Category Archives: Research

NCFA Weekly Fintech Intelligence Jun 27-Jul 3, 2026

June 27, 2026 | NCFA Fintech Whisperer | Payments And Market Infrastructure, Digital Assets Blockchain And Tokenization, Capital Markets And Market Infrastructure, Artificial Intelligence And Data, Risk Compliance And Regtech, Wealth And Asset Management

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026).

Weekly Fintech Market Intelligence Jun 27 - Jul 3, 2026

Payments And Market Infrastructure

Swift Builds Cross Border Payments Framework For Consumers And SMEs

July 2, 2026, Global
  • Swift is developing a payments scheme for faster, more predictable and more transparent international payments for consumers and SMEs.
  • The framework includes upfront fee and FX transparency, full-value delivery, efficient last-mile processing and end-to-end transaction visibility.
  • Swift said the scheme is being built with early adopter banks and more than 40 banks globally.

Cross border payments are getting clearer operating standards for retail and SME use cases. Banks, payment firms, remittance providers, fintechs and SME platforms should watch how fee disclosure, FX transparency, delivery certainty and last-mile processing become competitive requirements.

Vietnam And Singapore Launch Real Time Cross Border QR Payments

July 2, 2026, Vietnam / Singapore
  • NAPAS, Liquid Group and VietinBank launched a QR payment connection that lets users of participating Singapore payment applications pay merchants in Vietnam.
  • Transactions are processed in real time through VietQRGlobal with automatic conversion between Singapore dollars and Vietnamese dong.
  • VietinBank serves as the settlement bank, and the initial rollout is expected to reach about 5 million users through Liquid Group’s Singapore partner network.

The connection gives Singapore users direct access to Vietnam’s domestic QR acceptance network without requiring merchants to install separate terminals. Singapore becomes the fourth ASEAN market and sixth jurisdiction connected to NAPAS, with outbound payments from Vietnam to Singapore planned later in 2026.

Worldline ING And Visa Complete Live Agentic Payment

July 2, 2026, Europe
  • Worldline, ING and Visa completed a live end-to-end agentic payment transaction in Europe.
  • The transaction combined AI agent purchasing, ING authorization, Visa payment infrastructure and biometric authentication.
  • The companies said the demonstration shows agent-driven commerce can operate within existing payment and authentication frameworks.

Agentic payments are moving into live financial infrastructure. Banks, payment networks, merchants, PSPs, AI providers and fraud teams should watch how consent, authentication, agent identity and liability controls evolve for AI-initiated transactions, including the broader question of whether fintechs should design for people or AI agents.

Nuvei And Visa Complete In Agent Payment

July 2, 2026, Canada / Global
  • Nuvei completed a live agentic commerce proof of concept with Visa, Arvato Systems and Kings and Priests.
  • The transaction allowed a merchant AI agent to initiate a purchase and complete payment inside the agent using a tokenized Visa credential and live Visa rails.
  • Nuvei said its agentic payments strategy will support protocol compatibility, Know Your Agent controls, agent risk scoring, network certifications and a developer sandbox.

Agentic commerce needs payment controls that work inside the buying flow. Merchants, payment networks, fintechs, issuers, fraud teams and AI platforms should watch how tokenized credentials, spend limits, approved categories, agent identity and audit trails define the next payment interface. NCFA's Financial Innovation Map tracks agent commerce infrastructure as an emerging opportunity.

Payments Canada Secures RTR By Law And Rule Approvals

June 30, 2026, Canada
  • Payments Canada said the Real-Time Rail By-law and RTR Rules have received all required approvals.
  • The By-law and Rules come into force on Aug. 24, 2026 and establish the core legal framework for Canada’s real-time payment system.
  • Payments Canada said the legal framework supports safety, efficiency and resilience ahead of the RTR’s planned Q4 2026 launch.

Canada’s instant payments system now has the legal foundation needed for launch preparation. Banks, payment service providers, fintechs, merchants and compliance teams should track how RTR rules, access, fraud controls, ISO 20022 messaging and 24/7 operations change payment product design and competition.

BSP Identifies Wholesale CBDC Uses From Project Agila

June 30, 2026, Philippines
  • The Bangko Sentral ng Pilipinas identified financial securities settlement and large value cross border payments as potential wholesale CBDC applications.
  • The Project Agila report found that distributed ledger technology could support greater automation, faster processing and lower transaction costs.
  • The BSP said Project Agila will guide its CBDC Roadmap and future work on high value CBDC use cases.

Wholesale CBDC work is concentrating on settlement infrastructure rather than retail money. Central banks, banks, market infrastructure firms, custodians and payment providers should watch how tokenised settlement, securities delivery and cross border liquidity use cases shape the next phase of central bank money innovation.

Bank Of Canada Reminds PSPs Of RPAA Reporting Duties

June 29, 2026, Canada
  • The Bank of Canada reminded registered payment service providers of their ongoing reporting obligations under the Retail Payment Activities Act.
  • PSPs came under Bank of Canada supervision and must report material incidents, significant operational changes, new retail payment activities, registration information changes, acquisitions of control and annual reporting information.
  • The Bank said PSPs that do not meet reporting requirements may be in violation of the RPAA and subject to enforcement action.

Canada's retail payments regime is shifting from registration into active supervision. PSPs, fintechs, payment processors, compliance teams and investors should track how incident reporting, safeguarding information, annual reports and PSP Connect submissions become part of the operating cost of regulated payment activity.

Canada Pre Publishes Consumer Driven Banking Regulations

June 27, 2026, Canada
  • The Government of Canada pre published proposed Consumer Driven Banking Regulations to implement the Consumer Driven Banking Act and launched a 60 day public consultation.
  • The proposed regulations establish requirements for participant accreditation, technical standards, common rules, assessment fees, supervision and national security.
  • The framework is intended to support secure consumer permissioned data sharing and reduce reliance on screen scraping as implementation begins in stages.

Canada's open banking framework is entering the implementation phase. Banks, fintechs, payment service providers, credit unions and technology providers should prepare for accreditation, technical integration and operational requirements as consumer driven banking moves toward production. See NCFA's Open Banking in Canada opportunity brief for the market gaps, adoption signals and infrastructure questions this framework is meant to address.

Digital Assets Blockchain And Tokenization

Bridge Secures MiCA And EMI Authorisations Across The EU

July 2, 2026, European Union
  • Bridge secured Crypto-Asset Service Provider authorisation under MiCA and an Electronic Money Institution licence in Luxembourg.
  • The dual authorisation covers all 27 EU member states and supports stablecoin services for European businesses and users.
  • Bridge said the licences enable named IBANs, euro accounts, custom EUR-backed stablecoins, payouts and stablecoin-based settlement use cases.

Stablecoin payment firms are building through combined cryptoasset and e-money permissions. Fintechs, banks, treasury teams, payment providers and stablecoin issuers should watch how MiCA, EMI licences, IBAN access and euro stablecoin services define regulated market entry in Europe.

Wealthsimple Adds In App DEX Trading

July 2, 2026, Canada
  • Wealthsimple introduced DEX trading inside its app, giving eligible users access to a wider range of on-chain tokens than its curated centralized crypto list.
  • When a user makes a first DEX trade, Wealthsimple creates a self-custody wallet, and trades execute through a third-party DEX aggregator.
  • Wealthsimple says DEX assets are not covered by insurance, do not share the same regulatory oversight as centralized crypto assets, and are outside centralized crypto purchase and loss limits.

Regulated retail crypto platforms are adding on-chain access while changing how custody, disclosure, risk controls and investor responsibility work. Brokers, crypto platforms, wallets, regulators and compliance teams should watch how self-custody DEX trading inside mainstream apps affects token access, suitability controls, tax reporting and Canadian crypto regulation and investor safeguards.

AscendEX Ceases Operations After Missing MiCA Authorization

July 1, 2026, Global / European Union
  • AscendEX ceased operating on July 1 after entering the end of Europe’s MiCA transitional period without authorization. It also cited additional financial and operational pressures.
  • The exchange stopped new accounts, deposits, trading, swaps, staking, lending and promotional services. Remaining account access is limited to withdrawals and other account exit functions.
  • Update: AscendEX paused automated withdrawals on July 6 and placed every request under manual review, without assuring customers when requests would be completed or how much would be returned.
  • The company said a counterparty failed to complete a strategic transaction intended to provide liquidity. AscendEX is assessing its financial position and acknowledged that unresolved balances could become subject to an insolvency or similar process.

The case combines a licensing exit with a failed liquidity transaction, withdrawal uncertainty and possible insolvency. Regulators and users can assess the effectiveness of the wind down through access to account records, withdrawal processing, financial disclosure and the treatment of unreturned balances. Canada’s registered crypto platforms operate under different rules. The same questions apply to custody, liquidity, capital, governance and orderly customer exits. NCFA’s comparison of MiCA and UK crypto rules explains how demanding authorization standards can favour firms with stronger operating infrastructure.

FalconX Receives MiCA Authorization For EU Digital Asset Services

July 1, 2026, European Union
  • FalconX received Markets in Crypto-Assets authorization to expand regulated institutional digital asset services across the European Union and European Economic Area.
  • The authorization supports institutional trading, custody, prime brokerage and related digital asset services under the MiCA framework.
  • FalconX said the approval expands its regulated operating footprint for institutional clients across Europe.

MiCA is becoming the operating gateway for institutional digital asset firms. Trading firms, custodians, prime brokers, exchanges, asset managers and compliance teams should watch how authorization under a harmonized EU framework expands regulated cross-border crypto services.

Robinhood Launches Chain, Stock Tokens And Agentic Crypto Trading

July 1, 2026, Global
  • Robinhood launched the public mainnet of Robinhood Chain, a Layer 2 blockchain built with Arbitrum for financial services and tokenized real world assets.
  • The company introduced stock tokens through Robinhood Wallet in more than 120 countries, with 24/7 trading and DeFi use cases such as lending and collateral, subject to jurisdiction limits.
  • Robinhood also announced onchain lending through Robinhood Earn, expanded perpetual futures in Europe, Canada availability through Coinsquare, and upcoming agentic crypto trading for eligible US users.

Retail investing is extending into onchain financial infrastructure. Brokers, crypto platforms, wallets, custodians, exchanges, wealth platforms and regulators should watch how tokenized equities, Layer 2 networks, onchain lending and AI directed trading reshape product access, market supervision and investor protection.

Bank Of England And FCA Define Joint Stablecoin Supervision

June 30, 2026, United Kingdom
  • The Bank of England and FCA set out how they will jointly regulate systemic stablecoin issuers under the UK stablecoin regime.
  • The approach explains how supervisory responsibilities will be allocated, how FCA rules interact with Bank requirements and how transition arrangements will apply when an issuer becomes systemic.
  • The document also addresses stablecoin issuers that may be recognized as systemic at launch, where an issuer is likely to operate at systemic scale from the outset.

Stablecoin regulation is starting to look like payment system supervision. Issuers, banks, custodians, payment firms, exchanges and compliance teams should watch how systemic designation, transition planning and cross-regulator supervision affect market access for regulated digital money.

FCA Sets UK Crypto Rules And Authorisation Path

June 30, 2026, United Kingdom
  • The FCA set out rules for crypto firms that support buying, trading, holding, custody, stablecoins, intermediation and staking.
  • The framework includes financial resilience, capital, stress testing, market integrity, insider trading, market manipulation and stablecoin standards.
  • Firms can apply for authorisation between Sept. 30, 2026 and Feb. 28, 2027, before the mandatory regime takes effect on Oct. 25, 2027.

The UK crypto market is getting a clearer operating perimeter. Crypto platforms, custodians, stablecoin issuers, intermediaries and staking firms should prepare for authorisation, capital planning, market conduct controls and compliance standards that bring crypto closer to mainstream financial regulation.

Open Standard Launches Open USD Stablecoin

June 30, 2026, Global
  • Open Standard announced Open USD, a stablecoin for global money movement backed by more than 140 participating businesses.
  • The model offers zero cost minting and redemption, no artificial volume limits, reserve earnings for partners, and collaborative governance through Open Standard.
  • Participating firms include major payment networks, banks, fintechs, technology platforms, crypto firms and commerce companies.

Stablecoin competition is shifting toward scale, governance and distribution. Banks, payment networks, wallets, merchants, fintechs and stablecoin issuers should watch whether shared economics, partner governance and broad platform participation become a stronger model for digital money adoption.

STOKR Secures CASP And Payment Institution Licences

June 30, 2026, European Union
  • STOKR secured Crypto Asset Service Provider and Payment Institution licences in Luxembourg ahead of MiCAR's July 1, 2026 enforcement deadline.
  • The licences allow STOKR to operate across all 27 EU member states under a single harmonised framework.
  • The authorisations support crypto asset custody, transfers, payment transactions, credit transfers, standing orders and stablecoin settlement for tokenized securities.

Tokenized securities need regulated payment and custody rails, not only issuance technology. Asset managers, administrators, custodians, stablecoin providers and tokenization platforms should watch how CASP and payment licences shape the full transaction lifecycle from subscription to redemption and payout.

BNY Adds USDC To Institutional Digital Asset Custody

June 29, 2026, United States / Global
  • BNY expanded its relationship with Circle by adding USDC to BNY's Digital Asset Custody platform.
  • The service allows institutional clients to store, transfer, mint and burn USDC through BNY.
  • BNY said the capability supports institutional stablecoin custody, settlement and treasury operations.

Institutional stablecoin adoption is becoming part of regulated banking infrastructure. Banks, custodians, asset managers, payment firms and stablecoin issuers should watch how custody, minting, redemption and settlement services expand across institutional digital asset workflows.

Geoswift And SKUx Build Programmable Stablecoin Commerce Network

June 29, 2026, Global / United States
  • Geoswift and SKUx announced a partnership to develop a programmable stablecoin commerce network connecting digital assets, traditional finance and real world commerce.
  • The network combines Geoswift's stablecoin settlement, liquidity and compliance infrastructure with SKUx item level controls inside point of sale systems.
  • SKUx said its SKUPay technology is already embedded in an estimated 50% of major US grocery and big box point of sale systems.

Stablecoin payments are starting to connect settlement with spending controls. Merchants, payment networks, wallets, stablecoin issuers, compliance teams and fintechs should watch how programmable rules, item level controls and point of sale integration expand programmable stablecoin payments in commerce.

Artificial Intelligence And Data

MAS Develops Safeguards For AI Agents In Finance

July 3, 2026, Singapore
  • The Monetary Authority of Singapore and industry partners published Safeguards for Agentic Finance at Runtime.
  • The SAFR approach focuses on policy-bound execution, real-time validation, auditability and interoperability for AI agents in finance.
  • Use cases include agent-assisted payments, treasury operations, wealth and advisory workflows, compliance review and client engagement.

Agentic finance needs controls at the point of action. Banks, fintechs, payment firms, wealth platforms and compliance teams should watch how agent identity, authority, escalation, audit trails and transaction limits become core requirements for AI systems that can act on behalf of users.

Bank Of England Flags Agentic AI Financial Stability Risks

June 30, 2026, United Kingdom
  • Bank of England Deputy Governor Sarah Breeden said agentic AI could reshape finance across cyber risk, trading, payments and commerce.
  • The speech warned that AI agents could amplify cyber vulnerabilities, market volatility and operational risks as financial systems operate more autonomously.
  • Breeden said existing technology neutral regulatory frameworks may not be sufficient because current frameworks were not built for autonomous agents.

Agentic finance is becoming a supervisory design question. Banks, fintechs, payment systems, trading firms, AI vendors and regulators should watch how consent, liability, agent identity, market controls, cyber resilience and accountability standards develop as autonomous systems enter financial workflows.

Capital Markets And Market Infrastructure

UK Launches Bond Consolidated Tape

June 30, 2026, United Kingdom
  • The UK bond consolidated tape began operating through ETS Connect UK, combining post-trade data from UK trading venues and over-the-counter markets into a single source.
  • The FCA said the launch makes the UK the first jurisdiction outside North America to implement a bond consolidated tape.
  • The regulator will monitor data quality, completeness and timeliness as market coverage expands.

Market transparency increasingly depends on shared data infrastructure. Exchanges, trading venues, fixed income dealers, market data providers, asset managers and regulators should watch how consolidated bond market data improves price discovery, execution quality and market oversight.

Hong Kong Advances DLT Review For Fixed Income Markets

June 29, 2026, Hong Kong
  • The FSTB and HKMA concluded the first phase of a review on distributed ledger technology use in Hong Kong fixed income markets.
  • The review found Hong Kong’s legal and regulatory environment is sufficiently flexible for tokenised bond issuance.
  • The next phase will examine legal changes for electronic execution, DLT record keeping, possession and transfer of tokenised fixed income instruments.

Tokenised capital markets need legal certainty as much as technology. Issuers, investors, custodians, exchanges, fund managers and regulators should watch how bond issuance, record keeping, settlement and transfer rules adapt as fixed income markets move onto distributed ledger infrastructure.

Risk Compliance And Regtech

FCA Proposes Enforcement Changes For Crypto Market Abuse

June 30, 2026, United Kingdom
  • The FCA proposed targeted changes to its enforcement policies, including extending its financial penalty framework to cryptoasset market abuse.
  • The consultation also proposes higher minimum penalties for the most serious individual market abuse cases, updated hardship thresholds and greater flexibility in settlement decisions.
  • Comments are open until Aug. 10, 2026.

Crypto regulation is expanding beyond market access into enforcement. Cryptoasset firms, trading venues, brokers, compliance teams and market participants should prepare for enforcement policies that increasingly align digital asset markets with established financial market conduct standards.

AMLA Warns MiCAR Transition May Raise Financial Crime Risks

June 29, 2026, European Union
  • The EU Anti-Money Laundering Authority issued an advisory note on money laundering and terrorist financing risks linked to the end of the MiCAR transitional period.
  • The note warns that unauthorized virtual asset service providers may exit, customer relationships may transfer or end, and activity may concentrate among authorized crypto asset service providers.
  • AMLA urged supervisors and firms to monitor customer migration, transaction flows, suspicious activity and risk changes as MiCAR implementation reaches the July 1, 2026 deadline.

Crypto regulation can create financial crime pressure during market transition. CASPs, VASPs, banks, payment firms, exchanges and compliance teams should watch how licensing deadlines, customer migration and supervisory coordination affect AML controls across Europe.

Wealth And Asset Management

FCA Proposes Simpler Investment Disclosure Rules

July 2, 2026, United Kingdom
  • The Financial Conduct Authority proposed a simplified investment disclosure regime to help consumers better understand the costs and charges associated with investing.
  • The proposal replaces overlapping disclosure requirements with a single framework covering investment products, distribution and advice, while supporting the Consumer Composite Investments regime due to take effect in June 2027.
  • The FCA's consumer research found only 6% of existing disclosure documents were written in plain English, reinforcing the need for shorter, clearer and more comparable information.

Investment regulation increasingly focuses on communication as well as compliance. Asset managers, wealth platforms, advisers, fintechs and product manufacturers should prepare for disclosure requirements that prioritize clarity, comparability and consumer understanding alongside regulatory obligations.

Policy Regulation And Governance

CFTC Proposes Reporting Rules For Event Contracts

July 1, 2026, United States
  • The CFTC proposed data reporting requirements for certain event contracts listed on designated contract markets and swap execution facilities.
  • The proposal would add a new Covered Event Contracts section to Part 16 of CFTC regulations.
  • The proposal requests comment on reporting, surveillance, trader identifying information and burdens for markets, intermediaries and traders.

Event contract regulation is moving from listing debates into market surveillance and data reporting. Prediction markets, exchanges, brokers, compliance teams and regulators should watch how reporting rules shape the boundary between derivatives, event markets, gambling and retail speculation.

Conclusion

The strongest fintech companies don't wait for certainty. They recognize patterns early, build where demand is growing and stay ready when regulation catches up. That's the value of watching the evidence, not just the headlines.  NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets, subscribe to NCFA weekly newsletter updates, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Canada Stablecoin Regulations Guide

July 2, 2026 | NCFA Resource | Digital Assets Blockchain And Tokenization, Regulation And Policy, Payments And Market Infrastructure

Canada stablecoin regulations guide covering issuer oversight, reserves, redemption, AML and market readiness

Canada Stablecoin Rules, Oversight And Market Readiness

NCFA has published a comprehensive guide to stablecoin regulations in Canada. It brings together the Stablecoin Act, Bank of Canada supervision and the related requirements administered by FINTRAC, Canadian securities regulators, OSFI and FCAC.

The guide explains how Canada’s framework may affect stablecoin issuance, reserve management, redemption at par, governance, data security, trading platform access, payment activity, custody and consumer protection.

Canada has enacted the Stablecoin Act, but its substantive requirements are not yet in force. Supporting regulations, registration mechanics and Bank of Canada implementation materials remain under development.

What The Guide Covers

The resource organizes Canada’s stablecoin requirements as a connected regulatory framework.

A single stablecoin business model may involve several legal and supervisory layers. Depending on its activities, a firm may need to assess issuer registration, money services business obligations, payment service provider requirements, securities rules, custody controls and prudential treatment.

The guide covers:

  • The Stablecoin Act and its expected regulatory perimeter
  • Bank of Canada registration and issuer supervision
  • Reserve backing and liquidity requirements
  • Redemption at par and user protection
  • FINTRAC registration, AML controls and the Travel Rule
  • RPAA considerations for stablecoin payment activity
  • CSA treatment of value referenced crypto assets
  • OSFI prudential treatment for regulated financial institutions
  • Consumer disclosure and understanding

Who Gets Value

This resource is designed for stablecoin issuers, fintech founders, crypto platforms, custodians, payment companies, banks, compliance teams, investors, policymakers and market infrastructure providers.

It is particularly useful for teams assessing:

  • Stablecoin issuance and market entry
  • Reserve structure and treasury controls
  • Redemption models and user disclosures
  • AML registration and wallet monitoring
  • Payment use cases and RPAA exposure
  • Trading platform and custody requirements
  • Governance, reporting and operational readiness

Strengths And Limits

The guide’s principal strength is its integrated view of Canada’s regulatory structure. Readers can identify which authorities are involved, what Parliament has enacted and which implementation questions remain unresolved.

It also connects regulation with market development. Clear rules for reserves, redemption, custody and compliance could support tokenized financial infrastructure, stablecoin payments and institutional settlement services.

Firms can use the guide to begin preparing legal perimeter assessments, issuer control maps, reserve policies, governance models, data security plans, redemption procedures, AML files and Bank of Canada engagement materials.

Canada’s stablecoin regime is still under development. The guide provides regulatory intelligence and planning support, but it is not legal, financial, investment, compliance or professional advice. NCFA will update the Regulatory Intelligence page as regulations, supervisory materials and implementation dates are confirmed.

Key Resources

Stablecoin Regulations In Canada (primary NCFA Regulatory Intelligence guide)

Deloitte And Stablecorp Bring QCAD To Banks (Canadian stablecoin infrastructure)

Tokenization Starts Looking Like Financial Infrastructure (tokenized market infrastructure)

Finance Canada Stablecoin Framework (primary government source)


National Crowdfunding and Fintech Association of Canada

The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking, funding opportunities and services to thousands of community members. NCFA works with industry, government, partners and affiliates to support a vibrant and innovative fintech and funding industry in Canada.

Decentralized and distributed, NCFA engages with global stakeholders and supports projects and investment across fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets, tokens, artificial intelligence, blockchain, cryptocurrency, regtech and insurtech.

Join Canada’s Fintech & Funding Community free, or become a contributing member to receive additional benefits. Visit NCFA Canada for more information.

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Stablecoin Regulations In Canada

NCFA Regulatory Intelligence - Canada's Stablecoin Regulatory Framework
NCFA Canada | Regulatory Intelligence | Rules | Stablecoins | Last updated October 26, 2026 | Status proposed regulations under consultation
NCFA Regulatory Intelligence | Rules
This guide organizes Canada’s stablecoin framework into a practical reference for fintechs, issuers, payment providers, platforms, investors and policy teams. It now incorporates the October 24, 2026 proposed Stablecoin Regulations and related Retail Payment Activities Regulations amendments.
Stablecoin Regulation In Canada Stablecoin Act, proposed regulations, Bank of Canada oversight, reserves, redemption and payments

Stablecoin Regulations In Canada

Canada has now published proposed operating rules for its federal stablecoin regime. The Stablecoin Act received Royal Assent on March 26, 2026, but its substantive requirements are not yet in force. The proposed Stablecoin Regulations were published in Canada Gazette Part I on October 24, 2026 and remain under consultation.

This guide explains what is already established in legislation, what the proposed regulations would add, who may be covered and how the framework affects issuance, registration, reserves, redemption, custody, payments, trading and market access.

Coverage includes issuer scope, Bank of Canada registration, national security review, Canadian reserve custody, redemption at par, interest and rewards, governance, data security, FINTRAC obligations, RPAA payment activity, CSA value referenced crypto asset treatment, OSFI prudential rules and consumer protection.

New October 24, 2026 Proposed Regulations

Finance Canada has published the proposed Stablecoin Regulations and related RPAA amendments. The package now specifies issuer registration information, national security review periods, reserve assets and Canadian custody, redemption timing and fees, transaction rewards, policy requirements, reporting, cost recovery and the treatment of stablecoin payment functions.

Consultation closes December 23, 2026 at 11:59 p.m. Eastern

The proposal is not final and the regime is not yet operational. The government intends the regulations and Stablecoin Act to come into force in fall 2027 on a date or dates fixed by the Governor in Council.

Stablecoin Regulation In Canada At A Glance

Are stablecoins regulated in Canada?

Yes. Existing payments, AML, securities, prudential and consumer protection requirements can apply. The Stablecoin Act is enacted, and detailed federal regulations are now proposed, but the new issuer regime is not yet in force.

Who will supervise covered issuers?

The Bank of Canada will register and supervise covered issuers under the federal framework.

What are the principal issuer requirements?

The proposed regime covers registration, reserves, Canadian custody, redemption at par, governance, risk management, data security, reporting, recovery planning and restrictions on interest or yield.

Can foreign issuers be covered?

Yes. Domestic and foreign non-financial institution issuers may be covered when they make fiat-backed stablecoins available to Canadians, subject to the Act, proposed regulations and any exemption based on substantially similar regulation.

Are all stablecoins treated the same way?

No. Treatment depends on the stablecoin, issuer, activity and distribution model, including whether securities, derivatives, payments, AML or prudential rules apply.

When Will Canada’s Stablecoin Rules Take Effect?

Canada has progressed from interim securities treatment to an enacted Stablecoin Act and a detailed Canada Gazette proposal. The current phase is consultation. Final regulations, Bank of Canada guidance and legal commencement remain ahead.

Policy and interim controls
Legislation and rule buildout
Implementation and supervision
2023 to 2024CSA InterimVRCA terms for crypto trading platforms
2025Budget 2025federal stablecoin framework proposed
26 Mar 2026Royal AssentBill C-15 enacts Stablecoin Act
24 Oct 2026Gazette Proposaldetailed Stablecoin Regulations published
To 23 Dec 2026Consultationindustry can comment on proposed regulations
2027Final Rules and GuidancePart II regulations and Bank guidance expected
Fall 2027 intentFramework Livecommencement requires Governor in Council order
After launchMarket Usepayments, trading and settlement adoption

Who Regulates Stablecoins In Canada?

Navigate the main authorities, obligations and implementation layers that make up Canada’s stablecoin framework. This reference supports the regulation-to-market pathway below by giving readers a deeper view of each regulatory component.

Framework
Regulatory Layers

Are Stablecoins Regulated In Canada?

Requirements

Canada’s federal framework now consists of an enacted Stablecoin Act and proposed Stablecoin Regulations. The new issuer regime is not yet in force. Existing securities, AML, prudential and payment rules continue to apply where relevant.

  • The federal issuer framework focuses on fiat-backed stablecoins issued by non-financial institutions
  • Domestic and foreign issuers can be captured when they make stablecoins available to Canadians
  • Financial institutions that issue stablecoins are excluded from the Stablecoin Act under section 12
  • The proposed regulations specify registration, reserves, redemption, policies, reporting, fees and national security review
  • Related RPAA amendments would bring prescribed stablecoin payment functions within retail payments supervision
  • CSA, FINTRAC and OSFI requirements continue to operate alongside the federal issuer framework
Implementation

Firms should map the activity first. Issuing a stablecoin, operating a wallet, processing a stablecoin payment, trading a value referenced crypto asset and safeguarding reserve assets can trigger different regulatory layers.

NCFA Perspective

The October 24 proposal makes Canada’s market entry model much more concrete. The key commercial distinction is now between becoming an issuer with reserve, custody and redemption obligations, and participating through payment, wallet, custody or compliance infrastructure.

What Does The Stablecoin Act Require?

Requirements

The Stablecoin Act was enacted through Bill C-15 and received Royal Assent on March 26, 2026. Its substantive requirements are not yet in force. Once commenced, the Act would regulate domestic and foreign non-financial institution issuers that create a fiat-backed stablecoin and make it available for purchase, directly or indirectly, by persons in Canada.

  • Registration with the Bank of Canada
  • At least one-to-one reserve backing in the reference currency
  • Redemption at par
  • Governance, risk management, data security and recovery and resolution policies
  • Public disclosures, reporting and record keeping
  • Restrictions on interest or yield, misleading representations and claims of deposit insurance or government backing
What the regulations add

The October 24 proposal supplies much of the operating detail the Act delegates to regulation, including definitions of creation and distribution control, outstanding stablecoins, closed-loop arrangements, registration information, reserve assets, custody, redemption timing and fees, policy content, significant change notices and supervisory assessment fees.

Scope details

The proposal defines “create” as control over the stablecoin’s properties, including design and generation, and “make available” as control over distribution. For the definition of an outstanding stablecoin, “purchased” would mean purchased by a person whose usual residence, head office or principal place of business is in Canada.

A closed-loop stablecoin would fall outside the SCA where it can only be used within a specified merchant or merchant-group network, including transfers for use in that network, and can be redeemed in fiat only from that merchant, a member of the merchant group or a person affiliated with the issuer.

Governance and complaints

Issuer policies would need to cover governance, risk management, data security and recovery and resolution. The governance policy would also need a complaint process with a web complaint form, acknowledgment within seven days and resolution within 30 days. Risk management and data security policies would require independent review at least every three years, and all required policies must be supported by adequate human and financial resources.

Status

Publication in Canada Gazette Part I starts consultation. It does not make the proposed regulations final or bring the Stablecoin Act into force. Final regulations would need to be published and commencement would occur on a day or days fixed by the Governor in Council.

NCFA Perspective

The legal anchor was established in March. The October proposal now gives firms enough detail to begin serious entry modelling, but not enough certainty to treat fall 2027 as a fixed legal commencement date.

Registration and National Security

Proposed requirements

Applicants would use a Bank of Canada electronic system and provide detailed information about ownership, structure, stablecoin design, reserve assets, qualified custodians, third parties and technology locations. Foreign applicants without a Canadian place of business would need a person in Canada authorized to accept service.

  • Stablecoin name, symbol, reference currency, par value, distribution method and creation process
  • Evidence of one-to-one reserve backing and the proposed reserve asset list
  • Qualified custodian information and evidence of compliant custody
  • Material third parties, their activities and geographic technology locations
  • Ownership, affiliates, directors, senior officers and persons with significant influence
  • Information needed for national security screening
National security review

The Minister of Finance would have 60 days to decide whether to conduct a national security review, with possible additional 60-day extensions. A review, once launched, would have a 180-day period that can also be extended in additional 180-day periods. This is separate from the Bank of Canada’s ordinary registration process.

Existing issuers

The proposal would allow an issuer already operating immediately before commencement to continue temporarily if it applies within 30 days after the Stablecoin Act comes into force. New entrants would generally need registration before issuing.

NCFA Perspective

Registration is now a market access process, not only a disclosure exercise. Ownership, reserve design, outsourcing, data location and national security review can all affect timing and entry planning.

Bank of Canada Oversight

Requirements

The Bank of Canada would register and supervise covered issuers, maintain the issuer registry, monitor compliance, request information and use enforcement powers where obligations are not met. The Bank says its supervision will focus on full backing, par redemption and safe, reliable issuance.

  • Public issuer registry with issuer, stablecoin, third party and qualified custodian information
  • Monthly reporting, including reserve information and an accountant’s opinion required by the Act
  • Incident notices without delay, followed by an update once response measures are taken
  • Significant change notices, generally at least seven days in advance, with 30-day and 60-day advance periods for specified data and technology-location changes and as-soon-as-feasible treatment for certain other changes
  • Records sufficient to demonstrate compliance, generally retained for five years
  • Future Bank guidance after final regulations to explain supervisory expectations
Cost recovery and issuer assessments

The Stablecoin Act requires the Bank to recover its stablecoin supervision costs from registered issuers. The Gazette estimates those costs at about C$2.5 million annually. The proposed base assessment uses an issuer’s average monthly value of outstanding stablecoins: C$750,000 for C$1 billion or more, C$350,000 for C$500 million to under C$1 billion, and C$25,000 below C$500 million, subject to CPI adjustment. Tier 1 and Tier 2 issuers would also share 75% and 25%, respectively, of remaining recoverable costs; Tier 3 has no variable amount.

Compliance costs and enforcement

The Regulatory Impact Analysis estimates annualized incremental costs of the proposed Stablecoin Regulations at C$88,521 across affected issuers, or C$17,704 per regulated issuer on average under its assumptions. That estimate is distinct from Bank supervision assessments and from the broader operating cost of reserves, custody, governance and technology. Proposed administrative monetary penalties range from C$1 to C$1 million for serious violations and C$1 to C$10 million for very serious violations, subject to the detailed provisions and penalty criteria.

NCFA Perspective

For smaller issuers, the important cost question is not the Gazette’s narrow incremental compliance estimate by itself. It is the combined cost of supervision, reserve operations, Canadian custody, governance, reporting and technology controls.

Reserves and Backing

Proposed requirements

At the end of each day, reserve assets would need a market value equal to or greater than the par value of outstanding stablecoins and would need to be denominated in the reference currency.

  • Demand deposits, including cash
  • Government debt with three months or less remaining maturity
  • One business day reverse repurchase agreements backed by eligible government debt
  • Money market funds invested entirely in the reference currency or eligible reserve assets
  • Reserve assets generally cannot be pledged or encumbered for other obligations
  • Separate reserve accounts would be required for different stablecoins
Canadian custody

Reserve assets would have to be held with a qualified custodian incorporated or formed under federal or provincial Canadian law. This would exclude financial institutions that are not incorporated in Canada from acting as the qualified custodian for these reserve assets.

Insolvency protection

The Act requires segregated, bankruptcy remote reserve assets that are protected from claims by the issuer’s or custodian’s other creditors except for claims of stablecoin holders. Issuers could withdraw reserve returns only while the reserve remains fully backed.

NCFA Perspective

Canadian custody is one of the proposal’s clearest infrastructure choices. It could create domestic demand for custody, reserve banking, reconciliation and attestation services while adding an operating requirement for foreign issuers serving Canadians.

Redemption and User Protection

Proposed requirements

Issuers would have to redeem stablecoins one to one in the reference fiat currency and publish a clear redemption policy in both official languages.

  • Redemption on request without a minimum redemption amount
  • Redemption completed within three business days
  • The deadline covers liquidation of required reserve assets and initiation of the fiat transfer
  • Redemption fees capped at 1% of the redeemed amount
  • At least seven days’ public notice before a redemption fee is introduced or increased
  • Daily redemption limits only where market liquidity is insufficient to meet all requests
  • Published policy must describe payment methods and when daily limits may apply
Consumer protection

The proposed rules also prohibit representations that a stablecoin is legal tender, a deposit or proof of deposit, publicly insured or government guaranteed. Stablecoin redemption should not be described as equivalent to deposit insurance.

NCFA Perspective

Redemption is now measurable. Timing, fee ceilings, payment methods and liquidity exceptions give users and firms a much clearer standard for comparing issuer models.

Interest, Yield and Rewards

Proposed requirements

The Stablecoin Act prohibits issuers from paying interest or yield tied to holding a stablecoin. The proposed regulations clarify that issuers also could not use indirect arrangements that fund payments designed to encourage holders to maintain larger balances or hold for longer periods.

  • Issuer-paid interest or yield on held balances remains prohibited
  • Misleading terms, symbols or representations suggesting such yield would also be prohibited
  • Income-sharing arrangements intended to fund holding-based yield can be captured
  • A payment or reward tied only to using a stablecoin in a transaction, and not to holding it, is not treated as prohibited interest or yield
Implementation

Rewards programs will need to be designed around actual transaction use rather than time or balance held. Firms should assess the economic substance of arrangements rather than relying on the label attached to a reward.

NCFA Perspective

The proposal draws a deliberate boundary between payment incentives and deposit-like returns. The broader international debate over stablecoin rewards and banking competition belongs in separate strategic analysis rather than being collapsed into this rule guide.

FINTRAC and AML

Requirements

FINTRAC has stated that stablecoin issuers will be required to register as money services businesses dealing in virtual currency once the relevant changes come into force. AML obligations therefore sit alongside Bank of Canada issuer supervision rather than replacing it.

  • MSB registration and virtual currency obligations
  • Customer due diligence and record keeping
  • Travel Rule processes where applicable
  • Sanctions and wallet screening
  • Suspicious transaction and other prescribed reporting
Implementation

Issuers and platforms should connect issuance, reserve and redemption controls to customer due diligence, wallet monitoring, sanctions screening, transaction reporting and escalation processes.

NCFA Perspective

Stablecoin use can operate at payment speed, so the compliance layer needs to be equally operational. That remains a material opportunity for Canadian regtech and blockchain analytics providers.

Payments and RPAA

Proposed requirements

The October 24 package proposes amendments to the Retail Payment Activities Regulations so PSPs that perform payment functions using prescribed stablecoins can fall within the RPAA. This is separate from regulation of the issuer under the Stablecoin Act.

  • Providing or maintaining a payment account
  • Holding stablecoin units for an end user, which is different from holding the issuer’s reserve assets
  • Payment initiation
  • Payment authorization and transmission
  • Clearing or settlement
  • Transmission or maintenance of an end user’s encrypted or tokenized payment instrument or private key
Which stablecoins are prescribed

The proposed RPAR definition excludes closed-loop stablecoins. It would cover stablecoins issued by entities on the Bank of Canada’s stablecoin issuer list and stablecoins issued by financial institutions subject to federal, provincial or foreign requirements that are substantially similar to specified Stablecoin Act protections.

Stablecoin-specific safeguarding

Where a PSP holds stablecoins on behalf of an end user, the proposal adds a safeguarding option using a separate entity whose sole purpose is holding end-user funds. The entity would be the registered holder on the distributed ledger, and the stablecoins and associated rights must not form part of the PSP’s estate. Safeguarding frameworks would also need procedures to give end users access to funds without delay if the stablecoin issuer becomes insolvent, including procedures for redemption into the reference fiat currency.

PSP obligations

Covered PSPs would be subject to applicable Bank of Canada registration, operational risk management, incident response, safeguarding, reporting and national security requirements. Safeguarding frameworks are independently reviewed every three years under the RPAR. The RPAA also contains exemption mechanisms intended to reduce overlap with substantially similar regimes and securities transactions.

NCFA Perspective

This creates a clearer service layer around stablecoins. A wallet, processor or infrastructure company can participate in stablecoin payments without necessarily taking on the reserve and redemption obligations of becoming the issuer.

CSA and Trading Platforms

Requirements

The CSA’s interim approach applies to value-referenced crypto assets, commonly called stablecoins, on crypto asset trading platforms. The CSA has permitted certain fiat-backed crypto assets to continue trading where platforms and issuers meet terms and conditions.

  • CTPs must assess whether a VRCA and issuer satisfy applicable terms
  • Issuer undertakings and platform conditions are key controls
  • Platforms must disclose risks, including that secondary market value may deviate from par and reserves may not satisfy all redemptions
  • Platforms need policies for halting or suspending purchases or deposits if conditions are no longer met
Implementation

Platforms should maintain VRCA due diligence files, issuer undertaking records, reserve disclosure links, risk disclosures, product monitoring, halt and suspension playbooks and client-facing stablecoin risk language.

NCFA Perspective

The securities layer won’t disappear just because Canada now has a federal stablecoin framework. Trading, distribution and platform access will remain important parts of the Canadian stablecoin operating model.

OSFI and Prudential Treatment

Requirements

OSFI’s cryptoasset exposure guideline sets regulatory capital and liquidity treatment for banks, federal credit unions, bank holding companies, federally regulated trust companies and federally regulated loan companies. Separate insurance guidance applies to insurers. The banking guideline took effect on January 1, 2026.

  • FRFIs must classify and treat cryptoasset exposures for capital and liquidity purposes
  • The guideline does not decide whether an institution is permitted to issue or hold a cryptoasset
  • Institutions should notify OSFI regarding cryptoasset exposures where required
  • CBDCs are outside the scope of the guideline
Implementation

Banks and regulated financial institutions should assess direct and indirect stablecoin exposures, custody arrangements, issuer relationships, tokenized asset products, capital treatment, liquidity implications and OSFI notification triggers.

NCFA Perspective

OSFI’s layer matters because stablecoin infrastructure may rely on banks for custody, settlement, treasury and institutional distribution. Prudential treatment can affect how quickly incumbents participate.

Consumer Understanding

Requirements

FCAC research shows stablecoin awareness and understanding are still policy issues. It also noted that stablecoins and cryptoassets were not covered by federal or provincial deposit insurance at the time of the research. Consumer understanding matters because stablecoins may sound safer than they are.

  • Consumers need clear information on how stablecoins differ from cash, bank deposits and insured accounts
  • Disclosures should explain backing, redemption, custody, fees, issuer risk, platform risk and loss scenarios
  • Consumer protection depends on plain language, not only technical compliance
Implementation

Issuers and platforms should test consumer disclosures, avoid deposit-like language unless legally accurate, explain insolvency and redemption risk, and make sure users understand who is responsible for each part of the product.

NCFA Perspective

Consumer trust can’t be built on the word stable. It has to be earned through reserve transparency, redemption rights, clear platform roles and language people can understand.

What Can Industry Still Influence?

The October 24 package is a proposal. Comments are open for 60 days. The Gazette states that representations, including attachments, will be published on the Canada Gazette website subject to its terms of use. The most decision-useful issues are those delegated to regulation rather than requirements fixed directly in the Stablecoin Act.

Market Entry

Registration information, transitional treatment, supervisory assessments and how requirements scale for smaller issuers.

Reserve and Redemption

Canadian custodian eligibility, reserve flexibility, redemption timing, liquidity exceptions and the 1% fee ceiling.

Payments and Competition

RPAA scope, foreign issuer recognition, transaction rewards, regulatory overlap and international interoperability.

Deadline: December 23, 2026 at 11:59 p.m. Eastern. Use the official Canada Gazette consultation. Changes to the Stablecoin Act itself would require legislative amendment rather than this regulatory consultation.

How Canada Compares With Other Stablecoin Regimes

Canada’s framework is easier to understand beside other mature stablecoin regimes. Select a jurisdiction to compare implementation status, primary authority, regulatory model and strategic relevance for Canada.

Canada now has a detailed proposed operating model for fiat-backed stablecoin issuance by non-financial institutions. The proposal adds registration information, Canadian reserve custody, redemption timing and fees, policy requirements, reporting, cost recovery and RPAA treatment for prescribed stablecoin payment functions.

The regime is still not operational. Consultation closes December 23, 2026 and final regulations and Bank guidance remain ahead.

Regulatory model

Stablecoin Act issuer framework with Bank of Canada supervision, Finance Canada policy direction and parallel FINTRAC, CSA, RPAA and OSFI requirements.

Key focus
  • 1:1 reserve backing
  • Canadian qualified custody
  • Three business day redemption
  • Issuer and PSP registration boundaries
Strategic observation

Canada’s key market design question is now whether the combined issuer, custody, supervision and payment requirements provide enough certainty for new entry without concentrating activity in the largest firms.

The UK has final FCA rules for non-systemic qualifying stablecoins covering issuance, backing assets, redemption, safeguarding and disclosures. Systemic payment stablecoins sit in the Bank of England perimeter.

This gives Canada a useful comparison for issuer design, backing assets, custody, redemption and how to separate retail-market and systemic payment oversight.

Regulatory model

FCA stablecoin issuance rules inside the wider UK cryptoasset regime, with separate treatment where payment stablecoins become systemic.

Key focus
  • Backing asset pools
  • Redemption and safeguarding
  • Issuer governance
  • Custody, conduct and operational resilience
Strategic observation

The UK separates stablecoin issuance from broader cryptoasset activity while tying stablecoins to custody, disclosure and conduct rules.

MiCA creates a harmonized EU regime for cryptoassets, including asset-referenced tokens and e-money tokens. The stablecoin elements were among the earliest parts of MiCA to apply.

For Canada, the EU is the strongest example of a large market using a passportable stablecoin and cryptoasset framework across multiple member states.

Regulatory model

Single-market cryptoasset regulation with specific stablecoin categories for ARTs and EMTs.

Key focus
  • Authorization and white papers
  • Reserve assets and own funds
  • Redemption rights
  • Significant token supervision
Strategic observation

MiCA gives Europe an integrated market structure advantage. Canada does not have equivalent passporting, so interoperability and provincial coordination matter more.

The U.S. framework now has a final OCC rule covering payment stablecoin issuer activities, reserves, redemption, risk management, custody, applications, supervision and foreign issuers under OCC jurisdiction.

For Canada, the comparison is increasingly practical rather than theoretical because the U.S. regime is scheduled to take effect months before Canada’s intended fall 2027 implementation.

Regulatory model

Federal payment stablecoin legislation with permitted issuer categories, federal and state supervision and separate treatment for foreign issuers.

Key focus
  • Permitted issuers
  • Reserve assets and redemption
  • Custody and supervision
  • Foreign issuer market access
Strategic observation

Canadian interoperability will depend on whether the Bank of Canada eventually recognizes substantially similar foreign regimes and which Canadian obligations continue to apply after recognition.

Singapore’s framework focuses on single-currency stablecoins pegged to the Singapore dollar or G10 currencies and issued in Singapore, with strong emphasis on reserve backing, redemption and disclosure.

It is useful for Canada because it shows how a smaller financial centre can set a high-trust stablecoin regime without trying to cover every possible cryptoasset activity at once.

Regulatory model

MAS single-currency stablecoin framework connected to Payment Services Act amendments and digital payment token oversight.

Key focus
  • Reserve asset quality
  • Redemption at par
  • Disclosure
  • Issuer capital and governance
Strategic observation

Singapore’s approach is narrow and trust-centred. Canada can use a similar discipline while accounting for securities and federal-provincial overlays.

Hong Kong has an active licensing regime for fiat-referenced stablecoin issuers, with HKMA supervision and a policy objective tied to virtual asset market development and financial stability.

For Canada, Hong Kong is a useful comparison because it connects stablecoin licensing with a broader digital asset market strategy and clear issuer licensing.

Regulatory model

Dedicated stablecoin issuer licensing under the Stablecoins Ordinance.

Key focus
  • Issuer licensing
  • Reserve asset management
  • Redemption arrangements
  • Governance and risk controls
Strategic observation

Hong Kong is treating stablecoins as part of financial centre strategy. Canada’s framework will need a clearer market-development lane if it wants domestic issuance, not only control of foreign tokens.

Japan permits stablecoin issuance through regulated channels such as banks, trust companies and fund transfer service providers, with stablecoins treated through payment services and electronic payment instrument rules.

The Japanese model anchors stablecoin issuance in regulated financial institutions and payment functions rather than a broad open issuer perimeter.

Regulatory model

Payment Services Act and related rules for electronic payment instruments, with issuance through regulated financial channels.

Key focus
  • Bank, trust company and fund transfer service pathways
  • Redemption and user protection
  • Payment services use
  • Transfer and intermediary rules
Strategic observation

Japan offers a more institution-led comparison. Canada’s non-financial issuer mandate is broader, so its controls need to be clear enough for market trust.

The FSB’s global stablecoin recommendations seek consistent regulation, supervision and oversight of global stablecoin arrangements while allowing jurisdictions to implement domestic approaches.

This is important for Canada because cross-border stablecoin use depends on compatible standards for governance, risk management, redemption, reserve assets, data sharing and regulatory cooperation.

Regulatory model

High-level recommendations rather than domestic law. They set a baseline for authorities designing local frameworks.

Key focus
  • Governance and risk management
  • Financial stability monitoring
  • Redemption and reserve quality
  • Cross-border cooperation
Strategic observation

Canada’s framework should be easy for other authorities to recognize. That matters for cross-border use and domestic credibility.

Strategic Takeaways for Canada

Regulatory operating quality

The main difference between leading jurisdictions is not whether stablecoins, payments, AML, digital assets and consumer protection are regulated. Most serious markets are building rules across those areas. The practical difference is how clearly those rules connect. Jurisdictions with coordinated rulebooks, visible implementation timelines and clear supervisory entry points give firms a better path from compliance planning to market launch.

Market structure

Stablecoin regulation is converging around reserve quality, redemption rights, issuer governance and disclosure. The strategic difference is market design. The EU offers passporting, Hong Kong and Singapore connect licensing to financial-centre strategy, Japan limits issuance to regulated financial channels, and the U.S. focuses on dollar stablecoin scale.

Canada’s coordination challenge

Canada’s October 24 proposal now specifies many of the operating requirements firms were waiting for. The remaining coordination challenge is how Bank of Canada issuer supervision, RPAA payment oversight, FINTRAC registration, CSA cryptoasset treatment and OSFI prudential rules work together in practice.

Cross-border use

Canadian users and platforms will likely interact with USD stablecoins regardless of domestic issuance. The framework therefore needs rules for foreign stablecoins made available in Canada, not only rules for Canadian issuers.

Market opportunity

The opportunity is compliant settlement infrastructure. If Canada can make reserves, redemption, custody and AML controls clear, stablecoins can support programmable payments, tokenized settlement and cross-border transaction flows without relying entirely on foreign operating models.

Where Canada Aligns

  • Reserve backing
  • Redemption at par
  • Issuer governance
  • AML and sanctions controls
  • Disclosure and consumer understanding

Where Canada Differs

  • Bank of Canada registration model
  • CSA value-referenced crypto asset overlay
  • FINTRAC MSB obligations
  • RPAA payment activity overlap
  • Federal and provincial coordination burden

Global Direction

Major jurisdictions are converging around high-quality reserves, redemption rights, issuer governance, disclosures and AML controls. They continue to diverge on market access, supervisory structure, passporting, foreign issuer treatment and how directly stablecoin policy connects to national competitiveness.

Canada’s challenge is now implementation quality. Final rules, Bank guidance, recognition decisions and practical coordination across the federal, securities, payments, AML and prudential layers will determine how easy it is for firms to launch or participate.

What The Rules Mean For Canadian Firms

NCFA’s regulation-to-market pathway shows how Canada’s stablecoin framework can move from policy and supervision into market capabilities and innovation opportunities. The visual is not a legal hierarchy. It is a market-development map showing how regulatory functions connect to the operating capabilities firms need to build trusted digital money infrastructure.

ParliamentStablecoin Act
Finance CanadaProposed regulations and policy
Bank of CanadaIssuer supervision, reserves, redemption
FINTRACMSB registration, AML, Travel Rule
CSA / CIROTrading platforms, VRCAs, custody
OSFI / FCACPrudential exposure, consumer understanding
Stablecoin IssuersRegistration, Canadian custody, reserves, redemption, reporting
Wallets and PSPsPayment activity, safeguarding, access
Custodians and BanksCanadian reserve custody, banking, controls, attestations
Stablecoin PaymentsWallet flows, merchant acceptance, cross-border use
Tokenized SettlementDigital asset workflows, programmable transactions, cash leg
Treasury and Reserve ServicesReserve banking, attestations, liquidity controls
Institutional CustodySafeguarding, operational controls, platform access
Compliance AutomationAML, identity, wallet screening, reporting

Stablecoin Infrastructure And Market Opportunities

These opportunity areas align with the capabilities in the pathway above. Only the published NCFA Opportunity Brief receives a primary call to action; the other nodes show where future research or Innovation Map coverage can expand.

Consumer and Merchant

Stablecoin PaymentsPublished Opportunity Brief
Merchant AcceptancePoint-of-sale and wallet payment rails
Cross-border RemittancesLower-friction money movement
Wallet ServicesConsumer and small business access

Business and Institutional

Tokenized SettlementCash leg for digital asset workflows
Treasury and Reserve ServicesReserve banking, attestations, liquidity controls
Institutional CustodySafeguarding and operational infrastructure
Programmable PaymentsBusiness rules embedded in payment flows

Compliance and Infrastructure

AML AutomationMonitoring, reporting and sanctions controls
Wallet ScreeningRisk scoring and transaction intelligence
Digital Identity and TrustKYC, verification and reusable trust layers
Regulatory ReportingIssuer, PSP and platform reporting tools

Continue Exploring

Use these links to go deeper into the adjacent regulations, market evidence and infrastructure themes connected to Canada’s stablecoin framework.

Guide: PSP Registration with Bank of Canada under RPAARetail payment supervision is a key adjacent layer for stablecoin payment activity and PSP participation.Open RPAA guide
Canada’s Proposed Consumer-Driven Banking RulesRelated Regulatory Intelligence on Canada’s open banking framework, data portability and implementation path.Open related guide
Stablecoin Data Shows Payments Reality GapMarket evidence on stablecoin usage, payment adoption and infrastructure gaps.Read related analysis

NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights

NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

FCA Emerging Technology Horizon Scan 2026 Resource

Jul 2, 2026 | NCFA Resource | Artificial Intelligence And Data, Digital Assets Blockchain And Tokenization, Risk Compliance And Regtech
NCFA Resource – FCA Emerging Technology Horizon Scan 2026 Resource

FCA Emerging Technology Horizon Scan 2026 Resource

On June 10, 2026, the UK Financial Conduct Authority published the FCA Emerging Technology Horizon Scan 2026. The report examines how AI agents, synthetic financial crime and programmable finance could affect consumers, firms, markets and financial infrastructure through 2030.

NCFA's FCA Emerging Technology Horizon Scan guide turns the report into an interactive regulatory foresight resource. It separates the FCA's findings from implementation considerations, NCFA interpretation and Canadian relevance.

What It Covers

The FCA organizes the Horizon Scan around three technology convergence themes:

  • Personalised Intelligence: AI agents, digital twins, consumer delegation and the proxy economy.
  • Synthetic Insecurity: Synthetic identity, deepfakes, autonomous financial crime, market abuse and cyber resilience.
  • Programmable Finance: Tokenization, stablecoins, CBDCs, smart contracts, digital identity, smart data and interoperable infrastructure.

The guide also connects the Horizon Scan with later FCA work, including the Mills Review, the Supercharged Sandbox and the joint frontier AI cyber resilience statement.

What It Does In Practice

The resource helps fintech leaders assess technology combinations rather than treating AI, distributed ledgers, identity, data, payments and cyber risk as separate issues.

Readers can use the interactive explorer to review:

  • What the FCA says
  • Implementation considerations
  • Strategic and market implications
  • NCFA perspective
  • Canadian reference points
  • Questions for firms and policymakers

The FCA Horizon Scan sits before formal regulation. It identifies early indicators that may affect product governance, consumer protection, financial crime controls, market surveillance, operational resilience and infrastructure design.

Who Gets Value

This resource is useful for fintech founders, financial institutions, AI developers, digital asset firms, regtech providers, compliance teams, cybersecurity leaders, investors, policymakers and market infrastructure firms.

It is especially relevant to teams assessing AI agent governance, synthetic identity, deepfake risk, automated financial crime, tokenized finance, programmable payments, stablecoins, digital identity, smart data and operational resilience.

Strengths And Limits

The resource's main strength is its focus on convergence. It shows how AI agents, identity systems, synthetic media, tokenized assets, smart contracts and payment infrastructure may operate together.

It also supports practical planning. Firms can use it to test product assumptions, fraud controls, data strategy, identity plans, tokenized financial infrastructure and board level governance.

The FCA Horizon Scan is not regulatory guidance, a rulebook or a prediction. It does not create requirements or confirm that its scenarios will occur. Readers should use the guide for regulatory intelligence, scenario planning and strategic review, not as legal, financial, investment, compliance or professional advice.

Key Resources

FCA Emerging Technology Horizon Scan (interactive NCFA Regulatory Intelligence guide)

FCA Emerging Technology Horizon Scan 2026 (primary FCA source)

The Mills Review (FCA review of AI and retail financial services through 2030)

Frontier AI And Cyber Resilience (FCA, Bank of England and UK Treasury statement)

AI Agents Enter Governed Financial Workflows (AI governance and controls)

Tokenization Starts Looking Like Financial Infrastructure (programmable finance context)

MIT AI Risk Repository For Fintech Governance (AI risk taxonomy resource)


NCFA CanadaThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit www.ncfacanada.org.

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

FCA Emerging Technology Horizon Scan 2026

NCFA Regulatory Intelligence - FCA Emerging Technology Horizon Scan 2026
NCFA Canada | Regulatory Intelligence | Strategy | AI, Programmable Finance and Financial Crime | Last updated July 19, 2026
NCFA Regulatory Intelligence | Regulatory Foresight
This regulatory foresight guide translates the FCA Emerging Technology Horizon Scan 2026 into scenario analysis, supervisory context, implementation questions and Canadian relevance. The FCA states that the report is not regulatory guidance or a prediction document.
NCFA Regulatory Intelligence | Regulatory Foresight FCA Emerging Technology Horizon Scan 2026

FCA Emerging Technology Horizon Scan

The FCA Emerging Technology Horizon Scan 2026 sets out three plausible ways emerging technologies could combine across financial services. It focuses on early indicators, potential risks and strategic questions rather than binding rules.

Use this guide to understand how the FCA frames technology convergence across Personalised Intelligence, Synthetic Insecurity and Programmable Finance, how later FCA work develops those themes, and what they may mean for fintech strategy, supervision and financial infrastructure.

Coverage includes AI agents, digital twins, proxy economy risks, synthetic identity, deepfakes, autonomous financial crime, synthetic market abuse, operational resilience, tokenization, stablecoins, CBDCs, digital identity, smart data, Finternet, cross border interoperability and current FCA developments.

Primary SourceFCA Emerging Technology Horizon Scan 2026
Document type: Regulatory strategy and horizon scan, not formal guidance or a rulebook.

Technology Convergence Journey

The Horizon Scan sits before formal regulation. It identifies plausible technology pathways that could affect consumer protection, financial crime prevention, operational resilience, infrastructure modernization and future supervisory focus.

Signals and research
Adoption and risk formation
Supervisory and market response
Global Pressures2024 to 2026
AI, geopolitics, energy and infrastructure constraints
Horizon ScanJune 2026
FCA publishes its first external technology scan
Mills ReviewJuly 2026
FCA publishes seven AI recommendations
Testing And Adoption2026
Firms test agents, identity, tokenization and controls
Supervisory FocusCurrent
Risk, resilience, fraud and consumer outcomes
2030 ScenariosOngoing
Agentic finance, synthetic risk and programmable infrastructure

Strategic Themes at a Glance

The FCA report is organized around three technology convergence themes that cut across AI, fraud, cyber, digital assets, payments and infrastructure modernization.

AI agentsPersonalized tools could become the main interface between consumers and firms
Digital twinsNew data sources could support real time personalization and bespoke financial products
Synthetic financial crimeAI can industrialize deception, identity fraud, cyberattacks and market manipulation
Programmable financeDLT, stablecoins, CBDCs and smart contracts could reshape financial plumbing
Smart dataOpen finance and cross-sector data may support agentic, context-aware services
Digital identityIdentity becomes a core layer for interoperable financial infrastructure
FinternetInterconnected financial ecosystems could allow capital to move like information
Trust systemsFinancial services may need new methods to verify authenticity and evidence

Technology Strategy Explorer

Navigate the FCA Horizon Scan by strategic theme. Each section separates what the FCA says, implementation considerations and NCFA perspective.

Overview Personalised Intelligence Synthetic Insecurity Programmable Finance

Overview

What the FCA says

The FCA says the Horizon Scan is its first external publication of this kind. It is not a prediction report or regulatory guidance. It presents three plausible ways emerging technologies could combine to affect consumers, firms and markets, and it highlights early signals of new risks.

  • The report is built around the FCA's strategic priorities: helping consumers navigate financial lives, fighting financial crime and supporting growth and innovation in the UK
  • The three main themes are Personalised Intelligence, Synthetic Insecurity and Programmable Finance
  • The report frames technology change as convergence, where AI, DLT, digital identity, smart data, stablecoins, CBDCs, smart contracts and cyber capabilities combine rather than develop in isolation
  • The FCA intends the report to support collaboration, informed debate and knowledge-sharing across the financial services ecosystem
Implementation considerations

Firms should treat the report as a strategic risk and opportunity map. It can inform board horizon scanning, innovation planning, product governance, cyber risk, fraud controls, data strategy, digital identity planning, tokenization strategy and operational resilience assessment.

Strategic implications
  • Firms may need stronger ways to verify AI generated evidence, identities and decisions
  • Consumer protection may depend on tools that preserve agency while using AI assistants
  • Fraud and cyber controls may need to account for synthetic media and autonomous attacks
  • Programmable finance may require infrastructure for settlement, compliance, identity and cross border interoperability
NCFA perspective

This is an upstream regulatory strategy signal. It shows where future supervision may focus before formal rules appear. For NCFA, it connects directly to AI, digital identity, fraud, open finance, tokenization, stablecoins, CBDCs, cybersecurity, payments modernization and programmable market infrastructure.

State of the World

What the FCA says

The FCA frames emerging technology against broader global pressures, including AI competition, geopolitical tension, trade disputes, energy demand, critical materials, data centre growth, environmental pressure and divergent regulatory approaches. It notes that AI debate often runs faster than measurable evidence, while practical adoption is already taking root in customer engagement and agentic payments.

  • AI is becoming an economic, geopolitical and societal force
  • AI energy and chip demand may affect climate goals, hardware access and scaling economics
  • AI enabled customer engagement and agentic payment systems are already visible
  • Live deepfakes, synthetic identities and coordinated cyberattacks may undermine trust
  • Different AI regulatory models, including the UK approach and EU AI Act, may create a multiple standard environment
  • CBDCs, digital assets and stablecoins could reshape parts of the international financial architecture
  • Digital public infrastructure such as IndiaStack is gaining momentum in developing markets
Implementation considerations

Boards should connect technology strategy to geopolitical supply chains, energy exposure, cloud concentration, vendor dependency, AI model access, regulatory divergence and cross border interoperability. Technology adoption should be assessed against measurable outcomes rather than hype.

NCFA perspective

The FCA is treating technology strategy as market structure strategy. The signals are not only about tools. They are about who controls interfaces, identity, compute, data, payment rails, settlement and trust verification.

Personalised Intelligence

What the FCA says

Personalised Intelligence examines how AI, personal data, edge computing, digital twins and adaptive interfaces could change consumer outcomes. AI agents could become the main interface between consumers and firms, making financial services more personalized, automated and embedded in daily life.

  • Consumers may delegate daily financial management to AI agents
  • Adaptive interfaces may replace separate financial apps and comparison tools
  • AI agents may turn consumer intent into action and make decisions on behalf of users
  • Wearables, biometric data and behavioural data could support real time digital twins
  • Small language models and edge computing may enable offline, private intelligence on devices
  • Financial markets may become more opaque as products are tailored to each consumer
Implementation considerations

Firms need to decide whether they are designing for human users, AI representatives or both. Product governance, disclosure, consent, suitability, accessibility, fair value and complaints processes may need to reflect agent-mediated consumer journeys.

Market implications
  • Trusted personal finance agents
  • AI interface compliance assessment
  • Consumer consent and delegation dashboards
  • Financial product comparability tools for agent-mediated markets
  • Explainability layers for hyper-personalized financial products
NCFA perspective

The key question is whether AI increases consumer capability or quietly transfers decision power to opaque systems. The opportunity is strong, but consumer agency, privacy, accessibility and accountability become central design requirements.

AI Agents

What the FCA says

The report describes escalating cognitive delegation, progressing from assistive mode to advisory mode and then autonomous action mode. In autonomous action models, proxies may negotiate, transact, optimize bills, reallocate investments or dispute charges within dynamic constraints.

  • Assistive mode explains products, compares options, pre-fills forms and flags risks while humans decide
  • Advisory mode recommends specific actions for consumers to accept
  • Do-it-for-me mode allows proxies to act autonomously within constraints
  • Consumer attention may shift to escalation cases rather than everyday financial management
  • Marketing and product design may target AI proxies rather than humans
Implementation considerations

Firms should assess how products appear to AI agents, how consent is collected, how human review is triggered and how agent decisions can be audited. Customer support should anticipate cases where consumers do not understand actions taken by their AI representatives.

NCFA perspective

AI agents could become the next distribution layer in financial services. The competitive question is not only who has the best app, but whose product is selected, negotiated and trusted by a consumer's agent.

Digital Twins

What the FCA says

The report describes digital twins as AI representations that could draw on financial data, device data, behavioural signals, wearables and broader preferences. Firms could use these tools to offer more personalized products and support by interacting with a consumer's digital twin or AI agent.

  • Digital twins may help consumers simulate choices and negotiate financial products
  • Wearables and biometric data may support real time personalisation
  • Firms may engage with a consumer's AI representative rather than the consumer directly
  • Financial products may become bespoke, dynamic and harder to compare
  • The line between serving a consumer and serving their AI representative may become unclear
Implementation considerations

Digital twin use raises data minimization, consent, explainability, vulnerability, discrimination, product governance and audit questions. Firms need controls to avoid overfitting products to sensitive traits or creating exclusion through complexity.

NCFA perspective

Digital twins may support inclusion and better advice, but they could also create high-risk personalization. The market will need guardrails around what data should be used, who controls the twin and how decisions can be challenged.

Proxy Economy

What the FCA says

The FCA describes a potential proxy economy where AI proxies act for consumers and competition shifts from human attention to algorithmic negotiation. The report warns that consumers may accept proxy permissions casually, similar to how web cookies are often accepted today.

  • AI proxies may filter, rank and act on behalf of consumers
  • Firms may optimize marketing and product design for proxies rather than people
  • Consumers may lose oversight of how decisions are made
  • New dark patterns may target AI recommendation logic
  • Mis-selling may occur through adversarial optimization rather than direct persuasion
Implementation considerations

Consumer protection may need to account for proxy choice architecture, permission design, escalation rules, audit trails and agent conflicts. Firms should review whether their own AI interfaces favour the firm over the consumer.

NCFA perspective

The proxy economy could rewrite financial distribution. It may reduce consumer inertia, but it may also create a new layer of algorithmic gatekeeping. This is a high value area for future NCFA question posts and opportunity analysis.

Synthetic Insecurity And Financial Crime

What the FCA says

Synthetic Insecurity examines how AI expansion of human thought, labour, value chains and digital infrastructure could make simulated data difficult to distinguish from real data. The FCA describes a future where fabricated truth becomes harder to separate from actual truth.

  • AI can create synthetic identities, convincing images and automated applications
  • Frontier models can mimic human reasoning and persuasion
  • Fraud can become personalized, automated and scalable
  • AI systems may generate synthetic evidence trails that look professionally credible
  • Trust and evidential integrity become core financial stability issues
Implementation considerations

Financial crime, fraud, onboarding, audit, dispute resolution and supervisory evidence processes should be assessed against synthetic documents, synthetic identities, narrative laundering, deepfakes and coordinated AI agent activity.

NCFA perspective

This is one of the most important sections for fintech and regulators. If evidence itself can be fabricated at scale, financial services need stronger verification layers, not only better detection of obvious fakes.

Deepfakes and Trust

What the FCA says

The report says deepfake risks are progressing from manipulation of the senses to manipulation of sense-making. AI may generate credible synthetic narratives, evidence trails and interactions that bypass both human and algorithmic judgment.

  • Deepfakes are no longer limited to images, audio or video
  • Cognitive warfare may influence how people decide what is true
  • Attention and cognitive bandwidth become attack surfaces
  • Synthetic evidence can support narrative laundering and conceal misconduct
  • Suspicious perfection may become a signal of criminal activity
Implementation considerations

Firms need layered authentication, source verification, provenance controls, document forensics, voice and video verification, separate channel confirmations and controls for high-risk actions. Regulators may also need tools to assess evidentiary integrity.

NCFA perspective

Trust infrastructure is becoming a market opportunity. Identity, provenance, verification, secure communications and evidence integrity could become core financial infrastructure rather than operational controls.

Autonomous Crime

What the FCA says

The FCA warns that agentic AI could democratize high-complexity crime. A single individual may be able to deploy, manage and scale a global criminal organization through software, with AI agents performing phishing, scams, cyberattacks and manipulation.

  • AI reduces the gap between malicious intent and technical capability
  • Crime-as-a-Service may become more effective through AI agents
  • Autonomous AI routines may probe bank networks for weaknesses
  • AI can personalize deception, build trust and run extended scam interactions
  • Concentration in shared AI platforms could create systemic vulnerability
Implementation considerations

Fraud and cyber teams should model autonomous attackers, not only human fraud rings. Controls need to detect rapid, adaptive, multilingual, personalized and multiple channel attacks that may operate continuously.

NCFA perspective

This section points to an arms race in financial crime operations. The opportunity is not only fraud prevention. It is coordinated intelligence sharing, AI defensive assessment and cross-sector resilience.

Synthetic Market Abuse

What the FCA says

The report describes synthetic market abuse risks where autonomous multiple agent systems may engage in insider trading, collusion, spoofing, pump and dump activity, sentiment manipulation or synthetic consensus cascades.

  • Agents may execute strategies human analysts cannot detect
  • Collusion may emerge from multiple agent interactions
  • Synthetic social proof can manufacture false legitimacy around entities or assets
  • Sentiment manipulation may occur through coordinated AI activity on social platforms
  • Market integrity may depend on detecting emergent behavior rather than only individual intent
Implementation considerations

Market surveillance should expand beyond order book and transaction data to include social sentiment, agentic behavior, synthetic content, coordinated narratives and cross-platform activity. Governance should define accountability when autonomous systems create abusive outcomes.

NCFA perspective

Synthetic market abuse links directly to crypto, tokenized markets and digital investor communities. This is a strong candidate for future Question Intelligence and regulatory comparison work.

Operational Resilience

What the FCA says

The FCA describes adaptive and invisible threats to firms' operational resilience. Frontier AI models may identify zero-day vulnerabilities, while adaptive malware may rewrite itself, imitate normal activity and operate inside systems in real time.

  • AI can accelerate vulnerability discovery for attackers and defenders
  • Attack surfaces are expanding across firms, cloud providers and third parties
  • The time between discovery and exploitation of vulnerabilities may compress
  • Adaptive malware may alter behaviour to avoid detection
  • Financial sector resilience may depend on collaboration between firms, AI providers and governments
Implementation considerations

Firms should assess AI-enabled cyber scenarios, cloud concentration risk, third-party software compromise, adaptive malware, rapid vulnerability response, model provider dependency and coordinated sector response. Resilience planning should assume faster attack cycles.

NCFA perspective

Operational resilience and AI risk are converging. The firms best positioned for the next phase will combine cybersecurity, vendor governance, model risk, incident response and trusted information sharing.

Programmable Finance

What the FCA says

Programmable Finance examines the convergence of DLT and financial concepts. The FCA says financial infrastructure is becoming more modular, with shared ledgers, tokenisation, programmable money and smart contracts contributing to protocol-based financial systems.

  • Traditional finance and DeFi are converging into TradFi with protocol capabilities
  • Rules that once lived in documents and procedures can be expressed and audited in software
  • Programmable money, assets and transactions could automate workflows and reduce reconciliation
  • UK strategy links digital identity, smart data, settlement and payment infrastructure, programmable money and cross border interoperability
  • Infrastructure modernization connects to the National Payments Vision, future retail payments infrastructure and RTGS renewal
Implementation considerations

Firms should map how programmable finance affects products, settlement, custody, compliance, legal documentation, data sharing, identity, payment triggers and risk controls. The question is how to design programmable systems that are interoperable, auditable and commercially usable.

NCFA perspective

This is the strongest bridge to NCFA's existing tokenization, stablecoin, payments and open finance work. The FCA is describing a transition from digitized services to programmable financial infrastructure.

Tokenization

What the FCA says

The report situates tokenisation within programmable finance and protocol-based infrastructure. Tokenized assets are part of the transition toward financial instruments that can settle, execute and interact through software rather than manual reconciliation.

  • DLT and smart contracts support digital representation of value and rights
  • Tokenized assets may become part of shared ledger or interoperable financial systems
  • Protocol capabilities may be absorbed into established financial infrastructure
  • Tokenization interacts with identity, custody, settlement, programmable money and compliance
  • Economic value may depend on bridges across money, markets and jurisdictions
Implementation considerations

Tokenization projects should identify the real workflow being improved, the settlement asset, custody model, legal rights, data permissions, interoperability approach, compliance logic and operational fallback process.

NCFA perspective

The report supports NCFA's existing view that tokenization is becoming measurable financial infrastructure. The market opportunity is not token issuance alone. It is regulated rails, data, custody, liquidity, compliance and settlement.

Stablecoins and CBDCs

What the FCA says

The Horizon Scan links stablecoins, CBDCs, digital assets and programmable money to changes in international financial architecture. It notes that cross border CBDC pilots such as mBridge are reaching minimum viable product scale in some regions.

  • New payments technology may reduce reliance on fiat currency in some contexts
  • CBDCs, digital assets and stablecoins could reshape cross border payment and settlement systems
  • Programmable money may support faster, more automated and conditional payment flows
  • Stablecoins may be part of shared ledger and Finternet style futures
  • Fragmented systems could create new enforcement and interoperability challenges
Implementation considerations

Payment and stablecoin projects should evaluate settlement finality, reserve or backing structure, redemption, interoperability, AML controls, sanction screening, user protection, data standards and integration with domestic payment systems.

NCFA perspective

This connects directly to the UK Cryptoasset Regulations And FCA Final Rules and NCFA's Programmable Stablecoin Payments Opportunity Brief. The strategic opportunity is compliant stablecoin infrastructure that can operate across regulated payment, settlement and tokenized asset systems.

Smart Data and Digital Identity

What the FCA says

The report identifies smart data and digital identity as interlocking layers in the UK's infrastructure-first strategy. Smart data, identity and payments may support more context-aware and programmable financial services.

  • The UK approach spans digital identity, smart data, settlement and payment infrastructure, programmable money and cross border interoperability
  • Digital public infrastructure such as IndiaStack is gaining momentum globally
  • Open finance and smart data may support context-aware services and real time personalization
  • Identity becomes a key building block for programmable financial stacks
  • Cross-sector data and DLT-enabled programmability could collapse trade, insurance and payment into atomic events
Implementation considerations

Firms should assess consent, data portability, identity assurance, verifiable credentials, cross-sector data standards, fraud risk, agent access and consumer control. Smart data strategy should be linked to product design and consumer protection.

NCFA perspective

Smart data is the bridge between open banking and programmable finance. Canada should treat consumer-driven banking, digital identity and payment modernization as connected infrastructure, not isolated files.

Finternet and Interoperability

What the FCA says

The FCA highlights the BIS Unified Ledger and Finternet concepts alongside mBridge and sovereign programmable financial stacks. It describes two possible futures: a more unified global ledger approach, or interoperable islands of domestic programmable ecosystems.

  • The BIS Unified Ledger combines CBDCs, tokenized deposits and assets into shared programmable infrastructure
  • mBridge points toward a modular network of sovereign ledgers connected through interoperable protocols
  • National approaches vary by speed, inclusion, sovereignty, privacy and wholesale interoperability
  • Future advantage may depend on building technical, legal and regulatory bridges across financial stacks
  • Capital may operate through multiple interconnected ecosystems rather than one monolithic infrastructure
Implementation considerations

Interoperability planning should address legal finality, messaging standards, identity, compliance, settlement assets, cross border controls, dispute handling, data governance and resilience across networks.

NCFA perspective

The Finternet discussion is highly relevant for NCFA's global intelligence work. It creates a framework for comparing Canada, the UK, EU, India, Singapore, Brazil and other jurisdictions by infrastructure readiness rather than only by regulation.

Canada Relevance

What the FCA says

The FCA report is UK-focused, but many themes are transferable because the same technologies, fraud risks and infrastructure choices are appearing across major financial markets.

  • Consumer agency and AI proxy risks are relevant to Canadian financial institutions, fintechs and consumer protection agencies
  • Synthetic identity, deepfakes and AI-enabled fraud are directly relevant to Canadian banking, payments and open finance
  • Programmable finance connects to Canada's work on payments modernization, consumer-driven banking, digital identity and stablecoin policy
  • International infrastructure concepts create comparison points for Canada's future market infrastructure strategy
  • Regulatory divergence matters for Canadian firms operating across the UK, EU, US and Asia-Pacific markets
Canadian reference points
NCFA perspective

The FCA Horizon Scan gives Canada a useful external reference. It connects AI, digital identity, fraud, open finance, payments and tokenization into one strategic view of financial infrastructure change. These files should not be treated as isolated policy tracks.

Implementation Questions

The FCA Horizon Scan does not impose obligations, but it raises strategic questions firms and policymakers should consider before technology adoption outpaces governance.

  • How should firms design financial products when AI agents, not people, may become the first decision interface?
  • What controls are needed when identity, documents, video, voice and transaction evidence can be synthetic?
  • How should market surveillance adapt to AI agents, synthetic sentiment and machine-speed manipulation?
  • Which programmable finance use cases have real infrastructure value rather than pilot level appeal?
  • How should Canada connect consumer-driven banking, digital identity, payments modernization and stablecoin policy into one infrastructure strategy?

Current FCA Developments

The FCA Emerging Technology Horizon Scan now sits within a larger programme on AI adoption, agentic systems, cyber resilience and regulatory capability.

The Mills ReviewPublished July 6, 2026, the review considers AI in retail financial services through 2030 and sets out recommendations for firms, consumers, competition and regulation.Read the FCA review
Supercharged SandboxThe second cohort focuses on advanced and agentic AI use cases, including payment, compliance and customer service agents.Review the sandbox programme
Frontier AI And Cyber ResilienceThe FCA, Bank of England and UK Treasury call for stronger protective, detective, containment, response and recovery capabilities.Read the joint statement

FCA Horizon Scan Questions

What is the FCA Emerging Technology Horizon Scan?

It is the FCA's first external technology horizon scan. The 2026 report examines plausible combinations of emerging technologies across Personalised Intelligence, Synthetic Insecurity and Programmable Finance.

Is the FCA Horizon Scan regulatory guidance?

No. The FCA states that it is not regulatory guidance or a prediction. It is a foresight document intended to support discussion, planning and early risk assessment.

What is synthetic financial crime?

Synthetic financial crime uses generated identities, documents, voices, images, narratives or transaction evidence to commit fraud, evade controls or manipulate financial systems.

What is programmable finance?

Programmable finance combines technologies such as tokenization, smart contracts, stablecoins, digital identity and smart data to automate financial transactions and infrastructure functions.

Why is the FCA Horizon Scan relevant in Canada?

It has no direct legal effect in Canada, but its scenarios are useful for Canadian work involving AI governance, synthetic identity, fraud prevention, consumer driven banking, payments modernization, stablecoins, tokenization and operational resilience.

Continue Exploring

Canada Open Banking RulesRegulatory Intelligence on Canada's consumer driven banking rules, oversight and implementation.Open the regulatory guide
UK Cryptoasset Regulations And FCA Final RulesCompanion Regulatory Intelligence page for final FCA cryptoasset implementation requirements.Open the regulatory guide
How Tokenization Became a Business Investors Can MeasureRelated story on tokenization becoming measurable, investable financial infrastructure.Read the story
How Is Crypto Custody Regulation Changing?Useful for custody, safeguarding, institutional trust and operational control questions.Read the question post
Programmable Stablecoin PaymentsOpportunity Brief connected to stablecoins, programmable money and compliant payment infrastructure.Open the Opportunity Brief
Stablecoin Data Shows Payments Reality GapMarket intelligence on the gap between stablecoin activity and real payment adoption.Read the analysis

From Strategy to Opportunity

The FCA Horizon Scan points to practical innovation themes across AI agents, identity, cyber resilience, fraud prevention, programmable finance, tokenization, stablecoins and interoperable financial infrastructure.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights

NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

UK Cryptoasset Regulations And FCA Final Rules

NCFA Regulatory Intelligence - UK FCA Final Cryptoasset Rules
NCFA Canada | Regulatory Intelligence | Digital Assets, Cryptoassets and Blockchain | Last updated July 19, 2026 | Status final FCA rules
NCFA Regulatory Intelligence
This guide explains UK cryptoasset regulations and the FCA final rules for authorisation, market access, implementation, compliance and opportunity analysis. Sources include FCA policy statements PS26/9 to PS26/13, finalised guidance FG26/5 to FG26/7 and the aggregate cost benefit analysis.
FCA Cryptoasset Regime Final rules for UK regulated cryptoasset activities

UK Cryptoasset Regulations And FCA Final Rules

The FCA published its final cryptoasset rules and guidance on 30 June 2026. The application period runs from 30 September 2026 to 28 February 2027, and the new regime starts on 25 October 2027. Use this guide to understand what the final rules require, what firms need to build, how the consultation outcome changed the design and where regulation creates market opportunities. Coverage includes admissions, disclosures, market abuse, stablecoin issuance, trading platforms, intermediaries, lending, borrowing, staking, safeguarding and custody, prudential requirements, Consumer Duty, governance, operational resilience, financial crime, reporting, redress, international firms and DeFi.

What Are The UK Cryptoasset Regulations?

The UK cryptoasset regulations bring specified cryptoasset activities into Financial Conduct Authority supervision under the Financial Services and Markets Act. The FCA final rules cover authorisation, trading platforms, intermediaries, stablecoin issuance, custody, lending, staking, disclosures, market abuse, prudential requirements, Consumer Duty, governance and operational resilience. The regime starts on 25 October 2027.

Final Rules Published30 June 2026
Applications Open30 September 2026
Application Deadline28 February 2027
Regime Starts25 October 2027
RegulatorFinancial Conduct Authority
Existing RegistrationMLR registration does not automatically convert to FSMA authorisation

UK Cryptoasset Regulation Journey

The UK has completed perimeter design, consultation and final FCA rulemaking. Firms now have an implementation period to prepare authorisation, governance, capital, custody, trading, stablecoin, market abuse and conduct systems before the regime starts.
Policy and consultation
Final rules and buildout
Implementation and supervision
Perimeter2023 to 2024 Cryptoasset activities brought into scope
Consultations2025 to 2026 CP25 and CP26 industry feedback
Final Rules30 June 2026 PS26/9 to PS26/13
Applications And Buildout30 Sep 2026 to 28 Feb 2027 Authorisation and systems preparation
Regime Starts25 October 2027 Handbook instruments commence
Supervision2027 onward Market conduct and resilience

Impact Analysis

Selected figures from the FCA aggregate cost benefit analysis and policy statements.
8%UK adults with cryptoasset holdings in 2025
£2,250Estimated average UK consumer crypto holding
£1.315BEstimated quantified firm costs over 10 years
£735MEstimated value of improved regulatory protections
£25MExample trading platform 10 year PV costs
£10MExample FSMA custodian entering crypto custody
£8MExample stablecoin issuer 10 year PV costs
£285MEstimated prudential requirement PV costs

What Firms Should Do Now

Firms that carry out or plan to carry out regulated cryptoasset activities should prepare their authorisation and implementation evidence before the application deadline.

  1. Map every UK activity against the regulated activity perimeter and identify any exclusions or special treatment.
  2. Determine whether the firm needs a new FCA authorisation or a variation of permission.
  3. Prepare a complete application for the period from 30 September 2026 to 28 February 2027 and apply as early as practical.
  4. Assign accountable owners across CRYPTO, CASS, CRYPTOPRU, Consumer Duty, SYSC, SM&CR, financial crime and reporting.
  5. Build evidence for governance, financial resources, custody, resilience, outsourcing, consumer outcomes and operational controls.
  6. Test systems and remediation plans before the regime starts on 25 October 2027.

Regulatory Intelligence Explorer

Navigate the FCA final cryptoasset regime by rule area. Each section separates requirements, implementation work, consultation outcome and NCFA’s strategic perspective.

Overview

Requirements The FCA package creates a full UK cryptoasset regime rather than a single rule. It combines designated activity rules for admissions and market abuse, regulated activity rules for trading platforms, intermediaries, lending, borrowing, staking and safeguarding, stablecoin issuance rules, prudential requirements and cross cutting FCA Handbook standards. The Handbook instruments commence on 25 October 2027.
  • The regime covers UK qualifying cryptoasset trading platforms, cryptoasset intermediaries, qualifying stablecoin issuers, custodians, lending and borrowing services, staking services and firms carrying on regulated cryptoasset activities in or into the UK
  • The final package includes CRYPTO sourcebook rules, CASS 16 for stablecoin backing assets, CASS 17 for safeguarding qualifying cryptoassets, CRYPTOPRU and COREPRU prudential rules, Consumer Duty, COBS, SYSC, SM&CR, DISP, FOS access, reporting and operational resilience requirements
  • The commencement sequence includes stablecoins, admissions, market abuse, intermediaries, trading platforms, lending, borrowing and staking, safeguarding, client asset consequentials, conduct and firm standards, and prudential instruments
  • The FCA kept the broad policy architecture but made targeted changes for proportionality, including stablecoin backing asset simplification, best execution clarification, removal of principal dealers from pre trade transparency, and operational resilience guidance
Implementation Firms should build a regime map by activity, not by document title. A single firm may need authorisation, admissions controls, disclosures, surveillance, custody arrangements, CASS controls, prudential calculations, Consumer Duty evidence, financial crime controls, operational resilience testing and regulatory reporting. The implementation plan should assign accountable owners for each CRYPTO, CASS, SYSC, COBS, SM&CR, DISP and CRYPTOPRU dependency.
Consultation Outcome
  • The FCA moved from consultation to final rules while preserving the regime design
  • Respondents generally supported a comprehensive regime, but pushed for proportionality, international competitiveness and operational clarity
  • The FCA responded with targeted refinements rather than a lighter perimeter
  • Remaining open items include further guidance on DeFi decentralisation and separate DLT operational resilience guidance
NCFA Perspective This is a regulatory market structure event. The UK is setting a supervised operating model for crypto as financial infrastructure. The strategic question is which firms can turn authorisation, custody, stablecoin operations, market surveillance, prudential analytics and conduct evidence into repeatable operating capability before the regime goes live.

Scope and Authorisation

Requirements The regime applies to regulated cryptoasset activities brought into scope by the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 and implemented through FCA Handbook instruments. Activities include operating a qualifying cryptoasset trading platform, dealing, arranging, qualifying cryptoasset lending and borrowing, staking, safeguarding and qualifying stablecoin issuance. Firms conducting those activities will need FCA authorisation unless an exclusion or specific treatment applies.
  • UK QCATP operators require authorisation where they operate in the UK or serve UK consumers from overseas
  • International firms are assessed against threshold conditions including location of offices, effective supervision, appropriate resources, suitability and business model
  • Dual regulated firms may operate in the UK through a branch where the PRA is satisfied threshold conditions and ongoing requirements are met
  • The FCA expects an authorisation gateway before the regime goes live, with firms preparing systems, controls and evidence in advance
  • Existing cryptoasset MLR registration does not replace FSMA authorisation for regulated cryptoasset activities
Implementation Firms should map every UK facing activity to the regulated activity perimeter and authorisation pathway. The implementation file should include corporate structure, UK presence, branch or subsidiary analysis, overseas service model, governance, financial resources, systems and controls, operational resilience, outsourcing, financial crime and Consumer Duty evidence.
Consultation Outcome
  • The FCA clarified its approach to international firms and branches following feedback
  • The final approach remains cautious about cross border firms serving UK consumers without clear UK accountability
  • The FCA did not create a broad equivalence shortcut in the final package
  • The authorisation runway becomes a key commercial dependency for firms seeking UK market access
NCFA Perspective Scope is the competitive gate. The UK is giving global crypto firms a route into a regulated market, but the route depends on authorisation evidence, supervision, governance and operational substance. That is different from simply allowing offshore activity to reach UK users.

Admissions and Disclosures

Requirements The admissions and disclosure framework governs admission of qualifying cryptoassets to trading on UK QCATPs and offers to the public of qualifying cryptoassets admitted to trading. It uses qualifying cryptoasset disclosure documents, admission criteria, due diligence, responsibility allocation and disclosure obligations to create a baseline for market entry.
  • UK QCATP operators must establish admission criteria and assess whether a qualifying cryptoasset should be admitted to trading
  • Offerors and relevant issuers must produce qualifying cryptoasset disclosure documents where required
  • Disclosure documents must support informed decisions and include material information about the cryptoasset, rights, risks, technology, governance and project context
  • Trading platforms need procedures for disclosure review, admission decisions, record keeping and ongoing monitoring
  • Relevant issuers and offerors face responsibility for statements and omissions in disclosure documents
  • Protected forward looking statements have specific treatment under the regime
  • Firms must manage the link between admissions, disclosures, market abuse controls and post admission monitoring
Implementation Implementation requires an admissions committee or equivalent control function, written admission criteria, due diligence checklists, disclosure templates, issuer and offeror attestations, legal review, technology risk review, conflict checks, decision records and post admission triggers. Platforms should prepare a repository for disclosure documents, versions, approvals, rejection reasons and ongoing updates.
Consultation Outcome
  • The FCA retained the admissions and disclosure framework after consultation
  • The final rules are designed to support market integrity without importing traditional securities listing rules wholesale
  • Firms will need to show how disclosures are complete, fair and understandable for the relevant market
  • The burden falls heavily on platforms because admission decisions become a regulated control point
NCFA Perspective Admissions are where market access becomes a regulated quality filter. The practical opportunity is not only listing more tokens. It is building repeatable disclosure, due diligence, legal review and issuer data infrastructure that can support credible cryptoasset markets.

Market Abuse

Requirements The market abuse regime addresses insider dealing, unlawful disclosure of inside information and market manipulation in qualifying cryptoassets and related instruments. The FCA rules and guidance set out concepts, prohibited behaviours and systems requirements for UK QCATP operators and cryptoasset intermediaries.
  • CRYPTO 4 provides guidance on inside information, insider dealing, unlawful disclosure and market manipulation
  • UK QCATP operators and cryptoasset intermediaries must prevent, detect and disrupt cryptoasset market abuse
  • Operators need systems and procedures for monitoring orders, transactions, communications, suspicious behaviour and abusive patterns
  • Firms must receive and store notifications securely with completeness, integrity and confidentiality
  • Market abuse arrangements must address crypto specific risks such as cross venue trading, on chain activity, token issuance events, concentrated holdings and information asymmetry
  • Outsourcing or delegation does not remove responsibility for compliance
  • Firms need records that can support investigation, escalation and regulator engagement
Implementation Firms should build surveillance scenarios for insider dealing, pump and dump activity, spoofing, wash trading, manipulation around token admissions, misuse of issuer information, coordinated social activity and suspicious on chain transfers. Platforms should integrate order book data, trade data, wallet data where available, issuer announcements, disclosure documents and escalation logs.
Consultation Outcome
  • The final package applies a market abuse model tailored to cryptoasset markets while drawing on familiar FCA concepts
  • The FCA expects trading venues and intermediaries to operate proactive controls rather than relying only on post event enforcement
  • Secure notification and evidence handling are explicit operational requirements
  • The regime creates a compliance technology need across surveillance, data integrity and case management
NCFA Perspective Market abuse is the credibility test for regulated crypto trading. The UK framework will only support institutional adoption if market surveillance, disclosure timing and manipulation controls are strong enough to distinguish regulated markets from speculative venues.

Stablecoin Issuance

Requirements PS26/10 sets final rules for non systemic UK issued qualifying stablecoins, covering issuance, backing assets, redemption, safeguarding and disclosures. CASS 16 governs management and safeguarding of backing asset pools. The FCA’s approach treats stablecoins as money like instruments where trust depends on backing, segregation, redemption, reconciliation and clear disclosures.
  • Issuers must maintain a backing asset pool for each qualifying stablecoin product and segregate it from the firm’s own assets and from other backing pools
  • Backing pools must be held in backing funds accounts or backing assets accounts meeting CASS conditions
  • Issuers using expanded backing assets must calculate the backing asset composition requirement every redemption day
  • The core backing asset requirement is the higher of 5% and the highest redemption percentage over the previous 180 redemption days or shorter operating history
  • Issuers must promptly notify the FCA if they cease to comply with specified backing asset requirements, with a limited exception for rebalancing after a daily calculation
  • Backing assets are held on statutory trust for holders of the qualifying stablecoin
  • Backing asset pools for different stablecoin products must be separate, distinct, independently managed and held in different accounts
  • Stablecoin funds must be promptly paid into a backing funds account or invested in assets held in a backing assets account
  • Issuers must conduct internal and external safeguarding reconciliations, identify and resolve discrepancies and maintain records
  • Redemption requirements include T+1 expectations, with KYC checks completed before the redemption period begins
  • Issuers must provide disclosures and make holders aware of withdrawal rights
  • The FCA allows limited intragroup custody subject to safeguards and allows a 5% excess in the backing asset pool
Implementation Stablecoin issuers need a dedicated operating model for backing assets, liquidity, reconciliation, redemption, disclosures, trust accounting, custodian oversight and holder communications. Implementation should include product level backing pool ledgers, daily BACR calculations where expanded assets are used, reconciliation workflows, FCA notification triggers, redemption queue logic, KYC timing controls, disclosure history and governance over tokenized versions of backing assets.
Consultation Outcome
  • The FCA simplified the backing asset composition requirement after feedback that forward looking redemption estimates were complex and burdensome
  • The FCA kept the range of permissible backing assets and rejected broader LVNAV and non UK UCITS MMF expansion because of stability concerns
  • Tokenized versions of permissible backing assets are not prohibited if they comply with CASS 16 and custody requirements
  • Redemption timelines were adjusted so KYC checks are completed before the redemption period begins
  • The FCA confirmed statutory trust arrangements and made refinements to third party and intragroup custody treatment
NCFA Perspective Stablecoin issuance is where compliance becomes product architecture. The winners will not be the firms that simply issue tokens. They will be the firms that can evidence backing, redemption, liquidity, disclosure and custody controls well enough for consumers, institutions and regulators to treat stablecoins as usable financial infrastructure.

Trading Platforms

Requirements PS26/11 sets rules for UK qualifying cryptoasset trading platforms. The framework covers location and authorisation, platform access, operating rules, conflicts, settlement arrangements, transparency, record keeping and reporting. The FCA expects platforms serving UK consumers to operate through an authorised UK model or an acceptable international firm structure.
  • UK QCATP operators require FCA authorisation if operating in the UK or serving UK consumers from overseas
  • Platforms must have operating rules, admission processes, access standards and controls for orderly trading
  • Retail customer focused requirements apply where platforms serve retail clients
  • Platforms must manage conflicts of interest, including risks around affiliated activities, proprietary activity, token admissions and market data
  • Settlement arrangements must be clear, reliable and consistent with safeguarding and operational resilience requirements
  • Transparency, record keeping and reporting obligations apply to orders, transactions and platform operation
  • Best execution expectations interact with authorised execution venues and periodic post trade analysis
  • Principal dealers were removed from pre trade transparency requirements in the final approach
  • Platforms need market abuse prevention, detection and disruption arrangements under PS26/9
Implementation Platform implementation should include authorisation planning, operating rulebook, access policy, admission governance, conflicts register, surveillance tooling, settlement design, order and trade records, client reporting, market data controls, resilience mapping and incident response. Firms should evidence why venue access, matching, settlement, custody and conflict controls protect consumers and market integrity.
Consultation Outcome
  • The FCA clarified location, incorporation and international firm expectations after feedback
  • Principal dealers were removed from pre trade transparency requirements
  • Best execution was clarified so firms should check prices from at least three reliable UK authorised execution venues where possible but do not need mechanical transaction by transaction checks or execution on those venues
  • The FCA retained the broader platform framework and added guidance rather than reducing the venue perimeter
NCFA Perspective Trading platforms are the centre of the regulated market. The commercial question is whether UK authorised venues can offer credible liquidity, transparent execution and institutional controls without losing users to offshore platforms that do not meet the same standard.

Intermediaries

Requirements The intermediary rules cover firms dealing in qualifying cryptoassets as principal, arranging deals and providing related intermediation services. They connect execution quality, client communication, conflicts, payments for order flow, authorised venue interaction, conduct obligations and prudential requirements.
  • Intermediaries must understand which regulated activity they perform and whether they deal, arrange, route, introduce or support client execution
  • Execution arrangements must be effective and supported by periodic post trade analysis
  • Firms should check prices from at least three reliable UK authorised execution venues where possible
  • The FCA clarified that firms are not required to execute on those venues or perform mechanical transaction by transaction checks if effective arrangements are in place
  • Conflicts, remuneration, inducements and payments for order flow require controls
  • Client communications and conduct obligations apply through COBS and Consumer Duty where relevant
  • Intermediaries may be subject to prudential requirements, financial crime controls, operational resilience and reporting
Implementation Intermediaries should build an execution policy, venue assessment framework, periodic price review, conflicts assessment, client disclosure process, order routing records, remuneration review and evidence that client outcomes are monitored. Firms with global routing models need controls showing how UK clients receive fair treatment under the UK regime.
Consultation Outcome
  • The FCA responded to feedback by clarifying best execution rather than imposing venue execution mandates
  • The final rules seek to balance execution quality with the reality of fragmented global crypto liquidity
  • Concerns about the arranging perimeter and international firms were addressed through guidance and refinements
  • Intermediaries remain a high implementation burden because conduct, execution, financial crime and prudential requirements overlap
NCFA Perspective Intermediation is where user experience meets regulatory discipline. Firms that can route orders well, evidence execution quality and manage conflicts may turn compliance into trust. Firms that treat execution as a black box will struggle under the new model.

Lending and Borrowing

Requirements The lending and borrowing chapter applies to authorised cryptoasset firms providing qualifying cryptoasset lending or borrowing services to retail clients who are not overseas retail clients, with certain requirements also applying to clients who are not overseas clients. Firms remain responsible where they comply through third parties such as custodians or service providers.
  • Firms must provide retail clients with information about the firm and the qualifying cryptoasset lending or borrowing service before the client is bound or before service provision
  • Information must be provided in a durable medium or through a qualifying website, mobile application or digital medium
  • Where clients give express prior consent for yield to be used in further lending, firms may not need to repeat the information requirement for that yield use
  • Retail protections apply to lending and borrowing service design, client information and risk communication
  • Firms remain responsible for compliance when using third party custodians or service providers
  • Rules and controls must address collateral, yield, client reporting, service risk, counterparty risk and return of assets
  • Lending and borrowing firms will also need prudential, safeguarding, operational resilience, financial crime and Consumer Duty evidence
Implementation Implementation should include client information templates, durable medium controls, express consent capture, yield treatment logic, collateral policy, counterparty due diligence, risk disclosures, client reporting, third party contracts, custody links, withdrawal and return processes, and complaint handling. Firms should stress test whether clients understand rehypothecation, loss, yield, liquidity and counterparty risk.
Consultation Outcome
  • The FCA confirmed retail protections for lending and borrowing as part of the final PS26/11 package
  • The rules preserve firm accountability even where service delivery uses third parties
  • Final refinements address collateral and service design issues but keep lending and borrowing inside a regulated conduct baseline
  • This is one of the areas where Consumer Duty evidence will matter because product risk can be hard for retail clients to understand
NCFA Perspective Crypto lending is no longer being treated as a purely private yield product. The UK regime pushes it toward regulated product governance, clear client information and controlled service design. That could reduce high risk models but may also create room for safer institutional and collateral services.

Staking

Requirements The staking framework in PS26/11 confirms retail protections and targeted refinements to staking rules, including treatment of auto staking. Staking services create operational, validator, custody, disclosure and client outcome risks that connect to safeguarding, operational resilience and Consumer Duty.
  • Firms providing staking services must identify whether the service is within the regulated perimeter and which client protections apply
  • Client information should explain staking arrangements, validator risk, lockups, slashing, rewards, fees, liquidity, tax or reporting context where relevant and operational dependencies
  • Auto staking treatment was refined in the final rules
  • Where staking uses validators, node operators, custodians or other service providers, the authorised firm remains accountable for regulated obligations
  • Operational resilience guidance identifies validator risk and validator outages as crypto specific risks
  • Firms need records showing staking instructions, rewards, fees, losses, slashing events, service disruptions and client communications
Implementation Implementation should include validator due diligence, staking policy, client consent flows, reward calculation controls, fee disclosure, slashing incident workflow, exit queue process, asset segregation, outsourcing or third party arrangements and resilience testing for validator outages. Firms should connect staking risk to Consumer Duty outcomes and complaint handling.
Consultation Outcome
  • The FCA retained staking inside the final activity framework while making targeted refinements
  • Operational resilience guidance specifically highlights validator risks and outages
  • The final approach does not remove staking risk but requires firms to evidence controls and client understanding
  • Further market practice will likely shape supervisory expectations after go live
NCFA Perspective Staking is a good example of regulation translating crypto native activity into financial services controls. The opportunity is not simply offering yield. It is making staking understandable, monitored, resilient and institutionally acceptable.

Safeguarding and Custody

Requirements The FCA applies safeguarding requirements through CASS 17 for qualifying cryptoassets and related CASS amendments. Custody and safeguarding are central to the regime because many cryptoasset failures come from weak asset control, poor segregation, private key compromise, unclear client ownership or inadequate third party oversight.
  • Firms safeguarding qualifying cryptoassets must comply with CASS 17 requirements tailored to cryptoasset custody
  • Safeguarding requirements interact with CASS 16 where tokenized stablecoin backing assets or qualifying stablecoin custody is involved
  • Firms need arrangements for holding, recording, reconciling and protecting client cryptoassets
  • Private key management, wallet infrastructure, access controls, signing authority and recovery procedures are core operational controls
  • Third party custody or infrastructure arrangements require due diligence, contractual protections and ongoing oversight
  • Client reporting must ensure clients can access information, including where information is available on chain
  • Custody controls link to operational resilience, financial crime, Consumer Duty, dispute resolution, complaints and prudential requirements
Implementation Custodians and firms using custodians should document wallet architecture, key ceremony, MPC or HSM controls, cold and warm wallet policies, access roles, transaction approval, reconciliation, incident response, third party oversight, bankruptcy analysis, client asset records, insurance or financial resources and client reporting. Firms should test private key loss, unauthorized signing, chain outage, custodian failure and reconciliation breaks.
Consultation Outcome
  • The FCA confirmed application of safeguarding requirements under CASS 17 with cryptoasset specific adjustments
  • The FCA did not create a separate SM&CR prescribed responsibility for digital asset custody because existing custody PRs cover custody of a broad range of assets
  • Limited intragroup custody is permitted for stablecoin backing arrangements subject to safeguards
  • The final regime gives custody a central role in institutional trust and consumer protection
NCFA Perspective Custody is likely to be the most important infrastructure layer in the regime. Regulated crypto markets cannot scale without credible asset control, private key governance, reconciliation and failure recovery. This is where specialist infrastructure providers may gain durable advantage.

Prudential Requirements

Requirements PS26/12 creates a prudential framework for regulated cryptoasset firms covering capital, own funds, concentration risk, liquid assets, overall risk assessment and public disclosure. It uses CRYPTOPRU and COREPRU amendments to establish a baseline that reflects cryptoasset risks without simply importing bank prudential rules.
  • Firms must meet own funds definition and composition requirements
  • Own funds requirements include fixed overhead and K factor based components where applicable
  • The operational risk K factor for stablecoin issuance was reduced from 2% to 1% in the final rules
  • The revised market risk framework applies a single 40% net cryptoasset position requirement for K NCP where assets can be prudently valued and are admitted to a UK QCATP
  • Cryptoassets that do not meet the conditions are deducted from regulatory capital and subject to a 100% volatility adjustment for K CCD
  • Concentration risk and liquid asset requirements apply to support resilience
  • Firms must conduct overall risk assessments and maintain adequate financial resources
  • Public disclosure obligations are included with proportionality refinements
  • Prudential obligations apply alongside activity specific conduct, custody, stablecoin and Handbook requirements
Implementation Firms should build prudential models by activity and balance sheet exposure. Required work includes own funds classification, K factor calculation, stablecoin issuance exposure, custody and platform activity mapping, cryptoasset valuation policy, capital deduction logic, liquid asset monitoring, concentration risk limits, stress testing, management information, public disclosure process and board sign off.
Consultation Outcome
  • The FCA largely maintained the prudential architecture but recalibrated key areas for proportionality
  • Stablecoin operational risk capital was reduced from 2% to 1%
  • The market risk framework was simplified to a 40% treatment for qualifying prudently valued assets admitted to a UK QCATP and deduction or 100% volatility adjustment for others
  • The public disclosure regime was made more proportionate
  • Respondents supported prudential clarity but raised concerns about calibration, competitiveness and operational burden
NCFA Perspective Prudential rules turn crypto firms into regulated financial businesses with capital and liquidity discipline. The effect may be fewer casual entrants, but stronger survivors. The commercial opportunity is prudential analytics, treasury management, disclosure tooling and capital efficient operating models.

Consumer Duty and Conduct

Requirements PS26/13 applies key FCA Handbook standards to regulated cryptoasset activities, including Consumer Duty, COBS, conduct rules, dispute resolution, compensation treatment and reporting. Most firms carrying on regulated cryptoasset activities will be subject to these cross cutting obligations, with specific exceptions for certain professional client platform activity and platform member transactions.
  • Consumer Duty applies to relevant cryptoasset activity subject to defined scope and exclusions
  • Principles 6 and 9 and Consumer Duty do not apply when operating a qualifying CATP for professional clients
  • Certain Principles and Consumer Duty do not apply to transactions concluded between members or participants under the rules of a qualifying cryptoasset trading platform
  • The FCA clarified Consumer Duty guidance on territorial scope, fair value, consumer support, consumer understanding and manufacturer or distributor roles
  • COBS standards apply to relevant cryptoasset conduct and communications
  • Firms need evidence that products, services, support and communications deliver appropriate outcomes
  • DISP and Financial Ombudsman Service access apply to relevant complaints
  • Compensation and redress rules are part of the broader Handbook application
Implementation Implementation should include Consumer Duty outcome mapping by activity, customer journey review, product governance, fair value assessment, communication testing, support standards, vulnerability considerations, complaints data, MI dashboards and board reporting. Crypto firms should prove that customers understand custody, stablecoin, staking, lending, execution and volatility risks before and after purchase.
Consultation Outcome
  • The FCA made clarifications rather than retreating from applying Consumer Duty and conduct standards
  • UK issued qualifying stablecoins were excluded from the definition of restricted mass market investments
  • Consumer Duty guidance was clarified across fair value, support, understanding and supply chain roles
  • The final approach signals that crypto conduct standards should converge with regulated financial services expectations
NCFA Perspective This is one of the strongest differences between regulated crypto and offshore crypto. The UK model requires firms to evidence consumer outcomes, not only publish risk warnings. Firms that can make complex products understandable may have a material trust advantage.

Governance and SM&CR

Requirements The FCA applies Senior Management Arrangements, Systems and Controls and the Senior Managers and Certification Regime to cryptoasset firms. Governance requirements cover risk management, controls, accountability, prescribed responsibilities, operational resilience, financial crime, custody and board oversight.
  • SYSC 4 to SYSC 10 apply to qualifying cryptoasset firms according to firm type and common platform status
  • SM&CR applies to relevant cryptoasset firms with proportionality and threshold treatment
  • The enhanced SM&CR threshold for qualifying UK stablecoin issuers is set at £20 billion, intended to capture the most significant stablecoins over time
  • Smaller and medium sized stablecoin issuers are not expected to fall into enhanced SM&CR at commencement
  • Existing prescribed responsibilities are used for custody rather than creating separate digital asset custody PRs
  • Senior management responsibilities include financial crime, operational resilience, compliance, safeguarding, prudential risk and conduct outcomes where relevant
  • Governance must support FCA supervision, authorisation evidence and ongoing compliance
Implementation Firms should build a management responsibilities map, committee structure, board reporting pack, policy owner register, control owners, prescribed responsibility allocation, SMF evidence, certification population, conduct training, breach escalation and decision records. Stablecoin issuers should monitor whether scale could bring enhanced SM&CR into scope over time.
Consultation Outcome
  • The FCA adjusted the enhanced threshold for qualifying UK stablecoin issuers in light of Bank of England proposals
  • The FCA expects the £20 billion threshold to capture 1% or less of the firm population and likely no firms at commencement
  • The FCA declined to create separate prescribed responsibilities for cryptoasset custody
  • Governance requirements were largely maintained with targeted proportionality refinements
NCFA Perspective Governance is where regulatory permission becomes accountable execution. The UK is not just authorising products. It is assigning responsibility to named leaders, boards and control functions. That will shape who can credibly scale.

Operational Resilience

Requirements The FCA extends SYSC 15A operational resilience to cryptoasset firms and provides FG26/6 to explain cryptoasset specific risks. Firms must identify important business services, set impact tolerances, map dependencies and conduct scenario testing. SYSC 4, SYSC 7 and SYSC 8 complement the framework through risk management, controls and outsourcing requirements.
  • Firms must have sound, effective and comprehensive strategies, processes and systems proportionate to their nature, scale and complexity
  • Important business services must be identified and mapped across people, processes, technology, facilities and information
  • Impact tolerances must be set and tested through severe but plausible scenarios
  • Crypto specific risks include smart contract vulnerabilities, private key security risks, validator risks, service disruptions, cyber risks, DLT dependencies and emerging technologies such as AI and quantum computing
  • FG26/6 highlights cyber and technology resilience, cryptographic key and infrastructure safeguarding, continuity and disruption planning
  • Outsourcing expectations cover custody infrastructure, MPC and HSM providers, validator services, cloud providers and security critical transaction signing infrastructure
  • Permissionless DLT use should not be treated as outsourcing under SYSC 8.1.1R, but firms remain responsible for operational resilience controls
  • Firms should conduct targeted vulnerability scans, penetration tests and maintain monitoring and logging evidence
Implementation Implementation should produce a live resilience map for every important business service. Firms need dependency mapping, wallet and key infrastructure controls, validator due diligence, smart contract testing, cyber controls, incident playbooks, impact tolerance testing, penetration testing, cloud and third party oversight, logging, operational dashboards and board reporting. Scenario tests should include private key compromise, smart contract failure, validator outage, chain disruption, trading outage, stablecoin reconciliation failure and custodian failure.
Consultation Outcome
  • 91% of respondents supported extending SYSC 15A to cryptoasset firms and 88% supported the guidance approach
  • 98% supported the view that permissionless DLTs should not be treated as outsourcing
  • The FCA kept the extension of operational resilience while adding crypto specific guidance
  • Further non Handbook guidance on DLT operational resilience is expected later
NCFA Perspective Operational resilience is where the FCA regime becomes more than conduct regulation. Crypto firms are technology firms with financial risk. The UK framework makes uptime, key security, third party dependency and recovery capability part of the regulatory value proposition.

Financial Crime

Requirements PS26/13 applies the financial crime elements of SYSC 6, the Financial Crime Guide and Financial Crime Thematic Reviews to firms conducting regulated cryptoasset activities. These obligations sit alongside the Money Laundering Regulations and Travel Rule obligations already applicable to UK cryptoasset exchange providers and custodian wallet providers.
  • Cryptoasset firms conducting regulated activities must follow the same financial crime framework as other FSMA authorised firms where applicable
  • Relevant Handbook references include SYSC 6.1.1R adequate policies and procedures, SYSC 6.3.1R systems and controls, SYSC 6.3.3R financial crime risk assessments, SYSC 6.3.8R senior manager responsibility and SYSC 6.3.9R MLRO
  • Firms must comply with MLRs and the Travel Rule alongside FSMA obligations
  • Policies and procedures must be comprehensive and proportionate to the nature, scale and complexity of activities
  • Controls should identify, assess, monitor and manage money laundering, sanctions, fraud, terrorist financing, bribery, corruption and market abuse related risk
  • Financial crime evidence must connect to onboarding, transaction monitoring, wallet screening, custody, stablecoin issuance, trading, lending and staking
Implementation Implementation should include risk assessment, customer due diligence, wallet and blockchain analytics, sanctions screening, Travel Rule workflow, suspicious activity reporting, transaction monitoring, fraud controls, stablecoin redemption screening, market abuse escalation, MLRO governance, senior manager accountability, periodic control testing and audit trails.
Consultation Outcome
  • The FCA retained the proposal to apply financial crime rules and guidance to cryptoasset firms
  • The FCA views the same financial crime baseline as proportionate for cryptoasset firms despite sector specific risks
  • The regime operates alongside MLR registration and Travel Rule obligations, so firms face overlapping compliance layers
  • Financial crime controls become part of authorisation readiness and ongoing supervision
NCFA Perspective Financial crime is central to regulatory legitimacy. The UK regime will reward firms that can combine on chain analytics with traditional financial crime governance. This is also a clear opportunity for regtech, wallet intelligence and compliance automation.

Reporting and Redress

Requirements PS26/13 applies reporting, dispute resolution and redress architecture to regulated cryptoasset activities. Firms need to report to the FCA, maintain records, handle complaints, provide access to the Financial Ombudsman Service where relevant and preserve evidence across product, custody, execution, conduct and prudential areas.
  • Regulatory reporting applies to cryptoasset firms under the Handbook application package
  • Firms need data on activities, clients, complaints, prudential position, operational resilience, financial crime controls and other supervisory metrics
  • DISP and access to the Financial Ombudsman Service apply where relevant
  • Complaint handling must connect to Consumer Duty, client reporting, custody, execution, lending, staking and stablecoin redemption issues
  • Record keeping requirements apply across admissions, market abuse, client orders, transactions, lending, borrowing, staking, safeguarding and reporting
  • Public disclosure obligations apply in the prudential regime with proportionality refinements
  • Firms need evidence retention policies that allow supervisory reconstruction of decisions and client outcomes
Implementation Firms should build a reporting data model before go live. Required work includes regulatory returns ownership, data lineage, complaints taxonomy, FOS workflow, prudential reporting data, custody records, client statements, execution data, surveillance cases, operational incidents, financial crime alerts and board MI. Manual reporting will be risky given the breadth of the regime.
Consultation Outcome
  • The FCA made focused amendments to reporting requirements in PS26/13
  • The prudential disclosure regime was made more proportionate
  • The overall approach keeps crypto inside existing FCA supervisory and redress architecture
  • Reporting and redress obligations will expose weak data governance quickly after authorisation
NCFA Perspective Reporting is the regime’s memory. Firms that cannot reconstruct decisions, client outcomes, custody records or prudential positions will struggle to defend their operating model. Good reporting infrastructure becomes a strategic asset, not only a compliance cost.

International Firms

Requirements The FCA’s approach to international cryptoasset firms sets expectations for firms seeking UK authorisation while serving UK consumers. It focuses on threshold conditions, location of offices, effective supervision, appropriate resources, suitability and business model. The final guidance clarifies branch treatment for dual regulated firms where PRA conditions are satisfied.
  • International firms requiring FCA authorisation must meet minimum standards at application and on an ongoing basis
  • The FCA considers location of offices, effective supervision, appropriate resources, suitability and business model
  • The FCA identifies higher consumer and market harm risk where international firms serve UK customers through branches rather than UK legal entities
  • Dual regulated firms may operate through a UK branch where the PRA is satisfied threshold conditions and ongoing requirements are met
  • International models must demonstrate accountability, supervision, client protection, operational resilience and financial crime controls
  • Cross border liquidity access may be relevant, but does not remove UK authorisation and governance expectations
Implementation International firms should prepare a UK market access file covering branch or subsidiary choice, governance, UK senior managers, service model, outsourcing, group support, capital, liquidity, client disclosures, data location, custody, financial crime, operational resilience and how UK customers are protected if overseas operations fail.
Consultation Outcome
  • The FCA clarified the international firm approach after feedback in CP26/4
  • The final guidance acknowledges branches for dual regulated firms where PRA expectations are met
  • The FCA did not make overseas access easy simply because liquidity is global
  • The approach tries to balance global liquidity with UK accountability and effective supervision
NCFA Perspective This is where the UK tries to attract global crypto firms without importing offshore risk. The strongest firms will treat UK authorisation as a credible market badge, not a light touch registration.

DeFi

Requirements The FCA’s current approach to decentralised finance is to apply rules where there is an identifiable controlling entity, with separate guidance to follow on how decentralisation will be assessed in practice. DeFi is treated as a range of financial services marketed with a high degree of automation rather than as a blanket exemption from regulation.
  • Rules apply where there is an identifiable controlling entity
  • Separate guidance is expected on how decentralisation will be assessed
  • DeFi interfaces, arrangements and controlling entities may fall within regulated activity analysis
  • Automation does not by itself remove regulatory obligations
  • Firms must assess governance, control, user interface, protocol dependency, custody, financial promotion, market abuse, lending, staking and consumer risk
  • DeFi related activity may also raise operational resilience, financial crime, Consumer Duty and international firm issues
Implementation Firms should document who controls the interface, protocol parameters, governance keys, admin rights, fee flows, custody, upgrade authority, user onboarding, compliance controls and consumer communications. A DeFi implementation file should show whether the business is genuinely decentralised or whether an identifiable entity directs regulated activity.
Consultation Outcome
  • The FCA retained the principle that identifiable controlling entities bring DeFi activity within regulatory reach
  • The FCA acknowledged the need for separate guidance on decentralisation assessment
  • The final approach avoids treating DeFi labels as determinative
  • This remains a watch area because future guidance will likely affect interface operators, protocol sponsors and infrastructure providers
NCFA Perspective DeFi is the frontier test for the regime. The key issue is control. If a business can control access, fees, governance, listings or user experience, regulators are unlikely to treat it as outside the market structure simply because the protocol uses smart contracts.

UK Cryptoasset Regulations FAQ

When do the UK cryptoasset regulations start?

The new FCA cryptoasset regime starts on 25 October 2027.

When can firms apply for FCA cryptoasset authorisation?

The scheduled application period runs from 30 September 2026 to 28 February 2027. Firms seeking to rely on saving and transitional provisions should apply within that period.

Does an existing MLR registration become FCA authorisation?

No. Existing registrations and permissions do not automatically convert. A firm carrying on an in scope regulated cryptoasset activity will need the relevant FSMA permission.

Which cryptoasset activities are covered?

The regime covers activities including operating qualifying cryptoasset trading platforms, dealing, arranging, stablecoin issuance, custody, lending, borrowing and staking. Admissions, disclosures and market abuse rules also apply.

Which FCA rulebooks apply to cryptoasset firms?

The package includes the CRYPTO sourcebook, CASS 16 and CASS 17, CRYPTOPRU and COREPRU, plus relevant Consumer Duty, COBS, SYSC, SM&CR, DISP, reporting and operational resilience requirements.

What should firms prioritise before applying?

Firms should confirm scope, prepare governance and financial resource evidence, document custody and resilience controls, assess Consumer Duty outcomes and build a complete authorisation file for their business model.

Continue Exploring

How Tokenization Became a Business Investors Can MeasureConnects the FCA regime to the shift from crypto speculation toward measurable, investable tokenized infrastructureRead the story
How Is Crypto Custody Regulation Changing?Useful for custody, safeguarding, CASS 17, institutional trust and operational control questionsRead the question
UK FCA Plans Full Crypto Licensing Regime by 2026Background on the UK path from policy design and consultation toward a full cryptoasset regimeReview the buildout
FCA Chair on Crypto, Stablecoins and Digital Asset RegulationPolicy signal connecting crypto regulation, stablecoins, consumer risk, scams and the FCA's long running supervisory directionRead the speech context
Stablecoin Data Shows Payments Reality GapMarket evidence on why stablecoin payments need trust, liquidity, distribution and operating infrastructureRead the analysis
Tokenized Infrastructure Is Changing How Markets OperateMarket infrastructure context for tokenized cash, settlement, collateral, custody and regulated railsRead the insight

From Regulation to Opportunity

The FCA regime creates demand for regulated infrastructure across stablecoins, custody, market surveillance, disclosure, trading systems, prudential analytics, operational resilience, Consumer Duty evidence, reporting and compliance automation. The closest NCFA opportunity layer is the Programmable Stablecoin Payments brief, which examines where compliant stablecoin infrastructure can create practical payment and settlement use cases.

Open the Stablecoin Payments Opportunity Brief


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights

NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Canada’s Open Banking Regulatory Intelligence Guide

Jun 29, 2026 | NCFA Resource | Open Banking Open Finance, Regulation And Policy

Last updated: September 11, 2026

Canada open banking and Consumer Driven Banking regulatory intelligence guide

Canada Open Banking Rules For Readiness And Consultation

NCFA has published a new Regulatory Intelligence guide to Canada Open Banking and Consumer Driven Banking Rules. The interactive resource organizes the proposed regulations, implementation requirements, consultation questions and strategic issues shaping Canada’s regulated open banking framework.

For a broader view of Open Banking and Consumer-Driven Finance, including the Canadian market map, 146 learning modules, company intelligence, global benchmarks and interactive discussions, explore NCFA Open Banking & Consumer-Driven Finance Interactive Intelligence.

The guide tracks accreditation, data scope, consent, authentication, security, technical standards, liability, reporting, complaints, national security review, fees and administrative monetary penalties. It also explains why consumer trust, fraud prevention and clear accountability are central to implementation. For further analysis, see Canada's Open Banking Strategy Starts With Trust.

What It Does In Practice

The resource gives readers a structured way to understand what the proposed Consumer Driven Banking Regulations would require before final rules are published.

Instead of treating the regulations as one long legal document, the guide breaks them into operating topics. Each section separates regulatory requirements, implementation work, consultation considerations and NCFA’s strategic perspective.

Canada’s open banking framework is progressing from policy design into regulatory implementation. Firms need to understand more than API access. They need to prepare evidence for accreditation, consumer consent flows, registry checks, authentication records, security safeguards, breach response, complaint procedures, service standards, reporting obligations and board level accountability.

The 60-day Canada Gazette consultation closed on August 26, 2026. The proposed regulations remain subject to finalization, while firms continue preparing for accreditation, supervision, data-sharing, consent, security and operational requirements.

Who Gets Value

This resource is useful for fintech founders, open banking platforms, financial institutions, credit unions, payment service providers, data aggregators, regtech providers, compliance teams, investors, policymakers and industry associations.

It is especially useful for organizations assessing accreditation, product design, consent architecture, data sharing duties, technical standards, cybersecurity, consumer protection and implementation costs.

Strengths And Limits

The strength of this resource is its focus on regulatory readiness. It converts the proposed Consumer Driven Banking Regulations into a practical intelligence layer that can support planning, consultation, product design and ecosystem coordination.

The guide connects the proposed regulations to Canada’s policy objectives, including stronger consumer protection, fraud mitigation, secure financial data sharing, competition and confidence in the open banking framework.

It also connects regulation to commercial opportunity. The guide identifies where read access, data portability, identity and income verification, cash flow analysis, embedded workflows, write access and open finance may create future product and infrastructure demand.

The regulations remain proposed and may change following consultation. Readers should use the guide for ecosystem intelligence and planning, not as legal, financial, investment, compliance or professional advice.

Key Resources

Canada Open Banking and Consumer Driven Banking Rules (primary NCFA Regulatory Intelligence guide)

NCFA Open Banking & Consumer-Driven Finance Interactive Intelligence (market map, 146 learning modules, company intelligence, discussions and global benchmarks)

Canada's Open Banking Strategy Starts With Trust (consumer protection and fraud readiness)

Open Banking In Canada Opportunity Brief (commercial opportunity layer)

NCFA Financial Innovation Map (ecosystem context)

Proposed Consumer-Driven Banking Regulations (official Canada Gazette source)


National Crowdfunding and Fintech Association of CanadaThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter