Source of Funds and Source of Wealth Verification: Canadian AML Compliance Guide

Source of funds (SOF) and source of wealth (SOW) verification are key components of Enhanced Due Diligence (EDD) under Canadian AML law. The primary statute is the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), administered by FINTRAC (Financial Transactions and Reports Analysis Centre of Canada). The OSFI (Office of the Superintendent of Financial Institutions) issues guidance for federally regulated financial institutions, and provincial regulators (including the AMF in Quebec) impose additional requirements.

For a broader overview of EDD obligations, see our Enhanced Due Diligence EDD compliance guide.

This article is provided for informational purposes only and does not constitute legal, financial, or regulatory advice. Regulatory references are accurate as of June 2, 2026. Consult qualified legal counsel for advice specific to your institution's circumstances.

Canada's AML framework: federal structure with provincial layers

Canadian AML compliance operates within a federal structure where FINTRAC sets the national baseline, but provincial regulators (securities commissions, law societies, and professional bodies) add sector-specific requirements.

Canadian supervisory authorities:

Quebec's distinct regulatory layer

Quebec presents additional regulatory complexity. The Autorité des marchés financiers du Québec (AMF QC) regulates financial services in the province, and Loi 25 (Loi modernisant des dispositions législatives en matière de protection des renseignements personnels) — Quebec's privacy law — imposes obligations distinct from PIPEDA for organizations handling personal information in the province. Financial institutions operating in Quebec must comply with both PIPEDA/FINTRAC at the federal level and AMF QC/Loi 25 at the provincial level.

SOF and SOW in the Canadian context

Source of Funds (SOF) identifies the origin of specific funds used in a transaction or business relationship. Under FINTRAC's Politically Exposed Persons Guidance, the question is: where do these specific funds come from?

Source of Wealth (SOW) identifies how a client accumulated their total wealth over time. For PEPs and HNWIs, this requires a longitudinal review of income, business activities, inheritances, and capital gains.

When is SOF/SOW verification required in Canada?

The PCMLTFA and FINTRAC's compliance guidance define when EDD, including SOF/SOW documentation, is required.

EDD triggers under PCMLTFA and FINTRAC guidance

Politically Exposed Persons (PEPs) and Heads of International Organizations (HIOs) — Section 9.3 of the PCMLTFA and FINTRAC's PEP Guidance require EDD including SOF and SOW for all PEPs and HIOs. Canada applies this to both domestic PEPs and foreign PEPs — a key difference from some other jurisdictions. Family members and known close associates of PEPs are also covered.

High-risk clients or business relationships — Under the risk-based approach, any client classified as high-risk in the institution's risk assessment triggers EDD measures. FINTRAC's Compliance Guidance on Client Risk identifies factors such as client occupation, transaction patterns, and geographic risk.

High-value wire transfers and transactions — Transactions above $100,000 CAD involving high-risk jurisdictions or unusual patterns typically trigger enhanced scrutiny of fund origins.

Third-party transactions — Where funds are provided by a third party, FINTRAC's guidance requires understanding the identity and fund origin of the third party, not only the client.

Required documents for SOF verification in Canada

Government-issued identification — Canadian clients are identified using:

• Canadian passport
• Provincial driver's licence
• Permanent Resident Card (PR Card)
• Social Insurance Number (SIN) — used to cross-reference CRA records

CRA-issued documents — The Canada Revenue Agency (CRA) is the primary source of income verification documents:

• T4 slip (Statement of Remuneration Paid) — equivalent to UK P60 or US W-2
• T1 General (Income Tax and Benefit Return) — annual return with NOA (Notice of Assessment)
• T5 slip (Statement of Investment Income) for dividends and interest

Most common fund origins and required Canadian documentation

Employment income

• CRA Notice of Assessment (NOA) — most recent year
• T4 slips (most recent two to three years)
• Employment letter confirming current salary

Real estate sale proceeds

• Statement of Adjustments from real estate lawyer
• Land Title Office (provincial) registration confirming transfer
• Bank statement showing receipt of proceeds from lawyer's trust account

Business sale proceeds

• Share purchase agreement or asset sale agreement
• T2 corporate return (final year)
• Bank or trust account statement confirming receipt

Inheritance

• Letters Probate or Grant of Administration from provincial superior court
• Estate accounting showing distribution
• Bank statement confirming receipt from estate trustee

Mortgage or loan proceeds

• Mortgage commitment letter from federally or provincially regulated lender
• Statement of Adjustments from lawyer
• Bank statement showing mortgage drawdown

Investment income

• T5 slip (Statement of Investment Income)
• RRSP/RRIF/TFSA account statements (as applicable)
• T3 slip (Statement of Trust Income Allocations) for trust distributions

SOW verification documents

Canadian legal and regulatory framework

PCMLTFA — The PCMLTFA is the primary federal AML statute. Non-compliance can result in administrative monetary penalties (AMPs) up to $1 million per violation and criminal prosecution with fines up to $2 million and/or five years imprisonment under Part 3 of the Act.

FINTRAC administrative monetary penalties — FINTRAC has the authority to issue AMPs. Published cases show penalties ranging from $75,000 to over $7.4 million (TD Bank, 2022) for AML compliance failures, including inadequate EDD and SOF documentation.

OSFI E-13 Guideline — OSFI's Guideline E-13 requires federally regulated financial institutions to maintain enterprise-wide compliance management systems, including EDD procedures consistent with PCMLTFA obligations.

PIPEDA and Loi 25 — The Personal Information Protection and Electronic Documents Act (PIPEDA) governs personal information handling at the federal level. Quebec's Loi 25 (fully in force since September 2023) imposes additional obligations including mandatory privacy impact assessments (PIAs) for new personal information systems and enhanced breach notification requirements.

Automating SOF/SOW verification with CheckFile

CheckFile automates the critical steps in the SOF/SOW verification process for Canadian obliged entities:

• Document authenticity verification across 3,200+ document types in 32 jurisdictions, including CRA documents (T4, T1/NOA), provincial land registry extracts, and corporate registry certificates from Corporations Canada and provincial registries
• Structured data extraction to populate FINTRAC-compliant EDD case files without manual data re-entry
• Cross-document consistency validation — checking that names, SINs, amounts, and dates are consistent across T4s, bank statements, and sale agreements in the same EDD file
• Compliant archiving with full audit trail for PCMLTFA's seven-year record retention requirement under FINTRAC's compliance regulations

The platform integrates via API with PEP/sanctions screening and existing compliance case management systems. Learn more about our security approach and pricing, or visit CheckFile.ai.

For a complete overview of AML compliance requirements, see our anti-money laundering compliance guide.

Frequently Asked Questions

Does PCMLTFA require SOF verification for every transaction?

No. The PCMLTFA uses a risk-based approach: SOF documentation is required when the client's risk assessment warrants EDD. The institution's written compliance program, approved by senior management, defines when SOF inquiry is triggered. FINTRAC evaluates whether the program is appropriately calibrated during examinations.

What is the record retention period for SOF/SOW documentation in Canada?

The PCMLTFA and associated FINTRAC regulations require records to be retained for seven years from the date the business relationship ends or from the date of the transaction. This is two years longer than the EU standard (five years under AMLD/AMLR). For PEPs and high-risk clients, additional documentation generated during ongoing monitoring should also be retained for seven years.

How does Quebec's Loi 25 affect SOF/SOW document collection?

Loi 25 requires that privacy impact assessments (PIAs) be conducted for any new personal information collection system. If a Quebec-based financial institution implements a new digital SOF/SOW collection platform, a PIA is mandatory before deployment. Loi 25 also requires transparent disclosure of data collection purposes in the privacy notice, and data must be protected by security measures proportionate to sensitivity level.

Are foreign documents acceptable for Canadian SOF purposes?

Yes, with appropriate authentication. Documents from Hague Convention countries must bear an apostille. For other countries, notarization and certified translation into English or French are required. FINTRAC's Compliance Guidance recognizes that overseas clients present documentation challenges and allows for risk-based judgments on document equivalence.

What does FINTRAC look for during an EDD examination?

FINTRAC examiners assess whether the institution: (1) correctly identifies high-risk clients triggering EDD, (2) obtains adequate documentation of SOF/SOW, (3) conducts ongoing monitoring of high-risk relationships, (4) submits Suspicious Transaction Reports (STRs) when warranted, and (5) retains records for the required period. FINTRAC's published compliance assessment reports highlight SOF documentation gaps as a recurring finding.