At a glance
- What KYC means
- Verifying a client's identity before and during a financial relationship. Source: FINTRAC
- Who must comply
- Banks, credit unions, money services businesses and other reporting entities in Canada. Source: FINTRAC
- Who supervises MSBs
- FINTRAC registers and supervises money services businesses operating in Canada. Source: FINTRAC
- Cash reporting trigger
- Cash transactions of CAD 10,000 or more must be reported to FINTRAC. Source: FINTRAC
- Consumer guidance
- The FCAC publishes plain-language guidance on international money transfers. Source: FCAC
What KYC means in plain language
Know your customer, usually shortened to KYC, is the process a financial business uses to confirm that you are who you say you are. It happens before or at the start of a relationship, and it continues for as long as the relationship lasts. The purpose is to make sure money is not being moved for illegal purposes, such as fraud, money laundering or terrorist financing.
KYC is common in banking, insurance, investment dealing, payroll services and money transfer services. In practice it usually means showing government-issued photo identification, providing your address and date of birth, and sometimes explaining what the money is for. The provider then checks that information against its own records and its own risk rules.
For most people, KYC is a short, routine step. For a smaller number of customers, extra measures follow, such as proof of the source of funds or the source of wealth. Providers decide when to apply those extra measures based on risk, not simply on how much money is involved.
Where KYC comes from and how it is used in Canada
The phrase comes from banking practice and is now written into law in most countries. In Canada, the core rules sit in the Proceeds of Crime (Money Laundering) and Terrorist Financing Act and its regulations. FINTRAC, Canada's financial intelligence unit, administers those rules and supervises compliance for money services businesses, among others.
Reporting entities include banks, credit unions, trust companies, insurers, securities dealers, accountants, real estate brokers and money services businesses. A money services business must register with FINTRAC and meet the same core obligations as larger institutions. Size does not excuse a business from identifying its clients.
Regulation is split across several bodies. OSFI supervises federally regulated financial institutions such as banks and insurers. FINTRAC supervises money services businesses and other reporting entities for anti-money-laundering purposes. A single transfer can therefore sit under more than one regulator's rules.
What KYC involves in practice
KYC is a set of steps, not a single form. The exact requirements depend on the service, the amount involved and the risk the provider sees. Most of the work happens inside the provider's systems rather than at the counter, but the information comes from you.
Record keeping is a legal duty. Providers must keep client identification records and transaction records, generally for at least five years. A transfer you made years ago can still be reviewed if a regulator or law enforcement asks about it later.
- Verifying identity with government-issued photo identification, and sometimes a second document
- Confirming address, date of birth and occupation
- Identifying the beneficial owners when the client is a company rather than a person
- Screening names against sanctions lists and politically exposed person lists
- Monitoring transactions over time and keeping records of what was checked
- Reporting suspicious transactions and large cash transactions to FINTRAC
KYC when you send money abroad from Canada
Sending money internationally is where KYC becomes most visible to consumers. Federal rules require that electronic funds transfers of CAD 1,000 or more carry certain sender information, so the receiving institution knows who sent the money and where it came from. This is often called the travel rule.
Cash transactions of CAD 10,000 or more must be reported to FINTRAC by reporting entities. A report is not an accusation and it does not mean you did anything wrong. It is a routine filing that the law requires.
If the details you give do not match your identification, or if the provider cannot verify something, a transfer may be delayed, returned or declined. Providing accurate information the first time is the simplest way to avoid that outcome.
KYC, CDD, EDD and AML compared
These terms appear together so often that they are easily confused. KYC is the identification step; the other terms describe wider duties, extra checks, or the overall legal framework the provider operates under.
Customer due diligence is the umbrella for the measures a provider takes to understand a client and their activity. Enhanced due diligence is the heavier version applied to higher-risk situations. Anti-money-laundering, or AML, is the name for the whole body of law and controls.
| Term | What it means |
|---|---|
| KYC (know your customer) | Identifying and verifying clients before and during a business relationship. |
| CDD (customer due diligence) | The ongoing measures used to understand a client's activity and risk level. |
| EDD (enhanced due diligence) | Extra checks for higher-risk clients, such as source of funds or source of wealth. |
| AML / ATF | The wider set of laws and controls against money laundering and terrorist financing. |
| Sanctions screening | Checking names against government lists of prohibited or restricted parties. |
Why KYC matters to you
KYC protects you as much as it protects the system. Identity checks make it harder for someone to open an account or collect a transfer in your name, and they create a record that can be used if a payment is disputed or an account is taken over.
These rules also give Canada a way to cooperate with other countries on financial crime. A payment that leaves Canada is only traceable if the sending and receiving institutions both know who was involved. That is the reason sender information travels with the money.
KYC has limits. It reduces risk but does not remove it. Consumers still need to check who they are sending money to, and report suspected fraud to the Canadian Anti-Fraud Centre.
Common confusions about KYC
KYC is not a credit check and it does not affect your credit score. Providers are confirming identity, not measuring how creditworthy you are. A request for your source of funds is also not an accusation of wrongdoing; it is a risk-based step that applies to many ordinary customers.
KYC is not optional. A provider that skips identity checks is breaking the law, so an offer to move money with no questions asked is a warning sign rather than a convenience. KYC is also not the same thing as AML; it is one part of a larger compliance framework.
Finally, the reports generated under these rules go to FINTRAC, Canada's financial intelligence unit, not to the Canada Revenue Agency. The CRA has separate rules for reporting foreign income and foreign property, which apply to taxpayers independently of any transfer provider.
- Myth: KYC only applies to large transfers. Reality: triggers differ, but obligations apply broadly.
- Myth: refusing to show ID is a privacy right. Reality: without verification, the provider cannot legally serve you.
- Myth: KYC means the provider shares your data with tax authorities. Reality: financial intelligence reports go to FINTRAC.
Frequently asked questions
What does know your customer mean in simple terms?
It means a financial business must confirm your identity before it handles your money. The business checks documents such as a passport or driver's licence, records the details, and keeps them on file.
Why do money transfer services ask for my ID?
Canadian law requires reporting entities, including money services businesses, to verify the identity of their clients. For electronic transfers of CAD 1,000 or more, sender information must also travel with the payment.
Is KYC the same as anti-money-laundering?
No. KYC is the identification and verification step. Anti-money-laundering is the broader set of laws, controls and reporting duties that KYC sits inside.
Do small transfers also require identity checks?
Requirements depend on the type of service, the amount and the provider's risk assessment, so triggers differ. Many providers verify identity at the start of any relationship regardless of the amount.
How long do providers keep KYC records?
Client identification and transaction records are generally kept for at least five years. Financial intelligence reports go to FINTRAC, not to the Canada Revenue Agency.
Can a provider refuse to send my money if I do not provide ID?
Yes. Without the identity verification the law requires, the provider cannot complete the transaction. If the details you give do not match your documents, the transfer may be delayed, returned or declined.
Sources
Every figure or rule on this page should be verified at the official source before you rely on it.
- Anti-money-laundering obligations for money services businessesFINTRAC
- Consumer guidance on sending money internationallyFinancial Consumer Agency of Canada
- Reporting suspected fraud and identity theftCanadian Anti-Fraud Centre
- Role of the federal financial regulatorOSFI
- Reporting foreign income and foreign propertyCanada Revenue Agency