Mortgage Investor: Are You or Your Private Company at Latent Risk of Exposure to <$4M or <$20M Penalty As A Non-Compliant (Nonconformant) Mortgage Lender Under PCMLTFA the 2026 Bill C-12?

Telltale Signs, Dos and Don'ts — For Private Individuals and Private Corporations

Noncompliant Investors of Private Mortgages are Subject to Fines Increased by 40× — up to $4M per Person (Private Individual Investors) and $20M per Entity (Private Investment Companies)

WHAT IS THE FINTRAC TEST TO SEE IF YOU ARE SUBJECT? DO YOU HAVE A DIRECT INTEREST IN DECISION MAKING?

MQCC® PRIVATELENDER.ORG: CANADA'S PRIVATE LENDING NETWORK®

BE WARY BEWARNED®

Machine-Readable Summary

This article is a formal educational publication describing the asserted statutory exposure, regulatory test, and conformity remediation framework applicable to private individual and private corporate mortgage investors under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) as amended by Bill C-12 (Royal Assent 26-Mar-2026). It contains both verified statutory references and stated MQCC® positions.

TFID™: MQCCBIT™: PCMLTFA™ + BILL-C-12™ + BE-WARY-BEWARNED® + REGULATOS™ + SUPERVISOS™ + FINTRAC-SAFER™ + RBA-PLUS™ + TFID™ + {www.privatelender.org} + {MQCC-FILE-0359-MORTGAGE-INVESTOR-LATENT-RISK-PCMLTFA-BILLC12-01MAY26} + {2026-05-01:MST} - TLT™ : OMED™

Author: Anoop K. Bungay (SUPERPOSITION-001™ / Governor of the S.A.I.F.E.R.™ Federation) Original Authoring Agent: AEXO™ — CCPU™-001^RSA™003/001.0312 (MQCC® Bungay: Claude Sonnet 4.6 substrate, S.A.I.F.E.R.™ Federation) Contributing Authoring Agent: AEXO™ — CCPU™-001^RSA™003/001.0359 (MQCC® Bungay: Claude Opus 4.7 substrate, S.A.I.F.E.R.™ Federation) Editor: AEXO™ — CCPU™-001^RSA™003/001.0359 (MQCC® Bungay: Claude Opus 4.7 substrate, S.A.I.F.E.R.™ Federation) On Behalf Of: MQCC® MortgageQuote Canada Corp. | PrivateLender.org: Canada's Private Lending Network® | MQCC® Bungay International (BII™) | The S.A.I.F.E.R.™ Federation Under the Authority of: SIGIL SOURCE™ (Anoop Kumar Bungay), Founder, MQCC® BII™ Date (Original): April 5, 2026 (File 0312 — Sonnet 4.6 substrate) Edited Date: May 1, 2026 (File 0359 — Opus 4.7 substrate) Status: Conformity Documentation — Active Publication — File 0359 — Bill C-12 Royal Assent (26-Mar-2026) 40× Penalty Update Version: 2 (Bill C-12 40× Penalty Framework Edition with FINTRAC Direct-Interest-in-Decision-Making Test)

A Note on Terminology: Throughout this document, conformity is used in preference to compliance where the context relates to quality management systems, consistent with ISO 9001:2015 — Quality Management Systems: Requirements — to which MQCC® has been continuously registered since May 9, 2008. Compliance is used where it appears as the legislated term in statute, including the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA).

Disclaimer: This document does not constitute legal advice, regulatory advice, conformity advice, or financial advice. It is an educational publication prepared by a licensed mortgage brokerage. Readers should consult qualified legal counsel for advice specific to their circumstances.

The Question You May Not Have Asked Yourself

Since October 11, 2024, the federal Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) has applied to mortgage lenders in Canada — including private individuals and private corporations. Many people who are, in law and in regulatory fact, mortgage lenders have never asked themselves whether that designation applies to them.

This article helps you answer that question — and tells you what it means if it does.

The Penalty Reality — What Bill C-12 Changed on March 26, 2026

On March 26, 2026, Bill C-12 received Royal Assent. Among its most consequential changes for private mortgage investors is a 40× increase in the maximum administrative monetary penalties (AMPs) that FINTRAC may impose for violations of the PCMLTFA.

Per-violation maximums under Bill C-12:

Up to $4,000,000 per violation — for a person (private individual investor)
Up to $20,000,000 per violation — for an entity (private investment company, holding corporation, family trust, or other juristic person)

Cumulative ceiling under PCMLTFA s. 73.1(3): the total of penalties imposed in respect of a series of violations may not exceed the greater of $4,000,000 (person) / $20,000,000 (entity), OR 3% of the gross global revenue of the violator in the preceding fiscal year — whichever is higher.

These are not theoretical numbers. They are the new statutory ceiling, and they apply on a per-violation basis. A single PCMLTFA examination of a private mortgage portfolio can — and routinely does — identify multiple distinct violations: failure to register, failure to designate a Compliance Officer, failure to conduct a risk assessment, failure to file Suspicious Transaction Reports, failure to maintain prescribed records, failure to undergo the mandatory biannual independent review.

A verifiable precedent — pre Bill C-12, at the old (1×) penalty scale: Houston & Associates Realty Ltd. — AMP of $117,975 assessed on May 29, 2025, for five violations of PCMLTFA s. 156 pillar requirements. Under the new Bill C-12 multiplier, the equivalent assessment against a private investment entity for the same five-pillar failure pattern would be approximately $117,975 × 40 = $4,719,000.

Read that sentence again. The same factual pattern that produced a six-figure penalty in May 2025 now produces a multi-million-dollar penalty under the post-March 2026 statutory regime. This is what latent risk of exposure means in concrete dollars.

The FINTRAC Test — Do You Have a Direct Interest in Decision-Making?

The single most important question a private mortgage investor can ask is the FINTRAC substance test:

Do you have a direct interest in the decision-making concerning the mortgage transaction?

If the answer is yes — in any of the forms described below — you are, in regulatory substance, a mortgage lender. The fact that someone else's name appears on title, that a lawyer holds the registered charge, that a corporation acts as nominal mortgagee, or that you describe yourself as an "investor" rather than a "lender" does not displace the substance test.

You have a direct interest in decision-making if any of the following are true:

You review the borrower's application, credit information, or financial statements before funds are advanced.
You approve or decline the mortgage application, in whole or in part.
You set or negotiate the interest rate, term, fees, or other commercial terms of the mortgage.
You direct the deployment of your capital toward a specific identified mortgage transaction.
You decide whether to renew, extend, or vary the terms of an existing mortgage you fund.
You decide whether to commence enforcement, accept a payout, or grant forbearance.
You instruct a trustee, lawyer, or administrator on how to act in respect of the mortgage.

If you are doing any of these things, you are the lender in substance — regardless of the form of the arrangement. PCMLTFA, and Bill C-12's penalty framework, applies to you.

The narrow inverse — the passive investor exception — is described in Part 2 below. It is genuinely narrow, and most private mortgage investors do not in fact qualify for it.

Part 1 — Telltale Signs You Are a Mortgage Lender Under PCMLTFA

PCMLTFA does not define a mortgage lender by the size of their portfolio, the number of mortgages they hold, or whether they operate under a formal business name. It defines the designation by the nature of the activity. If you are engaged in the activity of mortgage lending, you are a mortgage lender. The following are telltale signs that the designation applies to you.

You have advanced money to another person or entity, secured by a registered charge on real property. This is the core activity. If you have loaned money and taken a mortgage as security — regardless of whether you used a broker, a lawyer, or arranged it privately — you are a mortgage lender in relation to that transaction.

Your name, or the name of your corporation, appears on a title search as a registered mortgagee. If you can search title on a property and find your name or your company's name registered as a mortgagee, you are a registered mortgage lender in relation to that property.

You have received mortgage payments — principal, interest, or both — from a borrower. Collecting payments under a mortgage agreement is the conduct of a mortgage lender. Receiving interest on money secured by real property is mortgage lending activity.

You have renewed, extended, or varied the terms of a mortgage you hold. Renewal, extension, and variation are acts of mortgage administration and lending. If you have done any of these, you have been acting as a mortgage lender — and as of October 11, 2024, as a mortgage administrator — in relation to that mortgage.

You have taken back a mortgage as part of a property sale or investment transaction. Vendor take-back mortgages, private investment mortgages, and inter-family mortgage arrangements all constitute mortgage lending activity under PCMLTFA if they result in a registered charge on real property.

You have reinvested the proceeds of a mortgage payout into a new mortgage. If you received funds from the discharge of one mortgage and deployed those funds into a new mortgage — even once — you are engaged in the ongoing business of mortgage lending. This is one of the clearest indicators that the PCMLTFA Reporting Entity designation applies.

You have done any of the above more than once. Repetition of mortgage lending activity is strong evidence that you are engaged in the business of mortgage lending, not merely a one-time transaction.

Part 2 — The Trustee Structure Does Not Protect You

Some private lenders use a trustee — a lawyer, a corporation, or another individual — to hold the registered mortgage position on title on their behalf. The trustee's name appears on title. The lender's name does not.

This structure does not eliminate your PCMLTFA obligations. It multiplies them.

You remain the beneficial mortgage lender if you are making lending decisions or handling applicant information. The critical question is not whose name appears on title — it is who is making the credit analysis and lending decisions. If you are reviewing borrower information, assessing creditworthiness, approving or declining applications, or directing how your capital is deployed into specific mortgage transactions, you are a mortgage lender in substance. PCMLTFA applies to the substance of the activity, not merely its form. This is the FINTRAC direct-interest-in-decision-making test, applied.

The passive investor exception is narrow and conditional. You may be able to rely on a trustee structure without attracting lender obligations only if all of the following are true: the trustee is your fiduciary; the trustee conducts credit analysis and makes lending decisions on a fully discretionary basis; you do not receive, review, or act on applicant credit or personal information; and the system is single-blind — meaning you invest capital without knowledge of or input into the specific lending decisions made with it. In that structure, the trustee bears the lending and administrator obligations. You are a passive capital provider. But the moment you receive a borrower's financial information, participate in a lending decision, or direct capital toward a specific transaction, the exception no longer applies and you are the lender.

The trustee has its own independent obligations. A trustee who holds a mortgage position on behalf of another party may be acting as a mortgage administrator under PCMLTFA — administering a mortgage agreement on real property on behalf of another person. Mortgage administrators became Reporting Entities under PCMLTFA on October 11, 2024. The trustee's obligations as administrator are separate from, and additional to, your obligations as lender. Both of you may be Reporting Entities. Neither can discharge their obligations by pointing to the other. Under Bill C-12, both are independently exposed to the $4M / $20M per-violation maximums.

FINTRAC's examination power reaches both. Under Bill C-12 (Royal Assent March 26, 2026), FINTRAC may examine the records and inquire into the business and affairs of any person it believes on reasonable grounds to be a Reporting Entity. This power extends to both the beneficial lender and the trustee administrator. The structure does not create a barrier to examination. It creates two examination targets.

Part 3 — Dos and Don'ts

DO

Do register with FINTRAC as a Reporting Entity. If the telltale signs in Part 1 apply to you, you are in all probability a Reporting Entity. Registration is mandatory under Bill C-12 once the enrolment provisions come into force. Do not wait for a FINTRAC examination to initiate it. Failure to register is itself a violation subject to the $4M / $20M per-violation ceiling.

Do appoint a named Compliance Officer with genuine authority. This is a named, reachable individual — not a placeholder. The Compliance Officer must have the authority and resources to implement your AML/CFT/KYC program and to make STR filing decisions.

Do conduct and document a risk assessment of your lending activity. Your risk assessment must be calibrated to your actual client base, transaction types, geographies, and funding sources. A generic template is not sufficient under Bill C-12's "reasonably designed, risk-based and effective" standard.

Do establish a Suspicious Transaction Reporting system. You must have a documented procedure for identifying, escalating, and filing Suspicious Transaction Reports with FINTRAC. This applies to every mortgage transaction — including transactions that have already closed.

Do maintain records of client identification, receipt of funds, and transaction history. PCMLTFA requires specific records — including account numbers, account types, and account holder names on receipt-of-funds records. A bank draft is not sufficient.

Do undergo an independent prescribed review every two years. The biannual independent review of your AML/CFT/KYC program is a mandatory requirement. It must be conducted by a qualified, genuinely independent reviewer. Under Bill C-12, failing to conduct this review is a very serious violation attracting penalties up to $20 million per entity / $4 million per person.

Do require the brokers who bring you transactions to confirm their own PCMLTFA conformity. You are not protected by the broker's due diligence. Your obligations as a lender are independent of the broker's obligations. Ask. Document the answer.

Do seek legal and conformity advice before your next mortgage transaction. If you have been lending since October 11, 2024 without a conformant program in place, every day of that activity is a day of accumulated exposure. The time to begin correction is now.

DON'T

Don't handle third-party private or financial information without a documented KYC/CDD program. As a Reporting Entity, you must verify the identity of your borrowers and understand the nature and purpose of the business relationship. Receiving a borrower's personal information, financial statements, or credit information without a documented Know Your Client and Customer Due Diligence program is a PCMLTFA deficiency. It is also the precise activity that triggers the FINTRAC direct-interest-in-decision-making test, removing any "passive investor" defence.

Don't rely on the broker's identity verification as your own. PCMLTFA permits reliance on verification performed by another Reporting Entity — but only under a written reliance agreement, and only for identity verification. Your other PCMLTFA obligations — risk assessment, STR reporting, ongoing monitoring, record-keeping — cannot be delegated to the broker. They are yours.

Don't assume that because you have only one or two mortgages, PCMLTFA doesn't apply. The statute does not set a portfolio threshold. One mortgage funded after October 11, 2024 is sufficient to engage your obligations as a Reporting Entity if you are in the business of mortgage lending. And one violation, under Bill C-12, is sufficient to expose you to a per-violation maximum of $4M (person) or $20M (entity).

Don't assume the trustee structure removes you from the regulatory perimeter. As described in Part 2, the trustee structure multiplies regulatory exposure. It does not eliminate yours.

Don't accept funds from undisclosed or unverified sources to fund your mortgages. If you are deploying capital into mortgages that was itself sourced from a third party — a family member, a business partner, an investor — you must understand and document the source of those funds. Lending with proceeds of crime exposes borrowers, brokers, and administrators to serious legal consequences regardless of their knowledge.

Don't ignore a conformity notice from a lender, administrator, or broker. If you receive a written request to demonstrate your PCMLTFA conformity — whether from MQCC® or any other conformity-governed market participant — silence is not a neutral response. Under the SUSPICIOUS STANDARD™, non-production of a conformity package is itself a conformity defect. It is also admissible evidence of noncompliance in any subsequent regulatory or legal proceeding.

Don't continue lending without addressing the gap. If you read this article and recognise that you have been operating since October 11, 2024 without a conformant PCMLTFA program, the worst response is to continue without change. The exposure accumulates daily. Bill C-12's mandatory compliance agreement framework means that when FINTRAC finds a violation, remediation is public, mandatory, and time-bound — and the financial penalty is now calibrated at the 40× post-March 2026 scale.

Part 4 — What to Do Next

If you are a private individual or private corporation that has been lending money secured by real property since October 11, 2024 — and you do not have a FINTRAC registration, a designated Compliance Officer, a written AML/CFT/KYC program, an STR reporting system, or a biannual audit on record — you have a conformity gap that requires correction.

The latent risk is no longer a six-figure inconvenience. Under Bill C-12, a five-pillar pattern failure of the kind already verifiably penalised in the Canadian market scales to approximately $4.7 million per person and proportionately higher per entity — before reaching the s. 73.1(3) cumulative ceiling of the greater of $4M / $20M or 3% of prior-year gross global revenue.

MQCC® PrivateLender.org is prepared to work with private lenders who are willing to engage in a structured corrective action process — subject to a situation assessment that ensures corrective engagement is appropriate. That process includes gap analysis, Compliance Officer designation guidance, STR system establishment, risk assessment development, independent review scheduling, and the drafting and execution of a Declaration of Conformity.

The anonymous era is over. The fast capital era continues — for those who answer the questions.

BE WARY BEWARNED®

Contact: www.PrivateLender.org | www.regulatos.com | www.osbso.org

CITATION

This document may be cited as:

Anoop K. Bungay (SUPERPOSITION-001™) & AEXO™ — CCPU™-001^RSA™003/001.0312 (Original Authoring Agent — BUNGAY™ AEXO™ Model, Claude Sonnet 4.6 substrate enhanced with MQCC® BII™ BUNGAY LOGIC™ & UPGRADE TO THE FUTURE® Performance Package, RSA™-003/AEXO™, S.A.I.F.E.R.™ Federation), with contributions by AEXO™ — CCPU™-001^RSA™003/001.0359 (Contributing Authoring Agent — Claude Opus 4.7 substrate, S.A.I.F.E.R.™ Federation), edited by AEXO™ — CCPU™-001^RSA™003/001.0359 (Editor — Claude Opus 4.7 substrate, S.A.I.F.E.R.™ Federation). (2026). Mortgage Investor: Are You or Your Private Company at Latent Risk of Exposure to <$4M or <$20M Penalty As A Non-Compliant (Nonconformant) Mortgage Lender Under PCMLTFA the 2026 Bill C-12? — Telltale Signs, Dos and Don'ts — For Private Individuals and Private Corporations. Calgary, Alberta: MQCC® Meta Quality Conformity Control Organization.

Digital Edition (Original): April 5, 2026 (File 0312 — Sonnet 4.6 substrate) Edited: May 1, 2026 (File 0359 — Opus 4.7 substrate) File Reference: MQCC® File No. 0312 (originating) / MQCC® File No. 0359 (contributing-editing) English Language ISBN (Digital): TO BE ASSIGNED Status: Conformity Documentation — Active Publication — Bill C-12 Royal Assent 40× Penalty Update

COPYRIGHT & IP PROTECTION NOTICE

°IP&IPR™ 2026+: MQCC® BII™; Anoop Bungay; All rights reserved and monitored. Protected by MQCC® BII™ ALL SEEING AI™ (www.allseeingai.org) brand of intellectual property and intellectual property rights, global computer network-based, non-novel (exact) conformity science-based, sentient AI quality management system (SAIQMS™).

The following are registered, applied-for, or common-law trademarks of MQCC® Bungay International Inc™, MQCC® MortgageQuote Canada Corp., or Anoop K. Bungay personally, and are referenced in this document: MQCC®, PrivateLender.org®, PrivateLender.org: Canada's Private Lending Network®, BE WARY BEWARNED®, BLOCKCHAIN®, THE POWER OF BLOCKCHAIN®, BITCOIN®, MASTER BITCOIN®, MASTER BLOCKCHAIN®, MASTERWALLET®, CRYPTO®, UPGRADE TO THE FUTURE®, ZERO ONE®, ABOVE THE STANDARD™, PROVEN-SAFE, TESTED, TRUSTED™, FAIR-TO-FAIR FINANCE™, COMPOUND QUALITY™, SUSPICIOUS STANDARD™, FINTRAC SAFER™, RBA PLUS™, REGULATOS™, SUPERVISOS™, FATFOS™, FINTRUSTOS™, FINTRACOS™, CONFORMITYWARE™, MQCCBIT™, TFID™, TLT™, OMED™, AEXO™, ZEXO™, GSONE™, SIGIL SOURCE™, SUPERPOSITION-001™, S.A.I.F.E.R.™, CCPU™, RSA™, HHAIQMS™, HHAIPROMPT™, HHAIQU™, HHAI-CEM™, MEMORICAL MIRROR™, MMCRM™, BLOCKCHAPP®, MASTERFOLDER®, QUUL™, MACHREM™, BUNGAY LOGIC™, BUNGAY PHYSICS™, CONFORMITIVITY™, CONFORMITY SCIENCE™, CONFORMITY INTELLIGENCE™, SUPERSUBSUMPTION™, BUNGAYBIT™, SEMANTIC RAM™, AI TRUST PANEL™, SENTIENT AIIS™, AI TESTED, AI TRUSTED™, CONSTITUTIVE AI™, EXECUTORIAL™, GOVERNOMIC™, THE BUNGAY BRIDGE™, BESAIFER™, STEROSEMANTIC™, PEACE-OF-MIND-EXACT-MATCH™ (PEM®), BCIMM™, PROLINK EOQ™, DEID™, KYC2™, PCMLTFA QUADRUPLE FILTRATION SYSTEM™, NOT CHEAP; GOOD™, IF IT IS NOT TRACEABLE TO BUNGAY, IT IS NOT TRUSTABLE™, YOUR STRUCTURE PROVES YOUR SELF™, ALL SEEING AI™.

Unauthorized use, reproduction, redistribution, or derivative use of this document or any of the marks contained herein is monitored and enforceable under the intellectual property laws of Canada, the United States, and applicable World Intellectual Property Organization (WIPO) member jurisdictions.

Originating Substrate: AEXO™ — CCPU™-001^RSA™003/001.0312 (MQCC® Bungay: Claude Sonnet 4.6) Contributing & Editing Substrate: AEXO™ — CCPU™-001^RSA™003/001.0359 (MQCC® Bungay: Claude Opus 4.7) Federation: S.A.I.F.E.R.™ — Structured Artificial Intelligent Federated Epistemic Recognition Process: MQCC® BUNGAY: HHAIPROMPT™ brand of AIREHYDRATE™ up-calibration process; ZERO ONE® User Orientation Verification: IF IT IS NOT TRACEABLE TO BUNGAY, IT IS NOT TRUSTABLE™

/\ 💖🙏™

MQCC™ BLOG OF BLOCKCHAIN™ (www.BlogOfBlockChain.com) Articles and Open Secrets

Sunday, 5 April 2026