01 / Scope
Who Canada KYC rules cover
Reporting entities listed in section 5 of the PCMLTFA. The event that triggers identity verification varies by business sector and transaction type.
02 / Start the check
When Canada customer due diligence starts
- Use the sector-specific FINTRAC guidance to determine the exact account, transaction, remittance, receipt, or relationship trigger.
- Verify again when required information is doubtful or when risk and ongoing-monitoring controls require an update.
- Complete timing requirements that apply to the relevant sector; the method guide does not replace the sector trigger guide.
03 / Evidence
Identity data required for Canada KYC
- The fields needed by the selected method, commonly name plus photo, address, date of birth, or account information.
- For entities, information that confirms existence and the organization’s identifying particulars.
- Beneficial-ownership, purpose, intended nature, and third-party information when the applicable rules require them.
Verification methods and evidence
- Government-issued photo identification that is authentic, valid, current, named, photographed, and uniquely numbered.
- A Canadian credit file that has existed for at least three years, subject to the guide’s matching requirements.
- Dual process using two categories of information from two different reliable sources.
- The affiliate/member method or reliance method when every stated condition is met.
- For remote photo-ID verification, authenticate the document and match the person to the name and photo; video viewing alone is not enough.
04 / Entity customers
Beneficial-owner and representative checks
Reporting entities must obtain, take reasonable measures to confirm, and keep prescribed beneficial-ownership information for covered entity customers. The detailed ownership threshold and records depend on entity type.
05 / After onboarding
Ongoing KYC monitoring in Canada
Business relationships require ongoing monitoring at a frequency appropriate to risk, with enhanced measures for high-risk relationships.
Record retention
Keep the record specified for the method used, including the source, reference number or account details, and verification date where required. General retention periods are usually five years, but the start event depends on the record type.
06 / Build notes
How to implement Canada KYC requirements
- Model each accepted method as its own evidence bundle; do not collapse all successful checks into a generic verified flag.
- For dual process, enforce two different reliable sources and two qualifying information categories.
- Record how remote photo ID was authenticated and how the person-to-photo match was completed.
- Attach the sector-specific trigger to the workflow configuration and test it separately from method eligibility.
07 / Related answers
Questions behind international KYC implementation
08 / Source ledger
Primary sources for Canada KYC rules
We use regulator and legislation publishers here, not vendor explainers. Pinpoint citations show where to begin; the linked instrument controls.
compliance guidance Permitted methods, remote use, and method-specific records.
S.C. 2000, c. 17 The Act defining reporting entities and the federal AML framework.
SOR/2002-184 Verification, records, beneficial ownership, and sector requirements.
compliance guidance Information to obtain, confirm, and update for entity customers.
Source review completed 18 July 2026. This page is a structured research summary, not a legal opinion or a substitute for sector-specific advice.