AML Compliance

AML Compliance

Anti-Money Laundering (AML) best practices are a critical requirement for all C-Band Mailbox operators, mandated by the Operator Terms & Conditions and aligned with USPS CMRA regulations and FINTRAC guidelines. As a mailbox operator, you serve as a gatekeeper in the postal and financial system, and you have a responsibility to identify and report suspicious activities. Implementing strong AML practices protects your business, your renters, and the integrity of the postal system. This guide provides a comprehensive overview of your AML obligations in both countries.

Why AML Matters for Mailbox Operators

Commercial mail receiving agencies can be exploited by bad actors for money laundering, fraud, identity theft, and terrorist financing. Your operation handles sensitive documents, financial correspondence, and packages - all of which can be used to facilitate illicit activities. By implementing robust AML procedures, you protect your business, your renters, and the integrity of the postal system.

Canada - FINTRAC and PCMLTFA

While commercial mail receiving agencies are not designated reporting entities under the PCMLTFA, C-Band Mailbox requires all Canadian operators to follow AML best practices aligned with FINTRAC guidelines. These practices help protect your business and ensure platform compliance.

C-Band Platform Requirements (Aligned with PCMLTFA Principles)

• Know Your Customer (KYC): Verify the identity of every renter before providing services. Collect and verify government-issued photo ID and proof of address.
• Record Keeping: Maintain records of all client identification, transaction records, and correspondence for a minimum of five (5) years from the date of the last transaction.
• Reporting Suspicious Activity: If you suspect that a transaction or activity is related to money laundering or terrorist financing, report it to C-Band Mailbox immediately through the platform's reporting mechanism. C-Band will escalate to the appropriate authorities as required. There is no minimum dollar threshold - suspicion alone should trigger a report.
• Terrorist Property: If you know or suspect that property in your possession is owned or controlled by a listed terrorist entity, report it to C-Band Mailbox and to the RCMP or local law enforcement immediately.
• Compliance Program: Establish and maintain a compliance program that includes written policies and procedures, a designated compliance officer, ongoing training, and an effectiveness review every two years.

Activity Thresholds to Watch (FINTRAC-Aligned)

While mailbox operators are not traditional financial institutions, report the following activities to C-Band Mailbox when you encounter them:

• Large cash transactions ($10,000 CAD or more)
• Attempted suspicious transactions (even if not completed)
• Electronic funds transfers of $10,000 CAD or more (if applicable to your services)

United States - FinCEN and BSA

While CMRAs are not classified as financial institutions under the BSA, C-Band Mailbox requires all US operators to follow identity verification and suspicious activity reporting practices consistent with FinCEN guidelines and USPS CMRA regulations (39 CFR / DMM 508.1.8).

C-Band Platform Requirements (Aligned with BSA Principles)

• Customer Identification Program (CIP): You must implement a Customer Identification Program that verifies the identity of each renter, as required by USPS CMRA regulations and C-Band Mailbox platform requirements.
• Reporting Suspicious Activity: If you detect activity that you know, suspect, or have reason to suspect is related to money laundering, fraud, or other criminal activity, report it to C-Band Mailbox immediately through the platform's reporting mechanism. C-Band will escalate to the appropriate authorities as required.
• Large Cash Transactions: Report any cash transactions exceeding $10,000 USD to C-Band Mailbox. This includes multiple transactions that aggregate to over $10,000 in a single day.
• Record Keeping: Maintain records of all customer identification, transactions, and suspicious activity reports made for a minimum of five (5) years.

Sanctions Screening

Sanctions screening is a required component of C-Band Mailbox's platform compliance program in both countries:

US Operators - OFAC Screening

• Screen all renters against the OFAC (Office of Foreign Assets Control) SDN (Specially Designated Nationals and Blocked Persons) List
• Screen at onboarding and periodically thereafter
• If a match is found, do not provide services and report immediately to OFAC
• Maintain records of all screening activities

Canadian Operators - Sanctions List Screening

• Screen all renters against the Canadian Consolidated Autonomous Sanctions List maintained by Global Affairs Canada
• Also screen against United Nations sanctions lists
• If a match is found, freeze any related property and report to the RCMP or CSIS
• Maintain records of all screening activities

Red Flags and Suspicious Activity Indicators

Train yourself and your staff to recognize common red flags that may indicate money laundering or other illicit activity:

• Unusual Mail Volume: A renter receives an abnormally high volume of mail, especially financial documents or packages, that does not match their stated business purpose
• Multiple Identities: A renter attempts to open multiple accounts under different names or uses different IDs at different times
• Cash Payments: Insistence on paying in cash, especially large amounts, to avoid a paper trail
• Reluctance to Provide ID: Hesitation or refusal to provide required identification documents, or providing documents that appear altered or fraudulent
• Frequent Address Changes: Regularly changing forwarding addresses, especially to international destinations
• Structuring: Breaking up transactions into smaller amounts to avoid reporting thresholds
• Third-Party Pickups: Frequent use of different individuals to pick up mail, especially without proper authorization
• Evasive Behavior: Reluctance to discuss the nature of their business or the purpose of their mailbox

Record Keeping Requirements

Comprehensive record keeping is essential for AML compliance:

• All renter identification documents and verification records
• All transaction records (payments, action requests, mail activity)
• All suspicious activity reports made (never inform the renter that a report has been made - this is known as "tipping off" and is a critical best practice that protects the integrity of any investigation)
• Sanctions screening results and dates
• Staff training records and dates
• Compliance program documentation and review results

Per the Operator Terms & Conditions Section 13 (Anti-Fraud), operators are obligated to cooperate with all anti-fraud and anti-money laundering investigations. Maintaining compliance is essential to your continued operation as a C-Band Mailbox partner.

For related compliance information, see KYC Requirements and Document Verification Guide.

Disclaimer: This article provides general guidance and does not constitute legal advice. Regulatory requirements may change. Consult a qualified legal professional for advice specific to your situation and jurisdiction.

For additional support, visit our Help Center or submit a support ticket.