Canada’s anti-money laundering (AML) rules just got sharper teeth—and mortgage lenders and brokers are squarely in the spotlight.
Over the past two years, the federal government has moved from signalling major AML reform to enacting it. In 2024, the government previewed a significant strengthening of Canada’s AML framework. That preview became a concrete legislative proposal on June 3, 2025, when Parliament introduced the Strong Borders Act (Bill C‑2). Many of those measures are now law under Bill C‑12, which received Royal Assent on March 26, 2026 on an expedited timeline.
For businesses regulated under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and supervised by FINTRAC, the impact is straightforward: higher expectations, higher enforcement risk, and dramatically higher penalties. For mortgage lenders and brokers, that means AML compliance needs to be operationally embedded across the origination and funding process—not treated as a back-office formality.
The “then”: what Bill C‑2 signalled (June 10, 2025 context)
When Bill C‑2 was introduced in June 2025, it was positioned as a watershed moment for Canada’s AML regime. The proposed PCMLTFA amendments and regulatory changes were expected to shift the compliance landscape in two major ways:
- Universal FINTRAC enrolment for reporting entities, paired with significantly higher penalties for AML non-compliance; and
- A proposed prohibition on receiving cash payments of C$10,000 or more for business purposes (and, for charities, as a donation), subject to exemptions in regulations.
Bill C‑2 also proposed broader reforms to strengthen Canada’s ability to investigate and prevent money laundering, including measures that would expand information access and sharing in certain contexts.
Importantly for the mortgage sector, Bill C‑2 explicitly identified mortgage administrators, mortgage brokers and mortgage lenders as part of the population that would be impacted by FINTRAC enrolment requirements—underscoring the government’s view that mortgage-related activity is a key AML risk channel.
The “now”: Bill C‑12 is law (Royal Assent March 26, 2026)
Bill C‑12 has now enacted significant amendments to Canada’s AML regime. Some key elements are already in effect, and others (including universal FINTRAC enrolment) are enacted but not yet in force.
Either way, the practical direction of travel is clear: FINTRAC is being given more tools, and reporting entities are being held to a higher standard of day-to-day compliance.
Below are the changes most likely to affect mortgage lenders and brokers.
1) Penalties are dramatically higher—and can compound quickly
The headline change that gets boardrooms and principals’ attention is the revised administrative monetary penalty (AMP) framework. Bill C‑12 increases maximum AMPs by roughly 40 times the previous levels.
Per violation, the maximums are now:
- Minor: up to $40,000
- Serious: up to $4 million
- Very serious: up to $20 million
In the mortgage context, this matters because AML issues often arise at the file level—and regulators don’t necessarily view problems as a single “event.” A recurring gap across multiple borrowers or transactions (for example, inconsistent identity verification, missing beneficial ownership documentation, or poor third-party determination records) can create multiple violations, increasing exposure.
There is also a significant corporate-structure angle: in some cases, penalty caps may be assessed by reference to global income (for individuals) or global corporate group revenue (for entities). For mortgage businesses that are part of larger groups—particularly those with affiliates outside Canada—this can materially increase theoretical downside.
2) FINTRAC can require formal remediation—on a clock
Bill C‑12 introduces a mandatory compliance agreement regime tied to prescribed violations.
In practice, that means if FINTRAC penalizes a reporting entity for a prescribed violation, FINTRAC will require the business to enter into a compliance agreement setting out what must be fixed and by when. If the entity refuses to enter the agreement, or fails to meet its terms, FINTRAC must issue and publicize a compliance order.
This has two major implications for mortgage lenders and brokers:
- Remediation becomes formal, time-bound, and enforceable, rather than a best-efforts exercise after an examination.
- Public compliance orders raise reputational and commercial risk, particularly for brokers whose business depends on referral sources and lender relationships, and for lenders reliant on funding partners and investor confidence.
A breach of a compliance order is itself treated as a new violation, creating additional penalty exposure.
3) AML programs must be “effective,” not just documented
Historically, many AML programs were built around formal requirements: policies and procedures, training, and a scheduled effectiveness review. Those pieces still matter, but Bill C‑12 raises the statutory standard.
The PCMLTFA now requires an AML compliance program to be “reasonably designed, risk-based and effective.” In other words, FINTRAC is positioned to assess not only whether you have a program, but whether it actually works in practice.
For mortgage lenders and brokers, “effective” tends to mean FINTRAC will expect evidence of consistent execution in the real origination process, including:
- reliable identity verification and recordkeeping practices,
- appropriate handling of beneficial ownership and corporate borrowers,
- clear third-party determination and documentation,
- escalation and decision-making processes for suspicious activity (with a defensible audit trail), and
- testing or quality assurance that finds issues and drives correction.
This is also where many organizations get caught: strong policies, uneven execution—especially across multiple branches, agents, or broker networks.
4) Anonymous or obviously fictitious clients are expressly prohibited
Bill C‑12 explicitly prohibits providing services to anonymous clients or clients using clearly fictitious names.
For most mortgage professionals, this will sound like “common sense,” but it matters because it tightens the compliance narrative. Practices like “we’ll finalize ID later” or “we relied on someone else’s ID check” become harder to defend when the statute is explicit.
The takeaway is less about edge cases and more about file discipline: if the identity verification isn’t done, documented, and retrievable, the file is a liability.
5) FINTRAC’s examination reach is broader
Bill C‑12 also expands FINTRAC’s ability to examine records and inquire into the business and affairs not only of known reporting entities, but also of those it reasonably believes are reporting entities.
This matters most for non-traditional models and evolving structures—for example, certain private lending arrangements, syndicated models, or platforms that mix brokering, administration, and funding functions. If your PCMLTFA classification has been treated as uncertain, this change increases the chance of FINTRAC attention while those questions are being assessed.
6) Universal FINTRAC enrolment is coming (but not yet in force)
Bill C‑12 enacts a new framework under which (once in force) all reporting entities will be required to enrol with FINTRAC, renew enrolment, and keep information current. Certain identifying enrolment information will be made available publicly.
For many mortgage market participants, this will feel like a licensing-style administrative layer—one that will need owner/controller information hygiene and a reliable internal process for updating FINTRAC when changes occur.
What mortgage lenders and brokers should do next
The best response to Bill C‑12 is not a policy rewrite—it’s operational proof.
Mortgage lenders and brokers should consider:
- testing a sample of mortgage files against current KYC/recordkeeping requirements,
- identifying where broker–lender handoffs create gaps (and clarifying responsibility),
- tightening escalation procedures and documentation for higher-risk scenarios, and
- preparing for faster remediation expectations if FINTRAC identifies weaknesses.
Bottom line
Bill C‑12 signals a more assertive AML posture in Canada: higher penalties, more formal remediation, and a legal requirement that AML programs be demonstrably effective. For mortgage lenders and brokers, the practical implication is clear: compliance must be consistent, auditable, and built into origination workflows—because the cost of getting it wrong is now materially higher.