End-user funds under the RPAA
If a Canadian payment service provider holds a balance for you, the Retail Payment Activities Act governs how. It requires funds to be held separately and protected — it does not make the provider a bank and it does not bring deposit insurance. This page sets out what the regime does, what it does not, and the questions worth asking before you leave money anywhere.
If a Canadian payment service provider holds a balance for you, the Retail Payment Activities Act governs how it must do so. This is the part of the regime that decides what happens to your money on the worst day, so it is worth understanding precisely rather than approximately.
What the regime requires
Where a PSP holds end-user funds, the RPAA requires those funds to be kept apart from the provider’s own operating money and protected. In practice that generally means:
- held in an account at a regulated financial institution, maintained for that purpose, or under an equivalent protective arrangement;
- records that identify whose money is whose, so a balance can be attributed to an end user rather than sitting in an undifferentiated pool;
- arrangements intended to make those funds reachable by end users if the provider fails, rather than falling into the pot available to its general creditors;
- not used by the provider for its own purposes.
That is the shape of it. What follows is what it is not, because that is where the expensive misunderstandings live.
It is not deposit insurance
The single most important sentence on this page: segregation is not insurance.
A registered PSP is not a bank. CDIC deposit insurance does not apply to funds held with one. The RPAA protects your money by keeping it separate and identifiable, not by guaranteeing it.
Those are genuinely different protections. Segregation is designed so that your money is yours and can be identified as yours. Insurance is a promise that you are made whole regardless. The RPAA offers the first and not the second.
This matters because the language around it is easy to blur, and blurring it is reassuring. A provider that describes a payments registration in banking terms, or lets “protected” drift into “guaranteed”, has told you something about how it will describe everything else. Ours is a registration; we are not a bank; there is no deposit insurance.
A word about the word “safeguarding”
Canada’s regime is about safeguarding end-user funds, and that is the RPAA’s own terminology. We use it here because it is the correct Canadian term.
Read across jurisdictions with care, though. In the United Kingdom, “safeguarding” is a defined term under that jurisdiction’s payments regime, carrying specific meaning about specific permissions. We deliberately avoid it in UK-facing marketing copy, where it could imply a status we do not hold — our UK-facing pages say client funds are held in segregated accounts rather than “safeguarded”.
Same word, different legal weight, two regimes. If you are comparing a Canadian PSP against a UK one, do not assume the word means the same thing in both places, and do not assume a provider using it in the UK sense actually holds what that implies.
Crypto balances are usually outside all of this
The gap most often missed: fund-protection regimes are written for fiat.
Digital-asset balances generally sit outside them, governed instead by custody arrangements and network risk — irreversibility, key management, chain-level failure. The fiat treatment does not carry across simply because both balances appear on the same screen.
So read the digital-asset section of any provider’s terms specifically, including ours. If a provider’s marketing implies one protective framework across both, that is worth pressing on before you hold a material balance rather than after.
Questions worth asking, in writing
- Where exactly are end-user funds held — which type of institution, in whose name?
- How are they separated from your operating funds, and how would that be demonstrated?
- How is my balance attributed to me in your records?
- What happens on insolvency — what is the intended path for end-user funds?
- Does any of that apply to digital-asset balances? Usually not; get it stated.
- What is your registration status, and with whom — Bank of Canada, FINTRAC, or both?
A provider that answers these crisply is demonstrating something a marketing page cannot. A provider that cannot describe its own arrangement is answering the question anyway.
How KwiikPay holds client funds
Fiat balances received from customers are held in dedicated accounts at regulated financial institutions, separate from KwiikPay’s own corporate funds, and are used only to execute customer instructions.
Digital-asset balances are not held under that same framework. The custodial and network risks are set out in our Terms of Business, and that section is worth reading before you hold a material balance rather than after.
KwiikPay is a trading name of KWP Finance Limited, registered with the Bank of Canada as a payment service provider under the RPAA and with FINTRAC as a money services business including dealing in virtual currency. Both are registrations. Neither makes KwiikPay a bank, and neither brings deposit insurance.
If you want to establish whether we can serve your business before going further, the eligibility check takes four questions, or talk to us.
FAQs
Are my funds insured with a Canadian PSP?
No. The RPAA requires end-user funds to be held separately from the provider's own money and protected, but that is segregation, not insurance. A registered PSP is not a bank and CDIC deposit insurance does not apply. Any provider that lets you believe otherwise is overstating its status.
What does the RPAA actually require?
That end-user funds are held apart from the provider's operating money — typically in an account at a regulated financial institution held for that purpose, or under equivalent protection — with records that identify whose money is whose, and arrangements intended to make those funds reachable by end users rather than by the provider's general creditors if it fails.
Is 'safeguarding' the right word?
In Canada, yes — the RPAA regime is about safeguarding end-user funds and that is its own terminology. Be careful reading across jurisdictions, though: in the UK 'safeguarding' is a defined term under that jurisdiction's payments regime, carrying specific meaning about specific permissions, so we deliberately avoid it in UK-facing marketing copy where it could imply a status we do not hold. Same word, different legal weight.
What happens to my balance if the provider fails?
That depends on how the funds were actually held, which is why the question is worth asking before rather than after. Properly segregated end-user funds are intended to be identifiable and returnable to end users rather than forming part of the estate available to general creditors. Ask for the specifics in writing; a provider that cannot describe its own arrangement clearly is the answer to the question.
Does this cover crypto balances too?
Generally no, and this is the gap most often missed. Fund-protection regimes are written for fiat. Digital-asset balances usually sit outside them, under custody and network risk instead. Read that section of any provider's terms specifically rather than assuming the fiat treatment carries across — including ours.
How does KwiikPay hold client fiat?
Fiat balances are held in dedicated accounts at regulated financial institutions, separate from KwiikPay's own corporate funds, and used only to execute your instructions. Digital-asset balances are not held under that same framework — the custodial and network risks are set out in our Terms of Business, and that section is worth reading before you hold a material balance.
