FINTRAC: Use Secure Email Domains for Confidential Contact

• FINTRAC has multiple email addresses listed on its website for various purposes.
• Some of these addresses are marked as unsecure and should not be used to send confidential information.
• FINTRAC will only respond to emails bearing the appropriate police or government partner domain name.
• Sensitive personal information, such as Social Insurance Numbers, should not be included in messages sent to FINTRAC.

Please contact us first for guidance before sending sensitive information to an unsecure email address.

FINTRAC, the Canadian anti-money laundering regulator, has multiple email addresses listed on its website for various purposes. However, some of these addresses are marked as unsecure and should not be used to send confidential information. For instance, the address guidelines-lignesdirectrices@fintrac-canafe.gc.ca is an unsecure email address that should only be contacted first for guidance before sending sensitive information.

In contrast, FINTRAC will only respond to emails bearing the appropriate police or government partner domain name. This highlights the importance of verifying the authenticity of the recipient's email address before sending confidential information.

The personal information included in inquiries to FINTRAC is protected under the Privacy Act and may be used for statistical, evaluation, and reporting purposes. This information may also be shared with programs and activities of FINTRAC if the inquiry pertains to a specific program or activity.

It's worth noting that the transmission of this information is not secure, which means sensitive personal information such as Social Insurance Numbers should not be included in messages sent to FINTRAC. The Centre has multiple personal information banks, including Public Communications (PSU 914), where this information may be stored.

The distinction between secure and unsecure email addresses is crucial for lawyers and individuals who need to contact FINTRAC. Sending confidential information to the wrong address could compromise sensitive data, which is why it's essential to verify the authenticity of the recipient's email address before sending any information.

This highlights the importance of due diligence when contacting regulatory bodies like FINTRAC, especially when dealing with sensitive or confidential matters.

Lawyers should be aware that FINTRAC will only respond to emails bearing the appropriate police or government partner domain name, highlighting the importance of verifying the authenticity of the recipient's email address before sending confidential information.

Source: Original reporting via FINTRAC's website