Every commercial importer enrolled in Release Prior to Payment (RPP) has a number attached to their CARM account  and most don't know how CBSA arrived at it. Get the number wrong, and a shipment can sit at the border while your broker scrambles to post more security.

The good news: the formula isn't a mystery. CBSA calculates it from your own import history, and the rules for the floor, the ceiling, and the annual review are published. This guide breaks down exactly how much you need, why the figure changes every October, and what happens if you miss the deadline to top it up.

Key Takeaways

• CBSA sets your required security at 50% of your highest month of duties and taxes owed in the past 12 months for a surety bond, or 100% for a cash deposit (CBSA, Financial Security for Release Prior to Payment, retrieved 2026-09-22).

• The regulatory floor is $5,000 and the ceiling is $10 million per import program account (BN15)  though some surety providers set their own $25,000 practical minimum.

• CBSA recalculates every account on October 20 each year; any increase must be topped up by January 15 or RPP privileges can be suspended.

What Is CARM Financial Security, and Why Does CBSA Require It?

CARM financial security is the collateral CBSA holds against the duties and taxes you owe before it lets your goods cross the border ahead of payment. Without it, every shipment would need duties paid up front, which would grind commercial import volume to a crawl.

Under the CARM Assessment and Revenue Management system, RPP is the privilege that lets importers receive goods first and settle the bill on a monthly statement of account. Posting security is the price of that convenience  CBSA needs assurance it can collect if an importer defaults.

Two forms of security satisfy the requirement: a written security agreement (a bond) from an approved surety provider, or a cash security deposit. Both get posted directly through the CARM Client Portal. How Does CBSA Calculate Your Required Bond Amount?

CBSA doesn't set your security amount arbitrarily. It looks at "the highest monthly accounts receivable you have with the CBSA over the past 12 months" and builds the requirement from that single peak month.

From that peak figure, two thresholds apply depending on which security type you choose:

• Surety bond: minimum 50% of the peak month's duties, taxes, and surtax

• Cash security deposit: 100% of the peak month's duties, taxes, and surtax

So if your highest single month of duties and GST owed was $200,000, a bond covers you at $100,000, while a cash deposit ties up the full $200,000 with CBSA until you request a refund (Roanoke Group / gettransport.com analysis of CBSA RPP mechanics, retrieved 2026-09-22).

The peak-month formula means one unusually large shipment, a container rush before a tariff deadline, a seasonal inventory build  can permanently raise your baseline requirement, even if your normal monthly volume is much lower. Importers who front-load a single big order sometimes don't realize they've reset their own bond math for the next 12 months.

Regardless of the calculation, two hard limits apply: a $5,000 floor and a $10 million ceiling per importer program account (BN15). Importers whose peak month would push them past $10 million can post more voluntarily, but CBSA won't require it.

Surety Bond vs. Cash Deposit  Which Actually Costs Less?

A bond covers the requirement at half the dollar figure and costs only an annual premium, typically a small percentage of the bonded amount. A cash deposit locks up the full peak-month figure with CBSA  money that earns nothing and can't be used for anything else while it sits there.

For an importer with steady volume, the math almost always favors a bond. The real decision point isn't bond-versus-cash in the abstract; it's whether your business would rather pay a predictable annual premium or accept the opportunity cost of six or seven figures parked with the government. For most growing importers, preserving that cash for inventory or operations outweighs the premium.

One practical wrinkle: while CBSA's regulatory floor is $5,000, several surety providers won't underwrite a bond below roughly $25,000, because the administrative cost of a smaller bond isn't worth it to them. New or low-volume importers sometimes find the cash-deposit route is actually their only option at the very bottom of the range.

What Happens During CBSA's Annual Review?

CBSA reviews every RPP account once a year, using the 12 months of activity from October 20 through October 19. The recalculated amount reflects your most recent import volume and liabilities, not the figure you posted when you first enrolled (Roanoke Group, CBSA Annual Review: What Canadian Importers Need to Know, retrieved 2026-09-22).

If your requirement goes up, CBSA posts a notification to your CARM Client Portal account. If it goes down or stays flat, you get nothing — no message, no alert, no confirmation. The absence of a notification could mean your number didn't change, or it could mean you simply haven't checked.

Any increase must be topped up by January 15 of the following year to keep RPP privileges intact. That's roughly a 12-week window between the October review and the January deadline tight enough that waiting until the new year to check your portal can leave very little runway to arrange additional bond coverage.

What Happens If You Don't Post Enough Security?

Missing the top-up deadline puts your RPP privileges at risk of suspension or revocation. Practically, that means losing the ability to receive goods before duties are paid — every shipment reverts to pay-first clearance, which can add days of delay at a border where timing is often the whole point.

For importers running tight delivery schedules, retail restocks, manufacturing inputs, time-sensitive freight a suspended RPP account isn't just a paperwork problem. It's a supply chain problem that shows up as missed shipment windows and unhappy customers.

How to Get the Right Bond Amount for Your Business

1. Check your CARM Client Portal account now, not just in October. Don't wait for a notification that may never come if your number happened to decrease.

2. Know your own peak month. Pull your last 12 months of duties, GST, and surtax paid, and identify the single highest month — that's the number CBSA is working from.

3. Compare bond versus cash before you're forced to decide. If you're currently posting cash security, ask whether switching to a surety bond would free up capital.

4. Build in buffer for growth. If you're planning a large shipment or a seasonal volume spike, model how that month would affect your next annual review before it happens, not after.

5. Loop in a licensed customs broker before the January 15 deadline, not the week of it. Arranging additional bond coverage takes time surety providers don't always have on short notice.

Frequently Asked Questions

What's the minimum CARM security amount I need to post?

The regulatory floor is $5,000 per importer program account (BN15), though many surety providers won't write a bond below roughly $25,000 in practice (CBSA, Financial Security for RPP, retrieved 2026-09-22). Importers at the very low end sometimes have to use a cash deposit instead.

Can I switch from a cash deposit to a surety bond later?

Yes. Importers can move between security types through the CARM Client Portal at any time, not just during the annual review window. Switching to a bond typically frees up the cash that was previously tied up with CBSA.

Will CBSA tell me if my required amount goes down?

No. CBSA only sends a portal notification when your required security increases. If your amount stays the same or decreases, you won't receive any message — so it's worth checking your account directly around October 20 each year.

What happens if I miss the January 15 top-up deadline?

Your RPP privileges can be suspended or revoked, which means shipments revert to pay-first clearance instead of release-then-pay. That can add processing delays right when your business can least afford them.

Do new importers need to post security before their first shipment?

New RPP enrollees post an initial security amount during onboarding, calculated from projected import activity since there's no 12-month history yet. That figure gets replaced by the standard peak-month calculation at the first annual review.

Bottom Line

CARM financial security isn't a flat fee or a one-time decision — it's a formula tied directly to your own import activity, recalculated every year whether you notice or not. Knowing your peak month, choosing the right security type, and marking October 20 and January 15 on your calendar are the difference between smooth clearance and an unplanned pay-first scramble.