CARM Registration for First-Time Importers in Canada

Executive Summary

A first-time commercial importer in Canada needs to establish the importer’s own identity and portal authority before a shipment is planned. The practical chain is a nine-digit business number (BN9), an individual CARM Client Portal profile, business registration by the person who will become the business account manager (BAM), and an RM import-export program account. Most new resident businesses can obtain a BN9 within the portal, while non-resident businesses and specified entity types must obtain it from the Canada Revenue Agency (CRA) first. Since October 21, 2024, new importers with a BN9 have been able to open their RM account through CARM. ^{[1] [2] [3]}

A customs broker can handle delegated customs work, but the importer must register its own business and approve the relationship in CARM. A pre-existing brokerage agreement does not itself replace portal delegation. The first registrant becomes the BAM, and a second BAM is a sensible access backup. A broker’s ability to submit a Commercial Accounting Declaration (CAD) depends on the importer’s portal authority grant. This division of roles is the most important correction for a founder who assumes that hiring a broker completes the setup. ^{[4] [5] [6] [7] [8]}

Release Prior to Payment (RPP) is a separate decision. It allows release before final accounting and payment, but requires importer enrolment and the importer’s own financial security. CBSA’s current guidance describes a written security agreement covering at least 50% of its calculated requirement, with a $5,000 minimum per BN15 importer account, or a deposit covering 100% of the relevant highest monthly accounts receivable. A new importer without transaction history must not treat a displayed $0 requirement as a general waiver when it expects transactions; CBSA calls for self-assessment. ^{[9] [10] [11] [12]}

The checklist below separates federal identifiers, portal roles, broker access and RPP from adjacent tasks such as Québec registration and product-specific import controls. It is verified on September 28, 2026 against CBSA’s current pages. The pre-shipment audit asks for the exact legal name, BN9, RM account, backup administrator, approved broker scope and a recorded RPP decision. CBSA reported that more than 213,000 businesses used CARM and more than 41 million CADs were processed in 2025, but those system totals are context, not a measure of readiness for any particular shipment. ^{[13] [14]}

Introduction and Background

CARM, the CBSA Assessment and Revenue Management system, is the Canada Border Services Agency’s system of record for accounting and payment on imported commercial goods. A small Québec retailer ordering its first wholesale inventory, an online merchant importing packaging, and a product startup bringing in components all encounter the same question: which business identity is on the import record, and who can act for it in the portal? The distinction matters before goods move because account creation, permission approval and any financial security take separate actions. CBSA advises opening the RM account well before the import deadline. ^[15]

This report addresses the founder who will be the importer of record for a commercial shipment. Frequency alone does not remove the issue: the Canadian Federation of Independent Business (CFIB) notes that a business importing commercial goods even once a year should register. Personal imports are outside this guide’s commercial scope. A founder should also distinguish the legal entity that imports from the person who signs in and from the service provider that files documents. International customs guidance recognizes that a trader can deal with customs directly or appoint a third party, while the broker remains a separate operational actor. ^{[16] [17] [7] [18] [8]}

A Montréal business may have a Québec enterprise number (NEQ), a street address and a federal BN9. The Québec registrar assigns the NEQ during provincial registration, while CARM uses the federal BN9 and its program account. A business address can serve ordinary correspondence and records, but it is not itself an importer number or portal authority. For example, 2727 Coworking describes a Montréal street-address and mailbox service; the federal account sequence in this article remains a separate process. ^{[19] [20]}

The document is operational guidance, not a tariff classification, valuation or commodity-permit assessment. Product controls can change the shipment plan independently of CARM. The Canadian Food Inspection Agency (CFIA), for example, identifies licensing and traceability requirements for commercial food importers, while Global Affairs Canada publishes an Import Control List for controlled products. These checks should be assigned to the relevant product specialist before the purchase is final. ^{[21] [22] [21] [22] [23] [24] [23] [24] [21]}

CARM Scope and Identifier Map

Decide whether the business is the importer

The first decision is whose name will appear as the importer on commercial customs records. The seller’s shipping promise, the carrier’s service and the broker’s filing role should not be confused with that identity. The International Chamber of Commerce’s Delivered Duty Paid rule allocates import clearance to the seller under that term, illustrating why contract terms should be checked, but an Incoterms label by itself does not create or transfer a Canadian portal account. A founder should confirm the named importer with the supplier and broker before choosing the registration path. ^{[25] [17] [17]}

CARM registration is relevant where the enterprise will import commercial goods into Canada and needs a CBSA importer program account. Exporting alone has a different program path: CBSA says exporters need a BN and RM export program identifier before an export declaration. Carriers and other trade-chain participants may use separate program identifiers. A small retailer should avoid treating a carrier’s program identifier or a broker’s BN as its own importer RM. ^[26]

Table 1 maps the identifiers and access layers that founders often combine into an “import number.”

The BN15 term denotes the BN9 plus a six-character program account suffix such as RM0001. A business can possess a BN9 without having opened the importer RM. It can also have an RM but no active portal profile for the person now managing the business. Export Development Canada’s separate BN15 and CARM-account prerequisites in its drawback workflow show why an account identifier and a user profile should be audited independently. ^{[28] [29]}

Where a BN9 comes from

For most new resident businesses, CBSA says the BN9 can be obtained during CARM registration. A resident trust or another entity type that does not qualify for that portal route must obtain the BN9 from the CRA first. A non-resident importer must likewise request its BN9 from the CRA before registering its business in CARM. A business with an existing BN should verify that number before creating anything new. ^[1]

The registration screen’s legal name and address are tied to the BN9, not merely to an RM display name. CBSA’s troubleshooting guidance directs an exact match with the CRA record. If the portal rejects the identity, the sensible first check is the underlying CRA record and entity type, followed by the official help route. A brand name, storefront name or mailbox label should not be guessed into the legal-name field. ^[27]

Setup in Dependency Order

A useful dependency diagram is: legal importer and exact name → BN9 → individual sign-in and profile → Register my business → BAM and backup → importer RM → approved broker relationship → RPP decision and any security → shipment and release. The arrows show prerequisites and handoffs, not a promise that every portal screen appears in exactly that order. CBSA’s official scenario guide has distinct routes for a new business, an existing BN and an existing program account. ^{[32] [29]}

Create the individual profile and business account

The owner or authorized employee who will manage the business starts with their own CARM sign-in credential and personal user profile. The portal offers GCKey or a supported sign-in partner and then multifactor authentication. The person establishing the business account selects “Register my business” on the First Time Setup page. An employee joining an already registered business instead requests access to the employer using its BN9; that request goes to the BAM. These are different transactions and should not be interchanged simply because both users work for the same company. ^{[33] [34]}

The first person who successfully registers the business becomes its BAM. This is an administrative role, not a synonym for ownership. A founder who wants direct control can perform that registration, while a trusted internal colleague can be designated under the company’s own governance. CBSA recommends at least two BAMs where possible; the second user should sign in independently and receive their own access. Shared credentials defeat the role model and make the audit trail hard to interpret. ^{[32] [29] [35]}

Enrol in the importer program

Since October 21, 2024, a new importer with a BN9 can register the import-export RM account in the CARM Client Portal. The CRA directs RM registration and updates to the CBSA system rather than its older import-export registration route. Where the company already has an RM, enter or link it during portal registration; where it lacks one, the portal permits enrolment in a commercial program while registering the business. The owner should see the importer program account in the portal before asking the broker to book a shipment. ^[3]

A specific legacy case requires a pause: a business that already had a BN9 and another CBSA program identifier before CARM, but no RM, must use CBSA’s client support process to link the identifiers before proceeding with portal business registration. The official scenario guide’s instruction to stop and have CBSA link the records is stronger than a generic “try again” troubleshooting step. Record the support reference and wait for the linking confirmation before continuing. ^{[32] [29]}

A founder should keep the access check separate from the account check. Seeing a BN9 in old tax records does not prove that the RM is open. Seeing an RM on an invoice does not prove that a current employee is the BAM. A brokerage contract does not prove that delegation has been approved in the portal. The Canadian Society of Customs Brokers publishes distinct process maps for creating a personal profile, registering the business and requesting employer access, which reinforces the need to verify each stage. ^{[29] [34] [6]}

Roles, Broker Access and Delegation

The broker relationship is a delegation of work, not a transfer of the importer’s identity. CBSA explicitly says customs brokers cannot register a client’s business or enrol that client in programs. A broker may request a business relationship in CARM; the importer’s authorized portal user then reviews and approves the appropriate access. The World Customs Organization describes customs brokers as third parties that present and process documentation on an importer’s behalf, a useful conceptual distinction from the principal importer. ^{[4] [7]}

Table 2 places the people and organizations in the workflow. It describes portal responsibilities rather than corporate authority outside CARM.

The BAM should first confirm the broker’s legal business identity and the intended service, then review any pending third-party request in CARM. The importer chooses the access type and visibility attributes in the delegation guide. Select the smallest scope needed for the task, document the approval internally, and review it when the broker relationship changes. CFIB’s guidance points users to Manage Pending Third-Party Requests. Carrier brokerage instructions may add their own steps, but the underlying approval is in CARM. ^{[36] [30] [31]}

A long-standing agency agreement or power of attorney is not necessarily the portal grant. FedEx’s Canadian CARM instructions tell its customers that they still must approve a separate delegation request, and that a BAM may approve requests from multiple brokers. This is useful when an ecommerce company uses one broker for courier parcels and another for freight. The company should record which broker has which scope rather than approving every requester by habit. ^{[5] [37]}

A broker’s planned filing should also be checked against the exact RM and delegated authority. CBSA states that a broker cannot submit a CAD on behalf of an importer until the importer delegates authority in the portal. If the broker reports that it cannot see the account, the BAM should first check the business relationship, role and account visibility, then use CBSA’s portal help if those appear correct. ^[6]

Release Prior to Payment Decision

RPP is an optional CBSA importer sub-program that allows goods to be released before the final accounting and payment of duties and taxes. It is a cash-flow and release-process choice, distinct from the RM account and broker delegation. Importers planning that timing must enrol in RPP and post security meeting CBSA’s requirement. A BAM or PAM can carry out enrolment in the portal; a broker cannot enrol the importer or supply its own security for the importer’s RPP privilege. ^{[38] [39] [40] [39] [40] [39]}

The current CBSA calculation looks at the highest monthly accounts receivable over the previous 12 months. For a written financial security agreement, CBSA describes at least 50% of the calculated amount and a $5,000 minimum per BN15. For a security deposit, it specifies 100% of the highest monthly amount. These are rules for sizing the security, not a forecast of a startup’s actual duties. A new importer should use current portal instructions and its own expected transactions rather than infer a security amount from another company’s import volume. ^{[9] [10] [11]}

A first-time importer without transaction history may see a calculated $0. CBSA says a new importer expecting transactions must provide an updated requirement based on self-assessment. For a written agreement, the importer must first obtain it from a security provider; if that provider submits it electronically, the importer must still finish RPP enrolment in the portal. If a deposit route is chosen, posting and allocation steps also matter. Treat a portal display or provider confirmation as a progress signal, and verify final RPP status before relying on early release. ^[12]

If the business will not use RPP, it should confirm the accounting and payment route with its broker before shipping. CBSA’s post-transition notice describes a C-type CAD and payment at release for importers without RPP eligibility. That operational alternative can affect delivery timing, so the shipment plan should not silently assume release before payment. CBSA also says importer clients cannot use a customs broker’s security. ^[40]

Security needs ongoing ownership. CBSA says it updates RPP financial security requirements annually and notifies enrolled importers around October 20. Where a revised requirement increases, the importer must update security by the subsequent January 15 to preserve the privilege. For a company with seasonal inventory purchases, this is a calendar control worth assigning to the BAM and finance owner. No fixed security amount should be copied into a permanent template without a dated source check. ^[41]

Illustrative Setup Cases and the Pre-Shipment Audit

The five cases below are illustrative examples, not a reproduction of CBSA’s five official registration scenarios. Consult CBSA’s first-time registration guide to choose the scenario that fits the business. ^[32]

1. New resident importer, no BN9 and no RM. Verify the legal entity and exact name, create the individual profile, choose Register my business, obtain the BN9 through the portal if eligible, then enrol in the importer program for RM. A resident trust or other excluded entity gets the BN9 from CRA first. ^[32]
2. Existing BN9, no RM. Use the BN9 already belonging to the importer, register the business in the portal, and enrol in the importer program. Do not request a second BN9 because the company already has one. Check that the RM appears before the shipment is tendered. ^[32]
3. Existing BN9 and another CBSA program identifier, no RM. Stop before ordinary portal registration and ask CBSA’s CARM Client Program Administration route to link the existing identifiers. Continue after confirmation, then enrol in the required importer program. This case is easy to miss for a business that already interacts with CBSA as a carrier or other trade-chain participant. ^[32]
4. Non-resident importer. Obtain the BN9 from CRA before CARM business registration, then follow the applicable existing-BN path and determine the importer program and RPP needs. A Montréal mailing address alone does not turn the business into a resident importer. This report does not resolve non-resident tax, corporate or customs-responsibility questions. ^[42]
5. Exporter or importer with an export line. If the transaction is only an export, use the CBSA exporter program route and the appropriate RM export identifier for declarations. A company doing both directions should inspect its program accounts rather than assume that one portal label proves all program enrolments are ready. ^[28]

The one-page audit below is designed to be copied into a shipment file. Record identifiers and status only; never record portal passwords, GCKey secrets, recovery codes or security-provider credentials in it. The employee and broker access checks follow the roles described above. ^[6]

• Legal importer: exact legal name on the CRA BN9 record: ____________________ .
• BN9: nine-digit number confirmed for that legal entity: ____________________ .
• RM importer account: BN15 shown in CARM: ____________________ .
• Portal administrator: primary BAM name and work contact: ____________________ .
• Backup: second BAM profile active, or named recovery owner: ____________________ .
• Employee permissions: list PAM or employee access by program and role: ____________________ .
• Broker: legal broker name, requested service and delegated account scope: ____________________ .
• Broker approval: portal request accepted and broker has confirmed visibility: yes / pending.
• RPP: enrolled / in progress / not used; security route and confirmed status: ____________________ .
• Payment at release: if no RPP, accounting and payment steps confirmed with broker: yes / pending.
• Product controls: commodity-specific licences or permits checked with the responsible authority: yes / pending.
• Shipment owner: person assigned to resolve account errors before dispatch: ____________________ .

A broker confirmation is useful, but the internal owner should inspect the portal status rather than rely only on an email assertion. CFIB and FedEx both describe the importer’s own approval step. For goods regulated by CFIA, its Automated Import Reference System (AIRS) is an official way to identify commodity requirements; the business should also verify any other product-specific controls separately. ^{[6] [5] [22]}

Data Analysis and Evidence

CARM statistics show the size of the system, while importer-enterprise statistics show why small-firm guidance matters. These datasets measure different populations and years. They must not be merged into a single adoption percentage. CBSA’s 2025 figures describe portal-registered businesses and CAD processing; Statistics Canada’s 2023 importer-characteristics series counts enterprises importing goods. Statistics Canada says later importer-characteristics data are unavailable because the CARM transition affected that series. ^{[43] [44] [43] [44] [45] [43] [46] [45]}

Table 3 reports the figures most relevant to the workflow, with their year and measurement unit visible.

The contrast between 213,000 portal businesses and 163,881 goods-importing enterprises is not a growth rate. CBSA’s portal population can include other trade-chain partners, while the Statistics Canada series has a narrower statistical definition and an older observation year. A separate CBSA briefing reported more than 219,430 enrolled businesses by late January 2026, which indicates continued portal use but still does not establish how many were new first-time importers. ^{[46] [45]}

The available Montréal statistic is useful context, though not a CARM compliance measure: Statistics Canada reported that 56.2% of Montréal importing establishments in 2023 imported from multiple partner countries. For an ecommerce founder, that underscores why one account setup may support several supplier relationships, while product rules and contract responsibilities still vary by shipment. A small business survey from CFIB sampled 2,032 members in 2024 and found some unregistered respondents expected brokers to handle CARM; it is historical sentiment, not a current registration rate. ^{[49] [43] [43] [50] [51] [51]}

Implications and Future Directions

The first-shipment process works best when the business treats portal control as a durable internal function. A second BAM reduces dependence on one person, while a role-limited employee and broker relationship makes later changes easier to manage. CBSA’s portal help lets administrators assign all-program or individual-program access, and internal administrators can revise access when roles change. Assign an owner to review access after staff changes and when a broker contract ends. ^{[35] [36]}

The importer should also maintain a small evidence packet: current CRA legal-name record, BN9 and RM confirmation, BAM and backup names, broker delegation screenshot or record, and RPP status where relevant. A business address service may support mail handling and business correspondence, but it does not replace any of those federal confirmations. 2727 Coworking’s virtual tour describes its workspace and desks, while its site separately advertises a street-address service; those offerings are adjacent to, not a substitute for, customs account setup. ^{[20] [52]}

Operational guidance is likely to change at the margins. CBSA’s CARM helpdesk covers business-number registration, program enrolment and account issues, and its online contact form issues a reference number worth retaining. When a portal message conflicts with an older article or broker handout, use the live CBSA page and support route. Where product controls apply, CFIA and Global Affairs Canada remain separate authorities; BDC also advises importers to check product requirements, packaging rules, taxes and duties before committing to a supplier. ^{[21] [23] [24]}

The broader international framework permits a trader to use a third party for customs work, and the World Trade Organization’s Trade Facilitation Agreement discourages making broker use mandatory. That principle is consistent with the Canadian distinction between the importer’s account ownership and a broker’s delegated service. It does not alter CBSA’s specific CARM requirements. The practical choice for a small company is who prepares filings, while the importer still owns its identifier, portal authority and RPP decision. ^{[17] [18]}

Frequently Asked Questions (FAQs)

Can a customs broker register a new importer in CARM?

No. The importer must register its own business and enrol in CBSA programs. The broker can request a business relationship, and the importer’s BAM can approve a delegation for the work the broker will perform. An existing power of attorney may remain relevant to the commercial relationship, but it is not the CARM portal approval. ^[5]

How does a new Canadian importer get a BN9?

Most new resident businesses can obtain one during CARM portal registration. Certain entity types, including resident trusts, and all non-resident businesses must obtain the BN9 from CRA before trying to register the business in the portal. An existing business should first check whether it already has a BN. ^[32]

Is a BN9 the same as an RM account?

No. The BN9 identifies the business. The RM account is the CBSA import-export program account under it; the combined BN15 is the program account identifier. The portal user profile is another separate layer. The founder should verify all three rather than treating any one number as proof of complete setup. ^{[28] [29]}

How is an RM import-export account opened now?

Since October 21, 2024, new importers and exporters with a BN9 can open the RM account in the CARM Client Portal. If the entity already has another CBSA program identifier but no RM, it may need CBSA to link identifiers before ordinary portal registration. ^[32]

Does the importer need RPP for every shipment?

RPP is the optional route for release before final accounting and payment. If the business plans to use that privilege, it must complete enrolment and its own financial-security steps. Without it, CBSA describes a C-type CAD and payment at release. The broker and importer should agree on the route before dispatch. ^{[39] [40]}

Where should a founder ask for help when a portal step fails?

Start with CBSA’s CARM portal help and client-support contact form. Check the exact legal name and address tied to the BN9, and retain the support reference number. A sole BAM who loses access should use the CBSA support process rather than creating a duplicate business identity. ^[53]

Conclusion

A ready first-time importer has more than a customs broker’s contact information. It has a verified legal importer, the correct BN9, an active RM importer account, an individual portal profile, a BAM with a backup, and a broker relationship approved at the scope required for the work. The company has also made a deliberate RPP decision and checked any product-specific controls before goods move. The checklist turns these into fields that can be confirmed without collecting login secrets.

The order matters because each step grants a different capability. The BN9 identifies the business, the RM enables its CBSA importer program account, the BAM controls the portal relationship, and delegation lets a broker act for the importer. RPP adds a separate release and security choice. Where an old program identifier exists without an RM, the business should resolve CBSA’s linking requirement before proceeding through the normal registration sequence.

The most robust practice is to make one person accountable for the pre-shipment audit and to verify every status in the live portal or current CBSA guidance. This report was checked on September 28, 2026; a founder planning a later shipment should recheck the linked official instructions, especially RPP and support workflows, before relying on a saved checklist. The result is a clear account of who the importer is, who controls access, who files on its behalf, and how the goods will be released.