FATF Mutual Evaluation Validates Canada's AML Regime; Ottawa and FINTRAC Build on Existing Reforms With New Enforcement Data and Resource Expansion

The Financial Action Task Force (FATF) has placed Canada in its top-tier "regular follow-up" category, and FINTRAC has responded with a record $247 million enforcement year and a 60% supervisory budget increase, building on reforms Ottawa already had underway, including the incoming Financial Crimes Agency and a proposed crypto ATM ban.

A. Executive Summary

On September 29, 2026, the Financial Action Task Force (FATF) published its fourth-round mutual evaluation report of Canada, placing the country in "regular follow-up," the most favorable rating tier available under the FATF global framework. The outcome will come as a genuine relief to Ottawa: concerns about a harsher result, including the possibility of "grey-listing," had circulated since TD Bank's 2024 guilty plea in the United States to conspiracy to commit money laundering and failing to maintain an effective AML program, a case that resulted in more than US$3 billion in penalties and several subsequent prosecutions of former employees.

While the evaluation recognizes significant improvements over Canada's 2016 audit, it establishes high-priority expectations to remediate persistent vulnerabilities in corporate beneficial ownership transparency, the prosecution of complex money laundering schemes, and, notably, the continued absence of lawyers from Canada's core AML/CFT reporting framework. For Chief Anti-Money Laundering Officers (CAMLOs), general counsel, and compliance executives across federally regulated financial institutions (FRFIs), money services businesses (MSBs), and fintech platforms, this positive international grade does not signal regulatory relaxation. FINTRAC has met the evaluation with a historic enforcement year and a confirmed 60% ($37 million) supervisory resource surge, layered on top of legislative and enforcement initiatives Ottawa has been advancing since earlier in 2026.

Want weekly regulatory updates delivered straight to your inbox? Subscribe to the Reg Compliance Hub here.

B. What Happened

On September 29, 2026, the FATF released its mutual evaluation assessing Canada's technical compliance and institutional effectiveness in combating money laundering and terrorist financing (AML/ATF). In its effectiveness ratings across 11 Immediate Outcomes, the FATF rated Canada "substantial" in six categories and "moderate" in five, with zero outcomes rated "low," a measurable improvement compared to the deficiencies identified in Canada's 2016 evaluation.

Notwithstanding the "regular follow-up" designation, the FATF outlined critical priority recommendations for Canada:

• Accelerating the implementation of a comprehensive, pan-Canadian corporate beneficial ownership transparency framework, citing "uneven implementation" across provinces and territories that is affecting its practical use.
  
  
• Prioritizing the operational investigation and prosecution of complex professional money laundering networks and standalone laundering offenses, which the FATF described as high-value and sophisticated but difficult to prove under current capacity.
  
  
• Bringing the legal profession within Canada's core AML/CFT framework. The FATF specifically noted that lawyers "remain outside" the main reporting regime and are not required to file suspicious transaction reports, which it said limits FINTRAC's visibility into higher-risk activity involving legal structures, trusts, real estate, and corporate transactions.
  
  
• Remediating procedural delays and timeliness gaps in international mutual legal assistance and cross-border asset recovery mechanisms.
  
  In practice: the lawyers' gap is worth flagging specifically for a legal-sector readership. Unlike banks, MSBs, and most other regulated sectors, law firms currently have no obligation to file suspicious transaction reports with FINTRAC, even where they're handling the kind of trust, real estate, or corporate structuring work the FATF flagged as a known laundering vector. Firms should expect this to be an active policy conversation going forward, independent of anything affecting financial institutions directly.

It's worth situating this evaluation within a broader set of reforms Ottawa has been rolling out over the course of 2026, several of which predate this FATF report by months and should be understood as reinforced by it rather than newly announced because of it:

• Financial Crimes Agency (FCA): Legislation to establish the FCA, Canada's first dedicated federal enforcement agency for investigating and prosecuting complex financial crimes, was tabled as Bill C-29 on April 27, 2026, and had reached second reading in the House of Commons by May 2026. Unlike FINTRAC, which functions as a financial intelligence unit without arrest or prosecution powers, the FCA is intended to investigate and pursue recovery of illicit proceeds directly.
  
  
• Crypto ATM Restraints: A proposed statutory ban on cryptocurrency automated teller machines was first announced in the government's Spring Economic Update on April 28, 2026, in response to FINTRAC analysis identifying crypto ATMs as a primary conduit for scam proceeds and illicit cash layering. The ban does not extend to cryptocurrency more broadly.
  
  
• Supervisory and Penalty Modernization: The Strengthening Canada's Immigration System and Borders Act (Bill C-12) received royal assent March 26, 2026, expanding FINTRAC's information-sharing authorities under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and substantially increasing the maximum administrative and criminal penalties available under the Act.
  
  
• Public-Private Operational Alliances: The Countering Extortion Partnership between major financial institutions, federal agencies including FINTRAC and OSFI, and law enforcement was launched February 20, 2026, and continues to expand.

Simultaneously, and more directly tied to the FATF evaluation itself, FINTRAC published annual operational metrics and supervisory projections confirming an unprecedented enforcement posture. In fiscal year 2025/26, FINTRAC issued 35 Notices of Violation, a 52% year-over-year increase from the 23 notices issued the prior year, totaling more than $247 million in administrative monetary penalties (AMPs), the highest annual enforcement recovery in the agency's history. In its own public statement responding to the FATF evaluation, FINTRAC confirmed it is expanding its supervisory-related resources by $37 million, a 60% increase, over the next two years, to deepen examination coverage across the approximately 38,000 entities regulated under the Act.

(Official Source: FATF Mutual Evaluation Report of Canada, September 29, 2026 / Department of Finance Canada Statement / FINTRAC Statement, September 29, 2026)

Want weekly regulatory updates delivered straight to your inbox? Subscribe to the Reg Compliance Hub here.

C. Why It Matters for Legal & Compliance

This regulatory package directly impacts corporate legal counsel, financial crime advisory teams, and compliance operations across Canada's financial sector. Three points stand out:

1. Supervisory exam frequency and rigor are increasing from an acknowledged low base.

FINTRAC's 60% resource injection translates into larger exam teams, more frequent on-site and virtual compliance assessments, and shorter turnaround times for deficiency notices. This matters because the FATF itself found real gaps in current coverage: the report noted that the inherent risk profile of approximately 79% of financial institutions and virtual asset service providers has not been individually assessed under FINTRAC's own risk model, and that examination periods for very-high-risk institutions are not sufficiently frequent relative to their risk.

In practice: the era of multi-year intervals between FINTRAC supervisory reviews is ending for mid-sized dealers, MSBs, and payment service providers, not because FINTRAC has decided to be more aggressive for its own sake, but because the FATF specifically documented how thin that coverage currently is.

2. Beneficial ownership scrutiny will intensify, and so will attention to who's exempt from reporting entirely.

With the FATF specifically flagging corporate transparency as an unfinished mandate, federal and provincial authorities will accelerate integration between corporate registries and reporting entity intake workflows. Financial institutions will face heightened regulatory scrutiny regarding their verification methods for non-individual account holders and opaque multi-tiered ownership structures. Separately, the legal profession's continued exclusion from AML reporting obligations means that institutions should not assume a counterparty's use of a law firm as an intermediary provides the same transparency a regulated reporting entity would.

In practice: a client relationship structured through legal counsel, such as funds held in a lawyer's trust account, currently sits outside the reporting net that applies to banks and MSBs. That gap is squarely on the FATF's radar now, and institutions relying on legal intermediaries as part of their own due diligence chain should treat that reliance as a known limitation, not a substitute for independent verification.

3. Several enforcement and legislative initiatives are converging, not launching fresh.

The formal establishment of the Financial Crimes Agency, the proposed crypto ATM ban, and the expanded information-sharing and penalty regime under Bill C-12 were all already underway before this evaluation was published. Institutions should expect their convergence, rather than their novelty, to define the next phase: the FCA bridging historical gaps between FINTRAC intelligence disclosures and RCMP or provincial prosecutions, and digital asset platforms facing intensified transaction monitoring expectations around wallet provenance and unhosted counterparty exposure as the crypto ATM ban moves through the legislative process.

In practice: none of these initiatives is a surprise response to this specific report. They reflect a direction Ottawa set earlier in 2026. What the FATF evaluation adds is external validation that this direction is the right one, which increases the political and institutional pressure to see each initiative through to completion rather than let any of them stall.

Compliance & Risk Insight: The "Favorable Rating" Enforcement Trap

The primary strategic trap for compliance leaders is treating the FATF's "regular follow-up" status as an endorsement to deprioritize AML risk. In international regulatory politics, a strong evaluation result does not signal bureaucratic leniency; it validates the regulator's enforcement strategy and tends to accelerate, rather than relax, the pace of supervisory change.

FINTRAC's record $247 million penalty output and 52% increase in violation notices in 2025/26 demonstrate that the agency has moved decisively from a technical advisor role toward a punitive enforcement authority. The $37 million resource surge will be deployed specifically to address the five areas where FATF rated Canada as merely "moderate," including the operational detection of complex professional money launderers. CAMLOs should expect FINTRAC examiners to approach upcoming audit cycles with intensified scrutiny on Suspicious Transaction Report (STR) quality, corporate transparency controls, and the practical effectiveness of automated monitoring systems.

In practice: a "pass" on an international evaluation is, counterintuitively, often the moment domestic enforcement gets tougher, not easier. The international validation gives the regulator more political cover and more resources to act on exactly the gaps that evaluation identified.

Want weekly regulatory updates delivered straight to your inbox? Subscribe to the Reg Compliance Hub here.

D. Action Items for Organizations

• Prepare for Increased Supervisory Cadence: Conduct internal readiness assessments across compliance documentation, two-year effectiveness reviews, and senior-officer-approved AML policies in anticipation of unannounced or expedited FINTRAC examination notices.
  
  
• Stress-Test Beneficial Ownership Collection Controls: Review onboarding and Customer Due Diligence (CDD) procedures to ensure beneficial ownership collection meets the highest threshold of independent verification, closing data gaps across complex corporate hierarchies ahead of pan-Canadian registry integration.
  
  
• Reassess Reliance on Legal Intermediaries: Where client relationships or transactions involve a law firm as an intermediary, confirm that internal due diligence does not assume reporting-entity-level transparency from that relationship, given lawyers' continued exclusion from AML reporting obligations.
  
  
• Audit Cash-to-Crypto and MSB Counterparty Exposures: Financial institutions and clearing banks should perform an exposure audit on customer accounts operating cash-to-digital-asset kiosks or providing intermediary payment rail services to crypto ATM networks, in anticipation of the proposed federal ban.
  
  
• Upgrade Complex Case Escalation Protocols: Calibrate transaction monitoring scenarios to detect sophisticated trade-based laundering, nominee corporate directors, and third-party fund pooling, ensuring internal investigative files are structured to support complex financial crime inquiries.
  
  
• Track Legislative Milestones Directly: Monitor the progress of Bill C-29 (the Financial Crimes Agency Act) and the implementation of Bill C-12's expanded supervisory and penalty powers, treating each as an active, ongoing legislative process rather than a settled outcome, so enterprise risk management models stay current as each measure advances.

Want weekly regulatory updates delivered straight to your inbox? Subscribe to the Reg Compliance Hub here.

Disclaimer: This article does not constitute legal advice. Readers should seek legal or tax advice from their professional advisers regarding their specific regulatory and legal obligations.