Karsten Wenzlaff, Advisor
August 26th, 2025
August 26, 2026 | NCFA Community Announcement | Fintech And Innovation, Artificial Intelligence And Data, Capital Markets And Funding

Elevate is less than a month away! Checkout the latest Elevate 2026 agenda giving founders, investors and technology operators a closer look at the conversations coming to Toronto from September 22–24.
For Canada's fintech community, the mix is worth watching. Elevate's 2026 programming spans fintech, artificial intelligence, capital, commercialization and other technologies competing for investment, customers and talent. NCFA is a Community Partner for this year's festival at Meridian Hall.
Canadian fintech has a direct place in the program.
Eva Wong, Co-Founder and Chief Product Officer of Borrowell, is among the announced speakers, bringing experience from one of Canada's established consumer fintech companies to discussions about product, fintech and the development of Canada's digital finance market.
The latest agenda announcement also highlights Mati Staniszewski, Co-Founder and CEO of ElevenLabs; Adam Collins, Chief Communications Officer at Reddit; and Jessica Chalk, Founder and CEO of myStoria.
Those adjacent technology perspectives are relevant to financial innovators. AI is entering customer service, fraud detection, compliance, product development and internal operations, while fintech companies still have to turn technical capability into products customers trust and businesses can scale.
For founders, the useful question isn't simply which technology attracts the most attention. It's where new capabilities can solve a real financial problem, reach customers and support a viable company.
Elevate is also expanding direct access between founders and investors.
Its Meeting Exchange program is doubling capacity for 2026, with more than 750 curated one-to-one meetings for investment-ready startups.
That adds a practical capital component to a festival expected to bring together approximately 10,000 technology professionals, entrepreneurs, founders, executives and investors.
For early and growth-stage companies, concentrated access to investors, potential customers, partners and other founders can make the trip more useful than a schedule built around stage content alone.
NCFA community members can receive 20% off General Pass tickets for Elevate Festival 2026.
Use promo code: NCFAELEVATE20
📅 September 22–24, 2026
📍 Meridian Hall, Toronto
More speakers and sessions are being added ahead of September.
For fintech founders, investors and operators, the value is in the overlap. Finance is colliding with AI, new infrastructure, changing customer expectations and tighter competition for capital. Elevate offers three days to test ideas with people building, funding and buying technology across those markets.
#ElevateFest2026
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 26, 2026 | NCFA Insight | Regulation And Policy, Risk Compliance And Regtech, Payments And Money Movement

As of August 26, 2026, the Bank of Canada's RPAA enforcement decisions show nine published notices of violation involving payment service providers. Every listed notice cites section 23 of the Retail Payment Activities Act for performing retail payment activities without being registered. Every one also carries a $0 administrative monetary penalty.
Operating without registration is classified as a very serious violation. A zero dollar penalty doesn't make the violation informal or erase it. The decisions remain public for five years, and violations are also reflected on provider registry entries.
The transition period is over. Payment firms applying after September 8, 2025 must be registered before they begin regulated activity. A firm already operating without having applied is violating the Act. The requirement can also reach foreign providers serving Canadian users, so regulatory status in another country isn't a substitute for Canadian registration.
For firms still assessing scope, the Bank of Canada PSP registration guide covers the payment functions, Canadian market activity and operating models that can bring a business under the regime.
The Bank can set penalties for very serious violations as high as $10 million. Its RPAA monetary penalty policy considers actual and potential harm, previous violations, intent, negligence and other facts around the case.
Several of the published registration decisions say the provider later applied and took steps that reduced potential harm. That gives payment companies useful insight without creating a safe harbour. Fixing a problem quickly may affect the financial outcome, but it doesn't undo the underlying breach or guarantee another provider will receive a $0 penalty.
The UK based payment company, Equals Money PLC, challenged its notice and asked the Bank to replace it with a warning. The prescribed review maintained both the formal violation and the $0 penalty.
For founders, compliance teams, investors and commercial partners, the cost can extend beyond the fine. A public violation can become part of bank onboarding, enterprise procurement, investor due diligence and future supervisory decisions.
The Bank keeps enforcement decisions on its website for five years, while published violations also appear on provider registry entries. A firm that fixes a registration problem may therefore avoid a financial penalty and still carry a visible compliance record.
The nine notices make registration the first repeated enforcement pattern, but the Bank is already using other powers. On February 17, it ordered XTM Inc. and its affiliates to stop retail payment activity after raising serious concerns about XTM safeguarding client funds. Ten days later, a revised order allowed limited activity under court appointed monitoring and specified conditions.
Reporting can also trigger enforcement. A June 29 Bank of Canada RPAA reporting reminder says material incidents must be reported without delay and no later than 48 hours after they are determined to be material. Significant operational changes or new payment activities generally require at least five business days of advance notice, while annual reports are due by March 31.
That adds more weight behind the Bank of Canada PSP supervision regime that began in September 2025. Registration gets a provider through the front door. Staying compliant means managing operational risk, protecting customer funds, reporting changes and incidents, and overseeing third parties that support payment activity.
Canada's financial infrastructure is opening at the same time that RPAA supervision is becoming more active. The Canada Real Time Rail access guide covers the rules that came into force on August 24, 2026, ahead of the planned Q4 launch. Eligible payment service providers can pursue Payments Canada membership and new participation routes, but registration alone doesn't provide access.
A provider still needs more than registration. It may need Payments Canada membership, settlement arrangements, technical connections, fraud controls and testing before it can use the new infrastructure.
For fintechs, that means compliance is becoming part of product readiness. Companies building instant payments, treasury services or embedded payments need the regulatory and operating pieces in place before they can compete on the new rails.
The proposed Canada Consumer Driven Banking rules include a defined accreditation route for RPAA registered payment service providers. That gives payment firms a commercial reason to get registration and operating controls right. The same regulatory foundation can affect whether a provider is positioned to compete in real time payments, data sharing and future payment initiation.
The first published enforcement cases give payment firms a clearer picture of how the regime works:
As Canada opens Real Time Rail access and builds Consumer Driven Banking, will strong RPAA compliance become more than a regulatory requirement and help determine which payment firms are ready to compete on the new infrastructure?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 26, 2026 | NCFA Market Activity | Capital Markets And Market Infrastructure, Regulation And Policy, Risk Compliance And Regtech

On August 19, 2026, CRSHMARKET promoted a wider vision for its livestream prediction market, where people can put money on events while a stream is still unfolding. Its campaign showed markets around dates, public interactions and creator content, while the live product currently remains concentrated in video games such as Rocket League and Among Us.
The format is built around speed. Users enter dollar amounts on short yes-or-no outcomes and some markets can settle within minutes. When checked on August 26, CRSHMARKET on-chain volume showed about US$7.79 million in cumulative USDC entry volume across current and earlier contracts. DefiLlama says each entry is counted once and treasury seed liquidity is excluded.
What happens if the product expands beyond esports into creator-led livestreams where the person on screen can affect what traders are betting on?
Prediction markets already have to manage insider information. Creator-led markets add another problem because someone close to the content may be able to influence the result itself.
A market on whether a streamer gets someone's phone number, spends more than $100 or completes a stunt can involve people who know more than the audience. The creator, production staff, guests or friends may know what is planned. Some may also be able to change what happens.
There's already a useful precedent. A Kalshi insider trading case resulted in a financial penalty and two year suspension after an internal editor traded on markets connected to MrBeast videos he worked on. Kalshi's surveillance tools and user reports helped identify the activity.
Livestreams compress that problem into a much shorter window. The event is happening now, viewers are trading now and the market may settle before a platform has much time to investigate. Controls therefore need to identify who is close enough to the event to have an unfair advantage before suspicious trading becomes the only warning.
<
| Risk | Why Livestreams Make It Harder | What Platforms Need |
|---|---|---|
| Inside information | Creators, guests or production staff may know what is coming | Restricted accounts and connected party checks |
| Outcome manipulation | People on the stream may be able to change the result | Creator rules and limits on controllable markets |
| Disputed results | Live video can be unclear, interrupted or open to interpretation | Clear settlement rules and independent evidence |
CRSHMARKET has already written some of these concerns into its operating rules. Its published CRSHMARKET Bonus Terms allow identity, age, location, wallet, payment and source-of-funds checks before promotional funds are paid or withdrawn. The terms also identify collusion, automated accounts, location masking and creator manipulation as reasons to cancel promotional value or restrict future eligibility.
Those are promotion rules rather than a complete public rulebook for every market, so they don't establish how all livestream disputes or conflicts will be handled. They do show that CRSHMARKET recognizes creator manipulation and connected-account behaviour as operating risks.
In the U.S., prediction markets can operate within the CFTC regulated derivatives framework, but that protection depends heavily on how the contracts and venue are structured. CRSHMARKET does not appear to be a CFTC registered exchange, so creator led livestream markets could still raise federal derivatives, state gambling and market manipulation questions.
The regulated event contract infrastructure opportunity tracks demand for surveillance, conflict detection, audit trails, settlement tools and dispute handling as prediction markets grow. Creator-led markets make those capabilities more valuable because the event, the people controlling it and the traders can be closely connected.
Some markets may also need to be excluded entirely. For example, when a trader can influence the event they are betting on, an issue already explored in prediction markets on controllable events.
For CRSHMARKET, speed is part of the attraction. It can turn ordinary moments inside a livestream into something viewers can trade almost immediately. The commercial model becomes stronger if creators gain another way to monetize audiences and viewers find the markets entertaining enough to return.
But they'll need to show that people close to an event cannot quietly trade on better information, creators cannot steer outcomes for financial gain and disputed results can be settled consistently. If it can do that, livestream prediction markets could create a new category of interactive financial entertainment. If it can't, the integrity issue may limit the model before the audience does.
If livestream prediction markets expand beyond esports, can platforms build controls fast enough to separate genuine audience participation from markets where creators or insiders can influence the outcome themselves?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 25, 2026 | NCFA Insight | Treasury Liquidity And Cash Management, Payments Infrastructure And Money Movement, Cross Border Payments And FX

On August 25, 2026, Royal Bank of Canada created a RBC Global Transaction Banking business spanning Commercial Banking in Canada and the United States and RBC Capital Markets. Payments, cash and liquidity management, working capital, trade finance and foreign exchange will operate under shared leadership and one strategy.
Most of the products already existed. RBC is changing how it organizes, develops and sells them. RBC Edge serves Canadian cash management clients and RBC Clear serves the U.S. market. The bank hasn't said the two platforms will become one system.
When a business collects money, makes payments, holds cash, converts currencies and borrows through the same bank, that relationship can produce payment fees, operating deposits and more financing opportunities. RBC is trying to make more of those services work as one relationship across borders.
RBC explicitly links transaction banking to deposit growth. By the end of fiscal 2025, RBC Clear U.S. transaction banking had attracted US$23 billion in deposits from more than 180 clients, up from about US$9 billion and 100 clients earlier that year. RBC's medium term target is US$50 billion.
Operating deposits are useful because businesses need money available for payroll, suppliers, collections and other daily obligations. RBC can use those balances as funding elsewhere in the bank while earning fees from payments and treasury services.
BMO shows how significant that combination can become. At its March 2026 Investor Day, BMO Treasury and Payment Solutions said it served more than 138,000 businesses and had processed $68 trillion in payments during the previous fiscal year. The business represented roughly 40% of BMO's deposits and about 10% of fee revenue.
For banks, the prize isn't just the payment. It's the cash before and after the payment, the foreign exchange required across markets and the financing a business may need later.
Businesses don't have to replace their primary bank to give part of the relationship to somebody else. Payments, foreign exchange, cards, payables and finance software can all be purchased separately while the main operating account stays where it is.
Canadian payment data shows where demand is strongest. Payments Canada SME payment research found 69% of small and medium-sized businesses would use real-time payments to send money and 66% would use them to receive money if available. Payment delays were their most common payment problem, followed by cash flow management.
A separate 2025 Canadian business payments survey found 60% planned to increase fintech use, 77% were prioritizing real-time payments and 53% expected to move from traditional payment methods toward digital ones.
This means payments are a practical entry point for fintechs. A company can solve a visible problem such as supplier payments, international transfers or reconciliation without asking the customer to move its entire banking relationship.
| Provider | What It Brings Together | Where It Can Win |
|---|---|---|
| RBC | Payments, deposits, cash management, FX, trade and working capital | Large relationships, lending capacity and cross border banking |
| BMO | Treasury, payments, deposits and embedded banking | North American treasury and business banking |
| Airwallex business payments and FX | Multi-currency accounts, payments, FX, cards and bill pay | Businesses managing money across countries and currencies |
| Float business finance platform | Accounts, cards, payments, FX, credit and finance automation | Canadian finance teams that want banking and software together |
| Dream Payments real-time payouts | Payment controls, supplier onboarding and payouts | Payments built directly into business software |
Customer survey and behaviour data suggests the relationship can already break apart product by product. Canadian bank switching reached a 20-year high in 2025, with 24% of Canadians choosing a new financial institution when opening an account. Another Canadian financial loyalty survey found 62% would be open to switching if the process were easier, while 35% identified switching hassle as a barrier.
Canada's new financial infrastructure can lower the friction of using several providers. Proposed Canada Open Banking and Consumer Driven Banking Rules establish the framework for consent-based financial data sharing, authentication and security.
The Canada open banking commercialization roadmap shows what that can mean commercially. Read-only data sharing can support cash flow dashboards, account comparison, switching and easier onboarding, while later payment initiation can open more room for embedded credit, payments and real-time treasury services. The competitive effect isn't only easier switching. It's easier unbundling, because a business can use better tools from another provider without first moving its main operating account.
A business could keep its core banking relationship with RBC while using another provider for foreign exchange, payables, treasury analytics, cards or financing. Better data access makes those services easier to connect. The primary bank doesn't have to lose the customer to lose part of the relationship.
The payment side is changing too. Canada's Real-Time Rail access rules create new participation routes for eligible payment service providers as Canada prepares for instant, data-rich payments. Payments Canada research already highlights strong SME demand for faster payments. RBC did not say that the new global transaction banking structure is connected to the rail, but banks and fintechs will eventually be building products on more capable payment infrastructure.
The NCFA Financial Innovation Map separates payments, treasury, embedded finance, business banking and open finance into different markets. Customers won't necessarily make the same distinction. A business wants to get paid, see its cash, pay suppliers, exchange currencies, borrow when necessary and keep the records straight.
RBC's scale still gives it advantages fintech specialists can't easily reproduce. It can combine deposits, lending capacity, treasury services, foreign exchange and large corporate relationships inside one regulated institution. For companies operating in both Canada and the U.S., making those services work smoothly together could be especially valuable.
But product-by-product competition changes what RBC has to defend. A client may keep its operating account while moving international payments to one provider, cards to another and treasury software somewhere else. Each piece that leaves takes fees, data and customer activity with it.
Fintechs don't necessarily need to replace RBC to win. Payments offer an early opening because businesses already want faster and more automated ways to move money. Open banking can make outside tools easier to connect. Better real-time infrastructure can widen the number of companies able to build around the payment itself.
RBC's Aug. 25 reorganization is about more than putting existing teams under common leadership. The bank is trying to make payments, cash, FX and financing work well enough together that businesses have fewer reasons to peel those services away one at a time.
As open banking makes financial data easier to share and real-time payments give businesses more ways to move money, can RBC keep more of the corporate relationship by connecting payments, cash, FX and financing, or will fintechs keep winning those services one product at a time?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Aug 25, 2026

A seed-stage fintech doesn't have the compliance headcount of a bank, but it runs into the same onboarding failure modes on day one. Pick the wrong KYC vendor at this stage and you're locked into a twelve-month contract sized for volume you won't hit until Series B — while real users bounce off a verification flow that takes four minutes and rejects one in five of them.
Most enterprise KYC platforms are priced for banks — five-figure monthly minimums, annual commitments, a sales cycle built around a company that already knows its verification volume two years out. A startup running 400 verifications a month signs the same contract structure as a bank running 400,000. Same paperwork. Wildly different math. That mismatch shows up first on the invoice, then in the engineering hours nobody budgeted for.
Pay-per-approved pricing solves half of the problem. The other half is speed to first verification — how long it takes from signed contract to a live SDK in production. A startup's runway doesn't stretch to a six-week integration project, no matter how good the false-rejection rate looks in the sales deck.
There's a third cost that rarely makes it into the comparison spreadsheet: retry rate. A platform that rejects legitimate users on the first pass doesn't just lose that signup — it burns support time, and at seed stage there usually isn't a support team dedicated to chasing down why a real customer's passport got flagged as fraudulent. That cost compounds quietly until someone finally pulls the funnel numbers.
Five names come up consistently when founders ask around. Each handles the startup-specific constraints — pricing flexibility, integration speed, document breadth — differently enough that the choice isn't close to arbitrary.
iDenfy's KYC software runs on pay-per-approved pricing — $0.55–$0.75 per approved verification — so a startup doing 300 checks a month isn't subsidizing capacity it hasn't grown into yet. Document coverage extends to 16,000+ document types across 200+ countries, which starts to matter the moment a user base stops looking like the founding team's home market. Monitoring runs event-driven rather than batch, so a sanctions hit surfaces the moment it happens instead of waiting for a nightly job. iDenfy picked up a G2 Leader badge for Spring 2026, and operations carry Lloyd's of London insurance — worth asking about directly, since most seed-stage vendors won't have an equivalent to point to. The 99.9% success rate figure matters less as a headline number and more as a proxy for how much retry friction a startup's onboarding funnel will actually absorb.
Sumsub built its name on crypto and payments onboarding, and the platform still leans that direction — travel rule tooling and transaction monitoring bolt on cleanly if a startup is already thinking about AML down the road. Pricing runs on tiered plans rather than pure pay-per-approved, so the economics look different at low volume than iDenfy's model. Document coverage is broad, though founders comparing the two consistently report iDenfy's approval speed as the differentiator once volume climbs past the pilot stage.
Onfido does identity verification well and has the enterprise logos to prove it, but the platform wasn't built with startup budgets in mind. Minimums and contract terms tend to assume a company that already knows its Series B volume. Founders who've evaluated it describe a strong product wrapped in a sales process that doesn't flex much below a certain deal size — a six-figure annual floor isn't unusual, and that's before the integration timeline gets discussed.
Persona's workflow builder is genuinely startup-friendly — a small team can stand up a custom verification flow without much engineering lift, and the no-code case management is a real advantage before a startup has a dedicated compliance hire. The tradeoff shows up in document coverage outside North America and Western Europe, which matters less for a domestic launch and more the moment international users show up in the funnel unannounced.
Trulioo's pitch is global reach — its network claims coverage across a very large number of data sources worldwide, which sounds ideal for a startup planning international expansion from day one. In practice, that breadth comes with less consistency: approval rates and document support vary noticeably by country, so the "global coverage" line item needs testing against the startup's actual target markets before it goes in a board deck.
Two platforms quoting $0.60 per verification aren't offering the same deal if one requires a $5,000 monthly minimum and the other doesn't. At 300 verifications a month, the first vendor is charging roughly $16 per verification once the minimum kicks in — more than 25 times the sticker price. Startups comparing quotes need to run their actual expected volume through the pricing structure, not just compare the per-unit number on the pricing page.
Contract length compounds the same problem. A twelve-month contract locks in today's pricing and today's feature set — for a company whose user base, geography, and risk profile won't look the same in six months. Month-to-month terms sometimes cost more per verification. That premium buys the right to walk away before a bad fit turns into a sunk cost.
There's an engineering cost buried in here too, and it's easy to underweight before the integration actually starts. An SDK that requires a week of back-and-forth with a vendor's support team to get webhooks firing correctly is a week that a two-person engineering team isn't spending on the product. That cost doesn't show up on the pricing page, but it shows up on the roadmap, and it's the reason a handful of founders end up picking the vendor with slightly worse per-unit pricing and a documentation site that actually answers their integration questions.
Contract minimums are the first filter. A vendor that won't quote pay-per-approved pricing without a monthly floor is running a bank-shaped contract behind a startup-friendly landing page. Ask directly. Get the number in writing before the pilot starts.
Integration time is the second. Six weeks to go live costs more in delayed launches than it ever saves on per-verification pricing. Ask for a reference who integrated last quarter — not a case study from two years back.
Monitoring architecture is the third, and it's the one founders skip. Batch monitoring means a sanctions match from Tuesday morning doesn't surface until Wednesday's run — a gap that's irrelevant at ten users and a real liability at ten thousand. Event-driven monitoring closes that gap regardless of volume, which is exactly why it's worth confirming before volume becomes the problem.
Geographic coverage is the fourth, and it's underrated because most startups launch in one market and assume expansion is a "later" problem. It isn't. Re-integrating a KYC vendor eight months into growth, because the first one tops out at 40 countries, is a rebuild nobody plans for and everybody has to do anyway.
A pilot is where the sales deck meets actual users, and a handful of patterns show up consistently when a vendor isn't the right fit. The first is a support team that can't explain a rejection reason in plain language — if the answer to "why did this user fail" is a generic error code instead of a specific mismatch (document expired, face match below threshold, database hit on a sanctions list), that's a preview of every future support ticket a startup's own team will have to field instead.
The second: a sandbox that behaves nothing like production. Some platforms approve almost everything in sandbox mode — the demo looks great — then tighten thresholds hard once real traffic and real fraud attempts show up. Ask specifically whether the pilot's approval rate holds once it's live. Get that answer in writing too.
The third is scope creep in what counts as "KYC." A few vendors bundle document verification with transaction monitoring, case management, and biometric liveness as a single line item, then unbundle them once a startup tries to negotiate price — suddenly the core verification a startup actually needs costs the same as the full compliance suite it doesn't. Get an itemized quote before signing, not after.
The fourth, and the one that costs the most later, is data residency. A startup targeting EU users needs to know whether verification data is processed and stored inside the EU or routed through a US data center, because that answer determines whether the vendor is even usable once GDPR obligations kick in. This is a five-minute question in the sales call and a multi-month remediation project if it's skipped.
The KYC platform a startup picks at seed stage rarely gets revisited before Series B — not because it's the right long-term choice, but because ripping out an onboarding flow mid-growth is expensive enough that nobody wants to own the decision to do it. Pick on contract flexibility and monitoring architecture now, not just on the demo, and that decision doesn't have to get revisited at all.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 25, 2026 | NCFA Insight | Digital Identity And Trust, Cybersecurity Fraud And Financial Crime, Risk Compliance And Regtech

On August 25, 2026, Vancouver based Fobi AI launched Fobi AltID 3.0, expanding its digital identity technology beyond credential verification. Fobi says the new platform can continuously authenticate a verified person, confirm authorization and use satellite positioning to add location and time to the decision. Financial services and customer identity checks are among its intended uses.
The existing Fobi digital identity wallet focuses on proving identity or age while limiting how much personal information needs to be shared. The new proposition goes further. Once someone has been verified, Fobi wants the credential to keep helping organizations decide whether the right person is still present and allowed to complete an action.
That addresses a real financial control problem. Verifying someone when an account is opened does not prove that the same person still controls a session months later, approved a particular payment or gave software permission to act for them. The gap gets wider as financial services automate more activity.
The launch names financial services as a target market but doesn't identify a bank, credit union, payment company or financial pilot. It also doesn't explain how an AI agent would be given, restricted or stripped of authority. Those are important boundaries between the product Fobi has launched and the larger trust infrastructure it wants to build.
This approach already has support in established digital identity practice. NIST continuous authentication guidance allows organizations to monitor characteristics such as behaviour, device information, location, timing and network activity after a user has logged in. Suspicious changes can trigger another identity check or end the session.
For financial firms, that can add protection without repeatedly asking customers to upload identity documents. An account can remain usable while the service watches for changes that make the current activity look less like the person who was originally authenticated.
Fobi adds location to that decision. The company says satellite positioning can connect a verified person with where and when an interaction occurs. Location can strengthen a risk decision, but Fobi has not disclosed the positioning technology, accuracy or protections against false location data. NIST also treats geolocation as one piece of a wider risk assessment rather than proof of identity on its own.
More monitoring also creates more privacy responsibility. Behaviour, devices and location can all reveal sensitive information. NIST requires those uses to be included in privacy risk assessments. Fobi says the personal information used for the original verification can be removed from the ongoing process, but further disclosure is needed to show what the platform continues to observe and retain.
Canada is dealing with the same combination of identity, consent and security as financial data becomes easier to share. The proposed Canada Open Banking and Consumer Driven Banking Rules bring authentication, consumer permission, security and evidence of authorization into the same operating framework. Persistent digital identity becomes more useful when those controls have to work after onboarding rather than only at the beginning of the relationship.
AI agents make the distinction between identity and authority easier to see. A bank may know who owns an account and still need to know whether software has permission to spend $500, change an instruction or continue acting tomorrow. AI agents with wallet access increases the urgency of defining what software can do, for how long and on whose authority.
Payment networks are already building controls around that problem. The Visa Trusted Agent Protocol lets merchants verify that an AI agent is legitimate and has permission to act for a customer. Visa's specifications also allow merchants to limit an agent to a specific purpose, such as browsing or making a payment.
Mastercard Verifiable Intent, developed with Google, records what a person authorized before an AI agent acts. Mastercard is designing it to work across wallets, platforms, payment networks and different agent systems.
The same convergence appears in the FCA Emerging Technology Horizon Scan 2026, where digital identity, AI agents, consumer control and programmable finance intersect. For fintechs, the opportunity goes beyond proving who somebody is toward proving what a person or piece of software is allowed to do.
Open digital credentials could make those permissions easier to carry between services. The W3C digital credential standard provides a common way to issue and verify secure, privacy respecting credentials. Fobi has not disclosed whether its new platform supports that standard or another open identity framework. Interoperability is necessary if the technology is expected to work across banks, fintechs, payment networks and other organizations rather than mainly inside Fobi's own products.
Fobi is also positioning post quantum security as part of the platform. Financial firms are already preparing for post quantum cryptography as new security standards replace encryption that future quantum computers could threaten. Fobi has not identified which algorithms or standards it uses, or provided independent technical validation. For now, quantum readiness remains a product claim that still needs evidence rather than the main reason to assess the launch.
The more immediate opportunity is digital trust. Identity can establish the person. Ongoing authentication can flag when something changes. Authorization can control what a person or AI agent is allowed to do. Those capabilities also connect digital identity, cybersecurity and automated finance across the Financial Innovation Map.
Fobi now has to prove that its technology can join those pieces in practice. A financial institution deployment, support for open credentials or documented controls for delegated authority would make the case much stronger. Until then, the launch is a credible expansion of Fobi's digital identity technology into a financial problem that is becoming harder as software gains more authority.
As AI agents gain access to payments, financial accounts and digital credentials, will proving identity once be enough, or will financial services need to keep verifying who is in control and exactly what they are allowed to do?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |