Exactly. What I missed when I did this was that PP is a US company, and thus enforces US OFAC controls on all clients, regardless of location.

Contrast this with, say Chase. It is a US institution, but also operates in Canada as a Canadian financial institution.

What I found interesting is that PP is scanning transactions for keywords.