Six signals we check
- FINTRAC registration as a Money Services Business (MSB).
- Segregated client trust accounts — your funds are not commingled with operating cash.
- Bank-grade encryption (TLS in transit, AES-256 at rest) for card and banking data.
- Transparent published fees with no surprise add-ons at checkout.
- Canadian-hours customer support reachable by email or phone.
- Public history of on-time payments, ideally 12+ months without major outages.
Where the genuine risks live
- Newer platforms with limited operating history — slightly higher service-interruption risk.
- Unregistered platforms or those operating from offshore jurisdictions — no FINTRAC recourse.
- Platforms that ask you to enter card details on a non-HTTPS page or via email — a hard no.
Our practical advice
For high-value recurring payments, default to established platforms (Chexy, Neobanc, Casa) with verifiable FINTRAC registration and at least 12 months of public operating history.
Read more
Compare specific platforms