Category Archives: FinTech and Alternative Finance

Notaries and Financial Planners on the Same Team: Jason Barakat’s Model for Family Protection

November 3, 2026

Most families meet their notary and their financial planner at different moments, in different offices, often years apart. The will gets signed in one place, the life insurance policy is arranged in another, and the retirement plan takes shape somewhere else again.

For Jason Barakat, President and CEO of Nolos Cabinet Multidisciplinaire Inc. in Montreal, that separation is where family protection tends to come apart. His view is easy to state and harder to put into practice. He sees the legal plan and the financial plan as two halves of the same promise a parent makes to a family, and when the people who build each half never speak, the family ends up carrying the risk.

Two Plans That Rarely Meet

A complete family protection plan has legal and financial sides. The legal side covers documents such as wills, protection mandates for incapacity, and marriage or cohabitation agreements, while the financial side covers life and disability insurance, retirement savings, and the beneficiary designations attached to each account and policy.

Each side can be done well on its own and still work against the other. A beneficiary designation on an insurance policy might send money somewhere the will never intended, or a will might divide an estate in a way that looks fair on paper but leaves heirs without the cash to settle debts or taxes. Nobody in either office made a mistake; the two plans just never met.

That gap is familiar ground for Jason. From 2003 to 2021, he served as President and Principal Officer of La Capitale Services Conseils, where he developed specialized financial services for Quebec's public sector employees and helped workers plan for retirement.

During that period, the firm's assets under management grew from $300 million to over $3 billion. Working at that scale keeps a leader close to the moment when financial plans meet real family life.

What Each Profession Brings to the Table

In Quebec, the notary holds a distinct place in family matters. A notarial will, for example, does not need to be probated by a court, which can spare a grieving family time and cost. Notaries also draft protection mandates and marriage contracts, the documents that decide who acts and who inherits when life changes suddenly.

Financial planners deal with a different set of questions. How much income would the family need if a parent could no longer work? Is there enough coverage to carry the household, or to fund the children's education? Are retirement savings on track, and who receives them?

According to Jason Barakat, those two sets of questions belong in the same conversation. The notary understands what the law allows and requires, and the planner knows what the family can afford and what it would need in a crisis. With both looking at the same plan, contradictions surface early, while there is still time to fix them.

How Jason Barakat Built the Model Into Nolos

That conviction shaped the company he founded in 2022. Nolos Cabinet Multidisciplinaire Inc. brings FinTech, InsurTech and LegalTech together on one platform, with an ecosystem that includes a Quebec-based legal firm, a notarial study and a national financial MGA (Master General Agency) distributing protection and wealth solutions from Canada's top financial institutions.

The team was built to match. Lawyers, notaries, financial planners, and experts in related fields work inside the same organization, so a family's legal and financial needs get looked at together from the start.

The structure serves a mission of access. Nolos was built to open legal and financial services to middle-class families, the households that often can't justify hiring several separate professionals and asking them to coordinate. Wealthier families have long had that coordination through family offices, a world Jason knows well.

In 2021, he partnered with Peartree Canada to help family offices, high-net-worth individuals and organizations with strategic giving and philanthropic planning. Nolos applies a similar principle of coordinated advice to a much wider group of Canadians.

Technology as the Connective Layer

Putting professionals under one name is only a first step; they also need to share information, keep documents consistent, and give families a clear view of where their plan stands.

Jason's answer to that challenge is technology. In 2022, he acquired Skylegal, a Quebec legaltech firm. More recently, he acquired a tech firm that develops software and applications for public and private institutions, adding further technological capabilities to the Nolos platform. His aim is to bring legal and financial services under one roof so the family using them experiences something coherent and not a collection of separate appointments.

He is equally clear that technology supports the human relationship. A family deciding who will care for their children, or how to provide for a spouse, needs a trusted professional across the table, and good systems give that professional a fuller picture of the family's situation.

Estate Planning as a Family Conversation

Jason's interest in this field runs through his own education and service. He studied finance and business law at Concordia University's John Molson School of Business and completed extensive studies in estate planning, individual and group insurance, and strategic philanthropy.

In 2023, he launched a charitable foundation, later named the Nolos Foundation, with a mission of access to justice and family legacy planning. The foundation carries the same belief that drives the company, namely that financial knowledge and legal protection should be within everyone's reach, including people who can't afford a full team of advisors.

As a husband and father of two, he also approaches the subject personally. Estate planning works best when it begins with the conversations a family has before a crisis, while decisions can still be made calmly and together.

A Practical Starting Point for Families

For families who have never brought their advisors together, the first step can be modest. Gather the existing documents, meaning the will, any protection mandate, insurance policies and the beneficiary designations on retirement accounts, and ask whether the people who prepared them have ever compared notes. Often they haven't.

See: Expanding Access to Digital Financial Advice in Canada

Jason Barakat believes that single question is where better family protection begins. Through Nolos and its foundation in Montreal, he continues to build a model where notaries and financial planners work from the same plan, so more Canadian families can count on protection that holds together when they need it most.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

BDC Launches Mission AI to Help Canadian SMEs Adopt AI

November 2, 2026 | NCFA Market Activity | Artificial Intelligence And Data, SME Finance And Business Banking, Canada

AI illustration of Canadian SME team reviewing digital workflow charts and AI adoption tools in a collaborative workspace, illustrating BDC Mission AI and AI Studio for business productivity and financing efficiency

BDC Connects AI Adoption, SME Productivity and Financing

On November 2, 2026, the Business Development Bank of Canada BDC launched Mission AI and AI Studio to improve AI adoption and financing for Canadian SMEs. Mission AI will test Canadian AI products with small and medium sized businesses and measure whether they improve real business workflows. AI Studio is an internal BDC initiative that will also build and deploy AI inside the bank to make support and financing faster, simpler and easier for entrepreneurs to track.

BDC works with thousands of SMEs and, as of September 2026, was directly or indirectly invested in more than 300 Canadian AI companies representing nearly C$800 million in total investments. Mission AI connects Canadian AI suppliers with SME buyers. AI Studio applies AI to BDC's own lending and service operations, where document collection, analysis, underwriting and servicing all carry costs.

According to BDC, 69% of Canadian SMEs are AI Novices, meaning they use AI rarely or not at all. Another 83% remain in the learning phase and only 5% qualify as AI Leaders with AI deeply integrated into operations and decisions. BDC's June 2026 AI and digital transformation research found that 30% of SMEs use generative AI and that users in its study were 24% more productive than nonusers. The 24% figure is an observed difference, not proof that AI caused the full gain.

Mission AI Targets the Gap Between Trying AI and Using It

Mission AI starts with business problems rather than software. BDC plans to identify common SME needs, find Canadian AI products that address them and test those products with panels of entrepreneurs. Examples include preparing quotes in minutes instead of hours, processing invoices, following up on sales opportunities and using AI agents for routine customer questions and bookings.

Dominic Gagnon, Managing Director of Mission AI, says “An entrepreneur should not have to become an AI expert to benefit from it.” BDC plans to use real deployments and measurable results to show other businesses which products work and how they can be implemented.

An SME owner still has to decide whether a product is credible, whether it works with existing systems, how much staff time implementation will consume and whether the expected gain justifies the cost. If the same Canadian product repeatedly cuts quoting time, invoice handling or administrative work across comparable businesses, the next buyer has operating proof instead of a vendor claim. BDC has not said Mission AI products will be free or offered at discounted prices, so affordability will still matter once a business moves beyond testing. Mission AI can therefore reach businesses that are much earlier in AI adoption than the firms eligible for BDC's larger technology financing programs.

BDC's C$500 million LIFT program is more selective. Its digital transformation and AI stream is available to Canadian businesses with at least C$1 million in annual revenue, demonstrated profitability, a strong financial foundation and solid credit history. A BDC Advisory Services digital plan is mandatory, and financing ranges from C$25,000 to C$2 million for eligible investments including data infrastructure, AI implementation, enterprise systems, cybersecurity, training and integration.

The 2026 Bank of England and FCA AI survey shows how adoption changes as firms move further into deployment. Some 86% of responding UK financial firms use AI. Among firms completing the short survey, 73% use AI and 64% report current or planned use in operations. These are regulated financial firms rather than Canadian SMEs, so the percentages are not directly comparable.

Only around 7% of the AI systems reported by UK firms were considered highly material. Integration into existing business processes remained a major constraint. High adoption did not remove the harder work of integration, controls and human oversight.

BDC's digital research puts more numbers beside Canada's AI Productivity Test Is Execution: 96% of Canadian SMEs use at least one digital technology, but only 23% have high or very high digital maturity. BDC estimates Canadian GDP could eventually be nearly 14%, or C$350 billion, higher if SMEs reached the digital maturity of the most advanced firms. The estimate covers digital maturity broadly rather than AI alone.

BDC Could Become a Distribution Channel for Canadian AI

Canadian AI companies need customers, implementation evidence and repeatable sales channels. Selling one small business at a time can be expensive because SME buyers are fragmented, contract values are smaller and each customer may need help deciding whether an unfamiliar product is worth adopting. BDC already has relationships on both sides of that transaction. Its AI portfolio includes companies working in robotics simulation, mining, regulatory intelligence, health and procurement, while its SME client base provides businesses where products can be tested against operating problems.

A product that performs well across several Mission AI businesses can produce more than a case study. The vendor can see which customer profile gets the strongest result, how long implementation takes, where adoption stalls and which operating result convinces a customer to keep paying. That information can lower customer acquisition costs and make subsequent sales easier.

BDC could become a validation and distribution layer between Canadian AI suppliers and the SME market. Successful vendors get operating evidence and customer access. SMEs get a lower risk way to evaluate products that may otherwise be difficult to compare. That also pushes BDC closer to work already performed by private AI advisors, software marketplaces, consultants and systems integrators. BDC describes its development role as market complementary, but Mission AI will source, validate and help scale selected AI products. If that process becomes an important route to SME customers, BDC will need to show that it is filling an adoption gap rather than displacing private firms that can already perform the same function.

BDC also has financial exposure to hundreds of Canadian AI companies while Mission AI will select products for use with participating SMEs. Clear vendor selection criteria, comparable performance measures and disclosure of any preference given to portfolio companies would help preserve confidence in the results. BDC has not yet published that level of operating detail.

AI Studio Targets SME Lending Friction Inside BDC

AI Studio is not a separate private company. Technology entrepreneur Raff Paquin will lead it. BDC cites his experience across Shopify, Lightspeed, Altitude Sports, Frank And Oak and Return Magic. His current LinkedIn profile identifies Panorama as his main affiliation rather than BDC.

Paquin says “We'll focus on tools that help our clients get answers faster, access financing sooner and spend less time on administration.” BDC says AI Studio is intended to reduce time to money while giving entrepreneurs better visibility and predictability during financing.

A BDC small business loan application begins with an eligibility check and information about the company, its leadership and shareholders. BDC may require financial information and supporting documents before completing its review, and applications remain subject to a full assessment of the business and its owners.

For loans up to C$100,000, BDC says applicants are more likely to qualify when the business has at least C$100,000 in annual revenue, a personal credit score of 600 or higher, current profits and at least 24 months in business. BDC advertises approval in less than 10 days when the required information is supplied. For loans above C$100,000 and up to C$350,000, the revenue guideline rises to C$250,000 and BDC advertises approval in less than 30 days.

AI Studio can reduce work surrounding the credit decision. Applications can be checked for missing information before an advisor opens the file. Documents can be classified and summarized. Financial data can be extracted without repeated manual entry. Inconsistencies can be identified earlier and routine status questions can be handled without another staff handoff. Advisors can spend more time assessing the borrower and less time assembling the file.

The Bank of England and FCA survey shows a similar pattern inside regulated financial firms. Operations and IT account for about 31% of reported AI systems and 80% of respondents use AI agents for decision support. Even including planned adoption, no more than 9% expect agents to approve or decline customer outcomes, initiate or block payments, execute trades or change limits and controls. Automation is moving deeper into the work around financial decisions while autonomy over consequential decisions remains limited.

BDC has not said AI Studio will approve loans, lower credit standards or change approval authority. Faster processing is not the same as easier credit. The fintech opportunity is lower origination and servicing costs, better information flow and less administrative friction without removing human judgment from credit decisions.

BDC has already been increasing its exposure to borrowers outside standard lending models. Its 2026 annual reporting says the bank holds a higher share of younger and higher risk businesses and is leaning further into its development mandate. BDC separately reported that the dollar value of transactions authorized to elevated risk businesses was 21% higher in fiscal 2026 than in fiscal 2020.

Its 2025 results also reported that businesses with less than C$2 million in annual sales represented 68% of its portfolio and that BDC had tripled the number of small loans since fiscal 2010. BDC said it had deliberately increased financing for unconventional business models and borrowers with weaker equivalent credit grades.

Smaller and less conventional borrowers can require more analysis even when the eventual loan is modest. A young technology company, a business with uneven cash flow or a firm without a long credit history may take more work to assess than an established borrower with predictable earnings. Better document processing can lower the cost per file, while better information can give an advisor more time to understand the business and the risks that matter.

BDC, Woveo, Peloton and Driven SME Financing also shows why small loan economics matter. Verification, underwriting and servicing costs do not fall in proportion to the loan size, which can make smaller financing expensive to deliver.

The strongest outcome would be better SME credit decisions, not just faster processing. If AI helps BDC assess smaller and less conventional businesses more accurately while lowering the cost of each file, AI Studio could improve both access to capital and lending efficiency.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Banking Friction Is Already Hitting Canada’s Defence SMEs

November 2, 2026 | NCFA Insight | Banking And Credit, SME Finance, Competition And Market Structure, Regulation And Policy

AI illustration of a Canadian defence SME reviewing financing and banking documents inside an advanced manufacturing facility with military drone production in the background

Banking Access Is Becoming a Defence Growth Constraint

Canadian defence SMEs are already running into banking and financing friction while governments put billions behind expanding the sector. A BDC NP Aerospace case study documents a London, Ontario defence company losing senior lender support and then being declined by several other banks. House of Commons defence financing testimony records companies being debanked because they operated in defence. BDC research also finds that 52% of defence businesses looking for financing expect access to be difficult.

Canada's Defence Industrial Strategy says small and medium sized businesses account for 92% of the defence industrial base and 40% of sector employment. Those companies still need accounts, payments, foreign exchange, operating credit and working capital to turn contracts into production.

A new FCA defence SME banking review shows the same problem in the UK. Banks can add longer onboarding, repeated information requests and more approval stages when defence customers are treated as higher risk. Defence isn't one risk, and treating it that way can make viable businesses harder to bank and finance.

Are Canadian Defence SMEs Being Debanked?

There are documented cases, although the evidence doesn't show widespread industry exclusion. During House of Commons testimony on defence financing, Kevin Reed of the Defence, Security and Resilience Bank Development Group was asked about entrepreneurs losing banking access because they operated in defence. He said the concern was “absolutely true” and told MPs, “Companies, just because they were in the defence category, were debanked.”

Reed said he knew multiple examples. One involved a dual use drone business with a £60 million British Ministry of Defence order that it couldn't fulfil because financing wasn't available. He also said Canadian and other global banks were building defence teams and adding sector expertise. Banks are responding, but companies have already lost business when access to finance didn't keep up.

A separate House Industry Committee defence report records an entrepreneur being refused banking services because of perceived defence sector risk. Not every financing problem comes from bank policy. Long procurement cycles and uneven revenue can make defence companies harder credits as well. The important difference is whether a lender is assessing those economics or simply reacting to the word defence.

Why Are Defence SMEs Struggling to Get Financing?

NP Aerospace shows how fast a lender decision can hit the business. After James Kempston acquired the London, Ontario armour and vehicle systems company, its senior lender withdrew support and several other banks declined to finance it. Kempston told BDC, “The senior lenders dropped us on day one.”

The company had technology and customers. What it didn't have was the credit it expected to use while payroll, inventory and production costs arrived ahead of revenue. Defence sales cycles can run long, which makes access to working capital especially important. BDC financing later helped stabilize NP Aerospace, which continued expanding its Canadian and international business.

BDC defence SME financing research suggests that pressure is much broader. Its 2026 study surveyed 642 business owners and decision makers, including 268 firms already active in defence. About half of defence SMEs expect to seek financing within 12 months. Growth leads the list of uses, while product development, working capital and project preparation each account for 31%.

The numbers rise quickly for firms with deeper defence exposure. 74% of defence heavy SMEs seeking financing want at least C$1 million and 39% want C$5 million or more. BDC also found that 58% are looking for equity. Two thirds of defence SMEs import, export or both, so foreign exchange and cross border payments are alongside credit as everyday operating needs.

BDC says lenders remain cautious about the sector's risk profile, concentrated customer bases, uneven cash flow and potential legal or reputational concerns. Weak credit histories and insufficient guarantees are cited less often as the main obstacle. Only about a quarter of defence heavy SMEs say their current financial institutions fully meet their needs.

Is Sector Risk Blocking Otherwise Viable Defence Deals?

It can. An Aird & Berlis review of Canadian defence lending says otherwise conventional middle market transactions can slow or fail for reasons unrelated to credit fundamentals. Regulatory complexity, uncertainty around enforcement and reputational concerns can all affect the decision.

Dual use businesses make blanket classifications even less useful. A cybersecurity company, aerospace supplier, data platform or advanced manufacturer may serve commercial customers and defence programs at the same time. Its actual exposure depends on what it sells, who buys it, where it goes and how it will be used.

The FCA found the same weakness in UK banking. Greg Sachrajda, the FCA's head of retail banking, put it plainly. “The theme that emerged was friction and delay rather than widespread exclusion.”, with enhanced due diligence and additional approval stages extending some decisions.

Banks also weren't always distinguishing sufficiently between software, logistics, maintenance, consulting, dual use technology and weapons production. The FCA wants firms to avoid blanket restrictions where a customer can be assessed more precisely. It also confirms that no FCA sustainability rule prevents UK financial institutions from serving lawful defence businesses.

Canadian lenders need enough defence knowledge to know where stronger controls belong. A cybersecurity supplier to government isn't automatically the same banking risk as a weapons exporter operating across sensitive jurisdictions.

What Did Crypto Teach Canada About Banking Access?

Canada has already watched another growth sector struggle with the difference between being lawful and being bankable. Crypto and digital asset companies spent years trying to secure stable banking relationships even as securities oversight, money laundering controls, custody standards and institutional infrastructure became more developed.

NCFA's fair banking analysis for Canada looked at the same tension from a different industry. Lawful companies can still lose access when a bank's view of the sector outweighs what the individual firm has done to control its risks. Crypto made that problem highly visible in Canada.

Defence and crypto aren't equivalent. Digital assets can raise distinct concerns around custody, transaction monitoring and financial crime. Defence can involve export controls, sanctions, geopolitical exposure, controlled goods and end use. The common issue is how much the sector label decides before the individual business is assessed.

A regulated digital asset platform with mature controls isn't the same risk as an unregulated offshore exchange. The same applies in defence. A company that has invested in governance, cybersecurity, export controls and financial crime systems should be easier to assess than one that hasn't. If those investments make little difference to banking access, firms get less commercial value from becoming better risks.

Why Isn't More Defence Funding Enough?

ISED Canadian defence industry data shows that revenues from smaller and medium sized businesses increased by more than C$700 million between 2022 and 2024 to over C$5.1 billion. The wider industry exported close to C$8 billion in 2024, with nearly 70% going to Five Eyes partners.

BDC has completed more than 100 defence and dual use transactions since launching its Defence Platform. The program has since grown to as much as C$6 billion in financing, investment and advisory support.

A Finance Canada DSR Bank statement says Canada and eight international partners plan to sign the founding agreement for the Defence, Security and Resilience Bank in Luxembourg on November 30, 2026. The bank will be headquartered in Canada, with a European hub in Luxembourg, and is expected to begin operations in 2027. Its mandate includes financing gaps faced by governments and defence companies, including SMEs, while drawing more commercial capital into the sector.

Canadian cities and provinces were already competing to host the DSR Bank institution earlier this year, and the financial infrastructure that could grow around it. A new defence bank can attract capital, expertise and deal flow. It still can't replace the operating bank relationships companies use every day.

A defence SME can have a government contract, new equity and a long term loan and still run short of room to operate. It needs credit between milestones. It needs to pay suppliers. It may need to convert currencies, move money across borders and carry inventory before the customer pays. Those aren't secondary services. They're part of how the contract gets delivered.

See: Where Canada’s SME Financing Process Still Breaks

Parliament has heard that some defence companies lost banking access because of the sector they were in. The FCA has now found that broad defence classifications are adding friction in the UK too. Put together, the problem is clear. Canada can increase the amount of money available to defence SMEs and still leave good companies constrained if the everyday banking system can't distinguish one defence business from another.

Some banks are already adapting. The FCA found UK institutions adding specialist relationship managers, dedicated defence teams, training and stronger oversight. Reed told Parliament that Canadian banks were building defence expertise too. That should make it easier to ask better questions, apply extra controls where they're actually needed and get viable customers through the system faster.

Takeaway

Canada needs sharper banking standards to grow its defence industry. Crypto showed how long an industry can remain difficult to bank after its compliance framework starts maturing. Defence SMEs now have stronger demand, billions in new capital and a multilateral defence bank on the way. If accounts, payments, foreign exchange and working capital don't keep pace, Canada can fund the expansion on paper and still make it harder for SMEs to deliver in practice.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Can Banks Block AI Agents From Accessing Your Accounts?

November 2, 2026 | NCFA Fintech Intelligence Question | Artificial Intelligence And Data, Payments Infrastructure And Money Movement, Competition And Market Structure

NCFA Intelligence that shapes what's next

Who Decides Which AI Can Access Your Bank Account?

Last Updated: November 2, 2026
Status: Emerging
Organizations: RBC, TD, BMO, CIBC, Scotiabank, Questrade, Visa, Finance Canada, Payments Canada

Yes. A Canadian bank can block a personal AI agent from entering its protected banking systems even when the customer wants to use it. Customer consent doesn't give outside software automatic access to the bank's login, website or app. RBC confirmed direct restrictions on October 28. TD, BMO, CIBC and Scotiabank have also described restrictions, although their policies differ.

That doesn't mean banks are shutting AI out of finance. Questrade already offers controlled AI connections to brokerage accounts, while Visa is testing agent initiated payments with five major Canadian banks. An agent using a customer's login is not the same as an institution granting that agent specific authority. Canada's consumer directed banking framework could widen approved data access, but it does not automatically authorize AI agents to move money.

Strategic Takeaway
The opportunity is to give customers control over what their AI agents can access and do, without compromising bank security. Customers want to choose useful AI tools, while banks need to identify those tools, control their permissions and know who approved a transaction. Firms that make those connections practical could become important infrastructure providers as Canadian financial data sharing develops.

Market Evidence

Click each item to expand

1. RBC Restricts Direct Personal Agent Access October 28, 2026, Canada ⓘ

RBC says direct access by third party personal AI agents to its authenticated digital properties is blocked. It also warns that existing connections will stop working. The restriction concerns an outside agent entering protected banking services.

A customer granting permission to an AI assistant is not the same as RBC approving that assistant as a trusted system participant.

2. Canadian Banks Draw Different Access Boundaries October 28, 2026, Canada ⓘ

TD, BMO, CIBC and Scotiabank have described restrictions on outside agents accessing protected banking channels. National Bank has discussed monitoring the technology rather than announcing an equivalent block. The policies should not be presented as identical.

The distinction is between uncontrolled use of a customer session and an approved integration with defined permissions.

3. Questrade Connects AI Without Sharing Passwords 2026, Canada ⓘ

Customers authenticate directly with Questrade to authorize supported AI tools. Read permissions can expose balances, positions and account activity. Trading access is separate, and the customer reviews and approves an order before submission through the MCP connection.

This operating example separates access to information from authority to execute an investment order.

4. Visa Tests Agent Payments With Five Canadian Banks May 5, 2026, Canada ⓘ

Visa names BMO, CIBC, RBC, Scotiabank and TD as early Canadian participants in Agentic Ready. The program tests agent identity, tokenization, authentication and transaction authorization through payment infrastructure.

Banks can restrict unknown agents from online banking while testing approved transaction channels. The pilot is not a general consumer access entitlement.

5. TD Applies Agentic AI Inside Mortgage Operations October 13, 2026, Canada ⓘ

TD says a mortgage process that previously averaged about 15 hours can be completed in less than three minutes using its controlled agentic workflow. This is a bank operated use case, not outside customer agent access.

The distinction reinforces that institutional use of AI and third party access policy are separate decisions.

6. Consumer Trust Puts Access Controls in Focus October 2026, United States and Canada ⓘ

Forrester describes consumer distrust and security concerns around AI access to financial information. The article should not treat those survey findings as a vote against all agent services.

Trust depends on whether customers understand what the agent can see, what it can do and how to withdraw authority.

Policy Evidence

Click each item to expand

1. Canada Designs Permissioned Financial Data Sharing 2025 to 2026, Canada ⓘ

Finance Canada estimates that roughly nine million Canadians use credential based financial data sharing. The planned framework covers participant accreditation, consent and secure data exchange.

The initial framework concerns data access. It does not give every personal AI agent a right to enter a bank or initiate a payment.

2. Payments Canada Calls for Rules on Transaction Initiation October 26, 2026, Canada ⓘ

Payments Canada calls for clarity on liability, fraud controls, accountability and dispute resolution as Canada considers write access. Its recommendations distinguish data sharing from instructions that move funds.

The question of which agents can act, and under whose authority, remains open beyond the initial data access framework.

What Are Canadian Banks Actually Blocking?

RBC's October 28 notice is explicit. The bank blocks third party personal AI agents from direct access to authenticated RBC digital properties, including online banking. It says existing agent connections will stop working. RBC cites risks involving credentials, fraud and consumer harm. The restriction concerns how an outside agent enters protected services, not whether RBC can use AI within its own operations.

See: NCFA Weekly Fintech Intelligence Aug 22–28, 2026

TD says it blocks third party personal AI agents from authenticated banking information while it develops appropriate safeguards. CIBC says it does not support personal agents directly opening or accessing accounts. Scotiabank says it will limit access by outside agents. Statements reported on October 28 document these differences. These are not identical policies, and they do not establish an industry wide ban on approved AI integrations.

A customer may trust an AI assistant to compare fees, monitor cash flow or prepare a payment. The bank still needs to know whether the software is entitled to enter its systems. A valid customer password doesn't answer that question. It identifies the account holder's credentials, not necessarily the outside program using them.

Can an AI Agent Access Your Account Without Your Password?

Yes, when the institution provides an approved connection. With credential access, outside software uses the customer's login or authenticated session. With delegated access, the customer signs in directly with the institution and grants a separate connection limited permissions. The institution can then control what the outside service sees or does, and the customer can revoke future access.

Questrade's AI connection offers a working Canadian example. Customers can connect supported assistants through its Model Context Protocol server. They authenticate on Questrade's own login page, so the AI agent doesn't receive the account password. The connection can read balances, positions, orders and account activity. Questrade says order and activity history available through the connection covers the previous 90 days. Trading permissions are granted separately.

Under Questrade’s MCP trading connection, an agent can draft an order, but the customer must approve it before submission. The agent cannot independently place, change or cancel an order through that connection. Questrade also offers Flows, which create rules for trades and alerts. Its current MCP guide says customers review and approve each order before submission. Revoking an AI connection stops future access but does not retrieve data already shared with the AI provider. Read permission, trade approval and standing automation authority are three different controls.

Can an AI Agent Make Payments or Trade for You?

Reading an account and moving money are different powers. An assistant that summarizes a balance does not automatically have authority to transfer $5,000. Questrade lets users grant read access separately from trade permission. Its MCP connection requires approval for each drafted trade. Its separate Flows functionality supports customer defined trading rules, with order approvals described in its current MCP guide. Investors need to understand which permission they are granting, not just which AI assistant they are connecting.

Payments are developing through another route. On May 5, Visa announced its Canadian Agentic Ready program to test payments initiated by AI agents in controlled environments. Its five early Canadian issuing partners are BMO, CIBC, RBC, Scotiabank and TD. The tests cover card enrollment, tokenization, authentication and transaction authorization using live cards and merchants.

Some of those same banks are restricting outside agents from their ordinary digital banking channels. There's no inconsistency in the operating model. A bank can refuse an unknown program's attempt to enter a customer's online banking session while testing a payment process that identifies the agent and validates each transaction. Visa's program is a test environment, however, not proof that every customer can already instruct a general purpose AI assistant to make payments through those banks.

Will Open Banking Let You Choose Your Own AI Agent?

Not by itself. Canada’s consumer directed banking framework is being implemented to let people share financial information with approved providers through secure connections. It does not give any personal AI agent an unrestricted right to enter a bank account. Nor does the initial data sharing phase authorize an agent to make payments or trades. Finance Canada said in June that proposed regulations would come into force in stages, beginning with accreditation. The Bank of Canada is developing oversight for participating firms.

Finance Canada estimates that approximately nine million Canadians currently share financial data through screen scraping. The framework aims to replace credential sharing with authorized API connections. Its published design includes accreditation, consent, data security and rules for liability when data is shared. The Financial Consumer Agency of Canada describes how customers would select what information to share, with whom and for how long.

When Open Banking Arrives, Can Banks Still Block Your Agent?

Yes, if the agent is trying to use an unsupported access route or is not an approved participant. Under the planned framework, participating banks will have data sharing obligations to eligible participants acting on customer instructions. That's different from a duty to accept any software the customer chooses. An AI provider might seek accreditation, work through an accredited service provider or build an approved integration. Whether a particular AI product qualifies will depend on the final rules, its role and the permissions requested. An approved connection could give the customer a practical route to use an AI service without sharing banking credentials.

See:  Snaplii Puts AI Agent Spending in a Separate Wallet

Will a customer be able to authorize an AI agent directly, or will access remain limited to approved firms and their controlled interfaces? Canada's framework provides a path for regulated data sharing, but the answer for a particular general purpose AI agent is not settled simply by the framework's arrival. NCFA's consumer directed finance intelligence follows the wider competition and implementation issues.

What Changes When Agents Can Initiate Payments?

Finance Canada identifies write access as a later policy phase. That would permit actions from an account, potentially including payments and product changes, rather than just reading information. On October 26, 2026, Payments Canada called for clear security, fraud, liability, recourse and dispute processes before moving from read access to payment initiation. It also recommended interoperability with Canadian payment infrastructure. This is a live implementation question, not a capability that the first phase already provides.

An agent able to initiate a payment would need authority that's more precise than permission to view a balance. A bank or payment provider may need to recognize the agent separately from its customer, verify the instruction, apply amount or recipient limits and preserve evidence of approval. A standing instruction to pay recurring suppliers poses different risks from an agent proposing a single purchase. Firms that can support those cases could offer customers more choice without asking banks to accept unverified software inside their existing login sessions.

Who Pays When an AI Agent Makes the Wrong Move?

There isn't one universal answer. Responsibility depends on the type of action, the customer's approval, the provider's contract, the institution's terms and the facts of the loss. An unauthorized account takeover is different from a customer approving a trade prepared from an AI assistant's mistaken analysis. The bank may have executed the instruction correctly even if the agent misunderstood what the customer wanted.

Innovation, Science and Economic Development Canada highlighted the problem in its AI transparency consultation. Its example involves an agent ordering twelve packages instead of one package containing twelve items. The department identifies uncertainty over responsibility among the consumer, the agent operator and the developer. The financial equivalent could be a wrong payment recipient, amount or investment order.

Questrade says customers remain responsible for the trades they approve and for their use of outside AI tools. Its API access agreement addresses third party providers, data sharing and trading risks. Contractual terms can allocate responsibilities, but they don't settle every legal dispute or override applicable consumer protections. Consent to connect an agent is not necessarily consent to a particular payment or trade.

Why Are Banks Building AI While Restricting Outside Agents?

Banks already see operational value in agents they can supervise. On October 13, TD reported expanded agentic AI use in mortgage operations. Its earlier mortgage review workflow reduced average processing time from 15 hours to less than three minutes, according to the bank. Employees still review outputs and apply judgment. The productivity gain comes from a controlled internal process, not an outside assistant signing into a customer's banking account.

Consumer confidence also puts a commercial limit on unrestricted automation. Forrester reported that 50% of the US and Canadian consumers it surveyed didn't trust AI with sensitive financial information, while 40% expressed concerns about data security and confidentiality. They support a market in which customers may want AI help with research and account monitoring well before they trust an agent to move money independently.

Who Controls the Agent, the Customer or the Bank?

Both have a role, but they control different things. The customer decides which service they want to use and what they intend it to do. The institution decides which access routes it supports and which instructions it will accept.

An AI provider controls its software and how it handles information under its own agreements. When those responsibilities aren't clearly separated, a simple request such as “pay this bill” can become difficult to authorize, monitor or dispute.

A competitive market for delegated financial access could develop around agent identity, permission management, payment limits, transaction approvals, audit records and rapid revocation. Those services would be valuable to banks that need control, fintechs that need dependable integrations and AI developers that need a trusted way to act for customers. The opportunity for banks and fintechs is to let customers decide what their AI agents can access, what actions they can take and when approval is required. That gives customers more useful services while keeping control over their money.

See: Razorpay Agent Studio Targets Payment Operations

For now, consumers should use connections explicitly supported by their financial institution, avoid giving banking passwords to outside agents, check whether permissions cover reading or transactions, and understand how to revoke access. Investors using Questrade's model should review each order preview rather than assuming the agent's analysis is correct. Permission to see an account is not permission to spend its balance.

Do you agree the evidence supports this answer?

Click Agree or Disagree. Your vote is recorded anonymously and aggregate totals tracked.

Explore Trending Questions


NCFA CanadaThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA works with global stakeholders across fintech, alternative finance, crowdfunding, payments, digital assets, artificial intelligence and regulatory innovation. Visit NCFA Canada to learn more.

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights

NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

NCFA Weekly Fintech Intelligence Oct 24-Oct 30, 2026

Oct 24, 2026 | Last Updated Nov 4, 2026 | NCFA Fintech Whisperer | Regulation And Policy, Capital Markets Infrastructure And Funding, Artificial Intelligence And Data, Cybersecurity Fraud And Financial Crime, Competition And Market Structure, Cross Border Payments And FX, Wealthtech Investing And Trading, Digital Banking And BaaS, Digital Assets Blockchain And Tokenization, Payments Infrastructure And Money Movement, Risk Compliance And Regtech, Sustainable Finance ESG And Financial Inclusion

Fintech market intelligence visualization

Image: Freepik

NCFA Fintech Whisperer tracks weekly fintech market intelligence that changes how financial markets operate. Coverage spans NCFA's full financial innovation taxonomy, with Canada first and global developments included when they materially affect rules, market access, competition, capital, technology adoption, distribution, risk or execution. We focus on changes that founders, investors, financial institutions, regulators and operators may need to act on, not simply what's making headlines. This page is updated throughout the week as material developments emerge, then closed and archived before the next weekly window begins.

Missed a prior week's Fintech Whisperer? Browse December 6 to 12, 2025, December 13 to 19, 2025, January 1 to 9, 2026, January 10 to 16, 2026, January 17 to 23, 2026, January 24 to 30, 2026, January 31 to February 6, 2026, February 7 to 13, 2026, February 14 to 20, 2026, February 21 to 27, 2026, February 28 to March 6, 2026, March 7 to March 13, 2026, March 14 to March 20, 2026, March 21 to March 27, 2026, March 28 to April 3, 2026, April 4 to 10, 2026, April 11 to 17, 2026, April 18 to 24, 2026, April 25 to May 1, 2026, May 2 to 8, 2026, May 9 to 15, 2026, May 16 to 22, 2026, May 23 to 29, 2026, May 30 to June 5, 2026, June 6 to June 12, 2026, June 13 to June 19, 2026, June 20 to June 26, 2026, June 27 to July 3, 2026, July 4 to July 10, 2026, July 11 to July 17, 2026, July 18 to July 24, 2026, July 25 to July 31, 2026, August 1 to August 7, 2026, August 8 to August 14, 2026, August 15 to August 21, 2026, August 22 to August 28, 2026, August 29 to September 4, 2026, September 5 to September 11, 2026, September 12 to September 18, 2026, September 19 to September 25, 2026, September 26 to October 2, 2026, October 3 to October 9, 2026, October 10 to October 16, 2026, October 17 to October 23, 2026.

Weekly Fintech Market Intelligence Oct 24 to Oct 30, 2026

Regulation And Policy

CIRO Proposes a 60 Day National Complaint Standard

October 29, 2026, Canada
  • CIRO proposed cutting the standard deadline for dealer complaint responses from 90 days to 60 days.
  • Dealers could use up to 30 additional days for complex, exceptional or externally delayed matters, while still completing a fair and documented investigation.
  • The proposal would apply across investment dealers and mutual fund dealers. Comments close January 27, 2027.

A shorter national deadline changes staffing, escalation and evidence requirements for dealer complaint teams. Firms that still rely on manual handoffs will have less room for delay. Compliance vendors also get a clearer design target for case routing, document collection and management reporting.

FCA Forces HTX Out of Active UK Business

October 29, 2026, United Kingdom
  • The FCA secured High Court undertakings that stop HTX from knowingly promoting cryptoasset services unlawfully to UK consumers.
  • HTX is no longer active in the UK. Consumers cannot make new deposits, new UK users cannot register and the exchange cannot target or actively seek UK customers.
  • The settlement follows FCA legal action launched in October 2025 after HTX repeatedly failed to engage over UK financial promotion rules.

The FCA has converted a promotions case into a practical market exit. Offshore location doesn't protect a crypto platform from UK conduct rules when it still reaches UK customers. Exchanges, affiliates and distribution partners need controls that can prove where promotions land and who can still open or fund an account.

Bank of England Opens a Route for Tokenized CCP Collateral

October 29, 2026, United Kingdom
  • The Bank of England opened a consultation on how central counterparties can seek approval to accept tokenized versions of collateral that is already eligible under the proposed UK CCP Rulebook.
  • The draft supervisory statement does not create a separate regime or new collateral requirements. CCPs still have to show that tokenized collateral can be valued, transferred and realized when needed, including during stress.
  • The Bank is also asking whether the same supervisory approach could support future use of tokenized money market fund units, gold and stablecoins. Comments close February 12, 2027.

Tokenized collateral now has a defined supervisory route into central clearing. CCPs can design against that route, but approval will still turn on liquidity, custody, legal certainty and access during stress. That connects directly with NCFA’s work on tokenized assets becoming market infrastructure.

FCA Sets the Economics for UK Consolidated Tape Data

October 29, 2026, United Kingdom
  • The Financial Conduct Authority opened CP26/39 on how the future UK equity consolidated tape provider should share income with firms that contribute market data.
  • The FCA also proposes enhanced operational incident reporting for all consolidated tape providers, extending resilience requirements beyond the commercial terms of the equity tape.
  • The consultation closes December 17, 2026. The FCA plans to confirm the income sharing approach in early 2027 and expects the equity tape to begin operating in 2027 or early 2028.

The UK equity tape now has a clearer business model and a harder resilience test. Trading venues and prospective tape operators need to price income sharing, service continuity and incident reporting together. Data coverage alone won’t win this market.

SEBI and Bank of England Formalize CCP Oversight Cooperation

October 28, 2026, India and United Kingdom
  • SEBI and the Bank of England signed a memorandum covering cooperation and information exchange for clearing corporations recognized by SEBI.
  • The agreement gives the Bank a formal basis to rely on SEBI's regulatory and supervisory work while applying its own responsibility for UK financial stability.
  • The arrangement covers cooperation on central counterparties under each authority's laws and is intended to support international clearing activity across the two jurisdictions.

Cross border clearing works only when supervisors can rely on each other. This agreement gives Indian clearing corporations a clearer route into UK oversight while preserving the Bank of England’s financial stability role. The next test is whether recognition and access become easier in practice.

SFC Publishes Final Guidance for Nov 1 Retail Fund Rules

October 28, 2026, Hong Kong
  • Hong Kong's Securities and Futures Commission published implementation guidance for the revised Code on Unit Trusts and Mutual Funds, which takes effect November 1, 2026.
  • The package includes a supplemental circular on liquidity risk management and updated guidance for the Fund Authorisation Simple Track.
  • The SFC also refreshed frequently asked questions covering the revised retail fund rules and authorization of UCITS funds.

The implementation window is effectively over. Fund managers and distributors now need their liquidity controls, derivatives processes and authorization workflows ready for the November 1 rules. The value of the guidance is operational certainty before the new regime goes live.

Canada Sets Out Stablecoin Issuer Rules

October 24, 2026, Canada
  • Canada published proposed Stablecoin Regulations that would bring the Stablecoin Act into operation and require covered issuers other than banks to register with the Bank of Canada.
  • Reserve assets must equal or exceed outstanding stablecoins at the end of each day. Eligible reserves are limited to high quality liquid assets, must be segregated and bankruptcy remote, and must be held with qualified custodians formed in Canada.
  • Issuers would have to redeem at par within three business days and couldn't charge more than 1%. Interest or yield tied to holding a stablecoin would be prohibited, while transaction based rewards would remain permitted. Comments close December 23, 2026, with implementation targeted for fall 2027.

Canada now has enough detail for firms to start building against the rulebook rather than policy direction. Issuers can model reserve composition, custody, redemption costs, reward structures and Bank of Canada registration now. Payment firms also need to map where stablecoin activity pulls them into RPAA oversight. NCFA's stablecoin regulatory framework tracks those layers together.

Capital Markets Infrastructure And Funding

Chainlink Makes Traditional Asset Pricing Available 24/7

October 29, 2026, Global
  • Chainlink 24/7 is live with continuous market data for equities, commodities and other traditional assets across trading sessions, weekends and holidays.
  • The feeds support tokenized assets, perpetual futures, prediction markets and lending markets that need collateral values after conventional exchanges close.
  • Aave is the launch partner, giving the service immediate distribution inside one of the largest onchain lending platforms.

Tokenized markets can't run continuously on stale prices. Chainlink is closing that gap with a single pricing reference that stays available when the underlying exchange is shut. The commercial test is whether continuous data supports deeper weekend liquidity and broader use of traditional assets as onchain collateral.

Clearstream Wins Control Agent Authorization for Tokenized Funds

October 29, 2026, Luxembourg
  • Luxembourg's CSSF authorized Clearstream to act as a Control Agent under Blockchain Law IV, giving it a regulated role in the issuance and oversight of tokenized fund shares.
  • Asset managers can tokenize selected share classes inside existing UCITS or alternative investment fund structures while keeping established transfer agents, administrators, custodians and depositaries in place.
  • The Control Agent maintains the central issuance account on distributed ledger infrastructure, tracks the holding chain and reconciles issued volume against investor positions. Clearstream says its integrated DLT service remains subject to completion of CSSF regulatory processes.

Fund managers can now add a regulated digital issuance layer without replacing the service providers they already use. That lowers the cost of testing tokenized share classes and strengthens the case for tokenized assets as market infrastructure. Live issuance volume and distributor adoption are the next proof points.

Thailand Proposes Crypto Derivatives Licences for Existing Exchanges

October 29, 2026, Thailand
  • Thailand's Securities and Exchange Commission opened consultation on eight draft regulatory notifications covering crypto derivatives licensing, exchanges, clearing houses and intermediaries under the country's Derivatives Act.
  • Existing licensed digital asset businesses could apply to offer derivatives without establishing separate companies. The proposals also revise financial reporting requirements for derivatives exchanges and clearing houses.
  • The proposals follow an earlier consultation from April to May 2026. Comments close November 28, 2026. The new licensing arrangements are not yet in effect.

Thailand is working to give crypto exchanges a route into regulated derivatives trading without forcing them to build separate businesses. That could lower expansion costs while bringing trading, clearing and risk controls under closer supervision. Combined with Thailand's recently finalized crypto ETF rules, the proposals give exchanges and investment firms more ways to serve investors. The next test is whether the final licensing requirements make commercial entry practical.

Goldman Sachs Joins EquiLend 1Source

October 28, 2026, United States and Canada
  • Goldman Sachs is now using EquiLend 1Source, the distributed ledger platform built to reduce breaks and reconciliation work in securities finance.
  • Goldman joins BNY and National Bank of Canada. BNY and National Bank began transmitting live transactions onto the shared ledger in October 2025.
  • EquiLend says additional counterparties are adopting the platform, which uses one shared transaction record across securities lending and financing workflows.

A shared ledger becomes more useful as both lenders and large borrowers join it. Goldman adds another major institutional node to 1Source and strengthens the case for replacing bilateral reconciliation with a common record. The next proof point is transaction volume and how quickly more counterparties stop running parallel comparison processes.

DTCC Tokenization Service Goes Live With 20 DTC Participants

October 28, 2026, United States and Global
  • DTCC launched the Tokenization Service through The Depository Trust Company, allowing eligible users to create tokenized representations of securities held at DTC and convert between traditional and tokenized forms.
  • DTC holds more than $114 trillion in assets under custody. Twenty DTC participants have signed agreements to access the service, including Bank of America, Barclays, Citi, Fidelity, J.P. Morgan, Morgan Stanley, State Street and UBS.
  • The service currently connects to Canton Network and DTCC's private Besu network. DTCC says additional blockchain networks will be added in 2027 after earlier limited production trades with more than 30 firms.

Tokenization has moved from DTCC’s roadmap into live depository infrastructure. Banks and asset managers can now test whether tokenized positions improve collateral use, liquidity or settlement while keeping the underlying DTC rights intact. NCFA’s crypto custody intelligence tracks the same shift toward regulated tokenized market infrastructure.

HKEX Extends Its Fund Platform Across Distribution and Settlement

October 28, 2026, Hong Kong
  • HKEX launched Platform and Nominee Services on its Integrated Fund Platform, adding master distribution, nominee and administration functions to the existing fund repository and order routing services.
  • The expanded platform supports onboarding, order processing, settlement, payments, reconciliation and reporting across distributors, fund managers and transfer agents.
  • The participant base has grown from 33 firms when order routing launched in July 2025 to more than 60 distributors, fund houses and transfer agents.

HKEX is pulling more fund distribution work onto shared infrastructure. That can reduce duplicated integrations across managers, distributors and transfer agents. The commercial test is whether the larger network lowers servicing cost and makes new fund distribution easier.

Archax Brings 24/7 Euro Government Bill Exposure Onchain

October 28, 2026, European Union
  • Archax launched €GOVY on Stellar, giving eligible institutions continuous tokenized exposure to short dated euro area government debt.
  • The product automatically reinvests proceeds as underlying bills mature, so investors do not have to redeem and reinvest at each maturity.
  • Archax distributes €GOVY to EU clients through Archax Markets Europe, which received Spanish authorization in September to provide execution, placement, custody and related investment services.

Archax is extending tokenized government debt from issuance into continuous institutional access. The firm has already demonstrated onchain delivery versus payment with tokenized cash. Now the question is whether euro investors use the product for treasury, collateral and liquidity management.

Mirae Completes Tokenized Funding Note Issuance on Solana

October 28, 2026, Hong Kong
  • Mirae Asset Securities completed an institutional tokenized funding note issuance on Solana under its US$3 billion Guaranteed Structured Note Programme.
  • The transaction used US dollar six month floating rate notes issued in Hong Kong. Mirae handled token issuance, payments and lifecycle management.
  • Singapore regulated Marketnode acted as an authorized distributor, giving eligible institutional investors a route to hold the notes in tokenized form on public blockchain infrastructure.

Public blockchain infrastructure is moving into institutional note issuance with regulated distribution attached. Mirae controls the instrument lifecycle while Marketnode provides the investor route. That fits the broader shift NCFA tracks in tokenized capital markets infrastructure.

Pontoro Launches Live Liquidity Pool for Private Markets

October 28, 2026, United States and United Kingdom
  • Pontoro launched the first live deployment of its Automated Liquidity Pool on Stellar with Archax and the Stellar Development Foundation.
  • The pool combines liquid money market assets with private market fund interests and uses rules based pricing as liquidity is consumed.
  • Pool interests are issued as permissioned onchain tokens for approved investors, while redemptions draw first from the liquid sleeve and can be constrained when liquidity is exhausted.

Private market tokenization needs usable exits, not just digital ownership records. Pontoro is testing that problem with a live pool that combines liquid assets and private fund interests. NCFA has tracked the same liquidity constraint in tokenized asset liquidity infrastructure.

Janus Henderson Launches Blockchain Native Nasdaq 100 Fund

October 27, 2026, Global
  • Janus Henderson and Centrifuge launched JQQQ, a blockchain native fund designed to track the Nasdaq 100 Index through an issuer sponsored investment strategy.
  • The fund is built for issuance and operation on public blockchain infrastructure and uses Centrifuge technology for onchain fund administration and distribution.
  • Janus Henderson says its onchain platform now includes more than $1 billion in institutional strategies across U.S. Treasuries, structured credit and public equities.

This pushes onchain funds beyond cash and credit into public equities. Janus Henderson already has more than $1 billion in onchain strategies, so distribution and servicing scale now matter more than proof of concept. The larger question is how quickly tokenized funds become normal market infrastructure.

Chainlink Connects Qualified Custody to DeFi Lending

October 26, 2026, United States and Global
  • Chainlink CustodySync lets qualified custodians give institutional clients access to DeFi lending while the underlying assets remain in custody.
  • Anchorage Digital is the launch partner, connecting federally chartered digital asset custody with onchain borrowing workflows.
  • Chainlink estimates roughly $700 billion in digital assets are held in custody, compared with about $250 trillion across traditional custody.

Institutional DeFi has had a custody problem. Institutions often need assets to stay inside qualified custody, while lending protocols expect collateral to interact with onchain contracts. CustodySync creates a bridge between those control models. Usage will show whether that bridge can turn idle custodied assets into repeatable financing activity.

Hong Kong Opens 24/7 Trading for Tokenized Public Funds

October 26, 2026, Hong Kong
  • Hong Kong's Securities and Futures Commission approved secondary trading of two existing SFC authorized ChinaAMC tokenized money market funds on an SFC licensed virtual asset trading platform. Trading began October 26 and runs around the clock.
  • The funds can now trade between investors in a secondary market instead of relying only on conventional subscriptions and redemptions at net asset value.
  • The SFC requires fair pricing controls, liquidity provision, investor disclosures and market making arrangements. Platforms must also show indicative NAV data and warn investors when execution prices materially diverge from it.

The commercial test for tokenized funds just changed. The question is no longer whether a regulated fund can be put on chain. It's whether investors will use continuous liquidity when the underlying portfolio still operates on conventional market hours. Spreads, market maker depth and off hours price gaps now become the metrics worth watching.

Malaysia Tightens the Gate for Electronic Trading Platforms

October 26, 2026, Malaysia
  • Bank Negara Malaysia issued a revised Electronic Trading Platforms Framework covering platform services in wholesale money and foreign exchange markets.
  • Eligible operators must obtain BNM approval before offering electronic trading platform services in Malaysia. Services involving instruments outside the framework still require approvals from the relevant authorities where applicable.
  • The revised rules replace the original 2019 framework and take effect November 1, 2026.

For venue operators, this is an access issue, not a documentation exercise. Firms serving Malaysian institutional flows need to know whether their platform, instruments and client model fall inside the approval perimeter before November 1. Banks and liquidity providers should be checking the venues they rely on at the same time.

Europe Puts a €1 Billion Digital Bond on Live Pontes Rails

October 26, 2026, Euro Area
  • The European Stability Mechanism priced its first digitally native benchmark bond at €1 billion. Deutsche Bundesbank acts as issuing and paying agent, while Clearstream provides the digital market infrastructure.
  • Clearstream creates and manages the bond digitally and runs delivery versus payment settlement on its D7 DLT platform. The cash leg settles through Pontes directly in TARGET using central bank money.
  • The bond is expected to list on the Luxembourg Stock Exchange and qualify for Eurosystem collateral use. Clearstream also expects eligibility at Eurex Clearing and inclusion in general collateral baskets at Eurex Repo.

This is where digital bond settlement on Pontes starts competing on infrastructure, not demos. The value is interoperability with markets institutions already use. Banks, custodians and issuers can now compare digital issuance with conventional settlement on liquidity, collateral mobility, operating cost and execution time.

Aviva Opens Tokenized Access to £22 Billion Sterling Fund

October 26, 2026, United Kingdom
  • Aviva Investors launched a tokenized share class of its Sterling Liquidity Fund on the XRP Ledger. The existing fund has about £22 billion in assets under management.
  • Aviva invested £50 million in the new share class, taking investment across its two tokenized share classes above £86 million. The fund is an Ireland domiciled UCITS money market fund and uses a digital twin model.
  • Eligible investors can access the share class with digital wallets. BNY is the fund custodian, Komainu supports digital asset custody and Licuido provides tokenization infrastructure.

This is distribution infrastructure attached to a large existing fund, not a sandbox asset. The Schroders tokenized money market fund approval provides another regulated institutional benchmark. The next proof point is whether tokenized access changes subscriptions, settlement, collateral use or investor reach. Fund managers should watch where wallet based access removes friction and where the conventional fund stack still does the heavy lifting.

Artificial Intelligence And Data

Powens Uses AI Agents to Build and Repair Open Finance Connections

October 28, 2026, Europe
  • Powens launched an internal AI system that builds new Open Finance connectors and repairs existing connections across an infrastructure estate of more than 1,800 connectors.
  • The system has already delivered 12 new connectors. Powens says typical repairs that could take up to two days now take about 10 to 15 minutes.
  • Every proposed connector or fix still requires engineer approval before it goes live. Powens reports that 50% of proposed fixes are currently approved directly by its engineers.

AI is now changing the cost structure behind open finance connectivity. Powens is using agents inside production engineering while keeping human approval before release. For operators, the useful benchmark is whether faster connector maintenance improves uptime and coverage without weakening control evidence. NCFA’s open banking intelligence tracks those operating requirements.

Casap Expands Agentic AI Across Financial Operations

October 28, 2026, United States
  • Casap raised a US$56 million Series B led by Base10 Partners, bringing total funding to US$90 million, while expanding its agentic AI platform beyond fraud and disputes into collections, claims and other complex financial operations.
  • The company says it now serves more than 100 banks, credit unions, fintechs and processors and grew revenue 10 times since its Series A. Those figures are company reported.
  • Casap says its agents resolve 73% of dispute cases without manual intervention, with human teams handling exceptions and higher risk decisions. The company has not published independently audited performance data.

The more important signal is operating expansion, not the financing round. Casap is moving agentic automation from one regulated workflow into several functions where decisions affect customers, losses and recovery. Financial institutions adopting similar systems need clear authority boundaries, exception handling and evidence for every automated action as AI agent financial authorization and security becomes an operating control.

RBC Blocks Personal AI Agents From Direct Online Banking Access

October 27, 2026, Canada
  • RBC says it has blocked third party personal AI agents from direct access to authenticated RBC digital properties, including online banking.
  • The bank says personal agents may need account credentials or stored passwords to act for users and points to fraud, consumer harm and wider financial system risk as reasons for the restriction.
  • Canadian Press reporting on October 29 says BMO and TD also confirmed they do not permit direct personal AI agent access, while CIBC does not support it and Scotiabank plans to limit access.

Banks are setting the access rules before personal AI agents become a normal financial interface. Canada’s consumer driven banking system is built around permissioned data sharing, while agent access adds delegated authority and transaction control. Authentication, consent and liability now need a workable model for agents as well as people.

Cybersecurity Fraud And Financial Crime

Binance Reports $6.3 Billion Security Incident

October 30, 2026, Global
  • Binance estimates the incident affected approximately $6.3 billion and says blockchain partners have frozen about $3 billion onchain.
  • Its preliminary investigation points to a compromised DevOps engineer laptop that allowed an attacker to reach a service container and submit unauthorized withdrawal transactions. Binance says it has found no evidence that wallet private keys were exposed.
  • Binance temporarily suspended withdrawals during security checks and says the SAFU Fund and company funds will cover losses. A detailed technical review and updated proof of reserves are still pending.

The scale makes endpoint access, service permissions and withdrawal authorization a board level control issue for digital asset platforms. The final technical account will matter more than early attack theories. Exchanges, custodians and infrastructure vendors should compare privileged access, transaction approval and emergency freeze controls against the failure path Binance ultimately confirms.

NIST Sets the Migration Roadmap for Post Quantum Cryptography

October 27, 2026, United States
  • NIST finalized IR 8547, its official roadmap for moving from quantum vulnerable cryptography to post quantum standards.
  • Federal high value and high impact systems must prioritize migration, with key establishment targeted for 2030 and digital signatures for 2031. The broader federal migration target remains 2035.
  • The report identifies vulnerable algorithms, replacement standards and migration work across products, services and the wider cryptographic supply chain.

Quantum migration now has federal target dates, which turns a distant security issue into a planning deadline. Financial firms need cryptographic inventories, vendor commitments and replacement schedules before 2030 pressure arrives. NCFA’s post quantum planning analysis explains why the work has to start well before vulnerable systems fail.

Competition And Market Structure

South Korea Fines Google and Apple KRW 63.71B Over App Payments

October 28, 2026, South Korea
  • South Korea's Korea Media and Communications Commission fined Google KRW 42.9 billion and Apple KRW 20.81 billion for restricting developers' payment choices and other app market violations.
  • Both platforms restricted external payment methods and charged developers a 26% commission when they used permitted third party payment systems. Developers also lost access to certain features available through the platforms' own payment services.
  • The regulator ordered changes to payment policies and app review procedures. This is its first enforcement action under South Korea's 2021 law prohibiting app stores from forcing particular payment methods.

App stores are payment gatekeepers, not just software distributors. South Korea's orders challenge the fees and restrictions that make competing payment systems harder to sell. Developers could gain more control over checkout costs and customer payments, while payment providers get a better chance to compete. The commercial test is whether Google and Apple implement the required changes without replacing old restrictions with new ones.

CFTC Takes Utah to Court Over Prediction Market Control

October 27, 2026, United States
  • The CFTC sued Utah to block the state from using state law to shut down CFTC registered contract markets.
  • The Commission says Congress gave it exclusive federal jurisdiction over registered derivatives exchanges and argues Utah's enforcement obstructs that federal structure.
  • The CFTC says it has also initiated legal proceedings against nine other states and filed briefs in four federal courts of appeal and one state supreme court.

Prediction markets are now a jurisdiction fight over who controls access to federally regulated contracts. The outcome can change where platforms can operate and how state restrictions interact with CFTC registration. Canada is watching the same category develop through firms such as Verdx and its event contract dealer application.

Sustainable Finance ESG And Financial Inclusion

Thailand Mandates ISSB Climate Reporting for Listed Firms From 2027

October 26, 2026, Thailand (announced October 28)
  • Thailand's Securities and Exchange Commission issued nine notifications effective October 26 aligning listed company sustainability disclosures with IFRS S1 and IFRS S2 standards.
  • SET50 companies must report 2027 information in 2028. SET100 companies follow one year later, with wider coverage of listed companies, property funds and infrastructure funds phased in through 2031.
  • The rules require independent assurance of greenhouse gas emissions disclosures and provide five transition relief measures, including initial relief for Scope 3 emissions and comparative reporting.

Thai issuers now have firm deadlines to build emissions records, reporting controls and assurance processes that investors can check. That's commercial work for data providers, auditors and compliance software firms. Canada is taking a different approach with its voluntary green and transition taxonomy. Firms serving both markets will need to distinguish mandatory company disclosures from voluntary investment classifications. The immediate priority in Thailand is getting the data and controls ready before the first reporting year.

Cross Border Payments And FX

Canada and EU Plan to Connect RTR and TIPS Instant Payments

October 30, 2026, Canada and European Union
  • Canada and the EU agreed to support work by the Eurosystem, Bank of Canada and Payments Canada toward connecting their instant payment systems for faster international transfers.
  • The proposed link would connect Canada's planned Real-Time Rail (RTR) with Europe's TARGET Instant Payment Settlement (TIPS) system, creating a potential route for near real time payments between Canadian and European accounts.
  • The commitment does not establish a live payment corridor. No launch date, participating banks, access rules or transaction fees have been announced.

Connecting RTR and TIPS could give Canadian payment providers a faster, lower cost alternative to traditional international transfers. The commercial opportunity depends on who gets access, how foreign exchange works and what transactions cost. Firms preparing for Canada's Real-Time Rail access requirements should include European connectivity in their planning, but it's not a service they can offer customers yet.

Movantis Adds Stellar to Its Cross Border Settlement Rails

October 29, 2026, Americas
  • Movantis integrated Stellar as an additional digital settlement rail inside its existing multi rail cross border payments infrastructure.
  • The first planned use case will settle value from the United States to El Salvador using USDC on Stellar, with regulated local partners handling conversion and final payout.
  • Movantis says its network already processes more than $60 billion a year across more than 200 million transactions, 130 countries and 90,000 payout locations.

Movantis is adding stablecoin settlement inside an existing payments network rather than launching a separate crypto product. With more than $60 billion in annual flow already on its infrastructure, even a narrow corridor can become meaningful quickly. NCFA’s programmable stablecoin payments opportunity tracks the same commercial shift toward settlement, treasury and payout infrastructure.

Flywire Goes Live Across Liquidity Services B2B Marketplace

October 29, 2026, United States and Global
  • Liquidity Services implemented Flywire for domestic and cross border B2B payments across a global ecommerce marketplace serving more than 6 million qualified buyers and 15,000 corporate and government sellers.
  • The deployment supports localized payment methods, currency conversion and compliant payment workflows across more than 100 countries.
  • Liquidity Services says its marketplaces have completed more than US$15 billion in transactions over 25 years. Flywire did not disclose payment volume processed through the new implementation.

This is a live enterprise payment deployment rather than a partnership announcement. Flywire is being embedded inside a marketplace where cross border settlement, foreign exchange and reconciliation are part of the transaction flow. The next proof point is whether the integration lowers payment friction and cost at scale across complex B2B transactions.

Wealthtech Investing And Trading

Ondo Brings Seven Tokenized Portfolios to Solana

October 29, 2026, Global
  • All seven Ondo Intelligent Portfolios are now live on Solana for eligible investors outside the United States through supported wallets and applications.
  • The portfolios passed $40 million in total value locked during their first four weeks on Ethereum and BNB Chain.
  • Ondo already has more than $500 million in tokenized asset value on Solana, giving the portfolio lineup an existing distribution base on the network.

Tokenized investing is moving from single assets into packaged portfolio products that can travel across wallets and chains. The early $40 million uptake gives Ondo more evidence than a typical launch. The next test is whether multi asset tokens attract sustained balances and repeat use beyond crypto native investors.

Webull Canada Connects Brokerage Accounts to Personal AI Assistants

October 27, 2026, Canada
  • Webull Canada lets eligible investors connect their brokerage accounts to AI assistants including ChatGPT, Perplexity, Claude and Grok through Model Context Protocol.
  • Users can access live market data, balances and positions, analyze portfolios and prepare orders through plain language prompts. Trades still require the investor to review and confirm the order on Webull.
  • The integration runs on Webull's global infrastructure, which supports more than 29 million registered users. Rollout to all eligible Canadian accounts is expected by the beginning of November.

Canadian brokerage competition is moving from AI research tools into account connected workflows. Webull keeps final trade approval with the investor, but the assistant can now reach live balances, positions and order preparation. Questrade introduced a similar Canadian brokerage connection in July, giving the market two live models to compare.

Digital Banking And BaaS

nbkc Moves to Assume LSBX Consumer BaaS Portfolio

October 30, 2026, United States
  • nbkc bank filed an application with the FDIC to assume the consumer focused Banking as a Service portfolio operated by LSBX, the BaaS division of Lincoln Savings Bank.
  • nbkc says it currently has about 13 fintech BaaS relationships, approximately 3.6 million BaaS customers and 30 employees dedicated to the business.
  • The transaction is expected to close in early 2027 subject to regulatory approval. nbkc plans to merge the LSBX offering into its existing BaaS business and operate it under the nbkc brand.

The proposed transfer would consolidate another sponsor bank portfolio inside an institution already operating at material BaaS scale. Fintech partners will be watching program migration, risk appetite and service continuity because banking as a service partnerships depend as much on the regulated bank relationship as on the front end product.

CIBC Adopts Vault Core Starting With Simplii

October 29, 2026, Canada
  • CIBC will become the first large Canadian bank to adopt Thought Machine's Vault Core banking platform.
  • The Simplii Account will be the first deployment. CIBC plans to use its own product and engineering teams to build products on the new core.
  • CIBC also completed a £30 million minority strategic investment in Thought Machine earlier in 2026.

This gives Canada a major test of whether a large incumbent can add a modern core without waiting for a full bank replacement program. Starting with Simplii gives CIBC a digital brand where product speed matters. Watch migration scope, product release cycles and whether the platform eventually expands deeper into CIBC's retail stack.

Ripple Announces Final OCC Approval for National Trust Bank

October 26, 2026, United States
  • Ripple announced that the Office of the Comptroller of the Currency granted final approval to charter Ripple National Trust Bank after conditional approval in December 2025.
  • The approved activities include managing segregated reserves for RLUSD, acting as collateral trustee for RLUSD holders and providing fiduciary digital asset custody services.
  • RLUSD will continue to be issued by Standard Custody & Trust Company. Ripple says RLUSD has reached a $2.5 billion market cap, while the new national trust bank will provide its approved custody services after it opens.

The charter gives Ripple a federally supervised operating base around reserves and custody, building on the earlier U.S. crypto trust charter approvals. The next test is execution. Institutions will be watching how quickly the bank becomes live capacity and whether Ripple can turn the charter into deeper relationships across payments, custody and capital markets.

Digital Assets Blockchain And Tokenization

MetaMask Makes Stellar a Default Network for Every Account

October 29, 2026, Global
  • Stellar is now a default network in MetaMask Mobile and Extension. Every existing MetaMask account receives a Stellar address without a separate setup step.
  • Users can hold and manage XLM, Stellar assets and smart contract tokens, send and receive them, and swap between Stellar and other supported networks.
  • Stellar processed $55.6 billion in payment volume in 2025, up 52% year over year, while MetaMask gives the network direct distribution through a major self custody wallet.

The important change is distribution. Existing MetaMask users get Stellar access without installing another wallet, while Stellar gains a direct route into a large self custody user base. Usage will show whether easier access produces more balances, transfers and token activity.

Curve Goes Live on Stellar With Native Stablecoin Liquidity

October 29, 2026, Global
  • Curve Finance launched on Stellar mainnet in its first native deployment outside the EVM ecosystem.
  • The initial release brings Curve's audited StableSwap implementation to Stellar, allowing users to create pools, swap assets and provide liquidity without permission.
  • Curve plans to add FXSwap after its audit is complete, extending the model toward liquidity between assets tied to different currencies.

Stablecoins and tokenized assets need deep markets after issuance. Curve gives Stellar a familiar liquidity engine without routing users through another chain. NCFA has tracked the same institutional requirement in tokenized asset liquidity infrastructure. Depth and spreads will determine whether this deployment becomes commercially important.

Taurus Adds Live Stellar Smart Contract Custody and Issuance

October 29, 2026, Switzerland and Global
  • Taurus added live support for Stellar smart contract assets through its institutional custody and tokenization platforms.
  • Banks and financial institutions can now custody, issue and manage these assets through the same Taurus interfaces and APIs they already use for other networks.
  • The integration supports standardized and custom smart contract structures for securities, funds and other regulated financial instruments.

Banks can add Stellar assets without building another custody stack from scratch. That lowers integration cost and lets network choice depend more on the asset and client use case. NCFA’s crypto custody intelligence tracks why regulated custody and issuance controls are becoming core tokenized market infrastructure.

CADC Reserve Trust Announces Final Prospectus Receipt

October 27, 2026, Canada
  • CADC Reserve Trust announced that the Ontario Securities Commission issued a receipt for its final prospectus dated October 22, covering a continuous offering of CADC tokens at a fixed price of C$1.00.
  • The prospectus qualifies CADC distribution across every Canadian province and territory.
  • Authorized Participants can include registered crypto trading platforms, Canadian financial institutions and platforms with exemptive relief to trade stablecoins on a non custodial basis.

CADC now has a securities law distribution route that can reach Canada nationally through regulated and exempt participants. That gives wallets, trading platforms and financial institutions another domestic stablecoin model to assess alongside the proposed federal regime. NCFA's Canada stablecoin market entry analysis explains the broader issuer and infrastructure choices opening around these rules.

BNY Adds XRP and RLUSD to Institutional Custody

October 27, 2026, United States
  • BNY now supports XRP and RLUSD on its Digital Asset Custody platform for eligible institutional clients.
  • The expansion builds on BNY's role as primary reserve custodian for RLUSD and its existing custody relationship with Ripple Prime.
  • Ripple and BNY are also exploring tokenized trade finance. That work remains exploratory, while the custody support for XRP and RLUSD is live.

The live signal is custody access inside BNY's institutional control environment. That removes one practical barrier for firms that can use digital assets only through established custody, governance and operating processes. Adoption now depends less on whether custody exists and more on what institutions are permitted to do with the assets once held.

Payments Infrastructure And Money Movement

Natural Gives AI Agents Direct Choice of Payment Rails

October 29, 2026, United States
  • Natural moved Direct into general availability, allowing authorized AI agents to choose ACH, wire or real time payments over RTP and FedNow when a transaction is executed.
  • Agents can choose the rail based on the recipient, delivery speed and cost while using the same Natural wallet already used for cards and other payment functions.
  • Existing business controls and limits remain attached to the wallet. Natural says mailed checks, international wires and additional rails are planned but are not part of the current live capability.

The operating change is runtime payment choice. An agent can select how money moves instead of following a payment rail fixed earlier in the workflow. That flexibility increases the importance of transaction limits, recipient validation and revocation because AI agent payment authorization now has to hold across several rails, not just one.

Polygon Opens Its Payment Stack to Solana Businesses

October 29, 2026, Global
  • Polygon Open Money Stack now supports Solana businesses from bank or card funding through stablecoin balances and final payout.
  • The live stack can accept bank transfers, cards, cash or crypto, convert between fiat and crypto, hold funds in wallets and route tokens across Solana, Polygon and other supported chains.
  • Payouts can reach bank accounts, cards, cash locations or wallets, giving Solana businesses one operating layer across funding, orchestration and settlement.

The integration reduces how many providers a Solana payments company has to stitch together before it can move money end to end. That makes network choice less important than reach, compliance and payout coverage. The commercial test is whether one orchestration layer can lower integration cost enough to pull more payment volume onto stablecoin rails.

PayFacto Opens Konek to Its Canadian Merchant Network

October 29, 2026, Canada
  • PayFacto is integrating Konek across its Canadian merchant and partner network, adding account based payments alongside card payments.
  • Konek lets customers pay participating online merchants directly from a chequing or savings account at a participating financial institution through Interac Direct.
  • Interac designed the wallet to lower acceptance cost compared with most traditional cards and to reduce fraud and chargeback disputes for merchants.

Konek is taking account based payments into merchant distribution rather than waiting for a new national rail to create the use case. PayFacto gives Interac a practical channel into commerce where card economics already matter. NCFA's Canadian online payments analysis tracks how cards, wallets and bank payments are competing for that checkout.

WalletConnect Makes Stellar Payments Live Across Its Network

October 29, 2026, Global and Bermuda
  • WalletConnect added Stellar support across a network that reaches 900 million end users, more than 700 wallets and over $400 billion in annual transaction volume.
  • WalletConnect Pay now supports Stellar payments, and LOBSTR is the first Stellar wallet live with the payment service.
  • WalletConnect and Penrose Partners plan to extend the service to Bermuda merchants. Premier Tickets is expected to begin accepting payments in the second quarter of 2027.

WalletConnect gives Stellar another route into wallets and payment applications at large distribution scale. Merchant rollout in Bermuda still comes later, so adoption should be measured first through wallet connections and payment volume. The direction fits NCFA’s programmable payments opportunity around wallet access, settlement and merchant acceptance.

Adyen Adds Visa Passkeys to Its Payment Authentication Layer

October 29, 2026, United Kingdom
  • Adyen rolled out Visa Payment Passkey through Authenticate, the authentication module inside Adyen Uplift.
  • Eligible customers can authenticate online purchases using the device unlock method they already use, including fingerprint or face recognition.
  • Merchants using Authenticate can receive the new method without building another integration. The UK launches first, with broader global expansion planned for 2027.

Authentication is becoming part of payment orchestration rather than another merchant integration. Adyen can now route an eligible shopper into device based authentication from inside its existing stack. Merchants should watch both conversion and fraud because the commercial win requires improvement on both.

Robinhood Makes RLUSD Live Across Chain and Bitstamp

October 27, 2026, United States
  • RLUSD is live on Robinhood Chain and Bitstamp by Robinhood. Ripple says the stablecoin is expected to reach the Robinhood app later this year.
  • Robinhood plans to use RLUSD on the XRP Ledger for institutional settlement and integrate Ripple Treasury into its global cash and liquidity operations.
  • Ripple Prime already provides Bitstamp with lending and margin financing across roughly 20 digital assets. Robinhood reports 28.6 million funded customers globally.

This links stablecoin distribution, institutional settlement, treasury and financing inside one large trading group. The important test is usage. Watch settlement volume, treasury adoption and whether RLUSD becomes a working asset across Robinhood's institutional flows rather than another listed stablecoin.

Dutch Merchants Can Start Moving From iDEAL to Wero

October 26, 2026, Netherlands
  • From October 26, ABN AMRO business customers with iDEAL contracts can begin the technical migration to Wero as the Netherlands moves toward replacing iDEAL.
  • The change requires new API connections, payment page updates and transaction processing changes. Standard payments, refunds and e invoicing are part of the October migration phase.
  • iDEAL is expected to remain available through December 31, 2027. Wero adds functions that extend beyond today's iDEAL model, with subscriptions and pay on delivery capabilities scheduled for later phases.

This phase puts migration work into merchant roadmaps. PSPs and payment teams now have to decide when to update integrations, how long to support both rails and which new Wero functions justify moving early. The long overlap gives merchants breathing room, but it also creates a two year distribution contest for the providers handling the transition.

Risk Compliance And Regtech

Napier AI Brings Real Time LSEG Risk Data Into Payment Screening

October 29, 2026, Global
  • Napier AI completed technology validation for integrating LSEG World Check On Demand into its transaction screening platform.
  • Financial institutions can apply newly published sanctions, politically exposed person, adverse media and enforcement intelligence through an API within minutes of publication by LSEG analysts.
  • The screening workflow can be configured around an institution's own risk appetite, policies and payment data rather than applying one uniform screening rule across every transaction.

Faster intelligence only matters if it reaches the payment decision before funds move. The integration shortens the gap between a new risk signal and transaction screening while keeping policy configuration with the financial institution. That makes data freshness, alert quality and audit evidence key measures of whether AI and financial crime compliance actually improve in production.

S&P Global Ratings Puts Vault Risk Data Onchain

October 28, 2026, United States and Global
  • S&P Global Ratings' Vault Risk Assessment data is now available onchain through Chainlink DataLink, with Base as the first supported blockchain.
  • The assessments cover credit quality, liquidity mismatch, curator risk, blockchain risk, protocol risk, security and governance. They are risk opinions, not credit ratings.
  • Deposits in blockchain lending vaults reached approximately $10 billion in September 2026, up from $1.5 billion two years earlier.

Independent risk analysis is moving into the same environment where onchain capital is allocated. That can make vault selection and governance more comparable for institutions that need third party evidence before deploying funds. The next step is whether protocols and investment committees begin using the assessments as a formal control rather than optional information.

Australian Court Orders The Star to Pay A$260 Million for AML Failures

October 28, 2026, Australia
  • Australia's Federal Court ordered The Star Entertainment Group to pay A$260 million for breaches of anti money laundering and counter terrorism financing laws.
  • The Court found The Star failed to maintain a compliant AML program and failed to monitor customers well enough to identify, mitigate and manage money laundering and terrorism financing risk.
  • The penalty follows earlier state and Commonwealth action, including A$200 million in penalties for conduct that the Court said significantly overlapped with the current proceedings.

A$260 million turns weak AML controls into a board level cost. Financial firms should read the judgment as an operating warning on customer risk assessment, monitoring and program evidence. The penalty also raises the price of waiting until supervisory concerns become enforcement.

Further Embeds ADGM Compliance Rules Into Tokenized Assets

October 27, 2026, Abu Dhabi
  • Further Asset Management adopted Chainlink Automated Compliance Engine inside Anubis, its machine readable compliance platform for tokenized assets.
  • The initial ADGM deployment can apply configured controls covering issuance, KYC, AML, ownership, trading, custody and sanctions before a transaction executes.
  • ADGM is home to more than 340 financial institutions, giving the deployment a regulated market where tokenized asset rules can be translated directly into transaction controls.

Tokenized assets become easier to scale when compliance rules can travel with the transaction instead of being checked in a separate manual process. Further is testing that model inside a regulated financial center. The critical proof point is whether institutions adopt the controls in live issuance and trading workflows.

SME Finance And Business Banking

Lendistry Opens OrigenLink Lending as a Service to Banks

October 29, 2026, United States
  • Lendistry announced OrigenLink, a managed lending as a service platform designed to let banks offer additional small business credit options inside their own customer experience.
  • The model removes the need to send borrowers who do not fit a bank's existing products to a separate Lendistry application, allowing participating banks to retain the relationship while adding Lendistry products.
  • Lendistry says it has deployed more than US$11 billion to small businesses since 2015 and uses AI and automation across the lending lifecycle. The US$11 billion figure is company reported.

OrigenLink changes the handoff between a bank and an alternative lender. Instead of losing a customer when the bank cannot make the loan, the institution can keep the relationship and add another credit path behind its own brand. That gives banks a way to expand SME lending without building every underwriting and servicing capability internally.

Billd and Cross River Take Flex Line Nationwide

October 27, 2026, United States
  • Billd launched Flex Line nationally with Cross River Bank originating the revolving credit product for qualified commercial subcontractors.
  • The working capital line is not tied to an individual construction project and replenishes as balances are repaid, giving subcontractors another source of liquidity alongside traditional bank credit.
  • Billd positions the product around the cash flow mismatch created when subcontractors must pay labour and materials before receiving payment from contractors or project owners.

Construction finance exposes the working capital problem in unusually clear terms: businesses often have confirmed work but still need liquidity before invoices are paid. Flex Line adds another embedded credit option for that gap and extends the broader shift toward small business working capital and lending being delivered closer to the operating workflow.

Weekly Close

Canada's proposed stablecoin rules would require 100% daily reserve backing, redemption within three business days and a maximum 1% redemption fee, with implementation targeted for fall 2027. Meanwhile, Ripple secured final OCC trust bank approval, BNY opened institutional custody for XRP and RLUSD, and Robinhood brought RLUSD into its trading infrastructure, reaching a platform with 28.6 million funded customers. Companies that control custody, distribution and settlement stand to gain.

Canada's challenge is to turn its regulatory framework into commercially viable infrastructure before global networks capture the market.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech news and insights, industry research, or launch into emerging financial innovation opportunities.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

Binance $6.3B Hack and Polymarket Breach Expose Weaknesses

October 30, 2026 | NCFA Story Intelligence | Digital Assets Blockchain And Tokenization, Cybersecurity And Fraud, Competition And Market Structure

AI illustration of Binance $6.3B hack and Polymarket breach illustrated with unauthorized withdrawals, frozen assets, trading halt, vendor breach and customer protection controls.

How two separate security failures exposed weak points in authorization, recovery and digital finance infrastructure

On October 29, 2026, Binance suffered unauthorized withdrawals with an estimated US$6.3 billion impact, while Polymarket suffered a separate third party breach that forced its international prediction market to halt trading. Binance says the attack may have started with a compromised DevOps engineer’s laptop. Polymarket says one of its third party providers was compromised. The Binance hack and Polymarket breach aren’t known to be connected, but both exposed a similar weakness. Neither required the underlying blockchain to fail.

At Binance, the attacker reached systems capable of submitting withdrawal transactions. The exchange says it has found “no evidence of any wallet private key leak.” About US$3 billion has been frozen onchain, and Binance says customers won’t absorb the loss. Deposits are operating normally. Withdrawals remain paused while the exchange rebuilds parts of the withdrawal service.

Polymarket faced a different failure. Its international exchange entered cancel only mode at 2:05 p.m. ET, identified the compromised provider at 2:37 p.m., prepared to resume trading at 2:55 p.m. and marked the incident resolved at 3:05 p.m. Polymarket says “Anyone who has been impacted will be made whole.” The platform is operating again, but full reimbursement of every affected user hadn’t been independently confirmed at the latest verification cutoff.

Binance shows what can happen when attackers reach the systems that authorize money movement. Polymarket shows how hostile code can reach customers through software sitting between them and the market. In both cases, the financial rails could keep processing instructions after the instructions themselves had been compromised.

The Binance Hack Starts Before the Money Moves October 28 to 29

The theft looks almost instant in a headline. It wasn’t. TRM Labs says activity tied to the Binance operation began at least 36 hours before the main withdrawals. Its reconstruction found funding, testing and preparation before most of the money left in roughly 20 minutes starting around 20:05 UTC on October 29.1

TRM attributes the Binance hack with high confidence to North Korea’s TraderTraitor operation. Binance hasn’t made that attribution, and no public law enforcement finding had confirmed responsibility for this attack at the latest verification cutoff.

The money moved in minutes. The operation appears to have been prepared much earlier.

What the North Korea Attribution Actually Means

TRM says its assessment draws on onchain and offchain intelligence and similarities with earlier TraderTraitor operations. The firm points to advance preparation and transaction behaviour that it says match previous North Korea linked attacks.

There is history behind that assessment. In February 2025, the FBI formally attributed the US$1.5 billion Bybit theft to North Korea and identified the activity as TraderTraitor.2

That earlier attribution doesn’t prove who attacked Binance. Binance hasn’t identified the perpetrator. Until law enforcement reaches its own conclusion, North Korea remains an attributed assessment rather than a confirmed finding.

TRM estimates approximately US$6.36 billion moved from Binance wallets across ten blockchains. Elliptic independently calculates about US$6.43 billion.

Binance’s official estimate remains approximately US$6.3 billion. Different pricing times produce small differences, but all three calculations land around the same extraordinary number.

US$6.3 Billion Spreads Across Ten Blockchains October 29

Elliptic estimates roughly US$3.80 billion left through Ethereum based assets alone. Another 18,270 BTC worth about US$1.48 billion moved, together with hundreds of millions of dollars across Tron and other networks.3

This wasn’t one token leaving one wallet. Assets moved across different networks and different forms of money before Binance stopped withdrawals.

The recovery options split immediately. Stablecoin issuers could freeze supported tokens. Bitcoin and ether could be watched moving across public ledgers, but no issuer could switch them off.

The asset the attacker held started determining what Binance could get back.

Where Most of the US$6.3 Billion Went

Elliptic calculates US$3.80 billion on Ethereum, including about US$1.9 billion of USDT and US$823 million of USDC. It also identified 18,270 BTC worth about US$1.48 billion and roughly US$612.7 million of USDT on Tron.

Most of the stolen value therefore sat in a small number of large positions, but those positions didn’t carry the same recovery rights. Tether and Circle could intervene in their tokens. No company could impose the same freeze on native bitcoin.

Token prices can change the dollar value. The control rights don’t change with the price.

Binance Says the Private Keys Didn’t Leak October 29 to 30

Binance’s most surprising technical finding so far is what the attacker apparently didn’t steal. The exchange says it has found no evidence that wallet private keys leaked. Its initial investigation points instead to a compromised DevOps engineer’s laptop that may have opened access to a service container used to submit unauthorized withdrawals.

The investigation has since widened beyond one computer. Binance says the incident involved multiple factors and that its security team is tracing the complete attack path through the withdrawal system.4

Independent investigators go further. TRM believes Binance’s signing infrastructure was compromised. Elliptic reached a similar conclusion after examining signed withdrawals across several chains and prepared authorizations on Ethereum.

Binance has promised a full technical postmortem once the investigation is complete.

If the forensic reconstruction holds, the attacker didn’t need the keys. Reaching the machinery deciding what those keys should sign was enough.

NCFA saw a striking variation of the same problem only weeks earlier. How 4,000 BTC Left Liquid Network Without A Stolen Key showed how nearly an entire reported Bitcoin reserve could leave through an apparently valid process even when the obvious authorization key remained intact.

A compromised employee device can sit several steps away from a private key and still reach systems that decide which transactions get signed.

For an exchange, authorization controls become part of custody whether the private key leaks or not.

The Race to Freeze Billions Begins Minutes After the Theft

Once the withdrawals landed, the attacker started changing the asset mix. Stablecoins such as USDT and USDC can be frozen by their issuers under certain conditions. Bitcoin and ether can’t.

Elliptic estimates roughly US$786 million of stablecoins was converted before freezes took effect. Some swaps were completed at prices well below prevailing market value. Getting out appeared to matter more than getting a good price.

TRM separately traced large USDT conversions into ETH. It also found an attacker wallet using USDT as collateral in Aave to borrow ETH before controls tightened.

The attacker was willing to lose money to hold assets that were harder to stop.

The First Hour Became a Stablecoin Freeze Race

Elliptic says the attacker’s main Ethereum wallet received stolen USDT at 20:24 UTC. Tether froze about US$1.18 billion of USDT 37 minutes later and then followed funds into additional attacker addresses.

Circle froze about US$823 million of USDC in the same main wallet soon afterward. Ripple, World Liberty Financial, Paxos, First Digital and other ecosystem participants also acted on supported assets.

By 08:00 UTC on October 30, Elliptic had independently verified about US$2.84 billion frozen. Binance later put the verified total at roughly US$3 billion. Attack speed and issuer response were competing in real time.

Tether, Circle and other issuers could immobilize supported balances while stolen assets were still moving.

Bitcoin and ether stayed visible but movable. Tracing the money and controlling the money were two different powers.

Frozen Crypto Isn’t Recovered Crypto October 30

The US$3 billion frozen figure sounds like half the money came back. It didn’t.

A frozen stablecoin balance may no longer be movable, but Binance doesn’t automatically possess it again. Returning the asset can still depend on issuer action, legal process and cooperation across companies and jurisdictions.

Investigators can also know exactly where bitcoin or ether sits without controlling it. Binance can separately replace assets from its own balance sheet even while stolen funds remain frozen or under attacker control.

Frozen, recovered and reimbursed are three different numbers.

Binance Recovery Snapshot
Estimated impact
US$6.3B
Frozen onchain
~US$3B
Company resources allocated
US$6.34B+
Final recovery
Not yet known

NCFA visualization. Sources include Binance, Elliptic and TRM Labs. Frozen assets aren’t the same as recovered assets or customer reimbursement.

Binance Puts US$6.34 Billion Behind Customer Losses October 30

Binance then changes the financial story.

The exchange says it has allocated more than US$6.34 billion of company resources to cover the incident. About US$5 billion is already held in affected token assets. Binance says it is buying the remaining assets through market and over the counter channels so the replacement portfolio matches what was lost.5

Those figures don’t include the roughly US$3 billion already frozen.

Binance is replacing its asset position while the recovery effort continues separately. SAFU alone is far smaller than the incident, so protecting customers depends heavily on broader company resources.

A US$6.3 billion hack is now testing Binance’s liquidity, reserves and ability to absorb a loss without passing it to customers.

What Binance Still Has to Replace and Prove

Estimated impact is about US$6.3 billion.

Company resources allocated exceed US$6.34 billion.

Matching affected tokens already held total about US$5 billion.

Remaining replacement purchases are roughly US$1.34 billion.

Frozen onchain stands at roughly US$3 billion and is separate from the company allocation.

The technical postmortem and updated Proof of Reserves are still pending. Those releases should show what failed, what changed and whether customer liabilities remain fully backed after remediation.

Binance Update October 30

“Withdrawals remain paused while our team completes a security revamp.”

Binance says deposits are operating normally and expects withdrawals to resume within 48 hours. View the official Binance update.

Polymarket Breach Halts Trading for One Hour October 29

Polymarket’s breach followed a different path.

Its international exchange entered cancel only mode at 2:05 p.m. ET. At 2:37 p.m., Polymarket said a third party provider had been compromised and the issue was fixed. Trading was prepared for restart at 2:55 p.m., and the incident was marked resolved at 3:05 p.m.

Reuters identified the provider, through a source familiar with the matter, as DebugBear, a website performance monitoring company. DebugBear separately acknowledged its own security incident and advised customers using its Real User Monitoring product to remove the embedded code.6

Polymarket hasn’t publicly named the provider. Its international platform is now operational.

The exchange came back in an hour. Customer recovery took a different clock.

Polymarket Incident Record
2:05 ET
Trading enters cancel only mode and relayer actions pause.
2:37 ET
Polymarket says a third party provider was compromised and the issue was fixed.
2:55 ET
Trading restart is announced.
3:05 ET
The incident is marked resolved.

View Polymarket’s official incident record

How the Polymarket Breach Reached Logged In Traders

Security researchers recovered malicious JavaScript distributed through infrastructure linked to the compromised monitoring service. The code checked whether a Polymarket visitor was already logged in, then examined balances and prediction market positions.7

Depending on the account setup, the script could try to sell positions, transfer position tokens or move cryptocurrency. Researchers didn’t identify a routine whose central purpose was stealing a password, seed phrase or private key. The code reused authority already available inside the authenticated application.

One outside analysis traced the attack path through 710 deposit wallets and 731 addresses, while stressing that the address count doesn’t equal the number of victims. A customer could authenticate correctly and still encounter hostile software after login.

Polymarket hasn’t confirmed a final loss figure or victim count. Outside estimates range from about US$2.2 million to US$2.7 million.

Polymarket says affected users will be made whole. Full reimbursement hadn’t been independently verified at the latest cutoff.

Polymarket Is Hit Through a Vendor Again June to October 2026

October isn’t Polymarket’s first recent third party compromise.

In June, Polymarket confirmed that a compromised outside vendor allowed malicious code into its website for some users. The company acknowledged that funds were stolen and said victims would be refunded in full. Outside researchers estimated losses around US$3 million.8

Four months later, another outside service sits inside another loss event.

The company has also been moving deeper into regulated financial markets. Polymarket Earns Approval to Relaunch in the U.S. followed its return path after acquiring a regulated derivatives exchange and rebuilding access to the American market.

The business is becoming more institutional while its customer experience still depends on monitoring tools, browser code, authentication services and outside software.

Polymarket can decentralize parts of the market without decentralizing every dependency needed to reach it.

The Weak Point Moves Outside the Blockchain 2025 to 2026

The Binance hack and Polymarket breach are separate, but both cut through the old idea that crypto security is mainly about protecting a private key.

In February 2025, attackers stole roughly US$1.5 billion from Bybit. The FBI later attributed the theft to TraderTraitor. Investigators said the attack manipulated the approval process around a legitimate transaction rather than breaking Ethereum itself.

Now Binance says its wallet private keys appear intact while investigators examine the systems around transaction approval. Polymarket’s market also kept functioning while malicious web code allegedly reused authority inside logged in customer sessions.

The blockchain can keep doing exactly what it is told after the instruction itself has been compromised.

Founders and institutions building on digital assets can’t treat security as a wallet problem alone. Employee devices, access rights, transaction limits, supplier controls and approval workflows all sit inside the same chain of trust that protects the assets.

What the Binance Hack Means for Canada October 2026

Five days before the Binance and Polymarket incidents, Canada published proposed Stablecoin Regulations for consultation.

The proposed rules require covered issuers to maintain reserves at least equal to outstanding stablecoins at the end of each day, use qualified Canadian custodians and support redemption at par. They also add governance, risk management, data security, incident reporting, recovery and resolution requirements. Consultation closes December 23, 2026, with implementation intended for fall 2027.9

NCFA’s Canada Proposes Stablecoin Market Entry Rules examines the commercial choices created by that framework. The Binance hack makes one of those choices unusually visible. Stablecoin issuers weren’t passive observers after the theft. Their ability to freeze supported assets changed the recovery picture by billions of dollars.

Canada’s proposed rules don’t govern the Binance or Polymarket incidents, and there is no basis to claim they would have prevented either one.

Canadian banks, PSPs, wallets and fintechs still face the same operating questions. Who can authorize the transaction, who can stop it, which suppliers can touch it and who carries the loss when the control chain breaks?

Binance also carries unusual Canadian context. Binance Left Canada but the Fight Reached Supreme Court traced how the exchange’s Canadian exit became a wider fight over regulatory reach and company records. This security incident tests a different side of institutional credibility. Binance now has to show that its own controls can withstand a failure large enough to move billions.

What Binance and Polymarket Still Have to Prove

Binance hasn’t finished proving the recovery works just because deposits are back. Withdrawals still have to resume without reopening the weakness that forced them to stop. The exchange also needs to show that replacement assets fully support customer liabilities after billions moved out. Its promised postmortem needs to explain how unauthorized withdrawals passed internal controls and what changed before the system reopened.

The updated Proof of Reserves will put numbers behind the customer protection promise. Binance says customers won’t absorb the loss. Reserve data can show whether the assets behind customer balances have actually been restored.

Polymarket isn’t finished once trading comes back either. Affected users still need to be fully reimbursed. Two third party compromises in four months also leave a harder question over the business. **How much outside software should be able to touch an authenticated customer session before the market itself becomes exposed?**

The Binance hack showed that a platform can lose billions without evidence that its private keys were stolen. Polymarket showed that a market can remain technically intact while hostile code reaches customers through a supplier. Stablecoin issuers then froze billions of dollars that native bitcoin and ether issuers couldn’t freeze because no such issuer exists. Binance’s own balance sheet became the backstop after those controls ran out.

That is where the competitive line in digital finance is moving.

The strongest platforms won’t be the ones that simply claim secure infrastructure. They’ll be the ones that can **limit what a compromised employee, supplier or software component can do, stop bad instructions before settlement, isolate losses quickly and carry the financial weight when prevention fails**.

Binance and Polymarket are now being measured on exactly that.

The blockchain may settle the transaction. Trust won’t come from the blockchain alone. It will depend on everything that happens before an instruction reaches the chain and everything a company can still do after something goes wrong.

Frequently Asked Questions

Were Binance private keys stolen
Binance says it has found no evidence that wallet private keys leaked. Its investigation points to a compromised employee laptop, service infrastructure and a wider attack path. Independent investigators believe transaction signing infrastructure was compromised, but Binance’s complete technical postmortem is still pending.
Has Binance recovered the US$3 billion
No. Binance says roughly US$3 billion has been frozen onchain. Frozen assets aren’t automatically returned. Actual recovery can still require issuer action, legal process and cooperation across several institutions.
How did the Polymarket breach happen
Polymarket says a third party provider was compromised. Independent researchers found malicious JavaScript that could interact with authenticated user sessions and attempt to sell positions or transfer assets. Polymarket hasn’t yet published a complete technical postmortem.
How much did Polymarket users lose
Polymarket hasn’t published a final loss figure or victim count. Outside estimates currently range from about US$2.2 million to US$2.7 million. Polymarket says anyone affected will be made whole, but full reimbursement hadn’t been independently confirmed at the verification cutoff.

Related NCFA Intelligence

Digital Asset Security

How 4,000 BTC Left Liquid Network Without A Stolen Key

How nearly an entire reported Bitcoin reserve left through an apparently valid process even though the obvious authorization key remained intact.

Binance

Binance Left Canada but the Fight Reached Supreme Court

How Binance’s Canadian exit became a wider test of regulatory reach, company records and access to digital asset markets.

Prediction Markets

Polymarket Earns Approval to Relaunch in the U.S.

How Polymarket moved back toward regulated US market access after acquiring a licensed derivatives exchange.

Stablecoins

Canada Proposes Stablecoin Market Entry Rules

Canada’s proposed rules put reserves, custody, redemption, data security and recovery directly into the stablecoin operating model.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

US Crowdfunding Reform Puts Canada’s $1.5M Cap in Focus

October 30, 2026 | NCFA Regulatory Insight | Regulation And Policy, Capital Markets Infrastructure And Funding, Competition And Market Structure

AI illustration of SEC Chair Paul Atkins on Reg CF reform beside US$5M and proposed US$20M limits compared with Canada’s C$1.5M NI 45-110 cap

Less Regulatory Burden and More Crowdfunding Capacity

On October 27, 2026, SEC Chair Paul Atkins asked staff to review Regulation Crowdfunding for changes that could reduce compliance burdens and make the exemption more useful to issuers and investors. Reg CF currently lets eligible US companies raise up to US$5 million over 12 months. Industry groups are pushing for a US$20 million ceiling and simpler rules. Canada still caps issuers at C$1.5 million under NI 45-110, even as Canadian companies are now reaching that limit.

Atkins said more than 9,800 Reg CF offerings have taken place over the past decade, with an average raise of about US$364,000. He asked staff to consider changes that could "reduce compliance burdens and improve the rules' attractiveness for issuers and investors." No higher limit has been proposed or adopted by the SEC. The US$20 million figure comes from industry proposals now before the Commission.

US$5 Million Is Back on the Table

Reg CF requires issuers to raise through an SEC registered broker dealer or funding portal. Companies file Form C, provide business and financial information and continue annual reporting while the obligation applies. Securities generally can't be resold for one year. Non accredited investors also face investment limits based on income or net worth, while accredited investors aren't subject to those Reg CF limits.

Crowdfund Capital Advisors wants the annual issuer ceiling raised from US$5 million to US$20 million and indexed to inflation. Its petition also seeks related changes where crowdfunding vehicles and shareholder thresholds could create another barrier for issuers that grow through repeated rounds.

The Crowdfunding Professional Association is pushing in the same direction. Its October 27 recommendations include a simpler compliance tier for offerings up to US$350,000, a US$20 million issuer ceiling, simpler investor rules, clearer issuer communications and more useful ongoing reporting. These remain industry proposals, not SEC rules.

Smaller raises feel compliance costs more sharply. A 2019 SEC study cited market estimates of US$2,000 to US$10,000 for accounting, US$3,000 to US$10,000 for legal work and US$3,000 to US$5,000 for banking and transaction costs. Earlier SEC rulemaking also cited portal fees of 6% to 15%. A smaller raise can lose a meaningful share of its proceeds before the company puts the capital to work.

US Issuers Near the Cap Keep Raising Again

The average US$364,000 Reg CF raise doesn't tell us much about whether the US$5 million ceiling works for companies that need larger rounds. CCA's October 9 submission found that 28.8% of issuers setting their maximum within 2% of the cap returned for another Reg CF financing, compared with 11.3% of other issuers in the comparison group. Among companies observed for at least 24 months, the figures were 33.0% and 11.9%.

CCA separately found that 40.3% of issuers that raised roughly US$4 million to US$5 million returned for another Reg CF offering. Those companies raised more than US$214 million after first approaching the ceiling. CCA also identified 323 offerings that ran alongside Rule 506(c) raises totalling US$422.6 million. Companies can move into other exemptions, but the data shows that some issuers still have demand for capital after Reg CF starts running out of room.

Crowdfunding is also reaching beyond the largest US venture markets. CCA reports that 62.6% of geographically identified funded Reg CF capital, about US$1.82 billion of US$2.91 billion, went to companies outside Boston, Los Angeles, San Francisco and New York. That gives founders outside the main venture centres another route to investors and gives investors access to companies they may not otherwise see.

Larger rounds can create new regulatory pressure elsewhere. CCA reports that 279 Reg CF issuers have crossed 2,000 holders of record and 11 currently meet both shareholder and asset triggers associated with Exchange Act registration. Its petition asks for related Rule 12g-6 changes alongside a higher fundraising ceiling so issuers don't simply hit another limit as they grow.

See: Reg CF At 10 Shows Equity Crowdfunding Works

Canada is starting to show the same pattern at a much lower ceiling. Stronger campaigns are using nearly all of NI 45-110, and some companies are already combining the exemption with other financing routes to keep raising.

Canadian Issuers Are Already Hitting C$1.5 Million

NI 45-110 lets an issuer group raise up to C$1.5 million over 12 months. Investors can put in up to C$2,500 per offering, or up to C$10,000 where a registered dealer determines the investment is suitable. The exemption gives startups and smaller companies a national crowdfunding route, but recent campaigns show that the ceiling is beginning to pinch.

FrontFundr reported C$4.79 million raised under NI 45-110 from 4,320 investors in 2025, up 181% from the previous year. Edison Motors raised C$1,491,043 under the exemption, about 99% of the available ceiling. Blossom Social raised C$1,449,681, or roughly 97%, before accredited investors brought its total FrontFundr financing to approximately C$1.93 million.

The ceiling was fully tested in 2026. Blossom Social reached the C$1.5 million retail limit under NI 45-110 in three hours after building a waitlist of more than 8,000 prospective investors. The company ultimately raised C$2.89 million through FrontFundr after adding accredited investor capital. Canadian founders are no longer approaching the cap in theory. Companies are hitting it while investor demand is still there.

Once the C$1.5 million allowance is used, companies that want to keep raising need another exemption or financing route. FrontFundr itself notes that issuers can combine NI 45-110 with the accredited investor, family and friends or Offering Memorandum exemptions. Those routes can support larger raises, but they come with different investor eligibility and disclosure requirements. A higher NI 45-110 ceiling would let more successful community rounds stay inside one national crowdfunding framework for longer.

NCFA has pushed for more room since at least 2014. Its 2014 crowdfunding submission called for an issuer ceiling of up to C$5 million. NCFA repeated that recommendation in its 2020 NI 45-110 submission, together with proportionate financial reporting and more practical investor participation rules.

NCFA continues to support raising the annual NI 45-110 issuer limit from C$1.5 million to at least C$5 million. The ceiling should also be indexed so inflation doesn't reduce its usefulness over time. Reporting can increase with the size of the raise while smaller offerings remain practical and investor protections remain intact.

See: Equity Crowdfunding Canada Hits New Highs in 2025

Canada's wider capital market is sending the same signal. NACO reports that Canadian angel investors deployed C$113.79 million across 490 investments in 2025, down 22.1% from the year before and the lowest capital deployment in five years. Ottawa has responded with a new C$1.75 billion venture and growth capital plan, including C$75 million for pre seed and seed investment and C$675 million for later and growth stage investment.

Public programs and investment crowdfunding serve different parts of the market, but both are trying to put more capital behind Canadian companies. Keeping NI 45-110 at C$1.5 million while issuers are already filling the exemption limits how much private capital that channel can contribute.

Talking Point

Canadian companies are now filling the C$1.5 million NI 45-110 allowance while investors are still willing to invest. That is the clearest case yet for giving the exemption more room. A C$5 million ceiling would let stronger issuers raise more growth capital from their communities, keep retail investors involved in larger rounds and give regulated portals a larger market to build around. The US is reconsidering a US$5 million cap. Canada shouldn't wait for C$1.5 million to become an even bigger bottleneck.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter