Interac, security for Canada’s debit network.
Organizations that connect to Interac Debit or Interac e-Transfer must meet Interac’s participation, security and attestation requirements. Most of those rules are private, so this page sticks to what is publicly documented.
Interac in brief.
- Type
- Network participation rules, enforced by contract
- Operator
- Interac Corp.
- Oversight
- Bank of Canada (Prominent Payment System)
- Applies to
- Issuers, acquirers, direct and indirect connectors, connection service providers
- Public detail
- Limited: Operating Regulations are not public
- Related
- Retail Payment Activities Act for payment service providers
What, why and who.
What it is
Interac sets requirements through its by-laws, Operating Regulations and participation agreements. They cover certification and testing of connections and devices, safety and security, transaction limits, trademarks and disaster recovery. Participants attest to their risk management, and Interac e-Transfer participants complete an annual compliance program verified by an independent audit.
Why it exists
Interac Debit and e-Transfer carry a large share of Canadian payments. The Bank of Canada designates both as Prominent Payment Systems, so their operational and security risks are managed as matters of national importance.
Who it applies to
Financial institutions that issue debit cards, acquirers that serve merchants, and organizations that connect directly or through a connection service provider. Processors usually fall under the rules through their sponsoring participant. Point-of-sale terminals and ABMs must use device models certified to Interac security standards.
Authority and enforcement
Interac Corp. sets and enforces the rules and can sanction, suspend or terminate access. The Bank of Canada oversees Interac against its risk-management standards for Prominent Payment Systems.
How it got here.
- 1984
The Interac Association is founded by Canadian financial institutions.
- 2018
The association and Interac Inc. merge into Interac Corp.
- 2020-08-10
Interac e-Transfer is designated a Prominent Payment System.
- 2022
The e-Transfer annual compliance program begins rolling out.
- 2023-10-16
The Interac debit network is designated a Prominent Payment System.
- 2025-09-08
Retail Payment Activities Act risk-management and safeguarding requirements take effect for registered payment service providers.
What it changes.
Systems and tools
- Certified connections and certified terminal models
- Fraud and transaction monitoring
- Disaster recovery and business continuity
Processes
- Periodic attestations and independent audits
- Oversight of indirect connectors and third parties
- Testing and certification before going live
Governance
- Operational risk management framework
- Trademark and acceptance rules
- Alignment with PCI DSS for card data
If you do not comply
- Sanctions under Interac’s pre-defined steps, usually after a chance to remediate
- Suspension or termination of network access
- Termination of trademark licences
- Loss of the ability to offer Interac payments
Changes ahead.
Announced and upcoming changes
- None announcedNo public change to participant security requirements was announced as of 2026-10-03.
Status checked 2026-10-03. Dates can move; confirm with the official sources below.