AI agents for business finance: what they can and can't do
What AI agents can do in bookkeeping, close, collections and compliance today, where a person must stay in charge, and how to judge a product.
The short answer
A Canadian business has FINTRAC obligations only if it is a reporting entity under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, such as a money services business, real estate broker or developer, dealer in precious metals and stones, accountant doing certain activities, or casino. Reporting entities must, among other things, report cash of $10,000 or more within 15 calendar days, report suspicious transactions and run a compliance programme. An agent can track and draft, but suspicion and reporting decisions belong to the compliance officer.
Who is a reporting entity
FINTRAC is Canada's financial intelligence unit. Its rules apply to listed sectors, not to every business. The main ones relevant to small firms are:
- Money services businesses, including foreign ones serving people in Canada.
- Real estate brokers, sales representatives and developers.
- Dealers in precious metals and stones, above set purchase or sale amounts.
- Accountants and accounting firms, when they receive or pay funds or give instructions on behalf of a client, not for audit or tax work alone.
- British Columbia notaries, casinos, life insurance businesses, securities dealers, armoured car businesses and mortgage administrators, brokers and lenders.
If you are not in a listed sector, FINTRAC's reporting duties do not apply to you, though sanctions laws still do.
The main reports
| Report | General trigger | Timing |
|---|---|---|
| Large cash transaction report | Receiving $10,000 or more in cash in one transaction, or in amounts totalling that within 24 hours involving the same person or beneficiary | Within 15 calendar days |
| Suspicious transaction report | Reasonable grounds to suspect a transaction is related to money laundering or terrorist financing, at any amount | As soon as practicable |
| Terrorist property report | Property known or believed to be owned or controlled by a terrorist group or listed person | Immediately |
| Other reports | Large virtual currency or electronic funds transfer reports for certain sectors | Per FINTRAC guidance |
FINTRAC's large cash guidance says foreign currency is converted using the Bank of Canada rate in effect at the time, and cheques, money orders and virtual currency are not cash for this report. A copy of each report must be kept for at least five years.
The compliance programme
Every reporting entity must have a compliance programme, scaled to its size and risk. Its elements are:
- A named compliance officer with the authority and resources to do the job.
- Written, up-to-date policies and procedures.
- A documented risk assessment of the business's exposure to money laundering and terrorist financing.
- An ongoing written training programme for staff and agents.
- A review of the programme's effectiveness every two years.
Alongside the programme come client identification, record keeping, ongoing monitoring and checks for politically exposed persons and heads of international organisations.
What an AI agent can do
- Flag cash receipts of $10,000 or more, and link receipts within 24 hours for the same person.
- Convert foreign cash at the Bank of Canada rate on the day and show the working.
- Start the 15-day clock and draft the report for the compliance officer.
- Run identity verification checklists and refuse to complete onboarding with gaps.
- Hold the training log, the risk assessment review date and the two-year effectiveness review.
- Keep records with a retention date at least five years on.
What stays with a person
Whether there are reasonable grounds to suspect a transaction is the compliance officer's judgement, and the reporting entity must not tell the client a suspicious transaction report is being made. An agent can surface unusual patterns. It should never conclude that something is fine, or delay a report while it gathers more data.
Worked example
Example only. A small money services business in Toronto receives US$5,000 in cash at 10:00 and US$3,000 at 16:00 from the same customer, for transfers to the same beneficiary. The agent converts both at the Bank of Canada rate, totals them above $10,000 in Canadian dollars, and opens a large cash transaction report due within 15 calendar days. It also notes that the customer split the cash across two visits and flags this to the compliance officer, who reviews the history and decides whether there are grounds for a suspicious transaction report.
Records FINTRAC expects you to keep
Reports are only part of the duty. Reporting entities must keep records that let FINTRAC reconstruct transactions and see who was behind them. The exact list depends on the sector, but commonly includes:
- Records of how a client's identity was verified, including the method, the document and the date.
- Large cash transaction records with the source of the cash and the purpose of the transaction.
- Receipts of funds over set amounts, and information on third parties acting for a client.
- Beneficial ownership information for corporate clients, and the steps taken to confirm it.
- Records of politically exposed person determinations.
Most records must be kept for at least five years and be producible within 30 days of a request. FINTRAC examines reporting entities, and administrative monetary penalties can follow failures. A small entity that keeps clean, dated records is in a much stronger position at examination than one that relies on memory. An agent's value here is consistency: every file built the same way, with the same fields, ready to export.
Where Pryme fits
The Pryme Compliance agent screens customers and counterparties, keeps an obligations register and records refusals. A sanctions or PEP match holds the funds and goes to a person. For more on monitoring, see AI for KYC and AML monitoring and cash reporting in four countries.
Questions people ask
Does every Canadian business report to FINTRAC?
No. Only reporting entities in listed sectors have FINTRAC reporting duties. Sanctions laws apply more widely.
How long do I have to file a large cash transaction report?
Within 15 calendar days after the day you receive the cash, according to FINTRAC guidance.
Are cheques counted as cash?
No. FINTRAC's large cash guidance excludes cheques, money orders and virtual currency, which may fall under other reports.
Can an AI agent be the compliance officer?
No. The compliance officer must be a person with authority. An agent can support them with tracking, drafting and records.
Sources
- FINTRAC: Reporting large cash transactions · accessed Oct 2026
- FINTRAC: Armoured cars, FINTRAC's requirements · accessed Oct 2026
- FINTRAC: Record keeping for money services businesses · accessed Oct 2026
- Bank of Canada: Exchange rates · accessed Oct 2026
This article is general information, not financial, legal or tax advice. Products described are provided under the terms on this site and are subject to regulation and eligibility.