FINTRAC Reporting for Alberta iGaming Operators: STR, LCTR, EFTR, and Casino Disbursement Obligations

Alberta’s regulated iGaming market opened on 13 July 2026, and every registered operator acquired a set of federal financial reporting obligations that sit entirely outside the AGLC’s own compliance regime. Those obligations flow from the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), S.C. 2000, c 17, and are administered by the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC). Getting the two regimes properly mapped and operationally separated, FINTRAC’s federal reporting on one track, AGLC’s provincial incident-reporting on the other, is the first practical task for any AML officer onboarding into the Alberta market.

The Reporting Entity Framework: Why Alberta iGaming Operators Are Caught

PCMLTFA section 5 defines the categories of “reporting entities” subject to the Act. Casinos, defined in the PCMLTFA Regulations (PCMLTFR, SOR/2002-184) as a “government, organization, board or operator that is referred to in any of paragraphs 5(k) to (k.3) of the Act,” sit squarely within the scope. Alberta’s iGaming market operates as a regulated lottery scheme conducted under provincial authority, and registered operators providing iGaming services through that scheme meet the definition of casino for PCMLTFA purposes.

This means Alberta iGaming operators are not merely expected to co-operate with FINTRAC, they are legally required to maintain a full compliance programme under the PCMLTFA and to submit five distinct report types to FINTRAC whenever the applicable triggers are met. The compliance programme must include a designated compliance officer, written policies and procedures, a risk assessment, a training programme, and a documented effectiveness review.

The AGLC Standards and Requirements for Internet Gaming (SRIG), issued January 14, 2026 and revised March 17, 2026, reinforce this directly. The SRIG requires registered operators and registered goods or services suppliers to “establish and maintain a comprehensive internal anti-money laundering and terrorist financing (AML/TF) program in compliance with the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), associated regulations, FINTRAC guidelines and the designated reporting entity’s AML/TF policies and procedures.” The internal controls must align with those of the designated reporting entity under PCMLTFA.

Who Is the Designated Reporting Entity in Alberta?

Alberta’s dual-authority structure creates an important jurisdictional question that does not arise in Ontario. The AGLC Go-Live Compliance Guide (last updated January 2026) is explicit: AML and financial reporting are directed to Alberta’s iGaming Corporation (AiGC), not to AGLC’s iGaming Compliance team. Submission methods for the Alberta market are divided between two channels. Incident-based notifications and regulatory submissions go to AGLC at iGamingCompliance@aglc.ca, while “anti-money laundering and financial reporting” goes to AiGC.

Individual registered operators are likely reporting entities in their own right for PCMLTFA purposes, but their internal AML controls must align with the programme maintained by the designated reporting entity, which in the Alberta context means aligning with AiGC’s policies and procedures. Operators that have not confirmed their reporting entity status with FINTRAC and have not obtained clarity from AiGC on programme alignment before going live are carrying unresolved compliance risk. Qualified legal counsel with Canadian AML expertise should advise on the specific designation applicable to each operator’s commercial structure.

FWR Enrolment: The Gateway to All FINTRAC Reporting

Before submitting any report to FINTRAC, a reporting entity must enrol in the FINTRAC Web Reporting System (FWR). Enrolment produces a seven-digit reporting entity number that must appear on every report submitted electronically. The reporting entity number is a mandatory field on all FINTRAC report forms, and its absence means the report cannot be processed.

Enrolment is not a one-time formality. The seven-digit number is the primary identifier FINTRAC uses to track a reporting entity’s submission history, to route compliance assessments, and to associate notices of violation with a specific entity. Operators that use a third-party service provider to submit reports must ensure the service provider uses the operator’s own reporting entity number, not the provider’s. Legal responsibility for the accuracy and timeliness of every submission remains with the reporting entity, regardless of whether a service provider has been appointed to file on its behalf.

Suspicious Transaction Reports (STRs): The Threshold-Free Obligation

What triggers an STR?

An STR must be submitted to FINTRAC when a financial transaction occurs, or is attempted, in the course of the operator’s activities and there are reasonable grounds to suspect that the transaction is related to the commission or attempted commission of a money laundering or terrorist activity financing offence. The standard is codified in PCMLTFA and the Proceeds of Crime (Money Laundering) and Terrorist Financing Suspicious Transaction Reporting Regulations (PCMLTFSTRR), SOR/2001-317.

“You are required to submit a Suspicious Transaction Report when you have completed the measures that enable you to establish that there are reasonable grounds to suspect that a transaction is related to the commission of a money laundering or terrorist activity financing offence.”, FINTRAC, Reporting suspicious transactions to FINTRAC guidance

An STR carries no dollar threshold. FINTRAC’s own guidance explicitly warns against “using a higher threshold as your basis for reporting” as a common deficiency identified through compliance assessments. A $500 deposit by a player whose account shows structuring behaviour, inconsistent source-of-funds explanations, or rapid in-and-out cycling can satisfy the reasonable grounds standard as readily as a transaction ten times that size.

What does “reasonable grounds to suspect” mean in an iGaming context?

FINTRAC defines the standard as sitting between “mere suspicion” and “balance of probabilities.” It requires that the reporting entity has taken sufficient measures to form a reasonable, articulable belief, grounded in facts, context, and recognised ML/TF indicators, that the transaction may be connected to a predicate offence. For online casino operations, the indicators FINTRAC has identified in its sector-specific guidance include rapid deposit-and-withdrawal cycling without meaningful play, use of multiple payment methods across a single account, large deposits inconsistent with a known player profile, requests for anonymised or minimal-trace payment methods, and behaviour designed to accumulate “winnings” that can be withdrawn as clean funds.

An attempted transaction also triggers the STR obligation. A player who initiates a $10,000 withdrawal and then abandons it when asked for source-of-funds documentation has engaged in an attempted transaction. The PCMLTFA definition of “attempted transaction” covers a client who starts to conduct a transaction that is not completed, and walking away from a transaction after KYC questioning is a textbook example.

Filing deadline and tipping-off prohibition

An STR must be submitted “as soon as practicable” after the reporting entity has established reasonable grounds to suspect. FINTRAC defines “as soon as practicable” as a period falling between “immediately” and “as soon as possible,” within which completion of the STR takes priority over other tasks. Some delay is permitted but must have a reasonable explanation. Operators whose transaction monitoring systems generate alerts must not allow those alerts to age without a documented review and disposition decision.

The PCMLTFA prohibits disclosing to any person, including the player, that an STR has been filed or will be filed, if the intent is to prejudice a criminal investigation. This tipping-off prohibition applies whether or not a law enforcement investigation has commenced. Operators must train customer-facing and AML staff not to reference STR filing when requesting additional KYC information or declining a transaction.

Large Cash Transaction Reports (LCTRs): The $10,000 Threshold

An LCTR must be submitted when a reporting entity receives $10,000 or more in cash in a single transaction, or under the 24-hour aggregation rule. The legal reference is PCMLTFR, SOR/2002-184, section 126. Cash means coins and bank notes issued by the Bank of Canada intended for circulation in Canada, as well as coins or bank notes of countries other than Canada.

The 24-hour rule applies when a reporting entity receives two or more cash amounts that total $10,000 or more within a consecutive 24-hour window, and knows that the transactions are conducted by the same person or entity, conducted on behalf of the same person or entity (involving a third party), or for the same beneficiary. The 24-hour window is not a calendar day. It is a rolling 24-hour period, and the reporting entity must define its own aggregation window in its compliance policies and procedures.

For online casino operations, the “cash” threshold is most directly relevant to casino cage transactions for land-based components of a gaming group, as well as to players who fund accounts through physical cash-handling intermediaries. Most Alberta iGaming deposits arrive as electronic funds transfers, debit card payments, or credit card charges, and those are governed by the EFTR regime described below, not the LCTR. Certain funding methods, such as cash-loaded prepaid cards or cash deposits made at third-party kiosks, can still constitute “cash” received for LCTR purposes, and operators must analyse each accepted payment rail to determine whether it triggers LCTR rather than EFTR obligations.

Foreign currency received in cash is converted to Canadian dollars using the Bank of Canada exchange rate in effect at the time of the transaction to determine whether the threshold is met. If no Bank of Canada rate is published for that currency, the operator uses its own rate established in the normal course of business, with that process documented in its compliance policies and procedures.

Electronic Funds Transfer Reports (EFTRs): The Primary Online Deposit Trigger

An EFTR must be submitted when a reporting entity sends or receives an electronic funds transfer of $10,000 or more. For Alberta iGaming purposes, this is the report type most likely to generate the highest volume of filings, because the overwhelming majority of deposits and withdrawals on an online platform move through electronic payment rails.

FINTRAC distinguishes between domestic EFTs and international EFTs. An international EFT is any transfer other than a transfer of funds within Canada. A player in Alberta depositing via a bank account held at a Canadian bank produces a domestic EFT. A player depositing through an overseas e-wallet or payment intermediary produces an international EFT. Both are reportable at the $10,000 threshold, but the form fields differ, and the information that must be captured about the intermediary or sender differs accordingly.

The filing deadline for EFTRs is 5 working days after the day the reporting entity sends or receives the transfer. Working days are defined in PCMLTFR as Monday to Friday, excluding Saturday, Sunday, and public holidays. An EFTR triggered on a Thursday must be filed no later than the following Thursday, assuming no intervening public holidays. Operators that rely on batched end-of-week processing must verify that their batch cycle closes within the working-day deadline, not merely within a calendar week.

A disposition of a large cash transaction that involves a reportable EFT requires both reports: the LCTR for the cash receipt and the EFTR for the resulting transfer. The two obligations are parallel, not alternative.

Casino Disbursement Reports: The Withdrawal-Side Obligation

Casino disbursement reporting is a distinct FINTRAC report type that applies specifically to the casino sector and covers the disbursement of funds from a player account. FINTRAC’s guidance for suspicious transaction reporting lists “Reporting casino disbursements to FINTRAC” as a separate category alongside LCTRs and EFTRs.

For online casino operations, a casino disbursement occurs when the operator pays out funds to a player, whether by bank transfer, cheque, e-wallet credit, or any other method. The disbursement reporting obligation is triggered at a defined monetary threshold and must be filed within a prescribed working-day window. Operators must consult FINTRAC’s sector-specific casino disbursement guidance and their legal counsel to confirm the current applicable threshold and deadline, as these are set out in the sector-specific regulations rather than the general LCTR and EFTR frameworks.

A key operational point for online casinos: the cashout side of the transaction is reported separately from the deposit side. An operator that receives a $10,000 deposit (triggering an LCTR or EFTR obligation) and later pays out those funds (triggering a casino disbursement obligation) must file two separate reports. Compliance teams that treat disbursement reporting as a downstream duplicate of LCTR filing will systematically under-report.

Report Structure: Starting Actions and Completing Actions

Every FINTRAC transaction report is structured around the concept of a transaction having a “starting action” (the instruction and funds presented to the reporting entity) and a “completing action” (how the reporting entity fulfilled those instructions). A single report can include multiple transactions, and each transaction can have multiple completing actions. The LCTR report form explicitly accommodates this structure, as illustrated in FINTRAC’s form guidance for multi-transaction reports.

For iGaming purposes, a player depositing $15,000 via bank transfer and immediately purchasing $15,000 in casino credits produces a starting action (bank transfer received) and a completing action (casino credit issued). If the player then redeems $15,000 in credits and requests a withdrawal, that produces a further reportable transaction with its own starting and completing actions. AML teams building transaction monitoring rules should map the expected report structure against each product type, including casino slots, live dealer, sports betting, and peer-to-peer games, because the completing actions available vary by product and payment rail.

Large Virtual Currency Transaction Reports (LVCTRs)

The PCMLTFA regime includes a distinct report type for virtual currency transactions: the Large Virtual Currency Transaction Report (LVCTR). The threshold is $10,000 CAD equivalent, determined using the exchange rate at the time of the transaction. The filing deadline is 5 working days, identical to EFTRs. The PCMLTFR defines a “large virtual currency transaction record” as a record indicating receipt of an amount of $10,000 or more in virtual currency.

Whether Alberta iGaming operators accept cryptocurrency for deposits is primarily a matter of AGLC approval and the commercial terms with AiGC, rather than a FINTRAC classification question. Operators who process any payment rails that involve virtual currency, including third-party payment intermediaries that convert fiat to virtual currency as part of their settlement process, must evaluate whether LVCTR obligations are triggered by those rails.

Filing Deadlines: Reference Table

Report Type	Trigger Threshold	Filing Deadline	Form
Suspicious Transaction Report (STR)	None, reasonable grounds to suspect	As soon as practicable	FINTRAC FWR
Large Cash Transaction Report (LCTR)	CAD $10,000 (single or 24-hr aggregate)	15 calendar days after transaction date	FINTRAC FWR
Electronic Funds Transfer Report (EFTR)	CAD $10,000	5 working days after send/receive date	FINTRAC FWR
Casino Disbursement Report	Sector-specific threshold (confirm with FINTRAC guidance)	Sector-specific deadline (confirm with FINTRAC guidance)	FINTRAC FWR
Large Virtual Currency Transaction Report (LVCTR)	CAD $10,000 equivalent	5 working days after receipt	FINTRAC FWR

Record Retention

When a reporting entity submits a Large Cash Transaction Report to FINTRAC, it must keep a copy of the report for at least 5 years from the date the report was created, as required under PCMLTFR, SOR/2002-184, section 144. The retention obligation applies to all FINTRAC report types, not only LCTRs. FINTRAC’s large cash transaction guidance states the 5-year retention requirement with the legal reference to PCMLTFR subsection 148(1)(c).

The AGLC SRIG adds a second layer: copies of all reports filed with FINTRAC and supporting records must be made available to AGLC in accordance with the established Notification Matrix. Retention is therefore not simply a question of archiving reports in a format readable by FINTRAC on examination. Records must be produced to AGLC inspectors on request, and compliance teams must ensure their document management systems can generate a complete FINTRAC filing history for any player account on demand, not only at scheduled audit intervals.

Intersection with AGLC’s Incident-Reporting Regime

Alberta registered operators face a parallel, provincially mandated reporting obligation that runs separately from their FINTRAC submissions. The AGLC SRIG is explicit: suspicious behaviour, fraud, cheating at play, and unlawful activities, whether attempted or completed, must be reported in accordance with AGLC’s Notification Matrix. Immediate reporting of illegal or suspected illegal activities to AGLC is a condition of registration.

The AGLC Go-Live Compliance Guide identifies two distinct submission channels. Incident-based notifications and regulatory submissions go to AGLC iGaming Compliance at iGamingCompliance@aglc.ca. AML and financial reporting go to AiGC. The SRIG specifically requires operators to:

“immediately report to AGLC’s Customer Care Centre (1-800-561-4415) any and all suspicious activity, evidence of cheating at play, theft, or other suspected criminal offences.”, AGLC, SRIG, Security Requirements: Reporting and Notification, issued January 14, 2026.

An STR filed with FINTRAC does not discharge the AGLC incident-reporting obligation, and an AGLC incident report does not substitute for an STR. The two obligations are triggered by related but distinct legal standards: the PCMLTFA “reasonable grounds to suspect” standard for STRs, and the AGLC’s condition-of-registration obligation to immediately report suspected criminal activity. Both tracks must be live and staffed before an operator accepts a single real-money transaction.

For sports and event betting operators, the SRIG adds a third reporting strand: unusual or suspicious betting activity must be reported to an Independent Integrity Monitor registered by AGLC. The Independent Integrity Monitor then disseminates alerts to all member sports and event betting operators, and if the activity rises to the level of suspicious activity, must immediately notify relevant parties including governing sports authorities and other organisations identified by AGLC. A large irregular wager on a match with known integrity concerns may simultaneously satisfy both the FINTRAC STR standard and the Independent Integrity Monitor alert threshold.

Enforcement Risk: What Canadian Gaming AML Failures Look Like

FINTRAC’s enforcement tool is the administrative monetary penalty (AMP), a civil penalty issued under the PCMLTFA and associated Proceeds of Crime (Money Laundering) and Terrorist Financing Administrative Monetary Penalties Regulations (PCMLTFAMPR), SOR/2007-292. AMPs can be issued for failures across any element of the compliance programme, including reporting failures, policy deficiencies, and inadequate risk assessments.

The enforcement trajectory is instructive for Alberta operators. According to iGamingBusiness (July 2026), FINTRAC issued a record 35 notices of violation across all industries totalling $247 million in fines during 2025-26. The Atlantic Lottery Corporation (ALC) paid $212,025 to FINTRAC in July 2026 for three violations: failure to report suspicious transactions, outdated compliance policies, and inadequate risk assessment documentation. ALC chose to pay rather than contest the penalty, noting that the fine did not imply actual involvement in money laundering by the entity or its players. Other Canadian gaming entities including BCLC and SIGA are contesting significantly larger FINTRAC penalties in federal court.

The ALC case identifies the three failure modes that FINTRAC assessments most commonly surface in the gaming sector: STR under-reporting, stale compliance policies that no longer reflect current risk exposure, and risk assessments that are either absent or insufficiently granular to guide operational decision-making. Alberta operators entering a brand-new market face the additional risk that their initial risk assessments may not adequately account for the specific ML/TF patterns that emerge in iGaming environments, which differ materially from land-based casino risk profiles.

SRIG AML Requirements: The Alberta-Specific Layer

Beyond the FINTRAC obligations that apply to all Canadian casino reporting entities, Alberta operators must satisfy the SRIG’s AML-specific standards. At a minimum, the SRIG requires registered operators and goods or services suppliers to implement risk-based policies, procedures, and controls that provide for escalating measures to address players engaging in behaviours consistent with money laundering, terrorist financing, or sanction evasion indicators, including the refusal of transactions or exclusion of the player. Operators must specify the times and situations, based on risk assessment, where they will ascertain and reasonably corroborate a player’s source of funds. The SRIG also requires mechanisms to lawfully share information about high-risk, suspicious, or criminal activities with other registered operators that may be subject to similar activity.

The source-of-funds requirement is operationally significant for iGaming. Unlike a land-based casino cage where a player presents physical cash, an online platform receives deposits that can arrive through multiple layered payment methods. An operator’s source-of-funds corroboration process must be capable of capturing the payment chain behind each deposit method it accepts, not merely the last-mile payment instruction, and must trigger escalating review when players reach defined risk thresholds. Those thresholds should be calibrated against the operator’s own risk assessment, not simply set at the LCTR reporting threshold of $10,000.

For a detailed comparison of how the AGLC SRIG AML framework differs from the AGCO’s equivalent Ontario standards, see our analysis of key differences between AGCO and AGLC internet gaming regulation. Operators already registered in Ontario will find that the structural AML obligations are broadly consistent, but the institutional routing of AML outputs to AiGC rather than directly to a single regulator requires an Alberta-specific process adjustment.

For operators approaching Alberta as a new market, our coverage of the AGLC SRIG framework and pre-launch compliance obligations provides the broader registration and operational context within which these AML reporting obligations sit. Begin by completing your FINTRAC FWR enrolment and confirming your reporting entity status with FINTRAC before accepting any real-money transactions.

Key Resources

FINTRAC, Reporting suspicious transactions to FINTRAC (STR guidance): fintrac-canafe.gc.ca

FINTRAC, Reporting large cash transactions to FINTRAC (LCTR guidance): fintrac-canafe.gc.ca, legal references PCMLTFR SOR/2002-184, sections 126, 132(3), 133, 144, 148(1)(c)

FINTRAC, Reporting electronic funds transfers to FINTRAC (EFTR guidance): fintrac-canafe.gc.ca

FINTRAC, Reporting casino disbursements to FINTRAC (Casino disbursement guidance): fintrac-canafe.gc.ca

AGLC, Standards and Requirements for Internet Gaming (SRIG): issued January 14, 2026, revised March 17, 2026, authority: AGLC Board Chair

AGLC, Internet Gaming Go-Live Compliance Guide: last updated January 2026, includes Notification Matrix and submission channel directions

Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA): S.C. 2000, c 17, Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations, SOR/2002-184, PCMLTFSTRR, SOR/2001-317, PCMLTFAMPR, SOR/2007-292

This article addresses FINTRAC and AGLC reporting obligations as they apply to Alberta iGaming operators. The specific designation of a reporting entity under PCMLTFA and the allocation of AML obligations between an operator and AiGC depend on the operator’s commercial structure and registration category. Operators should obtain advice from qualified legal counsel with Canadian AML and gaming law expertise before finalising their compliance programmes.