Canadian casinos are required by federal law to report specific financial transactions to FINTRAC. That law is the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, and it names casinos as reporting entities with defined obligations. This page walks through each report type: large cash transactions, electronic funds transfers, suspicious transactions, disbursements, and listed person or entity property reports. For each one, you’ll find the thresholds, deadlines, and conditions that trigger it, along with what identity verification and record retention require. By the end, you’ll have a clear picture of what your compliance program needs to cover and where to focus.
The Regulatory Framework Governing Casino Reporting Obligations
Canadian casinos are designated reporting entities under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, the federal law that sets out the obligations covered in this article. That designation puts casino operators, both land-based and provincially authorized online operators, inside the same reporting framework as banks, money services businesses, securities dealers, and other regulated sectors. All reports covered below go to the Financial Transactions and Reports Analysis Centre of Canada, the federal financial intelligence unit that receives, analyzes, and discloses financial intelligence. The specific report categories, thresholds, triggering events, and submission timelines are each covered in their own section below.
Casino Disbursement Report (CDR) Obligations
The Casino Disbursement Report is the report type specific to casino operators. It captures outbound payments the casino makes to a patron or third party. It’s a threshold-based report submitted to FINTRAC, and it sits alongside, but doesn’t overlap with, reports covering cash intake or electronic funds transfers. A CDR is triggered in two situations: a single disbursement at or above a defined CAD threshold, and multiple related disbursements to or on behalf of the same party that add up to that threshold within a short, prescribed window.
Single-Disbursement Threshold and 24-Hour Aggregation Rule
A CDR is required when a casino makes a single disbursement of CAD 10,000 or more to an individual or entity. It’s also required when two or more disbursements, each individually below CAD 10,000, together total CAD 10,000 or more within a 24-hour period, as long as they’re made to or on behalf of the same individual or entity.
“On behalf of the same individual or entity” has a specific operational meaning. It covers disbursements paid directly to the patron, disbursements paid to a third party at the patron’s direction, and disbursements linked to a common beneficial recipient across different physical points on the gaming floor or cashier cages. Aggregation isn’t limited to a single account or a single transaction channel.
Splitting a payout into amounts below CAD 10,000 doesn’t remove the reporting obligation. FINTRAC’s casino-specific indicators explicitly identify structuring, which means deliberately breaking transactions to stay under thresholds and avoid identification or reporting, as a common money laundering method. Where structuring indicators are present, the operator’s obligations go beyond the CDR to the suspicious transaction reporting stream, regardless of whether any individual disbursement reaches the threshold.
Submission Deadline and Record Retention
A CDR must be submitted to FINTRAC within 15 calendar days after the day the disbursement is made. The clock starts from the date of the disbursement itself, not from the date the transaction is reviewed internally or entered into the reporting system.
The operator must keep a copy of each CDR for a minimum of 5 years from the date the report was created. This retention period applies to the report copy specifically. Supporting transaction and identity records carry their own retention obligations under separate provisions. A longer statutory horizon of 15 years applies on FINTRAC’s end, under PCMLTFA provisions referencing the Library and Archives of Canada Act, after which FINTRAC is required to destroy the records it holds.
When a Disbursement Also Triggers a Suspicious Transaction Report
A single disbursement can create two parallel reporting obligations. When a disbursement meets the CAD 10,000 threshold and the surrounding facts, context, and assessed indicators meet the reasonable grounds to suspect standard, the operator must submit both a CDR and a Suspicious Transaction Report for the same underlying transaction.
Filing the CDR doesn’t satisfy the STR obligation, and filing the STR doesn’t satisfy the CDR obligation. The two reports do different analytical work at FINTRAC and are governed by separate triggers: one monetary, one evidentiary. Compliance programs need to be built to catch dual-trigger events and route them into both reporting streams, not treat them as alternatives.
Suspicious Transaction Report (STR) Requirements
The Suspicious Transaction Report works on a fundamentally different basis from the other reports in the FINTRAC regime. Its filing obligation is triggered by a legal standard, reasonable grounds to suspect, not by any monetary threshold. The obligation applies to any financial transaction that occurs, or is attempted, in the course of casino activities where that standard is met in relation to money laundering, terrorist activity financing, or a related offence. Both completed and attempted transactions are in scope. This separates STR filing from the CAD 10,000 aggregation logic that governs the CDR, LCTR, and EFTR streams.
The “Reasonable Grounds to Suspect” Standard
Reasonable grounds to suspect is the threshold that must be reached before an STR is submitted to FINTRAC. The standard applies equally to completed transactions and to attempted transactions related to the commission or attempted commission of a money laundering or terrorist financing offence. FINTRAC describes this threshold as “a step above simple suspicion.” Proof of an offence isn’t required, and the operator isn’t expected to establish that laundering or financing has actually occurred.
The suspicion still needs to go beyond a hunch. It must be grounded in observable facts, the surrounding context of the transaction, and an assessment of applicable ML/TF indicators. For casinos, FINTRAC’s sector-specific guidance directs operators to assess facts, context, and casino ML/TF indicators together when making that determination.
The indicators used to inform this assessment were developed by FINTRAC through a three-year review of money laundering and terrorist financing cases, analysis of high-quality STRs submitted by the sector, and consultation with reporting entity sectors. They represent an evidentiary framework built around the operational realities of casino activity, not a generic list.
No Minimum Dollar Threshold and Attempted Transactions
STRs carry no minimum dollar threshold. A transaction of any value, including one well below the CAD 10,000 mark that governs threshold-based reports, must be reported when the reasonable grounds to suspect standard is met. Small-value activity doesn’t escape the obligation.
Attempted transactions are equally reportable. This includes transactions abandoned by the customer before completion and transactions refused by the operator. The absence of a completed financial movement doesn’t relieve the casino of the STR obligation where suspicion, assessed against facts, context, and indicators, reaches the required threshold.
Large Cash Transaction Reports and Electronic Funds Transfer Reports
Beyond the casino-specific disbursement report and the suspicious transaction report, casino operators are subject to two threshold-based reports that apply across multiple reporting-entity sectors regulated under the PCMLTFA. Both the Large Cash Transaction Report (LCTR) and the Electronic Funds Transfer Report (EFTR) are triggered at CAD 10,000 or more and share the same 24-hour aggregation logic that governs the CDR. They differ in the transaction channel they cover: the LCTR captures physical cash received by the casino, while the EFTR captures international electronic funds transfers sent or received on behalf of a client.
Large Cash Transaction Report Triggers
An LCTR is required when a casino receives CAD 10,000 or more in cash in a single transaction from a client. The obligation also applies when two or more cash transactions, each below CAD 10,000, total CAD 10,000 or more within 24 consecutive hours on behalf of the same individual or entity. In this context, “cash” means physical currency only: coins and banknotes issued by Canada or a foreign country. Cash equivalents such as bank drafts, money orders, traveller’s cheques, casino chips, or electronic credits don’t trigger the LCTR obligation, even when their face value meets or exceeds the threshold. Separate reporting streams cover those instruments where they intersect with disbursement or transfer channels.
Electronic Funds Transfer Report Triggers
An EFTR is required for international electronic funds transfers of CAD 10,000 or more, whether sent or received, that are initiated at the request of a client. The obligation applies to transfers crossing the Canadian border. Purely domestic transfers don’t trigger the EFTR reporting stream under this provision. The same 24-hour aggregation logic that governs the CDR and LCTR applies here: two or more international transfers, each below CAD 10,000, initiated by or on behalf of the same individual or entity that together total CAD 10,000 or more within 24 consecutive hours must be reported as a single reportable event. Sub-threshold transfers that aggregate into the reporting range can’t be treated as exempt based on their individual amounts.
Comparative Summary of Threshold-Based Reports
The threshold-based reports differ by triggering channel, aggregation rule, and the transaction stream each one is designed to capture.
| Report Type | Monetary Threshold | Aggregation Rule | Channel Covered |
|---|---|---|---|
| Casino Disbursement Report | CAD 10,000 | 24 hours, same individual/entity | Casino disbursements |
| Large Cash Transaction Report | CAD 10,000 | 24 hours, same individual/entity | Physical cash received |
| Electronic Funds Transfer Report | CAD 10,000 | 24 hours, same individual/entity | International EFTs (sent or received) |
| Suspicious Transaction Report | None | Not applicable | Any transaction (completed or attempted) |
Listed Person or Entity Property Reports
A Listed Person or Entity Property Report, historically called a terrorist property report in the sector, captures property in the casino’s possession or control that is owned, held, or controlled by or on behalf of a listed person or entity. FINTRAC’s current guidance replaced the earlier “Reporting terrorist property to FINTRAC” document to reflect legislative and regulatory changes that broadened the scope beyond terrorism-only listings to include persons and entities designated under applicable sanctions instruments.
The report must be submitted immediately upon a required disclosure under section 83.1 of the Criminal Code or the applicable sanctions regulations administered under Canadian law. This obligation operates independently of the suspicious transaction reporting stream. The trigger is the identification of property tied to a designated person or entity, not suspicion arising from transactional patterns, and no monetary threshold or aggregation window applies.
Identity Verification Requirements Tied to Reporting
The PCMLTFA and its Regulations require casinos to verify the identity of both natural persons and entities in connection with specified transactions and reporting events. Verification isn’t a general policy overlay. It attaches to defined trigger points that line up with the reporting streams already covered: casino disbursements at the C$10,000 threshold, large cash transactions at threshold, international electronic funds transfers at threshold, and any transaction giving rise to a suspicious transaction report. Verification applies to two categories: natural persons receiving or conducting a reportable transaction, and entities, including corporations, trusts, partnerships, funds, and unincorporated organizations, on whose behalf such transactions are conducted.
Verification Methods for Persons and Entities
FINTRAC prescribes five methods for verifying the identity of a natural person: the government-issued photo identification method, the credit file method, the dual-process method, the affiliate or member method, and the reliance method. Under the government-issued photo identification method, the document must be authentic, valid, and current, issued by a federal, provincial, or territorial government (or a foreign equivalent), bear the person’s name and photo, and carry a unique identifying number. The credit file method requires reference to a Canadian credit file that has existed for a defined minimum period. The dual-process method requires two pieces of information from separate reliable sources, for example, a scan of a government-issued photo ID paired with confirmation of a deposit account or a government-issued statement.
For entities, verification uses the confirmation of existence method (validating registration records for corporations and similar bodies), the reliance method, or the simplified identification method where a documented risk assessment supports it. Verification must be conducted at each prescribed trigger: large cash transactions at threshold, casino disbursements at threshold, electronic funds transfers at threshold, and any transaction generating an STR. In practice, “know your customer” in the casino context means a set of prescribed verification methods tied to specific reporting triggers, not a discretionary due-diligence standard.
Record-Keeping Obligations Beyond the Report Itself
Every reporting obligation under the PCMLTFA comes with a parallel record-keeping obligation that goes beyond the submitted report. Casinos must keep copies of each report filed with FINTRAC, including CDRs, LCTRs, EFTRs, STRs, and listed person or entity property reports, along with the supporting transaction records that document the underlying activity. Identity verification records tied to each reportable event form a third category, capturing the method used, the source data reviewed, and the prescribed data elements for the verification method applied.
The baseline retention period is 5 years from the date the record was created. This period applies across report copies and their supporting documentation, and it sets the minimum window during which FINTRAC examiners can request production of these records during a compliance examination.
Enforcement Consequences for Non-Compliance
FINTRAC has statutory authority under the PCMLTFA and its associated Regulations to impose administrative monetary penalties on reporting entities found in breach of their statutory obligations. This authority applies to casinos the same way it applies to other designated reporting entities. Penalties aren’t imposed summarily. They’re issued through a formal notice of violation that identifies the specific contravention and the proposed monetary amount. The regime operates as a civil enforcement mechanism, separate from criminal prosecution under the Act, and sits alongside FINTRAC’s other supervisory tools, including compliance examinations and public disclosure of penalties imposed.
Notice of Violation and Current Penalty Regime
FINTRAC may issue an administrative monetary penalty and serve a notice of violation when it has reasonable grounds to believe that a person or entity has committed a violation of the PCMLTFA or its Regulations. The notice identifies the contravention, classifies it by severity, and specifies the proposed penalty amount. Under the current regime, maximum amounts per violation are set at C$1 to C$1,000 for minor violations, C$1 to C$100,000 for serious violations, and C$1 to C$100,000 for very serious violations, with amounts calibrated to the nature and history of the contravention.
The reporting entity has procedural rights of review after being served the notice. Public notices of penalties imposed are posted on FINTRAC’s website and remain publicly listed for five years, with additional detail on the nature of each violation disclosed for all penalties applied to a reporting entity.
Proposed Increases to Maximum Penalties
Bill C-2, introduced in the 45th Parliament at first reading, would amend the PCMLTFA to raise the maximum administrative monetary penalties substantially above current levels. As proposed, maximum amounts would rise to C$40,000 for minor violations, C$4,000,000 for serious violations, and C$20,000,000 for very serious violations. Reporting on the bill indicates that individuals would face civil penalties of up to C$4 million per violation and entities such as casinos up to C$20 million per violation.
These figures reflect proposed amounts under legislation before Parliament as of June 2025 and are not yet in force. The direction of the legislative trajectory points to materially higher enforcement exposure for both individual compliance officers and corporate operators.
Contextual Risk Environment for Casino Reporting
The reporting obligations covered above operate against a backdrop shaped by two distinct pressures. Federal risk assessments have formally raised the money laundering threat level attached to segments of the gaming sector, changing how regulators calibrate expectations for control intensity and indicator sensitivity. Reporting infrastructure has also experienced significant disruption in recent years, forcing operators to maintain the substantive obligation through channels other than the routine electronic submission pathway. Both factors bear directly on how casino compliance programs interpret and carry out their statutory duties.
Elevated Money Laundering Risk in Unlicensed Online Gambling
Canada’s Updated Assessment of Inherent Risks, published in March 2023, raised the money laundering threat level associated with unlicensed online gambling from high to very high. The reclassification signals a formal federal position that the segment carries heightened inherent exposure to laundering activity, independent of the controls any individual operator applies. For licensed casino operators, the assessment informs the intensity of expected controls and the calibration of suspicious transaction indicators, particularly where customer activity intersects with unlicensed online channels. FINTRAC’s casino-specific ML/TF indicators, developed through a three-year review of cases and STRs from the sector, should be read alongside this elevated threat classification.
Reporting System Outage and Manual Submission
In March 2024, FINTRAC’s reporting systems went offline for nearly 10 months, requiring operators to submit reports manually during that period. The outage didn’t suspend, defer, or otherwise modify the substantive reporting obligations under the PCMLTFA. Deadlines, thresholds, and the reasonable-grounds-to-suspect standard continued to apply as written. Operators were expected to maintain compliance through manual submission channels for the duration. The episode makes clear that the reporting obligation doesn’t depend on the availability of electronic submission infrastructure, and compliance programs should keep documented manual-submission procedures as a continuity control against future channel disruptions.
Applying These Reporting Obligations to Casino Compliance Programs
What makes casino compliance genuinely difficult isn’t tracking the C$10,000 threshold. It’s recognizing that the STR operates on an entirely different logic, one where suspicion alone compels submission regardless of dollar amount. That distinction matters because conflating these triggers in your internal controls creates real regulatory exposure. Each report type, CDR, LCTR, EFTR, STR, and listed person or entity property, needs its own defined workflow, not a one-size-fits-all process. With Bill C-2 potentially raising very serious violation penalties to C$20,000,000, the cost of a poorly calibrated program has never been higher, making it worth reviewing how your current controls map against each trigger.
