BCFSA compliance for mortgage brokers now means meeting the Mortgage Services Act (MSA), which came into force on October 13, 2026 and replaced the old Mortgage Brokers Act. In practice, your brokerage needs documented policies that are reviewed regularly, records kept for seven years, verified client identity, unmodified prescribed disclosure forms, and active supervision by the principal broker. Federal FINTRAC duties run alongside all of it.
This guide walks through what BCFSA expects, where brokerages tend to slip, and how to build a file process that holds up when an inspector asks to see it.
TL;DR
- The MSA is in force as of October 13, 2026, and BCFSA expects living, documented compliance policies, not a binder written once and shelved.
- Most mortgage records must be kept for a minimum of seven years. FINTRAC-specific records have a five-year minimum, and where the two overlap, the stricter period applies.
- BCFSA's prescribed disclosure forms cannot be modified or customized, even inside software.
- Principal brokers must supervise related brokers and unlicensed staff, and review the compliance program at least annually.
- A single, searchable file for each deal makes all of this far easier to prove.
Table of Contents
- What changed on October 13, 2026
- The five areas BCFSA will look at
- Record keeping: seven years, five years, and where files live
- A practical audit-readiness routine
- Where brokerages most often slip
- Why we built Autowrite around this workload
- Our perspective
- FAQ
- Sources
What changed on October 13, 2026
The MSA received Royal Assent on November 3, 2022, and the provincial government approved the accompanying Rules and Regulation in July 2025. Together, the Act, the Regulation and the Rules form the framework BCFSA now supervises against. They replace the Mortgage Brokers Act, which BCFSA described as outdated.
For a working broker, three practical consequences follow:
- Your old policies need a fresh read. A manual built around the previous Act is unlikely to map neatly onto the new duties.
- BCFSA publishes guidance in layers. Its knowledge base includes regulatory statements, guidelines and information pages, and each says something different about how licensees must comply. Read the page for the duty you are working on, not only the Act.
- Licence category matters. BCFSA has a page on licensee duties by licence category, so a mortgage broker, a principal broker and a brokerage each carry different obligations.
BCFSA's own risk reporting names adoption of the MSA regulatory framework as the top risk most relevant to mortgage services. That is a useful signal about where attention will go.
The five areas BCFSA will look at
BCFSA's licensee duties guidance is the best single page to read first. Here is how its main themes translate into daily work.
1. A compliance program that is alive
BCFSA's guidance treats compliance as a documented, ongoing process rather than a static document. The program should cover verifying identity, determining whether a mortgage is suitable, identifying and disclosing material risks, and managing conflicts of interest.
Two timing rules matter:
- Policies and procedures must be reviewed and updated at least annually.
- A significant compliance breach triggers an immediate review.
The review itself must be documented. When an inspector asks whether your policies are current, the answer is a dated record of who reviewed what and what changed, not a verbal yes.
2. Supervision by the principal broker
Principal brokers must actively supervise all related mortgage brokers and unlicensed employees, and make sure the brokerage operates in line with the MSA. Supervision is hard to prove after the fact unless it leaves a trail. Useful evidence includes:
- File reviews with a date, a reviewer and a result.
- A log of exceptions and how each was corrected.
- Training records for assistants and administrators who touch client documents.
- A clear record of who may see and edit which files.
If you run a team with unlicensed assistants, this is where the exposure sits. The assistant who collects documents is working under your supervision, and BCFSA expects you to be able to show it.
3. Identity verification and transaction integrity
BCFSA's guideline on identity verification and transaction integrity sets out obligations under the MSA, Regulation and Rules for verifying clients and other parties. The key point for brokers is concurrency. You must follow the provincial rules and the federal Proceeds of Crime (Money Laundering) and Terrorist Financing Act together. Relying on one regulator's guidance alone leaves gaps, especially on identity verification and suspicious transaction reporting.
For the federal side, FINTRAC explains that mortgage administrators, brokers and lenders must meet obligations under that Act and its regulations. If you want the identification methods in plain language, our guide to the five FINTRAC client ID methods covers them. For reporting, see our guide to suspicious transaction reports.
4. Disclosure using prescribed forms
Under the MSA, mortgage brokers and principal brokers have several key disclosure obligations. Many existed under the old Act, but the MSA strengthens them. BCFSA requires standardized, prescribed forms for specific disclosures. Those forms cannot be modified or customized, including when they are built into software, and using anything other than the exact published version is a compliance breach.
The practical rule: never re-key, restyle or "improve" a prescribed form. Download the current version from BCFSA, use it as published, and make sure whatever tool you use does not alter it. When BCFSA publishes a new version, retire the old one from your templates the same day.
5. Record keeping
This is where most inspections are won or lost, so it gets its own section below.
Record keeping: seven years, five years, and where files live
BCFSA's record keeping information requires brokerages to retain relevant records, including client agreements, communications and financial transaction documents, for a minimum of seven years after the last transaction or the record's creation date.
FINTRAC has its own clock. Its record keeping requirements for mortgage administrators, brokers and lenders include copies of every report sent to FINTRAC, such as suspicious transaction reports, and those are kept for at least five years. Where requirements overlap, the stricter period applies, so in most cases you will be working to the longer one.
| Record type | Source of the rule | Minimum retention |
|---|---|---|
| Client agreements, communications, financial transaction documents | BCFSA (MSA) | 7 years |
| FINTRAC reports and client information records | FINTRAC | 5 years |
| Overlapping records | Both | The stricter period |
We go deeper on how the two clocks interact in FINTRAC five-year and FSRA six-year retention on mortgage files. That article is written around Ontario, but the logic of working to the stricter period is the same.
Where records can be stored
BCFSA does not require a paper file room. Records do not need to sit in a physical head office, but they must be accessible from one. Electronic record keeping is allowed, provided records can be printed easily for audit or inspection when the Superintendent asks.
Home offices need care. Even when a broker works from a residence, all brokerage records must be provided to the brokerage itself, so the brokerage keeps central control. BCFSA also has a page on residential offices if any of your team works from home.
A folder on one broker's laptop does not meet that standard. A shared, access-controlled system the brokerage owns does.
When a brokerage winds down
Records do not vanish when a brokerage closes. The brokerage remains responsible for seven years of retention, either by transferring the records to another brokerage or by handing them to a professional such as an accountant, lawyer or notary public approved by the Superintendent. Failing to arrange this is itself a compliance failure. If you are planning a sale, a merger or retirement, put records succession on the checklist early.
A practical audit-readiness routine
Policies and retention periods are the easy part to read. Proving them is the hard part. This routine works for a solo broker and scales to a team.
Build one file per deal, the same way every time
Inconsistent files cause most audit stress. Decide a standard structure and apply it to every deal:
- Identity verification record, with the method used and the date.
- Signed client agreement and the prescribed disclosure forms, as published.
- Income and down payment documents, with source and date received.
- Suitability notes explaining why the product fits the client.
- Communications that affect the deal.
- Any FINTRAC report copies, kept for their own retention period.
Our FINTRAC checklist for a Canadian mortgage compliance package shows how to assemble this as a package rather than a pile.
Calendar the annual review
Put the policy review in the calendar as a recurring event, assign an owner, and save the output: the date, the attendees, the changes and the version number. Add an event-driven review for any significant breach. The documentation is what BCFSA looks for.
Test one file a month
Pick a closed file at random and ask whether a stranger could reconstruct the deal from it. Could they find the ID verification, the disclosure forms and the reasoning for suitability in under five minutes? If not, fix the process rather than the single file.
Keep personal information protected
Client files hold sensitive data, so privacy law sits beside licensing rules. Our PIPEDA checklists for Canadian mortgage brokers cover that angle, and our overview of digital compliance records explains how to keep electronic files audit-ready.
Where brokerages most often slip
These are patterns worth checking against your own practice. They follow directly from the BCFSA and FINTRAC requirements above, not from any survey.
- Policies last reviewed under the old Act. If your manual predates October 13, 2026 and has no documented review since, treat it as out of date.
- Customized disclosure forms. A template that looks nicer than the BCFSA version is still a breach.
- Records on personal devices. If files live only on a broker's laptop or phone, the brokerage does not have central control.
- One regulator's checklist only. A BCFSA-only process can miss FINTRAC reporting, and the reverse is also true.
- No succession plan for records. Seven years is long. Staff leave, brokerages merge and offices close inside that window.
- Supervision with no paper trail. Reviewing a junior's file and not recording it is, for audit purposes, the same as not reviewing it.
Why we built Autowrite around this workload
Most of the items above are paperwork problems, not knowledge problems. Brokers generally know the rules. The pain is applying them to every file, every time, while also serving clients.
Autowrite is an AI-powered operating system built for Canadian mortgage brokers. It handles document intake, classification and data extraction, auto-fills underwriting forms, syncs with mortgage software, and assembles e-sign and compliance packages. It also provides income and down payment analysis, supports team pipeline management, and keeps client data under Canadian data residency.
Plans start at $99 per month for Starter, with Pro at $199 per month and Legend at $399 per month. Enterprise is available without a published price, and each additional deal costs $20. Paid plans come with a 14-day free trial, so you can run a real file through it before committing. You can compare plans on our pricing page. Autowrite is for licensed brokers, agents and brokerage owners, not for borrowers organizing their own documents.
For more on how automation supports audits, see mortgage compliance automation for Canadian brokers.
Our perspective
We talk with brokers about compliance often, and one pattern keeps showing up: the rules are rarely the hard part. The hard part is that evidence is scattered across email, shared drives, phones and paper, so proving a compliant file takes longer than building it.
That is why we designed Autowrite around the file rather than the form. When every document is classified on arrival, extracted with line-level confidence, and placed in a consistent package, the audit trail forms as the deal moves. You are not reconstructing it at the end.
We also think brokers should be sceptical of any tool that promises compliance on its own. Software supports your program. It does not replace your principal broker's judgment, your annual review or your reading of BCFSA's guidance. The best use of automation is to remove retyping and chasing so that your attention goes to suitability, disclosure and your client.
Since the MSA is new, the brokerages that do well will be the ones that treat this as an operations upgrade, not a one-off project.
— Anant Bawa
FAQ
Does the MSA apply to me if I work in Ontario or Alberta?
No. The Mortgage Services Act is British Columbia legislation, supervised by BCFSA. Brokers in other provinces answer to their own regulators, such as FSRA in Ontario. FINTRAC obligations, however, apply federally across the country.
How long must I keep mortgage files in B.C.?
BCFSA requires a minimum of seven years for most mortgage-related records. FINTRAC-specific records have a five-year minimum, and the stricter period applies where they overlap. In most cases that means working to seven years.
Can I keep records electronically?
Yes. Electronic record keeping is allowed, but the records must be accessible from the brokerage's office and easy to print on demand for inspection by the Superintendent. If you work from home, the brokerage must still hold all records centrally.
Can I customize BCFSA disclosure forms inside my software?
No. Prescribed forms cannot be modified or customized, even when integrated into software. Use the exact version BCFSA publishes, and update it when a new one is released.
How often must I review my compliance policies?
At least once a year, and immediately after any significant compliance breach. Document each review, because that record is what inspectors ask to see.
Sources
- Mortgage Services Act: Rules & Regulation, BCFSA
- Information on Mortgage Services Licensee Duties, BCFSA
- Information on licensee duties by licence category, BCFSA
- Guideline on identity verification and transaction integrity, BCFSA
- Understanding disclosure requirements under the Mortgage Services Act, BCFSA
- Information on Record Keeping, BCFSA
- Information on residential offices, BCFSA
- Mortgage administrators, brokers and lenders, FINTRAC
- Record keeping requirements for mortgage administrators, brokers and lenders, FINTRAC