NGO Compliance in Canada: Donor Due Diligence and FINTRAC Reporting

Canadian non-profit organizations and registered charities operate within a compliance framework shaped by federal legislation, the Canada Revenue Agency (CRA), and provincial regulatory bodies. FINTRAC (Financial Transactions and Reports Analysis Centre of Canada) is the federal financial intelligence unit responsible for receiving and analyzing suspicious transaction reports. The Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA, S.C. 2000, c. 17) is the cornerstone AML statute, and it directly affects how NGOs interact with their financial institutions and manage donor funds.

This article is provided for informational purposes only and does not constitute legal, financial or regulatory advice. Regulatory references are accurate as of the date of publication. Consult a qualified professional for guidance specific to your situation.

This guide explains the compliance obligations relevant to Canadian NGOs, the documents required for donor due diligence, and automated verification solutions for managing these requirements across Canada's bilingual and multi-jurisdictional landscape.

Canadian Regulatory Framework for NGOs and Charities

The PCMLTFA requires reporting entities — including financial institutions, money services businesses, and certain professionals — to report suspicious transactions and large cash transactions to FINTRAC (FINTRAC, PCMLTFA overview). While most charities are not directly reporting entities under PCMLTFA, their banks are obligated to report unusual account activity, making donor due diligence a practical necessity for any charity that wishes to maintain stable banking relationships.

The CRA administers the registration and compliance oversight of charities under the Income Tax Act (ITA, RSC 1985, c. 1 (5th Supp.)). Registered charities must file an annual T3010 information return, which requires disclosure of major donors, revenue sources, and program activities. Charities with revenue above $25,000 must list their ten largest donors on Schedule 2 of the T3010, and this information can be shared with provincial regulators (CRA, T3010 guide).

The Office of the Superintendent of Financial Institutions (OSFI) plays a role through its AML/ATF guidelines that apply to financial institutions servicing charities. OSFI's guidelines require banks to conduct customer due diligence on their charity clients, which indirectly incentivizes charities to maintain their own donor documentation.

Privacy obligations for Canadian charities are governed by the Personal Information Protection and Electronic Documents Act (PIPEDA, S.C. 2000, c. 5) at the federal level, plus provincial laws in Alberta, British Columbia, and Quebec. Quebec's Law 25 (Loi 25, effective in stages from September 2022 to September 2023) imposes strict obligations on organisations that collect and process personal information in Quebec, including explicit consent requirements and mandatory privacy impact assessments for high-risk data processing.

Donor Due Diligence: Required Documents by Donor Type

Canadian charities should develop a written donor due diligence policy that maps verification requirements to donor risk profiles. The policy should account for provincial variations, particularly Quebec's enhanced privacy requirements under Law 25.

FATF Recommendation 8 (2023 update) specifically identifies Canadian charities receiving cross-border funds from high-risk jurisdictions as warranting enhanced due diligence measures (FATF, Best Practices Paper on NPOs, 2023). FINTRAC publishes an annual risk assessment that identifies the non-profit sector as carrying elevated risk in specific contexts.

The Social Insurance Number (SIN) is the primary personal identifier for Canadian individuals and is used by charities to issue official donation receipts. However, under PIPEDA and provincial privacy laws, SINs should only be collected when strictly necessary (i.e., for tax receipt purposes) and must be stored with appropriate security controls.

For Politically Exposed Persons (PEPs) — Canadian or foreign government officials, military officers, heads of international organizations, and their family members — enhanced due diligence applies regardless of donation size, under both banking partner expectations and FINTRAC guidance.

Reporting Obligations for Canadian Charities

FINTRAC Reporting via Banking Partners

Canadian charities cannot directly file reports with FINTRAC — that obligation rests with their financial institution. However, charities should maintain close communication with their bank and have internal escalation procedures for unusual transactions. Banks are required to file Suspicious Transaction Reports (STRs) and Large Cash Transaction Reports (LCTRs) for cash transactions above CAD $10,000 on behalf of charity accounts.

Charities that are aware of potential money laundering or terrorist financing should alert their banking partner, who can then make the appropriate FINTRAC filing. The tipping-off prohibition under section 8 of PCMLTFA prevents banks from disclosing to the charity that a report has been made.

CRA Annual T3010 Return

All registered charities must file the T3010 Registered Charity Information Return within six months of their fiscal year-end. The T3010 requires disclosure of:

• All gifts and grants received, including from foreign sources (Schedule 2)
• Names and addresses of directors, trustees, and like officials
• Total compensation paid to top 10 employees earning over $120,000
• Program activities, beneficiaries, and geographic reach
• Transfers to non-qualified donees (foreign organizations)

Failure to file the T3010 results in automatic revocation of charitable status. The CRA may also impose penalties up to CAD $25,000 for providing false information.

Provincial Fundraising Registrations

Several provinces require charities to register before conducting fundraising campaigns within their jurisdiction. British Columbia (Charitable Purposes Preservation Act), Manitoba, and New Brunswick have specific registration requirements for charities soliciting funds from residents. Compliance with provincial fundraising regulations is separate from and in addition to federal CRA requirements.

International Donors and Cross-Border Compliance

Transfers to or from foreign organizations require enhanced due diligence under CRA guidelines, particularly for disbursement quota calculations and qualifying activities tests under the Income Tax Act. As of January 1, 2023, registered charities must maintain "direction and control" over funds transferred to non-qualified donees abroad, including documenting how the use of funds aligns with the charity's purposes (CRA, Direction and control guidance for charities).

For international donor compliance, Canadian charities should:

• Screen all foreign donors against FINTRAC's published guidelines on high-risk countries and the UN consolidated sanctions list
• Verify that international donations flow from regulated financial institutions in non-sanctioned jurisdictions
• Obtain documentation confirming the source of funds and the donor's organizational registration
• Review the FATF grey and black lists for the donor's country of domicile

Automating Donor Document Verification for Canadian NGOs

Manual processing of due diligence files creates significant administrative burden for Canadian charities, which typically operate with lean staffing models. A mid-sized charity handling 200 enhanced due diligence cases annually spends approximately 600 hours on document verification, with risk of errors and compliance gaps.

Our platform processes over 180,000 documents per month with a fraud detection rate of 94.8%, including NGO donor verification files for Canadian charitable organizations. Forged Canadian passports, altered provincial driver's licences, falsified corporate incorporation documents, and manipulated bank statements are detected within seconds.

CheckFile.ai supports Canadian charity compliance teams with:

• Automated identity document verification (Canadian passport, provincial driver's licence, PR Card) for individual donors
• Corporate incorporation document validation for Corporations Canada and provincial registries
• PEP and sanctions screening integration
• Secure document storage with full audit trail, compliant with PIPEDA and Quebec's Law 25

Explore document verification solutions for the charity sector or review pricing for Canadian nonprofits on our dedicated pages. For organizations managing employee background check documentation, CheckFile provides integrated workflows.

For a broader view of AML compliance documentation requirements, see our industry verification guide and AML compliance guide.

Frequently Asked Questions

Are Canadian charities required to screen donors against sanctions lists?

While PCMLTFA does not directly require charities to screen donors, the United Nations Act (RSC 1985, c. U-2) and the Criminal Code of Canada (RSC 1985, c. C-46) prohibit transactions with sanctioned individuals and entities. The OFSI equivalent in Canada is the Global Affairs Canada Consolidated Canadian Autonomous Sanctions List. Charities with international operations should screen major donors against this list and UN Security Council consolidated sanctions lists as a matter of sound practice.

What is the T3010 and who can see it?

The T3010 Registered Charity Information Return is the annual public disclosure filing for Canadian charities. It is publicly available through the CRA's Charities Listings database. The public version includes revenue, expenditures, director names, and program activities, but donor identities (Schedule 2) are not disclosed to the public. The CRA shares this information with provincial governments and may use it in compliance audits.

How does Quebec's Law 25 affect charity donor data management?

Quebec's Law 25 (Loi modernisant des dispositions législatives en matière de protection des renseignements personnels) requires organizations handling Quebecers' personal information to designate a privacy officer, conduct privacy impact assessments for high-risk projects, implement data minimization principles, obtain explicit consent for non-essential data collection, and notify the Commission d'accès à l'information (CAI) of data breaches. Charities collecting donor data in Quebec must comply with Law 25 in addition to PIPEDA.

Can Canadian charities receive cryptocurrency donations?

Cryptocurrency donations are legally permissible but carry specific compliance risks. The CRA accepts cryptocurrencies as a form of charitable gift, treating them as non-cash gifts whose fair market value must be determined at the time of receipt. FINTRAC's guidance on virtual currency requires financial institutions to apply enhanced due diligence for virtual currency transactions above CAD $10,000. Charities accepting cryptocurrency should verify donor identity through an appropriate process and convert the assets to Canadian dollars through a FINTRAC-registered virtual currency exchange.