FINTRAC PEP and HIO Enhanced Due Diligence: Casino Obligations Under the PCMLTFR

Canadian casinos are reporting entities under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA, S.C. 2000, c. 17), and their obligations toward politically exposed persons (PEPs) and heads of international organizations (HIOs) are among the most prescriptive in the Canadian AML framework. The Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations (PCMLTFR, SOR/2002-184), particularly sections 122 through 124, establish distinct enhanced due diligence (EDD) obligations that vary depending on whether the client is a foreign PEP, a domestic PEP, or an HIO, and on the casino’s own risk assessment. FINTRAC’s compliance guidance elaborates on those obligations in detail, and casinos should treat that guidance as the operational standard alongside the statutory text.

Who Qualifies as a Politically Exposed Person

FINTRAC distinguishes sharply between foreign and domestic PEPs, and the distinction matters because the regulatory treatment diverges at a fundamental level.

A politically exposed foreign person is someone who holds or has held one of the following offices or positions in or on behalf of a foreign state: head of state or head of government, member of an executive council of government or of a legislature, deputy minister or equivalent rank, ambassador, or attaché or counsellor of an ambassador, military officer with a rank of general or above, president of a state-owned company or state-owned bank, head of a government agency, judge of a supreme court, constitutional court, or other court of last resort, leader or president of a political party represented in a legislature, or holder of any prescribed office or position. The statutory authority is PCMLTFA, S.C. 2000, c. 17, s. 9.3(3).

A politically exposed domestic person is a person who currently holds, or has held within the last five years, a specific office or position in or on behalf of the Canadian federal government, a Canadian provincial or territorial government, or a Canadian municipal government. Qualifying offices include Governor General, lieutenant governor or head of government, member of the Senate or House of Commons, or member of a legislature, deputy minister or equivalent rank, ambassador, or attaché or counsellor of an ambassador, military officer with a rank of general or above, president of a corporation wholly owned directly by the Crown federally or provincially, head of a government agency, judge of an appellate court in a province, the Federal Court of Appeal, or the Supreme Court of Canada, leader or president of a political party represented in a legislature, and mayor, reeve, or other similar chief officer of a municipal or local government.

Who Qualifies as a Head of an International Organization

A head of an international organization (HIO) is a person who, at a given time, holds or has held within a prescribed period the office or position of head of: an international organization established by the governments of states, an institution of such an organization, or an international sports organization. The reference is PCMLTFA, S.C. 2000, c. 17, s. 9.3(3).

FINTRAC’s guidance includes an annex listing examples of qualifying international organizations, among them the African Development Bank Group, the Asian Development Bank, the Bank for International Settlements, the Food and Agriculture Organization of the United Nations, the International Criminal Police Organization (Interpol), the International Monetary Fund, the World Bank Group, and the World Trade Organization. Compliance teams should consult the full annex and apply judgment to analogous bodies not explicitly listed. The critical operational question is whether an organization was established by governments of states, not whether it is well known.

Family Members and Close Associates

Obligations extend beyond the PEP or HIO directly. For the purposes of PCMLTFA, subsection 9.3(1), the following are prescribed family members of a foreign PEP, domestic PEP, or HIO: their spouse or common-law partner, their biological or adoptive children, their mother or father, the mother or father of their spouse or common-law partner (i.e., in-laws); and the children of their mother or father (i.e., siblings).

Once you determine that a person is a family member of a foreign politically exposed person, including a deceased foreign PEP, they remain a family member of a foreign PEP permanently, and no further determination is required. Once you determine that a person is a family member of a domestic PEP or HIO, they retain that status for five years after the domestic PEP or HIO has left the qualifying office. Step-family relationships fall outside the definition unless the child is legally adopted.

A close associate of a PEP or HIO is a person who is closely connected to the PEP or HIO for business reasons, family reasons, or other reasons. FINTRAC’s guidance notes that this definition is intentionally broad, reflecting the corruption risk that flows through business and personal networks. The close associate determination requires the casino to take reasonable measures to identify whether a client falls into this category, and does not rest on self-declaration by the client.

“Once you determine that a person is a family member of a foreign politically exposed person (including a deceased foreign politically exposed person), they remain a family member of a foreign politically exposed person forever and you are not required to make this determination again.”, FINTRAC, Politically Exposed Persons and Heads of International Organizations Guidance

The Asymmetric Risk Treatment: Foreign vs. Domestic

The most operationally consequential feature of the FINTRAC framework is the asymmetric treatment of foreign and domestic PEPs with respect to automatic high-risk designation.

Persons determined to be foreign PEPs, or family members or close associates of foreign PEPs, must be treated as posing a high risk. This is not discretionary. The casino does not conduct a separate risk assessment to decide whether the high-risk label applies, it applies as a matter of law upon determination of foreign PEP status.

Persons determined to be domestic PEPs, HIOs, or family members or close associates of domestic PEPs or HIOs must be treated as high risk only if the casino concludes, based on its own risk assessment, that there is a high risk of a money laundering or terrorist financing offence being committed. This distinction has practical implications for onboarding and monitoring workflows: a domestic PEP who scores as low risk on a documented risk assessment does not automatically trigger the full suite of EDD measures, whereas a foreign PEP does so regardless.

FINTRAC’s guidance is clear that both categories are inherently higher-risk by virtue of their access to public power and associated corruption and bribery risks, and it directs casinos to consult Global Affairs Canada’s transparency, anti-bribery and anti-corruption resources when assessing these risks. In practice, compliance teams should build their risk assessment methodology for domestic PEPs to be robust, documented, and consistently applied, since FINTRAC examinations will scrutinise both the assessment and its outcome.

The Four Prescribed Enhanced Measures

Once a casino determines that a client is a foreign PEP (mandatory high risk), or determines that a domestic PEP or HIO presents a high risk under its risk assessment, four prescribed EDD measures apply under the PCMLTFR. Casinos must apply all four, not a selection of them.

Senior management approval. A member of senior management must approve commencing or continuing a business relationship with the PEP or HIO. FINTRAC’s guidance explains that this approval function cannot be delegated to front-line staff. Senior management, for these purposes, means persons who determine day-to-day operations or those directly below the level of persons determining day-to-day operations. The approval must be obtained before or promptly after the business relationship is established, depending on the circumstances under which the PEP determination is made.

Source of funds determination. The casino must take reasonable measures to establish the source of the funds or source of virtual currency used in a transaction or expected to be deposited into an account. FINTRAC’s guidance distinguishes source of funds from source of wealth: source of funds is the origin of the particular funds used in the specific transaction, such as employment income, proceeds from the sale of an asset, or gambling winnings. Methods include asking the client directly and reviewing open-source information.

Source of wealth determination. The casino must take reasonable measures to establish the source of the person’s overall wealth. Source of wealth is broader than source of funds, it refers to how the person accumulated their total assets. This requires a more substantive inquiry, potentially including review of publicly available biographical information, professional background, and business history. Where transaction or account activity is inconsistent with what is known about the source of funds or source of wealth, FINTRAC’s guidance directs casinos to follow up with the client. If the information remains inconsistent and there are reasonable grounds to suspect the transaction relates to money laundering or terrorist financing, the casino must file a Suspicious Transaction Report.

Enhanced ongoing monitoring. The casino must conduct enhanced monitoring of the business relationship, calibrated to the risk the client presents. This means greater scrutiny of transactions, more frequent periodic reviews, and attention to changes in transaction patterns that deviate from the established profile.

“Once you have determined that a person is a politically exposed person, head of an international organization, or a family member or close associate of a politically exposed person or head of an international organization… you must take reasonable measures to establish the source of the funds or source of virtual currency used for a transaction or that is expected to be deposited into an account, and the source of a person’s wealth.”, FINTRAC, PEP and HIO Guidance, section 10

How and When to Make the Determination

Casinos must take reasonable measures to determine whether a client is a PEP, HIO, or a family member or close associate of one. The obligation to make this determination arises at defined points in the client lifecycle and when a fact is detected that gives reasonable grounds to suspect PEP or HIO status.

Detecting a fact means discovering information about a person that could lead to a PEP or HIO determination, or that updates information already known about a confirmed PEP or HIO. The information must constitute reasonable grounds to suspect that the person holds or held a qualifying office or position, or is associated with someone who does. This can happen proactively through screening processes or reactively through the course of ongoing monitoring and transaction review.

For casinos, which are account-based reporting entities, the PEP determination obligation applies when establishing an account-based business relationship and when a fact about a client is detected during the course of that relationship. The detection of a fact triggers an obligation to make or update a determination in a timely manner, not simply to note the information and defer action.

A practical implementation point: casinos should integrate PEP screening into their client onboarding workflow, conduct periodic re-screening of existing clients using updated PEP database sources, and establish clear escalation procedures for when a potential PEP flag is raised by an automated screening tool. The documented output of each determination, including negative determinations, should be retained as part of the client record.

Who Can Review a Transaction or Allow an Account to Stay Open

FINTRAC’s guidance addresses a specific operational question: who within the organisation has authority to review a transaction involving a PEP or HIO, or to allow a PEP or HIO account to remain open. The answer ties directly to the senior management approval requirement.

The guidance confirms that the review function and the account-continuation decision must rest with a person at the appropriate seniority level. Compliance officers who are sufficiently senior may fulfil this function, but the role cannot be assigned to front-line compliance analysts or customer-facing staff without the requisite seniority and authority. Casinos should codify this approval hierarchy explicitly in their written AML compliance policies and procedures, which are themselves a mandatory component of the compliance programme under the PCMLTFA.

This approval requirement has a documentation corollary: the casino must record that approval was obtained, by whom, and when. FINTRAC examinations of casino AML programmes will look for evidence of this approval trail for PEP and HIO accounts, and gaps will constitute a compliance deficiency. Operators registered in Ontario should note that the AGCO’s Registrar’s Standards for Internet Gaming, at standard 6.02, also require AML internal controls to align with PCMLTFA obligations, which means the senior management approval requirement flows through to the online casino context as well.

Bribery and Corruption Risk: The Broader Obligation

FINTRAC’s PEP and HIO guidance addresses bribery and corruption risk as a standalone consideration, not merely as a subset of the source of funds inquiry. Casinos that identify PEP or HIO clients must be aware that the PCMLTFA’s obligations exist alongside Canada’s anti-corruption framework, including the Corruption of Foreign Public Officials Act. The financial flows associated with bribery and corruption may not match traditional ML typologies, and EDD procedures should be designed to detect patterns consistent with corruption-related proceeds as well as conventional money laundering indicators.

FINTRAC directs reporting entities to consult Global Affairs Canada’s transparency, anti-bribery, and anti-corruption resources when developing their risk assessment methodology for PEP and HIO clients. This is particularly relevant for foreign PEPs from jurisdictions identified by FATF as having strategic AML/CFT deficiencies, where the elevated country risk compounds the PEP-related risk.

Suspicious Transaction Reporting and PEP Interactions

A Suspicious Transaction Report (STR) filed with FINTRAC in connection with a PEP or HIO client carries a specific disclosure obligation: the STR submission includes a field requiring the casino to indicate whether the report involves a person determined to be a PEP. Completing this field accurately allows FINTRAC to deploy intelligence about politically connected individuals and financial flows to law enforcement and security agencies more effectively.

Where ongoing monitoring of a PEP or HIO account reveals new transaction patterns that raise suspicion, the casino must file a new or updated STR. Continuing to monitor without filing, where reasonable grounds to suspect ML or TF exist, constitutes non-compliance. FINTRAC’s STR guidance confirms that if suspicion persists across multiple transactions, each reportable transaction must be reported, and subsequent reports may reference earlier ones by their reporting entity reference numbers to establish the pattern. For more on the broader AML compliance framework within which these obligations sit, see the AML and financial compliance hub on this site.

Policy Documentation and Compliance Programme Integration

All PEP and HIO obligations must be embedded in the casino’s written AML compliance policies and procedures. FINTRAC’s compliance programme requirements, which apply to all reporting entities, mandate that policies address the identification of PEPs and HIOs, the risk assessment process applied to domestic PEPs and HIOs, the prescribed EDD measures and the circumstances triggering them, the senior management approval process, and the records to be kept.

The two-year effectiveness review of the compliance programme, also mandated under the PCMLTFA framework, must assess whether PEP and HIO procedures are being followed in practice. This includes reviewing a sample of client records to verify that determinations were made, documented, and acted upon correctly. Casinos whose compliance programmes are found deficient in PEP and HIO implementation face administrative monetary penalties (AMPs) under the PCMLTFA, which can reach substantial amounts depending on the nature, frequency, and duration of the non-compliance.

Ontario’s iGaming framework reinforces the federal AML baseline directly. The AGCO Registrar’s Standards require operators to align their AML internal controls with those of the designated reporting entity under the PCMLTFA. Alberta’s iGaming framework, administered by the AGLC, similarly references compliance with federal AML obligations as part of the standards applicable to registered operators. The intersection of provincial iGaming registration requirements and federal FINTRAC obligations means that a deficiency identified in a FINTRAC examination could also constitute grounds for regulatory concern at the provincial level. Operators navigating both frameworks should consult the detailed comparison of AGCO and AGLC standards for additional context on how provincial requirements interact with federal AML obligations.

Practical Implementation Considerations

Compliance teams should ensure their PEP screening tools cover both foreign and domestic PEP lists, including Canadian federal, provincial, and municipal officeholders. Many commercial screening databases are stronger on foreign PEPs than on Canadian domestic PEPs, and gaps in domestic coverage are a recurring finding in FINTRAC examinations of Canadian financial sector entities, including casinos.

The close associate category presents particular challenges because no definitive list of close associates exists, the determination requires judgment applied to available information. Casinos should document the process by which they reach a close associate determination and retain that documentation as part of the client record. Where a close associate cannot be definitively confirmed or ruled out based on available information, the reasonable measures standard applies: the casino must demonstrate that it made genuine efforts to determine the relationship, not merely that it ran a name through a database.

Source of wealth verification for PEPs in the gaming context presents a specific tension: casino clients who are high-value players may present gaming winnings as a significant component of their wealth, but those winnings themselves may be funded by proceeds of corruption or other predicate offences. Compliance teams should trace the source of the initial funds used to generate those winnings, not accept gaming winnings as a self-contained source of wealth explanation. This is consistent with FINTRAC’s guidance that source of funds relates to the origin of funds used in a specific transaction and that inconsistency between stated source of funds or wealth and actual transaction activity requires follow-up.

Operators in Ontario’s regulated online market should be aware that the conduct-and-manage model operating through iGaming Ontario does not alter or reduce their FINTRAC obligations as reporting entities. The federal AML framework applies directly to casino operations regardless of the provincial licensing architecture. Qualified legal counsel should be consulted for any jurisdiction-specific questions about how FINTRAC obligations apply to a specific casino or iGaming operation.

Key Resources

FINTRAC, Politically Exposed Persons and Heads of International Organizations Guidance
https://www.fintrac-canafe.gc.ca/guidance-directives/client-clientele/pep/pep-eng

FINTRAC, Casino Client Identification and KYC Requirements
https://www.fintrac-canafe.gc.ca/guidance-directives/client-clientele/client/casino-eng

Proceeds of Crime (Money Laundering) and Terrorist Financing Act, S.C. 2000, c. 17
https://laws-lois.justice.gc.ca/eng/acts/P-24.501/

Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations, SOR/2002-184
https://laws-lois.justice.gc.ca/eng/regulations/SOR-2002-184/