FINTRAC STR Filing Guide 2026 for Canadian MSBs

How to File STRs That Hold Up in an Audit

STR quality and timeliness are among the most scrutinized areas in FINTRAC examinations.

Learn how to assess suspicion, meet the 'as soon as practicable' standard, and build a workflow that reduces rework and regulatory risk.

One Minute Setup
Free to Start
No Credit Card Required

What Triggers an STR in 2026

An STR must be filed when there are reasonable grounds to suspect, based on facts, context, and indicators, that a completed or attempted transaction is related to:

  • money laundering,
  • terrorist activity financing, or
  • sanctions evasion offences.

There is no monetary threshold for STRs. A small transaction can still require reporting if the facts and context support suspicion.

Filing Timeline: "As Soon as Practicable"

The filing standard is not a fixed numeric deadline like threshold reports. Once your team completes its measures and reaches reasonable grounds to suspect, STR preparation and submission should move as a priority and be filed as soon as practicable: urgent, not whenever convenient.

Long gaps between suspicion and filing need documented justification; unexplained delay is hard to defend.

FINTRAC deliberately uses practicable (not practical): file as soon as doing so is feasible after assessment and preparation, not at a loosely convenient time.

Delays between suspicion and filing without documented justification are a common examination finding.

Aligning Your Process to FINTRAC's Measures Framework

A defensible STR process maps clearly to four core measures:

  1. Screen and identify suspicious transactions
  2. Assess facts and context using customer and transaction history
  3. Link indicators to possible ML, TF, or sanctions evasion concerns
  4. Explain grounds for suspicion in the report narrative

A Practical 7-Step STR Workflow

(This is where most teams break down.)

  1. Intake and triage alerts from frontline teams and monitoring systems
  2. Perform initial quality checks to remove false positives
  3. Investigate with complete customer, transaction, and behavior context
  4. Reach and document decision on reasonable grounds to suspect
  5. Draft clear report narrative, including timeline and indicators
  6. Run second-review QA for consistency and completeness
  7. Submit, archive evidence, and track cycle-time and quality metrics

Required Data Quality Controls

Before filing, validate:

  • source of suspicion or trigger reference,
  • customer and entity identifiers,
  • chronology of events,
  • transaction amounts and currency consistency,
  • counterparty and channel details where available,
  • explicit grounds for suspicion in narrative form,
  • approval trail and reviewer sign-off.

Cross-Reporting Obligations You Must Not Miss

Each reporting obligation is independent. Filing an STR does not satisfy LCTR, LVCTR, or EFTR requirements.

If suspicious activity also triggers another report type, those reports are filed in addition to the STR. Depending on the event, this can include LCTR, LVCTR, EFTR, and where applicable LPEPR obligations.

Common STR Failure Points

  • Vague suspicion language
  • Missing timeline logic
  • Delayed escalation
  • Weak evidence traceability
  • Late filing due to handoff gaps

Why Teams Move to Structured Workflows

Manual STR workflows break under scale because data, review notes, and decision rationale are spread across inboxes and files. Standardized workflows improve consistency and help produce review-ready records when requested.

Comply+ includes proprietary aiSTR™ technology that helps surface suspicious activity and drafts FINTRAC-compliant STR narratives aligned with regulator expectations, so your team can focus on review and sign-off. Need someone else to run it? Our Managed Filing Service handles setup, filing, and monthly summaries: you send the data, we handle preparation and filing. Comply+ also includes access to Comply+ Academy for FINTRAC compliance training.

Frequently Asked Questions

Is there a minimum dollar amount for filing an STR?

No. STR obligations are based on suspicion, not transaction size.

Do attempted transactions need STR review?

Yes. Attempted transactions can be reportable where suspicion criteria are met.

What does FINTRAC expect in the suspicion details section?

Clear facts, indicators, context, timeline, and reasoning that explain why suspicion was reached.

Can software replace analyst judgment?

No. Human assessment remains essential. Software supports consistency, speed, and evidence quality.

What gets examined most during reviews?

Timeliness, rationale quality, record completeness, and whether your controls detect and escalate reportable activity consistently.

Enforcement & Penalties

The Cost of Non-Compliance

FINTRAC enforcement is intensifying. Recent penalties demonstrate that compliance failures result in significant financial consequences, with Bill C-2 increasing maximum penalties to $20 million for entities.

Recent FINTRAC Penalties

FINTRAC has imposed significant Administrative Monetary Penalties (AMPs) for compliance failures across multiple sectors.

Juba Express Inc. — $67,150

December 2025 — Toronto, Ontario

Multiple compliance failures including no effective compliance regime, no proper risk assessment, and failures to submit EFT and LCT reports.

Read case study

MP Technology Services Ltd. — $536,853.35

December 2025 — Foreign MSB (Seychelles)

Failed to submit STRs for transactions with exposure to darknet marketplaces, sanctioned entities, and child sexual abuse material.

Read case study

Xeltox Enterprises (Cryptomus) — $176,960,190

October 2025 — British Columbia

2,593 violations including 1,068 unreported STRs, 1,518 unreported LVCTRs, and failure to comply with Ministerial Directive on Iran.

Read case study

KuCoin (Peken Global) — $19,552,000

September 2025 — Foreign MSB (Seychelles)

Unregistered foreign MSB, 2,952 unreported LVCTRs, and 33 unreported STRs linked to darknet marketplaces and illicit chemical trade.

Read case study

Bill C-2: Increased Penalties

Under Bill C-2 (tabled June 2025), maximum Administrative Monetary Penalties would increase dramatically:

  • Entities: Up to $20 million (previously $500,000) — a 40x increase
  • Individuals: Up to $4 million (previously $100,000)
  • Criminal penalties: Certain compliance failures can result in criminal prosecution
Learn more about Bill C-2

Enforcement Trends

  • 23 Notices of Violation issued in 2024–25, the highest annual volume since 2008
  • More than $25 million in total penalties in 2024–25
  • Over 150 penalties imposed since 2008 across all regulated sectors
  • FINTRAC is moving to a supervisory model anchored in credible deterrence

Why Choose Comply+

Purpose-built for Canadian FINTRAC compliance. Automate reporting, reduce risk, and scale your operations.

Comprehensive Reporting

Handle all FINTRAC transaction types with automated LCTR, LVCTR, EFTR, and STR detection and submission. Our system identifies reportable transactions across cash, virtual currency, and electronic funds transfers.

AI-Powered Detection

Our proprietary aiSTR™ technology helps surface suspicious activity and drafts FINTRAC-compliant narratives. Reduce false positives and ensure nothing falls through the cracks.

Scalable Operations

Scale your operations without increasing compliance overhead. Automate reporting workflows to handle growth from hundreds to thousands of transactions per month.

Platform Features

Complete FINTRAC Compliance Solution

From batch uploads to direct FINTRAC submission — everything you need in one platform

Direct FINTRAC Submission

Submit reports directly to FINTRAC securely. No need to log in to the FINTRAC website — everything is handled within Comply+.

Autopilot Mode for Connected Databases

For fully connected databases, enable autopilot for automatic submission of LCTRs, LVCTRs, and EFTRs. Our proprietary aiSTR™ technology handles suspicious transaction detection, requiring manual review only for STRs.

Intelligent Batch Processing

For non-connected databases, upload a CSV of transactions. Automatically detect required reports and generate draft LCTRs, LVCTRs, EFTRs, and STRs with AI-powered analysis.

AI-Driven STR Detection

Our proprietary aiSTR™ technology automatically flags high-risk transactions and drafts narratives aligned with FINTRAC risk indicators. You retain full control with manual overrides.

Customer & Location Management

Maintain complete customer and location data with direct integrations to providers like SumSub. Reports auto-populate with existing records.

Draft & Save Reports

Create and save draft reports — including AI-generated STR narratives — for later completion. Work at your own pace with automatic data preservation.

STR Extensions Made Simple

Add STR extensions to existing reports (LCTR/LVCTR/EFTR/CDR) with one click. Fill only additional fields — no separate forms.

COMING SOON

AI Model Configuration

Risk Detection Settings

Risk Indicator A
Identified: 87%
Risk Indicator B
Identified: 94%
Risk Indicator C
Identified: 82%
Overall Risk Rating78%

Recommended STR filing

aiSTR 2.0

Advanced risk flagging via AI. Machine learning flags suspicious transaction patterns — reducing false positives and helping teams act faster on STRs.

Direct Slack integration for no login STR review/submissions

Maximize risk detection with custom set, and AI-driven risk indicators

Set your risk indicator weightings, or let aiSTR optimize detection

Generate higher accuracy through reinforced learning

30-Minute Demo

FINTRAC STR Filing Guide 2026 for Canadian MSBs

In 30 minutes, walk through how Comply+ helps you move from transaction data to draft reports, STR review with your team, and FINTRAC API submission without logging into the Web Reporting System (FWR) for each filing.

1. Draft report preparation

Upload a CSV or connect your system and see how Comply+ helps surface reportable activity for LCTR, LVCTR, EFTR, and CDR workflows.

2. STR review path

See how aiSTR™ supports narrative drafts and how your team reviews and decides what is filed.

3. Submit and confirm

Follow submission through FINTRAC's API and where confirmations and status live in Comply+.

Book the same workflow as above

Enter your work email. We will open the calendar to schedule your demo.

We will send demo details and redirect you to schedule

Disclaimer

This page is provided for general informational purposes only and reflects our interpretation and opinions based on publicly available information at the time of writing. It does not constitute legal advice, financial advice, regulatory guidance, or a substitute for professional counsel. Reporting entities and businesses subject to FINTRAC obligations should consult qualified legal and compliance advisors before making decisions relating to FINTRAC, AML obligations, or compliance requirements.