Global fintech and funding innovation ecosystem

Category Archives: Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech

NCFA Weekly Fintech Intelligence Mar 21-27, 2026

March 27, 2026 | NCFA Fintech Whisperer Weekly Intelligence | Digital Assets Blockchain And Tokenization, Regulation And Policy, Payments And Market Infrastructure, Risk Compliance And Regtech

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026).

Weekly Fintech Market Intelligence Mar 21 - 27, 2026

Digital Assets, Blockchain And Tokenization

RBA Moves Tokenised Market Work Beyond Pilot Stage

Mar 25, 2026, Australia
  • Project Acacia covered tokenised bonds, repo, deposits, and funds with settlement using stablecoins, deposit tokens, wholesale CBDC, and ESA balances.
  • The RBA tested issuing wholesale CBDC onto external ledgers to examine cross-ledger settlement.
  • Next step is a longer sandbox focused on testing how tokenised money connects with existing systems such as RITS.

The RBA is moving past short pilots. The focus now is how tokenised money works with existing settlement systems and what holds up under real use.

Capital Markets And Funding

SEC Approves CAT Amendment Removing Online Query Tool

Mar 27, 2026, United States
  • The SEC approved a CAT amendment that removes references to the online targeted query tool from the CAT NMS Plan.
  • Regulators will continue to access CAT data through user defined direct queries and bulk extracts instead.
  • The earlier CAT cost savings amendment estimated $2.5 million to $3.5 million in savings from eliminating the online targeted query tool.

The SEC is narrowing one regulator facing CAT access path in the name of cost savings while keeping other query methods in place. That doesn't change trading rules, but it can change how efficiently regulators search market activity and build surveillance cases, and to that extent there are some concerns around reduced oversight.

CIRO Finalizes Fully Paid Securities Lending Rule Amendments

Mar 26, 2026, Canada
  • CIRO sets new rules and eligibility criteria for fully paid securities lending and financing arrangements.
  • All existing exemptions end on Apr 27, 2026, and dealer programs must comply with the updated framework.

Fully paid lending goes from exemption based programs to a standard rule set. Dealers need to update inventory funding structures and controls before the effective date.

US House Holds Tokenization Hearing On Capital Markets Modernization

Mar 25, 2026, United States
  • The U.S. House Financial Services Committee held a hearing on tokenization and the future of securities markets.
  • The hearing treated tokenization as a capital markets modernization issue rather than a niche digital asset topic.
  • Witnesses included DTCC, Nasdaq, SIFMA, Blockchain Association, and Plume Network.
  • The discussion put exchange infrastructure, market plumbing, and securities treatment into the same policy frame.

Tokenization is now being discussed inside the core U.S. capital markets policy process, with major market infrastructure and exchange voices at the table. That raises the odds that tokenized securities will be treated as a market structure question tied to trading, clearing, settlement, and custody, not only as a digital asset issue.

New York Stock Exchange And Securitize Sign MOU To Support Tokenized Securities

Mar 24, 2026, United States
  • New York Stock Exchange and Securitize agree to a memorandum of understanding focused on digital transfer agent infrastructure and broker dealer participation for issuer sponsored tokenized securities on an NYSE affiliated digital trading platform.
  • Securitize is named as the first digital transfer agent eligible to mint blockchain native securities for corporate or ETF issuers on the platform.
  • NYSE plans a digital transfer agent program intended to support on chain settlement of tokenized security transactions.
  • Securitize Markets is expected to become one of the broker dealer participants on the platform.

Lynn Martin, President, NYSE Group: “As we explore how tokenization can enhance capital markets, it is critical that new infrastructure is developed in a way that preserves the trust, transparency, and protections investors expect. Securitize brings deep experience in digital asset infrastructure and transfer agency, making them a strong partner in helping design this next generation of market structure.”

Payments And Market Infrastructure

RBI Sets Payments Vision 2028 With Fraud, Cross Border, And Switching Priorities

Mar 27, 2026, India
  • RBI’s Payments Vision 2028 sets the course through December 2028 under the theme “Shaping India’s Payment Frontier.”
  • The plan includes a shared responsibility framework for unauthorised digital payment fraud, a Cyber Key Risk Indicators framework for non bank payment system operators, and a review of cheque security and electronic cheques.
  • RBI also plans a review of the cross border payments framework, will examine a single window authorisation process under the PSS Act and FEMA, and will explore a Payments Switching Service to let customers switch providers more easily.

India is moving from payment expansion to payment control. Fraud liability, cyber resilience, cross border authorisation, and switching now sit closer to the centre of the next build cycle for banks, payment firms, and fintech infrastructure providers.

Visa Joins Canton Network To Support Private Onchain Payments

Mar 25, 2026, Global
  • Visa says it will join the Canton Network as a Super Validator, becoming the first major global payments company in the network’s validator group.
  • The move will support stablecoin payments, settlement, and treasury use cases for banks and financial institutions.
  • Canton is built to let institutions use shared blockchain infrastructure without exposing sensitive transaction data.
  • Stablecoin settlement activity is running at an annualized $4.6B and that it supports more than 130 stablecoin-linked card programs across more than 50 countries.

Visa is getting into the infrastructure layer. Privacy has been one of the main blockers for banks and large financial institutions using shared blockchain systems. If that barrier starts to fall, onchain payments, settlement, and treasury activity can move closer to core financial market infrastructure.

Bank of Canada Releases 2025 FMI Oversight Activities Annual Report

Mar 24, 2026, Canada
  • Bank of Canada publishes its Oversight Activities for Financial Market Infrastructures 2025 Annual Report covering designated clearing and settlement systems.
  • The notice highlights improvements designated FMIs made to risk management practices in 2025.
  • The notice also highlights ongoing and new expectations set by the Bank for designated FMIs in 2026 and beyond.

FMI oversight expectations set the operating floor for payments and clearing infrastructure, which can flow through to participant requirements, vendor controls, and resilience planning.

BMO Introduces Tokenized Cash Platform With CME And Google Cloud

Mar 24, 2026, Canada / United States
  • BMO says it is the first bank to offer CME Group’s tokenized cash solution on Google Cloud Universal Ledger.
  • The platform is designed to support 24/7 institutional movement of value for margin, collateral, trading, and settlement workflows.
  • Clients can convert dollars into a tokenized instrument for use with margined products at CME Group.
  • The platform also lays the groundwork for tokenized deposits to support broader payment and treasury use cases.

This brings tokenized cash into live institutional money movement. It's a major Canadian bank using tokenized cash to support real margin, collateral, and settlement flows on a continuous basis. Tokenized money is moving deeper into market infrastructure and gives regulated institutions a way to move value when markets need it 24/7, not only during banking hours.

Deloitte And Stablecorp Bring QCAD Into Canadian Bank Workflows

Mar 23, 2026, Canada
  • Deloitte Canada and Stablecorp announced an alliance to deploy QCAD-based stablecoin infrastructure with Canadian financial institutions.
  • The integration targets bank use cases including liquidity management, inter-bank clearing, cross-border payments, and treasury operations.
  • Deloitte positions QCAD as a Canadian-compliant stablecoin that can plug into existing banking systems and workflows.
  • The timing aligns with expected progress on Canada’s federal stablecoin framework and Bill C-15.

Deloitte and Stablecorp are building integration paths for financial institutions to use QCAD inside existing systems. The work targets clearing, treasury, and cross-border flows, but no deployments or pilots have been confirmed yet. Treat this as a signal that stablecoin infrastructure is being wired into bank workflows ahead of regulatory clarity.

Regulation and Policy

UMIR Guidance Update Project Reaches Completion

Mar 27, 2026, Canada
  • The UMIR Guidance Update Project reaches completion on Mar 27, 2026, pointing dealer members to updated guidance notes published across Phase 1 and Phase 2.
  • The package focuses on clarity and usability, with non material edits that improve accuracy and make guidance easier to find and apply.
  • A small subset of guidance notes does not get republished because they require material changes or no longer apply.

This closes a multi phase refresh and sets a new baseline for dealer compliance interpretation across UMIR topics, which can flow into policy mapping, training, and vendor rule logic.

Canada Expands Bank Of Canada Mandate To Stablecoins And Open Banking

Mar 26, 2026, Canada
  • Bill C-15 received Royal Assent and expands the Bank of Canada’s role in digital finance and payments.
  • The Bank will supervise stablecoin issuers and oversee the consumer-driven banking framework.

Bill C-15 puts stablecoins, payments, and consumer-driven banking under a more unified central bank structure. Firms now need to plan for supervision across digital money and data-sharing models, not treat them as separate tracks.

CIRO Sets Conditions For Dealer Access To Event Contracts

Mar 26, 2026, Canada
  • CIRO sets how its rules apply when dealers trade or facilitate event contracts and prediction markets.
  • Dealers must notify CIRO before offering these products and meet terms tied to authorization.
  • Contracts tied to elections or political events are not permitted, and products must meet defined restrictions including minimum term length.

Event contracts are now included in a defined Canadian dealer framework. Firms need to clear product design, compliance, and notification before going live.

FCA Sets Out Next Phase Of Smarter Regulation

Mar 26, 2026, United Kingdom
  • The roadmap targets faster authorisations using AI, including use of generative AI to review documents firms submit, with rollout across authorisations and supervision.
  • It also outlines a new sandbox environment to test automated data feeds between firms and the regulator, aimed at cutting manual work and improving timeliness and reliability of information.
  • The update includes a reporting burden reduction package that removes three regular data returns and reduces the frequency of another, plus a larger move of regulatory tasks into My FCA.
  • A linked 2026/27 perimeter report calls for modernisation of payments regulation to mitigate risks while supporting innovation.

AI assisted authorisations and automated reporting feeds can shorten approval timelines and change how supervision picks up issues from live data.

FCA Consults On Simplified Financial Advice To Expand Access

Mar 25, 2026, United Kingdom
  • FCA consults on changes intended to make it easier for firms to deliver simplified forms of individualized financial advice for consumers with more straightforward needs.
  • FCA proposes consolidating suitability expectations, clarifying flexibilities around using sufficient information, and changing how ongoing advice reviews work, including moving away from a fixed annual review toward periodic reviews based on client needs.
  • The consultation also opens a discussion on the future of trail commission and it states qualification standards and adviser charging rules remain unchanged.
  • FCA sets the consultation close date as May 22, 2026 and links the full consultation PDF CP26/10 Simplifying the Pensions and Investment Advice Rules

Sarah Pritchard, Deputy Chief Executive, Financial Conduct Authority: “We want to see more people getting supported, who aren’t currently, and a market that innovates and offers tailored services to meet differing consumer needs.”

CIRO Publishes Enforcement Document Production Guide

Mar 25, 2026, Canada
  • The Document Production Guide sets Enforcement Staff expectations for producing documents, records, and electronically stored information in response to a Request for Information issued under IDPC Rule 8100 or Mutual Fund Dealer Rule 6.
  • The guide takes effect May 1, 2026.
  • The guide frames preservation of data and metadata as part of maintaining integrity and reliability of records, and it aims to reduce clarification and resubmission cycles during investigations.

Dealers and fintech vendors that support eDiscovery, recordkeeping, surveillance, and investigation response workflows now have a clear CIRO baseline for data handling, metadata preservation, and production process design.

California Jury Opens A New Liability Lane For Addictive Platform Design

Mar 25, 2026, United States
  • A Los Angeles jury found Meta and Google liable for harming a 20 year old plaintiff through negligent platform design and failure to warn, awarding $6M in damages. Reuters reports Meta is responsible for 70% of the award and Google for 30%.
  • Reuters says the case serves as a bellwether for thousands of similar California state claims, while the related federal multidistrict litigation includes more than 2,400 lawsuits against social media companies over youth harm.
  • The ruling is important because the jury accepted a design based theory tied to engagement mechanics instead of treating the dispute only as a content moderation issue. That raises the pressure on recommendation loops, infinite scroll, autoplay, and similar retention features.
  • Pressure is building on a second front. On Mar 24, a New Mexico jury ordered Meta to pay $375M after finding it liable for misleading users about platform safety and endangering children. Reuters reports a second phase starts May 4 and could seek court ordered changes to Meta’s platforms.
  • Meta has already warned investors that a number of U.S. youth related trials are scheduled for 2026 and may result in a material loss, which puts this issue inside formal enterprise risk disclosure rather than public relations damage control alone.

Courts are beginning to test whether engagement led product design itself can create liability at scale. If that theory survives, the impact reaches beyond social media. Any digital product that depends on compulsive use patterns, especially where minors or vulnerable users are involved, faces legal scrutiny and compliance costs.

August 6 update: A New Mexico court ordered Meta to establish a US$567M abatement fund, bringing the financial remedies in the case to US$942M, and imposed youth-safety requirements covering age assurance, teen usage and notifications, adult-minor contact controls and AI-chatbot interactions involving minors. Meta plans to appeal.

CIRO Tightens Guidance On Third Party Electronic Market Access

Mar 24, 2026, Canada
  • CIRO issued guidance on third-party electronic access to marketplaces through direct electronic access, routing arrangements, and order execution services.
  • The note ties the guidance to UMIR Rules 6.2, 7.1, 7.13, and 10.16, covering order identifiers, trading supervision, direct electronic access, and gatekeeper obligations.
  • CIRO says the framework addresses risks tied to electronic access, including liability, credit, market integrity, sub-delegation, technology or systems, and regulatory arbitrage.
  • The guidance also gives examples on order identification and designation, including use of the jitney marker, and highlights changes affecting order execution services, direct electronic access, and routing arrangements.

As more execution flows move through automated and intermediated channels, CIRO is making it clearer who is responsible, how orders must be marked, and what supervision has to look like. That raises the operating standard for dealers, trading desks, legal and compliance teams, and firms providing marketplace access. Electronic access remains open, but responsibility for supervision, order marking, and control cannot blur as more parties exist between the client and the marketplace.

Bipartisan Senate Bill Targets Sports Prediction Contracts

Mar 23, 2026, United States
  • Senators Adam Schiff and John Curtis introduced the Prediction Markets Are Gambling Act to prohibit CFTC registered entities from listing contracts that resemble sports bets or casino style games.
  • The press release says a March Madness winner contract has already exceeded $100 million in trading volume and Super Bowl prediction market volume topped $1 billion in 2026.
  • The bill argues these contracts are being offered in all 50 states, including states that restrict or prohibit sports betting.
  • The proposal would remove ambiguity in the Commodity Exchange Act and push sports style event contracts back under state gambling control rather than federal derivatives oversight.

This raises the risk that sports prediction markets face a direct statutory limit before the category settles into a stable regulatory path. Congress is now testing whether these contracts belong inside federal market infrastructure or back inside state gambling rules. Important for exchanges, prediction market operators, legal teams, and investors betting on event contracts as a durable product category.

AI Finance And Data Governance

US Treasury Launches AI Innovation Series For Financial Stability

Mar 23, 2026, United States
  • Treasury says the Office of the Financial Stability Oversight Council and Treasury’s Artificial Intelligence Transformation Office launched an AI Innovation Series, described as a public private initiative focused on financial system strength and resilience.
  • The series will run across four roundtables that convene financial institutions, technology firms, regulators, and specialized experts to focus on high value AI use cases and practical approaches for scaling AI while preserving safety and soundness.
  • Treasury frames AI adoption as increasingly embedded across fraud detection, cybersecurity, credit underwriting, and operational risk management, and it links the series to how governance and supervisory approaches keep pace with enterprise AI deployment.

This series puts AI governance in focus for banks and fintechs, especially around model risk, cybersecurity controls, and how supervisors assess AI driven decisioning inside core workflows.

Banking And Credit

China Pushes Blockchain In Bank Tax Lending Model

Mar 27, 2026, China
  • China’s State Taxation Administration and National Financial Regulatory Administration jointly told local tax authorities and banks to deepen the bank tax interaction model and encouraged the use of blockchain and privacy computing for compliant innovation.
  • The notice tells banks to improve credit models, raise loan approval efficiency, and expand financing support for compliant taxpayers, especially small businesses.
  • An official explainer says the bank tax interaction mechanism had delivered 45.1772 million loans totalling 15.7 trillion yuan by the end of 2025.

China is using tax data, regulated data sharing, and specific technologies to push more SME credit through banks. That is a lending infrastructure signal, not just a blockchain headline.

Conclusion

Regulators are setting clearer boundaries, and infrastructure is moving into production at the same time. That combination raises the cost of getting it wrong and shortens the window to get it right. Teams need working controls, real vendor oversight, and systems that hold up under load before scaling anything customer facing. NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets, subscribe to NCFA weekly newsletter updates, view a rundown of current fintech news and insights, or dive into the latest fintech industry research.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

McKinsey AI Vulnerability Reveals Enterprise Risk

Mar 26, 2026 | NCFA Insight | Artificial Intelligence And Data

AI Image laptop with confidential access

Internal AI Security Gaps Expose Real Operational Risk

On March 1, 2026, CodeWall, a security research firm focused on AI systems, privately reported security gaps to McKinsey. The firm said its agent found 22 unauthenticated endpoints, then chained a SQL injection issue and other weaknesses to gain read and write access across the production environment. CodeWall said the reachable data included 46.5 million chat messages, 728,000 files, 57,000 user accounts, 384,000 AI assistants, and 94,000 workspaces. It also said prompts, model configurations, and RAG related data were reachable.

On March 2, 2026, McKinsey acknowledged the findings and patched the unauthenticated endpoints the same day.

On March 9, 2026, CodeWall publicly shared research on vulnerabilities in McKinsey’s internal AI platform Lilli.

On March 11, McKinsey released this statement about the vulnerability and that a third party forensic review found no evidence that unauthorized parties accessed client data or client confidential information.

What Actually Happened

Public API documentation appears to have exposed a map of the system. Some endpoints reportedly required no authentication. One of them allegedly allowed database manipulation through JSON keys, which opened the door to SQL injection. From there, CodeWall said it could determine live production data and reach much deeper parts of the platform.

This incident doesn't point first to a model failure. It points to ordinary application security weaknesses around an AI system that had become deeply embedded in internal work.

McKinsey’s Response and What It Means

McKinsey didn't confirm the full scale of the researcher claims. Instead, it focused on the response. The company said it fixed the issue quickly and found no evidence that unauthorized parties accessed client data or client confidential information.

See:  OSFI and GRI Workshops Reveal What Regulated AI Needs

Having said that, the reported scale of reachable internal material was large enough to raise questions about internal knowledge exposure, employee work patterns, and intellectual property concentration in one system.

CodeWall said prompt and configuration layers were reachable. If true, it means a bad actor could have potentially altered how the system retrieves information or generates answers. In an internal AI tool, that can create wrong outputs that look normal to staff.

That's where this type of incident becomes more useful for fintechs and financial firms. A publicly visible outage gets noticed whereas quietly altered outputs may not. In regulated environments, that can affect approvals, reviews, client treatment, policy interpretation, and internal decision support before anyone spots the pattern.

The Wider Lesson For Financial Services

Banks, lenders, insurers, wealth firms, and fintechs are building similar internal AI layers right now. They connect those tools to policy documents, research, support logs, internal files, and customer related workflows because it saves time and helps staff move faster.

See:  Gilles Brassard Turing Award Puts Quantum Security In Focus

But that convenience comes with risk given that AI often pulls sensitive access into one place. If permissions are weak, endpoints are exposed, or prompt controls aren't protected, one internal tool can become a wider point of failure.

A key lesson founders and operators should take from this case, is to ask whether the application around it is locked down, whether prompts and retrieval rules are treated as sensitive assets, whether permissions are tight, and whether anyone has tested the system the way an attacker would.

Conclusion

Enterprise AI doesn't erase old security mistakes. It can magnify them by concentrating data, access, and trust inside a single interface.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Crypto Self Custody Growth And User Behaviour Data

Mar 26, 2026 | NCFA Feature | Digital Assets Blockchain And Tokenization

AI Image Self custody is changing

Data Shows Trend Towards Self Controlled Crypto Custody

On March 24 2026, a Cointelegraph Research and Trezor report on self custody behaviour put hard numbers behind the trend that's been building for years. Trust in centralized platforms keeps falling. At the same time, self custody is moving out of the expert corner of crypto and into the mainstream for serious users.

The report draws on 375 survey responses and pairs that data with real world exchange failures, wallet design analysis, and a sober look at where users still get hurt. People have watched enough platforms fail, and now they're changing how they hold assets.

1. Trust In Exchanges Declines at Scale

A combined 65% of respondents say they trust centralized exchanges less than they did four years ago. Of that group, 45% say they trust them much less and 20% say they trust them a bit less

33% point to exchange hacks as the main driver. 27% point to collapses such as FTX. Another 26% point to regulatory restrictions.

The trend matches the market’s recent history. FTX exposed an estimated $8B hole in customer funds. QuadrigaCX collapsed amid fraud and broken internal controls. Mt. Gox lost about 850,000 BTC after years of theft and system failures.

The deeper issue is structural. Centralized platforms gather large pools of assets behind a small number of operational and administrative control points. That concentration makes them efficient in good times, but it also makes them attractive targets when something goes wrong. One breach, one fraud, one breakdown in controls, and the damage can spread fast.

2. Users Change Behaviour Fast

Users aren't just frustrated. They're acting on it.

A striking 85% of respondents agree with the phrase “not your keys, not your coins.” That includes 63% who strongly agree. It's becoming standard thinking for people who want lasting control over digital assets.

See:  BitGo Adds USDCx And cBTC Custody On Canton

When asked why they use self custody, 57% say private key ownership is the main reason. Another 24% say maximum security drives the decision.

Most respondents say they would not leave assets on a custodial exchange for more than one month, even without an immediate panic event. In practice, exchanges are starting to look less like vaults and more like temporary access points.

3. Hardware Wallets Now Mainstream

One of the clearest data points in the report is that 36% of respondents actively use hardware wallets.

A hardware wallet keeps your private keys off your phone or computer. You set up a transaction on your device, then confirm and sign it on the hardware wallet. The keys never leave the wallet. This lowers the risk of malware, hacks, and common theft methods.

Hardware wallets protect your keys, but they don’t protect your decisions. They can confirm a transaction comes from your device, but they can’t always tell if you fully understand what you’re approving.

4. Self Custody Still Carries Hard Risk

Phishing is still one of the biggest risks. Attackers copy real wallet brands, fake support messages, and trick users into giving up their recovery phrase. Once that’s exposed, the funds are usually gone.

Blind signing is another major issue, especially with smart contracts. Users approve transactions without fully understanding what they do. The report highlights a real case where a malicious approval led to a $1.4B loss. That alone shows self custody is not just about buying a device and feeling safe.

See:  The Role of a Crypto Wallet in Canada’s Digital Finance Future

Supply chain risk is also real. Some people buy wallets from unofficial sellers and receive devices that have been tampered with or come with preset seed phrases. It compromises the user before self custody even begins.

Physical security is becoming more serious as well. The report cites 74 publicly reported physical attacks on crypto holders in 2025, with at least 9 already recorded in January 2026. These are real world attacks tied to visible holdings and weak operational privacy.

Then there is the quieter problem that rarely gets enough attention, which is backup failure. The report estimates that roughly 10% of circulating Bitcoin supply may already be lost because users mismanage recovery material or lose access entirely. It reminds the market that the biggest long term risk in self custody may not be theft alone. It may be preventable self inflicted loss.

5. Regulation Adds Pressure

Another useful part of the report is its treatment of regulatory risk. Users are not only responding to hacks and insolvencies. They are also responding to the fact that access to funds can be interrupted, such as payment rail seizures, exchange shutdowns, withdrawal suspensions, and enforcement actions that cut off access to custodial accounts. Different cases arise from different legal and operational reasons.

Users who worry about counterparty exposure, platform freezes, or policy driven restrictions increasingly want a self custody setup they can control directly.

AI Image self custody crypto

What Fintech Builders Can Learn

Digital wallets are becoming core control layers in digital asset finance. That assumes customers will keep meaningful balances on platform for long periods of time.

The next real product gap is not only stronger key storage, but clearer intent verification. Users need to know what they are signing, why they are signing it, and what will happen next. That means readable transaction flows, better simulation tools, stronger warnings, clearer address handling, and far less dependence on users interpreting raw contract data on the fly.

Security is central to the user experience. The firms that reduce confusion, expose hidden risk, and make recovery practices easier to manage will offer a match better product experience than companies that assume security begins and ends with cryptography.

See:  Takeaways from the SEC’s Crypto Custody Roundtable

Finally, distribution and engagement models will keep changing as assets move off centralized platforms and into user controlled environments. Markets are evolving toward wallet centered ecosystems, service layers, and infrastructure that works with user sovereignty rather than around it.

Ownership does not create security on its own.  Security comes from repeated good practice. Users need to verify transactions carefully, protect recovery material, source devices properly, and think through physical as well as digital threat models. Put differently, self custody is not a static product state. It is an operating discipline.

Closing Thought

Self custody is no longer a niche behaviour reserved for maximalists, techies, and power users. It is becoming a natural response to broken trust in centralized custody. It moves responsibility away from institutions and toward individuals, which means the next generation of financial products must do more than secure assets. They must help people operate safely in a digital finance world.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Prediction Markets Tighten As Wealthsimple Enters

Mar 25, 2026 | NCFA Insight | Regulation And Policy, Capital Markets And Market Infrastructure

AI image Prediction markets face regulatory pressure

Rules, Product Limits, And A Narrower Canadian Lane

Sports volume built the business. Now rules, surveillance, and product limits will decide who lasts. On March 23, 2026, a bipartisan Senate bill moved to ban sports and casino style contracts on CFTC registered prediction market venues. The Senate release said a March Madness winner contract had already passed $100M in trading volume and that Super Bowl prediction market volume topped $1B in 2026.

Those numbers explain why prediction markets are now under direct pressure from lawmakers. Prediction markets are no longer fringe. They now sit in a fight over who regulates them, which contracts stay allowed, and whether the business still works under tighter rules.

Why Sports Contracts Triggered The Fight

Sports helped prediction markets reach a wide audience fast, but that same growth put them in direct competition with state regulated sportsbooks and tribal gaming interests. The Prediction Market Senate bill to ban sports contracts is aimed straight at that overlap. It would prohibit any CFTC registered entity from listing contracts that closely resemble a sports bet or a casino style game. If it advances, sports contracts would be the first part of the business to take a hit. That in itself wouldn't kill prediction markets, but it would force a reset around contracts that look more like economic, financial, or commercial forecasting and less like entertainment wagering.

Sports contracts brought scale, attention, and league partnerships. NCFA looked at that earlier when the NHL partnered with Kalshi and Polymarket. Sports now look like the part of the business most likely to trigger a stronger federal and state response.

Why Platforms Tightened Rules Now

Polymarket and Kalshi tightened their controls on the same day. On March 23, Polymarket tightened its market integrity rules across both its DeFi venue and its CFTC regulated US exchange. The updated rules ban trading on stolen confidential information, illegal tips, and outcomes a trader can influence.

Kalshi added candidate and athlete trading bans covering political candidates, athletes, referees, coaches, and team staff, and introduced a whistleblower feature to tighten insider risk controls.

These aren't minor changes. They prove Kalshi and Polymarket understand that insider risk is now a live issue. Prediction markets want to be treated as financial infrastructure, but financial infrastructure has to show it can police insiders, document rules, and respond fast when abuse appears. NCFA covered that tension earlier when prediction markets started pricing geopolitical events.

Canada Is Drawing A Different Line

Canada is taking a narrower approach. The Globe and Mail reported today that Wealthsimple cleared a regulatory hurdle to offer forecast contracts in Canada, but only for economic indicators, financial markets, and climate trends. Sports and election contracts are out. Wealthsimple is the second firm to receive this approval in Canada, after Interactive Brokers Canada.

Interactive Brokers Canada has positioned contracts around government, economic, finance, and climate events, not sports books in a different wrapper. The product is already live in Canada on that basis.

Wealthsimple now brings local retail distribution, stronger brand reach, and a better chance of testing whether forecast contracts can find a market here without leaning on the sports volume that pushed the US fight into the open.

What This Means For Business Models

Can a prediction market still grow once sports contracts face a ban, insider screening gets tighter, and compliance costs rise? Some firms may adapt by leaning into macro, rates, inflation, climate, earnings, and other information markets. Others may find that the most profitable contracts were also the ones most likely to trigger a crackdown.

See:  Kalshi Fines MrBeast Editor In Insider Trading Case

The CFTC is also reviewing the rules. On March 12 2026, the CFTC opened an Advance Notice of Proposed Rulemaking on prediction markets and asked for public comment on which event contracts may be contrary to the public interest, how current rules apply, and what changes may be needed. That means this fight is not limited to one Senate bill or one week of headlines. The federal rule in the U.S. is now under review.

For Canadian dealers, fintechs, and market operators, there is room to build forecast products here, but the lane is narrower than in the US.

Insight

Prediction markets  already proved they can attract users and volume. The next test is whether prediction markets can still grow once product limits tighten, regulators draw a harder line around what is allowed, and compliance demands rise.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

OSFI and GRI Workshops Reveal What Regulated AI Needs

Mar 24, 2026 | NCFA Feature | AI Finance And Data Governance

AI Image Risks in AI Finance

OSFI And GRI AI Workshops Show What Regulated AI Needs

On Mar 23 2026, OSFI and the Global Risk Institute published the FIFAI II final report based on four workshops held between May and November 2025. More than 170 participants took part across banks, insurers, asset managers, fintechs, vendors, regulators, academics, and consumer voices.

The report confirms that AI adoption is here, citing 72% AI use at work in financial services and 75% organizational support for AI. While AI is already in use.  The real issue is what still limits its use in regulated decisions and customer outcomes.

The series covered four areas that affect operational, prudential, consumer, and system-wide risk at the same time. Full report and framework: FIFAI II final report and AGILE framework PDF

  1. Security and Cybersecurity workshop PDF
  2. Financial Crime workshop PDF
  3. Financial Stability workshop PDF
  4. Financial Well-being and Consumer Protection workshop PDF

AI Won't Spread At The Same Speed

One of the clearest takeaways is that AI will not spread across finance at the same speed. The first gains will come in internal functions such as fraud detection, surveillance, reporting, cyber defence, and operations. Those areas already have strong data, measurable outputs, and clearer accountability.

Customer-facing decisions are different. Underwriting, advice, product recommendations, and self-serve tools carry more pressure around explainability, fairness, consent, and complaints handling.

AI powered Canadian finance will likely grow faster in control functions than in customer-facing decisions.

Third Party AI Is No Longer Just A Vendor Issue

The report treats third party AI as more than a procurement issue. It highlights growing dependence on external providers for models, infrastructure, and data, along with limited visibility into how those systems work and who sits behind them.

It's important because a failure, outage, or change in access at one provider can affect more than one function at the same time. Fraud controls, underwriting tools, customer service, and risk monitoring can all be exposed together. The financial stability workshop adds to that concern by linking third party dependency to concentration and system level risk.

See: Inside the Feedback Loops Driving AI Failure

Banks, insurers, and fintechs will need stronger oversight of models and providers, better audit access, tested fallback plans, and clearer visibility into the wider supply chain behind key AI services.

Fraud Is Becoming Harder To Contain

AI is improving both offence and defence. The final report points to synthetic identity, deepfakes, voice spoofing, AI assisted cyberattacks, fraud as a service, and disinformation. It notes a sharp rise in deepfake attacks and growing concern about voice verification as AI voice cloning improves.

This reality changes the operating environment. Static controls lose value faster when attack tools get cheaper, stronger, and easier to use. Manual review and occasional rule updates will not be enough. Firms will need faster detection, stronger identity controls, better information sharing, and systems that can adjust while attacks are happening.

Weak Identity And Poor Data Still Limit What AI Can Do

Data problems come up across the whole series, but the larger issue is bigger than data quality alone. Weak identity and fragmented data still limit how far AI can go in regulated finance. The report points to inconsistent data, incomplete records, fragmented platforms, offshore storage concerns, and weak data lineage as barriers to both efficiency and safety.

See:  AI Agents Gain Identity and Wallet Access WCGW

The report doesn't mince words on identity. Canada still doesn't have a widely adopted secure digital identity layer. That leaves onboarding, authentication, consumer channels, remote work, and agent based systems more exposed than they should be. If identity and data remains weak, AI will keep working best in narrower internal use cases and face more limits in customer facing execution.

Board Oversight Has To Show Up In Real Controls

The final report introduces the AGILE framework as part of its overall findings, which stands for Awareness, Guardrails, Innovation, Learning, and Ecosystem Resiliency. The framework calls for stronger governance and oversight, stronger data and risk controls, continued investment in technology and talent, and deeper public private collaboration.

AI oversight cannot remain just at the strategy level. If AI is used in lending, fraud, underwriting, complaints, or customer recommendations, governance has to show up in controls, evidence, escalation, and accountability. In regulated finance, that's what turns AI use from experimentation into something firms can defend and scale.

What Financial Institutions and Fintechs Do Now

The workshop series points to a practical sequence:

First, identify where AI already impacts decisions and controls.

Second, separate the use cases that can scale now from the ones that still need stronger explainability and customer safeguards.

See:  AI Governance Gaps Exposed By Legal Leaders

Third, tighten vendor oversight before dependency grows further.

Fourth, invest more in identity, data lineage (origin and how it's used and updated), and real time fraud controls.

Fifth, show boards stronger evidence instead of high level claims and broad assurance language.

The report also carries a warning worth taking seriously. Firms that move too slowly can fall behind on productivity, resilience, and customer expectations while still facing external AI enabled threats.  One participant line stands out: “The biggest risk is not doing enough.”

Why This Matters For Canada

Canada’s national AI strategy work has focused heavily on trust, safety, and responsible adoption. That is necessary, but this workshop series adds something more useful for operators. It shows where AI use slows once it enters regulated finance: concentrated provider risk, weak identity, fragmented data, explainability pressure, fraud risk, and unclear accountability.

There's a call to action policy lesson here too. Canada doesn't just need AI ambition and adoption. It needs stronger execution layers around Digital ID, data governance, third party oversight, and information sharing if it wants regulated financial AI to scale beyond contained pilots.

The OSFI and GRI workshop series is useful because it takes a holistic approach to identifying and adapting to AI risks in finance. AI is already inside financial systems. The advantage now goes to firms that can prove control, trust, and accountability in live decisions.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

UK FCA Palantir Trial Puts Regulator Data At Risk

March 23, 2026 | NCFA Insight | AI Governance And Data Sovereignty

AI image data sovereignty

Sensitive Regulator Data Meets Foreign AI Access

On March 22, 2026, the Guardian reported that UK Financial Conduct Authority has hired US firm Palantir for a three month trial worth more than £30,000 a week to analyze its intelligence data lake. The reported scope includes highly sensitive material tied to fraud, money laundering, insider trading, case files, suspected wrongdoing reports, and consumer complaints. It's a significant AI governance and privacy risk given that the FCA regulates around 42,000 businesses across the UK's financial ecosystem.

Palantir is a US based data and analytics company that builds software platforms used by governments, intelligence agencies, and financial institutions to organize and analyze large, sensitive datasets. Its systems combine data integration with artificial intelligence and machine learning tools, which allows users to run complex analysis across entire data environments. That capability makes it effective for regulatory and investigative work, and also places it at the centre of ongoing concerns about data access, oversight, and reliance on external vendors in critical public systems.

See:  Mills Review Response Targets AI Execution Barriers

The FCA has stated that Palantir acts only as a processor, the data stays hosted in the UK, the data cannot be used to train Palantir systems, encryption keys for the most sensitive files stay with the FCA, and the data must be destroyed at the end of the contract. These are all good safeguards but that doesn't end the debate.

The real question is whether a regulator should give a foreign AI operator working access to one of its most sensitive data environments.

Foreign AI Dependence Raises The Stakes

The FCA wants better tools to detect financial crime across a very large supervisory perimeter. However, the concern is that once a foreign vendor obtains access to a highly sensitive operating environment, the public risk grows beyond just legal ownership of the data. What happens if controls fail beyond what the contract itself governs?

If a system ingests more than expected, if metadata creates a wider intelligence layer than planned, if privileges become too powerful, or if future use expands beyond the original trial, the exposure can widen even when formal safeguards remain in place. While none of this proves failure it does highlight why sensitive AI contracts and said deployments need much closer scrutiny than standard software procurement.

See:  Canada Risks Falling Behind as UK Lands AI Megadeals

The trial is short, the weekly cost is disclosed in reporting, the data environment is sensitive, and the FCA says it has placed strict limits on processor role, hosting, training use, encryption control, and deletion. A second report on the FCA Planatir deal indicates the trial is designed to test whether advanced analytics an improve fraud detection, AML/KYC procedures, and insider training within the scope of firms the FCA supervised.  But most already concur that AI, if given enough data, can perform small miracles compared to current data tools.

So the harder policy question becomes are the current safeguards enough when the downside of failure is so high, and the data risk in question is a primary financial services regulator, and not a low sensitivity pilot?

Many jurisdictions now rely on a small number of leading foreign AI and cloud firms to quickly integrate, operate, and scale advanced systems.  Once workflows, analytics, procurement, and staff capability start to rest on a handful of outside platforms, exiting becomes more difficult due to dependence.

A country can keep data local and still lose practical control if key capability depends on foreign firms for models, compute, software layers, and operational support. This is why the question is bigger than privacy alone. It reaches into resilience, sovereignty, and the future of digital public infrastructure.

Europe And Canada Know This Debate

Europe is addressing this problem with both law and capacity. The EU AI Act already sets binding rules for higher risk AI use, while the EU’s wider strategy ties AI policy to competitiveness and technological sovereignty. The question in Europe is no longer whether to regulate AI. It is how to enforce those rules while building enough domestic capacity to avoid overdependence on foreign providers.

See:  Gilles Brassard Turing Award Puts Quantum Security In Focus

Canada isn't yet at Europe’s stage. Ottawa still leans on privacy law, sector rules, and evolving AI policy rather than a fully enacted economy wide AI framework. It is progressing more directly on capability, though. The Canadian Sovereign AI Compute Strategy makes clear that domestic control over compute and data infrastructure is a matter of national security and economic resilience issue, not only an industry growth objective.

That concern is already visible in Canadian data. In Canada AI Strategy Confronts Capital Flight, federal consultation inputs point to risks around sovereign capital, procurement, domestic IP retention, and keeping more AI value inside Canada. Also, the acceleration of AI deployments is exposing AI Governance Gaps that many legal experts have flagged.

Takeaway

The FCA Planatir contact creates at least five questions Canadian policymakers should ask early.

  • Is the use case sensitive enough that outside operational access should be tightly limited?
  • Are processor and subprocessor rights narrow and auditable?
  • Can the system be replaced without major lock in?
  • Are impact assessments public and meaningful?
  • Does domestic capacity exist for the most sensitive layers?

The AI race isn't just about who deploys and adopts first. It's also about who keeps control over sensitive data, institutional leverage, and critical digital infrastructure while deploying.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

NCFA Weekly Fintech Intelligence Mar 14-20, 2026

March 20, 2026 | NCFA Fintech Whisperer Weekly Intelligence | Digital Assets Blockchain And Tokenization, Capital Markets And Market Infrastructure, Regulation And Policy, Payments And Market Infrastructure

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026).

Weekly Fintech Market Intelligence Mar 14 - 20, 2026

Digital Assets

CIRO Adds Newton Crypto Ltd. As A New Member

Mar 20, 2026, Canada
  • CIRO publishes a member bulletin that lists Newton Crypto Ltd. as a new member.
  • The bulletin provides formal notice that Newton has received CIRO membership.
  • This expands the set of firms operating under CIRO oversight in the Canadian crypto dealer landscape.

This adds a new regulated counterparty node for banks, payment partners, and fintech vendors that use CIRO membership as a gating factor for onboarding, integrations, and supervised operating scope.

Apex And Coinbase Launch Tokenized Bitcoin Fund On Base

Mar 19, 2026, Global
  • Apex Group and Coinbase Asset Management launched a tokenized share class of a Bitcoin yield fund on Base.
  • The structure uses ERC-3643 with identity and eligibility rules enforced at the token level.
  • Investor onboarding runs through a Tokeny portal, and token records remain aligned with the fund’s NAV.
  • The product is offered to institutional and accredited investors.

This puts fund distribution onchain with rules built into the asset. Transfers can enforce who can hold and trade without separate manual checks. That changes how funds issue, manage investors, and handle transfers. It points to tokenized fund infrastructure moving into live use, not pilots.

CIRO Tests Lower Margin For Stablecoin Inventory At Three Platforms

Mar 19, 2026, Canada
  • CIRO approved three InnovateSafe applications to test reduced margin rates for firm inventory positions in certain fiat backed stablecoins.
  • The test applies to NDAX, Shakepay, and Wealthsimple Investments.
  • CIRO says the pilot uses a tiered margin approach with enhanced controls, monitoring, reporting, and conservative concentration limits.
  • The test applies only to firm inventory positions and will run for one year unless modified, suspended, or terminated earlier.

This affects crypto trading platforms, market makers, treasury teams, and regulators watching stablecoin market structure in Canada. Lower margin on eligible inventory can improve capital efficiency and balance sheet use, but only inside a tighter control framework. It means regulated treatment of stablecoins is moving deeper into prudential design, not just disclosure and registration.

S&P 500 Licensed For Perpetual Trading On Hyperliquid

Mar 18, 2026, United States
  • S&P Dow Jones Indices licensed the S&P 500 to Trade[XYZ] for what it describes as the first officially licensed perpetual derivative tied to the benchmark.
  • The product launches on Hyperliquid and gives eligible non US investors 24/7 access to leveraged long or short exposure without fixed expiry.
  • S&P says the move extends the S&P 500 liquidity ecosystem on chain, putting a core equity benchmark onto a crypto native trading venue.
  • The structure follows crypto perpetual markets while using S&P index data, linking traditional benchmark exposure to on chain trading rails.

A core global index now trades outside exchange hours. Price formation can start on crypto venues before futures markets reopen, which puts pressure on where liquidity shows up first. If activity builds on chain, traditional venues risk reacting instead of leading. For brokerages, exchanges, and market infrastructure providers, this is not theoretical. Firms need to decide whether to support 24/7 access, how to manage risk when markets never close, and how to compete with venues that remove time and geographic limits.

SEC And CFTC Publish Crypto Asset Interpretation

Mar 17, 2026, United States
  • The SEC published an Interpretive Release on how federal securities laws apply to certain crypto assets and crypto asset transactions, and the CFTC joined the interpretation.
  • The release sets out a token taxonomy covering digital commodities, digital collectibles, digital tools, stablecoins, and digital securities.
  • The SEC says the interpretation explains how a non security crypto asset may become subject to, and later cease to be subject to, an investment contract.
  • The release also addresses airdrops, protocol mining, protocol staking, and the wrapping of a non security crypto asset. The SEC also published a fact sheet summarizing the interpretation.

Crypto issuers, exchanges, custodians, brokers, investors, and token builders now have a clearer US reference point for token design, disclosures, and jurisdiction planning. The practical implication is significant. Firms exposed to staking, airdrops, wrapped assets, stablecoins, or token distribution models can reassess compliance, product structure, and market access strategy with more precision across SEC and CFTC lines.

Banking

US Banking Agencies Move To Modernize Capital Rules

Mar 19, 2026, United States
  • The Federal Reserve, FDIC, and OCC requested comment on three proposals to modernize the regulatory capital framework for banks of all sizes.
  • The agencies say the proposals would streamline capital requirements and better align regulatory capital with risk.
  • The stated goal is to maintain the safety and soundness of the banking system while updating the capital framework.

This is for banks, lenders, treasury teams, and fintechs that rely on bank balance sheets and bank distribution. Capital rules affect lending capacity, pricing, and risk appetite. A lighter or more targeted framework can change how banks allocate capital and where they are willing to compete.

Close Brothers Speeds Cost Cuts And AI Rollout As Banking Pressure Builds

Mar 17, 2026, United Kingdom
  • Close Brothers says it is accelerating its cost program, with annualized savings of about £25 million in FY 2026 and £60 million by the end of FY 2027.
  • The bank says the program includes outsourcing, offshoring, reducing office space, and increasing the use of AI and automation.
  • Reuters reports the plan includes about 600 job cuts by 2027, roughly 20% of staff.
  • Close Brothers reported a statutory pre tax operating loss of £65.5 million for the half year and increased its motor finance commission provision to £300 million.

Banks facing margin pressure, conduct costs, and weak returns are under more pressure to lower their operating base faster. The practical implication for lenders, fintechs, and banking vendors is that AI and automation are moving from pilot projects into cost and staffing decisions. Firms that can automate servicing, operations, and control workflows without weakening customer outcomes or compliance will be in a stronger position.

Regulation And Policy

FCA Updates Regulatory Priorities Reports And Replaces Portfolio Letters

Mar 19, 2026, United Kingdom
  • The FCA states it is introducing 9 annual Regulatory Priorities reports to replace portfolio letters.
  • The page shows publication dates across sectors including wholesale markets dated Mar 19, 2026, and a payments report dated March 2026.
  • The FCA notes it does not publish a cryptoasset sector priorities report because a new UK cryptoasset regime is scheduled for October 2027.

This gives UK facing fintechs and suppliers a cleaner map of where supervisors focus and where firms should spend compliance and product time. Payments, retail banking, consumer finance, and wholesale market firms can now align internal control roadmaps to sector specific priorities instead of broad portfolio letters, which tightens how boards and senior managers justify investment decisions.

Canada Flags Weak Procurement Competition And Paths To Improve Access

Mar 17, 2026, Canada
  • A federal report from the Office of the Procurement Ombud examines two issues that weaken competition: procurements that receive only one bid and solicitations that are cancelled before award.
  • Across 17 procurement practice reviews from 2018 to 2023, only one bid was received in 53 of 180 open processes and 106 of 303 limited competitive processes.
  • The report points to restrictive criteria, misaligned evaluation methods, complex rules, and poorly defined requirements as key causes that limit supplier participation.
  • Recommendations include better requirement design, stronger justification for cancellations, potential payment of bid costs, and broader use of anti collusion certification.

Federal procurement remains difficult for new entrants to access, with complexity and restrictive design favouring repeat suppliers. At the same time, the report outlines clear changes that could open participation, improve competition, and expand access for fintech, govtech, and smaller vendors seeking to sell into government.

Payments And Market Infrastructure

China Expands Bank Access To Digital Yuan

Mar 20, 2026, China
  • Reuters reports China plans to add 12 more banks to its digital yuan program, on top of the 10 banks already authorized.
  • The new group is expected to include joint-stock and city commercial banks such as Shanghai Pudong Development Bank, China Everbright Bank, and Bank of Ningbo.
  • Reuters says digital yuan transactions reached a cumulative 16.7 trillion yuan as of last November, versus 128 trillion yuan in total payments transacted in 2025 alone. The report says China continues to pair e-CNY expansion with a ban on stablecoins and broader crackdown on virtual currencies.

China is widening the distribution base for state digital money inside the banking system. Analysts see the bigger role in cross-border settlement and in building a payments channel that's outside dollar-based infrastructure such as SWIFT. China is pushing public digital money deeper into bank distribution while closing space for private stablecoin models.

Payments Canada Approves Meridian As First New Provincial Credit Union Member

Mar 19, 2026, Canada
  • Meridian Credit Union (Ontario's largest credit union) becomes a Payments Canada member as the first credit union to obtain membership following expanded eligibility requirements.
  • The approval ties to expanded membership eligibility under amendments to the Canadian Payments Act.
  • In January 2026, Payments Canada Admitted Five New Payment Service Providers, including Wise Payments Canada, Float, KOHO, Paramount Commerce, and Brim Financial.

This expands direct access for credit unions that want to build or buy modern payment capabilities. Credit unions, processors, and fintech partners can now plan for real system participation, not just eligibility on paper.

Thunes Connects Stablecoin Payouts To Banks Through Swift

Mar 17, 2026, Global
  • Thunes says banks can now send payouts to stablecoin wallets through existing Swift connectivity.
  • The company says this opens access for the 11,500 institutions on the Swift network to more than 500 million stablecoin wallets worldwide.
  • The service supports USDC and USDT and enables real-time payouts in more than 140 countries.
  • Thunes says the rollout requires no additional integration and builds on its Pay-to-Stablecoin-Wallets product launched in October 2025.

This is for banks, cross-border payment firms, remittance providers, treasury teams, and stablecoin infrastructure players. Stablecoin payouts are moving closer to standard bank payment flows instead of sitting outside them as a separate integration project. That lowers friction for bank adoption and puts more pressure on legacy cross-border payout models.

Mastercard Acquires BVNK To Connect Fiat And Stablecoin Rails

Mar 17, 2026, Global
  • Mastercard agreed to acquire stablecoin infrastructure firm BVNK to connect on chain payments with its global payments network.
  • The company pointed to about $350B in digital currency payment volume in 2025 as demand grows for hybrid fiat and stablecoin settlement.
  • The deal focuses on cross border payments, payouts, and enterprise treasury use cases that combine bank rails with digital asset settlement.

Mastercard is building direct control over how funds move between bank accounts and stablecoin systems. That changes routing, pricing, and who captures value in cross border and treasury flows. For fintechs, payment products will increasingly need to support both fiat and digital settlement paths in the same workflow. For banks, this puts more pressure on correspondent banking and other legacy cross border revenue lines.

Capital Markets And Funding

CIRO Launches Disgorgement Distribution Program To Return Funds To Harmed Investors

Mar 19, 2026, Canada
  • Effective date is April 1, 2026.
  • The program enables distribution of funds collected under disgorgement orders to investors financially harmed by registrant misconduct.
  • Administrative Bulletin 26 0062 sets out program scope and the claims based process, with supporting policy and procedures in appendices program policy and procedures.

This changes how investor harm connects to enforcement outcomes. Dealers, registrants, and their vendors now need tighter client records and cleaner evidence trails because the process depends on what harmed investors can prove and what firms can produce quickly and accurately when claims arrive.

CSA Adopts Semi Annual Reporting Pilot For Venture Issers

Mar 19, 2026, Canada
  • The CSA allows eligible TSXV and CSE issuers to report financials semi annually instead of quarterly on a voluntary basis.
  • The pilot removes first and third quarter reporting requirements under National Instrument 51-102 for participating issuers.
  • The CSA states the goal is to reduce compliance burden while maintaining investor protection.
  • The results will inform future rule changes for broader adoption.

This lowers reporting cost and workload for smaller public companies. It changes how often new financial data enters the market. Investors and data platforms will have less frequent updates. For issuers, this improves the economics of staying public. If adopted more widely, it moves Canada toward a lighter reporting model for venture markets.

EU Industry Calls For Changes To DLT Pilot Regime

Mar 19, 2026, European Union
  • An industry group coordinated by the European Digital Finance Association submitted an open letter to the European Commission calling for changes to the EU DLT Pilot Regime.
  • The letter highlights constraints limiting scale, including participation thresholds, asset scope limits, and operational frictions between DLT and traditional market infrastructure.
  • The proposal calls for expanded scope, interoperability requirements, and clearer regulatory treatment to support tokenized securities markets.

Industry participants are pushing to remove limits that keep tokenized market infrastructure in pilot mode. That pressure targets how quickly the EU can move from controlled testing toward scalable digital asset markets.

SEC Approves Nasdaq Rule For Tokenized Securities Trading

Mar 18, 2026, United States
  • The SEC approved a Nasdaq rule change to enable trading of securities on the exchange in tokenized form during DTC’s tokenization pilot.
  • Eligible participants can trade tokenized versions of certain equity securities and exchange traded products, including Russell 1000 securities and ETFs that track major indices such as the S&P 500 and Nasdaq 100.
  • Tokenized shares will trade on the same order book as traditional shares, with the same execution priority, the same trading symbol and CUSIP, and the same shareholder rights and privileges.
  • Nasdaq says existing order types, routing strategies, connectivity, surveillance, fee schedules, and T+1 settlement will continue to apply, with tokenization handled through post trade instructions to DTC.

Tokenized securities into the core of exchange trading. They will trade the same way as regular shares, on the same book, with the same symbol and rules. No separate venue, no parallel system. It removes a major barrier with tokenization now aligned with the same clearing, settlement, and surveillance systems as the rest of the market.

Upstart Secures A $1B Forward Flow Loan Purchase Commitment

Mar 17, 2026, United States
  • Eltura Capital Management, Aperture Investors, and co investors agree to purchase up to $1B of consumer loans originated through the Upstart platform.
  • The agreement runs for 12 months and builds on an existing relationship.
  • View the release. Upstart Forward flow announcement

A forward flow commitment supports predictable loan takeout capacity, which can stabilize origination volume when bank balance sheets tighten or pricing changes.

SEC Prepares Proposal To End Quarterly Reporting Requirement

Mar 16, 2026, United States
  • The SEC is preparing a proposal that would remove the requirement for public companies to report earnings every quarter.
  • The change would allow companies to report financial results every six months instead of every 90 days.
  • The proposal has not been formally released and the SEC has not issued an official statement.
  • The report is based on coverage by the Wall Street Journal and confirmed by Reuters.

Public companies, investors, analysts, and fintech platforms that rely on earnings data will face longer gaps between official disclosures. Less frequent reporting reduces the flow of standardized financial data into the market. Firms that can generate alternative data, continuous signals, and independent performance insight will have an advantage as reliance on scheduled earnings reports declines.

PhonePe Pauses IPO As Market Volatility Hits Fintech Exit Timing

Mar 16, 2026, India
  • Reuters reports Walmart backed PhonePe paused its IPO plans on Mar 16 as geopolitical tensions and market volatility hit investor sentiment.
  • Reuters says the Indian fintech had targeted a valuation of about $9 billion to $10.5 billion.
  • In a company statement carried by local market coverage, CEO Sameer Nigam said PhonePe remains committed to a public listing in India and will resume the process when global capital markets stabilize.

When one of India's largest fintech payments company pauses an IPO, it tells founders, investors, and late stage boards that the public market window remains fragile. That affects valuation expectations, liquidity planning, and timing for other fintech listings.

Conclusion

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets, subscribe to NCFA weekly newsletter updates, view a rundown of current fintech news and insights, or dive into the latest fintech industry research.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter