Rule 23 of 33

FINTRAC AML - dealerships, financing & leasing

Does FINTRAC apply to a car dealership or leasing company?

It can. FINTRAC obligations reach businesses that finance or lease, not just banks. Where they apply you need a compliance programme, a named compliance officer, risk assessment, record keeping, client identification, and reporting of large cash and suspicious transactions, reviewed every two years.

What the rule requires

Reporting entity since 1 Apr 2025; full program due 1 Apr 2026.

Who it catches

Car dealerships that finance or lease vehicles, plus factoring and leasing firms. Penalties to $500,000; FINTRAC can publicly name you.

What this looks like in practice. Your dealership finances cars but has no compliance officer and no written AML policy. FINTRAC publicly names offenders and fines hard - $176.9M against one money-services business, $249k against another.

How to check whether you comply

The checkDo you have a compliance officer, written AML policies, a risk assessment, KYC, transaction reporting and training? The outreach grace period ended 1 Apr 2026.

Read it yourself

We would rather you checked us than took our word for it. This links to the law as published, not to our summary of it.

Primary source FINTRAC ↗ Real case FINTRAC names every offender - $176.9M, $249k and more ↗

Questions people ask

Does FINTRAC apply to a car dealership or leasing company?

It can. FINTRAC obligations reach businesses that finance or lease, not just banks. Where they apply you need a compliance programme, a named compliance officer, risk assessment, record keeping, client identification, and reporting of large cash and suspicious transactions, reviewed every two years.

Who does FINTRAC AML - dealerships, financing & leasing apply to?

Car dealerships that finance or lease vehicles, plus factoring and leasing firms. Penalties to $500,000; FINTRAC can publicly name you.

How do I check whether we comply with FINTRAC AML - dealerships, financing & leasing?

Do you have a compliance officer, written AML policies, a risk assessment, KYC, transaction reporting and training? The outreach grace period ended 1 Apr 2026. You can also run our free website check, which tests 25 technical items in about twenty seconds, or book a review if this rule needs a documented answer.

Other rules that catch the same businesses

Rule 24Ontario Blue Box full producer responsibility Rule 25EU CBAM (carbon border adjustment) Rule 26EU AI Act - Article 50 transparency Rule 27CBCA register of significant control All of themThe full 33-rule table, searchable

Find out which of the 33 apply to you

The fine risk check asks a few questions about your business and tells you which rules catch you, with the deadlines. Nothing you tick leaves your browser.

Check my fine risk

This page summarises a legal obligation in plain language so you can work out whether it applies to you. It is not legal advice, and the primary source linked above governs. Last reviewed 2026-10-03.