Assurance of data protection and resumption of online systems
From: Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
On this page:
- Assurance of data protection
- Availability of online systems
- Interim measures to identify and report transactions Added on May 17, 2024
Assurance of data protection
Following extensive forensic analysis and due diligence, FINTRAC found no evidence that information was lost or that data was removed through a cyber incident on March 2, 2024.
During the incident, FINTRAC, the Canadian Centre for Cyber Security, Shared Services Canada and the Treasury Board of Canada Secretariat worked diligently to contain, investigate and mitigate the impact of this incident, ensure that affected environments were isolated, and that the right security precautions and measures are in place to protect data.
There has been extensive consultation with the Canadian Centre for Cyber Security, which has validated that FINTRAC's security controls are up-to-date and robust, in alignment with the Treasury Board of Canada Secretariat policy framework.
Availability of online systems
FINTRAC understands the critical nature of the services it provides and has assessed that it is safe to reconnect to its systems in accordance with the channels, instructions and guidance that will be provided on its website. FINTRAC has taken every precaution to maintain the integrity and security of its systems, and ensure that they continue to remain robust and resilient as FINTRAC continues to modernize its technology infrastructure.
API report submission is available for entities that submit higher volumes of Suspicious Transaction Reports, Large Cash Transaction Reports, Large Virtual Currency Reports, Electronic Funds Transfer Reports and Casino Disbursement Reports. Consult: FINTRAC API report submission.
The FINTRAC Web Reporting System is available for current users to submit Suspicious Transaction Reports, Electronic Funds Transfer Reports and Large Cash Transaction Reports.
For information on the upcoming availability of new online systems, consult: Implementing online systems
Interim measures to identify and report transactions
As FINTRAC works to resume its full range of operations, businesses are reminded that they must continue to identify and document all reportable transactions and be prepared to file them once systems are back online.
I report transactions through API report submission.
API report submission is available for entities that submit higher volumes of Suspicious Transaction Reports, Large Cash Transaction Reports, Large Virtual Currency Reports, Electronic Funds Transfer Reports and Casino Disbursement Reports. Consult: FINTRAC API report submission.
FINTRAC has provided instructions for entities to submit reports they have been identifying for submission since March 2, 2024, that are based on previous legislative requirements (Generation 1 reports). Consult: Upload batch files (Generation 1 reports)
I’m awaiting access to the FINTRAC Web Reporting System and I need to submit a priority Suspicious Transaction Report.
Priority suspicious transaction reports are on transactions or attempted transactions that are related to one of the following situations:
- the commission or attempted commission of a terrorist activity financing offence. Consult relevant indicators: Operational alert: Terrorist activity financing
- direct law enforcement involvement
- suspicions of online sexual exploitation of children for profit or for the generation of child sexual exploitation material for profit. Consult relevant indicators: Operational alert: Laundering of proceeds from online child sexual exploitation
- the trafficking of an underage individual. Consult relevant indicators: Updated Indicators: Laundering of proceeds from human trafficking for sexual exploitation. At this time, FINTRAC asks that these Suspicious Transaction Reports only be submitted if they relate to the trafficking of minors.
How to submit a priority Suspicious Transaction Report
If your organization has identified a priority suspicious transaction report meeting one of the requirements above, please contact us for additional information on how to submit this report to FINTRAC.
- Email: STR-DOD@fintrac-canafe.gc.ca
- Telephone: 1-866-346-8722 (toll free)
I report transactions through the FINTRAC Web Reporting System or through batch transmission software.
FINTRAC is encouraging entities that report higher volumes of reports and have API capabilities to test and transition to FINTRAC API report submission. The batch transmission software (CloudMask) has now been decommissioned and is no longer available for reporting.
Entities that report lower volumes of transactions and currently have access to the FINTRAC Web Reporting System are able to report Suspicious Transaction Reports and Electronic Funds Transfer Reports using the modernized reporting form (i.e., Generation 2 reports). Consult: Use the FINTRAC Web Reporting System
Current FINTRAC Web Reporting System users can also submit Suspicious Transactions Reports, Electronic Funds Transfer Reports and Large Cash Transaction Reports they have been identifying for submission since March 2, 2024, that are based on previous legislative requirements (i.e., Generation 1 reports). Consult: Upload batch files (Generation 1 reports)
I need to register my money services business.
If you are a money services business or foreign money services business seeking to register with FINTRAC, please submit a request via the Web form: Pre-registration request for money services business or foreign money services business. To find out more information about registering your business, consult: Register your money services business (MSB) or your foreign money services business (FMSB).
If you are a money services business or foreign money services business seeking to renew your registration, update your registration information or cancel your registration, please submit a request via the Web form: Request money services business or foreign money services business registration updates.
- Date Modified: