AML Compliance

AML Compliance

Anti-Money Laundering (AML) compliance is a critical legal obligation for all commercial mail receiving operators in both the United States and Canada. As a mailbox operator, you serve as a gatekeeper in the postal and financial system, and you have a responsibility to identify and report suspicious activities. Implementing strong AML practices protects your business, your renters, and the integrity of the postal system. This guide provides a comprehensive overview of your AML obligations in both countries.

Why AML Matters for Mailbox Operators

Commercial mail receiving agencies can be exploited by bad actors for money laundering, fraud, identity theft, and terrorist financing. Your operation handles sensitive documents, financial correspondence, and packages - all of which can be used to facilitate illicit activities. By implementing robust AML procedures, you protect your business, your renters, and the integrity of the postal system.

Canada - FINTRAC and PCMLTFA

While commercial mail receiving agencies are not designated reporting entities under the PCMLTFA, C-Band Mailbox requires all Canadian operators to follow AML best practices aligned with FINTRAC guidelines. These practices help protect your business and ensure platform compliance.

Key Obligations Under PCMLTFA

• Know Your Customer (KYC): Verify the identity of every renter before providing services. Collect and verify government-issued photo ID and proof of address.
• Record Keeping: Maintain records of all client identification, transaction records, and correspondence for a minimum of five (5) years from the date of the last transaction.
• Suspicious Transaction Reports (STRs): If you suspect that a transaction or activity is related to money laundering or terrorist financing, you must file a Suspicious Transaction Report with FINTRAC. There is no minimum dollar threshold - suspicion alone triggers the obligation.
• Terrorist Property Reports: If you know or suspect that property in your possession is owned or controlled by a listed terrorist entity, you must file a report immediately.
• Compliance Program: Establish and maintain a compliance program that includes written policies and procedures, a designated compliance officer, ongoing training, and an effectiveness review every two years.

FINTRAC Reporting Thresholds

While mailbox operators are not traditional financial institutions, certain activities may trigger reporting obligations:

• Large cash transactions ($10,000 CAD or more)
• Attempted suspicious transactions (even if not completed)
• Electronic funds transfers of $10,000 CAD or more (if applicable to your services)

United States - FinCEN and BSA

While CMRAs are not classified as financial institutions under the BSA, C-Band Mailbox requires all US operators to follow identity verification and suspicious activity reporting practices consistent with FinCEN guidelines and USPS CMRA regulations (39 CFR / DMM 508.1.8).

Key Obligations Under BSA

• Customer Identification Program (CIP): You must implement a Customer Identification Program that verifies the identity of each renter, as required by USPS CMRA regulations and C-Band Mailbox platform requirements.
• Suspicious Activity Reports (SARs): If you detect activity that you know, suspect, or have reason to suspect is related to money laundering, fraud, or other criminal activity, you must file a SAR with FinCEN.
• Currency Transaction Reports (CTRs): Report any cash transactions exceeding $10,000 USD. This includes multiple transactions that aggregate to over $10,000 in a single day.
• Record Keeping: Maintain records of all customer identification, transactions, and SARs filed for a minimum of five (5) years.

Sanctions Screening

Sanctions screening is a mandatory component of your AML program in both countries:

US Operators - OFAC Screening

• Screen all renters against the OFAC (Office of Foreign Assets Control) SDN (Specially Designated Nationals and Blocked Persons) List
• Screen at onboarding and periodically thereafter
• If a match is found, do not provide services and report immediately to OFAC
• Maintain records of all screening activities

Canadian Operators - Sanctions List Screening

• Screen all renters against the Canadian Consolidated Autonomous Sanctions List maintained by Global Affairs Canada
• Also screen against United Nations sanctions lists
• If a match is found, freeze any related property and report to the RCMP or CSIS
• Maintain records of all screening activities

Red Flags and Suspicious Activity Indicators

Train yourself and your staff to recognize common red flags that may indicate money laundering or other illicit activity:

• Unusual Mail Volume: A renter receives an abnormally high volume of mail, especially financial documents or packages, that does not match their stated business purpose
• Multiple Identities: A renter attempts to open multiple accounts under different names or uses different IDs at different times
• Cash Payments: Insistence on paying in cash, especially large amounts, to avoid a paper trail
• Reluctance to Provide ID: Hesitation or refusal to provide required identification documents, or providing documents that appear altered or fraudulent
• Frequent Address Changes: Regularly changing forwarding addresses, especially to international destinations
• Structuring: Breaking up transactions into smaller amounts to avoid reporting thresholds
• Third-Party Pickups: Frequent use of different individuals to pick up mail, especially without proper authorization
• Evasive Behavior: Reluctance to discuss the nature of their business or the purpose of their mailbox

Record Keeping Requirements

Comprehensive record keeping is essential for AML compliance:

• All renter identification documents and verification records
• All transaction records (payments, action requests, mail activity)
• All SARs/STRs filed (never inform the renter that a report has been filed - this is known as "tipping off" and is a critical best practice that protects the integrity of any investigation)
• Sanctions screening results and dates
• Staff training records and dates
• Compliance program documentation and review results

Per the Operator Terms & Conditions Section 13 (Anti-Fraud), operators are obligated to cooperate with all anti-fraud and anti-money laundering investigations. Maintaining compliance is essential to your continued operation as a C-Band Mailbox partner.

For related compliance information, see KYC Requirements and Document Verification Guide.

Disclaimer: This article provides general guidance and does not constitute legal advice. Regulatory requirements may change. Consult a qualified legal professional for advice specific to your situation and jurisdiction.

For additional support, visit our Help Center or submit a support ticket.