RECO and FINTRAC are two different regulators with two different jobs, running on two different clocks. A compliance system that treats them as one checklist will miss half of each one's actual requirements.
Key takeaways
STEP 01 OF 10
RECO’s own brokerage staff compliance training frames its "Introduction to TRESA" course as covering the law that actually regulates the sector in Ontario — the Trust in Real Estate Services Act, 2002 — and what it means for brokerages specifically. Every registrant and every staff member should be able to name it, not just recognise "RECO" as a general regulator.
STEP 02 OF 10
RECO governs registration, trust funds, and professional conduct. FINTRAC governs anti- money-laundering and terrorist-financing reporting under a completely different federal statute. They run in parallel, with different deadlines, different reports, and different consequences for missing either one. A compliance system that merges them into a single checklist will miss half of each regulator's actual requirements.
STEP 03 OF 10
FINTRAC’s own guidance for the sector states that brokers and sales representatives must meet PCMLTFA obligations when acting as an agent for a purchaser or vendor in a property transaction — "this applies even if you do not receive commission for the real estate transaction." Property management activity such as leasing and rentals is excluded. Know exactly which of your brokerage's activities fall inside that line and which sit outside it, because the obligations attach to the specific activity being performed, not to the licence held generally.
STEP 04 OF 10
FINTRAC’s compliance guidance sets out five elements, verbatim: a compliance officer with "the necessary authority and access to resources"; written policies and procedures "approved by a senior officer"; a documented risk assessment of money-laundering and terrorist-financing risk; a written, ongoing training program with a documented plan; and a documented plan for a review of the program's effectiveness, carried out "every two years at a minimum," starting no later than 24 months from the start of the previous review. Build the operating system around these five named elements directly, rather than a generic compliance checklist that happens to cover similar ground.
One named, accountable owner for each of the five elements is the same discipline used throughout this hub’s adoption planning guide for a different decision — a program with five elements and no clear owner for any of them tends to have all five technically exist and none of them actually running.
STEP 05 OF 10
FINTRAC’s business relationship guidance sets a real-estate-specific rule: for brokers, sales representatives, and developers, a business relationship begins "the first time that you are required to verify their identity" — not on a second transaction within five years, which is the general rule used in other reporting sectors. Business relationship records must document the purpose and intended nature of the relationship and be retained for five years. A compliance checklist borrowed from another industry's AML guidance will get this trigger point wrong.
STEP 06 OF 10
FINTRAC’s sector guidance sets large cash and large virtual-currency transaction reports at $10,000 or more in a single transaction, subject to a 24-hour reporting requirement, alongside suspicious transaction reporting and beneficial-ownership confirmation obligations. Build these into the transaction workflow itself — a flag that fires automatically at the threshold — rather than relying on a person remembering the number and the clock under deadline pressure.
STEP 07 OF 10
RECO offers non-registered brokerage staff FINTRAC Compliance Training and Introduction to TRESA courses specifically, and states plainly that these do not qualify for Continuing Education credit. That makes them a separate line item in the operating system, not something that quietly piggybacks on a registrant's own renewal education.
This matters because administrative staff are often the people actually opening files, verifying identity documents, and handling trust money day to day — the compliance program's written policies are only as good as the training of the people executing them.
STEP 08 OF 10
FINTRAC's effectiveness review and RECO's registration renewal run on different clocks, and a system that tracks one without the other will eventually let the quieter one lapse. Put both dates on the same calendar, owned by the same accountable person, and see the brokerage onboarding programme for how new registrants enter this same system from day one.
A brokerage growing quickly tends to be the one most likely to let this slip, simply because attention is on new registrants and new listings rather than a recurring compliance date that does not feel urgent until it is overdue.
STEP 09 OF 10
Starting effective October 1, 2026, every Ontario brokerage must submit an Annual Financial Filing to RECO. The submission window is 90 days from the brokerage's fiscal year end, and the filing "includes an attestation by the broker of record to confirm that all information submitted is factual and accurate" — a personal attestation, not a form a bookkeeper files unread.
This sits alongside, not inside, the FINTRAC five-element program from step four. Put both deadlines — the 90-day financial filing and the two-year FINTRAC review from step eight — on the same compliance calendar the operating system already needs, rather than tracking them in two different places.
STEP 10 OF 10
RECO's Bulletin 8-2 is specific: on discovering a trust account shortfall, a brokerage must "immediately: 1. Notify RECO of the shortfall; and, 2. Deposit sufficient funds in the account to eliminate the shortfall." The same immediate standard applies to missing non-monetary property held in trust. The only carve-out is a shortfall caused purely by financial institution service fees, which need not be reported to RECO as long as it is corrected as soon as it is discovered.
"Immediately" is doing real work in that sentence — this is not a finding to hold for the next scheduled compliance review. Build the reporting step into the same trust-reconciliation process the operating system already runs monthly, so a shortfall is caught and reported the same day, not surfaced weeks later at a routine check.
Treating FINTRAC training as covered by RECO's CE requirement. RECO states directly that its FINTRAC and TRESA staff courses do not count toward Continuing Education credit. A registrant who has completed their CE cycle has not automatically completed the brokerage's separate FINTRAC training obligation.
Applying the generic second-transaction business-relationship rule. Real estate has its own trigger — first required identity verification, not a second transaction within five years. A compliance program borrowed wholesale from another sector's AML guidance will get this specific point wrong.
Appointing a compliance officer without the authority to act. FINTRAC's own guidance is explicit that the compliance officer needs real authority and access to resources. A title without either is not the same as meeting the first of the five required elements.
Letting the risk assessment become a one-time document. A risk assessment written once at program launch and never revisited does not reflect how the brokerage's business, clients, or transaction types may have changed since. Pair it with the same two-year review cycle as the effectiveness review.
Assuming property management activity is covered by the same rules. FINTRAC's guidance excludes leasing and rental activity from the same obligations that apply to purchase and sale transactions. A brokerage running both lines of business needs to know exactly where that line sits in its own operations, rather than applying one blanket policy to both.
Treating the compliance officer role as a title rather than a job. Naming a compliance officer on paper without giving them real time, budget, or authority to act satisfies the letter of the first required element while missing its point. FINTRAC's own guidance ties the role explicitly to having actual authority and access to resources, not just the title on an organisational chart that nobody else in the brokerage ever refers back to.
Treating a trust shortfall as something to raise at the next scheduled review. Bulletin 8-2's own word is immediately — build the notification into the existing monthly reconciliation, not a quarterly compliance meeting.
Step one already asks which statute governs a given situation. Here is why getting that answer wrong on a marketing claim carries real exposure, not just a regulatory letter.
Scenario A. A brokerage's marketing materially overstates a property's condition to the public in a way a court finds "false or misleading in a material respect" under the Competition Act s. 52(1). On indictment, the maximum penalty is a fine at the court's discretion or up to fourteen years' imprisonment, or both; on summary conviction, up to $200,000 or one year, or both.
Scenario B. The same underlying conduct, pursued instead as the civil reviewable practice under s. 74.01(1) rather than the criminal provision, carries a different process and a different exposure profile entirely, without a criminal conviction attached.
Which track a regulator or the Competition Bureau actually pursues is not the brokerage's choice to make after the fact. The operating system's job, per step one, is to make sure the marketing claim was accurate before either track becomes a live question at all.
Step two already separates RECO obligations from FINTRAC obligations. Add a third to the same list.
A compliance operating system built around only the first two misses a real source of exposure that has nothing to do with either RECO or FINTRAC.
No — treat it as an addition to the operating system's calendar starting October 1, 2026, alongside the existing brokerage-administration obligations from step one, not a replacement for any of them.
The same person who owns the monthly trust reconciliation the operating system already runs — adding a second person to that specific duty just adds a handoff where none is needed.
Both are public representations for the purpose of promoting a business interest, which is the trigger s. 52(1) and s. 74.01(1) both use — treat website copy with the same scrutiny as a listing, not as a lower-stakes category.
A 30-minute call is enough to tell you whether it is worth building.
