RPAA PSP Registration in Canada, Laid Out Honestly

Read this first

Registration under supervision - not a licence, not an endorsement

Two corrections first. PSP registration is registration under supervision - the Bank reviews, the Minister of Finance screens, supervision follows. It is not an endorsement, not a guarantee of a banking relationship, and it passports nowhere - not to the United States, the European Union or anywhere else.

Second, an application is not a registration: under section 23 a PSP must be registered - not "in review" - before performing retail payment activities, a designated very serious violation otherwise. Wherever you see "application submitted", including on our live lot below, read it as an application in the queue, not a registered PSP.

The statute

A regime that arrived in stages - the dates that matter

Registration machinery, national-security review and enforcement took effect on 1 November 2024, with a transitional filing window from 1 to 15 November 2024; the section 23 prohibition has applied since 16 November 2024. The operational layer - risk management, safeguarding, reporting, acquisition of control, registry publication - has been in force since 8 September 2025, the day the Bank first published the registry. The regime is fully live.

The scope test

One definition, five payment functions

Section 2 defines a payment service provider as an individual or entity performing payment functions as a service or business activity "that is not incidental to another service or business activity". A retail payment activity is a payment function performed in relation to an electronic funds transfer in Canadian or foreign currency "or using a unit that meets prescribed criteria" - the statute does not carve digital currencies out wholesale. Whether any given business is a PSP at all is worked through function by function in our guide to the five payment functions.

The perimeter's edges

Incidental services and foreign PSPs

The incidental test: per the Bank's policy "Criteria for registering payment service providers" - last updated 29 June 2026, so check the current text - a function is more likely incidental if performed exclusively to sell the provider's own non-payment products; direct payment revenue, end-user expectation of a payment service and marketing of that service all point into scope.

Geography: the Act applies to any PSP with a place of business in Canada (s. 4) and, under s. 5, to a foreign PSP that directs retail payment activities at individuals or entities in Canada - indicators include Canada-aimed marketing, a .ca domain, Canadian directory listings, services in Canadian dollars and a high proportion of Canadian end users. Foreign registration is genuinely usable - registered head offices span the United States, the UK, Singapore and the UAE - and a foreign applicant names a Canadian agent to accept notices.

Timeline honesty

No service standard exists - only the statutory clocks

The Bank publishes no end-to-end standard; registration comes "as soon as feasible" (s. 25(2)). The only statutory clocks are the national-security windows above - windows inside one stage, not an estimate of the whole. Treat consultancy end-to-end figures as market colour.

The registry shows the machine working: as of 11 July 2026, 1,463 registered PSPs, 486 applications in review, 40 refusals and 14 revocations, the latest registration granted on 6 July 2026. Counts drift weekly - verify them against the Bank of Canada's public PSP registry before relying on them.

Safeguarding, specifically

Trust account or non-affiliate insurance - no third way

Safeguarding is the operationally heavy obligation. Account providers must meet comparable prudential standards; on the insurance route the cover comes from a regulated non-affiliate, with proceeds outside the PSP's estate and payable to end users - insolvency-remote by design. The Bank's FAQ is explicit that deposit insurance alone is not sufficient, and a written framework with ledgering and fund-return procedures is mandatory. The full mechanics - and what an acquirer re-papers on day one - are in our safeguarding guide.

The acquisition rail

Section 24: buying a registered PSP is a registration event

Under s. 24(1), a registered PSP whose control is about to change must - before the acquisition - submit a new registration application that takes the planned acquisition into account, and be registered on that basis. Control starts at one third of the votes (SOR/2023-229 s. 21). The Bank is explicit that the new registration must be approved before the change takes place; once control passes, the prior registration can be revoked under s. 52(f). There is no transfer of a registration - there is a fresh, acquisition-adjusted application decided before closing.

Be clear-eyed: buying does not skip the queue. The new application faces the same completeness review and the same national-security screen, on the same clocks. What it buys is real - an operating entity already examined and screened, and a codified rail rather than a grey zone. How that trades against building fresh is the subject of our Canadian MSB acquisition pillar.

The live Canadian lot is a FINTRAC-registered money services business whose Bank of Canada RPAA registration application has been submitted - an application in review, with the statutory screening still to run. We describe it as exactly that: not a registered PSP unless and until the Bank registers it.

Two federal regimes

FINTRAC and the Bank: separate, cumulative, cross-wired

FINTRAC registration under the PCMLTFA and Bank of Canada registration under the RPAA are separate regimes; neither substitutes for the other. They are cross-wired in one direction: the Bank may refuse a PSP application where required FINTRAC registration under PCMLTFA s. 11.1 is missing (RPAA s. 48(1)(e)), where the applicant was found guilty of listed PCMLTFA offences, or where FINTRAC issued a penalty notice within the previous five years - with mirror grounds for revocation.

In practice - our reading of the statutes, not a regulator's mapping - currency exchange or crypto dealing without fiat transfer functions may sit with FINTRAC alone, a processor without MSB services with the Bank alone, and a classic remitter typically needs both. The MSB-side analysis is in the MSB-and-RPAA explainer; foreign businesses serving Canada without a Canadian office start from the FMSB registration guide.

Enforcement

AMPs, orders and publication - the regime has teeth

Unregistered activity contravening s. 23 is a designated very serious violation; the Regulations set penalties at up to $1,000,000 for a serious violation and $10,000,000 for a very serious one (SOR/2023-229 s. 48). The toolkit is administrative - penalties, orders, publication - and in use: in February 2026 the Bank issued temporary orders and a revised compliance order against XTM Inc., its first published enforcement decisions. On 12 June 2026 the Bank announced it will begin publishing notices of violation; as of 11 July 2026 none had appeared on its enforcement page, though three registry entries carried violation flags.

Moving target

What is changing, as of July 2026

Annual assessment fees are the live unknown: s. 99 obliges the Bank to assess supervision costs against registered PSPs, but no formula has been published, and the FAQ says fees begin "in due course" once the cost-recovery regulations are finalised. As of 11 July 2026 registered PSPs pay no annual assessment fee - an unquantified future cost, never "no annual fees". The $2,500 application fee is CPI-indexed and can drift. The interpretive frontier moves too - registration criteria updated 29 June 2026, a marketplace policy in December 2025. Statements on this page are made as of July 2026: verify the current text on bankofcanada.ca and the Justice Laws website before committing capital.