FINTRAC Casino Penalties: Cases and Lessons (2026)

FINTRAC casino penalties have become far more frequent: since mid-2025 FINTRAC has published administrative monetary penalties against seven casino-sector reporting entities, from BCLC and SIGA to Atlantic Lottery and NB Lotteries and Gaming. The recurring failures are missed suspicious transaction reports, outdated compliance policies, weak risk assessments and thin controls on high-risk clients.

This page consolidates every casino-sector entry on FINTRAC's public notice list as of October 2026, explains what FINTRAC said each entity got wrong, and turns those findings into a remediation checklist. It is written for compliance officers, MLROs and AML vendors working with Canadian gaming operators. Four of the penalties are under appeal to the Federal Court of Canada, so nothing here should be read as a final finding against those entities.

FINTRAC casino penalties at a glance

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) supervises casinos as reporting entities under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. When an examination finds non-compliance, FINTRAC can impose an administrative monetary penalty, an administrative rather than criminal sanction, and publish a notice naming the entity, the amount and the violations. The table below lists every casino-sector entry on the list.

Source: FINTRAC's public notices of administrative monetary penalties, accessed October 20, 2026. "Date imposed" is the imposition date stated in each notice; the notice itself was usually published weeks later. New notices are added regularly, so re-check the list before citing it.

How FINTRAC publishes penalties

FINTRAC's list covers every sector, from banks and credit unions to money services businesses and casinos, and gives each entry an entity name, date, amount, number of violations and a status. Notices stay on the list for five years. For some cases FINTRAC also issues a news release and a detailed notice that names each violation and its classification, such as "Very Serious" or "Serious". The list does not filter by sector, which is one reason casino cases are usually covered one at a time in the news rather than as a pattern. For example, the September 24, 2026 notices concern credit unions and caisses, not casinos, even though they sit next to the casino entries.

Paid versus appealed

Status matters more than amount when you read these cases. An entity that pays the penalty closes the matter. An entity that disagrees can appeal to the Federal Court, and the notice then shows "appealed". As of October 2026, four of the seven penalties imposed since mid-2025 are under appeal: BCLC, SIGA, CNE Casino and Northern Isga Foundation. Adding up the figures in the table, those four total $2,540,162.50, while the three paid and closed penalties (Atlantic Lottery, Nova Scotia Gaming and NB Lotteries and Gaming) total $843,563.50. The 2020 Loto-Québec entry is marked "Closed"; the list does not say how it was closed.

Case by case: what FINTRAC found

FINTRAC's releases and detailed notices describe the violations for BCLC, SIGA, CNE Casino and Atlantic Lottery. For the others, this section reports only what the public list shows, rather than guessing at the details. If you are building controls to close the same gaps, it is worth shortlisting KYC providers for iGaming operators early, because several of these failures start with incomplete client information.

BCLC (2025)

FINTRAC imposed $1,075,000 on the British Columbia Lottery Corporation on July 17, 2025 and announced it on August 28, 2025. It cited three violations: failing to report suspicious transactions, failing to create and apply policies and procedures for high-risk clients, and failing to apply special measures to high-risk clients. The detailed notice says BCLC failed to submit two suspicious transaction reports (STRs), a violation classed as Very Serious. BCLC has appealed to the Federal Court. The releases describe BCLC as a reporting entity; they do not tie the violations to any particular channel, so do not read them as findings about its online gaming platform.

SIGA (2025)

The Saskatchewan Indian Gaming Authority received the largest casino-sector penalty on the list: $1,175,000, imposed August 28, 2025 and published September 12, 2025. FINTRAC's notice lists three violations. SIGA failed to submit four STRs (Very Serious). Three STRs it did file lacked money laundering or terrorist financing indicators in the "details of suspicion" section (Serious). Its policies for ongoing monitoring of high-risk patrons were not adequate or up to date (Serious); the notice cites 41 of 100 reviewed instances in which the risk was rated "none". SIGA has appealed.

CNE Casino (2025)

The casino operated by the Canadian National Exhibition received a $199,000 penalty imposed July 11, 2025, announced September 4, 2025. Both violations concern risk assessment: failing to assess and document money laundering and terrorist financing risk using the prescribed factors, and failing to institute and document the prescribed review. The penalty is under appeal.

Northern Isga Foundation (2026)

Northern Isga Foundation is a non-profit that receives a portion of Eagle River Casino revenues, which is why it appears among casino-sector reporting entities. FINTRAC's notice describes it as a non-profit established by the Alexis Nakota Sioux Nation and does not call it the casino operator, although some news coverage refers to it as the casino's operating charity. FINTRAC imposed $91,162.50 on March 2, 2026 for four violations. The penalty has been appealed to the Federal Court.

Atlantic Lottery (2026)

Atlantic Lottery Corporation was penalized $212,025 on May 29, 2026, announced July 9, 2026. FINTRAC cited three violations: failing to submit an STR; failing to develop and apply written compliance policies and procedures that are kept up to date and approved by a senior officer; and failing to assess and document money laundering and terrorist financing risk, including the prescribed factors. Atlantic Lottery paid and the case is closed.

Nova Scotia Gaming and NB Lotteries and Gaming (2026)

Nova Scotia Gaming Corporation was penalized $231,826 on July 23, 2026 for three violations, and New Brunswick Lotteries and Gaming Corporation $399,712.50 on July 24, 2026 for one violation. Both notices were published on September 3, 2026, and both penalties are paid and closed. We have not reproduced violation wording for these two cases because it is not part of the source set reviewed for this article; read the individual notices on FINTRAC's site before drawing conclusions about them.

The violation patterns that repeat

Across the four cases with published violation detail, the same few control failures recur. They map closely onto the pillars of an AML compliance program for online casinos: compliance officer, written policies, risk assessment, training and effectiveness review.

Missed suspicious transaction reports

Three of the four detailed cases include STR failures: BCLC (two unreported), SIGA (four unreported, three deficient) and Atlantic Lottery (one unreported). Failing to submit an STR is classed as Very Serious in the notices reviewed. SIGA's case shows a second risk: filing an STR is not enough if the narrative does not explain the suspicion with money laundering or terrorist financing indicators.

Outdated policies and procedures

Atlantic Lottery's notice turns on written policies that were not kept current or approved by a senior officer. SIGA's turns partly on monitoring policies for high-risk patrons that were not adequate or up to date, and BCLC's on high-risk client policies and procedures. A policy that exists but no longer matches how the floor, the cage or the online platform actually operates is treated as a gap.

Risk assessments and high-risk clients

CNE Casino's two violations and one of Atlantic Lottery's are about the risk assessment itself: not documenting it with the prescribed factors, and not running the required review. BCLC and SIGA show the next step down, where high-risk clients are identified but special measures or ongoing monitoring are not applied consistently. A risk rating of "none" for a large share of reviewed patrons, as in SIGA's notice, is a signal to test whether risk-scoring logic is working as designed.

"Seen in" reflects only the published violation wording for each entity; Northern Isga, Nova Scotia Gaming and NB Lotteries and Gaming are excluded because their violation wording was not reviewed.

A remediation checklist for casino operators

Use this list to test your own program against the gaps FINTRAC has already penalized. Each item is drawn from the violations above, and each can be tested internally before an examination.

• Pull every unusual-activity alert from the last 12 months and confirm each one has a documented STR decision, with reasons, by a named person.
• Sample filed STRs and check that each "details of suspicion" section names concrete ML/TF indicators rather than restating the transaction.
• Confirm your written compliance policies carry a current senior officer approval date and reflect every live product, including online play, cashless and any new payment methods.
• Re-run the documented risk assessment and check it addresses each prescribed factor; record why each client, product and channel received its rating.
• Look for rating distributions that look too clean, such as a high share of "none" or "low" risk among patrons with large or frequent play.
• List high-risk clients and check that enhanced measures and ongoing monitoring were applied on schedule, with evidence.
• Book the prescribed compliance program review, assign an independent reviewer and track remediation items to closure.
• Check that your tooling supports the work: case management for alerts, source-of-funds evidence, and audit trails. Our guide to KYC AML software for casinos compares the main categories.

What these cases do not tell you

These notices are useful evidence, but they have limits that should shape how you use them internally.

• Online gaming is not named in the releases reviewed. FINTRAC's wording does not attribute any violation to an online channel, so neither should a board paper or vendor pitch.
• Four penalties are under appeal. The Federal Court may uphold, change or set aside them; quote them as "imposed and under appeal", not as settled findings.
• Penalty size does not map neatly to violation count. NB Lotteries and Gaming's single violation produced a larger penalty than Atlantic Lottery's three; this article does not attempt to reconstruct how individual amounts were calculated.
• The list shows enforcement outcomes, not the full examination picture. Entities that were examined and found compliant, or that fixed issues without a penalty, do not appear.
• Adding up the eight casino entries tells you about this sector only. It is not a measure of FINTRAC enforcement overall.

Responsible gambling note

This is a compliance resource for businesses. Gambling is for adults only, at 18 or 19 depending on the province, and no game or strategy guarantees winnings. If gambling is causing harm to you or someone close to you, contact your provincial problem gambling helpline.

18+ only. Gambling can be addictive — please play responsibly and only bet what you can afford to lose. If gambling is affecting you or someone you know, contact a local support service. This content is informational and never a guarantee of winnings.

Written and reviewed by the iGaming Expert Hub editorial team. Facts checked against primary sources; see the reference above.

← All articles