RPAA Trust Account Pitfalls: 7 Mistakes That Invalidate Your Method 1 Arrangement
Published March 14, 2026 · Anike Li, CPA, CGA, CAMS | AL Accounting Inc.
Opening a trust account at your bank and calling it a “safeguarding account” feels like the straightforward path to RPAA Method 1 compliance. Your bank confirms the account is in trust. Your team sets up a sweep. You move on to the next item on the registration checklist.
Then the Bank of Canada (BoC) sends you a periodic assessment request.
The BoC has been supervising registered payment service providers (PSPs) since September 8, 2025. Assessments are active. And what supervisors look for isn’t whether the account label says “trust” — it’s whether the arrangement actually constitutes a valid express trust under Canadian law, maintained correctly every single day.
Here’s the operational reality: most PSPs that chose Method 1 have at least one of the seven gaps described in this article. Some of these gaps can invalidate the trust arrangement entirely — eliminating the insolvency protection you thought you had for end-users, and exposing your firm to administrative monetary penalties of up to $10 million for very serious violations.
Anike Li, CPA, CGA, CAMS reviews RPAA safeguarding frameworks for PSPs and MSBs across Canada. This article covers the seven most common pitfalls — and what your team needs to do to fix them before your assessment arrives.
Note: This article is informational and does not constitute legal advice. RPAA trust arrangements require qualified legal counsel.
What Makes a Method 1 Trust Valid Under the RPAA?
“Method 1” means holding end-user funds in a safeguarding account at a federally or provincially regulated financial institution (FRFI), in trust for end-users, pursuant to subsection 20(1) of the Retail Payment Activities Act (RPAA).
But a valid trust requires more than an account designation. Under Canadian common law, a valid express trust requires three certainties: certainty of intention (a clear intent to hold funds on trust), certainty of subject matter (identifiable trust property), and certainty of objects (identifiable beneficiaries — here, your end-users). In Quebec, the Civil Code governs trust validity instead.
The BoC’s Safeguarding Guideline confirms that PSPs must be able to demonstrate these elements are in place. Every one of the seven pitfalls below attacks at least one of these pillars — or an additional RPAA-specific requirement that sits on top of the common law test.
The 7 RPAA Trust Account Pitfalls
Pitfall #1 — Using the Trust Account for Settlement
Section 20(1)(a) of the RPAA states that the safeguarding account must not be used “for any other purpose.” The BoC’s FAQ is direct: as best practice, a PSP should settle its obligations to payment networks or financial institutions from a separate account. Routing Visa, Mastercard, or Interac settlement flows through your trust account puts that “no other purpose” requirement at risk — and can constitute commingling.
Pitfall #2 — Commingling Corporate Funds (Even Temporarily)
Commingling — mixing corporate funds with end-user trust funds, even for a single business day — can break the express trust. The RPAA requires PSPs to segregate end-user funds from all other funds at all times. The BoC’s guideline specifies that funds must be placed in the safeguarding account upon receipt or no later than the end of the next business day. Any gap beyond that window must be documented as a shortfall. Running payroll, paying suppliers, or maintaining a float inside the safeguarding account all violate this requirement.
Pitfall #3 — No Written Legal Opinion on Trust Validity
The BoC now expects a formal written legal opinion — not informal legal advice, not a general counsel memo, and not a verbal sign-off from your banker — during periodic assessments. The opinion must cover: (a) how the arrangement complies with Canadian common law or the Civil Code of Québec; (b) any risks or challenges identified; and (c) how those risks were or will be addressed. This expectation was confirmed following the commencement of BoC supervision in September 2025. Firms that obtained only general legal advice when opening the account, rather than a specific trust validity opinion, are exposed.
Pitfall #4 — No Written No-Set-Off Acknowledgment from the Bank
This is the most commonly overlooked requirement — and one of the most operationally dangerous gaps.
RPAA s. 20(3) already creates a statutory prohibition on the bank asserting set-off against funds held in an RPAA trust account. However, the BoC’s Safeguarding Guideline specifies that PSPs should also obtain a written acknowledgment from the account provider (your bank or FRFI) confirming the bank’s awareness of and compliance with this statutory obligation. This written acknowledgment serves as belt-and-suspenders protection — it provides documentary evidence for BoC assessment purposes and ensures the bank’s operational teams are aware of the restriction. Without it, the statutory protection still exists, but demonstrating compliance during a BoC periodic assessment becomes significantly harder.
Pitfall #5 — Failing Daily Ongoing Reconciliation
The RPAA doesn’t just require that you have funds in trust — it requires that you know at any point in time whether the trust is fully funded. That means tracking three separate figures continuously: (1) total end-user funds currently held, (2) total that must be in the safeguarding account, and (3) total actually in the safeguarding account. A discrepancy between figures (2) and (3) is a shortfall.
Shortfalls must be detected “as soon as feasible” — language that the BoC interprets as requiring automated, near-real-time monitoring, not monthly reconciliation. All shortfalls must be remediated immediately and disclosed in your annual report of the RPAR. Failing to maintain a reconciliation process is itself a compliance failure.
Pitfall #6 — Omitting the End-User Ledger (or Keeping It Incomplete)
A trust account balance is not a ledger. The RPAA requires PSPs to maintain a per-end-user ledger — a record that identifies exactly how much of the trust belongs to each individual end-user, not just an aggregate total. Per the BoC’s February 2025 “At a Glance” document and Guideline, the ledger must record: each end-user’s name and contact information; the amount held per end-user; whether funds are in the safeguarding account or in transit; and a clear trust designation where applicable.
This ledger is the backbone of any insolvency proceeding. Without it, a bankruptcy trustee cannot identify who gets what from the trust pool. Aggregate-only records do not satisfy the requirement.
Pitfall #7 — Retaining Interest Without a Proper Legal Structure
PSPs may retain interest earned on trust funds — but only if doing so doesn’t compromise the trust’s legal validity. Under traditional trust law, a trustee retaining trust income for their own benefit can compromise the arrangement. The BoC explicitly flagged trust tax complications arising from interest-retaining trust accounts in September 2025, and Finance Canada announced relief measures in December 2025. However, the tax treatment remains in flux and has not been fully resolved legislatively.
Retaining interest without a legal opinion specifically addressing trust validity, and without monitoring the evolving CRA/Finance Canada guidance, is a live compliance gap.
What Happens If the Bank of Canada Finds These Gaps?
The BoC’s supervision model is risk-based, which means PSPs with identified compliance gaps face more frequent and more intensive assessments — not less. During a periodic assessment, the BoC will specifically request your written legal opinion, your Safeguarding Framework documentation, your reconciliation records, your end-user ledger, and evidence of your no-set-off acknowledgment.
When gaps are identified, the BoC issues a corrective action requirement and verifies remediation. Persistent non-compliance can lead to a Notice of Violation and administrative monetary penalties — up to $10 million for very serious violations under the RPAA. The ultimate enforcement consequence is registration revocation: the PSP can no longer perform retail payment activities in Canada.
Getting ahead of these gaps now does two things: it eliminates your enforcement risk, and it shortens your assessment cycle as the BoC gains confidence in your compliance program.
How AL Accounting Can Help
AL Accounting works with PSPs, MSBs, and fintech compliance teams on RPAA safeguarding frameworks — including end-user fund ledger design, daily reconciliation process documentation, Safeguarding Framework drafting, and coordination with legal counsel on trust structure opinions.
We bridge the gap between your banking relationship and your BoC compliance program. If you’re not sure whether your current Method 1 arrangement would survive an assessment, now is the time to find out.
Book a 30-Minute RPAA Compliance Review
Frequently Asked Questions
Does opening a “trust account” at my bank automatically satisfy RPAA Method 1?
No. The account label alone doesn’t create RPAA compliance. The arrangement must meet specific requirements: exclusive use for safeguarding end-user funds, complete segregation from all other funds, a valid express trust established under Canadian common law (or the Civil Code of Québec), and a written no-set-off acknowledgment from your bank. All of these elements must be maintained on an ongoing basis — not just at account opening.
Q: Do I need a lawyer to set up a Method 1 trust account?
The Bank of Canada strongly expects all PSPs — not just those with complex arrangements — to obtain a formal written legal opinion confirming trust validity. During periodic assessments, the BoC will specifically request this opinion. A general legal memo or verbal advice from counsel is unlikely to satisfy the requirement. Engage qualified payments or trust law counsel and get the opinion in writing.
How often do I need to reconcile my trust account?
The BoC expects daily reconciliation as best practice, with automated monitoring in place. You must be able to detect shortfalls “as soon as feasible” — language that implies near-real-time tracking, not quarterly or monthly reconciliation. If your current process only catches shortfalls at month-end, that’s a gap.
Can my PSP keep the interest earned on the trust account?
Potentially yes — but only if retaining interest does not compromise the legal validity of the trust arrangement. You need a legal opinion specifically addressing this point. The tax treatment of RPAA trust interest is also still evolving; Finance Canada issued guidance in late 2025 but the full legislative fix has not been confirmed. Monitor CRA and Finance Canada announcements.
What is a “shortfall” under RPAA and how serious is it?
A shortfall occurs when the funds actually held in your safeguarding account are less than the total end-user funds you’re required to safeguard at that moment. You must detect shortfalls as soon as feasible, remediate immediately, and disclose all instances — including the cause and remediation timeline — in your annual report to the Bank of Canada. Repeated or undisclosed shortfalls are a serious compliance concern.
What does a “no-set-off acknowledgment” mean and why does my bank need to provide one?
It’s a written confirmation from your FRFI waiving its right to apply (set off) any amount the PSP owes the bank against the funds held in your trust account. Without it, your bank could theoretically claim trust funds to cover PSP debts — in an insolvency, this would directly harm the end-users those funds are supposed to protect. Many banks will open a trust account without proactively offering this letter. You must request it explicitly, in writing.
Does CDIC insurance satisfy RPAA safeguarding requirements?
No — these are two entirely separate protections. CDIC deposit insurance protects depositors if the bank becomes insolvent (up to $100,000 per category). RPAA safeguarding is specifically designed to protect end-users if the PSP becomes insolvent. The trust structure means end-user funds sit outside the PSP’s estate in an insolvency — CDIC insurance has no bearing on this analysis. Both can apply simultaneously, but CDIC does not substitute for RPAA Method 1 compliance.
References
1. Bank of Canada, Supervisory Policy on Safeguarding of End-User Funds (Final Guideline, December 2024). https://www.bankofcanada.ca/wp-content/uploads/2024/02/safeguarding-end-user-funds.pdf 2. Bank of Canada, Frequently Asked Questions — Retail Payments Supervision (Updated 2025). https://www.bankofcanada.ca/core-functions/retail-payments-supervision/information-for-payment-service-providers/frequently-asked-questions-about-retail-payments-supervision/ 3. Bank of Canada, Safeguarding of End-User Funds: At a Glance (February 2025). https://www.bankofcanada.ca/wp-content/uploads/2025/02/Safeguarding-of-end-user-funds-At-a-glance.pdf 4. Bank of Canada, Record-Keeping Guidance for Payment Service Providers (April 2024). https://www.bankofcanada.ca/2024/04/record-keeping/ 5. Fasken Martineau DuMoulin LLP, Payment Service Providers: Preparing to Comply with Safeguarding of Fund Requirements (March 2025). https://www.fasken.com/en/knowledge/2025/03/payment-service-providers-preparing-to-comply-with-safeguarding-of-fund-requirements 6. McMillan LLP, Safeguarding End-User Funds Under the Retail Payment Activities Act (November 2025). https://www.mondaq.com/canada/financial-services/1705144/safeguarding-end-user-funds-under-the-retail-payment-activities-act 7. McCarthy Tétrault LLP, Bank of Canada’s Final RPAA Guideline: Safeguarding Funds (December 2024). https://www.mccarthy.ca/en/insights/blogs/techlex/bank-canadas-final-rpaa-guideline-safeguarding-funds 8. Retail Payment Activities Act, S.C. 2021, c. 23, ss. 20(1), 20(3). 9. Retail Payment Activities Regulations, SOR/2023-235, ss. 15(2), 16, 19(3)(c).This article is for informational purposes only and does not constitute legal or professional advice. RPAA safeguarding arrangements require qualified legal counsel. Regulatory details change; confirm current requirements against Bank of Canada primary sources before relying on this content.
© 2026 AL Accounting Inc. All rights reserved.
Is Your RPAA Trust Account Assessment-Ready?
Book a compliance review with a CPA who specializes in RPAA safeguarding frameworks for PSPs and MSBs.
Book a Free Consultation