Real Estate Compliance Checklist for BC Agents (2026)
Compliance in BC real estate is governed by multiple overlapping frameworks: FINTRAC for anti-money laundering, CASL for electronic communications, BCFSA for professional standards, and PIPEDA for data privacy. Each has its own requirements, timelines, and penalties. This checklist consolidates everything a licensed BC agent needs to track -- organized by when in the transaction each obligation applies.
Written by the Magnate360 Team · Updated May 2026
FINTRAC Requirements
The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) administers the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA). Real estate brokers and sales representatives are reporting entities under this act, which means you have specific legal obligations for every transaction.
Identity Verification
You must verify the identity of every individual you conduct a real estate transaction with. This applies to buyers, sellers, and any third party (such as a parent providing a down payment). Verification must be completed before or at the time of the transaction.
Acceptable methods include the government-issued photo identification method (viewing an original, valid, unexpired government photo ID in person), the credit file method, or the dual-process method. For most residential transactions, government photo ID is the standard approach.
The identity record must include: the person's full legal name, date of birth, address, citizenship, occupation, the type of identification document (passport, driver's licence, BCID, Nexus card), the document number, issuing authority, expiry date, and the name of the individual who conducted the verification.
Receipt of Funds Record
When you receive funds in the course of a real estate transaction (typically the deposit), you must create a Receipt of Funds record if the amount is $3,000 or more. This record documents who provided the funds, the amount, how it was received (certified cheque, bank draft, wire transfer), the account number the funds were drawn from, and the purpose of the payment.
Large Cash Transaction Reports
If you receive $10,000 or more in cash (physical currency) in a single transaction or in multiple transactions totalling $10,000+ within 24 hours, you must file a Large Cash Transaction Report with FINTRAC within 15 calendar days. In practice, legitimate real estate transactions almost never involve this much physical cash, but you must be aware of the requirement and have a process to file if it occurs.
Suspicious Transaction Reports
If you have reasonable grounds to suspect that a transaction is related to money laundering or terrorist financing, you must file a Suspicious Transaction Report (STR) with FINTRAC within 30 calendar days. Red flags include: a buyer paying significantly above market value with no negotiation, a third party providing funds with no apparent relationship to the buyer, reluctance to provide identification, requests to structure payments to avoid reporting thresholds, and properties purchased then resold quickly at inflated prices.
Important:You must not disclose to your client or anyone else that you have filed or intend to file an STR. This "tipping off" prohibition is a criminal offence under the PCMLTFA. If you suspect money laundering, file the report confidentially and continue the transaction normally unless instructed otherwise by law enforcement.
CASL Consent Tracking
Canada's Anti-Spam Legislation (CASL) governs commercial electronic messages (CEMs), which include marketing emails, promotional texts, and in some interpretations, social media direct messages. CASL applies to all Canadian businesses, including real estate agents operating as sole proprietors or through personal real estate corporations.
Express vs Implied Consent
Express consent means the person explicitly agreed to receive your messages. They opted in through a form, checked a box, or verbally agreed. Express consent does not expire unless the person withdraws it.
Implied consent exists in specific circumstances: an existing business relationship (you completed a transaction with them in the last 2 years), an existing inquiry relationship (they contacted you about your services in the last 6 months), or conspicuous publication (their email address is published in a directory and they have not indicated they do not want unsolicited messages).
The critical difference: implied consent expires. When a past client's 2-year window closes and you have not obtained express consent, you must stop sending them marketing emails. This is where most realtors fail -- they add past clients to their newsletter list indefinitely without tracking the consent expiry.
Message Requirements
Every commercial electronic message must include: your name and the name of anyone on whose behalf the message is sent, your mailing address and either a phone number, email address, or web address, and a functioning unsubscribe mechanism. The unsubscribe must be processed within 10 business days.
What You Need to Track Per Contact
- Consent type: express or implied
- Consent date: when it was obtained
- Consent source: how it was obtained (web form, verbal, written, business card)
- Consent purpose: what they agreed to receive
- For implied consent: the basis (transaction, inquiry, publication) and expiry date
- Unsubscribe status: whether they have opted out, and the date
BCFSA Professional Standards
The BC Financial Services Authority (BCFSA) regulates real estate professionals under the Real Estate Services Act (RESA) and the Real Estate Services Rules. BCFSA replaced the Real Estate Council of BC (RECBC) in 2021 and has been increasingly active in enforcement.
Key obligations under BCFSA oversight include:
- Agency disclosure: Disclose your agency relationship at the earliest practical opportunity, before providing services
- Dual agency restrictions: Limited dual agency is permitted only with informed written consent of both parties, and only where the property is outside Greater Vancouver, Fraser Valley, or similar designated areas. In designated areas, dual agency is prohibited.
- Disclosure of remuneration: Disclose how you are being compensated, especially when dealing with unrepresented parties
- Accurate representation: All marketing materials, MLS listings, and representations about properties must be accurate and not misleading
- Duty of care: Act in the best interests of your client, exercise reasonable care and skill, maintain confidentiality, and avoid conflicts of interest
- Document retention: Maintain complete transaction files for 7 years
PIPEDA Data Privacy
The Personal Information Protection and Electronic Documents Act (PIPEDA) governs how private-sector organizations collect, use, and disclose personal information in the course of commercial activity. In BC, the provincial Personal Information Protection Act (PIPA) applies to organizations operating within the province, but PIPEDA still applies to federally regulated activities and cross-border data flows.
For realtors, the practical implications are:
- Purpose limitation:Collect personal information only for purposes a reasonable person would consider appropriate. You need a client's DOB for FINTRAC -- you do not need it for marketing.
- Consent: Obtain meaningful consent before collecting personal information. The Privacy Notice and Consent form (a standard BCREA form) fulfills this requirement when properly completed.
- Access rights: Clients have the right to access their personal information and request corrections. You must be able to provide this upon request.
- Data security: Protect personal information with security safeguards appropriate to the sensitivity. Client financial data, identity documents, and transaction details require stronger protection than a mailing list.
- Breach notification: If a data breach creates a real risk of significant harm to individuals, you must notify the affected individuals and report to the Privacy Commissioner.
Your CRM is your primary data store for client information. Choosing a CRM that encrypts data at rest, supports access controls, provides audit logs, and stores data in Canadian data centres significantly reduces your privacy compliance burden.
Record Retention Requirements
Multiple regulations impose record retention obligations on real estate professionals. Here is a consolidated view:
| Record Type | Retention Period | Governing Law |
|---|---|---|
| Transaction documents (contracts, disclosures) | 7 years from transaction date | RESA / Real Estate Services Rules |
| FINTRAC identity records | 5 years from last transaction with client | PCMLTFA |
| Receipt of Funds records | 5 years from date of creation | PCMLTFA |
| Suspicious Transaction Reports | 5 years from date of filing | PCMLTFA |
| CASL consent records | Duration of contact + 3 years after unsubscribe | CASL |
| Privacy consent records | As long as relationship exists + reasonable period | PIPA / PIPEDA |
The simplest approach is to retain everything for 7 years from the transaction date, which satisfies all requirements. Digital records in a CRM with proper backups are acceptable -- you do not need paper files, though your brokerage may require them for their own compliance program.
Common Compliance Mistakes
Based on BCFSA disciplinary decisions, FINTRAC examination findings, and CASL enforcement actions, these are the errors that get BC agents into trouble most often:
1. Incomplete FINTRAC records: The most common finding in FINTRAC examinations. Missing fields, missing records for one party in a transaction, or accepting expired ID. Every field on the form must be completed.
2. Late agency disclosure: Presenting the agency disclosure after services have already begun. BCFSA expects disclosure at the earliest practical opportunity.
3. No consent tracking for marketing emails:Sending newsletters to past clients without tracking whether implied consent has expired. This is both a CASL violation and a business risk.
4. Inaccurate MLS listings: Square footage that does not match BC Assessment records, bedroom counts that include non-conforming spaces, or misleading descriptions. BCFSA investigates these complaints aggressively.
5. Poor record retention: Agents who change brokerages or CRMs and lose transaction files in the transition. The 7-year requirement does not pause when you move offices.
6. Missing privacy consent: Collecting personal information before presenting the Privacy Notice and Consent form. This is a PIPA violation that is easy to prevent with a proper intake checklist.
Audit Preparation
BCFSA conducts practice reviews (audits) of licensees on a rotating basis and in response to complaints. FINTRAC conducts its own examinations of reporting entities. You can be audited by either or both, and the best preparation is ongoing compliance rather than last-minute cramming.
If you are notified of a practice review, here is what to prepare:
- Transaction files: Complete files for every transaction in the review period, including all signed forms, correspondence, and notes. Organize by transaction, not by date.
- FINTRAC records: Identity verification records for every client, Receipt of Funds records for every deposit, and copies of any STRs filed. These should be filed within each transaction file.
- Trust account records: If your brokerage handles trust, ensure deposit and disbursement records are complete and match the contracts.
- Marketing materials: Copies of all advertising, MLS listings, and promotional materials used during the review period. These should match the property details in your contracts.
- Consent records: Privacy notices, marketing consents, and CASL consent records for your active mailing list.
A CRM with built-in compliance tracking makes audit preparation dramatically easier. Instead of assembling paper files and searching through emails, you can generate a complete transaction file with all forms, identity records, communications, and consent records from a single system. This is not a luxury -- it is the modern standard of practice that auditors expect.
Ready to automate your real estate practice?
Magnate360 gives you 7 AI agents that handle email, forms, compliance, showings, and content — so you can focus on closing deals.
Frequently Asked Questions
What happens if I fail a BCFSA practice review?
The consequences depend on the severity of the findings. Minor documentation gaps may result in a letter of guidance or requirement to complete additional education. More serious violations -- such as missing FINTRAC records, undisclosed dual agency, or mishandling of trust funds -- can result in formal disciplinary action including fines (up to $500,000 for individuals under RESA), licence conditions, suspension, or cancellation. BCFSA publishes disciplinary decisions publicly, which also affects your reputation. The best strategy is to treat compliance as ongoing practice, not something you prepare for only when an audit is announced.
How long do I need to keep transaction records?
Under the Real Estate Services Rules, you must retain all transaction-related documents for a minimum of 7 years from the date of the transaction. Under FINTRAC, identity verification records must be kept for at least 5 years after the last transaction with the client. PIPEDA requires retention of personal information only as long as necessary for the identified purpose, but the 7-year RESA requirement effectively sets the floor. In practice, keeping records for 7 years from the transaction date covers all three requirements. Your brokerage is the primary record keeper, but you should maintain your own copies.
Do I need to verify the identity of both buyers and sellers?
Yes. FINTRAC requires identity verification for every client in a real estate transaction -- both buyers and sellers. If you represent the buyer, you verify the buyer. If you represent the seller, you verify the seller. In a dual agency situation, you verify both parties. The verification must be done using valid, unexpired government-issued photo identification, and the record must include the person's full legal name, date of birth, address, occupation, and the ID details (type, number, issuing jurisdiction, expiry date).
What CASL records do I need to keep?
For every contact you send commercial electronic messages to, you must be able to produce: the type of consent (express or implied), the date consent was obtained, how consent was obtained (web form, verbal agreement, business card exchange), what the person consented to receive, and for implied consent, the basis (existing business relationship, inquiry, conspicuous publication). You must also maintain your unsubscribe list and be able to show that unsubscribe requests were processed within 10 business days. Keep these records as long as you have the contact in your marketing database, plus 3 years after they unsubscribe.
Is using a CRM enough to ensure compliance?
A CRM with compliance features makes compliance significantly easier, but it does not guarantee it. The CRM can track consent records, store FINTRAC data, enforce document checklists, and create audit trails -- but you still need to actually collect the information, verify identities in person, obtain genuine consent, and follow through on your obligations. Think of the CRM as compliance infrastructure: it provides the structure, reminders, and record-keeping, but the substance comes from your professional practice.
Related Resources
Built-in compliance tracking for every transaction
Magnate360 tracks FINTRAC records, CASL consent, document checklists, and record retention automatically. When audit time comes, your compliance file is already built. Free to start.
Start free