Sanctions and PEP Screening in Canada: Customer Checks and Review Records

A Canadian screening process needs more than a name search. Teams must know which sources cover the relevant restrictions, whether a possible match concerns the supplied person, and which decision or reporting duty follows. A PEP result raises a different question from a sanctions designation, and a corporate customer's clear name result does not resolve its ownership or control.

This guide helps compliance teams organise sanctions and PEP checks for Canadian operations and evaluate screening software against that workflow. Use the practical sanctions-screening guide for the general process; the Canadian distinctions below determine how that process should be adapted.

Identify the Canadian rules before choosing lists

Canadian sanctions operate through the United Nations Act, the Special Economic Measures Act (SEMA) and the Justice for Victims of Corrupt Foreign Officials Act (JVCFOA), with specific restrictions set by the applicable measures. Global Affairs Canada explains the framework; the relevant regulation determines the actual prohibition, exception or permit requirement.¹

Record the legal entity, activity, parties and jurisdictions involved. Canadian sanctions compliance is not limited to FINTRAC reporting entities. Determine the firm's obligations under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) separately. Assess any applicable foreign regimes on their own facts rather than assuming either Canadian or foreign list coverage settles every question.

Check coverage across Canadian sanctions lists

The autonomous list covers SEMA and JVCFOA listings, not every Canadian sanctions measure. Global Affairs Canada warns that the list has no force of law and that prohibitions may differ between entries. Use it alongside the relevant regulations and other applicable sources.²³ Public Safety's listed-entities resource provides the list established under the Criminal Code terrorism-listing framework.⁴

Keep a source register showing why each dataset is included, its origin, retrieval date and last successful import. Assign responsibility for detecting changes and handling failed updates. Source availability, a successful download and a successful screening-system import are different checks.

For repeated screening, decide which source or customer changes should trigger a new check. Avoid a universal annual or daily schedule unless the applicable requirements and operating process support it.

Apply Canadian PEP and HIO definitions

FINTRAC distinguishes domestic PEPs, foreign PEPs and HIOs. A domestic PEP includes specified Canadian offices held currently or within the last five years; the definition expressly includes a mayor, reeve or similar chief municipal officer. Not every public employee or municipal councillor automatically qualifies. Foreign PEP status does not expire. HIO status concerns the head of a qualifying international organisation, institution or international sports organisation, with a five-year period after leaving office or death.⁵

Family and close-associate determinations have their own scope. Record the actual relationship instead of treating every relative, director or business contact as automatically covered. Use FINTRAC's definitions and timing rules, including its specific treatment of deceased office-holders and associated persons.⁵

The role belongs to the person, not automatically to every company they own. Record which person has been identified, the relevant office, dates and relationship to the customer. A PEP or HIO classification is not a sanctions designation or a finding of criminal conduct.

Match PEP measures to the reporting sector and event

FINTRAC separates account-based sectors, non-account-based sectors and life-insurance guidance. Do not apply one account-opening or transaction rule to every business.

For financial entities, securities dealers and casinos, account-based guidance covers determinations at specified account, monitoring and transaction events. It also distinguishes foreign PEP treatment from domestic PEP/HIO cases where the risk assessment establishes high risk. Required measures and records depend on the event.⁶

Non-account-based guidance separately addresses business relationships, periodic monitoring, detected facts and specified transactions. For example, it distinguishes transaction requirements for money services businesses from those for other listed sectors. Use the relevant section to set the person to assess, measures, deadline and record—not a generic transaction threshold copied across every sector.⁷

Write these requirements into an operating matrix:

For the broader review method, see the PEP screening guide. Its UK-specific provisions do not substitute for Canadian rules.

Resolve candidates using identity evidence

Provide the full name, subject type and reliable identifiers available for the person or company being screened. Supply relevant owners, controllers or other parties separately; screening a company name does not discover its ownership chain.

When a candidate appears, compare names and aliases, birth or incorporation details, address, nationality, registration information and source identifiers where available. Missing data is not a mismatch. A name resemblance is a reason to investigate, not proof of identity.

Keep three outcomes distinct:

1. Whether the supplied person or company is the subject of the source record.
2. Which classification or restriction applies to the facts.
3. What action, approval, disclosure or further investigation is required.

Assign unresolved questions promptly. Identity investigation must not become a reason to ignore a duty or delay action once its legal threshold is met. An internal operational pause and a statutory prohibition on dealing are also different decisions.

Review ownership and control separately

SEMA section 2.1 includes control tests based on 50% or more of shares, ownership interests or voting rights; the ability to change a board's composition or powers; or the ability to direct the entity's activities. It provides for deemed ownership of property held through controlled entities.⁸

Global Affairs Canada's guidance addresses the SEMA/JVCFOA framework, including aggregate ownership by listed persons. It distinguishes sanctions deemed ownership from AML beneficial-ownership requirements. A holding below 50% is not a universal clearance because other holdings or control facts may matter.⁹

Obtain the relevant structure, voting and governance evidence. Identify the applicable provision and document the control assessment. A beneficial-owner percentage or a person's PEP status alone does not establish that a company is sanctioned or automatically determine the company's risk rating.

Use the ownership and control explainer for the general distinction, then apply the Canadian rule to the particular facts.

Separate property reporting from suspicious-transaction reporting

Build an escalation path that identifies the legal threshold, recipient, deadline and required handling of property. A software alert is not itself a completed reporting assessment.

FINTRAC's Listed Person or Entity Property Report (LPR) guidance links the reporting entity's immediate FINTRAC report to specified disclosure obligations under the Criminal Code, UN measures, SEMA or JVCFOA. The underlying disclosure to the RCMP or CSIS, as applicable, is not replaced by the FINTRAC report. An LPR does not require a transaction or attempted transaction to have occurred.¹⁰

Separately, reporting entities must submit a suspicious transaction report to FINTRAC when there are reasonable grounds to suspect that a completed or attempted transaction is related to the commission or attempted commission of a sanctions-evasion offence.¹¹ That threshold does not require proof or a confirmed list match. Assess the facts, context and indicators rather than waiting for certainty; an LPR and an STR may both be relevant.¹²

Do not turn this into a universal “confirm, freeze, then report” sequence. The applicable prohibition or disclosure duty determines the action. Do not move property to a different account, return funds or release a transaction simply to clear the screening queue.

Keep records with the correct retention trigger

A useful screening case connects the supplied identity, source and retrieval date, configuration, identity evidence, ownership questions, classification, reasoning, investigator, escalation and final action. Keep unresolved matters visible and assign an owner.

Retention depends on the record. FINTRAC requires an LPR copy for at least five years from the day it is sent.¹⁰ Its account-based guidance specifies at least five years from account closure for the relevant PEP/HIO account records.⁶ These different triggers do not create a universal five-year period for every screening log.

Define the required record, start date, retention period and access controls in the firm's policy. The alert-investigation documentation guide covers the general case record; the Canadian requirements determine the applicable retention rules.

Evaluate software against Canadian review tasks

Checklynx's sanctions screening software and PEP screening software support screening and analyst review through grouped profiles and available structured identity and source context. That information helps compare the supplied subject with candidates and distinguish similar names. It does not establish a complete ownership chain, guarantee Canadian coverage or make the final legal decision.

Confirm supported sources and configuration for the intended Canadian use. Measure candidate quality and the work required to investigate and retain decisions. The software buyer guide helps define pilot acceptance criteria.

Three practical scenarios

These examples are hypothetical and illustrate review steps, not conclusions about actual customers.

A company with a potentially listed owner

A new corporate customer has no direct name match, but a supplied shareholder produces a candidate. The analyst resolves that person's identity and gathers the ownership chain, voting and governance evidence. The relevant specialist assesses the Canadian restriction and control tests. The team does not infer clearance from the company's name result or an automatic prohibition from a shareholder percentage alone.

A similar name with incomplete source information

A customer resembles a listed person by name, but the source lacks a complete birth date. The reviewer compares the available identifiers and seeks evidence that addresses the uncertainty. A missing field is not recorded as a contradiction. The case retains either a supported non-match conclusion or an assigned escalation, with the handling of any proposed transaction assessed separately.

A former mayor opening an account

A financial entity identifies that an applicant recently left office as a Canadian mayor. The analyst checks the office and dates against the domestic PEP definition, then applies the relevant account-based risk assessment and measures. Domestic PEP status is neither an automatic sanctions prohibition nor a reason to assume that every foreign-PEP measure applies unchanged. The record explains the classification, assessment and resulting decision.

Frequently asked questions

Is Canada's autonomous sanctions list enough on its own?

It covers SEMA/JVCFOA listings, not every Canadian measure. Check the relevant regulations, UN implementation, Criminal Code sources and other restrictions applicable to the activity.²³

Can a Canadian mayor be a domestic PEP?

Yes. FINTRAC expressly includes mayors, reeves and similar chief municipal officers. Check the actual office and dates; do not extend that definition automatically to every municipal employee.⁵

Must I report every possible sanctions match to FINTRAC?

Apply the relevant reporting threshold. A name candidate alone does not decide whether an LPR is required; an STR assessment may still be needed on transaction facts without a confirmed match. Assign the assessment promptly and do not wait for proof where the law requires reasonable grounds to suspect.¹⁰¹²

Can screening software replace ownership research or regulatory reporting?

Screening supports candidate identification and review of supplied parties. Obtain the ownership evidence needed for control analysis and assess disclosures and reports separately. Confirm any reporting or integration capability with the provider rather than assuming that a screening result completes a submission.