authorize continued or adjusted operation under agreed conditions rather than sanctioning past conduct. Where the Commission grants relief rather than withholding it, the practical effect is to keep the registrant within the regulated perimeter under bespoke terms, rather than excluding it. Whether those bespoke terms are materially protective or materially permissive cannot be assessed from the registrant-table listing alone, since the operative conditions have not been independently reviewed.

No parallel movement was identified in sanctions exposure, beneficial-ownership transparency, enabler-jurisdiction dynamics, conflict finance, compliance technology, broader AML or counter-terrorist-financing architecture, or general commercial-activity oversight for the province. The crypto-platform registrant activity is therefore the only dated, substantive development available for this jurisdiction in the current pass, and the brief accordingly concentrates on it rather than attempting to manufacture movement elsewhere.

Outlook

The most likely near-term path is further incremental registrant-table activity of the same kind: additional undertakings, exemptive-relief grants, or platform-specific decisions issued by the Commission on a rolling basis, continuing the case-by-case pattern rather than consolidating into a single codified regime. Should the substantive terms of either the CADC Reserve Trust undertaking or the immediate-delivery platform decision surface in a later pass, they would most plausibly confirm and particularize this structural reading rather than contradict it, given the consistency of the Commission's approach across preceding registrant entries. A shift toward a generally applicable licensing framework for virtual-currency trading platforms in Ontario, rather than continued bespoke relief, remains a plausible but unconfirmed alternative trajectory; nothing in the current record points decisively toward it, and the position is stated here as open rather than resolved.

18 Oct 2026 · fim-2026-10-18

Crypto / Digital Assets / Financial Innovation

Ontario's crypto-asset financial-integrity exposure this cycle centres on the Ontario Securities Commission's continuing administration of its registered crypto-trading-platform framework. The OSC's registered platform list shows an amended exemptive-relief decision for Coinsquare Capital Markets Ltd., operating as Bitbuy, dated October 9, 2026, issued within the Canadian Securities Administrators' enhanced pre-registration-undertaking and registration regime. That regime requires registered or pre-registration-undertaking platforms to hold client crypto assets through third-party custody, to segregate client assets from the platform's own property, and prohibits re-hypothecation of client holdings. The specific substantive content of the October 9 amendment, whether it touches custody terms, stablecoin-related terms, or is an unrelated administrative update, was not independently retrieved this cycle and remains an open point.

From a financial-integrity perspective, the custody and segregation architecture administered by the OSC functions as a structural safeguard against commingling and misappropriation risk at registered platforms, which is a standing feature of the regime rather than a new development this cycle; what is new is the specific amendment to one platform's standing exemptive relief. The broader federal AML baseline applicable to virtual-currency dealers, including the FINTRAC enrolment and reporting obligations discussed under the AML/CFT reading below, operates in parallel with, and independently of, the OSC's securities-registration and custody framework, meaning a crypto asset trading platform operating in Ontario sits under two distinct regulatory architectures simultaneously: provincial securities registration and federal AML/CFT obligation.

No CA-ON-specific stablecoin-issuance or on-chain-activity financial-integrity development was located this cycle beyond the custody and segregation framework already described.

Outlook

Whether the October 9, 2026 Coinsquare/Bitbuy amendment carries financial-integrity-relevant substance, as opposed to being a routine administrative update, remains to be confirmed and should be checked against the OSC's own decision text in subsequent reporting. The dual-track exposure of Ontario crypto asset trading platforms, under both provincial securities custody rules and federal AML obligations, is likely to remain the standing structural frame for this domain going forward.

11 Oct 2026 · fim-2026-10-11

Crypto, Digital Assets, and Financial Innovation

Canada's crypto-asset integrity architecture advanced materially this cycle on two separate instruments. The federal Stablecoin Act, enacted through Bill C-15 and granted Royal Assent on 26 March 2026, designates the Bank of Canada as the supervisor of fiat-backed stablecoin issuers. The regime is not yet operative, with implementing regulations still in development, but the choice of supervisory architecture, a central bank rather than a securities regulator or FINTRAC, is itself a structural signal about how Canada intends to treat qualifying stablecoins: as regulated payment instruments subject to prudential-style oversight rather than purely as securities or purely as a money-laundering risk vector. Separately, the Canadian Investment Regulatory Organization's Digital Asset Custody Framework, published as Guidance Note 26-0033, took effect 3 February 2026 and imposes tiered custody and segregation requirements on dealer members operating crypto-asset trading platforms. This framework exists specifically to address the custody gap exposed by prior industry failures, most notably the QuadrigaCX collapse, in which commingled and poorly controlled custody arrangements left client assets unrecoverable. From an integrity-architecture perspective, a custody framework that constrains how much of a platform's holdings can sit in internal custody versus various tiers of external custodian directly reduces the operational surface available for undetected asset diversion or commingling, which is a structural control relevant to both consumer-protection and illicit-finance risk even though CIRO's framework is not itself an AML instrument.

Architecture-over-incident framing is appropriate here: Canada has not had a major recent crypto-specific enforcement incident driving this cycle's signal. Instead, the signal is the quiet but significant build-out of structural controls, a dedicated stablecoin supervisory regime and a custody framework, that did not exist in this form previously. The absence of enforcement activity alongside this build-out should be read as a period of regime construction rather than enablement; the controls are new enough that an absence of enforcement cases is not yet informative about whether they will be applied robustly in practice.

Outlook

The Stablecoin Act's implementing regulations, expected around the first quarter of 2027, are the single most consequential forthcoming development for this domain, since they would determine whether non-prudentially-regulated issuers can actually register on the Bank of Canada's planned public registry and begin operating under the new regime. Until then, the regime remains structurally established but practically dormant for issuers outside the prudentially-regulated banking sector.

4 Oct 2026 · fim-2026-10-04

Crypto, Digital Assets, and Financial Innovation

The federal Stablecoin Act, enacted through the Budget 2025 Implementation Act (Bill C-15) and granted Royal Assent on 26 March 2026, establishes Canada's first comprehensive prudential regime for fiat-backed stablecoins, administered by the Bank of Canada. This is a Confirmed structural development: a new federal instrument with a new supervisory authority now sits alongside Ontario's existing securities-law framework for value-referenced crypto assets, which the Ontario Securities Commission and the Canadian Securities Administrators have historically treated as presumptively subject to securities regulation. The architecture-over-incident reading is that this is not a single-cycle event but the creation of a durable classification overlap: two distinct regulatory tests, a payment-instrument test under the new federal regime and a presumptive-securities test under existing provincial securities law, will now coexist for value-referenced crypto assets without a confirmed mechanism for delineating which test governs a given instrument. This is a Confirmed key judgment supported directly by the Ontario Securities Commission's own crypto-business guidance.

Layered atop this classification question is the continuing enforcement reality that the Ontario Securities Commission remains, on available evidence, the most enforcement-active Canadian provincial regulator toward unregistered crypto-asset trading platforms, illustrated by the KuCoin permanent ban and CAD 2,000,000 administrative penalty. For financial-innovation purposes, this means Ontario-facing stablecoin issuers and crypto-asset trading platforms face a dual compliance burden during the transition period: continued securities-law registration obligations under the existing CSA-harmonized framework, and an emerging, not-yet-fully-implemented federal prudential registration requirement once the Bank of Canada's implementing regulations are published. No Ontario-specific carve-out or transitional guidance resolving this overlap was located this cycle.

Outlook

The central development to watch is whether and how the Bank of Canada's forthcoming implementing regulations for the Stablecoin Act address the relationship between the new federal payment-instrument classification and Ontario's existing securities-law treatment of value-referenced crypto assets. Until implementing regulations and a commencement date are published, stablecoin issuers and crypto-asset trading platforms operating in Ontario face continuing uncertainty as to which regime, or combination of regimes, governs their activity. This overlap is likely to remain the dominant Ontario-specific financial-innovation signal in this domain for several cycles.

28 Sep 2026 · fim-2026-09-28

Crypto / Digital Assets / Financial Innovation

Ontario inherits a materially tightened federal digital-asset enforcement posture this period. FINTRAC revoked 50 MSB registrations in 2026, 47 of them crypto-linked, including 23 in a single day in March, described in press reporting as the largest single-day action of its kind. This figure is sourced at Probable confidence from secondary press corroboration; no FINTRAC primary press release confirming the exact count was retrieved this cycle, so an upgrade to Confirmed awaits that primary source.

Overlaying this federal enforcement wave, Ontario retains its own securities-law registration and exemptive-relief regime for crypto asset trading platforms, administered by the Ontario Securities Commission, which is the structurally load-bearing provincial variance for CA-ON: platforms serving Ontario residents must register with, or hold exemptive relief from, the OSC in addition to federal FINTRAC MSB registration. This structural fact is Confirmed at Tier-1 confidence directly from the OSC's own actively maintained registry page, current as of September 25, 2026. A prior OSC compliance sweep, Staff Notice 33-757 of December 10, 2024, found account-appropriateness and client-limit compliance gaps among registered restricted-dealer platforms, providing standing context for the operational compliance environment these platforms work within.

At the federal legislative level, the Stablecoin Act received Royal Assent on March 26, 2026; the Department of Finance has since begun developing supporting regulations. This is a federal instrument with no distinct Ontario variant, but once operative it will add a further Bank of Canada supervisory layer atop the existing FINTRAC and OSC requirements applicable to Ontario-facing digital-asset firms.

Outlook

The combination of the FINTRAC MSB revocation wave, the enacted-but-not-yet-effective Stablecoin Act, and the standing OSC registration overlay together point toward an escalating compliance burden for Ontario digital-asset firms across the federal and provincial layers simultaneously. Confirmation of the exact FINTRAC revocation figures against a primary FINTRAC release, and clarity on the Department of Finance's stablecoin regulation timeline, are the two developments most likely to sharpen this picture in upcoming cycles.

11 Aug 2026 · fim-2026-08-05

Crypto / Digital Assets / Financial Innovation

For Canada, the subject jurisdiction of this brief, the directly relevant digital-asset development this cycle is domestic: the Canadian Stablecoin Act, enacted via Royal Assent on March 26, 2026, is a Bank of Canada-supervised regime for fiat-backed stablecoin issuers, but it is enacted and not yet in force, with commencement expected in 2027. This places Canada in a pre-enforcement posture on stablecoin-issuer regulation, distinct from but structurally similar to the position of the United States and the EU, and the interpreter tracker for this domain frames the three jurisdictions as converging on the same substantive model, treating stablecoin issuers as regulated financial institutions, without any of the three having reached enforcement.

Globally, the comparable US development is the joint FinCEN and OFAC proposed rule under the GENIUS Act, which would classify Permitted Payment Stablecoin Issuers as financial institutions under the Bank Secrecy Act, subjecting them to customer due diligence and related BSA obligations. The comment period on this proposed rule closed June 9, 2026, and this cycle sourcing is Tier-4 only despite the underlying primary rulemaking being a matter of public record, a corroboration gap that caps confidence at Assessed. On the EU side, crypto-focused sanctions-evasion provisions and the full applicability of MiCA, including a final Netherlands transitional deadline in July 2026, form the third leg of this convergence, though EU-specific MiCA enforcement detail was not separately corroborated this cycle beyond the standing tracker characterization.

The cross-jurisdictional pattern worth foregrounding for the Canadian reader is that all three regimes, the Canadian Stablecoin Act, the US GENIUS Act rulemaking, and the EU crypto-sanctions provisions, share a common structural feature: each brings stablecoin issuance under a financial-institution compliance framework for the first time in that jurisdiction, and none has yet reached the point of actual supervisory enforcement against a live issuer. For a Canadian-domiciled or Canadian-facing stablecoin issuer, this means the compliance perimeter is set but not yet operative, and the practical obligations, reserve composition, redemption mechanics, and BSA-equivalent due diligence, remain a 2027 planning question rather than a current one.

Outlook

The commencement order and implementing regulations for the Canadian Stablecoin Act are the concrete milestone to track; until the Governor in Council issues that order, the Bank of Canada-supervised regime described this cycle remains prospective. In parallel, watch for finalization of the US GENIUS Act rulemaking following the closed comment period, and for any EU primary-source detail on crypto-sanctions-evasion enforcement that would move the EU leg of this convergence beyond standing-tracker characterization.

13 Jul 2026 · fim-2026-07-11

Crypto, Digital Assets, and Financial Innovation

Ontario is this cycle epicentre of Canadian crypto-AML enforcement, and the three findings driving that assessment are all directly Ontario- or Canada-specific rather than derived from any international framework. The record administrative penalty issued by FINTRAC, approximately CAD 177 million, against the Russia-linked payment processor Cryptomus is the largest in the history of the agency and targets a firm whose customer base included flows to Iranian exchanges. Following the penalty, however, the ecosystem of the operator relaunched under a parallel brand, Heleket, preserving customer relationships, including flows connected to the sanctioned exchange Garantex, entirely outside a regulated environment; enforcement intensity in this instance has not yet translated into closure of the underlying VASP displacement architecture.

Separately, and independently of the Cryptomus case, FINTRAC has been revoking dozens of Toronto-area money-services-business registrations following an investigation by ICIJ and the Toronto Star into unregistered storefront crypto-cash exchange operations; one shop single wallet is reported to have moved over CAD 120 million in a year without FINTRAC registration or Travel Rule compliance. This is a distinct enforcement thread from the Cryptomus case, targeting unregistered domestic cash-exchange infrastructure rather than an internationally-connected payment processor, but it reinforces the same jurisdiction-level assessment: the crypto sector of Ontario carries a documented pattern of unregistered or under-supervised activity that FINTRAC is now actively working through, storefront by storefront and processor by processor.

A third, more proactive strand of this cycle crypto findings is Project Atlas and Operation Atlantic, led by the Ontario Securities Commission and Ontario Provincial Police jointly with Chainalysis, TRM Labs, the US Secret Service and the UK National Crime Agency. These operations identified over USD 45 million in fraud schemes and froze over USD 12 million in proceeds, identifying more than 20,000 victims across the UK, Canada and the US. This is technology-enabled, multi-agency disruption activity rather than reactive licensing enforcement, and it demonstrates that the crypto-enforcement posture of Ontario includes proactive investigative capability alongside the FINTRAC registration and penalty actions described above.

Global crypto-asset regulatory frameworks provide useful comparative context for these developments but are not themselves the subject of the Ontario-specific findings this cycle; the analytical centre of gravity for the D5 assessment of this jurisdiction remains the domestic enforcement programme of FINTRAC and the cross-border operational partnerships of the OSC and OPP. Read together, the three findings show a jurisdiction where enforcement is genuinely intensifying across multiple institutional actors, FINTRAC, OSC and OPP, and multiple enforcement modes, penalty, registration revocation and fraud disruption, while the Cryptomus and Heleket sequence simultaneously demonstrates that this intensifying enforcement has not yet closed the underlying evasion architecture for at least one significant VASP.

The obligation architecture underlying the Cryptomus case is anchored in the Russian Harmful Foreign Activities Sanctions programme of OFAC under Executive Order 14024, which the control-gap coding from the interpreter marks as covered notwithstanding the displacement outcome; the obligation itself is not the weak point, the practical enforcement durability against rebranding operators is. Customer typologies most exposed across these three findings include VASP counterparties and money-services businesses in the Cryptomus and MSB-revocation cases, and retail victims in the Operation Atlantic fraud-disruption case, indicating that the crypto-AML exposure of Ontario spans both wholesale VASP-to-VASP relationships and direct retail fraud victimisation.

Outlook

The near-term crypto-enforcement question for Ontario is whether the registration-revocation programme of FINTRAC continues to expand beyond the Toronto storefronts identified so far, and whether the Cryptomus and Heleket displacement recurs with a further successor entity. The OSC and OPP cross-border fraud-disruption model, run jointly with international law-enforcement and analytics partners, appears likely to continue given its demonstrated results this cycle, though its capacity to address the structural VASP-displacement pattern documented in the Cryptomus case specifically remains untested.

D6 Compliance Technology & Active Defence

no_changeno_changestanding position

Compliance Technology and Active Defence

Ontario's compliance-technology and active-defence posture this cycle presents a structural contradiction: a federal financial-intelligence unit with a well-documented disclosure bottleneck sits alongside genuinely technology-forward, multi-agency provincial enforcement operations. The Cullen Commission, a formal public inquiry, found that FINTRAC disclosed only 2,057 of 31 million reports received nationally in 2019-20 to law enforcement, with just 355 reaching British Columbia authorities specifically. This is a capacity deficit that undermines the financial-intelligence pipeline regardless of the volume of reporting obliged entities generate; a reporting regime that captures 31 million reports but disseminates fewer than 2,100 to law enforcement nationally is not translating front-end compliance activity into proportionate downstream actionability.

Continue reading

Against this backdrop, OSC- and OPP-led Project Atlas and Operation Atlantic represent a materially different model. These cross-border operations, conducted with Chainalysis, TRM Labs, the US Secret Service and the UK National Crime Agency, deployed blockchain-analytics tooling to identify over USD 45 million in fraud schemes, freeze over USD 12 million, and identify more than 20,000 victims across the UK, Canada and the US. This is technology-enabled, proactive, multi-agency disruption rather than reactive, tick-box enforcement, and it illustrates that active-defence capability in Ontario is concentrated at the provincial and operational-partnership level rather than at the federal FIU level where the disclosure bottleneck resides.

The juxtaposition is analytically significant in its own right: it demonstrates that technology-enabled active defence and structural FIU capacity constraint are not mutually exclusive within a single jurisdiction, and that assessing a jurisdiction's compliance-technology posture requires disaggregating the federal intelligence-disclosure function from provincial and partnership-driven operational capability. A financial institution operating in Ontario benefits from proactive provincial disruption operations when its counterparties are directly targeted by fraud schemes, but cannot rely on the federal FIU to translate its own suspicious-activity reporting into law-enforcement action at anything resembling the volume of reports filed.

Outlook

The key watch item is whether FINTRAC's intelligence-disclosure capacity improves in response to the Cullen Commission's findings, and whether the OSC/OPP blockchain-analytics partnership model demonstrated in Project Atlas and Operation Atlantic is extended to additional case types beyond crypto fraud. Absent capacity investment at the federal FIU level, the structural disclosure bottleneck documented this cycle is likely to persist as a standing constraint on Ontario's overall active-defence effectiveness.

Judgment: No CA-ON-specific RegTech/compliance-technology development identified this cycle. Uncertain
Cumulative analysis

Compliance Technology and Active Defence — Cumulative Analysis

The prior cycle's most relevant compliance-technology finding was not framed under this domain label directly but described an active-defence posture worth carrying forward here: Project Atlas and Operation Atlantic, led jointly by provincial securities and police authorities together with Chainalysis, TRM Labs, the US Secret Service, and the UK National Crime Agency, identified over USD 45 million in fraud schemes and froze over USD 12 million across more than 20,000 identified victims. That finding demonstrated a genuine, technology-enabled active-defence capability operating in this jurisdiction, notably in parallel with a separately documented structural constraint on FINTRAC's own intelligence-disclosure function, where the Cullen Commission found only 2,057 of 31 million reports received nationally in 2019-20 reached law enforcement.

This cycle's compliance-technology signal is, by contrast, thin and low-confidence: a single Tier-4 vendor source describing a supervisory shift toward effectiveness-based assessment of AI-enabled AML programs, with no primary regulatory guidance retrieved to substantiate it. Integrating the two cycles, the domain's state through the current cycle shows a jurisdiction with demonstrated blockchain-forensics-enabled active-defence capacity at the law-enforcement and market-regulator level, alongside a still-unsubstantiated claim about broader supervisory direction on AI-enabled compliance-program effectiveness testing. The honest synthesis is that this domain's strongest evidence remains the active-defence tooling documented previously, not this cycle's thin regulatory-direction claim, and future cycles should prioritise closing the primary-sourcing gap on the latter before treating it as an established trend.

domain_sub_briefs · D6 · Cumulative analysis
Periodic updates (2)
6 Aug 2026 · fim-2026-08-05

Compliance Technology and Active Defence

This cycle's compliance-technology signal is deliberately thin, and that thinness is itself the finding worth stating plainly rather than papering over. Industry commentary describes a supervisory shift from control-presence to demonstrable-effectiveness expectations for AI-enabled AML programs — regulators increasingly assessing whether a program actually works rather than merely whether required controls exist on paper. This is a potentially significant framing shift if it reflects genuine regulatory direction, but this cycle's evidence for it rests on a single Tier-4 vendor source, with no primary FinCEN model-risk guidance or FCA/JMLSG text retrieved to substantiate it. The interpreter logged this explicitly as a D6 coverage gap, and confidence in the underlying judgment is Low, the lowest confidence rating recorded anywhere in this cycle's structured findings.

Honesty about the state of coverage matters more here than filling space: no enforcement action, no named regulator guidance document, and no specific technology deployment were confirmed by primary sourcing this cycle in this domain. The claim that regulatory expectations are shifting toward effectiveness testing for AI-enabled AML tools is plausible and consistent with broader regulatory trends observed in adjacent domains this cycle, such as AMLA's own move toward calibrated, risk-based direct supervision, but it should not be treated as an established fact pending better sourcing.

Outlook

The clear watch item for this domain is closing the sourcing gap: retrieving primary FinCEN model-risk management guidance or FCA/JMLSG effectiveness-testing guidance in a subsequent cycle would allow this judgment to be raised above Low confidence. Absent that, this domain should continue to be flagged as a coverage gap rather than a substantiated development.

13 Jul 2026 · fim-2026-07-11

Compliance Technology and Active Defence

The D6 posture of Ontario this cycle juxtaposes a structural finding about financial-intelligence throughput with a demonstrated case of technology-enabled active defence, and the tension between the two is the central analytical point. The Cullen Commission, a formal public inquiry, found that FINTRAC disclosed only 2,057 of the 31 million reports it received nationally in 2019-20 to law enforcement, with just 355 of those disclosures reaching British Columbia authorities. This is a capacity finding, not an incident: it describes a structural bottleneck in the financial-intelligence pipeline that persists regardless of how much reporting volume obliged entities generate upstream, and it applies nationally rather than solely to Ontario, though the status of Ontario as the largest financial centre in Canada means the reporting volume of the province disproportionately feeds a pipeline whose downstream disclosure capacity is, per this finding, structurally constrained.

Against this backdrop, Project Atlas and Operation Atlantic, led by the Ontario Securities Commission and Ontario Provincial Police, illustrate a different institutional posture. These operations, run jointly with Chainalysis, TRM Labs, the US Secret Service and the UK National Crime Agency, deployed blockchain-analytics tooling to identify over USD 45 million in fraud schemes, freeze over USD 12 million in proceeds, and identify more than 20,000 victims. This is proactive, technology-enabled, multi-agency disruption activity conducted outside the FINTRAC disclosure pipeline entirely; the OSC and OPP generated and acted on their own analytics-derived intelligence rather than relying on FINTRAC disclosures reaching them through the channel the Cullen Commission found structurally constrained.

The coexistence of these two findings is the core D6 signal for this jurisdiction: front-end reporting volume through FINTRAC is not translating into proportionate law-enforcement actionability, but this gap is not universal across the financial-integrity architecture of Ontario. Where provincial securities regulators and police services have built independent analytics capability and international partnerships, as in the Operation Atlantic case, disruption outcomes have followed. Where actionability depends on the national FIU disclosure pipeline, the findings of the Cullen Commission suggest a persistent capacity deficit. This is an uneven active-defence landscape rather than a uniformly weak or strong one, and the unevenness itself, rather than either finding in isolation, is the structural takeaway.

No obligation references were associated with either finding in the structured evidence for this cycle, reflecting the nature of both as institutional-capacity and operational findings rather than citations to a specific statutory or regulatory obligation; this is itself consistent with the focus of the D6 domain on compliance technology and active-defence posture rather than the AML, CTF and CPF obligation architecture tracked more directly under D1 through D5.

The active-defence capability demonstrated in Operation Atlantic and Project Atlas is presently oriented toward retail fraud victimisation rather than the structural gaps documented elsewhere in this baseline, such as the non-participation of Ontario in the federal beneficial-ownership registry or the Cryptomus and Heleket sanctions-evasion displacement. Blockchain-analytics tooling of the kind deployed in these operations is, in principle, well suited to detecting the on-chain red-flag indicators associated with the Cryptomus case, specifically a parallel-brand relaunch preserving sanctioned-entity-linked flows and high-volume crypto-to-fiat routing to sanctioned-jurisdiction exchanges, but the findings from this cycle do not document such tooling having yet been applied to that specific case.

Outlook

The principal D6 watch item for Ontario is whether the OSC and OPP analytics-partnership model, demonstrated in Project Atlas and Operation Atlantic, is replicated or scaled to address other typologies documented elsewhere in this baseline, including the Cryptomus and Heleket displacement pattern and the unregistered MSB storefronts. Separately, no reform to the intelligence-disclosure capacity of FINTRAC has been identified in the findings from this cycle, and the underlying finding of the Cullen Commission remains, on current evidence, unaddressed.

D7 AML/CTF Regime

no_changeno_changestanding position

AML/CTF Regime

Ontario's AML/CTF exposure operates through a dual-layer structure in which the Alcohol and Gaming Commission of Ontario's own Registrar's Standards for Internet Gaming sit alongside the federal Proceeds of Crime (Money Laundering) and Terrorist Financing Act baseline. The Registrar's Standards at section 6.02 require AML policies and procedures aligned with obligations under the PCMLTFA, and this cycle produced a concrete enforcement demonstration of that dual-layer architecture in practice: AGCO fined NorthStar Gaming C$100,000 in August 2026 for failing to apply its own enhanced due diligence obligations under Standards 6.02 and 6.03. That fine shows a registrant can fall short of AGCO's own provincial conduct standard independently of, and prior to, any separate federal FINTRAC finding, confirming that the two supervisory layers operate as genuinely distinct enforcement tracks rather than as a single combined check.

Continue reading

At the federal level, Bill C-12 received Royal Assent on March 26, 2026, inserting PCMLTFA section 11.4001 et seq and establishing a universal FINTRAC enrolment regime: every person or entity covered by section 5 of the Act must enrol with FINTRAC, with limited exceptions. As of this cycle, the enrolment provisions remain adopted but not yet in force, pending regulations to be published in the Canada Gazette, Part II, with an expected implementation window in the first quarter of 2027 on current, unconfirmed evidence. This is a governance-level expansion of federal registration scope rather than a change to the existing provincial standard already enforced against NorthStar Gaming.

Separately, the FATF grey list of jurisdictions under increased monitoring stood at 22 entries as of the FATF statement published June 19, 2026, with no confirmed outcome from the next scheduled plenary located as of this cycle's dispatch date.

Outlook

The FINTRAC universal enrolment regime is expected to transition from adopted-but-not-commenced to in-force once implementing regulations are gazetted, an event estimated for the first quarter of 2027 but not yet confirmed. Continued AGCO enforcement activity under Standards 6.02 and 6.03 should be watched as the most direct evidence of how the provincial AML conduct layer is being applied against Ontario iGaming registrants going forward.

Judgment: No CA-ON-specific variance from the federal PCMLTFA/FINTRAC AML/CTF regime identified this cycle; CA-ON has no provincial AML statute. Uncertain
Cumulative analysis

AML/CTF Regime

Bill C-12, the Strengthening Canada's Immigration System and Borders Act, received Royal Assent on March 26, 2026, delivering a material escalation of FINTRAC's statutory toolkit. The Act establishes a new administrative monetary penalty regime, a mandatory compliance agreement and compliance order regime, and a new violation category targeting reporting entities that lack a reasonably designed, risk-based and effective compliance program. This is a federal amendment to the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, inherited by Ontario reporting entities without a distinct provincial variant, and it is Confirmed at Tier-1 confidence directly from the Government of Canada's own Royal Assent announcement.

Separately, Canada's first mutual evaluation by the Financial Action Task Force since 2016 was jointly adopted with the Asia-Pacific Group on Money Laundering at the June 2026 Plenary, with formal publication expected in the fourth quarter of 2026 following Global Network quality review. Press reporting indicates that provisional ratings are likely sufficient for Canada to avoid grey-listing, though this remains unconfirmed by FATF or Finance Canada pending the report's final publication, and should be treated as Probable rather than Confirmed until that publication occurs.

Together, these two developments describe an AML/CTF regime under active reconstruction at the federal level: a strengthened domestic penalty and compliance-order architecture arriving in the same window as an external multilateral evaluation that will set Canada's Key Recommended Actions roadmap for the years following its publication.

Outlook

The fourth quarter of 2026 is the key date to track, when the FATF/APG mutual evaluation report on Canada is expected to be published, converting the June 2026 provisional plenary ratings into a citable public record. Ontario reporting entities should also watch for FINTRAC guidance operationalising Bill C-12's new AMP and compliance-order regime, which took effect upon Royal Assent but whose practical enforcement patterns have not yet been observed in a full cycle.

domain_sub_briefs · D7 · Cumulative analysis
Standing baseline position

normal_follow_up

Dual AGCO/FINTRAC AML supervision of Ontario iGaming confirmed via NorthStar Gaming EDD enforcement (C$100,000, August 2026).

Periodic updates (2)
11 Oct 2026 · fim-2026-10-11

AML/CTF Regime

Canada's AML/CTF regime received two materially significant updates this cycle. First, the FATF/APG mutual evaluation, Canada's first full evaluation since 2016, placed the country on normal follow-up status rather than the FATF grey list. The evaluation credited Canada with meaningful progress on beneficial-ownership transparency, consistent with the federal beneficial-ownership registry having been operative since January 2024, and recognised a mature overall AML/CFT architecture. At the same time, the evaluation flagged two specific weaknesses: execution of mutual legal assistance requests, and under-prosecution of complex money-laundering cases relative to Canada's own assessed risk profile. The evaluation further recorded an upgrade of Canada's compliance rating on FATF Recommendation 8, covering non-profit organisations, from Partially Compliant to Largely Compliant. Read together, these findings describe an architecture that is well-constructed on paper but whose enforcement-conversion rate, the rate at which architectural strength translates into successful prosecutions, remains a concern FATF itself has now formally recorded.

Second, and independently, amendments to the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, enacted through Bill C-12 with Royal Assent on 26 March 2026, raised FINTRAC's maximum administrative monetary penalties by up to forty times their prior limits and introduced mandatory compliance agreements and compliance orders for prescribed violations. Under the revised penalty structure, minor violations are now subject to penalties up to C$40,000, serious violations up to C$4,000,000, and very serious violations up to C$20,000,000. Reporting entities, including casinos and iGaming operators as well as the broader regulated population, must now maintain a compliance program that is reasonably designed, risk-based and effective, a governance standard whose failure now carries substantially higher financial consequences than before. The three-pillar balance point worth surfacing explicitly: this cycle's developments are heavily AML-weighted, with no corresponding CTF- or CPF-specific Canada finding reported, which is consistent with AML's generally higher enforcement-activity volume rather than necessarily reflecting an absence of CTF/CPF risk.

Outlook

FINTRAC's planned Universal Enrolment regime, expected around the first quarter of 2027, would require all PCMLTFA reporting entities to enrol with FINTRAC in a prescribed form, addressing a current gap in which most reporting-entity types face no formal registration requirement. Combined with the newly raised penalty ceilings, this would materially tighten the practical compliance perimeter for Canadian reporting entities over the coming year. Whether Canada's enforcement-conversion rate improves in response to the FATF MER's criticism, and whether FINTRAC's higher penalties translate into a materially different compliance posture among reporting entities, are the two developments most worth monitoring next.

4 Oct 2026 · fim-2026-10-04

AML/CTF Regime

Canada's FATF mutual evaluation, conducted jointly with the Asia/Pacific Group on Money Laundering, was adopted at the June 2026 plenary and published on 29 September 2026. The headline finding is that Canada avoided grey-list placement and was instead recommended for normal follow-up, an improvement from the enhanced follow-up status Canada carried since its 2016 evaluation. This is a Probable finding: no FATF primary-source document was directly retrieved this cycle, so the finding rests on two independent tier-3 secondary reports rather than FATF's own publication, which caps confidence below Confirmed. This evaluation outcome sets the AML/CTF baseline for all FINTRAC-regulated reporting entities operating in Ontario; there is no Ontario-specific carve-out from this federal evaluation, and Ontario entities experience the FATF outcome identically to reporting entities in any other province.

The evaluation outcome is not unambiguously positive. FATF reportedly flagged continuing weaknesses in Canada's administrative monetary penalty regime and in its conviction and asset-recovery outcomes track record, notwithstanding a technically strong statutory rulebook. This is the three-pillar balance point worth foregrounding here: a jurisdiction can hold a well-constructed legal framework on paper while FATF simultaneously identifies that the framework's practical enforcement outcomes, measured in penalties issued, convictions obtained, and assets recovered, lag the rulebook's apparent strength. This gap between architecture and outcome is itself the more durable signal, more significant than the headline grey-list avoidance, because it identifies where Canada's AML/CTF regime remains vulnerable to criticism in the next follow-up cycle regardless of its improved formal status.

Separately, FINTRAC universal enrolment regulations remain pending, expected around Q2 2026 pending Canada Gazette Part II publication, which would extend direct FINTRAC registration obligations to a broader class of businesses covered by the Proceeds of Crime (Money Laundering) and Terrorist Financing Act beyond the currently-captured money services businesses and casinos. As of this cycle the implementing regulations had not been published, so the precise scope and commencement date of the expanded registration population remain unconfirmed; this is recorded as a regulatory horizon item rather than a settled fact.

Outlook

The improved FATF follow-up status is likely to reduce near-term external pressure on Canada's AML/CTF regime, but the identified weaknesses in administrative monetary penalties and enforcement outcomes mean Canada will likely face continued scrutiny on practical effectiveness in subsequent FATF follow-up reporting. For FINTRAC-regulated entities in Ontario, the more immediate development to track is the publication of the universal enrolment regulations, which would materially expand the population of businesses subject to direct FINTRAC registration once finalized. Neither development currently carries an Ontario-specific dimension distinct from the federal baseline.

D8 Commercial Activity

no_changeno_changestanding position

Commercial Activity

Francisco Partners agreed to acquire Moneris Solutions, the joint venture between BMO and RBC that stands as Canada's largest merchant acquirer, for approximately C$2 billion (US$1.44 billion), announced 2 September 2026. This transaction is architecturally significant from a financial-integrity perspective independent of any enforcement history at Moneris itself: a change of control at the country's largest merchant-acquiring infrastructure provider shifts ownership of a structurally important payment-system node from two domestic systemically important banks to a private-equity acquirer. Merchant acquiring infrastructure sits at a point in the payment chain with direct visibility into transaction-level merchant activity, making ownership and governance changes at this scale relevant to the broader financial-integrity architecture even absent any specific illicit-finance allegation connected to the deal.

Continue reading

This development should be read alongside the cycle's other structural changes, the Stablecoin Act and CIRO custody framework, as part of a broader pattern of structural transition in Canada's payments and digital-asset infrastructure occurring simultaneously across traditional and crypto-native rails. The FATF MER's critique of Canada's under-prosecution of complex money laundering relative to risk is a useful lens here: as ownership of critical payment infrastructure consolidates and shifts to new entities, including private-equity ownership structures that can introduce more complex corporate layering than a bank-owned joint venture, the practical difficulty of tracing and prosecuting any future illicit use of that infrastructure could increase rather than decrease.

Outlook

The completion of the Francisco Partners acquisition of Moneris, and any conditions attached to its regulatory approval, is the near-term development to watch. Given Moneris's scale and centrality to Canadian merchant acquiring, the deal's closing terms and any ownership-transparency conditions imposed by Canadian regulators would be directly relevant to assessing whether the structural integrity of this critical payment node is preserved through the ownership change.

Judgment: No material M&A, investment or divestiture event among integrity-infrastructure firms identified for CA-ON this cycle. Uncertain
Regulatory horizon
No dated horizon items this cycle. 2 items tracked without a confirmed date.
2 pending date · baseline financial-integrity-2026-07-05
Role action cards
Compliance

OSC continues issuing dated, case-by-case undertakings and exemptive relief to crypto trading platforms rather than a settled registration code.

The compliance function faces continued individualized negotiation rather than a predictable rulebook when bringing a crypto platform into registered status in Ontario; two new registrant-table entries this period extend that pattern.

2 evidence refs
Legal

Two new OSC registrant-table entries record dated relief and a decision for crypto platforms, with underlying documents not yet reviewed.

Counsel assessing exposure for crypto-platform clients in Ontario should note that the terms of the October 22 undertaking/relief and the October 26 decision are not yet confirmed beyond the dated table entry itself.

2 evidence refs
Board

Ontario's crypto-platform supervisory approach remains case-by-case rather than code-based.

This is a structural continuity signal rather than a new risk event; governance attention is warranted only if the institution operates or counterparties with a crypto trading platform subject to OSC registration.

2 evidence refs
CTO

Two Ontario crypto trading platforms received dated OSC relief or decisions this period.

For technical infrastructure supporting crypto-asset trading platforms, continuity of case-by-case regulatory conditions implies platform-specific, rather than standardized, technical and custody requirements may continue to apply.

2 evidence refs
Risk

Crypto-platform supervisory friction in Ontario persists at an elevated, case-by-case level relative to other provinces.

Exposure concentration tied to Ontario-registered crypto trading venues should be read against a supervisory model that has not yet converged on standardized conditions, which is a structural rather than episodic risk factor.

2 evidence refs
Audit

Underlying OSC decision documents for two new registrant-table entries have not yet been reviewed in full.

Audit trail adequacy for the CADC Reserve Trust and VRCA-platform matters currently rests on registrant-table line items rather than full decision text; this is a documented evidentiary gap rather than a control failure.

2 evidence refs
Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo CA-ON-specific material this cycle.
T2 · EU AML Package / AMLAno_changeNot applicable to CA-ON this cycle.
T3 · FATF Grey Listno_changeCanada is not FATF grey-listed; no plenary movement affecting CA-ON this cycle.
T4 · Beneficial-Ownership Register Statusno_changeNo CA-ON-specific beneficial-ownership development identified this cycle.
T5 · Crypto & Digital-Asset IntegritystableOSC continued issuing dated undertakings/exemptive relief and decisions for Ontario crypto trading platforms (CADC Reserve Trust 22 Oct; VRCA-platform decision 26 Oct).
T6 · Sanctions Regime Divergenceno_changeNo CA-ON-specific sanctions-divergence development this cycle.
Registers

Enforcement actions

  • 1 Oct 2025
  • 1 Mar 2026
  • 1 Apr 2026
  • 6 Oct 2025
  • 10 Oct 2024
  • 29 May 2026
  • 5 May 2026
  • 1 Nov 2025
  • 1 Nov 2025
  • 1 Nov 2025
  • 2026-08
  • FINTRAC assessed a record penalty of almost CAD 177 million against Russia-linked crypto payment processor/exchange Cryptomus for AML/CTF compliance violations, its largest-ever penalty; the entity is appealing on grounds of lack of knowledge or control over illicit transactions. 1 Oct 2025
  • FINTRAC revoked the registrations of dozens of crypto firms (23 in one action, a dozen more shortly before) after an ICIJ/Toronto Star investigation found unregistered crypto-cash exchange shops clustered in the Toronto area. 1 Mar 2026
  • OSC and OPP co-led/co-hosted cross-border crypto-fraud disruption operations (Project Atlas, Operation Atlantic) with Chainalysis, TRM Labs, the US Secret Service and UK NCA, uncovering tens of millions in losses and freezing criminal proceeds including via Tether blacklisting of stolen USDT. 1 Apr 2026
  • The OSC brought a statement of allegations against prominent Toronto asset manager Som Seif and Purpose Investments in an unprecedented enforcement showdown with the province's top capital-markets regulator. 6 Oct 2025

Sanctions changes

  • 22 Apr 2026
  • 8 Jan 2026
  • 16 Jan 2026
  • 23 Apr 2026
  • 2 Mar 2026
  • 13 Jul 2026
  • 16 Jul 2026
  • 23 Jul 2026
  • 30 Jun 2026
  • 4 Sep 2026
  • 14 Oct 2026
  • Canada announced new Special Economic Measures (Russia) Regulations sanctions targeting Russian drone makers and approximately 100 'shadow fleet' vessels, announced by Canada's Foreign Affairs Minister alongside Ukraine's counterpart at a G7 foreign ministers meeting held in Ontario. 12 Nov 2025
  • The EU's 20th sanctions package against Russia added 120 listings (37 individuals, 83 entities) to its asset-freeze and prohibition regime. 22 Apr 2026
  • OFAC issued a Russia-related designation update coupled with removals from the SDN list, part of an ongoing pattern of relisting/delisting under Executive Order 14024 that Canadian correspondent banks and MSBs must continuously reconcile against their own SEMA screening lists. 8 Jan 2026

Regulatory horizon (register)

  • AMLA direct supervision of selected obliged entities
  • FATF/APG Mutual Evaluation Report of Canada — final publication
  • FINTRAC universal enrolment regulations
  • FINTRAC Universal Enrolment implementing regulations
  • Stablecoin Act implementing regulations
  • FINTRAC universal enrolment regime (PCMLTFA ss.11.4001-11.4015, inserted by Bill C-12)
  • Canada's FATF 5th-round Mutual Evaluation onsite assessment
  • OSFI bank crypto-asset capital/liquidity guideline implementation
  • Ontario provincial beneficial-ownership registry integration

Active schemes

  • [CRITICAL] Russia-linked VASP payment-processor sanctions/AML evasion
  • [HIGH] Toronto unregistered crypto-cash exchange laundering channel
  • [HIGH] Toronto real-estate 'snow-washing' anonymous-ownership laundering
  • [CRITICAL] Toronto-headquartered bank correspondent/retail laundering exposure
  • China-Ontario fentanyl-precursor trade-based laundering corridor
Sources
  1. Recent Actions | Office of Foreign Assets Control
  2. https://www.trmlabs.com/resources/blog/ofac-sanctions-cambodian-senator-and-scam-center-network-targeting-americans-with-digital-asset-fraud
  3. https://home.treasury.gov/news/press-releases/sb0543
  4. https://content.govdelivery.com/accounts/USTREAS/bulletins/4143aa0
  5. https://home.treasury.gov/news/press-releases/sb0545
  6. https://amlincubator.com/blog/fintrac-2026-legislative-amendments-what-canadian-msbs-fintechs-and-crypto-platforms-must-know
  7. https://www.amla.europa.eu/amla-takes-next-step-toward-2027-selection-entities-direct-supervision_en
  8. https://www.consilium.europa.eu/en/press/press-releases/2026/07/13/sudan-council-strengthens-eu-sanctions-regime-by-targeting-gold-trade/
  9. https://www.finscan.com/post/regulatory-roundup-june-2026-aml-vigilance-expanding-sanctions-and-new-rules-for-ai-crypto
  10. https://www.techtimes.com/articles/321441/20260723/eu-passes-218-russia-sanctions-targets-vessels-that-refuel-shadow-fleet-tankers.htm
  11. https://resources.fenergo.com/blogs/canadas-beneficial-ownership-evolution
  12. https://www.osc.ca/en/industry/registration-and-compliance/crypto-businesses
  13. https://www.osc.ca/en/securities-law/instruments-rules-policies/3/33-757/osc-staff-notice-33-757-review-restricted-dealer-crypto-asset-trading-platforms-compliance-account
  14. https://www.canada.ca/en/public-safety-canada/news/2026/03/legislation-that-strengthens-the-immigration-system-and-border-security-receives-royal-assent.html
  15. https://www.fatf-gafi.org/en/publications/Mutualevaluations/Mutualevaluationofcanada.html
  16. https://www.tradersdna.com/canadas-crypto-enforcement-by-the-numbers-what-50-revoked-msb-registrations-teach-us-in-2026/
  17. https://www.dlapiper.com/en-ca/insights/publications/2026/04/canada-enacts-framework-to-regulate-stablecoin-in-bill-c15
  18. Global Affairs Canada
  19. Insight Threat Intel
  20. ComplyAdvantage
  21. Fasken
  22. Ontario Securities Commission
  23. Ontario Securities Commission
  24. https://www.fatf-gafi.org/en/publications/Mutualevaluations/canada-mer-2026.html
  25. https://www.fatf-gafi.org/en/countries/detail/Canada.html
  26. https://newsletter.insightthreatintel.com/p/canada-passed-the-fatf-test-but-is
  27. https://fintrac-canafe.canada.ca/pen/3-eng
  28. https://www.nortonrosefulbright.com/en/knowledge/publications/7d87d191/new-developments-in-canadian-aml-atf-regulatory-requirements
  29. https://www.ciro.ca/newsroom/publications/ciro-issues-guidance-digital-asset-custody-crypto-asset-trading-platforms
  30. https://www.733park.com/payments-ma-deal-tracker/
  31. https://www.wealthprofessional.ca/news/industry-news/canadian-fintech-investment-nears-us1bn-in-first-half-of-2026/393371
  32. gamingcompliance.io
  33. iGaming Times
  34. Wealth Professional / Bennett Jones commentary
  35. US Department of the Treasury, OFAC
  36. Checklynx (FATF list aggregator)
  37. Youverify Sanctions Monitor
  38. Ontario Securities Commission
  39. https://www.osc.ca/sites/default/files/2026-10/20261029_oscb_4943.pdf
  40. Russia-linked Payment Processor Cryptomus Likely Behind Launch of Parallel Service Heleket | TRM Labs
  41. Canada revokes dozens of crypto firms' registrations - ICIJ
  42. READOUT: FinCEN and Partner FIU Officials Meet in Canada for International Public-Private Partnership Events on Illicit Finance | FinCEN.gov
  43. Financial Crimes Enforcement Network 71 U.S. Department of the Treasury
  44. APPENDIx E – CROSS-BORDER FUNDS TRANSFER ...
  45. Canada
  46. Mutual Evaluation of Canada
  47. READOUT: Second Annual FINTRAC-FinCEN Symposium in Washington, D.C. | FinCEN.gov
  48. Fintrac | OCCRP
  49. Enforcement Actions | FinCEN.gov
  50. Mutual Evaluations
  51. Consolidated assessment ratings
  52. Assessments
  53. The FATF Recommendations
  54. 2022 Procedures for the FATF AML/CFT/CPF Mutual Evaluations, Follow-Up and ICRG
  55. FATF Annual Report 2024-2025
  56. Consolidated Processes and Procedures for Mutual Evaluations and Follow-Up Universal Procedures
  57. FATF
  58. Housing Is a Magnet for Money Launderers in Toronto: Study - Bloomberg
  59. Canada Has a Money Laundering Problem That It's Pledging to Fix - Bloomberg
  60. NGOs Praise Canada’s New Corporate Ownership Registry | OCCRP
  61. Canada poised to create public company registry to curb financial secrecy - ICIJ
  62. Provinces pose threat to Canada’s bid to curb corporate secrecy, researchers warn - ICIJ
  63. Treasury Department won’t enforce beneficial ownership rule under the Corporate Transparency Act - ICIJ
  64. Frequently Asked Questions | FinCEN.gov
  65. Guidance on Beneficial Ownership and Transparency of Legal Arrangements
  66. BOI E-FILING - FinCEN
  67. Beneficial Ownership Information Reporting | FinCEN.gov
  68. Guidance on Beneficial Ownership of Legal Persons
  69. U.S. Beneficial Ownership Information Registry Now Accepting Reports | FinCEN.gov
  70. TD Bank hit with $3B penalty in U.S. money laundering settlement - ICIJ
  71. TD Fined Record $6.7 Million Under Canada Money-Laundering Rules - Bloomberg
  72. FinCEN Assesses Record $1.3 Billion Penalty against TD Bank | FinCEN.gov
  73. Norway Wealth Fund Puts TD Bank Under Observation for Four Years
  74. FinCEN TD Bank Consent Order, Number 2024-02
  75. The Criminal Money Laundering Scams That Cost TD Bank Billions - Bloomberg
  76. TD to Face US Growth Limits, $3 Billion Penalty for Money-Laundering Failures - Bloomberg
  77. Watch TD Pleads Guilty to Money Laundering, Fined $3B by DOJ - Bloomberg
  78. Major Canadian Banks TD and RBC Hold Mortgages for Alleged Toronto Mafia Boss | OCCRP
  79. TD Money-Laundering Fines May Reach $4 Billion, Jefferies Says - Bloomberg
  80. US, Canada Target Russia with Hundreds of Sanctions | OCCRP
  81. Sanctions Programs and Country Information | Office of Foreign Assets Control
  82. Russian Harmful Foreign Activities Sanctions | Office of Foreign Assets Control
  83. Recent Actions | Office of Foreign Assets Control
  84. Global Magnitsky Sanctions | Office of Foreign Assets Control
  85. Questions and answers on the 20th package of sanctions against Russia
  86. Russia-related Designation Update and Designation Removal | Office of Foreign Assets Control
  87. Russia-related Sanctions Programs | Office of Foreign Assets Control
  88. Canada Sanctions 14 Close to Russian Regime, Including ...
  89. Counter Terrorism Sanctions | Office of Foreign Assets Control
  90. Jurisdictions under Increased Monitoring - 13 February 2026
  91. Jurisdictions under Increased Monitoring - 13 June 2025
  92. Jurisdictions under Increased Monitoring - 19 June 2026
  93. "Black and grey" lists
  94. High-Risk Jurisdictions subject to a Call for Action - 13 February 2026
  95. High-risk and other monitored jurisdictions
  96. Jurisdictions under Increased Monitoring - 24 October 2025
  97. FATF changes its grey listing criteria to further focus on risk
  98. Financial Action Task Force Identifies Jurisdictions with Anti-Money Laundering, Combating the Financing of Terrorism, and Counter-Proliferation Finance Deficiencies | FinCEN.gov
  99. Outcomes FATF Plenary, 11-13 February 2026
  100. US and Canada Join Forces to Combat Crypto Scams - Chainalysis
  101. TRM Labs Supports Operation Atlantic: USD 12 Million Frozen and 20,000 Victims Identified in International Crackdown on Crypto Scammers | TRM Blog
  102. How Public-Private Collaboration Is Freezing Crypto Scam Proceeds
  103. Regulators Clamp Down on Crypto Non-Compliance
  104. 2025 Crypto Regulatory Round-Up
  105. Binance (BNB) Discloses Investigation by Canada’s Ontario Securities Commission - Bloomberg
  106. Som Seif, Purpose Investments Fight Ontario Securities Commission Claim - Bloomberg
  107. Crypto Sanctions: 2026 Crypto Crime Report
  108. 2026 Crypto Crime Report: Scams
  109. Canada's measures to combat money laundering and terrorist financing
  110. Money laundering and terrorist financing risks
  111. FATF report highlights evolving terrorist financing risks and warns of gaps in global understanding of the threats
  112. Report: Canada Ill-Equipped In Fight Against Money Laundering | OCCRP
  113. National money laundering and terrorist financing risk assessment
  114. Canada's progress in strengthening measures to tackle money laundering and terrorist financing
  115. Comprehensive Update on Terrorist Financing Risks FATF REPORT July 2025
  116. Financial Trend Analysis Fentanyl-Related Illicit Finance
  117. Canada’s Fentanyl Czar Seeks Chinese Help to Stop Precursors - Bloomberg
  118. Money Laundering from Fentanyl and Synthetic Opioids
  119. FATF REPORT Money Laundering from Fentanyl and Synthetic Opioids November 2022
  120. U.S. Sanctions Chinese And Canadian Entities For Deadly Fentanyl Trade | OCCRP
  121. Drugs and Darknet Markets: 2026 Crypto Crime Report
  122. Beyond Drug Trafficking: A New Federal Indictment Charges Chinese Fentanyl Suppliers with Terrorism Financing | TRM Blog
  123. E L L I P T I C R E P O R T 2 0 2 3 Following the Trail of Fentanyl Precursor
  124. FinCEN-Supplemental-Advisory-on-Fentanyl-508C.pdf
  125. FinCEN Issues Analysis of Fentanyl-Related Threat Patterns and Trends in Bank Secrecy Act Reports | FinCEN.gov
  126. Request for Administrative Ruling on the Application of FinCEN’s Regulations to a Virtual Currency Trading Platform | FinCEN.gov
  127. Special Measures | FinCEN.gov
  128. funds “Travel” rule
  129. FinCEN Proposes New Regulation to Enhance Transparency in Convertible Virtual Currency Mixing and Combat Terrorist Financing | FinCEN.gov
  130. FinCEN Notice, FIN-2025-NTC1, August 4, 2025
  131. Request for Administrative Ruling on the Application of FinCEN’s Regulations to a Virtual Currency Payment System | FinCEN.gov
  132. Crypto Regulation and Illicit Finance in Canada – White Paper | TRM Labs
  133. Exemptive Relief Order to Delay the Effective Date of the ...
  134. Application of FinCEN’s Regulations to Persons Administering, Exchanging, or Using Virtual Currencies | FinCEN.gov
  135. Beneficial Ownership Reporting Outreach and Education Toolkit | FinCEN.gov
  136. Beneficial Ownership Information Reporting Rule Fact Sheet | FinCEN.gov
  137. FinCEN Removes Beneficial Ownership Reporting Requirements for U.S. Companies and U.S. Persons, Sets New Deadlines for Foreign Companies | FinCEN.gov
  138. Beneficial Ownership Information Access and Safeguards Requirements
  139. FinCEN Issues Final Rule for Beneficial Ownership Reporting to Support Law Enforcement Efforts, Counter Illicit Finance, and Increase Transparency | FinCEN.gov
  140. Interim Final Rule: Questions and Answers | FinCEN.gov
  141. Global Affairs Canada | OCCRP
  142. Canada Sanctions Russian Drone Makers, ‘Shadow Fleet’ Vessels - Bloomberg
  143. Ukraine-/Russia-related Sanctions | Office of Foreign Assets Control
  144. Russian Harmful Foreign Activities Sanctions
  145. Timeline - EU sanctions against Russia - Consilium
  146. FinCEN Issues Final Rule Regarding Access to Beneficial Ownership Information | FinCEN.gov
  147. Strategy guidance note on beneficial ownership registries
  148. Fact Sheet: Beneficial Ownership Information Access and Safeguards Notice of Proposed Rulemaking (NPRM) | FinCEN.gov
  149. Guidance on Transparency and Beneficial Ownership
  150. OSC Investments Capital Pte Ltd - Company Profile and News - Bloomberg Markets
  151. Navigating the sustainable finance regulatory agenda: Focus on Canada | Insights | Bloomberg Professional Services
  152. All Investigations | OCCRP
  153. Organized Crime and Corruption Reporting Project | OCCRP
  154. Russia-related Designations; Issuance of Russia-related General Licenses and new and amended Frequently Asked Questions | Office of Foreign Assets Control
  155. OCCRP Under Attack | OCCRP
  156. Venture capital firm hit with $216 million penalty for ‘egregious’ violations of US sanctions against Russian billionaire - ICIJ
  157. U.S. DEPARTMENT OF THE TREASURY OFFICE OF FOREIGN ASSETS CONTROL
  158. Government of Canada, Department of Finance
  159. FATF
  160. FATF
  161. FATF
  162. FinCEN (US Treasury)
  163. FinCEN (US Treasury)
  164. TRM Labs
  165. ICIJ / Toronto Star
  166. OCCRP
  167. OCCRP
  168. Bloomberg
  169. Bloomberg
  170. TRM Labs
  171. OCCRP
  172. Council of the European Union
  173. OFAC (US Treasury)
  174. TRM Labs
  175. Ontario Securities Commission
  176. ICIJ
Coverage gaps
fim-int-2026-07-07-G001: No direct FINTRAC first-party press…
fim-int-2026-07-07-G001: No direct FINTRAC first-party press release or administrative-monetary-penalty notice retrieved to confirm the precise Cryptomus penalty figure and underlying findings. [resolved]
fim-int-2026-07-07-G002: No confirmed date established for t…
fim-int-2026-07-07-G002: No confirmed date established for the OCCRP-reported TD Bank/RBC mortgage-financing-for-alleged-organised-crime-figure claim. [resolved]
fim-int-2026-07-07-G003: No Ontario Business Registry primar…
fim-int-2026-07-07-G003: No Ontario Business Registry primary-source documentation retrieved on the province's non-participation in the federal beneficial-ownership registry; reliance rests on secondary NGO/ICIJ reporting. [resolved]
fim-int-2026-07-07-G004: Canada's FATF 5th-round Mutual Eval…
fim-int-2026-07-07-G004: Canada's FATF 5th-round Mutual Evaluation onsite assessment date remains unconfirmed from FATF's own assessment calendar. [resolved]
fim-int-2026-07-07-G005: No T1 primary regulatory source loc…
fim-int-2026-07-07-G005: No T1 primary regulatory source located for OSC/OPP Operation Atlantic financial figures; current corroboration rests on T3 vendor analytics (TRM Labs, Chainalysis) only. [resolved]
fim-int-2026-07-14-G001: No Cambodia (KH)-specific AML/CFT/T…
fim-int-2026-07-14-G001: No Cambodia (KH)-specific AML/CFT/TBML development located this cycle despite the Tier D discipline check. [resolved]
fim-int-2026-07-14-G002: No Colombia (CO)-specific developme…
fim-int-2026-07-14-G002: No Colombia (CO)-specific development located this cycle beyond the generic BMPE corridor note. [resolved]
fim-int-2026-07-14-G003: No fresh Mexico (MX)-specific enfor…
fim-int-2026-07-14-G003: No fresh Mexico (MX)-specific enforcement or typology update surfaced this cycle; the BMPE description is structural/historical only. [resolved]
fim-int-2026-07-14-G004: No CA-ON/Canada-specific RegTech or…
fim-int-2026-07-14-G004: No CA-ON/Canada-specific RegTech or AI transaction-monitoring guidance surfaced this cycle; the UAE finding was used as the closest global proxy signal. [resolved]
fim-int-2026-07-14-G005: Enabler-jurisdiction (D3) findings …
fim-int-2026-07-14-G005: Enabler-jurisdiction (D3) findings were folded into D2/D5 rather than analyzed as a standalone D3 development this cycle. [resolved]
fim-int-2026-07-14-G006: No closed-enum obligation_refs.fram…
fim-int-2026-07-14-G006: No closed-enum obligation_refs.framework value exists for Canada's PCMLTFA/CBCA instruments; obligation citations were retained in claim notes rather than fabricating an out-of-enum framework tag. [resolved]
fim-int-2026-08-05-G001: No primary FinCEN model-risk guidan…
fim-int-2026-08-05-G001: No primary FinCEN model-risk guidance or FCA/JMLSG update text was retrieved to substantiate the D6 effectiveness-based-supervision shift beyond a single Tier-4 vendor source. [resolved]
fim-int-2026-08-05-G002: No Canada National Risk Assessment …
fim-int-2026-08-05-G002: No Canada National Risk Assessment (NRA) primary text was retrieved this cycle to corroborate the standing Canada risk baseline. [resolved]
fim-int-2026-08-05-G003: No T1 UN Panel of Experts (Yemen) /…
fim-int-2026-08-05-G003: No T1 UN Panel of Experts (Yemen) / OFSI-specific Houthi-linked designation check was performed this cycle. [resolved]
fim-int-2026-08-05-G004: Canada (CA) jurisdiction row rests …
fim-int-2026-08-05-G004: Canada (CA) jurisdiction row rests on Tier-4-only corroboration (AML Incubator, Outlier Solutions); no direct FINTRAC.gc.ca primary text retrieved, so the jurisdiction source floor is not met for CA this cycle. [resolved]
fim-int-2026-09-28-G001: D1 (Sanctions Architecture) was not…
fim-int-2026-09-28-G001: D1 (Sanctions Architecture) was not actively researched for CA-ON this cycle; no CA-ON-specific sanctions vector was assessed. [resolved]
fim-int-2026-09-28-G002: D2 (Beneficial Ownership) and the f…
fim-int-2026-09-28-G002: D2 (Beneficial Ownership) and the federal ISED beneficial-ownership registry status were not researched this cycle for CA-ON. [resolved]
fim-int-2026-09-28-G003: The FINTRAC MSB revocation wave fig…
fim-int-2026-09-28-G003: The FINTRAC MSB revocation wave figure (50 registrations, 47 crypto-linked) lacks a retrieved FINTRAC primary press release; a T1 FINTRAC source would upgrade confidence from Probable to Confirmed. [resolved]
fim-int-2026-09-28-G004: The Tier D watch jurisdictions (KH,…
fim-int-2026-09-28-G004: The Tier D watch jurisdictions (KH, LA, MX, CO) were not reached this cycle. [resolved]
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No Ontario-specific corporate beneficial-ownership registry effectiveness finding was located this cycle; no federal ISED or Ontario registry primary source was reached. [resolved]
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G002 ({'scheme': 'financial_integrity', 'value': 'D4'}): No Ontario-specific conflict-finance finding was located this cycle. [resolved]
fim-int-2026-10-04-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G003 ({'scheme': 'financial_integrity', 'value': 'D6'}): Compliance technology and active-defence (D6) developments were not substantively researched this cycle for CA-ON. [resolved]
fim-int-2026-10-04-G004: Tier-D watch jurisdictions (KH, LA,…
fim-int-2026-10-04-G004: Tier-D watch jurisdictions (KH, LA, MX, CO) were not actively searched this cycle due to pooled web-search budget allocation to CA-ON priorities. [resolved]
fim-int-2026-10-04-G005 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-04-G005 ({'scheme': 'financial_integrity', 'value': 'D7'}): FATF's own primary-source mutual evaluation report/press release was not directly retrieved this cycle; the finding rests on two independent T3 secondary reports, capping confidence at Probable. [resolved]
fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', 'value': 'D3'}): No material Canada-specific finding this cycle for D3 (enabler jurisdictions) and D4 (conflict finance) beyond the FATF MER's general mention of professional ML intermediaries. [resolved]
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', 'value': 'D6'}): No fresh D6 (compliance technology) Canada-specific guidance located this cycle. [resolved]
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): Tier D jurisdictions (KH, MX, CO) carried no dedicated country-specific search this cycle given pooled-budget constraints shared across five consumer products. [resolved]
fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G002 ({'scheme': 'financial_integrity', 'value': 'D6'}): D6 compliance-technology gap between FINTRAC's new 'effective' compliance-program standard and documented AI/ML transaction-monitoring practice among CA-ON reporting entities remains unassessed. [resolved]
fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-18-G003 ({'scheme': 'financial_integrity', 'value': 'D1'}): Confirmation via the Canada Gazette consolidated SEMA Venezuela list of whether Canada's listing of Rodriguez Gomez in fact remains unchanged was not independently verified this cycle; the comparative claim rests on a T4 aggregator only. [resolved]
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D5'}): OSC decision documents underlying the CADC Reserve Trust undertaking/relief and the VRCA-platform decision were not independently opened this cycle; only the registrant-table line items were seen. [open]
fim-int-2026-11-01-G002: D1-D4 and D6-D7 were not actively r…
fim-int-2026-11-01-G002: D1-D4 and D6-D7 were not actively researched for CA-ON-specific material this cycle beyond general-knowledge continuity; this dispatch is scope-bound to CA-ON alone. [open]
FIM-GAP-001 (D3): Legal counsel, law firms, and (at the nati…
FIM-GAP-001 (D3): Legal counsel, law firms, and (at the national level) Quebec notaries remain outside AML/CFT preventive obligations following a Supreme Court ruling declaring such measures inoperative for the legal profession.
FIM-GAP-002 (D6): FINTRAC's intelligence-disclosure function…
FIM-GAP-002 (D6): FINTRAC's intelligence-disclosure function is structurally limited: the Cullen Commission found FINTRAC disclosed only 2,057 of 31 million reports received nationally in 2019-20 to law enforcement, with just 355 reaching British Columbia authorities.
FIM-GAP-003 (D2): Ontario has not committed its provincial c…
FIM-GAP-003 (D2): Ontario has not committed its provincial corporate registry to feed beneficial-ownership data into the federal CBCA public BO registry, leaving most Ontario-incorporated (as distinct from federally incorporated) entities outside beneficial-ownership transparency reform.
FIM-GAP-004 (D2): Persistent under-enforcement of anonymous …
FIM-GAP-004 (D2): Persistent under-enforcement of anonymous corporate ownership in Toronto-area real estate ('snow-washing'), estimated by civil-society coalitions to launder tens of billions of Canadian dollars annually through the economy.
FIM-GAP-005 (D5): No direct FINTRAC first-party press releas…
FIM-GAP-005 (D5): No direct FINTRAC first-party press release could be retrieved during this research pass to confirm the precise Cryptomus penalty figure and its underlying findings; corroboration currently rests on a T3 vendor analytics report (TRM Labs) and T2 ICIJ/Star reporting.

Evidence

Confidence-tiered claims

normal follow-up (improved from enhanced follow-up since 2016 evaluation) [Source 1]
Probable · 1 source
8 individuals added to Schedule 1 of the Special Economic Measures (Russia) Regulations [Source 1]
Probable · 1 source
Most enforcement-active Canadian province on unregistered crypto-asset trading platforms (KuCoin permanent ban + CAD 2,000,000 AMP) [Source 1]
Probable · 1 source
Stablecoin Act (via Budget 2025 Implementation Act, Bill C-15) received Royal Assent 2026-03-26, creating a Bank-of-Canada-administered prudential stablecoin regime [Source 1]
Probable · 1 source
FATF flagged continuing weaknesses in Canada's administrative monetary penalty regime and conviction/outcomes track record despite a technically strong rulebook [Source 1]
Probable · 1 source
normal follow-up; not grey-listed [Source 1]
Probable · 1 source
FINTRAC maximum administrative monetary penalties raised up to 40x prior limits; mandatory compliance agreements and compliance orders introduced [Source 1]
Probable · 1 source
Enacted (Royal Assent 26 March 2026), Bank of Canada designated supervisor of fiat-backed stablecoin issuers; not yet operative pending implementing regulations [Source 1]
Probable · 1 source
Digital Asset Custody Framework (Guidance Note 26-0033), effective 3 Feb 2026, sets tiered custody/segregation requirements on dealer members operating crypto-asset trading platforms [Source 1]
Probable · 1 source
Francisco Partners agreed to acquire Moneris Solutions (BMO/RBC joint venture, Canada's largest merchant acquirer) for approximately C$2bn (US$1.44bn), announced 2 Sept 2026 [Source 1]
Probable · 1 source
C$100,000 fine for failing to apply its own enhanced due diligence obligations under Registrar's Standards ss.6.02/6.03 [Source 1]
Probable · 1 source
Universal FINTRAC enrolment regime inserted by Bill C-12 (Royal Assent March 26, 2026) remains adopted but not yet in force pending Canada Gazette Part II regulations [Source 1]
Probable · 1 source
Removed from OFAC SDN list Oct 14, 2026 with no stated reason; Canada's SEMA Venezuela Regulations listing reportedly remains in place [Source 1]
Probable · 1 source
OSC amended exemptive-relief decision dated October 9, 2026, within CSA's enhanced pre-registration-undertaking/registration custody/segregation framework [Source 1]
Probable · 1 source
22 jurisdictions as of the FATF statement published June 19, 2026 [Source 1]
Probable · 1 source
Standards at s.6.02 require AML policies and procedures aligned with PCMLTFA obligations [Source 1]
Probable · 1 source
Ontario Securities Commission, Oct 22, 2026 [Source 1]
Probable · 1 source
2026-10-26 [Source 1]
Uncertain · 1 source
OSC's published registrant list records a new undertaking and exemptive relief dated October 22, 2026 for CADC Reserve Trust concerning CADC tokens. [Source 1]
Probable · 1 source
The OSC's crypto-businesses registrant page records a decision dated October 26, 2026 for an immediate-delivery value-referenced-crypto-asset trading platform. [Source 1]
Uncertain · 1 source