Canadian MSB for Sale: Should You Buy One or Register a New MSB?

Our mission is to help Canadian fintech companies get registered, go live, and stay compliant.

If you are evaluating a Canadian MSB for sale and want to operate in Canada quickly, buying an existing or ready-made MSB — a company that already holds a money services business (MSB) registration with FINTRAC, Canada's anti-money-laundering regulator — is usually faster than filing a new registration. A clean MSB can change hands in about a week, because FINTRAC only needs to be notified of the ownership change, not asked to approve it. Registering a new MSB currently takes about five to six months when a law firm manages the file.

But "buy or build" is really two questions, not one, and the right answer depends on which registrations your business actually needs. If you only need an MSB — the classic example is a non-custodial crypto trading business — you have two options: buy an existing MSB, or register a new one from scratch. If you provide payment services, you also need a payment service provider (PSP) registration under the Retail Payment Activities Act (RPAA), which brings the Bank of Canada into the picture and gives you three options instead. This guide walks through both forks, sets out realistic timelines, and explains what to check before you sign anything.

What are you actually buying when you buy a Canadian MSB?

You are buying a company, not a transferable licence. In Canada, an MSB registration attaches to a specific legal entity, not to a person who can hand it over. When you buy a Canadian MSB — sometimes marketed as a "ready-made MSB" — you are acquiring the shares of a company that already holds the registration. The registration stays with the company, and you simply become its new owner. That distinction drives almost everything else in this article.

This matters because a FINTRAC MSB registration is a listing, not an approval or a seal of quality. FINTRAC does not vouch for the business; it records that the company is registered and must follow Canada's anti-money-laundering rules. So there is no "licence" sitting on a shelf to be sold on its own. What is for sale is the corporation that carries the registration.

The practical upside is real: because FINTRAC only needs notice of a change in ownership — not an approval — a clean MSB-only company can transfer quickly. The practical risk is just as real: you inherit whatever that company has done, filed, or failed to file. And if the company is also RPAA-registered, a plain "notice" is not enough — the Bank of Canada has to sign off first. We come back to both points below.

Take a team we will call NorthVault — a group building a cross-border payments business. Because they move fiat for other people, their model needs both an MSB and an RPAA registration, so they were really choosing among three both-paths: build both registrations from scratch, buy an MSB and add an RPAA registration, or buy a company that already held both. As you will see, speed shaped every part of their decision.

Is buying an existing MSB faster than registering a new one?

Yes. A clean, MSB-only company can transfer in roughly a week, because FINTRAC does not need to approve a change of ownership — it only needs to be notified. A fresh MSB registration currently takes about five to six months when a law firm manages the application, and market feedback suggests do-it-yourself applicants can wait nine months or more. For a team that needs to go live now, closing that gap is the entire appeal.

The reason comes back to that notice-versus-approval difference. With a new registration, you cannot legally offer covered services until FINTRAC has processed and completed the registration, so you sit through months of dead time. With a share purchase of an already-registered company, the registration already exists — you are changing who owns the company that holds it, and FINTRAC is informed of that change.

One honest qualification: "faster" assumes the company is clean. If the target has messy filings, compliance gaps, or a problematic history, sorting that out can cost you more time and money than starting fresh — which is why the due diligence section below is not optional.

Which path is right for you — and how long does each take?

Start by asking which registrations you need. If you only need an MSB — you choose between buying an MSB (about a week) or registering a new one (about five to six months). If you provide payment services and need both an MSB and an RPAA registration, you have three options, running from about two to three weeks up to about five to six months.

See MSB vs. RPAA: Which Canadian Fintech Registration(s) Do You Actually Need? to learn more about which registrations you’ll need in place.

Step 1: Do you only need an MSB, or also an RPAA registration?

Almost every money-moving fintech needs an MSB registration with FINTRAC — it is Canada's anti-money-laundering registration. The RPAA PSP registration with the Bank of Canada is a separate requirement about operational risk and keeping customer funds safe. You need it on top of your MSB if you help clients send or receive electronic fiat funds. So the fork is simple: payment services need both registrations, while models like non-custodial crypto trading usually need only the MSB.

One caution: if you hold crypto on behalf of customers, you can also trip provincial securities registration, which is much heavier and outside the scope of this article. If that might be you, book a call before you plan around a purchase.

If you only need an MSB registration: two options

If non-custodial crypto trading, currency exchange, or a similar model is your whole plan, you are choosing between speed and cost. Buying a clean MSB gets you operating in about a week on a simple FINTRAC notice. Registering a new MSB is cheaper and gives you a clean history, but it takes about five to six months with counsel. There is no RPAA step either way.

1. Buy an existing MSB — about a week to close, because FINTRAC is only notified of the ownership change. Costs more upfront than a do-it-yourself filing, and you inherit the company's history.
2. Register a new MSB from scratch — about five to six months with counsel (nine or more months on your own). Cheapest route, and the cleanest possible starting point.

If you need both MSB and RPAA registration: three options

If you provide payment services, you need both registrations, so you have three realistic paths. They trade cost against speed. Building everything yourself is cheapest but slowest. Buying a clean MSB and adding a fresh RPAA registration is a middle path. Buying a company that already holds both is the priciest, but it is the fastest way to start providing payment services.

1. Build both from scratch — register a new MSB (about five to six months) and a new RPAA registration (about three to five weeks). Slowest, but cheapest and cleanest.
2. Buy an MSB, then add RPAA — take over a clean MSB in about a week, then file a fresh RPAA registration (should take about 3-5 weeks). You can start MSB-only activity quickly, but you cannot provide payment services until the RPAA registration is done.
3. Buy a company that already holds both — fastest route to full payment operations, at roughly two to three weeks. The main step is a Bank of Canada re-registration of the change of control (about two weeks), plus a FINTRAC notice. You pay the most and inherit two registrations' worth of history.

Here is how these three both-paths compare:

If you decide you need both registrations, Renno offers a combined MSB + RPAA registration package that also prepares the AML compliance program required for MSB registration and the operational risk management framework required under the RPAA. We can also help if you are looking to purchase an MSB (or an MSB + RPAA). To learn more, book a call or fill our form (and we'll get in touch).

This is exactly the comparison NorthVault ran. Building both from scratch was cheapest but could take five to six months. Buying an MSB and adding a fresh RPAA registration was faster, but still three to five weeks away from moving money. Buying a company that already held both got them operating in a few weeks. Because speed mattered most, they went with the company that already held both — and put their energy into checking what they were inheriting.

What happens to the RPAA registration when you buy a company that holds one?

It does not transfer automatically, and you cannot clear it with a simple notice. A change of control of an RPAA-registered company — broadly, a change of more than a third of the ownership — must be pre-approved by the Bank of Canada. In practice, the company resubmits its full registration with the new owners and the business they plan to run. This step is called re-registration, and you cannot legally provide payment services until it is approved.

The timing is better than it sounds. The Bank of Canada currently prioritizes these applications, because it knows acquisitions depend on them, so re-registration is running at roughly two weeks — faster than the three to five weeks for a fresh RPAA registration. That speed is exactly why buying a company that already holds both registrations is usually the quickest way to go live with payment services.

Keep the two registrations separate in your head. FINTRAC's MSB registration is about anti-money-laundering compliance. The RPAA is about operational risk and safeguarding customer funds. Buying an MSB-only company does nothing to give you RPAA status, and buying an RPAA-registered company triggers the re-registration step above — not a one-week notice.

What still has to be updated after the purchase?

Closing the deal is the start, not the finish. Even with a clean MSB, you will usually need to notify FINTRAC of the ownership change and update the company's registration details, refresh its AML compliance program so it matches how you will actually operate, sort out its business address and Canadian presence, and re-paper or re-apply for its banking and account-provider relationships. Skipping these steps is how a "fast" purchase quietly turns into a slow, risky one.

Here is what typically needs attention:

• Registration details with FINTRAC. Update ownership, directors, and the services listed on the registration. If your model involves crypto, for example, the registration needs "virtual currency" selected under services offered — and that public detail is something banks look at.
• AML compliance program. The registration attaches to the entity, but the anti-money-laundering program has to reflect your business. You also inherit the company's ongoing obligations — know-your-customer, transaction monitoring, reporting, and periodic AML effectiveness reviews — from day one.
• Business address and Canadian presence. The FINTRAC business address has to be a real physical place tied to actual business or compliance activity, and it appears on the public FINTRAC registry.
• Banking and account providers. Existing accounts may not simply carry over. Providers usually re-run due diligence when ownership changes, and some contracts carry multi-year lock-ins or exclusivity terms you will inherit.
• RPAA, if applicable. As covered above, an RPAA-registered target means a Bank of Canada re-registration before you can operate.

Two things regulators and banks keep coming back to are a genuine Canadian presence and a credible AML function. Many account providers expect a real Canadian operating address and AML compliance already in place, and FINTRAC expects a real physical place of business — a PO box or virtual address will not do.

To learn more about how to establish physical presence that satisfies FINTRAC and your bank/account providers, see here.

If you'd like to reach out and discuss how we can help, book a call or fill our form (and we'll get in touch).

What about banking?

Getting — or keeping — banking is often the hardest part of the whole exercise. Registration, whether bought or filed, is only half the battle; you still need banking or payment rails before you can go live, and most banks treat MSBs as a high-risk category. A target company's existing accounts may not survive a change of ownership, so you can end up registered but unbanked. We are connected with a network of banks and account providers and have helped a range of clients get banked.

What due diligence should you do before buying a Canadian MSB?

If you are reviewing an MSB for sale in Canada, remember that you are buying a whole company and inherit its whole history. Before you sign, confirm the company is genuinely registered and in good standing, that its owners and directors are not ineligible under Canada's anti-money-laundering law, that its past compliance and FINTRAC filings are clean, that its banking relationships are real and transferable, and that it carries no hidden corporate, tax, or regulatory liabilities. Good due diligence is what separates a shortcut from a landmine.

At a minimum, work through:

• Registration status and good standing. Confirm the company on the public FINTRAC MSB registry, check that the services listed match your plan, and — if the RPAA is in play — check the Bank of Canada's PSP registry and applicant list.
• Eligibility of the owners and principals. Canada's anti-money-laundering law makes certain persons and entities ineligible for registration, including those tied to sanctions, terrorist listings, or specific criminal convictions. Make sure the target and the people behind it are clean.
• AML compliance history. Review past know-your-customer records, transaction monitoring, reporting, and any FINTRAC examinations, findings, or penalties. You inherit both the deficiencies and the duty to fix them.
• Banking and account-provider relationships. Identify which relationships exist, whether they survive a change of ownership, and what the contracts require (lock-ins, exclusivity, minimums).
• Corporate and tax. Run standard acquisition diligence on liabilities, litigation, and tax exposure, and decide whether a share purchase or an asset deal fits your situation.

For NorthVault, the decision came down to speed — but they only got comfortable after doing this work. Buying a company that already held both an MSB and an RPAA registration got them operating in a few weeks, far faster than building from scratch (five to six months) or buying an MSB and adding a fresh RPAA registration (three to five weeks). But that shortcut was only worth taking once diligence confirmed there was no problem — and no messy RPAA history — hiding inside the company.

The bottom line

Buying an existing Canadian MSB can save you months — or it can hand you someone else's compliance problem. Start with the two-part question this guide is built around: do you only need an MSB, or do you also need an RPAA registration? That answer decides whether you are choosing between two options or three, and whether the Bank of Canada has to pre-approve your deal. From there, the right choice depends on how fast you need to operate and how clean the target turns out to be.

If you are weighing whether to buy a Canadian MSB or register a new one, book a call before you sign a share purchase agreement. We can review the target, map out the change-of-ownership steps, and give you a realistic path to going live — whether that means buying, building, or a combined Canadian MSB registration and RPAA package.

Disclaimer: This content is for informational purposes only and does not constitute legal advice.