Language selection

Government of Canada / Gouvernement du Canada

Search

Assurance of data protection and resumption of online systems

From: Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)

On this page:

Assurance of data protection

Following extensive forensic analysis and due diligence, FINTRAC found no evidence that information was lost or that data was removed through a cyber incident on March 2, 2024.

During the incident, FINTRAC, the Canadian Centre for Cyber Security, Shared Services Canada and the Treasury Board of Canada Secretariat worked diligently to contain, investigate and mitigate the impact of this incident, ensure that affected environments were isolated, and that the right security precautions and measures are in place to protect data.

There has been extensive consultation with the Canadian Centre for Cyber Security, which has validated that FINTRAC's security controls are up-to-date and robust, in alignment with the Treasury Board of Canada Secretariat policy framework.

Availability of online systems

FINTRAC understands the critical nature of the services it provides and has assessed that it is safe to reconnect to its systems in accordance with the channels, instructions and guidance that will be provided on its website. FINTRAC has taken every precaution to maintain the integrity and security of its systems, and ensure that they continue to remain robust and resilient as FINTRAC continues to modernize its technology infrastructure.

API report submission is available for entities that submit higher volumes of Suspicious Transaction Reports, Large Cash Transaction Reports, Large Virtual Currency Reports, Electronic Funds Transfer Reports and Casino Disbursement Reports. Consult: FINTRAC API report submission.

The FINTRAC Web Reporting System is available for current users to submit Suspicious Transaction Reports, Electronic Funds Transfer Reports, Large Cash Transaction Reports, Casino Disbursement Reports and Large Virtual Currency Transaction Reports.

For information on the upcoming availability of new online systems, consult: Implementing online systems

Interim measures to identify and report transactions

As FINTRAC works to resume its full range of operations, businesses are reminded that they must continue to identify and document all reportable transactions and be prepared to file them once systems are back online.

I report transactions through API report submission.

API report submission is available for entities that submit higher volumes of Suspicious Transaction Reports, Large Cash Transaction Reports, Large Virtual Currency Reports, Electronic Funds Transfer Reports and Casino Disbursement Reports. Consult: FINTRAC API report submission.

FINTRAC has provided instructions for entities to submit reports they have been identifying for submission since March 2, 2024, that are based on previous legislative requirements (Generation 1 reports). Consult: Upload batch files (Generation 1 reports)

I’m awaiting access to the FINTRAC Web Reporting System and I need to submit a priority Suspicious Transaction Report.

Priority suspicious transaction reports are on transactions or attempted transactions that are related to one of the following situations:

How to submit a priority Suspicious Transaction Report

If your organization has identified a priority suspicious transaction report meeting one of the requirements above, please contact us for additional information on how to submit this report to FINTRAC.

I report transactions through the FINTRAC Web Reporting System or through batch transmission software.

FINTRAC is encouraging entities that report higher volumes of reports and have API capabilities to test and transition to FINTRAC API report submission. The batch transmission software (CloudMask) has now been decommissioned and is no longer available for reporting. 

Entities that report lower volumes of transactions and currently have access to the FINTRAC Web Reporting System are able to report Suspicious Transaction Reports, Electronic Funds Transfer Reports, Large Cash Transaction Reports, Casino Disbursement Reports and Large Virtual Currency Transaction Reports using the modernized reporting form (i.e., Generation 2 reports). Consult: Use the FINTRAC Web Reporting System

Current FINTRAC Web Reporting System users can also submit Suspicious Transactions Reports, Electronic Funds Transfer Reports, Large Cash Transaction Reports and Casino Disbursement Reports they have been identifying for submission since March 2, 2024, that are based on previous legislative requirements (i.e., Generation 1 reports). Consult: Upload batch files (Generation 1 reports)

I need to register my money services business.

If you are a money services business or foreign money services business seeking to register with FINTRAC, please submit a request via the Web form: Pre-registration request for money services business or foreign money services business. To find out more information about registering your business, consult: Register your money services business (MSB) or your foreign money services business (FMSB).

If you are a money services business or foreign money services business seeking to renew your registration, update your registration information or cancel your registration, please submit a request via the Web form: Request money services business or foreign money services business registration updates.

Date Modified: