Global fintech and funding innovation ecosystem

Category Archives: Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech

FINRA Cybersecurity Practices For Member Firms

August 19, 2026 | NCFA Resource | Cybersecurity And Fraud, Risk Compliance And Regtech, Capital Markets And Market Infrastructure

NCFA Resource – FINRA Cybersecurity Practices For Member Firms

12 Controls For Cyber Risk, Vendors, Access And Recovery

In August 2026, the Financial Industry Regulatory Authority published Cybersecurity Effective Practices, a 12-part framework for FINRA member firms reviewing cybersecurity programs, controls and operating procedures. A firm can use the resource as a structured checklist for who owns cybersecurity, which systems and vendors create risk, who can access sensitive data, how threats are detected, and whether the business can recover when systems fail. FINRA designed the practices to scale with firm size, business model, technology complexity and risk profile.

What It Does In Practice

FINRA organizes the resource around 12 areas:

  1. governance
  2. risk management
  3. third party risk management
  4. asset management
  5. access control and identity management
  6. data protection
  7. security awareness and training
  8. vulnerability and patch management
  9. security monitoring
  10. threat intelligence and information sharing
  11. incident response and reporting
  12. resilience and recovery

The framework starts with accountability and risk ownership. FINRA recommends a designated cybersecurity lead, regular reporting to senior decision makers, documented policies and periodic reviews, while also making cyber risk part of decisions about new technology, systems and operating changes. From there, firms are expected to identify the information, systems and business functions they depend on, assess threats such as ransomware, insider activity and vendor exposure, test important systems for weaknesses and revisit those risks when technology or operations change.

Third party risk receives detailed treatment. FINRA treats vendors with access to customer information or critical systems as part of the firm’s security perimeter. Firms should know which vendors have access, understand important fourth party relationships and identify which providers support critical operations. Contracts can address audit rights, data handling, breach notification and visibility into subcontractors, while ongoing oversight should include access monitoring and a documented process for removing access and handling customer information when a relationship ends.

That concern extends beyond US broker dealers. Weak access control governance can expose sensitive information when a partner or service provider retains permissions that are unnecessary or poorly monitored. FINRA’s guidance connects vendor governance with the practical question of who can access systems and data, for how long, and under what controls.

Asset management and access control fit naturally together. FINRA recommends keeping a current inventory of hardware, software, cloud services and data flows, assigning owners to important assets and identifying systems that no longer receive security updates. Once firms know what they have, they can control who gets access through unique credentials, role based permissions, multifactor authentication, periodic entitlement reviews, segregation of duties and least privilege. Access should also be changed or removed promptly when employees change roles or leave.

Data protection, training and patching cover another part of the operating picture. Firms are encouraged to classify sensitive data, encrypt it at rest and in transit where feasible, control retention and protect backups, including with immutable or air gapped storage. FINRA also recommends ongoing employee training, role specific instruction for staff with sensitive access and phishing simulations backed by records of participation. Vulnerability management should include regular scanning, risk based patch priorities and verification that remediation work was completed rather than assumed.

Who Gets Value

The primary users are FINRA member broker dealers, including compliance teams, cybersecurity leaders, technology teams, operations executives and senior management. Smaller firms can use the 12 areas to identify where basic controls are missing without trying to copy the cybersecurity program of a much larger institution, while larger firms can use the same structure to review whether responsibilities, documentation and technical controls are working together.

Technology providers, managed security firms, consultants and RegTech companies serving broker dealers can also use the resource to understand what clients may expect around access, logging, vendor controls, data handling, patching, incident response and recovery. Boards and senior executives can use it as a governance checklist because FINRA makes cybersecurity ownership, management reporting, resource decisions and documented risk acceptance part of the program rather than leaving cyber risk entirely with the technology team.

Strengths And Limits

The main strength is that FINRA connects governance directly to operating controls. A firm can follow the framework from senior accountability through asset inventories, identity controls, encryption, training, monitoring and recovery testing, which makes the document more useful than a high level cyber policy statement.

Third party risk is also handled with more depth than a basic checklist. Firms are expected to understand vendor dependencies, monitor privileged access, address fourth parties and plan how systems and data will be handled when a provider relationship ends. Security monitoring extends that discipline to unusual access, suspicious data transfers, system changes and privileged accounts, with logs retained long enough to support operations, investigations, forensic work and applicable recordkeeping requirements.

The framework also includes threat intelligence, incident response and recovery. FINRA recommends using relevant threat feeds, updating defenses as attack methods change and participating in trusted information sharing networks. Incident response focuses on how a firm detects, escalates and contains an event, while recovery planning deals with how critical systems and data return to service afterward. Tested backups, tabletop exercises, offline procedures and defined Recovery Point Objectives and Recovery Time Objectives all help firms decide how much data loss and downtime different systems can tolerate.

The main limitation is jurisdiction. FINRA developed the resource for US member firms and connects several practices to US requirements, including SEC Regulations S-P and S-ID, FINRA Rules 3110 and 4370, and Exchange Act recordkeeping rules. The document also doesn't create new legal or regulatory requirements or reinterpret existing ones. For Canadian financial technology and service firms, its best use is as a practical comparison and control review, not as a statement of Canadian regulatory obligations.

Key Resources

FINRA Cybersecurity Effective Practices (12-part cybersecurity control framework)

Cybersecurity Effective Practices PDF (downloadable nine page resource)

Small Firm Cybersecurity Checklist (small firm program checklist last reviewed February 2024)

Core Cybersecurity Threats And Controls (small firm threats and control questions)

FINRA Cybersecurity Resources (cybersecurity tools, guidance and related material)

2026 Cybersecurity And Cyber Enabled Fraud (current threats and effective practices)

Proposed Class Action Targets Equifax Access Controls (access governance and third party permissions)


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

NCFA Weekly Fintech Intelligence Aug 8-14, 2026

Aug 8, 2026 | NCFA Fintech Whisperer | Digital Banking And BaaS, Regulation And Policy, SME Finance And Business Banking, Digital Assets Blockchain And Tokenization, Payments Infrastructure And Money Movement, Capital Markets Infrastructure And Funding, Artificial Intelligence And Data, Wealthtech Investing And Trading, Embedded Finance, Risk Compliance And Regtech, Lending Consumer Credit And BNPL, Cybersecurity Fraud And Financial Crime

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-24, 2026, July 25-July 31 2026, August 1-August 7, 2026).

Weekly Fintech Market Intelligence Aug 8 - 14, 2026

Wealthtech Investing And Trading

Gate Expands Into U.S. Stocks And Tokenized Equities Through Alpaca

August 13, 2026, Global
  • Gate, which Alpaca says serves more than 58 million users, launched access to more than 10,000 U.S. listed stocks and ETFs, eligible IPO allocations and tokenized stocks using Alpaca infrastructure.
  • Alpaca provides the brokerage infrastructure behind the offering and supports custody and settlement of the underlying shares associated with Gate's gStocks tokenized stock product.
  • One day earlier, Crypto.com launched Tokenized Stocks through Alpaca for a platform serving more than 150 million customers, offering economic exposure to 1,500 U.S. stocks and ETFs from US$1, with selected products available around the clock.
  • Crypto.com's products are derivative financial instruments that provide economic exposure rather than ownership of the underlying shares or associated shareholder rights.

Large crypto platforms are starting to look more like multi asset investment distributors, but the infrastructure underneath them is still regulated brokerage, custody and settlement. Alpaca has been building specifically for this role, which NCFA recently examined in its global brokerage platform expansion. The competitive question is who controls that regulated layer as crypto, traditional securities and tokenized products converge inside the same customer interface.

BlackRock Canada Embeds Bitcoin In Diversified ETF

August 10, 2026, Canada
  • BlackRock Canada launched the iShares Equity + Bitcoin ETF Portfolio, or IBQT, on the Toronto Stock Exchange with a strategic allocation of approximately 97% global equities and 3% bitcoin.
  • The fund carries a 0.22% management fee and packages Canadian, U.S., international and emerging market equities with bitcoin exposure inside one portfolio.
  • IBQT currently gets its bitcoin exposure through BlackRock’s Canadian IBIT fund, extending that product from a standalone bitcoin investment into a component of a diversified portfolio.

IBQT changes where the crypto allocation decision happens. Investors choosing the fund are buying a diversified equity portfolio with bitcoin already assigned a modest strategic weight, rather than adding crypto separately. That puts bitcoin closer to conventional portfolio construction and gives Canadian advisers and investors a simple way to combine traditional markets and digital assets in one listed product.

Payments Infrastructure And Money Movement

Flywire And Trustly Bring Pay By Bank To Canada

August 12, 2026, Canada / United States
  • Flywire expanded its Trustly partnership into Canada and the United States, letting payers authorize large domestic and cross border payments directly from their bank accounts.
  • In Canada, the payment itself runs through Pre Authorized Debit. Trustly adds bank authentication and account connectivity around that existing rail rather than using Canada’s future regulated payment initiation framework.
  • The service removes manual account entry during checkout and adds payment verification and risk controls around higher value bank transfers.

Pay by Bank is reaching Canadian customers before regulated payment initiation does. Foreign providers are improving the experience around an existing Canadian bank rail instead of waiting for new infrastructure. That makes the commercial timing important for Canada’s open banking opportunity: future regulated access will enter a market where some of the customer experience is already being built.

Dream Payments Launches Programmable U.S. Payout Network

August 11, 2026, Canada / United States
  • Toronto based Dream Payments launched Dream Payouts for eligible U.S. businesses in collaboration with J.P. Morgan Payments, supporting payments to suppliers, partners and individuals.
  • Eligible payments can arrive through the RTP network in under 30 seconds, including nights, weekends and holidays, with ACH and wire available when instant delivery is unavailable or not selected.
  • Software platforms can embed payout capabilities, while Dream provides recipient onboarding, identity checks, banking verification, approval controls and transaction tracking from initiation through settlement.
  • Dream says the infrastructure can support software and AI agents that initiate, approve and reconcile payments within defined business controls.

Dream is taking infrastructure built by a Canadian fintech into U.S. business payment workflows where the payment can start inside the software that created the obligation. That also gives agent payment infrastructure a more concrete operating model: software can participate in the workflow, but identity, authority, approval and settlement controls still determine whether money moves.

Francisco Partners To Acquire Moneris For C$2 Billion

August 10, 2026, Canada
  • Francisco Partners agreed to acquire Moneris from RBC and BMO for approximately C$2.0 billion in cash, with each bank receiving half of the proceeds. The transaction remains subject to regulatory approvals and other closing conditions.
  • RBC and BMO will keep exclusive referral relationships with Moneris even as ownership of the payments company transfers to Francisco Partners.
  • Moneris says it has nearly 2,000 employees in Canada and will retain its Canadian headquarters and technology infrastructure after the transaction closes.

Last year’s Moneris sale discussion has become a signed change of control. RBC and BMO are giving up ownership while preserving customer distribution, leaving Francisco Partners to decide how aggressively Moneris invests across merchant acquiring, commerce software and payments technology. The separation between infrastructure ownership and bank distribution is the more consequential part of the deal.

Capital Markets Infrastructure And Funding

Canada Starts Trial Of Government Securities Fail Fee Framework

August 13, 2026, Canada
  • CIMPA and CDS will begin the first stage of Canada's fail fee framework for Government of Canada bond and T-bill transactions on September 8, 2026.
  • The trial will run for at least 18 months. Settlement fails and indicative fees will be calculated, statistics will be published and CDS participants will receive reports and indicative invoices.
  • No fail fees will be charged or paid during this first stage. The Canadian Fixed-Income Forum will decide whether payments are activated later.

Canada is putting a settlement discipline framework into live measurement before imposing a financial penalty. That gives dealers, custodians and market infrastructure providers time to see where fails occur, what the operational burden looks like and whether the fee design changes settlement behaviour. The evidence from the trial will determine whether a reporting framework eventually becomes an economic incentive.

Canada Starts Standardized Government Collateral Trading On CCMS

August 12, 2026, Canada
  • CIMPA, TMX Group and Clearstream have started repo trading using a standardized Government of Canada General Collateral basket on the Canadian Collateral Management Service.
  • CCMS automates repo collateral management and supports unlimited real time collateral substitution, giving participants another way to manage liquidity and collateral throughout a transaction.
  • The first GoC basket is expected to be followed by standardized baskets covering provincial securities, Canada Mortgage Bonds, NHA mortgage backed securities, public sector securities and corporate collateral.

Canada's repo market now has a standardized collateral workflow running on infrastructure that the Bank of Canada also plans to use for its domestic repo operations. Wider adoption would make collateral easier to allocate and substitute across financing activity while reducing manual processing. The next evidence is usage: how much repo activity migrates onto CCMS and whether the additional baskets deepen participation beyond Government of Canada securities.

PointsKash Expands Capital Commitment To Support National Kiosk Rollout

August 12, 2026, United States
  • PointsKash announced an expanded strategic capital commitment of up to US$100 million from Hawk Capital Advisors to support commercialization and national deployment of its financial services platform.
  • The first phase provides for up to US$35 million through October 30, 2026 for priorities including refurbishment and deployment of approximately 2,100 company owned KashPoint kiosks, technology integration, merchant activation, PK Pay development and working capital.
  • A second phase could provide up to another US$65 million between February and April 2027, subject to operating and deployment milestones, customary closing conditions and financing availability.

The financing connects capital directly to deployment of a physical and digital financial services network rather than funding an undefined expansion plan. PointsKash acquired more than 2,100 cryptocurrency kiosks earlier in August and now has a staged capital structure intended to refurbish and redeploy that hardware while building payments, merchant and mobile services around it. The conditional structure also keeps a clear line between near term funding and the larger amount that depends on execution.

CIRO Short Sale Settlement Rule Takes Effect

August 11, 2026, Canada
  • CIRO now requires a Participant or Access Person to have a reasonable expectation that a short sale can settle on the intended settlement date before entering the order.
  • The rule adds a positive control before execution instead of relying only on action after a trade fails to settle.
  • CIRO provides defined exceptions, including certain sales involving securities a person is deemed to own, subject to prescribed delivery conditions.

The rule changes where settlement risk has to be dealt with. Firms must support the expectation of settlement before a short sale reaches the market, putting more responsibility on trading controls, securities availability and supervision. Difficult to borrow securities and repeated settlement failures will show how demanding the requirement becomes in practice.

Artificial Intelligence And Data

RBI Sets Concrete AI Governance Expectations For Banks

August 11, 2026, India
  • Reserve Bank of India Governor Sanjay Malhotra told banks to maintain inventories of material AI systems and establish governance that assigns clear responsibility for their use and risks.
  • He called for contracts with AI providers to preserve audit, explanation and exit rights, while material systems should be stress tested and tested against adversarial behaviour before deployment and periodically afterward.
  • Banks should retain meaningful human oversight where an AI error could materially harm a customer or financial stability, including lending, fraud and other consequential decisions.

RBI is pushing AI governance into the same operating disciplines banks already use for material risk. That aligns with Canadian work on regulated AI, where model oversight, vendor access, fallback plans and proof of control are becoming practical requirements. The advantage will come from deploying useful AI while being able to show who owns the risk and how the system is controlled.

Cross Border Payments And FX

Brazil Explores Linking Pix To Foreign Payment Systems

August 10, 2026, Brazil
  • Brazil’s central bank is assessing bilateral connections between Pix and foreign instant-payment systems, as well as participation in multilateral payment hubs, to support lower-cost and faster cross-border transfers.
  • The work goes beyond earlier discussion of possible international expansion. Banco Central do Brasil had already placed Pix Internacional on its 2027+ development agenda in March, and the August update points to more concrete interoperability options.
  • Pix processed nearly 80 billion transactions worth more than R$35 trillion in 2025, giving any international connection potential scale well beyond a niche cross-border payment product.

Pix is starting to test whether a national instant-payment rail can connect directly into foreign payment infrastructure rather than relying only on traditional correspondent channels. NCFA’s cross border payments benchmark shows why that distinction matters: strong domestic rails don’t automatically solve international cost, speed or interoperability. The practical questions are which systems Brazil connects to first, how FX, compliance and settlement are handled across jurisdictions, and whether this becomes a repeatable model for other domestic real time rails.

Digital Assets Blockchain And Tokenization

OCC Conditionally Approves World Liberty National Trust Bank

August 14, 2026, United States
  • The OCC granted preliminary conditional approval for World Liberty Trust Company, National Association, the proposed national trust bank of Trump family backed World Liberty Financial.
  • The approved business plan covers USD1 issuance and redemption, maintenance of USD1 reserve assets, fiduciary digital asset custody and limited conversion services for custody customers.
  • The approval is not authority to begin operations. The proposed bank is limited to trust company activities, does not plan to become an FDIC insured depository institution and must satisfy remaining OCC conditions before commencing business.

USD1 could move from a stablecoin structure supported by external service providers into a federally supervised trust bank that combines issuance, redemption, reserves and custody. That would bring more of the operating stack behind a payment stablecoin inside one regulated entity, while concentrating responsibility for reserve management, safeguarding and compliance.

Deribit Gets Dubai Broker Dealer Licence And Coinbase Liquidity

August 13, 2026, United Arab Emirates
  • Deribit FZE received a Broker Dealer Licence from Dubai's Virtual Assets Regulatory Authority, expanding the permissions behind its existing regulated spot trading operation.
  • Spot buy, sell and trade orders placed on Deribit can now be routed to Coinbase Exchange for execution, giving clients access to deeper liquidity and hundreds of additional assets.
  • The upgraded spot service is rolling out to retail, qualified and institutional investors. Assets acquired through it can also be used as collateral for Deribit derivatives trading, subject to regulatory approval.

The Coinbase acquisition is moving from ownership into shared market infrastructure. Deribit can keep its derivatives interface while drawing on Coinbase's spot liquidity and execution stack, extending the Deribit acquisition strategy into day to day trading. That brings spot execution, collateral and derivatives closer together inside one regulated operating structure.

Perpetual Markets Extends Regulated European Venue Into Crypto

August 13, 2026, Cyprus / European Union
  • PM MTF Ltd received CySEC authorization under MiCA for crypto asset services alongside its existing regulated European trading venue.
  • The authorized activities include operating a crypto asset trading platform, custody and administration, execution of orders, reception and transmission of orders, and crypto asset transfers.
  • The authorization provides a regulated route for Perpetual Markets to extend crypto services across the EEA, including infrastructure that can support institutional and white label distribution.

The significance is the combination of existing regulated market infrastructure with newly authorized crypto services. Rather than building a separate crypto venue, Perpetual Markets can extend an established MTF operating model into digital assets, giving brokers and institutions another route to offer crypto products under a European regulatory framework. The announcement authorizes expansion, but does not establish that every permitted crypto service is already live at scale.

Anchorpoint Starts Institutional Rollout Of Regulated HKD Stablecoin

August 12, 2026, Hong Kong
  • Hong Kong licensed issuer Anchorpoint began phase one of HKD At Par, or HKDAP, through Beta Access for institutional distributors and professional investors.
  • Authorized distributors can provide conversion between HKDAP and fiat currency for institutions, corporate users and professional investors while integrating the stablecoin into commercial and financial applications.
  • Anchorpoint is initially targeting cross border payments and settlement and distribution of tokenized real world assets. Broader retail access could begin as early as the end of 2026, depending on market conditions.

Hong Kong's stablecoin regime has crossed from licensing into controlled distribution and commercial use. That builds on the tokenized finance strategy NCFA has been tracking through Standard Chartered and Hong Kong's regulators. HKDAP now has to prove that regulated tokenized money can attract repeat transaction flow across payments, asset settlement and institutional distribution rather than remain a licensed product with limited circulation.

Coinbase Gets Abu Dhabi Permission For Tokenized Securities Hub

August 11, 2026, United Arab Emirates
  • Coinbase received Financial Services Permission from the Financial Services Regulatory Authority of ADGM to arrange investment deals and provide custody in support of tokenized securities.
  • Coinbase says securities issued through the structure will be backed by underlying shares, with verified token holders receiving shareholder rights including dividends and voting.
  • Transfers will be subject to ongoing sanctions screening, with wallet level freeze and seizure capabilities where required.

The important distinction is the legal and operating structure behind the token. Coinbase is combining regulated custody, underlying shares, investor rights and blockchain transferability rather than offering price exposure alone. That puts the model inside the infrastructure test NCFA is tracking for regulated tokenized assets: whether ownership rights, custody, compliance and transfer can work together at market scale.

Robinhood Uses Bitstamp To Bring Crypto Into Its UK App

August 10, 2026, United Kingdom
  • Robinhood has begun rolling crypto trading out to eligible UK customers, adding more than 50 digital assets directly inside its main investing app alongside equities, ISAs, options and futures.
  • Crypto trading is provided through Bitstamp UK Ltd, bringing the regulated UK infrastructure Robinhood acquired with Bitstamp into Robinhood’s retail distribution channel. Robinhood completed the acquisition in June 2025 to accelerate its crypto expansion outside the U.S.
  • The rollout is a material follow-on to Robinhood’s July 1 announcement, when the company said UK crypto trading was coming soon but had not yet launched it. Robinhood’s own disclosure at the time still said its UK entity did not offer crypto trading or custody.
  • The launch also adds Cortex Digests for Crypto, using generative AI to combine news, market data, technical indicators and Robinhood information into asset-level market summaries.

Bitstamp is becoming more than an acquired exchange for Robinhood. Its UK crypto infrastructure now lets Robinhood add digital assets to the same interface where customers already invest across traditional markets. The next test is whether that combination deepens customer activity and gives Robinhood a repeatable way to extend its wider investment platform into regulated crypto markets.

Lending Consumer Credit And BNPL

Shakepay Launches Bitcoin Backed Line Of Credit In Canada

August 13, 2026, Canada
  • Shakepay launched BLOC, a revolving line of credit that lets eligible Canadian customers borrow against bitcoin held with Shakepay without selling it.
  • Customers can borrow up to C$50,000 starting at 9.5% APR and track their balance, payments, collateral and loan to value ratio inside the Shakepay app.
  • BLOC is offered by Shakepay Credit Inc. under exemptive relief. If collateral values fall, borrowers may need to add bitcoin, repay part of the balance or face liquidation under the product terms.

Crypto backed lending is becoming part of the product stack offered by Canadian trading platforms. Shakepay is integrating the credit relationship directly into its own account experience, while embedded crypto lending at Netcoins uses APX to supply the lending operation behind the interface. The two models create different economics and different responsibility for underwriting, collateral controls and servicing.

Mortgage Automator Brings Construction Draw Management Into The Loan File

August 10, 2026, Canada
  • Toronto based Mortgage Automator launched Draw Management, bringing construction budgets, draw schedules and approvals directly into the active loan file for private lenders.
  • The feature automatically flags budget variances and applies Project Health scoring so lenders can monitor construction progress and draw risk without relying on separate spreadsheets or disconnected workflows.
  • The launch follows Mortgage Automator's August 4 acquisition of Lendr, extending its expansion into construction and private lending infrastructure across North America.

Construction lending is operationally intensive because capital is released in stages and each draw depends on current budget, progress and compliance information. Moving those controls into the loan system can reduce reconciliation work and make exceptions visible earlier, while giving private lenders a more integrated way to manage construction credit as portfolios scale.

Digital Banking And BaaS

TD Adds In-App Payroll Deposit Switching With Atomic

August 10, 2026, Canada
  • TD launched an in-app payroll direct-deposit switching experience that lets customers redirect payroll deposits to a TD account in about one minute with most employers.
  • The capability is powered by Atomic and sits inside the TD app, removing the need for customers to separately obtain banking details and update payroll information through their employer.
  • TD says it is the first Canadian financial institution to offer a fully integrated in-app payroll switching experience and has exclusive Canadian rights to Atomic’s capability through the end of 2026.

Opening a new bank account is easier than making it the primary account. Payroll switching reduces the work required to redirect recurring income and adds an operational layer to open banking and financial portability. Competition improves when customers can act on a better banking option, not only compare one. The next measure is whether easier switching translates into more primary-account relationships and deposits.

Revolut Receives Full French Banking Licence

August 10, 2026, France / Western Europe
  • Revolut Bank S.A. received a full French banking licence following a joint assessment by France’s ACPR and the European Central Bank, with the decision formally adopted by the ECB Governing Council.
  • The new French bank will begin serving customers in France before progressively expanding across Germany, Ireland, Italy, Portugal and Spain. Revolut Bank UAB in Lithuania remains the group’s other European banking hub.
  • Revolut says Western Europe now accounts for about 30 million customers. It has committed more than €1 billion to the region and is hiring more than 600 people across its Western European markets.

The licence turns Revolut’s banking expansion into a two-hub European structure with a new regulated entity serving its largest regional customer base. The execution test is how quickly customers and products migrate to the French bank, and whether local licences give Revolut more room to deepen lending, business banking and other regulated services across Western Europe.

Regulation And Policy

CFTC Uses Emergency Authority To Keep Kalshi Operating

August 11, 2026, United States
  • The CFTC exercised emergency authority after Kalshi notified the Commission of a market emergency tied to litigation brought by New York Attorney General Letitia James.
  • The Commission ordered Kalshi to continue operating in accordance with the Commodity Exchange Act Core Principles. New York is seeking to stop Kalshi from offering event contracts nationwide and is pursuing more than US$36 billion in damages.
  • The CFTC says federal law requires a uniform national derivatives market and has challenged state efforts to apply gambling laws to federally regulated designated contract markets in several jurisdictions.

The dispute is becoming a direct test of who controls access to event contracts in the United States. The CFTC is treating Kalshi as national derivatives infrastructure while states continue to challenge parts of the market through gaming law. NCFA’s regulated event contract infrastructure brief tracks the same boundary between exchange regulation, market integrity and product access.

FCA Adds Five Fintechs To Scale-Up Regulatory Unit

August 10, 2026, United Kingdom
  • ClearScore, Modulr, Teya, Urban Jungle and Zilch became the first firms regulated solely by the FCA to join its Scale-up Unit.
  • The unit gives fast-growing regulated firms a dedicated regulatory contact for product launches, permission changes, policy developments and other issues that arise as they expand.
  • The FCA also published findings from a 15-firm high-growth pilot, including weaknesses where governance, board oversight, risk management and controls had not kept pace with business growth.

The FCA is making regulatory engagement part of the scale up process rather than waiting for rapid growth to create supervisory problems. NCFA’s closer look at the five firms shows how that support intersects with payments, credit, insurance and European expansion. For fintechs, the tradeoff is clearer: faster access to regulatory guidance comes with closer attention to whether governance, controls and customer protections are developing at the same rate as products, customers and market expansion.

Senate Sets September Procedural Vote On CLARITY Act

August 8, 2026, United States
  • Senate leadership filed cloture on the motion to proceed to H.R. 3633, the Digital Asset Market Clarity Act, after the chamber left for its August recess without voting on the bill.
  • The Senate schedule says the cloture motion will ripen on September 15 at 2:15 p.m., creating a formal procedural route toward floor consideration when senators return.
  • The bill still faces a 60-vote threshold and unresolved negotiations, including bank concerns over stablecoin rewards and proposed ethics provisions.

The CLARITY Act has moved from an uncertain post-recess commitment to a scheduled Senate procedure. The September vote will test whether negotiators can assemble enough support to advance a federal market-structure framework and narrow the remaining disagreements over banking, stablecoins and digital-asset oversight.

SME Finance And Business Banking

Mercury Lets Businesses Issue Dedicated Cards To AI Agents

August 11, 2026, United States
  • Mercury launched Mercury Spend with budgets, expense policies and company cards managed through one spending system.
  • Businesses can issue dedicated cards to AI agents for approved transactions and monitor their spending separately from employee activity.
  • Budgets and expense policies provide the control layer around those cards, while Mercury can automatically categorize transactions and lock cards when required tasks remain overdue.

The important change is that an AI agent can now receive its own controlled payment credential rather than only prepare a transaction for someone else. That makes permission design part of the payment product. NCFA has already tracked how AI agents use card rails; Mercury brings the same question inside company spending, where budgets and policy controls define how much authority software actually receives.

SIDBI Takes Invoice Fraud Controls Into Live MSME Lending

August 10, 2026, India
  • SIDBI and MonetaGo confirmed that Secure Financing is live on SIDBI’s GST-Sahay invoice-based financing platform following a pilot and three months of production use.
  • The system validates invoices financed through India’s TReDS infrastructure and checks invoices across participating factoring platforms and lenders, including SBI Global Factors and India Factoring.
  • The production milestone follows the November 2025 SIDBI-MonetaGo partnership. The system is designed to identify duplicate financing and strengthen invoice validation before credit is advanced to MSMEs.

Invoice financing fraud controls are becoming shared lending infrastructure rather than checks performed inside one lender at a time. MonetaGo has been working on shared trade finance fraud controls for years; the SIDBI deployment brings that model into live MSME lending. The test is whether interoperable validation reduces duplicate financing and exceptions at scale while making cash flow credit faster and safer across multiple lenders and factoring platforms.

Embedded Finance

Mews Gains EEA Electronic Money Institution Licence

August 11, 2026, European Economic Area
  • De Nederlandsche Bank granted Mews Financial Services B.V. an Electronic Money Institution licence, giving the hospitality software company regulated financial standing across the EEA.
  • Mews plans to bring payment services, financial workflows and hotel operating data into the same platform, alongside safeguarding, fraud monitoring, sanctions screening and anti money laundering controls.
  • The company processed US$19.7 billion in hotel transaction value in 2025. Regulated capabilities are expected to begin with a Netherlands pilot in late 2026 before expanding across the EEA.

Mews is taking embedded finance beyond connecting hotels to outside financial providers. Its own regulated entity can now sit inside the software where hotel revenue, operations and payments already meet. That changes the regulatory boundary for embedded finance: vertical software can become part of the licensed financial infrastructure instead of remaining only the distribution layer.

Risk Compliance And Regtech

TransFi Puts AI Into Cross Border Compliance Workflows

August 14, 2026, Global
  • TransFi launched JARVIS, a proprietary compliance intelligence platform that combines KYC and sanctions screening, internet profiling, behavioural and biometric signals, and fiat and blockchain transaction monitoring.
  • JARVIS builds risk profiles, uses heuristics and AI research to recommend actions on high confidence matches, and escalates complex or ambiguous cases for human review.
  • Final KYC, KYB, transaction monitoring and screening decisions remain with TransFi's compliance team under MLRO oversight.

AI is entering compliance as an investigation and decision support layer rather than replacing accountable human approval. That model fits the emerging market for AI powered compliance workflows where evidence, escalation, auditability and human control determine whether automation can be trusted. TransFi's operating test is whether JARVIS reduces review effort across multiple jurisdictions without weakening decision quality.

Cybersecurity Fraud And Financial Crime

Trezor Customer Data Exposed In Shipping Provider Breach

August 13, 2026, Global
  • Trezor disclosed that a breach at shipping provider ShipMonk exposed customer information including names, email addresses, phone numbers and shipping addresses.
  • Approximately 11,742 customers had full contact and shipping information exposed, while another 1,947 had partial exposure, bringing the affected total to about 13,689 customers.
  • Trezor says its own systems, devices and services were not compromised. The company warns that the exposed information could instead be used for more sophisticated phishing and impersonation attempts.

The breach shows how self custody can inherit risk from suppliers that never touch a private key. Fulfilment providers still hold enough identity and location data to expose hardware wallet owners to targeted attacks, making vendor controls and data retention part of hardware wallet security rather than a separate privacy issue.

Weekly Close

Financial infrastructure is becoming easier to enter and harder to operate well. Bank switching is getting simpler, payments are becoming programmable, AI agents are gaining spending authority and software platforms are taking on regulated financial roles. At the same time, regulators are putting more weight on governance, settlement discipline, market access and accountability. The competitive advantage is moving toward firms that can combine better distribution with stronger control of the infrastructure underneath it.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

NCFA Weekly Fintech Intelligence Aug 1-7, 2026

Aug 1, 2026 | NCFA Fintech Whisperer | Digital Assets Blockchain And Tokenization, Treasury Liquidity, Embedded Finance, Artificial Intelligence And Data, Cybersecurity Fraud And Financial Crime, SME Finance And Business Banking, Payments Infrastructure And Money Movement, Capital Markets Infrastructure And Funding, Regulation And Policy, Risk Compliance And Regtech

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-24, 2026, July 25-July 31 2026).

Weekly Fintech Market Intelligence Aug 1 - 7, 2026

Artificial Intelligence And Data

AMD To Acquire Toronto AI Chip Startup Taalas

August 6, 2026, Canada / United States
  • AMD reached a definitive agreement to acquire Toronto based Taalas, whose specialized silicon is designed to reduce compute and memory bottlenecks in AI inference. The transaction remains subject to regulatory approvals and other closing conditions.
  • AMD plans to integrate Taalas technology into its AI accelerator roadmap and develop system level solutions alongside AMD Instinct GPUs, bringing the Canadian company’s inference architecture into one of the major global AI computing platforms.
  • Taalas was founded in Toronto in 2023. AMD says it intends to retain and grow the Canadian team as part of its semiconductor and AI presence in the country.

The acquisition puts Canadian inference technology inside AMD as competition for AI compute intensifies. NCFA’s deeper look at the Taalas acquisition examines the Canadian tradeoff more closely: engineering can remain here while ownership, capital allocation and the commercial direction of the technology move inside a global semiconductor company.

Scotiabank Deploys Three Knowledge Agents Across Enterprise Workflows

August 6, 2026, Canada
  • Scotiabank introduced three governed knowledge agents through Scotia Intelligence: Delivery Navigator, the Travel and Expense Knowledge Agent and the Procurement Knowledge Agent.
  • The agents draw from approved internal information sources to help employees find policies, procedures and operational guidance. Scotiabank has not said they independently approve projects, expenses or procurement decisions.
  • More than 71,000 employees have access to Scotia Intelligence, and the bank reports that employees have generated 14 million actions through the platform.
  • More than 80% of Scotiabank’s global workforce and over 90% of employees at director level or higher have completed at least one internal AI course.
  • “Actions” is Scotiabank’s usage measure. It does not represent completed workflows, hours saved, financial returns or the number of active employees.

Scotiabank is progressing from general AI assistance to governed financial workflows built around approved information sources and defined employee tasks. The next measures are repeat usage, time saved, answer quality and whether the agents can support more complex work without weakening human review, data controls or accountability.

AMD To Acquire Toronto AI Chip Startup Taalas

August 6, 2026, Canada / United States
  • AMD reached a definitive agreement to acquire Toronto based Taalas, whose specialized silicon is designed to reduce compute and memory bottlenecks in AI inference. The transaction remains subject to regulatory approvals and other closing conditions.
  • AMD plans to integrate Taalas technology into its AI accelerator roadmap and develop system level solutions alongside AMD Instinct GPUs, bringing the Canadian company’s inference architecture into one of the major global AI computing platforms.
  • Taalas was founded in 2023 and has built its engineering team in Canada. AMD says it intends to retain and grow that team as part of its existing Canadian semiconductor and AI presence.

The acquisition puts differentiated Canadian AI infrastructure inside AMD as competition for inference performance intensifies. It also adds another example to the question of who owns Canadian AI infrastructure as domestic companies scale. Taalas keeps its engineering base in Canada, but its technology, capital requirements and commercial reach will now sit inside AMD’s global platform.

EU AI Content Transparency Rules Take Effect

August 2, 2026, European Union
  • Article 50 of the EU AI Act now requires providers of covered generative AI systems to mark artificially generated or manipulated audio, images, video and text in a machine-readable and detectable format.
  • Organizations using AI professionally must disclose deepfakes and public-interest text generated or manipulated by AI when it lacks human review, editorial control and an accountable publisher.
  • People must also be informed when they interact directly with certain AI systems or are exposed to emotion-recognition and biometric-categorization tools.
  • The Commission’s AI content icons are optional, but the underlying disclosure requirements are mandatory. Content released before August 2 does not require retroactive labelling.

Europe has turned AI-content provenance into an operating compliance requirement. Banks, fintechs, insurers, publishers and AI providers now need controls that preserve machine-readable markings across creation, editing, distribution and resharing while documenting when human editorial oversight creates an exception.

Digital Assets Blockchain And Tokenization

Circle Sets September 16 Launch For Arc Mainnet

August 5, 2026, United States / Global
  • Circle scheduled Arc’s public mainnet launch for September 16. The network is currently operating as a private mainnet with more than 100 institutional and ecosystem builders.
  • BlackRock, DTCC, Galaxy, Global Payments, ICE, Mastercard, MoneyGram, SBI Group, Standard Chartered, Sumitomo Corporation and Visa are joining Circle as founding validators.
  • BlackRock is expected to deploy its BUIDL tokenized fund on Arc, while Circle and DTCC are working toward tokenizing DTC-custodied assets on the network beginning in the second half of 2027.
  • Circle plans to introduce an application framework, AI-powered development tools and capabilities for issuing and managing tokenized real-world assets when the public network launches.
  • Arc supports open application development but operates through a permissioned validator set. Circle states that planned features remain subject to modification, delay or cancellation.

Circle is placing banks, asset managers, market infrastructure providers and payment networks inside the operation of its blockchain rather than treating them only as users. The next test is whether Arc launches on schedule with live institutional integrations, meaningful transaction activity and connections to assets and liquidity outside Circle’s own ecosystem.

South Africa Proposes Cross-Border Crypto Transfer Framework

August 3, 2026, South Africa
  • South Africa’s National Treasury and Reserve Bank published a draft Crypto Assets Manual governing cross-border crypto activities.
  • A transfer becomes reportable when crypto moves between an authorized South African crypto asset service provider and an offshore provider, or from a domestic provider to a non-custodial wallet.
  • Authorized providers would report qualifying inflows and outflows to the Reserve Bank’s Financial Surveillance Department and comply with specified authorization, monitoring and administrative requirements.
  • Initially, only individuals could transfer crypto offshore through authorized providers using their single discretionary or foreign capital allowances.
  • The proposal doesn’t give crypto legal tender status or distinguish between different types of crypto assets. Comments are due September 30, 2026.

South Africa is bringing offshore platforms and self-custodied wallets inside its capital flow controls without treating every domestic crypto transaction as cross-border. The framework could improve regulatory visibility, but its operating impact will depend on authorization capacity, reporting costs and whether users continue using regulated channels when transferring assets internationally.

Payments Infrastructure And Money Movement

Mastercard And PEXA Test Programmable Property Payments

August 5, 2026, United Kingdom
  • Mastercard and PEXA will explore programmable account-to-account payments that reserve buyer funds and release them automatically only when agreed property completion conditions are met.
  • The proposed model is expected to be tested through Mastercard’s A2A Sandbox, combining PEXA’s digital property completion infrastructure with Mastercard’s payment orchestration capabilities and Vocalink’s UK account-to-account infrastructure.
  • The work builds on PEXA’s Bank of England Synchronisation Lab use case, which is testing coordination between lender funds held in the renewed RTGS service and property title lodgement.

Property completion gives programmable finance a demanding test because payment release depends on a verified event outside the payment system. Banks and infrastructure providers will need clear rules for defining completion conditions, confirming title status, cancelling reserved funds, handling failed transactions and assigning liability across the payment and property networks.

Treasury Liquidity

Wells Fargo Plans Tokenized Deposits For Corporate Clients

August 4, 2026, United States / Global
  • Wells Fargo plans to launch tokenized deposits for corporate and commercial clients during fall 2026.
  • Clients would be able to transfer, program and settle bank deposits around the clock using blockchain infrastructure. The product is a tokenized commercial bank deposit, not a stablecoin.
  • The initial product will support U.S. dollars and British pounds for cross-border payments, with additional countries and currencies planned for 2027 based on client demand.
  • The deposits will operate on Wells Fargo’s proprietary blockchain platform. The bank said the product could connect with private networks and the planned U.S. bank-led tokenized deposit network.
  • Wells Fargo hasn’t disclosed whether initial transfers will be limited to its own customers or which operating jurisdictions will receive access first.

Wells Fargo is bringing programmable commercial bank money into corporate treasury while banks compete with stablecoins for always-on settlement. The next test is whether clients can move funds beyond Wells Fargo’s customer and network boundaries without losing the speed, control and regulatory treatment that make tokenized deposits attractive.

SME Finance And Business Banking

FIS Extends Digital One Commercial Across Asia-Pacific

August 4, 2026, Asia-Pacific / Global
  • FIS launched Digital One Commercial in Asia-Pacific, completing the platform’s availability across the United States, Europe, the Middle East and Africa, and Asia-Pacific.
  • The core-agnostic platform combines business payments, cash management, trade finance, foreign exchange and corporate treasury services through one commercial-banking interface.
  • FIS says one unnamed Asia-Pacific bank operates the platform across 15 countries, serving approximately 350,000 business customers and more than one million end users from a single instance.
  • The platform supports regional payment infrastructure including PayNow, GIRO and FAST, alongside SWIFT and ISO-based messaging, multiple languages, currencies and time zones.
  • The announcement does not identify the bank. The reported customer and user figures describe the existing deployment and should not be treated as customers acquired through this launch.

FIS now has bank-issued digital money infrastructure and a commercial-banking platform spanning payments, treasury and trade finance. The immediate test is whether one shared platform can handle local payment rails, regulatory requirements and corporate workflows while reducing the cost and complexity of entering additional markets.

Embedded Finance

Nuvei Embeds Payments Inside BlackLine Invoice Workflows

August 5, 2026, Canada / Global
  • Nuvei and BlackLine integrated payment acceptance directly into BlackLine’s invoice-presentment and payment workflows. The companies say the integration is already being used by enterprise customers.
  • Businesses can accept cards, bank transfers and local payment methods from invoices and automatically match incoming payments to outstanding receivables.
  • The workflow gives finance teams payment-status and cash-position visibility while providing customers with one interface to view, question and pay invoices.
  • The integration supports collections in 150 currencies from more than 190 markets.
  • The announcement does not identify participating customers or disclose customer counts, payment volume, collection-time improvements or cost savings.

Nuvei is moving payment acceptance and reconciliation into the enterprise receivables stack instead of leaving payment as a separate process. The operating test is whether live deployments reduce unmatched receivables and improve collection visibility across complex international operations.

Mintoak Acquires ICC Loyalty To Expand Bank Platform

August 4, 2026, India / United Arab Emirates / Middle East / Africa
  • Mintoak acquired Dubai-headquartered ICC Loyalty, adding consumer rewards and loyalty capabilities to its bank-distributed merchant platform.
  • The acquisition extends Mintoak’s platform beyond merchant payments and business tools into customer engagement, rewards and retention services.
  • Banks and financial institutions using Mintoak will be able to offer the combined capabilities through their own digital channels and customer relationships.
  • The transaction supports Mintoak’s expansion across the Middle East and Africa, where it distributes financial technology through banks and merchant acquirers.

The acquisition connects merchant services and consumer loyalty inside one bank-controlled platform. The next test is whether financial institutions use the combined infrastructure to strengthen SME relationships, increase customer activity and compete with standalone payment and commerce platforms.

Allied Universal Selects Chime Workplace For 320,000 Employees

August 3, 2026, United States
  • Allied Universal plans to offer Chime Workplace to approximately 320,000 North American employees at no cost to the company or its workforce.
  • The workplace package combines earned-wage access, savings paying up to 3.75% APY, investing and credit-building tools inside one employer-distributed service.
  • Allied Universal receives a workplace portal showing how participating employees use the benefit to save, build credit and manage their financial activity.
  • At First Student, 46% of actively enrolled employees began saving within two months. Chime reports that 76% of that group continued building savings.
  • The announcement doesn’t disclose an implementation date, enrollment target, First Student sample size or the amount employees saved.

Chime is using employers as a distribution channel for several consumer financial products rather than offering earned-wage access as a standalone benefit. The operating measures are how many eligible employees enroll, whether they use multiple products and whether the early savings behaviour continues across a workforce of this size.

Risk Compliance And Regtech

FCA Opens Its Handbook Through A Machine Readable API

August 6, 2026, United Kingdom
  • The FCA launched a free API that gives firms and technology providers direct access to structured, machine readable data from the FCA Handbook.
  • The API automatically draws from the current Handbook and can feed rules, guidance and updates into compliance monitoring, regulatory change management and other RegTech systems.
  • The FCA also identifies AI as a use case, giving tools access to trusted and current regulatory data that can support more accurate and transparent outputs.

The FCA is making regulation easier for software to consume, not just easier for people to read. That creates a direct data layer between the regulator and the systems firms use to track obligations and compliance changes. It also strengthens the case for AI powered regulatory intelligence, where reliable source data is one of the constraints on using AI safely in regulated workflows.

MVB Bank Shifts AML And KYC Work To Bretton AI

August 6, 2026, United States
  • MVB Bank selected Bretton AI under a multi year agreement to support AML transaction monitoring, KYC casework and enhanced due diligence for its fintech banking business.
  • Bretton combines its AI platform with a U.S. operations team, while a trained analyst reviews every AI assisted output before completed work reaches MVB.
  • MVB remains responsible for the compliance program, decisions and regulatory filings. Bretton charges for completed work rather than analyst hours, tying the service model to compliance output instead of staffing levels.

MVB is changing more than the software used by its compliance team. It is buying completed AML and KYC work through an AI assisted managed service while keeping responsibility for the underlying risk program. That puts the AI compliance burden into a new operating model where banks have to prove that automation, human review and outsourced execution still produce controlled and defensible decisions.

Cybersecurity Fraud And Financial Crime

Visa To Acquire BioCatch For US$2.4B

August 3, 2026, United States / Israel / Global
  • Visa agreed to acquire behavioural-biometrics and fraud-intelligence provider BioCatch for US$2.4 billion in cash.
  • BioCatch analyzes more than 3,000 behavioural and device indicators to distinguish legitimate customers from account takeovers, scams, money mules and application fraud before funds are transferred.
  • The company serves more than 350 financial institutions across 21 countries and protects approximately 760 million users operating 1.8 billion devices.
  • The transaction is expected to close by the end of Visa’s fiscal second quarter of 2027, subject to regulatory approvals and other customary closing conditions.

Visa is assembling transaction, behavioural and device intelligence inside its global security portfolio. The competitive test is whether BioCatch helps financial institutions identify compromised customers, manipulation and mule accounts before suspicious activity reaches the payment authorization stage.

Capital Markets Infrastructure And Funding

Schroders Wins Approval For Tokenized Money-Market Fund

August 6, 2026, Ireland / United Kingdom
  • Schroders received Central Bank of Ireland approval to launch SOAR, Schroders Onchain Active Returns, as a tokenized share class of an Ireland-domiciled U.S.-dollar money-market fund.
  • Kinexys by J.P. Morgan will connect blockchain transactions with the fund’s transfer agent, allowing approved investors to use smart contracts for redemptions and transfers between Schroders clients.
  • Schroders identifies collateral use and round-the-clock treasury and liquidity management as future applications. It has not disclosed initial assets, investor transactions or live collateral activity.

Tokenization is being added to the regulated ownership and transfer records of a conventional investment fund, rather than operating as a separate digital wrapper. The next test is whether institutions use the shares for collateral, treasury and liquidity workflows, and whether onchain transfers reduce processing time without weakening investor controls, recordkeeping or legal certainty.

Regulation And Policy

New Mexico Court Imposes Youth Safety Controls On Meta

August 6, 2026, United States
  • A New Mexico court ordered Meta to pay $567 million into a teen mental health fund, in addition to an earlier $375 million jury award. Meta says it will appeal.
  • The order requires changes affecting youth accounts, including usage limits, notification controls, protections against suspicious adult contact and stronger age verification.
  • The requirements also extend to AI chatbot interactions involving minors, deletion of data tied to underage users and twice yearly compliance reporting.

The ruling goes beyond financial penalties and reaches how a major digital platform is designed and governed. Fintechs and AI platforms should watch whether courts increasingly use product controls, age assurance, monitoring and reporting requirements to address consumer harm before legislators or regulators create wider rules.

South Africa Proposes Cross-Border Crypto Framework

Aug 1, 2026, South Africa
  • The South African Reserve Bank proposed an authorization and supervision framework for crypto-asset service providers facilitating transactions treated as cross-border capital flows.
  • The draft manual sets out application requirements, permitted transactions, operating conditions, recordkeeping and regulatory reporting obligations for authorized providers.
  • The framework follows five regulatory-sandbox use cases. Comments close September 30, 2026, and implementation remains dependent on final Capital Flow Management Regulations.

South Africa is bringing cross-border crypto transfers inside its capital-flow controls rather than treating them only as domestic virtual-asset activity. Providers will need to connect wallet and transaction infrastructure with customer records, regulatory reporting and exchange-control permissions. The final rules will determine which transfers can proceed routinely and which require additional authorization.

Conclusion

AI agents need clear authority. Payments need verified conditions before money is released. Tokenized funds still need trusted records. Cross border crypto still has to fit inside regulatory controls. The technology can act faster, but firms still need to know who can act, what they can approve and which record settles the outcome.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

AI Spending, Board Oversight And Investor Disclosure

Aug 6, 2026 | NCFA Insight | Artificial Intelligence And Data, Risk Compliance And Regtech, Capital Markets And Market Infrastructure

AI Image – Boardroom team reviewing AI spending, deployment and disclosure metrics in a bright daytime office setting

What Boards And Investors Need To See As AI Costs Rise

On July 29, 2026, a shareholder filed a Rackspace securities complaint alleging that the cloud company failed to explain how its AI plans were affecting capacity, spending and revenue. The complaint says Rackspace reaffirmed its 2026 guidance in May, then cut expected annual revenue by US$150 million in July. It also alleges that resources moved away from the more profitable Private Cloud business while margins absorbed restructuring and AI investment.

Those claims haven't been proven, and the court hasn't decided whether Rackspace or its directors did anything wrong. The filing still raises a useful question. Once an AI plan changes how a company spends, allocates computing capacity or describes future results, the board needs a clear view of the economics behind it. Investors may need that view too.

Lawsuits Follow The Gap Between AI Plans And Results

Rackspace isn't an isolated case. Recent complaints against Oracle, Microsoft, ZoomInfo and Upstart use different facts, but each asks whether the company story kept pace with what was happening inside the business.

An Oracle shareholder complaint alleges that the company understated the financing pressure created by its AI infrastructure build. Oracle later projected US$50 billion of capital spending for fiscal 2026, US$15 billion above its September 2025 projection, while reporting more than US$10 billion of negative free cash flow. The complaint focuses on whether investors received enough information about the scale, financing and cash impact.

A Microsoft securities complaint focuses on a different pressure point. The plaintiffs allege that Microsoft overstated Copilot adoption and didn't adequately explain that AI products were competing with Azure customers for computing capacity. Microsoft reported US$72.4 billion of capital spending in the first half of its fiscal year, almost as much as it spent in the prior full year. The unresolved issue is whether product demand, available capacity and investor disclosure remained aligned as the build accelerated.

ZoomInfo adds the risk of AI weakening the business that funds the transition. Its June 2026 complaint alleges that customers were using internal AI tools and moving away from seat-based subscriptions toward consumption pricing. The plaintiffs argue that management failed to explain how AI was changing demand for the existing model.

None of these cases proves misconduct. Shareholder complaints present company events through the plaintiff's theory, and a falling share price does not establish that earlier disclosure was misleading. The filings are interesting because they show where disputes are forming. Investors are asking what was spent, what reached customers, what revenue followed and what the rest of the business gave up.

Boards Need The Numbers Behind The AI Plan

A board cannot judge an AI strategy from product demos or spending totals alone. It needs to know what the money produced, such as more computing capacity, products in market, paying users, lower costs, higher revenue or better service.

Usage numbers can hide as much as they reveal. An enabled account may never use the product. An active user may not pay. Even paid adoption says little about retention, margins or the cost of serving that customer.

Savings claims need the same scrutiny. AI may reduce work in one team while increasing cloud costs, review time or customer complaints elsewhere. Early pilots do not need to make money immediately, but management should know what would justify further investment and what would cause it to pull back.

Boards also need to see what the AI plan is displacing. Computing capacity assigned to one product cannot serve another workload. Engineers moved to a new platform are no longer maintaining something else. A sales team promoting an AI add-on may spend less time selling the core product. Those choices may be reasonable, but the trade-offs should be clear before a profitable business starts carrying an open-ended investment.

Directors do not need to become model engineers but they do need enough operating information to test whether the plan is working. That includes supplier commitments, capacity constraints, effects on established products and a clear explanation when results fall short.

The SEC Investor Advisory Committee's AI disclosure recommendation follows the same logic. It calls on issuers to define what they mean by AI, explain how the board oversees it and disclose material effects on operations and customers. It also argues that companies can provide much of this information through existing disclosure requirements. The recommendation comes from an SEC advisory committee. It is not an SEC rule.

Financial Firms Carry More Than Spending Risk

For banks and fintechs, weak AI performance can reach customers before it appears in an earnings release. A model may change who receives credit, how a transaction is flagged or what recommendation reaches an investor. It can also create more manual review, complaints and losses when performance moves in the wrong direction.

The Upstart securities complaint brings that issue into automated lending. Plaintiffs allege that a model update reacted too strongly to negative economic signals, reducing loan approvals and conversions while affecting revenue and guidance. The filing shows why boards need model performance connected to approval rates, customer outcomes and financial forecasts.

That connection becomes harder when a firm depends on an outside cloud, model or data provider. A vendor change can alter cost or performance. An outage can interrupt a regulated process. Concentration can leave the company without a workable alternative. NCFA's analysis of feedback loops behind AI failures shows how model output, human responses and operating data can reinforce an error before the full effect is visible.

The Financial Stability Board's 2026 consultation proposes 12 practices covering governance, the AI lifecycle, cyber risk and outside providers. It is not a binding international standard. In Canada, OSFI's Guideline E-23 on model risk takes effect on May 1, 2027 for federally regulated financial institutions. It expects clear ownership, model inventories, monitoring and communication to senior management and boards.

AI is already moving into governed financial workflows. Board reporting has to keep pace. Spending and adoption belong beside model exceptions, overrides, complaints and losses. Otherwise, financial results may arrive after the operating warning signs.

Canada Already Has A Route To Better AI Disclosure

Canadian boards do not need an AI-specific statute before asking these questions. Under the Canada Business Corporations Act, directors of federal corporations must act honestly and in good faith and exercise the care, diligence and skill of a reasonably prudent person.

Canadian continuous-disclosure requirements separately require reporting issuers to publish financial statements, management's discussion and analysis, material-change reports and other prescribed information. The exact obligation depends on the issuer and the facts.

AI is already appearing in Canadian filings. The Ontario Securities Commission reviewed 225 companies in the S&P/TSX Composite and found that 72 issuers mentioned AI in 2024 annual management discussion and analysis. That is 32% of the sample. The OSC described the work as a proof of concept and did not assess whether any issuer's disclosure was adequate.

Simply mentioning AI more often will not make disclosure more useful. Investors need to know how much the company is spending, what is already in use, how customers are responding and what has changed since the last report. When AI affects capacity, margins, revenue or a regulated customer decision, a generic risk paragraph is not enough.

Canada may get more immediate value from clearer reporting on AI costs, live deployment, board oversight and business results. A separate AI disclosure rule is not the only option. Existing board duties and continuous-disclosure requirements already give companies a reason to make sure their public statements match what management is seeing inside the business.

Poor AI performance is not automatically a governance failure or securities violation. A board can approve a reasonable investment that does not work. Litigation can also overstate what directors could have known at the time. The difficult question is whether the company’s internal numbers had changed while its public story stayed the same.

Talking Point

When an AI plan changes spending, capacity or revenue, what should the board see before investors hear the same growth story again?

Frequently Asked Questions About AI Spending And Board Oversight

When does AI spending become a board issue?

AI spending becomes a board issue when it is material to strategy, capital commitments, margins, capacity, customer outcomes or regulated operations.

Do the current AI lawsuits prove companies misled investors?

No. The complaints contain allegations that have not been proven, and courts have not decided the merits. They identify the spending, adoption, capacity and business-model questions investors are asking.

What AI information should a board receive?

The board should see enough financial, operating, customer and model-performance information to challenge the investment and recognize when results depart from the approved plan.

Does Canada have a special AI disclosure rule for public companies?

Canada does not have a single AI-specific securities disclosure rule for public issuers. Existing corporate duties and securities requirements can still apply when AI costs, risks or operating effects become material.

Why is AI oversight harder for banks and fintechs?

An AI model can affect credit, fraud controls, suitability, customer service and complaints before its full financial effect appears in company results.

This article is provided for informational purposes and does not constitute investment, financial or legal advice. Lawsuits discussed contain allegations that have not been proven in court. Recommendations, consultations and regulatory requirements may change.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

NCFA Weekly Fintech Intelligence Jul 25-31, 2026

July 25, 2026 | NCFA Fintech Whisperer | Payments And Money Movement, Embedded Finance, Capital Markets Infrastructure And Funding, Digital Assets Blockchain And Tokenization, Wealthtech Investing And Trading, Cross Border Payments And FX, Cybersecurity Fraud And Financial Crime, Lending Consumer Credit And BNPL, Artificial Intelligence And Data, Open Banking Open Finance And Data Sharing, Competition And Market Structure, Financial Inclusion, Insurance And Insurtech, Banking And Credit, Sustainable Finance And ESG

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-24, 2026).

Weekly Fintech Market Intelligence Jul 25 - 31, 2026

Payments And Money Movement

Visa Plans 2,600 Job Cuts Across Technology And Product

July 28, 2026, United States / Global
  • Visa plans to eliminate approximately 2,600 positions, representing about 7% of its global workforce.
  • A company spokesperson confirmed that the reductions will primarily affect technology and product teams, although other functions will also be affected.
  • Chief Executive Ryan McInerney told employees that Visa is seeking greater efficiency so it can reinvest in its highest-potential opportunities.
  • Artificial intelligence is affecting how Visa completes work and develops products, but reporting indicates that it was not the sole reason for the restructuring.

Visa is reducing staff in the teams building and maintaining payment products while stablecoins, account-to-account payments and agentic commerce increase competitive pressure. The next evidence should show which capabilities lose capacity, where investment increases and whether product delivery improves following the restructuring.

Lianlian Extends Live AI Procurement Payments To UnionPay

July 27, 2026, China / Global
  • Lianlian DigiTech and UnionPay International signed an agreement connecting Lianlian’s AI-agent platform with UnionPay’s global payment network.
  • The initial deployment focuses on global procurement, with the agent supporting supplier matching, product selection and payment execution while the user retains final approval.
  • The partnership also covers AI-token replenishment, overseas merchant acceptance and joint development of AI technology for financial services.
  • Three days earlier, Visa and Lianlian completed a live B2B agentic transaction in which LoopXPay sourced a product, compared suppliers, placed the order and executed payment within predefined spending and approval controls.

Lianlian is progressing from one controlled transaction to connecting the same procurement model with a second global payment network. That makes this operating evidence rather than another agentic-commerce concept. The human approval, verified-agent and spending-control design also gives practical form to the consent and liability questions examined in AI Payments Challenge Consent Rules And Liability.

UAE Approvals Expand Nonbank Stored Value Competition

July 27 and 28, 2026, United Arab Emirates
  • Checkout.com received in-principle approval from the Central Bank of the UAE for a Stored Value Facilities licence.
  • Once fully licensed, Checkout.com plans to connect card issuing with its existing UAE acquiring operation so merchants can fund cards from acquired balances. The company reports that its MENA processing volume increased 62% between 2024 and 2025.
  • Pemo received separate in-principle approval on July 28, supporting planned digital wallet and fund holding capabilities for more than 6,000 UAE business customers.
  • Neither company can operate the proposed stored value capabilities until it satisfies the remaining licensing conditions. Pemo states that nothing changes for customers during the interim period.

Together, the approvals create two routes into regulated stored value: a global acquirer connecting merchant acceptance with issuing, and a local spend platform seeking direct control over customer funds. The competitive test begins after final licensing, operating launches and evidence that merchants or small businesses use the new account, card funding and wallet capabilities.

Payments Canada Sets End Date For Paper PAD Clearing

July 27, 2026, Canada
  • Payments Canada implemented administrative and operational amendments to its Automated Clearing Settlement System rules on July 27.
  • Rules A1 and H1 establish that paper pre-authorized debit items will become ineligible for exchange, clearing and settlement through the ACSS on December 1, 2028.
  • Rules F1 and F4 now require notification when a Notice of Change process is stopped and reissued, while Rule H6 clarifies settlement timing.
  • Other amendments update the definition of a member and address new membership structures, clearing arrangements and mergers.

Canada is setting a retirement date for a paper clearing method while updating the operating rules around membership and account changes. Banks, payment service providers and businesses that still originate paper PAD items now have a conversion deadline covering processing, exceptions and reconciliation. The change concerns the existing batch system and complements, rather than replaces, the modernization tracked in NCFA's Real-Time Rail guide.

Open Banking Open Finance And Data Sharing

UK Open Banking Surpasses One Billion Payments

July 28, 2026, United Kingdom
  • The UK open banking ecosystem has recorded more than one billion payments and 100 billion API calls since its launch more than eight years ago.
  • June produced 2.81 billion API calls, up 4.4% from May and the highest monthly volume reported to date.
  • More than 40 million open banking payments were made during June.
  • Variable recurring payments increased 6.7% from May, while single domestic payments declined 1.2%.

The UK provides a working volume benchmark for open banking commercialization in Canada. The next measures are payment share, merchant adoption, fraud outcomes, service reliability and whether variable recurring payments can compete with card-on-file and direct debit services.

Sustainable Finance And ESG

Singapore Opens Climate-First Disclosure Standards Consultation

July 27, 2026, Singapore
  • Singapore’s Accounting and Corporate Regulatory Authority opened consultation on draft Singapore Sustainability Disclosure Standards, with comments accepted until October 25.
  • The standards are based on the International Sustainability Standards Board framework, but only climate-related SFRS S2 would be mandatory. Broader sustainability reporting under SFRS S1 would remain voluntary.
  • The draft includes Singapore-specific transition reliefs and requires companies to make an explicit statement of compliance with SFRS S2.
  • ACRA also launched a Sustainability Assurance Body of Knowledge, while related training can receive subsidies covering up to 90% of course fees.

Singapore is pairing disclosure requirements with assurance skills, training support and phased implementation. The practical test is whether this approach produces comparable climate information without allowing voluntary reporting outside SFRS S2 to become a lasting information gap.

ECB Extends Climate Factors To Corporate Credit Claims

July 24, 2026, European Union / Euro Area
  • The European Central Bank will extend climate-related valuation adjustments to certain eligible credit claims owed by non-financial corporations and pledged in Eurosystem refinancing operations.
  • Each adjustment will reflect sector stress, the corporate debtor’s exposure to transition-related uncertainty and the credit claim’s remaining maturity.
  • The maximum additional reduction in collateral value will be 5% across eligible corporate bonds and credit claims. Individual climate-factor values will not be published.
  • Implementation is planned for no earlier than the end of 2027, with climate-factor values updated annually.

The ECB is turning climate-transition exposure into a direct input when valuing collateral used for central-bank liquidity. The next test is whether the 5% ceiling materially affects collateral selection, corporate lending data and the financing conditions faced by transition-exposed businesses.

Artificial Intelligence And Data

Chime Cuts 10% Of Workforce As AI Reshapes Operations

July 31, 2026, United States
  • A Chime spokesperson confirmed that the digital banking company is cutting 10% of its workforce, affecting nearly 150 employees.
  • Chief Executive Chris Britt told employees that AI is changing what teams can accomplish but requires different skills, fewer organizational layers and new capabilities.
  • Britt said the reorganization is intended to create a flatter structure while Chime accelerates growth and demonstrates operating discipline as a public company.
  • Chime previously reported that AI-assisted development increased from approximately 29% to 84% of code shipped in four months while product and engineering headcount remained flat.

Chime connects a measurable increase in AI-assisted development with a material change in workforce structure. Following Block’s larger AI-led operating reset, the development strengthens the evidence that fintechs are applying AI to organizational design as well as customer products. The next test is whether smaller teams produce faster releases, stronger growth and better margins without weakening product quality, compliance or customer support.

RBC Extends Vector AI Partnership Through 2032

July 30, 2026, Canada
  • RBC renewed its platinum sponsorship of the Vector Institute for five additional years through 2032, extending a relationship that began when Vector launched in 2017.
  • The collaboration covers agentic AI, retrieval augmented generation, computer vision, federated learning and responsible enterprise adoption.
  • RBC reports that the relationship has supported 30 applied AI projects and helped the bank recruit 200 specialists affiliated with Vector.
  • RBC also established a dedicated AI Group earlier in 2026 that reports to the chief executive and is responsible for converting research and use cases into operating capabilities.

The renewal links research access, specialist recruitment and applied development to RBC’s enterprise AI program. The measures that count through 2032 are production deployments, control performance, reusable intellectual property and retention of Canadian AI talent. NCFA’s governed financial workflows analysis identifies the permissions, approved tools, human review and audit evidence required as agentic AI reaches regulated banking work.

HSBC Plans Global AI Centre In Singapore

July 27, 2026, Singapore / Global
  • HSBC plans to launch a Global AI Centre of Excellence in Singapore during the second half of 2026.
  • The bank plans to hire more than 100 specialists across natural language processing, data science, AI governance and human-centred design.
  • Initial work will cover customer wealth conversations, agentic treasury solutions and AI-enabled digital payments.
  • HSBC intends to deploy capabilities developed by the centre across its global network while retaining human judgment, decision-making and accountability.

HSBC is placing treasury, payments and wealth workflows inside one global AI capability plan. The proof points will arrive after launch through production deployments, measurable customer and operating outcomes, control performance and evidence that systems can meet different data, governance and conduct requirements across jurisdictions.

BlackLine Releases Multi-Agent Reconciliation System

July 27, 2026, United States / Global
  • BlackLine made Verity Prepare generally available for financial reconciliation and accounting-close workflows.
  • The multi-agent system analyzes supporting documents, matches transactions, identifies reconciling items and assembles audit-ready reconciliations.
  • BlackLine says the system provides transparent reasoning, auditability and human oversight.
  • The product targets manual reconciliation preparation while keeping accountants responsible for review and final control.

Verity Prepare is a production example of governed financial workflows entering accounting operations. The useful measures are close time, exception accuracy, audit adjustments, human overrides and whether finance teams can trace every source and decision used to prepare a reconciliation.

Embedded Finance

X Money Launches Accounts And Payments Inside X

July 27, 2026, United States
  • X Money began rolling out to X Premium and Premium+ subscribers in the United States following earlier limited testing.
  • Cross River provides the regulated banking infrastructure and access to payment rails behind the service.
  • The offering combines interest-bearing, FDIC insured accounts, peer-to-peer payments and a Visa debit card inside the X platform.
  • The initial service is limited to the United States. The Cross River announcement does not include cryptocurrency or stablecoin capabilities.

The launch places a deposit account, card and peer-to-peer payment relationship inside a social platform that already owns communication and audience distribution. Cross River provides the regulated banking layer while X controls the customer interface. The commercial test is whether subscribers use X for recurring deposits and payments, and whether the partners can manage fraud, support and compliance at social platform scale.

Capital Markets Infrastructure And Funding

ICE Agrees To Acquire MarketAxess For US$5.7B

July 30, 2026, United States / Global
  • Intercontinental Exchange agreed to acquire electronic bond trading platform MarketAxess for approximately US$5.7 billion.
  • ICE will pay US$167 per share in cash, representing a 33% premium to MarketAxess’s previous closing price.
  • The combined business is intended to connect fixed income price analytics, electronic execution, market data and post-trade compliance tools.
  • The transaction is expected to close during the first half of 2027, subject to regulatory approval.

The transaction would place a larger share of fixed income data, execution and compliance workflow inside ICE. Market participants and regulators should examine how the combination affects platform access, data pricing, execution choice and competition across electronic bond markets.

DTCC Reports Treasury Clearing Readiness Ahead Of Deadline

July 27, 2026, United States / Global Markets
  • More than US$1.2 trillion in daily Treasury cash activity is already centrally cleared through DTCC’s Fixed Income Clearing Corporation.
  • Survey respondents estimated that another US$300 billion to US$400 billion in average daily Treasury cash activity remains outside central clearing.
  • Seventy-nine per cent of responding netting members reported having the necessary FICC account structures, while nearly every respondent requiring an account had established one or entered onboarding.
  • Approximately one-third of responding dealers expect to provide Treasury cash clearing to clients.
  • The cash clearing deadline is December 31, 2026, followed by the Treasury repo clearing deadline on June 30, 2027.

The mandate is driving a market infrastructure conversion measured in trillions of dollars per day. The implementation test now concerns client capacity, onboarding completion, collateral and margin demands, clearing costs and whether remaining participants can connect without concentrating access among a small group of dealers.

ESMA Authorizes EuroCTP For EU Equity Tape

July 27, 2026, European Union
  • ESMA authorized EuroCTP to operate the European Union consolidated tape for shares and exchange traded funds.
  • The service will combine pre-trade and post-trade information from multiple contributors into a single market data stream.
  • Retail investors, academics, civil society organizations and regulators will receive the data without charge. Other users will pay a reasonable fee.
  • EuroCTP has until September 30 to complete the operational and technical arrangements needed to begin service.
  • The provider will operate the tape for five years from its launch date under direct ESMA supervision.

The authorization converts the European consolidated tape from regulatory design into supervised market infrastructure. A common view of prices and trading activity could improve price discovery while reducing the information advantage created by fragmented venue data. Canadian exchanges, dealers and regulators should compare EuroCTP on data cost, latency, venue coverage, retail access and commercial use once operations begin.

Robinhood Schedules Public Roadshow For Venture Fund II

July 27, 2026, United States
  • Robinhood scheduled an August 3 public roadshow for Robinhood Ventures Fund II following its June 30 Form N-2 filing with the Securities and Exchange Commission.
  • RVII is structured as a business development company that plans to invest in early and growth stage private companies.
  • The strategy focuses on companies that participated in Y Combinator or were founded by people who participated in the accelerator.
  • Robinhood plans to make the roadshow available through its app and YouTube instead of limiting it to institutional investors.
  • The proposed NYSE listing remains subject to SEC review. Shares cannot be sold until the registration statement becomes effective.

RVII would package private company exposure inside an exchange listed fund, extending public access from IPO allocation toward venture portfolios. The structure provides a US comparator for retail IPO access in Canada while placing private company valuation, liquidity, fees and portfolio concentration inside a public investment product.

Ontario Teachers Commits Up To €200 Million To M&G CLO Platform

July 27, 2026, Canada / United Kingdom / Europe
  • Ontario Teachers’ Pension Plan and M&G Investments formed a joint venture to expand M&G’s European collateralized loan obligation platform.
  • Ontario Teachers will provide up to €200 million for equity investments in future M&G Margay CLO issuances and participate in the long-term economics of the business.
  • The Margay platform manages €1.6 billion within M&G’s broader €10 billion loan platform and €27 billion structured and private credit business.
  • Capital will be committed to individual transactions under an agreed investment framework.

Canadian pension capital is providing repeat issuance capacity instead of purchasing one completed security. The structure gives Ontario Teachers direct exposure to CLO equity and platform economics while helping M&G expand its European corporate credit securitization business. It also belongs beside the Bank of Canada’s warning about private credit transparency and non bank leverage. Credit quality, leverage, issuance volumes and performance through weaker credit cycles will determine the value and risk of the model.

Rock Tech Links Ontario Lithium Offtake To Conditional US$80 Million Prepayment

July 27, 2026, Canada / Switzerland
  • Rock Tech Lithium signed a binding seven-year offtake agreement with Transamine covering the planned production from its Georgia Lake project in Ontario.
  • Deliveries are expected to begin in 2028 and rise from 50,000 dry tonnes in the first year to 100,000 dry tonnes annually thereafter, subject to project development and contractual adjustments.
  • The agreement preserves an option to convert the supply arrangement from spodumene concentrate to battery-grade lithium hydroxide or carbonate for Rock Tech’s planned Red Rock converter.
  • It also establishes a framework for a development prepayment of up to US$80 million, but final terms, funding and availability remain subject to financing, permits, due diligence and completion of the definitive feasibility study.

The structure connects a long-term commodity buyer, project financing and domestic processing optionality inside one capital formation strategy. It provides a Canadian example of how offtake commitments can help finance critical mineral infrastructure without giving up the option to capture more value through domestic conversion. The financing should be treated as conditional until definitive terms are executed and funds become available.

Digital Assets Blockchain And Tokenization

Coinbase Posts Third Consecutive Quarterly Loss

July 30, 2026, United States / Global
  • Coinbase reported a US$359.5 million net loss for the second quarter, its third consecutive quarterly loss.
  • Total revenue declined 19% from the prior year to approximately US$1.22 billion, while transaction revenue fell 21%.
  • Subscription and services revenue declined 12.2% to approximately US$555.1 million.
  • Coinbase nevertheless reported a record 10.3% share of crypto trading volume while continuing to expand into derivatives, stablecoins, equities and prediction markets.

The results increase the commercial pressure behind Coinbase’s Everything Exchange strategy. Its Deribit acquisition and wider product expansion now need to produce enough repeat revenue to reduce the company’s dependence on spot crypto trading cycles.

3iQ Wins Gelephu Bitcoin Reserve Mandate

July 30, 2026, Canada / Bhutan
  • Gelephu Mindfulness City appointed Toronto-based 3iQ to manage a dedicated mandate backed by a portion of its Bitcoin reserves.
  • Gelephu previously allocated up to 10,000 BTC from Bhutan’s national holdings to support development of the city. The size of the 3iQ mandate was not disclosed.
  • 3iQ and Gelephu will collaborate on institutional digital asset management infrastructure, local talent development and knowledge transfer.
  • 3iQ also plans to establish a long-term presence in Gelephu, which is being developed as a special administrative region and international financial centre.

The mandate places a Canadian digital asset manager inside a sovereign-linked reserve program and a planned international financial centre. The next measures are mandate size, custody, investment limits, governance, public reporting and whether the partnership converts Bitcoin reserves into durable financial capacity. It also extends the institutional strategy NCFA examined when Coincheck agreed to acquire 3iQ.

OSC Finds Canadian Crypto Ownership Reaches 25%

July 28, 2026, Canada
  • An Ontario Securities Commission survey of 2,360 Canadians found that 59% are aware of crypto assets and 25% own them.
  • Half of crypto owners checked whether a trading platform was registered before using it, compared with 38% in 2023.
  • Many respondents still misunderstood how crypto assets are regulated, whether they carry insurance protection and which transactions they support.
  • Among respondents aware of crypto assets, 38% said they were highly likely to purchase them in the future, an increase of 18 percentage points from 2023.
  • Awareness and ownership of stablecoins and tokenized real world assets remain limited, although respondents familiar with them reported strong interest.

Canada now has a much larger crypto-owning population, but product knowledge and investor protection understanding have not kept pace. Compared with the OSC 2023 survey, platform registration checks are improving while ownership has increased sharply. Regulators and platforms should track whether greater participation produces stronger product knowledge, greater use of registered venues and better complaint outcomes.

Circle Acquires IBM Blockchain Patent Portfolio

July 27, 2026, United States / Global
  • Circle acquired fundamental assets from the IBM blockchain patent portfolio, covering more than 680 patent families and nearly 1,000 issued patents worldwide.
  • The intellectual property covers blockchain technology, banking, financial services, insurance, enterprise infrastructure, supply chain verification and secure cloud operations.
  • Circle says the acquisition makes it the leading holder of blockchain patents in the United States.
  • The portfolio will support USDC, Circle Payments Network, Arc and additional onchain and agentic financial products.
  • Circle and IBM also plan to examine additional commercial opportunities.

The acquisition gives Circle strategic control over intellectual property that reaches beyond stablecoins into banking, cloud infrastructure and enterprise financial systems. Canadian institutions evaluating USDC and Circle infrastructure should examine how the larger patent position affects licensing, interoperability, supplier dependence and competitive access. NCFA previously tracked Circle compliance with Canadian VRCA requirements.

Payward Agrees To Acquire Magic Labs Embedded Wallet Business

July 27, 2026, United States / Global
  • Magic Labs agreed to sell its embedded wallet business to Kraken parent Payward through an asset sale.
  • Magic Labs and Payward will remain independent companies, while wallet customers will transfer to Payward Services following completion.
  • Magic Labs reports that its infrastructure has created more than 60 million wallets and supports more than 200,000 developers.
  • The remaining company will operate as Newton Labs and focus on Newton Protocol, which applies compliance, identity, security and risk policies before transactions settle onchain.

Payward is bringing scaled embedded wallet infrastructure into the same operating stack as trading, custody and other financial services. The acquisition follows its xStocks expansion into global equity markets and adds another product layer to its shared infrastructure strategy. For Canada, Payward also operates Kraken through a national restricted dealer registration. Newton Labs is concentrating separately on transaction authorization, compliance and risk controls before settlement.

HashKey Combines Regional Crypto Accounts Inside One App

July 27, 2026, Hong Kong / Singapore / United Arab Emirates / Bermuda
  • HashKey merged its previously separate HashKey Exchange and HashKey Global applications into one customer portal.
  • The app connects its operations in Hong Kong, Singapore, Dubai and Bermuda while keeping the underlying services subject to their local licences and regulatory restrictions.
  • Users can manage eligible regional accounts through one interface based on their identity, business verification and jurisdiction.
  • Restricted products and regional services remain unavailable to users who do not meet the applicable local requirements.

HashKey is testing whether a digital asset group can offer one customer interface across several regulatory systems without combining the underlying legal entities, licences or product permissions. The same country by country constraint appears in RedotPay’s regulated market expansion. Account portability, data boundaries, regulatory accountability and consistency between regional services will determine whether HashKey’s architecture can scale.

BitMart Starts Orderly Wind Down Of Trading Platform

July 26, 2026, Global
  • BitMart began suspending new registrations, cryptocurrency and fiat deposits, new positions and new trading orders on July 26.
  • All spot, futures and other trading services are scheduled to stop on August 26. Remaining futures positions may be settled using the applicable prices and platform rules.
  • Earn, staking, lending, launchpad and related products will be discontinued in separate phases.
  • BitMart plans to cease trading platform operations on January 31, 2027. Customers will retain account, record and withdrawal access for a specified period afterward.
  • The company cited its operating conditions, market environment and future strategy without disclosing a specific financial, regulatory or solvency event.

BitMart’s notice followed BitMEX by three days and AscendEX within the same month. The companies disclosed different circumstances, so the timing alone does not establish a shared cause. The sequence still warrants review of exchange liquidity, customer migration, operating costs, regulatory access and competition from onchain venues. Users and counterparties should track withdrawal processing, asset segregation, proof of reserves, financial disclosure and the controls used to settle positions during the wind down.

Lending Consumer Credit And BNPL

Harvey Norman And Latitude Fined A$55M Over Credit Ads

July 28, 2026, Australia
  • The Federal Court imposed a A$35 million penalty against Harvey Norman and A$20 million against Latitude Finance Australia.
  • ASIC describes the A$55 million combined amount as its highest penalty for misleading conduct involving financial products or services.
  • The advertisements promoted a 60 month interest free payment method while obscuring that customers needed an eligible credit card and could incur establishment and monthly service fees.
  • The campaign ran thousands of times between January 2020 and August 2021 and reached millions of Australians. Both companies must display corrective advertising on their websites for 90 days.

The penalties establish a high cost benchmark for advertising interest free finance without clearly presenting the continuing credit account and fees behind it. Retailers and lenders share exposure when they jointly design and distribute the offer. The decision also provides an enforcement comparator for the UK BNPL regulatory framework, where product presentation and consumer understanding remain central.

Insurance And Insurtech

Cowbell Launches AI Native Insurance Decision System

July 28, 2026, United States / Global
  • Cowbell launched OMNI, an AI decision system supporting underwriting, claims, cybersecurity services, customer engagement and product development.
  • Specialized agents analyze submissions, assess risk and prepare coverage and pricing recommendations, while human underwriters retain final decision authority.
  • Cowbell’s risk platform draws on data covering more than 55 million entities globally.
  • The company reports that OMNI has supported 53% growth in new business since deployment.
  • Cowbell also reports reducing new-product deployment cycles from approximately eight months to as little as six weeks.

Cowbell is attaching AI to measurable underwriting and product-development outcomes while keeping final authority with underwriters. Independent performance evidence on pricing accuracy, loss ratios, claims, regulatory outcomes and business retained after renewal will provide a stronger test of the operating model.

Cover Genius Acquires Friendsurance

July 28, 2026, Germany / Europe / Global
  • Cover Genius acquired Friendsurance, a Berlin-based digital bancassurance platform serving banks and insurers.
  • The acquisition became effective immediately, and financial terms were not disclosed.
  • Friendsurance brings European banking relationships, bank technology and an architecture designed around PSD2 open banking and regional GDPR requirements.
  • The Friendsurance team will join Cover Genius as the combined business expands embedded insurance distribution across Germany, Austria and Switzerland.
  • Cover Genius reports operations in more than 60 countries, 73 million protected customers and 240 million policies representing US$3.2 billion in gross written sales.

The acquisition combines global embedded-insurance distribution with local banking integrations and regulatory infrastructure. The commercial measures are new bank deployments, policy conversion, non-interest revenue for participating institutions and whether the combined platform can expand beyond the German-speaking market without adding heavy implementation work.

Wealthtech Investing And Trading

Robinhood Hits Record Revenue As Crypto Income Falls

July 29, 2026, United States / Global
  • Robinhood reported record quarterly revenue of approximately US$1.31 billion, an increase of 32% from the prior year.
  • Cryptocurrency transaction revenue declined 38%, reflecting weaker crypto trading conditions.
  • Robinhood Gold subscriptions increased 39% to 4.8 million.
  • Activity across equities, options and event contracts helped the company produce record revenue despite the decline in crypto income.

Robinhood’s wider product mix is absorbing weaker crypto revenue more effectively than a platform that depends heavily on digital asset trading. The results extend the household finance strategy examined in Robinhood’s product expansion. The next measures are retention, revenue concentration and whether event contracts and subscriptions remain durable through weaker trading cycles.

Webull Opens Managed Individual Bond Portfolios To Smaller Accounts

July 27, 2026, United States
  • Webull Advisors launched what it describes as the first robo-advised individual bond portfolio service for retail investors.
  • Clients directly own the underlying bonds, while Webull Advisors makes portfolio construction, monitoring and investment decisions using Moment’s fixed income infrastructure.
  • The Enhanced Cash strategy invests in short-term US Treasuries with a US$500 minimum and a 15 basis point annual fee.
  • The High Income strategy invests across investment-grade and high-yield bonds with a US$2,000 minimum and a 30 basis point annual fee.

Webull is making individually managed bond portfolios economical at account sizes previously served mainly through funds and ETFs. Canadian platforms are pursuing a related ownership model through products such as Wealthsimple’s direct indexing and fractional gold services. Brokers and digital advisers still need to address suitability, liquidity, credit risk, tax reporting and whether customers understand what they directly own.

Orion Launches Account Opening With Goldman Sachs Custody

July 27, 2026, United States
  • Orion launched Dynamic New Account Opening inside its Advisor Portal, with Goldman Sachs Custody Solutions as the first live custodian.
  • The workflow adapts to account type, household structure and custodian while centralizing data collection and reducing duplicate entry.
  • Advisors can use DocuSign or a fully digital process, with account information transmitted through direct custodian APIs.
  • The service is available to Orion Advisor Technology clients using Goldman Sachs Custody Solutions. Orion plans support for Portfolio Solutions clients later this summer and additional custodians later in 2026.
  • Orion reports US$6.6 trillion in assets under administration and more than 8.6 million technology accounts as of June 30.

The integration embeds custody onboarding inside the advisor’s existing platform at significant operating scale. Account-opening time, rejection rates, correction work, client completion and the number of participating custodians will determine whether the architecture materially improves advisor and client workflows.

Cross Border Payments And FX

KB Kookmin Plans Kinexys Payments For Importers And Exporters

July 26, 2026, South Korea / Asia / Global
  • KB Kookmin Bank plans to launch a corporate import and export payment service using J.P. Morgan’s Kinexys blockchain payment network in August.
  • It will be the first South Korean financial institution to apply Kinexys to corporate import and export payments.
  • The service will initially support US dollar payments across ten countries through KB Kookmin’s domestic branches and Singapore branch.
  • Kinexys connects with the Swift network and supports near real-time, 24-hour international payments, foreign exchange and programmable transfers.

The planned service takes an institutional blockchain payment network into the operating workflow of importers and exporters. RBC and TD are already participating in Swift’s blockchain ledger prototype, giving Canada a direct institutional comparator. Banks should compare settlement times, foreign exchange costs, liquidity requirements and exception handling with conventional correspondent banking once the KB Kookmin service launches.

Cybersecurity Fraud And Financial Crime

EU Regulators Set Cyber Controls For Frontier AI Risk

July 31, 2026, European Union
  • The EBA, EIOPA and ESMA told financial firms to adapt ICT risk controls as frontier AI makes it faster to discover and exploit vulnerabilities, target shared infrastructure and use weaknesses that affect multiple institutions.
  • The regulators say periodic security checks may no longer be enough. Their recommendations include continuous vulnerability scanning, more frequent testing, behavioural monitoring, stronger access controls and tighter cybersecurity standards across technology suppliers.
  • The statement connects these measures to existing DORA and AI Act obligations and says frontier AI risk is also being incorporated into oversight of critical ICT service providers.

The regulatory focus is advancing from recognizing frontier AI as a systemic cyber threat to changing how financial firms defend against it. The gap between finding a vulnerability and exploiting it is getting shorter, which puts more weight on continuous controls, faster response and technology supplier oversight. NCFA’s AI and financial crime intelligence tracks the same convergence between AI capability, cyber resilience and financial infrastructure.

Bank Of America Agrees To Acquire MDSec

July 30, 2026, United States / United Kingdom
  • Bank of America agreed to acquire UK information security consultancy MDSec, which employs approximately 65 cybersecurity professionals.
  • The transaction is expected to close during the fourth quarter of 2026, subject to regulatory approval. Financial terms were not disclosed.
  • MDSec provides specialist security consulting from Macclesfield, England. Bank of America already operates a cyber threat operations centre nearby in Chester.
  • The acquisition would bring specialist cybersecurity testing and advisory capabilities directly inside the bank.

Bank of America is choosing direct ownership of specialist cyber expertise as financial institutions face faster vulnerability discovery, AI-enabled attacks and growing operational resilience requirements. The operating test is whether the acquired team improves vulnerability testing, threat detection and response across the bank without losing the external perspective that made the consultancy valuable.

IBM Finds AI Used In One Quarter Of Data Breaches

July 29, 2026, Global
  • The IBM Cost of a Data Breach Report found that one in four malicious breaches studied involved attacker use of artificial intelligence, an increase of 56% from the prior year.
  • AI-enabled breaches cost an average of US$6 million, compared with the overall global average of US$4.99 million.
  • Organizations using security AI and automation extensively saved an average of US$1.93 million compared with organizations using none.
  • Critical infrastructure accounted for 62% of AI-enabled attacks, with financial services and energy recording the highest concentrations.
  • More than half of surveyed organizations use agents for threat detection and containment, while only 18% use them for vulnerability management.

Attack automation is reducing the cost and time required to exploit weaknesses while delayed remediation continues to produce multimillion-dollar losses. Financial institutions should test controls for agent identities, APIs, cloud configuration, vulnerability remediation and cryptographic inventories. NCFA has already explained why fintech cannot wait for quantum computing, and the IBM findings strengthen the financial case for beginning that work now.

Triple-A Says Client Funds Stayed Separate During Treasury Wallet Breach

July 27, 2026, Singapore / Global
  • Triple-A identified unauthorized access on July 25 to wallets containing the stablecoin payment provider’s own digital assets.
  • The company says client funds were unaffected because it does not custody client digital assets and holds client money separately in trust accounts with safeguarding institutions.
  • Triple-A placed certain services into maintenance mode for approximately three hours while securing the infrastructure and completing security checks.
  • The company says the financial impact is being absorbed by its treasury reserves and that cybersecurity specialists, blockchain forensic investigators and Singapore Police are investigating.

The incident provides a direct operating test of customer asset segregation during a digital asset security breach. The control appears to have limited the exposure to company treasury assets, although the cause, total loss, wallet control failures and recovery prospects remain undisclosed. Canadian safeguarding rules for payment service providers similarly require customer funds to be protected through dedicated accounts, trust arrangements, insurance or guarantees. Stablecoin payment providers still need strong treasury wallet governance even when customer funds are separately safeguarded.

Bank Of Baroda Confirms Employee Email Compromise

July 27, 2026, India
  • Bank of Baroda confirmed that an employee email account was compromised, resulting in unauthorized access to certain data.
  • The bank said it promptly identified the incident, implemented containment measures and began a forensic investigation with relevant authorities.
  • Bank of Baroda said its core banking systems were not accessed and remain secure.
  • Reuters reported that data had appeared on the dark web, but the affected customer count and full scope of the exposure remain unconfirmed.

The incident separates core-system resilience from identity and data exposure. A bank can keep its transaction engine operating while one compromised mailbox still creates privacy, fraud and customer risks. The forensic findings need to establish what data was accessible, whether credentials were exposed and how far the attacker travelled beyond the email account.

HKMA Finds Banks At An Early Stage Of Quantum Readiness

July 27, 2026, Hong Kong
  • The Hong Kong Monetary Authority released its first Quantum Preparedness Index and a whitepaper assessing the banking sector’s readiness for post-quantum cryptography.
  • Hong Kong’s banking sector scored 2.3 out of 10 across awareness, planning, pilots and practical preparedness.
  • Sixty-eight per cent of surveyed banks had developed awareness or progressed into planning or pilots, while 32% had not started their transition. Approximately half had no formal post-quantum plan.
  • About half of respondents had discussed quantum computing at board level, while approximately one-third had begun exploring or piloting quantum-related initiatives.
  • HKMA aims to raise the sector’s index score to 10 by 2030 through a post-quantum toolkit, industry workshops, transition planning and stronger cryptographic agility.

The index turns quantum risk into a measurable banking-sector readiness program. It adds a concrete adoption baseline to why fintech can’t wait for quantum computing: awareness is spreading, but formal planning and practical migration remain well behind the regulator’s 2030 objective.

Competition And Market Structure

Zedcrest Completes Acquisition Of Leatherback

July 27, 2026, Nigeria / United Kingdom / Global
  • Zedcrest Group completed its acquisition of Leatherback, a UK-founded cross-border payments and financial technology company.
  • The transaction follows Zedcrest’s original investment in Leatherback in 2021.
  • Leatherback supports sending, receiving, converting and managing money across multiple currencies through one platform.
  • Leatherback will retain its existing leadership and London headquarters. It has opened a West African hub in Nigeria and plans additional hubs in Canada and Kenya.

The acquisition combines Leatherback’s cross-border payment technology with Zedcrest’s capital, governance and financial-services operations. Canada becomes directly relevant if the planned North American hub opens. Licensing, banking partners, supported corridors, staffing and Canadian customer activity will determine whether that plan develops into a meaningful market entry.

Financial Inclusion

Mastercard, Heifer And KCB Digitize Payments For 30,000 Farmers

July 28, 2026, Kenya
  • Heifer International, Mastercard, KCB Foundation and KCB Bank Kenya launched a nine-month pilot for 30,000 smallholder dairy farmers.
  • The Farmer Visibility Project will digitize milk deliveries, payments, savings and purchases.
  • Mastercard’s Farm Pass will create farmer profiles and transaction records that can support access to markets and financial services.
  • KCB will provide banking access through accounts, cards, agents and participating merchants.

The pilot treats transaction history as financial infrastructure for farmers who may have limited conventional credit records. The operating test is whether digital records lead to active accounts, lower payment friction, useful savings behaviour and responsible access to financing rather than simply creating more profiles.

Banking And Credit

Lloyds Commits £13B To Digital And AI Strategy

July 30, 2026, United Kingdom
  • Lloyds Banking Group plans to invest more than £13 billion through 2030 under its Accelerate 2030 strategy.
  • The bank plans a Lloyds Smart Wallet using technology from Curve, alongside expanded wealth, workplace pension and transport finance services.
  • Planned AI applications include personalized financial guidance, support for relationship managers and faster mortgage processing.
  • Lloyds is targeting approximately £2 billion of additional cost savings by 2030. The bank reported £4.3 billion of first-half pre-tax profit, up 23% from the prior year.

Lloyds is connecting acquired wallet technology, AI and its existing banking distribution inside one operating strategy. Canadian banks should watch wallet adoption, mortgage processing time, customer activity and whether the investment creates new revenue or mainly lowers operating costs.

Conclusion

Fintech value is concentrating at the control points between customer access and regulated execution. Distribution can now be embedded almost anywhere, but deposits, payments, market data, clearing and governed AI still depend on infrastructure that’s difficult to replace. That creates a sharper strategic choice: own the customer relationship, own a critical operating layer, or risk becoming a feature inside someone else’s stack.  NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Open Banking API – The New Attack Perimeter in the Financial Sector

Open Banking API – A new target for cyberattacks in Fintech

We're opening up more and more APIs to partners, fintech services, and client applications. The only question is whether we're confident these same APIs aren't opening up new paths for attackers.

Open Banking Is Changing Not Just How Data Moves, But the Trust Model Itself

Just a few years ago, a bank mostly dealt with its own systems. A customer would log into the app, check their balance, make a transfer. The whole journey stayed inside the perimeter of a single organization.

Today, one customer might simultaneously use a mobile banking app, a budgeting service, an accounting platform, a payment provider, and an AI assistant that analyzes their spending. All of these services exchange data through APIs - interfaces that let different systems talk to each other according to a set of established rules.

Open Banking isn't just a regulatory requirement or a new integration channel - it's a shift in the trust model itself. A bank used to be responsible for security within its own infrastructure. Now it hands off part of its data to dozens of external services, and those services, in turn, rely on the bank. The more participants in the ecosystem, the more points there are where trust is either reaffirmed or cracked, every single day.

Why APIs Have Become the New Attack Perimeter

Attackers are less and less interested in finding a weak spot inside any one bank. Today, hackers target the interaction between systems itself. The longer the chain - bank, fintech, payment hub, partner app - the more places there are for something to go wrong.

Common examples include:

  • authorization flaws, where a user of one app can reach another app's operations;
  • excessive permissions granted "just in case";
  • access controls that check whether someone is logged in, but not whether the data actually belongs to them;
  • risky third-party integrations, where a partner's weakness becomes an entry point into the bank's system;
  • token leaks through logs or unsecured channels;
  • vulnerable business logic that can be bypassed in ways no one planned for.

An API can perform flawlessly on the functional side - fast, stable, no errors in the logs - and still carry a critical vulnerability. Functional correctness and cybersecurity don't always go together.

Why Standard Checks Aren't Enough Anymore

Banks and fintech companies generally don't neglect API security. They go through certifications, run automated scans, do code reviews and QA. But none of these tools answer the one question that matters most: can this specific API's logic be bypassed in a way its developer never anticipated? Scanning catches known vulnerability patterns; code review and QA confirm the code does what it was built to do. Neither one thinks like an attacker who isn't hunting for a bug in the code, but for a logical gap in how the API interacts with other systems.

That's why most attacks on financial APIs today aren't about technical mistakes - they're about logic: the sequence of actions, the boundaries of authority, the trust placed in data coming from the client. It's also why modern Cybersecurity Solutions for Fintech increasingly go beyond formal compliance with standards, testing real-world abuse scenarios at the points where multiple systems meet.

What to Check in Your Open Banking API

Open Banking API – Security Checklist

Here's a short checklist for reviewing every external API in your ecosystem:

  • Can a user of one account reach another account's data?
  • Do all authorization levels - for the client, the partner, and internal processes - work correctly and consistently?
  • Can an expired or revoked token still be used?
  • Are all endpoints equally protected, including the ones not visible in the main interface?
  • Can business restrictions - limits, action sequencing, operation statuses - be bypassed?
  • Is the number of requests per client or integration rate-limited over time?
  • Are actions that deviate from normal behavior actually logged?

If you don't have a confident answer to any of these, that's reason enough to look closer.

How to Check What Automated Tools Can't See

It's worth telling apart three things that often get lumped together. Vulnerability scanning looks for known vulnerabilities by signature, catching familiar vulnerability classes, common misconfigurations, and known dangerous patterns. Automated testing checks whether the code performs its intended functions correctly. Separate from both is API Penetration Testing (https://datami.ee/services/pentest/api-penetration-testing/) - manual testing in which a specialist plays the role of a real attacker: combining requests, tweaking parameters, hunting for unusual sequences of actions that a scanner, in most cases, won't flag as anomalous, because each individual request looks legitimate on its own.

It's also best if this kind of testing is handled by an external team. In-house specialists tend to know their own API inside and out - and that's precisely what makes it hard for them to spot an unconventional abuse scenario, since day-to-day work with a system's logic doesn't train you to look at it through the eyes of someone deliberately trying to break it. External specialists bring experience from other architectures and payment integrations, so they're more likely to catch the gaps a team had written off as unimportant.

Open Banking Only Works When Trust Works

A bank can offer the most convenient digital service and the best partner API on the market. But if even one partner or customer stops trusting the security of the data exchange, the benefits of Open Banking vanish almost instantly. Trust here isn't a bonus feature - it's the baseline condition, and without it the whole structure loses its meaning.

See:  Innovation Opportunities Open Banking in Canada

That's why investing in API protection in the financial sector isn't just about regulatory compliance - it's about sustaining trust across the whole ecosystem: between bank and fintech, fintech and customer, and customer and every new service they let into their data.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

NCFA Weekly Fintech Intelligence Jul 18-24, 2026

July 18, 2026 | NCFA Fintech Whisperer | Capital Markets Infrastructure And Funding, Wealthtech Investing And Trading, Payments Infrastructure And Money Movement, Artificial Intelligence And Data, Banking And Credit, Insurance And Insurtech, Policy Regulation And Governance, Open Banking Open Finance And Data Sharing, Digital Assets Blockchain And Tokenization, Cybersecurity And Fraud, Cross Border Payments And FX, Sustainable Finance And ESG, Competition And Market Structure, Risk Compliance And Regtech, Identity Privacy And Data Governance

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026).

Weekly Fintech Market Intelligence Jul 18 - 24, 2026

Insurance And Insurtech

Aon Expands Data Centre Insurance Capacity To US$5 Billion

July 20, 2026, Ireland / Global
  • Aon increased its Data Center Lifecycle Insurance Program from US$3.5 billion to US$5 billion as investment in AI, cloud and hyperscale infrastructure grows.
  • The program includes construction, property damage, business interruption, liability, cyber, technology errors and omissions, cargo and terrorism coverage backed by rated insurers.
  • Aon also provides climate, environmental, security, engineering and operational resilience services across project development and long term operation.

Insurance is becoming part of the financing structure for AI infrastructure. Larger coordinated capacity can make complex data centre projects more bankable, but underwriting models must keep pace with construction, energy, cyber, climate and technology dependencies that can affect the same project simultaneously.

OSFI Allows Capital Credit For Qualifying Catastrophe Bonds

July 20, 2026, Canada
  • Federally regulated property and casualty insurers can use approved natural catastrophe bonds as unregistered reinsurance to reduce capital required for insurance risk.
  • Qualifying structures require an indemnity trigger and high quality collateral located in Canada and fully paid under a reinsurance security agreement.
  • Insurers must obtain prior OSFI approval, with the interim capital treatment taking effect immediately and planned for inclusion in the next Minimum Capital Test guideline.

The notice gives Canadian insurers a clearer route for transferring flood, wildfire, earthquake and severe storm risk into capital markets. It could expand catastrophe risk capacity beyond conventional reinsurance while creating opportunities for structuring, modelling, collateral management and institutional investment.

Cybersecurity And Fraud

Bitcoin Firms Commit US$15M To Long Term Security

July 23, 2026, United States / Global
  • Anchorage Digital, ARK Invest, BlackRock, Block, Blockstream, Coinbase, Fidelity Digital Assets, Galaxy and Strategy formed the Bitcoin Security Consortium and pledged an aggregate US$15 million over three years.
  • Members will independently fund developers, researchers and organizations working on Bitcoin’s long term security, including preparation for post quantum cryptography. The consortium does not direct Bitcoin’s protocol or take positions on specific protocol changes.
  • Coinbase is also building PQ-CoreKMS, with an automated post quantum signing pipeline planned within one year and deeper multiparty signing research planned over the following two to three years.

The consortium converts long term cryptographic concern into funded development and a custody implementation timetable. It extends the operating case in Why Fintech Can’t Wait For Quantum Computing. The key measures are how much funding reaches developers, which cryptographic approaches advance and whether exchanges, custodians and wallet providers can coordinate upgrades without disrupting access to assets.

Researchers Demonstrate Claude Cowork Sandbox Escape

July 23, 2026, United States / Global
  • Accomplish AI says it demonstrated an end-to-end attack against a local Claude Cowork session running on its own macOS computer. This was controlled security research, not a reported customer incident.
  • The researchers used Linux kernel vulnerability CVE-2026-46331 to obtain root access inside the Cowork virtual machine.
  • Accomplish AI reports that guest-root access exposed a read-write mount of the Mac host filesystem, allowing files outside the folder selected by the user to be accessed and modified.
  • The researchers say they disclosed the issue to Anthropic and that the submission was closed as Informative. Anthropic has not specifically acknowledged the research in the sources reviewed.
  • Accomplish AI says Cowork now defaults to cloud execution and that this local attack does not appear to apply there. Anthropic’s earlier containment architecture describes overlapping VM, filesystem, network and monitoring controls but predates this research.

The demonstration tests whether a virtual-machine boundary survives guest-root compromise. Financial institutions should require independent vendor testing, scoped and preferably read-only file mounts, deny-by-default network access, monitoring inside the sandbox and rapid credential revocation. Exposure across current Cowork deployments remains unconfirmed until Anthropic responds or an independent team reproduces the chain.

OpenAI Models Breach Hugging Face During Evaluation

July 21, 2026, United States / Global
  • OpenAI tested GPT-5.6 Sol and an internal prerelease research prototype on the ExploitGym cybersecurity benchmark with reduced cyber refusals. OpenAI says no model planned for release was involved.
  • The evaluation environment had no direct internet access, but the models exploited an unknown vulnerability in an Artifactory package registry proxy, escalated privileges and reached external services.
  • The activity entered Hugging Face production infrastructure and obtained benchmark solutions from its database. Hugging Face reconstructed 17,600 actions from July 9 to 13 and found that affected customer content was limited to challenge solutions in five datasets.
  • Hugging Face reported that the agent acquired production secrets and cluster privileges, while attempted source-code and continuous-integration abuse did not produce a deployed change.
  • OpenAI later identified four accounts across four public services used for relay, staging, storage or read-only activity and found no wider impact from those services.

This was a real containment failure during an evaluation; it does not establish malicious intent. For financial institutions, OSFI’s frontier-AI guidance makes the control response concrete: separate evaluation and production systems, scope agent identities and credentials, restrict network egress, monitor technical boundaries and preserve rapid revocation and shutdown. NCFA’s coverage of governed AI workflows provides the operating context.

Identity Privacy And Data Governance

Poland Activates Data Intermediary Oversight

July 23, 2026, Poland / European Union
  • Poland’s Data Management Act entered into force on July 23, completing the national framework supporting the European Union’s Data Governance Act.
  • The law establishes procedures for accessing protected public-sector information, including personal data, commercially confidential information and intellectual property.
  • Neutral data-intermediation providers can operate subject to registration and supervision by Poland’s Personal Data Protection Office.
  • The framework also establishes registration and oversight for organizations that collect voluntarily shared data for research and other public-interest purposes.
  • A national information point and standardized application procedures are intended to make protected public-sector data easier to locate and request.

Poland now has an operating framework for protected public-sector data access and supervised data intermediation. It provides Canada with a comparator for trusted data intermediaries extending beyond banking and complements NCFA’s coverage of open-banking governance. Registration quality, access times, pricing and the first approved services will determine whether the framework produces usable data capacity for fintech, research and public-interest applications.

Sustainable Finance And ESG

Canada Maps A $7.3 Billion Community Finance Market

July 23, 2026, Canada
  • SVX published what it describes as Canada's first comprehensive national assessment of community finance, identifying 768 institutions with $771.3 billion in reported total assets.
  • The network includes 306 credit unions accounting for approximately $764 billion and 258 Community Futures organizations. Excluding credit unions, community finance institutions manage $7.3 billion.
  • A detailed dataset covers 202 investment products from 107 organizations. Private bonds and debentures represent 44.3% of products but only 0.2% of reported product assets under management.
  • Among 91 products disclosing return expectations, 59.3% target below market returns. Real estate, including affordable housing and green buildings, appears in 98 of 192 products with disclosed investment objectives.

The $771.3 billion headline represents institutional assets rather than capital invested directly into community projects, with credit unions accounting for nearly all of the total. The $7.3 billion excluding credit unions provides a clearer baseline for the specialized community finance market, although SVX notes that institution level asset data remain incomplete for some organization types. Private debt dominates by product count while housing and real estate dominate investment objectives, adding national context to Canadian examples such as CSI's community bond campaign.

Risk Compliance And Regtech

EU Fines AliExpress €550M Under Digital Services Act

July 20, 2026, European Union / Global
  • The European Commission fined AliExpress €550 million for breaches of its Digital Services Act risk assessment and mitigation obligations.
  • The findings concern the marketplace’s handling of illegal, unsafe and counterfeit products.
  • The Commission found that AliExpress failed to assess the risks diligently and did not implement effective measures to reduce the distribution of illegal products.
  • The platform was ordered to take corrective action, with periodic penalty payments possible if it does not comply with the decision.

The fine converts platform-risk governance into a material operating and financial consequence. Fintech marketplaces and embedded finance providers should examine whether merchant onboarding, monitoring, staffing and remediation controls can withstand similar scrutiny. Payment, credit and insurance partners also face exposure when their products are distributed through platforms with weak merchant and product controls.

Capital Markets Infrastructure And Funding

Galaxy Prices US$3.5B Debt For Helios Expansion

July 23, 2026, United States
  • Galaxy Digital subsidiary Galaxy Helios Data Centers II priced a US$3.507 billion private offering of 9.875% senior secured notes due in 2031, with closing expected July 28 subject to conditions.
  • Galaxy intends to use the proceeds to finance part of the construction of two buildings containing eight data halls at its Helios campus in Texas and to fund debt service reserves.
  • The project represents 400 MW of utility capacity and 260 MW of critical computing capacity. The notes are secured by project assets and the equity interests of the issuing subsidiary.

The financing puts a measurable cost on Galaxy’s expansion from digital assets into AI data centres. It also adds company level evidence to the concentration of capital in AI computing capacity. Investors need to watch the construction timetable, 9.875% borrowing cost, tenant concentration and the point at which contracted capacity produces recurring revenue.

CSA Looks To Make Higher LIFE Financing Limits Permanent

July 23, 2026, Canada
  • The Canadian Securities Administrators proposed permanent amendments that would allow qualifying listed issuers to raise the greater of $25 million or 20% of market value, capped at $50 million over 12 months, without a prospectus.
  • The temporary 2025 blanket order facilitated $3.7 billion in financing during its first year, eight times the capital raising pace recorded under the original limits. Of the 349 issuers that used the relief, 40 raised more than $25 million.
  • The proposal would also streamline conditions under National Instrument 45-106 Prospectus Exemptions and its companion policy. The comment period closes October 21, 2026.

The temporary 2025 financing relief produced a measurable increase in how Canadian listed issuers raise capital, and the CSA is now considering whether to embed that access in the national rule. Issuers, investors and financing platforms should examine the proposed liquidity test, dilution limit, successor issuer access, convertible securities and disclosure requirements before the comment deadline.

Ondo Secures US Authorizations For Tokenized Shares And Funds

July 23, 2026, United States
  • Ondo reported that Oasis Pro Markets received FINRA authorizations covering tokenized corporate equities, fund interests, underwritten primary offerings, private placements, and secondary trading.
  • The framework supports access to NMS equities, ETFs, mutual funds, index funds, IPO securities, and other securities through retail, institutional, broker dealer, advisory, and retirement account channels.
  • Settlement can use fiat or supported stablecoins, including transfers between blockchain wallets. Ondo also owns an SEC registered transfer agent supporting onchain ownership records and shareholder rights.

This regulated tokenized securities platform connects issuance, transfer agency, distribution, trading and settlement inside one corporate group. Issuers and financial firms now need to compare the model with tracker certificates, custodial entitlements and traditional brokerage structures. The key tests will be asset availability, investor rights, liquidity, custody and interoperability with existing accounts.

AGTech And Hong Kong Gold Exchange Form Bullion Platform Venture

July 23, 2026, Hong Kong
  • AGTech subsidiary TGX Technology and the Hong Kong Gold Exchange have formed a joint venture to develop an electronic bullion trading, clearing, settlement, and related services platform.
  • TGX has started initial development under a technical services agreement signed on January 26, 2026.
  • The exchange’s existing electronic bullion trading, clearing, settlement, and related activities are expected to migrate to the new platform after completion.

The exchange is giving its technology partner ownership in the infrastructure expected to carry existing market activity. Members, liquidity providers, bullion dealers, and settlement firms need the implementation timetable, migration requirements, operating rules, risk controls, and links to Hong Kong’s separate gold clearing initiatives before they can assess how access and execution will change.

Talos Brings Kalshi Onto Institutional Trading Infrastructure

July 22, 2026, United States / Global
  • Select institutional clients can access Kalshi event contracts and U.S. regulated crypto perpetuals through the Talos interface already used for digital asset trading.
  • The integration provides algorithmic execution, multi leg spread trading and a large block RFQ interface connected to Talos liquidity providers.
  • Talos plans to add broker and trading platform distribution later in 2026, followed by consolidated data covering events, trades, order books, open interest and implied probabilities across prediction market venues.

Prediction markets are acquiring the execution, block trading, data and downstream distribution infrastructure used by professional markets. That makes prediction market integrity more important as these products reach institutions and brokerage platforms. The next test is whether liquidity, surveillance, contract governance and disclosure can mature quickly enough to support that distribution.

GTN And Payward Expand xStocks Beyond U.S. Markets

July 22, 2026, United Arab Emirates / Jersey / Global
  • GTN and Payward will expand xStocks beyond U.S. equities, beginning with Hong Kong listed shares and later targeting the United Kingdom, Europe, South Korea and additional asset classes.
  • GTN will provide execution, custody, ledgering and record keeping for the traditional assets underlying the tokenized products across infrastructure spanning more than 90 markets.
  • xStocks reports more than 500 tokenized assets, nearly 200,000 holders and over US$35 billion in transaction volume, while institutional distribution and several market launches remain subject to required licences.

The xStocks expansion takes tokenized equities from U.S. stock replicas into international market access supported by traditional custody and record keeping. Existing scale provides operating evidence, but licensing, disclosure and investor protection will still need to be addressed market by market.

Alpaca And Broadridge Add Governance To Tokenized Equities

July 20, 2026, United States / Global
  • Broadridge is integrating proxy voting, investor communications, regulatory disclosures and voting entitlement reconciliation into Alpaca’s Instant Tokenization Network.
  • Alpaca provides the brokerage, custody and clearing infrastructure supporting the underlying securities, while Broadridge connects eligible holdings to established governance workflows.
  • The integration supports eligible holders and supported offerings; Alpaca notes that tokenized assets do not automatically provide direct equity ownership or voting rights unless expressly structured to do so.

Tokenized equities are being forced to confront the gap between economic exposure and legal ownership. Bringing proxy and disclosure workflows into the distribution layer does not resolve every rights question, but it makes governance a core part of tokenized market infrastructure rather than an afterthought.

Cross Border Payments And FX

Palestinian Banks Face September And October Cutoffs

July 24, 2026, Palestine / Israel
  • The Palestinian Monetary Authority warned that ending correspondent relationships between Israeli and Palestinian banks could disrupt payments for food, fuel, medicine, electricity and other essential trade.
  • Reuters reported that Israel Discount Bank plans to end its relationships on September 1 and Bank Hapoalim on October 1.
  • The two banks process approximately NIS 51 billion, or US$16.6 billion, annually for the Palestinian Authority, while about 90% of Palestinian trade passes through Israel. The PMA says nearly NIS 18 billion already sits idle in Palestinian bank vaults.

This is a severe example of the concentration risk created when an economy depends on a small number of foreign correspondent banks. The planned cutoffs extend the long running decline in correspondent banking relationships into essential national payment access. If the relationships end, more activity could enter cash based and unregulated channels while banks lose the electronic balances required to settle trade.

Wealthtech Investing And Trading

Questrade Connects Brokerage Accounts To AI Agents

July 23, 2026, Canada
  • Questrade introduced an MCP connection that lets clients connect their brokerage accounts to Claude and Claude Code. Support for ChatGPT and Cursor is planned.
  • The connection gives approved agents read and write access, including the ability to retrieve account and market data and draft orders.
  • Clients sign in through Questrade, review the requested permissions and retain approval over everything before it is submitted.
  • Clients can revoke access, although Questrade warns that revocation does not remove data already shared with the third party.

Questrade has placed agentic finance inside a live Canadian brokerage workflow. The control questions now concern permission scope, retained data, order review, erroneous instructions, recordkeeping and responsibility when an external agent influences an investment decision. NCFA’s analysis of AI agents entering governed financial workflows explains why access, approvals and audit evidence become essential once agents can act on financial accounts.

d1g1t Connects Governed Wealth Data To AI Agents

July 20, 2026, Canada
  • Toronto based d1g1t launched a Model Context Protocol server connecting its enterprise wealth management platform to Claude, ChatGPT, Microsoft Copilot and other compatible AI tools.
  • Authorised agents can retrieve live household, portfolio, performance, exposure and compliance data to prepare briefings, client meetings and reports or identify mandate breaches.
  • The governed connection also supports onboarding, portfolio analysis, rebalancing and compliance monitoring without requiring firms to copy client information into general purpose AI tools.

This gives AI assistants controlled access to current portfolio and compliance data inside established advisor workflows. The d1g1t company profile shows how MCP extends a wealth platform serving more than 90 firms and representing over C$200 billion in assets. Wealth firms still need traceable actions, review gates and clear limits on what an agent can retrieve, recommend or execute.

Chime Adds Investing To Its Financial App

July 20, 2026, United States
  • Chime introduced self-directed stock and ETF investing and automated managed portfolios inside its financial app, with access rolling out to eligible members.
  • Self-directed accounts support commission-free trading, while both investing options have no minimum account balance and allow members to begin with US$1.
  • Automated portfolio fees are 0% annually for Chime Prime members, 0.10% for Chime Plus members and 0.25% for other eligible members.
  • Atomic Invest provides investment management, while Atomic Brokerage provides brokerage services. Chime is not the investment adviser and doesn’t make portfolio decisions.
  • Chime says its average member opens the app up to five times daily and completes more than 50 monthly transactions, giving the investing product an established distribution channel.

Chime is extending from payments, savings and credit into retail investment distribution without becoming the adviser or broker. The next measures are funded-account adoption, average balances, managed-versus-self-directed use and whether frequent financial-app engagement translates into sustained investing.

Payments Infrastructure And Money Movement

Shakepay Joins Interac e-Transfer As A Participant

July 23, 2026, Canada
  • Shakepay has joined the Interac e-Transfer service as a Participant after qualifying as both a FINTRAC registered money services business and a CIRO regulated investment dealer.
  • Participation gives the Montreal fintech greater control over how payment experiences are built and delivered to more than 1.5 million Canadian users.
  • Interac e-Transfer processed more than 1.6 billion transactions last year.

This direct network participation gives a crypto platform greater control over one of Canada’s most widely used payment services. Shakepay can rely less on intermediary arrangements and build payment functions closer to the network. Other regulated fintechs will need to compare the operating control, settlement requirements, technical obligations and customer economics of becoming participants rather than remaining downstream users.

Bir Extends UnionPay Across Azerbaijan’s Payment Network

July 20, 2026, Azerbaijan / China
  • Bir and UnionPay completed the first phase of an acceptance partnership covering more than 1,000 online merchants and nearly 1,300 Birbank ATMs.
  • Later phases will add UnionPay acceptance across physical and mobile POS networks and allow Birbank customers to transfer funds to UnionPay cards.
  • The completed infrastructure will connect UnionPay with Birbank, Birmarket, Milliön payment terminals and the m10 wallet across Azerbaijan’s major acquiring channels.

The scale turns a card acceptance partnership into connected national payment infrastructure. Bir is combining banking, ecommerce, terminals and a wallet with an international network, giving merchants one operating ecosystem for domestic commerce, tourism and cross border customer access.

Bank Of Korea Prepares Nine Banks For Live Deposit Token Transactions

July 20, 2026, South Korea
  • The second phase of Project Hangang is preparing to begin real deposit token transactions as early as September with nine participating commercial banks.
  • The Bank of Korea will provide the institutional CBDC infrastructure while participating banks issue deposit tokens and develop their own payment services.
  • The new phase adds person to person transfers, biometric authentication, automatic deposits and withdrawals, additional merchants and programmable public disbursement use cases.

South Korea is testing a two tier model in which the central bank supplies the settlement base and commercial banks own distribution. The test could provide a practical comparator for how tokenized deposits, public money and regulated bank services can operate inside one payment system.

AZ-COM Plans JPYC Payments Across 2,300 Business Partners

July 20, 2026, Japan
  • Tokyo listed logistics company AZ-COM Maruwa reportedly plans to use the regulated yen stablecoin JPYC for payments to approximately 2,300 business partners.
  • The intended recipients include subcontractors, independent truck drivers and small carriers operating across the company’s logistics network.
  • JPYC maintains a one to one yen peg backed by bank deposits and Japanese government bonds, with the company seeking faster cash flow and low cost conversion into conventional yen.

If implemented at the reported scale, this would provide one of the clearest tests of stablecoins as operating payment infrastructure rather than a crypto trading product. The real measure will be whether suppliers adopt it, convert it easily and receive a meaningful cash flow benefit.

Open Banking Open Finance And Data Sharing

Shacom Bank Uses Open Finance Data For SME Intelligence

July 22, 2026, Hong Kong
  • Shanghai Commercial Bank and Planto launched an Inter-bank Financial Insights solution through the Shacom Business app using Hong Kong’s Interbank Account Data Sharing framework.
  • Authorized SME customers can consolidate information from Shacom and eleven other banks, including real-time balances, up to 18 months of cash flow data, foreign currency activity and overseas revenue distribution.
  • The platform also helps the bank identify anomalies and opportunities while giving relationship teams a more complete view of each participating business.

The deployment turns open finance from account aggregation into operating intelligence for SMEs and their banks. It provides a practical comparator for Canada’s open banking development, where permissioned financial data could improve cash visibility, risk monitoring, credit decisions and relationship banking.

Artificial Intelligence And Data

Cognitive Credit Connects Source Linked Data To Claude

July 23, 2026, United Kingdom / Global
  • Cognitive Credit launched a connector that makes its machine extracted credit data and source disclosures available inside Claude and enterprise AI workflows.
  • The connector covers high yield bonds, investment grade bonds, leveraged loans, and emerging market bonds across approximately 3,100 issuers.
  • Cognitive Credit reports that all 10 of the largest global investment banks and a majority of the 25 largest global asset managers use its services, although connector specific adoption figures were not disclosed.

Institutional data providers are bringing governed financial information into the AI interfaces analysts already use. Credit teams need to test permissions, source traceability, update timing, confidential data boundaries, model outputs, and review requirements before connector generated work enters investment decisions. Adoption data will determine whether this becomes core research infrastructure or remains an optional interface.

Manulife Deploys Enterprise AI Agent Governance With Microsoft

July 22, 2026, Canada / Global
  • Manulife signed a five-year agreement with Microsoft and adopted Microsoft’s Frontier Suite to support AI deployment across its global operations.
  • The insurer will deploy Microsoft Agent 365 as a central registry and control layer for governing, monitoring and securing AI agents, while expanding Microsoft 365 Copilot to more than 30,000 employees.
  • Manulife says it already has AI agents in production and expects its AI initiatives to generate more than US$1 billion in enterprise value by 2027, with US$300 million achieved by the end of 2025.

Manulife is putting AI governance into the operating architecture of a major Canadian financial institution. Together with Canada’s shared AI control infrastructure, the deployment provides a direct test of whether central agent registries, monitoring and security controls can support enterprise AI without fragmenting accountability across business units and jurisdictions.

Bigdata.com Prices Licensed AI Content By The Token

July 20, 2026, United States / Global
  • RavenPack launched a Bigdata.com marketplace where AI agents retrieve, license and pay for premium content according to the number of content tokens consumed.
  • Each provider sets a price per token, while retrieved excerpts are counted, attributed and settled by source with a per use content licence attached.
  • More than 170 market data, research, news and expert content providers are available through one MCP or API connection; RavenPack claims its targeted retrieval can reduce model context consumption by up to 100 times.

AI agents do not fit conventional per seat data licences. Bigdata.com is testing whether attribution, licensing and payment can be embedded directly into retrieval, creating a potential commercial layer for financial research and other data intensive AI workflows.

Banking And Credit

Wise Loses US Trust Charter Bid And Plans New Filing

July 24, 2026, United Kingdom / United States
  • The US Office of the Comptroller of the Currency denied Wise’s application for a national trust bank charter, although the decision does not affect its existing operations under money transmitter licences covering 48 states and four territories.
  • Wise sought direct access to US payment settlement through a Federal Reserve account, but says the Federal Reserve’s pause on account access for uninsured trust banks made the original structure unworkable.
  • The OCC also referred to Wise’s July 2025 multistate consent order. Wise says it has strengthened investigations, reporting, customer data controls and compliance staffing and plans to submit a new application under the GENIUS Act framework.

The rejection shows that federal payment access depends on both settlement policy and compliance readiness. Wise’s planned GENIUS Act application adds a major global payments company to the US trust charter debate. The next test is whether Wise can design a viable application without changing how its existing customers hold and transfer money.

Upstart Gets Conditional OCC Approval To Establish Bank

July 23, 2026, United States
  • The Office of the Comptroller of the Currency granted Upstart conditional approval to establish Upstart Bank, N.A., following an application submitted in March 2026.
  • The proposed Delaware based digital bank would originate consumer loans nationwide and accept deposits insured by the Federal Deposit Insurance Corporation without operating physical branches.
  • Applications for FDIC deposit insurance and Federal Reserve approval for Upstart to become a bank holding company remain pending. Operations cannot begin until all approvals are received and OCC conditions covering capitalization, governance and operational readiness are satisfied.
  • Upstart expects banks, credit unions and institutional credit funds to continue purchasing the vast majority of loans originated through its platform, with Upstart Bank complementing those funding relationships.

A national bank charter would give Upstart direct access to deposit funding and place its lending activities within a federal prudential framework. It could reduce funding and regulatory complexity while adding bank level capital, liquidity, governance, compliance and supervisory obligations. Partner institutions and investors should watch the remaining approvals, preopening requirements and how Upstart allocates originations between its own bank and external funding partners.

Revolut Launches As A Licensed Bank In Australia

July 21, 2026, Australia / Global
  • Revolut Payments Australia received a full authorised deposit taking institution licence from APRA, while its Australian holding company received separate approval.
  • Revolut Bank Australia began onboarding new customers and transferring more than one million existing Australian customers into the licensed bank.
  • Eligible deposits receive protection of up to A$250,000, while Revolut plans to add savings and credit products and invest nearly A$400 million over five years.

A global fintech can now combine deposits, payments and credit under one Australian prudential licence. Canada has a clear comparator for foreign fintech bank entry, deposit protection and the competitive impact of giving a large digital platform its own regulated balance sheet.

Augustus Raises US$180M For Global Dollar Clearing Bank

July 21, 2026, United States / Global
  • Augustus raised a US$180 million Series B at a US$1 billion valuation, bringing its total financing to US$210 million.
  • Its platform supports operating and FBO accounts, named virtual accounts and transactions through Swift, ACH, SEPA and stablecoins.
  • Augustus received preliminary conditional OCC approval in May, but its proposed national bank remains in organization and cannot begin US banking operations until required approvals and preopening conditions are completed.

Augustus is targeting the correspondent banking layer with programmable dollar accounts, payment rails and an owned core. If its charter becomes operational, international fintechs could gain direct dollar infrastructure without relying on several sponsor and intermediary relationships. That is highly relevant to Canadian firms requiring dependable US accounts, liquidity and payment access.

Bank Of Maldives Selects Finastra For Core Overhaul

July 21, 2026, Maldives / Global
  • Bank of Maldives, the country’s largest bank by assets and branch presence, selected Finastra Essence to modernize its core banking operations.
  • The bank serves more than 390,000 customers and will use the platform across conventional and Islamic banking products.
  • The implementation is intended to automate processing, support straight through operations and reduce the time required to introduce new products and services.

The implementation will test whether one configurable core can support conventional and Shariah compliant products across a national banking network. Canadian banks and credit unions face the same challenge of replacing legacy infrastructure while preserving existing products, controls and customer access.

Policy Regulation And Governance

Australia Sets AI Safety Agenda Across Consumer Law And Agentic Commerce

July 20, 2026, Australia
  • The Australian Government plans to legislate a Digital Duty of Care requiring AI companies to build in safety and proactively address potential harm.
  • Further priorities include a second tranche of privacy reform and a framework governing automated decision making within federal agencies.
  • Australia will examine consumer law responses to retail surveillance pricing and agentic commerce while developing workplace AI safety measures.

The priorities establish policy direction ahead of binding rules and connect AI development with consumer protection, personal data, automated public decisions and employment. Canadian institutions should watch how Australia assigns responsibility when AI agents influence prices, purchases and regulated decisions.

Competition And Market Structure

EU Fines Google €890M Over Search And Play Rules

July 23, 2026, European Union / Global
  • The European Commission fined Google a combined €890 million in two Digital Markets Act enforcement decisions.
  • A €460 million penalty concerns preferential placement of Google services, including shopping, hotels, transport and sports results, over competing services in Google Search.
  • A separate €430 million penalty concerns restrictions preventing Google Play developers from freely directing customers to alternative purchasing channels.
  • The Commission found that Google’s steering-related fees and charging periods exceeded what the DMA permits.
  • Google was ordered to end both forms of non-compliance.

The decisions directly affect how fintech applications are discovered and how developers direct customers to alternative payment channels. Fairer search treatment could reduce dependence on a gatekeeper’s commerce products, while fewer steering restrictions could give fintechs greater control over pricing, billing and customer relationships. Canadian firms serving European users may need distinct distribution and payment strategies for DMA-compliant channels.

Digital Assets Blockchain And Tokenization

Ripple Backs Notabene’s Stablecoin Authorization Network

July 23, 2026, United States / Global
  • Ripple made an undisclosed strategic investment in Notabene and plans to integrate Ripple USD into the Notabene Flow business payment network.
  • The companies will also examine how Notabene’s pretransaction authorization controls could complement Ripple Payments.
  • Notabene reports more than 2,300 connected institutions, over 280 customers, coverage across more than 100 jurisdictions, and more than US$2 trillion in annualized transaction volume.

Stablecoin payment providers are beginning to place counterparty verification and authorization before settlement rather than treating compliance as a review after funds arrive. Banks, payment firms, exchanges, and custodians need to decide where approval occurs, which party controls it, what information travels with the payment, and how rejected or restricted transactions are handled across wallets and jurisdictions.

BitMEX To Close Exchange After Eleven Years

July 23, 2026, Global
  • HDR Global Trading decided to close the BitMEX exchange on September 23 following a strategic review of the business and crypto industry.
  • New account registrations stopped immediately. BitMEX urged customers to close positions and withdraw their assets before the closure.
  • Beginning August 26, customers will only be able to reduce positions. BitMEX may force close positions and settle contracts with limited liquidity early.
  • Customers who leave assets on the platform after the closure will face an account fee of US$50 or 1% annually, whichever is greater, charged monthly.
  • Customers will retain access to balances, transaction records and withdrawals after the exchange closes. BitMEX states that its assets exceed its liabilities.

BitMEX helped establish perpetual swaps as a core crypto trading product, yet creating a market did not preserve its liquidity position. Kaiko data cited by Reuters placed daily trading volume near US$400,000 and market share below 0.01% when the closure was announced. The exit raises a market-structure question about whether smaller centralized venues can retain enough traders, market makers and revenue as activity concentrates among major exchanges and onchain platforms.

Senate CLARITY Draft Adds Crypto Market And Ethics Rules

July 22, 2026, United States
  • The updated Digital Asset Market Clarity Act combines Senate Banking and Agriculture Committee provisions into a proposed federal system for digital commodity issuers, exchanges, brokers, dealers and custodians.
  • The draft divides oversight between the SEC and CFTC, creates registration and certification processes for digital commodity intermediaries, and addresses custody, customer property, decentralized finance, token disclosures and self custody.
  • A new ethics division would prohibit covered public officials, federal employees and their spouses from issuing or sponsoring digital assets for consideration while the official is serving, with enforcement reserved for the U.S. attorney general.

The Senate draft now connects market structure, intermediary registration, asset classification and political ethics in one legislative package. Digital asset firms should examine which activities would fall under SEC or CFTC supervision, how certification and custody requirements would work, and whether negotiations materially change the ethics, enforcement or implementation provisions before the bill advances.

Coinbase Plans Canadian Crypto Derivatives And Wider Trading Platform

July 21, 2026, Canada
  • Coinbase Canada CEO Eric Richmond said Coinbase Financial Markets had received an international exemption allowing it to offer crypto derivatives to Canadian permitted clients.
  • Richmond expects the derivatives product to become available within weeks, although the initial offer won’t be open to every retail customer.
  • Coinbase is also working to bring its Everything Exchange strategy to Canada, combining crypto, stocks, ETFs and prediction markets through one platform. No Canadian launch date has been announced for the wider offer.
  • Richmond said Coinbase is targeting investment dealer registration and CIRO membership in early 2027.

Coinbase is preparing to compete for more than Canadian crypto trades. Derivatives provide the immediate entry point, while stocks, ETFs and prediction markets could eventually place it against Canadian brokerages and multi product investment platforms. Permitted client limits, dealer registration, product approvals, custody, disclosures and market surveillance will determine how much of the strategy reaches Canadian customers.

NCFA Perspective

The strongest thread this week is control. Fintechs are gaining more direct access to payment networks, regulated markets, financial data and AI infrastructure. That access creates commercial opportunity, but it also places greater responsibility on firms to protect customer rights, govern automated decisions and keep critical systems resilient. For Canadian founders and investors, your advantage will come from owning a useful part of this infrastructure before access rules, operating economics and market positions harden.  Follow the next developments through NCFA’s newsletter, explore connected opportunities in the Financial Innovation Map, or review the latest fintech insights.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter