FINTRAC CDR Filing Guide 2026 for Canadian Gaming Operators
Two Regulators, One Filing Done Right
In gaming compliance, few reports are read as closely as the CDR. This guide covers how to aggregate disbursements, file within 15 days, meet iGaming Ontario's FWR requirements, and keep your records ready for an audit.
What is a Casino Disbursement Report (CDR)?
A Casino Disbursement Report (CDR) is a mandatory FINTRAC filing required whenever a casino makes a disbursement of $10,000 CAD or more to a client, whether paid in cash, by cheque or by transfer. CDRs apply to all licensed casino operators and gaming establishments in Canada. A disbursement is more than a chip redemption. It includes:
- Redemptions of chips, tokens, plaques and slot tickets
- Payments on a bet, including slot jackpots
- Front-money and safekeeping withdrawals
- Credit advances, including markers and counter cheques
- Cashing a cheque or redeeming another negotiable instrument
- Reimbursements of a client's travel or entertainment expenses
As with the LCTR, there is no discretion: if the threshold is met, you file, suspicion or not.
CDR Filing Requirements
Filing Deadline
15 days from the date of disbursement
Threshold
$10,000 CAD or more disbursed (single or aggregated)
Submit To
FINTRAC Web Reporting System (FWR)
Penalty
Up to $40,000 per missed or late report (minor violation), each transaction counted separately
iGaming Ontario and Direct FWR Filing Requirements
FINTRAC filings can be submitted through compliant third-party platforms, but iGaming Ontario and certain other gaming regulators may require CDR reports to be filed directly through FINTRAC's Web Reporting (FWR) system, not via third-party software. Compliance teams must then log in to the FWR portal and fill in every required field, by hand, for each reportable disbursement.
For an operation with several reportable redemptions a week, that manual entry becomes a bottleneck:
- Cage staff must re-enter transaction data already captured in your gaming system
- Manual entry brings formatting errors, and formatting errors bring FWR rejections
- Compliance officers must cross-check each submission against source records
- The 15-day deadline still applies, and manual work eats into it
The Quantoflow Chrome Extension Fills In FWR for You
Quantoflow's Chrome Extension works inside the FINTRAC Web Reporting system. When your team opens a CDR form on FWR, the extension fills in every required field from data already in Quantoflow: customer ID, amounts, dates, gaming instrument types and more. One click. No retyping. No formatting errors.
How the Quantoflow Chrome Extension Works
For gaming operators who must file directly on FWR, whether for iGaming Ontario or another regulator, the Chrome Extension removes the manual entry that makes FWR such slow work.
- Recognizes the form: the extension knows when a CDR form is open in FINTRAC's Web Reporting system and starts at once
- Uses data from Quantoflow: checked transaction data already in Quantoflow (customer identification, redemption amounts, dates, gaming instrument details) goes straight into the matching FWR fields
- Fills every field in seconds: what took 10–15 minutes of manual entry per CDR now takes a single click
- Checks before you submit: any field that doesn't match FWR's format is flagged first, so the errors that cause rejections never go out
- Keeps a record: every FWR submission made through the extension is logged in Quantoflow with a timestamp and confirmation reference for your audit trail
iGaming Ontario operators: if your operating agreement requires direct FWR filing for CDRs, the Chrome Extension lets you keep filing on FWR without the manual entry. Contact us to confirm it fits your specific obligations.
Aggregation: Multiple Disbursements, One CDR
If you make multiple disbursements to the same client within a 24-hour period, those amounts must be aggregated. If the combined total equals or exceeds $10,000, a single CDR is required. For how that 24-hour window can be drawn, see static windows vs. running clocks.
Aggregation is where gaming establishments most often fall short. A customer who redeems $4,000 in chips, collects a $3,500 jackpot, then withdraws $3,000 of front money in the same evening has triggered a CDR. Yet three separate cage transactions may each be processed with no one seeing the whole.
Cage team risk: tracking aggregation by hand across cage windows and shift changes invites error. Quantoflow brings every redemption together by customer across the 24-hour window and raises a CDR alert when the threshold is met, whichever cage handled each transaction.
What Your CDR Must Include
- Customer full name, address, and date of birth
- Government-issued photo ID (type, number, issuing jurisdiction), which must be verified before disbursement
- Total disbursement amount in Canadian dollars
- Date of redemption or disbursement
- Type of disbursement (for example chip redemption, jackpot or front-money withdrawal)
- Gaming establishment name and location
- Payment method (cash, cheque, etc.)
Critical step: photo ID must be collected and verified before any disbursement of $10,000 or more. If identification was not verified at the cage, no accurate CDR can be filed afterwards.
CDR vs LCTR
| Report | Trigger | Applies To | Deadline |
|---|---|---|---|
| CDR | $10,000+ gaming instruments redeemed for cash | Casino disbursements | 15 days |
| LCTR | $10,000+ cash received from a client | Cash deposits to your business | 15 days |
How Quantoflow Handles CDRs
- Redemption tracking: every chip, token and voucher redemption in your data, across all cage windows and all shifts
- Aggregation by customer: redemptions are grouped by customer within each 24-hour period, and a CDR is raised at the $10,000 threshold
- 15-day tracking: each CDR is tracked from the redemption date, with reminders that grow more insistent
- ID linked to the filing: identification collected at the cage is tied to the CDR, so nobody matches them by hand
- Chrome Extension for FWR: where iGaming Ontario or another regulator requires FWR submission, the extension fills in every field in seconds
- Checks before filing: every required field is verified first: amounts, ID, documentation
- Direct submission: CDRs filed with FINTRAC, with the confirmation kept on record
CDR Best Practices for Gaming Establishments
- Collect and verify government photo ID before disbursement: this is a legal requirement, not optional guidance
- Track all redemptions in one system: at scale, cage-by-cage tracking makes aggregation impossible
- Train cage and floor staff: your front line must know the CDR triggers and the ID requirement before any large disbursement
- Know your regulator's FWR requirements: if iGaming Ontario or another regulator requires direct FWR filing, make sure your workflow supports it (Quantoflow's Chrome Extension does)
- File early: treat the 15-day deadline as a 10-day target, leaving time for review
- Maintain records for 5 years: FINTRAC examiners review historical CDR filing records during compliance audits
Enforcement and Penalties
When FINTRAC examines a gaming establishment, it often finds CDR failures: missed filings, late filings, wrong aggregation, missing identification. These draw heavy penalties and, for iGaming Ontario operators, may put the licence at risk.
Penalty ranges
| Violation | Class | Per violation (from Mar 26, 2026) | Before Mar 26, 2026 |
|---|---|---|---|
| Failing to submit a required CDRPCMLTFA s. 9(1); PCMLTFR s. 71 | Minor | $1 to $40,000 | $1 to $1,000 |
| Submitting a CDR after the deadlinePCMLTFR s. 132 | Minor | $1 to $40,000 | $1 to $1,000 |
- Each unreported or late transaction is a separate violation, so penalties add up across a review period.
- A single violation by an individual is capped at $4,000,000, so the $20,000,000 very serious maximum applies to entities. All violations on one notice together are capped at the greater of $20,000,000 or 3% of gross global revenue for an entity, and the greater of $4,000,000 or 3% of gross global income for an individual (PCMLTFA s. 73.1).
- The higher ranges apply to violations on or after March 26, 2026, when Bill C-12 came into force. Earlier violations are assessed under the previous amounts (FINTRAC).
- Failing to report a prescribed transaction is also a criminal offence, punishable on summary conviction by a fine of up to $10,000,000 (PCMLTFA s. 77(1)).
Penalty risk: Each missed or late CDR is a separate minor violation, with a penalty of up to $40,000 per report for violations on or after March 26, 2026 (up to $1,000 before then). Regulatory bodies like iGaming Ontario may also impose license suspensions or additional compliance obligations on establishments with repeated CDR failures.
Frequently Asked Questions
Do winnings, tickets and front-money withdrawals count toward the CDR threshold?
Yes. Every type of disbursement counts: chip and slot-ticket redemptions, payouts on a bet including jackpots, front-money and safekeeping withdrawals, credit advances, cheque cashing and travel or entertainment reimbursements. All disbursements to the same client within a 24-hour period must be aggregated.
What if a customer's ID is expired?
You cannot accept a large chip redemption without valid government photo ID. An expired ID is not acceptable for compliance purposes; you have a legal obligation to verify ID before disbursement.
Do I need to file a CDR if the customer requests a cheque instead of cash?
Yes. CDRs apply to any disbursement of $10,000 or more, regardless of whether you pay it in cash, by cheque or by transfer.
What if a customer spreads redemptions across multiple gaming sessions?
If all redemptions occur within a 24-hour period, they must be aggregated and reported on a single CDR. Session breaks don't reset the aggregation clock; the clock runs from the first redemption within the 24-hour window.
Can I file CDRs on behalf of my gaming establishment?
If you manage gaming compliance, you can file CDRs. However, the responsibility and audit trail remain with the gaming establishment as the regulated entity. Ensure your filing system maintains clear records of who filed, when, and with what authorization.
Primary sources
- PCMLTFA s. 9: Prescribed transaction reporting obligation
- PCMLTFR s. 71: Casino disbursement reporting
- PCMLTFR s. 132: Reporting deadlines (5 working days / 15 days)
- FINTRAC: Reporting casino disbursement reports to FINTRAC
- FINTRAC: Reporting transactions to FINTRAC: The 24-hour rule
- FINTRAC: ML/TF indicators: Casinos
- PCMLTFA s. 77: Offence: failure to report prescribed transactions
- PCMLTFA s. 73.1: Maximum administrative monetary penalties
- AMP Regulations s. 5: Penalty ranges by classification
- AMP Regulations Schedule: Classification of each violation
- FINTRAC: Administrative monetary penalties policy
- FINTRAC: AMPs: Changes following legislative amendments (March 26, 2026)
Statutory references checked against the Justice Laws consolidation current to September 21, 2026. This guide is general information, not legal advice.