Mortgage Documents

Identity and Compliance Documents

A borrower-focused guide to identity and mortgage-compliance evidence in Canada: FINTRAC verification methods, remote ID, Ontario health-card limits, client information, corporations and beneficial ownership, signing authority, third-party determinations and source-of-funds questions.

Published August 14, 2026 Fact-checked August 14, 2026 Ontario, Canada

Mortgage documents

Identity verification proves the person or entity behind the mortgage—not merely the name typed on an application

Mortgage identity checks go beyond photocopying identification. Depending on the transaction, the mortgage firm may need to verify a person or entity, confirm who owns or controls a corporation, record required client information and determine whether someone else is directing the transaction.

Why your mortgage application can include identity and compliance questions

Since October 11, 2024, mortgage administrators, brokers and lenders covered by Canada’s anti-money-laundering rules have had specific FINTRAC obligations. Those rules can require identity verification and related records in connection with mortgage transactions.

For you as a borrower, this means some questions that feel separate from credit approval—such as occupation, business information, beneficial owners or whether another person is directing the transaction—can be required for legal/compliance reasons as well as mortgage qualification.

There is more than one permitted way to verify identity

FINTRAC currently recognizes several methods for verifying a person, including government-issued photo identification, a Canadian credit file, the dual-process method and certain permitted forms of prior or third-party verification. The mortgage firm chooses a method it is permitted to use and must satisfy that method’s requirements.

A request for “two pieces of ID, one with a photo” may therefore reflect a particular firm’s verification process, but it is not the only identity-verification method permitted under Canada’s federal rules.

FINTRAC identity methods at a high level
MethodWhat the firm relies onBorrower implication
Government-issued photo IDAuthentic, valid, current qualifying government photo documentOne compliant document can be the verification method if all criteria are met.
Credit fileCurrent Canadian credit-file information meeting the required history/source criteriaThe borrower does not provide their own saved credit report for this method.
Dual-processTwo categories of information from two different reliable sourcesUseful where photo-ID verification is not the chosen method.
Prior verification through an affiliate/memberPrior verification by a qualifying affiliate/member under the rulesDepends on the relationship and retained verification information.
Verification through another permitted partyVerification performed through another permitted party or arrangementThe mortgage firm still has conditions it must satisfy before relying on that verification.

Government photo ID must be authentic, valid and current

Under FINTRAC’s photo-ID method, the document must be issued by a federal, provincial or territorial government—or qualifying foreign equivalent—show the person’s name and photo, include a unique identifying number and match the person. It must also be authentic, valid and current.

Remote verification can use technology and a process that authenticates the document and matches the person. Merely holding an ID up during a video call is not, by itself, enough to satisfy FINTRAC’s remote photo-ID method.

Ontario health cards are a special privacy case

Ontario privacy guidance says organizations outside provincially funded health care generally cannot require a person to produce a health card for identification. A person may voluntarily show it in some situations, but organizations outside health care are not permitted to record the health number for identification purposes.

For mortgage preparation, a passport, driver’s licence, permanent resident card or another accepted verification route is therefore usually cleaner than treating an Ontario health card as an ordinary ID document.

Identity checks can require information beyond the ID document itself

FINTRAC mortgage-sector recordkeeping can require name, address, date of birth and occupation for a person, or name, address and nature of business for an entity. Mortgage loan records for lenders also include financial capacity and loan terms.

That is why a borrower may be asked to describe an occupation more precisely than “manager” or identify a workplace/business even when a photo ID has already been verified.

Corporations and other entities need existence, authority and ownership evidence

When a corporation, partnership or trust is involved, documents can include articles, corporate records, partnership/trust documents, registry information or other records showing that the entity exists and who can bind it. The exact set depends on the entity and verification method.

FINTRAC beneficial-ownership rules require mortgage firms subject to those rules to obtain and take reasonable measures to confirm information about the individuals who ultimately own or control qualifying interests. For a corporation, the guidance includes directors and individuals who directly or indirectly own or control at least 25% of the shares, together with the ownership/control structure.

The person signing is not always the person directing the transaction

FINTRAC requires reasonable measures for certain records to determine whether a client is acting on behalf of a third party. A third party is generally the person or entity instructing another person or entity to conduct the activity on its behalf.

This is different from an ordinary co-borrower or a lawyer acting in their professional role. The question is who is actually directing or benefiting from the transaction in the sense relevant to the rule.

Why some mortgage applications require more compliance information than others

Questions about source of funds, source of wealth, politically exposed person (PEP) status or sanctions can arise from legal requirements and the firm’s risk assessment. Being asked these questions should not be taken to mean that you are suspected of wrongdoing.

The evidence required is fact-specific. A complex foreign transfer, entity structure or high-risk transaction can generate more verification than an ordinary domestic salary purchase.

Identity verification and permission to use financial information are separate issues

A mortgage application can also involve privacy consent, credit-bureau authorization, electronic signatures and declarations that allow the brokerage/lender to collect, verify and use information for the transaction. Those documents are not substitutes for identity verification; they address authority and consent to process the application.

Read the actual consent and disclosure forms you sign. Do not assume that one generic signature authorizes every unrelated use of your information.

Small identity inconsistencies can create large delays

A maiden/married name, shortened first name, transliteration difference, recently changed address or corporate trade name can cause documents to appear inconsistent. The solution is to document the relationship between the names or records rather than altering documents to make them look identical.

Name and ownership consistency is especially important where the same borrower appears on identification, bank accounts, tax records, title and corporate documents.

If you remember only three things

Identity verification is more than copying ID. If a corporation or other entity is involved, ownership and authority may also need to be verified. Compliance questions can arise even when your income and credit are otherwise strong.

Sources and current-rule checks

Sources and verification

FINTRAC’s current mortgage-sector guidance governs identity, recordkeeping, beneficial ownership and third-party determinations for covered mortgage administrators, brokers and lenders. Ontario health-card privacy rules are separately identified because they limit how health numbers can be demanded or recorded.