Suspicious Transaction Reports in Casinos: FINTRAC Guide

A suspicious transaction report for a casino in Canada is a report sent to FINTRAC when the casino has reasonable grounds to suspect that a transaction, completed or only attempted, is related to a money laundering or terrorist financing offence. No minimum amount applies, and the report is due as soon as practicable once the casino has completed the measures that support its suspicion.

This guide is for compliance officers, MLROs, payments teams and vendors working with Canadian land-based and online casinos. It explains the legal test, the timing rule, the indicators FINTRAC has published for casinos and online gambling, and how to write a narrative that will stand up in an examination. It is general information, not legal advice; confirm your own obligations against the Act, the regulations and current FINTRAC guidance.

Which casinos must file STRs

Under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), a casino is a government, organization, board or operator in Canada that conducts and manages one of three things: table games such as roulette or card games at a fixed place of business, slot machines or similar devices at a fixed location with more than 50 machines, or "a lottery scheme accessible to the public through the Internet or other digital network". FINTRAC excludes online bingo and the sale of lottery tickets from the online category.

The obligation sits with the entity that conducts and manages the gaming, which in Canada is the province or its delegate, such as a provincial lottery corporation. FINTRAC states that this entity stays responsible for its obligations even when it delegates reporting work to someone else. Every employee also has a personal duty to report, although an employee does not need to file separately if the employer has already done so.

Ontario's regulated online market adds a layer. iGaming Ontario conducts and manages internet gaming in the province, and private operators run their sites under operating agreements with it. How STR detection and filing duties are split between iGaming Ontario and a private operator is set by the operating agreement and the AGCO's requirements, so an operator should confirm its exact role there rather than relying on secondary summaries, including this one.

The reasonable grounds to suspect test

FINTRAC describes reasonable grounds to suspect as "a step above simple suspicion". It means there is a possibility that a money laundering or terrorist financing offence has occurred. The casino does not need to verify the facts, prove an offence or identify the underlying crime. What it does need is a suspicion that is reasonable, grounded in facts and context, and free of bias or prejudice. FINTRAC's online gambling bulletin puts it more plainly: the threshold requires more than a "gut feel" or "hunch".

Three practical consequences follow for casinos:

• Attempted transactions count. A player who asks about cashing out to a third party's bank account and abandons the request when asked for details may still warrant a report.
• Amount does not matter. A small deposit can be reportable if the surrounding facts support suspicion. Conversely, a large transaction is not suspicious simply because it is large.
• Suspicion can persist. Once a casino has reported, it must keep reporting later transactions that are suspicious for the same reasons, for as long as the suspicion remains.

Timing: what "as soon as practicable" means

Before June 2020, reporting entities had 30 days from detection to file. Amendments that took effect on June 1, 2020 replaced that window with a requirement to report "as soon as practicable" after completing the measures that enable the entity to establish reasonable grounds to suspect. FINTRAC treats this as a priority: the clock starts when the assessment is complete, not when an alert first fires, and a longer delay needs a reasonable explanation.

That shifts the operational question from "how many days do we have?" to "how long does our assessment take, and can we justify it?". A casino that routinely leaves alerts untouched for weeks will struggle to argue that it reported as soon as practicable, even if each individual decision was sound. Track two intervals separately: alert to decision, and decision to submission.

Electronic filing is expected. FINTRAC accepts paper STRs only from entities without the technical capability to report electronically. A casino must keep a copy of each STR for at least five years after the day it is sent, and it can use a service provider to file on its behalf, but responsibility for the report cannot be delegated.

Casino and online gambling indicators

FINTRAC publishes a list of money laundering and terrorist financing indicators for casinos (last updated November 24, 2025) and, separately, a January 2024 special bulletin on laundering through online gambling sites (reference FINTRAC-2024-SB001). Indicators are red flags, not proof. FINTRAC's guidance is that they should be read together with what the casino knows about the player, and that several indicators together build a stronger basis for suspicion than any one alone.

The casino indicator list does not include specific online or virtual currency indicators, so an online operator should not use it alone. The bulletin's indicators for banks and payment providers are also worth reading, because they describe what the other side of the transaction sees: deposits followed rapidly by transfers to gambling sites, circular flows to and from the same sites, and excessive prepaid card deposits. In its indicators for banks, money services businesses and payment providers, the bulletin also flags wallets with direct or indirect exposure to virtual currency mixers or tumblers; crypto-accepting operators can apply the same check.

The bulletin also asks reporting entities to include the hashtag #ProjectDolus in Part G of an STR when the suspicion relates to the typologies it describes. Building that into the narrative template avoids relying on analysts to remember it.

One point that matters for player welfare: FINTRAC notes that some indicators can reflect problem gambling rather than money laundering. Heavy deposits, rapid repeat play or chasing patterns should also be routed to the responsible gambling team, whatever the STR decision.

Writing the details of suspicion

The narrative is where many reports fall short. FINTRAC's guidance says the "details of suspicion" section should set out the facts, the context and the money laundering or terrorist financing indicators that led to the suspicion, in plain language and without internal jargon. Transaction details belong in the structured fields of the report. A narrative that only summarizes the transactions is listed by FINTRAC as a deficiency.

SIGA's 2025 penalty shows the consequence. Alongside four unfiled reports, FINTRAC found that three STRs SIGA did file lacked money laundering or terrorist financing indicators in the details of suspicion, and classed that as a Serious violation. Filing alone is not enough; the report has to explain why.

A workable narrative structure:

1. Who and what. The player, account or patron number, and the activity in one or two sentences.
2. Why it stood out. The specific indicators, named as indicators: for example, a deposit of a large amount followed by a few minimal bets and a withdrawal request to a bank account in another person's name.
3. Context. What the casino knows about the player: stated occupation, previous play levels, KYC history, prior alerts or reports, and any explanation the player gave.
4. What was checked. Steps taken during assessment, such as reviewing play logs, payment instrument ownership or log-in locations.
5. Conclusion. A plain statement of why the casino has reasonable grounds to suspect, with any relevant hashtag such as #ProjectDolus.

Write it for a reader at FINTRAC who has never seen your back office. Terms such as "RG flag 3" or "tier B alert" mean nothing outside the building.

STRs versus threshold reports

Casinos also file threshold-based reports, and confusion between them causes both gaps and duplicate work. The table compares them for casinos.

A threshold report and an STR can both be required for the same activity. A $12,000 crypto deposit followed by minimal play and a withdrawal request may need an LVCTR because of the amount, and an STR because of the pattern. Deposits kept just under $10,000 to avoid a threshold report are themselves an indicator. Our guide to the crypto travel rule for casinos in Canada covers LVCTR mechanics and the 24-hour rule in more detail.

Where casino STR programs fail

FINTRAC's published penalties give a direct view of what examiners find. BCLC was penalized in 2025 partly for failing to submit two STRs, which FINTRAC classed as Very Serious. SIGA failed to submit four and filed three without adequate indicators. Atlantic Lottery's 2026 penalty included one unfiled STR. The notices FINTRAC published on September 3, 2026 add two more: Nova Scotia Gaming Corporation failed to submit two STRs (classed as Very Serious), and New Brunswick Lotteries and Gaming Corporation's penalty also concerns unfiled STRs. Of the recent casino-sector cases, CNE Casino's is the one that did not involve STRs. BCLC and SIGA have appealed their penalties to the Federal Court, so those findings are not final. Our breakdown of FINTRAC casino penalties covers each case.

The failures tend to come from process rather than judgment:

• Alerts closed without a recorded rationale. If a "no report" decision is undocumented, an examiner cannot tell whether it was a decision at all.
• Siloed channels. Cage staff, online risk analysts and payments teams each see part of the picture. If nothing joins them up, a player who is suspicious across channels may look ordinary in each.
• Thresholds treated as the trigger. Staff trained mainly on $10,000 reports may overlook small but suspicious activity.
• Backlogs. Alert queues that grow faster than analysts can clear them undermine the "as soon as practicable" standard.
• Template narratives. Copy-paste text that restates transactions without indicators.

Most of these sit upstream of the STR itself, in the AML transaction monitoring that feeds analysts and in the documented casino risk assessment that decides which players get closer attention.

An STR workflow that holds up in an examination

The checklist below is drawn from FINTRAC's guidance and the penalty findings above. It is a starting point to adapt, not a complete compliance program.

• Write a single escalation path from every detection source (floor, cage, online risk, payments, customer support) to the compliance team.
• Set an internal target for alert-to-decision time and report performance against it to the compliance officer.
• Require a named decision-maker and written rationale for every alert outcome, including "no report".
• Use a narrative template that forces analysts to list indicators and context, and have a second person review narratives before submission.
• Check each suspicious pattern for threshold reports that may also be due, and the reverse.
• Keep a copy of every STR for at least five years and keep the supporting case file with it.
• Train staff on the tipping-off rule. Do not tell a player that a report has been or will be made, and avoid questions that would reveal it.
• Re-test the process at least every two years as part of the compliance program's effectiveness review.
• Make sure tooling supports the work: case management, audit trails and links to KYC data. Shortlisting KYC providers for iGaming operators that integrate with your monitoring stack is often where this starts.

Responsible gambling note

This is a compliance resource for businesses, not a guide to playing. Gambling is for adults only: the minimum age is 19 in most provinces and 18 in Alberta, Manitoba and Quebec. No game or strategy guarantees winnings. If gambling is causing harm to you or someone close to you, free confidential help is available: ConnexOntario 1-866-531-2600 (Ontario), Jeu : aide et référence 1-800-461-0140 (Quebec), the Gambling Support BC line 1-888-795-6111 (British Columbia) and the Addiction Helpline 1-866-332-2322 (Alberta). In other provinces, contact your provincial health line or problem gambling service.

Gambling is for adults only: 19+ in most provinces, 18+ in Alberta, Manitoba and Quebec. Gambling can be addictive; no game or strategy guarantees winnings. This article is general compliance information for businesses, not legal advice.

Written and reviewed by the iGaming Expert Hub editorial team. Regulatory statements checked against the primary sources listed above on 2026-10-22; FINTRAC guidance changes, so confirm current requirements before relying on them.

← All articles