Category Archives: Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech

NCFA Weekly Fintech Intelligence Oct 17-Oct 23, 2026

Oct 17, 2026 | Last Updated: Oct 30, 2026 | NCFA Fintech Whisperer | Artificial Intelligence And Data, Capital Markets Infrastructure And Funding, Competition And Market Structure, Cross Border Payments And FX, Cybersecurity Fraud And Financial Crime, Digital Assets Blockchain And Tokenization, Digital Identity And Trust, Embedded Finance, Payments Infrastructure And Money Movement, Regulation And Policy, Risk Compliance And Regtech, Sustainable Finance ESG And Financial Inclusion, Digital Banking And BaaS, Treasury Liquidity And Cash Management, Wealthtech Investing And Trading, Open Banking Open Finance And Data Sharing

Fintech market intelligence visualization

] Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors. This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis. (Missed prior week's Fintech Whisperer? (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-March 13, 2026, March 14-March 20, 2026, March 21-March 27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-June 12, 2026, June 13-June 19, 2026, June 20-June 26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-July 24, 2026, July 25-July 31, 2026, August 1-August 7, 2026, August 8-August 14, 2026, August 15-August 21, 2026, August 22-August 28, 2026, August 29-September 4, 2026, September 5-September 11, 2026, September 12-September 18, 2026, September 19-September 25, 2026, September 26-October 2, 2026, October 3-October 9, 2026, October 10-October 16, 2026).

Weekly Fintech Market Intelligence Oct 17 - Oct 23, 2026

Digital Banking And BaaS

Sezzle Files to Establish a U.S. National Bank

October 22, 2026, United States
  • Sezzle filed an application with the Office of the Comptroller of the Currency to charter Sezzle Bank, N.A. and separately applied to the Federal Deposit Insurance Corporation for deposit insurance.
  • If approved, the bank would offer FDIC insured checking and savings accounts along with credit products. Sezzle says it would focus on digitally native consumers, including people who are new to credit or prefer buy now pay later products over traditional credit cards.
  • A national charter would bring Sezzle Bank under OCC supervision for safety and soundness, consumer compliance, Bank Secrecy Act and anti money laundering controls, and fair lending. Sezzle also plans to become a bank holding company supervised by the Federal Reserve.

Sezzle is trying to move from distributing credit through banking partners toward owning a federally supervised banking platform. If approved, that would give it more control over deposits, credit products, funding and customer economics. The next signals are OCC and FDIC decisions, capital requirements and how much of Sezzle's current partner model eventually moves inside the bank.

NORTHGUARD Buys Wiseday to Build Canadian Mortgage Lender

October 20, 2026, Canada
  • NORTHGUARD Financial launched as a Canadian mortgage lender and servicer and announced its purchase of Wiseday, an established mortgage lender in Quebec. Financial terms weren’t disclosed.
  • The company combines a Canadian built, AI enabled lending and servicing platform with Wiseday’s lending operations. It plans to serve brokers, capital partners and homeowners across prime and alternative mortgages.
  • A national rollout is planned through 2027. The announcement doesn’t establish that every product or market is already live.

Mortgage technology only earns its place when it improves underwriting, servicing and broker economics. NORTHGUARD has acquired an operating base rather than starting with software alone. Founders and capital partners should watch how quickly it expands beyond Quebec, how it funds mortgages and whether faster decisions translate into stronger loan performance.

Ramp Applies for US National Trust Bank Charter

October 19, 2026, United States
  • Ramp publicly announced on October 19 that it submitted an application to the Office of the Comptroller of the Currency (OCC) on October 16 to establish Ramp National Trust Bank.
  • If approved, the proposed national trust bank would provide fiduciary investment management and digital asset custody under federal supervision. It would not accept deposits or make commercial loans.
  • The proposed bank would operate alongside Ramp's existing banking partners. No charter approval or launch date has been announced. Ramp recently raised US$1.85 billion at a US$60 billion valuation.

Ramp is seeking direct control over regulated investment and custody capabilities rather than relying entirely on external providers. Following its recent funding and expansion, the charter application adds another route for the company to broaden its financial services business. The key tests are OCC approval, which capabilities Ramp brings in-house, and how the new entity would work alongside existing bank partners.

SoFi Launches 4.40% Tokenized Consumer Bank Deposit

October 22, 2026, United States
  • SoFi launched SOFIE, an interest-bearing tokenized consumer deposit representing US$1 held at SoFi Bank. The advertised yield at launch is 4.40% APY, with applicable FDIC insurance limits.
  • Members can convert SOFIE at a 1-to-1 rate into SoFiUSD to make blockchain transfers or buy crypto. SOFIE is a bank deposit; SoFiUSD is a separate payment stablecoin.
  • SoFi says customers can access SOFIE through its crypto account. The 4.40% APY is variable, and deposit insurance applies only to qualifying funds within the relevant limits.

SoFi is testing whether customers will keep digital dollar balances at a bank until they need to transact. The split between an insured deposit and a transferable stablecoin is commercially important because the legal protections change at conversion. Banks and fintechs should compare yield, redemption terms and access rather than treating both tokens as the same product.

Finom Opens Permissioned Business Account Data to AI Assistants

October 22, 2026, Netherlands / Europe
  • Finom launched an MCP connection for ChatGPT and Claude that lets business customers ask questions about transactions, invoices, cards and accounting data in natural language.
  • The service is available across Finom plans in Europe to a customer base the company puts at more than 300,000 businesses. Customers authenticate with Finom and can revoke the connection.
  • Access is limited to the user’s existing account permissions. The current connection is read-only; it cannot initiate payments, issue cards or change account settings.

Banks are starting to offer controlled data access where customers already work with AI, rather than forcing every question back into a banking app. Finom’s read-only design keeps the risk boundary relatively clear. The test is whether business owners use it routinely and whether future payment permissions can be added without sacrificing that control.

Artificial Intelligence And Data

Starling Bank Deploys AI Investigator for Financial Crime

October 21, 2026, United Kingdom
  • Starling Bank disclosed that its agentic financial crime investigator has been operating for about three weeks inside the bank’s core banking engine. The disclosure came from its chief customer and banking officer, Bernadette Smith.
  • Smith says the system investigates transaction monitoring alerts, records its audit trail and returns a reasoned decision in less than 17 seconds per alert. She compares that with 15 to 30 minutes of manual review.
  • The system uses Starling’s own data and model, with access to live transaction context. The bank hasn’t published independently tested accuracy rates, false positive results or cost per investigation.

A bank can now test whether AI cuts investigation costs without losing control of the decision trail. Starling’s approach also raises the bar for vendors that sit outside the banking core. But speed isn’t enough. Compliance teams still need to know when a decision should be challenged, who owns an error and whether the economics hold across higher risk cases.

ECB Tells Banks to Submit AI Cyber Risk Action Plans

October 20, 2026, Euro Area
  • The European Central Bank says supervised banks are expected to submit concrete action plans by the end of October showing how they will address cyber risks created by more capable AI systems.
  • The ECB asked banks to reassess cybersecurity measures as well as related IT budgets and staffing. It warns that advanced AI can find and exploit vulnerabilities faster than existing defensive processes may respond.
  • Supervisory concerns extend beyond cyber attacks. The ECB also flags model dependence, bias, poor data quality and concentration risk where banks rely heavily on a small group of cloud providers.

AI risk is moving from broad supervisory concern into bank level remediation work. The practical question is no longer whether banks recognize the threat. It's whether they can show the ECB who owns the risk, what systems need investment and how quickly controls can change as models become more capable. NCFA first tracked the supervisory direction in ESRB Warns Frontier AI Models Could Strain Cyber Resilience. The October action plans turn that warning into an execution deadline.

FCA Publishes AI Practices for Financial Firms

October 19, 2026, United Kingdom
  • The Financial Conduct Authority published examples of good practice and areas for improvement in financial services AI, drawing on supervisory work, AI Live Testing and its Supercharged Sandbox. The examples apply to machine learning, generative AI and agentic AI.
  • The FCA says existing requirements already apply when firms use AI. Its examples cover consumer outcomes, governance, monitoring, senior management accountability, human oversight, operational resilience and third party dependencies. The publication does not create new requirements.
  • Good practices include testing outcomes before deployment, maintaining auditable records, setting clear escalation routes and monitoring live performance. Weak practices include unclear ownership, retrospective governance, poor documentation and reliance on AI vendors without enough testing or exit planning.

The FCA has made current obligations easier to test against real deployment patterns without creating a separate AI rulebook. Firms can compare their controls with concrete supervisory examples before weak ownership, monitoring or vendor dependence becomes an operating problem. NCFA has been tracking the same AI governance and compliance costs as financial institutions move from experiments into live workflows.

Capital Markets Infrastructure And Funding

SEC Registers Cboe Clear U.S. to Clear Binary Securities Options

October 22, 2026, United States
  • The U.S. Securities and Exchange Commission granted Cboe Clear U.S. temporary registration as a securities clearing agency, expanding its authority beyond futures and swaps into securities products.
  • The registration allows Cboe Clear U.S. to provide central counterparty clearing for binary securities options. Cboe says its first use will be clearing binary options tied to specified corporate key performance indicators that are planned for Cboe Options Exchange and Robinhood.
  • The approval creates another registered clearing route for securities options alongside the existing U.S. clearing infrastructure. Cboe Clear U.S. is already registered with the CFTC as a derivatives clearing organization.

This expands the market infrastructure available for event driven securities products before the products themselves reach investors. The commercial test is whether Cboe and Robinhood can turn the new clearing authority into meaningful trading volume while keeping the risk, margin and settlement controls expected of regulated securities markets.

LSEG Agrees to Buy Octus for US$3.535B

October 22, 2026, United Kingdom / United States
  • London Stock Exchange Group agreed to acquire Octus for US$3.535 billion in cash, moving beyond the acquisition talks it confirmed on October 13. Closing is expected in the first half of 2027, subject to regulatory approval.
  • Octus serves 750 customers and more than 40,000 users across private, illiquid and distressed credit. It has more than 900 employees and expects over US$300 million in 2026 revenue with an adjusted EBITDA margin of about 40%.
  • LSEG plans to combine Octus data and workflows with Workspace, LPC, Yield Book, PRS and Tradeweb. Octus also distributes data through an MCP connector and AI workflows, giving LSEG another route into private credit research and decision tools.

Private credit is becoming too large for market data firms to treat as a side business. LSEG is paying for proprietary information, workflow and distribution in a market it estimates at US$3.5 trillion. Investors should watch whether the deal improves pricing and risk visibility in less liquid credit or simply concentrates more valuable data inside one platform. The commercial upside depends on cross selling without weakening the specialist product customers already pay for.

Canada Opens C$1.75B Venture and Growth Capital Programs

October 22, 2026, Canada
  • Canada announced C$1 billion for the Growth VCCI, including C$700 million for funds of funds, C$200 million for life sciences and C$100 million for emerging fund managers. The fund-of-funds application window closes January 21, 2027.
  • A separate C$750 million Early and Growth Stage Investment Strategy allocates C$75 million to pre-seed and seed activity and C$675 million to later-stage growth. Feedback on the latter stream closes November 23, 2026.
  • The government expects the combined plan to attract at least C$3.8 billion in private capital. This is a projection, not money already raised or invested; BDC will administer the C$750 million strategy.

Fund managers have a new capital application window, but founders still need to meet the investment criteria of the funds receiving public commitments. The capital won’t necessarily reach businesses outside the venture model. The immediate tests are which managers apply, how they attract pension and private capital, and whether founders beyond established funding hubs gain access.

Kalshi and BitGo Let Traders Borrow Against Crypto for Margin

October 22, 2026, United States
  • Kalshi Prime launched HODL Margining with BitGo Bank & Trust, allowing eligible customers to fund dollar trading margin using loans secured by BTC, ETH or eligible stablecoins.
  • Kalshi Katalyst supplies the dollar loans, with proceeds deposited into Kalshi Prime accounts. Pledged assets remain at BitGo in qualified custody rather than being sold or transferred to the trading venue.
  • Kalshi Prime is a CFTC-registered futures commission merchant. The Katalyst loans are not regulated by the CFTC or NFA; borrowers face interest costs, liquidation exposure and additional leverage risk.

This separates collateral custody from the funding used on a derivatives platform. Traders can keep crypto exposure while obtaining dollar margin, but the convenience comes with another lender, security interest and liquidation process. Custodians and brokers should watch collateral valuation, loan terms and who can act when markets gap outside banking hours.

SEC and France AMF Open Registration Cooperation for Asset Managers

October 20, 2026, United States / France
  • The US Securities and Exchange Commission and France’s Autorité des Marchés Financiers entered into a supervisory memorandum of understanding covering cross-border investment adviser, investment company and investment service provider oversight.
  • The arrangement establishes consultation and information sharing between the two authorities for regulated firms operating across their markets.
  • The SEC confirmed it will process new and pending registration applications from AMF-supervised asset management companies seeking to operate as US investment advisers. The agreement is not an automatic registration approval.

French managers seeking US advisory access have a clearer supervisory cooperation arrangement behind their applications. The practical question is how registration processing, compliance preparation and ongoing examination responsibilities operate under the memorandum. Asset managers expanding internationally should distinguish the renewed application pathway from permission to begin serving clients without SEC registration.

Malaysia Launches Tokenized Bond and Sukuk Infrastructure

October 20, 2026, Malaysia
  • Bank Negara Malaysia launched SSDS+, a new platform for issuing, depositing and safeguarding tokenized bonds and sukuk across Malaysia's financial market.
  • The system builds on Malaysia's existing Scripless Securities Depository and can support wholesale issuance as well as tokenized government and corporate retail bonds.
  • SSDS+ connects with RENTAS+ for secure payment and settlement around the clock. Securities ownership moves through SSDS+, while the cash leg can settle in central bank money.

Malaysia has moved tokenized fixed income into core market infrastructure rather than leaving it in a pilot. That matters because issuance, ownership records and settlement now sit inside infrastructure controlled by the central bank. NCFA previously tracked the earlier groundwork in Bank Negara Malaysia Onboards Ringgit Stablecoin And Tokenized Deposit Pilots. The next test is issuance volume and whether banks, governments and corporate borrowers start using the new rails regularly.

UK CMA Proposes Fairer iPhone Contactless Access

October 20, 2026, United Kingdom
  • The Competition and Markets Authority opened a consultation on a proposed NFC access conduct requirement for Apple’s mobile platform under the UK digital markets competition regime.
  • The proposal would require access for third-party developers on fair, reasonable, transparent and nondiscriminatory terms, addressing access fees and commercial restrictions.
  • The CMA is considering access through both secure element and host card emulation. Responses close November 17, 2026; no final conduct requirement has been imposed.

Mobile wallet providers and fintechs could gain more control over how contactless services reach iPhone users. Fees, available technical methods and contractual access are the practical questions. Firms considering wallet or account-based payment products should examine the consultation now, rather than planning around terms that have not yet been finalized.

Cross Border Payments And FX

Western Union Picks Noah for Stablecoin Remittances

October 20, 2026, United States / United Kingdom / Global
  • Western Union selected Noah to provide stablecoin payment infrastructure for its planned Receiver Redirect service. Noah says the service is designed for more than 60 currencies across over 200 countries and territories.
  • The design uses USDPT issued by Anchorage Digital Bank on Solana. Noah will support the treasury, conversion and payment infrastructure behind the proposed service.
  • Western Union operates more than 500,000 agent locations. The announced network reach describes the intended service footprint, not completed stablecoin transaction volumes or a fully live rollout.

Western Union already has customer distribution and cash access. The harder work is fitting a stablecoin rail into local payout rules, liquidity and customer support. Noah gains an important infrastructure role, but both firms still need to show where customers can actually use the service and whether fees fall without making redemption harder.

Newline and Visa Open Corporate Card Issuing in 40+ Countries

October 19, 2026, United States / Global
  • Eligible US fintechs can now offer Visa corporate cards for approved business use in more than 40 countries through Newline by Fifth Third and Visa's Multinational Program.
  • Cards are issued for local use in each approved country, so transactions are authorized in local currency and processed more like domestic card payments. Newline says the coverage exceeds that of any other bank issuing through the Visa program.
  • The service is aimed at fintechs including expense platforms, HCM providers and vertical software companies. Availability still depends on client, country, regulatory, sanctions and financial crime requirements.

Cross border card programs become expensive when every new country needs another bank relationship and operating stack. Newline is using Fifth Third's balance sheet and Visa's network to give fintechs one route into more than 40 markets. The opportunity is meaningful for software platforms serving global employers and businesses. The real test is whether local authorization and issuing reduce fees and failed transactions enough to justify the added compliance work.

Fiserv Opens Commerce Hub Globally for Cross Border Payments

October 19, 2026, United States / Global
  • Fiserv made Commerce Hub globally available, giving enterprise merchants one connection to local payment methods, acquiring, settlement, reconciliation, reporting and operational controls across markets.
  • Fiserv reports that Commerce Hub supports several billions in processing volume and is growing more than 100% year over year across multiple industries, payment methods and business models.
  • Dell Technologies is using Commerce Hub to support a more unified commerce model and introduced Pix in Brazil through the platform. Fiserv also combines fraud protection, payment optimization and emerging payment methods within the same operating environment.

Fiserv is selling fewer integrations as a cross border growth advantage. Large merchants can add local payment methods without rebuilding settlement, reporting and operational controls market by market. The commercial test is whether that consolidation lowers total payment costs and speeds expansion enough to outweigh the value of using specialized providers in individual countries.

Three Central Banks Expand BLOOM Digital Money Settlement

October 23, 2026, Singapore / Malaysia / Thailand
  • Bank Negara Malaysia and the Bank of Thailand joined Singapore’s BLOOM initiative as policymaker members to develop cross-border use of tokenized deposits and regulated stablecoins.
  • Participants will work on acceptance and settlement, interoperability, and programmable controls covering identity, sanctions and transaction restrictions.
  • New participants include Airwallex, Mastercard, Maybank, Monee, Nium, Ripple, Visa and the World Bank Group. The announcement establishes a joint development effort, not a live shared settlement network.

Cross-border digital money won’t scale if every bank has to negotiate a different settlement and compliance arrangement in every market. BLOOM puts three central banks at the table with the providers building those connections. Operators should follow the actual commercial agreements, supported assets and settlement rules, not just the growing participant list.

Cybersecurity Fraud And Financial Crime

Mastercard Introduces Stablecoin Payment Risk Intelligence

October 19, 2026, United States / Global
  • Mastercard introduced Stablecoin Security, an API-based risk intelligence offering that combines payment context and blockchain analytics across fiat and stablecoin payment flows.
  • The service assesses transaction origin, sanctions exposure, potential scams and other risks before payment completion, with outputs designed for existing fraud, compliance and case management workflows.
  • Borderless.xyz and Keyrails are initial partners. The product is launching first in North America, with wider commercial availability expected during 2027; Mastercard has not published product-specific transaction volumes.

Stablecoin payments are being fitted into existing institutional fraud and compliance operations rather than treated as a separate risk channel. Banks and payment providers will need to test whether the combined intelligence improves decisions across conversion, transfer and payout stages, and how responsibility is divided between partners when a suspicious transaction is held or rejected.

Skyfire and Forter Test Agent Identity at Checkout

October 19, 2026, United States
  • Forter integrated Skyfire Know Your Agent identity data into its existing checkout fraud decisions, distinguishing authorized buying agents from suspicious automated activity.
  • The partners completed a pilot with online retailer Jomashop, which reported nearly 100% checkout success for tested agentic traffic without an increase in chargebacks.
  • Forter reported a more than fourfold increase in agentic orders across its network since August. The Jomashop result is a customer-specific pilot finding, not a network-wide checkout success rate.

Agent-driven commerce needs a way to recognize authorized software without giving fraudsters a free pass. Identity signals that enter the merchant’s existing risk engine offer one practical approach. The next test is whether checkout performance holds across more merchants, higher transaction volumes and contested payments, where evidence of the human mandate matters as much as recognizing the agent.

Digital Assets Blockchain And Tokenization

Participate Uses Tokenized Deposits for Bank Loan Payment

October 19, 2026, United States
  • Vantage Bank and Rio Bank completed a principal and interest payment on a loan participation using tokenized deposits through Participate and Hazel Network.
  • The payment moved between the two Texas banks in less than three minutes. Loan balances and payment notices updated automatically as the funds moved instead of arriving through separate processes.
  • Participate describes the transaction as a first for loan participation or syndication payments between financial institutions using tokenized deposits. The result proves one transaction flow, not broad production volume across the loan market.

Loan participation payments are still full of reconciliation work after the money arrives. Moving the payment and loan records together attacks that operating cost directly. Banks should care less about the token label than whether the process shortens settlement, reduces exceptions and keeps every participant on the same loan balance. Repeat volume across more institutions would turn this from a useful transaction into infrastructure.

JPMorgan Takes JPM Coin Live on Ethereum

October 19, 2026, United States / Global
  • Kinexys by J.P. Morgan made JPM Coin (JPMD), its US dollar deposit token, available on Ethereum mainnet to J.P. Morgan institutional clients, following its earlier rollout on Base.
  • The token gives eligible institutions a form of bank deposit money for activity involving blockchain-based assets and transactions, rather than requiring a stablecoin issuer outside the bank.
  • The announcement establishes Ethereum network availability; it does not disclose separate JPMD-on-Ethereum transaction volumes or make the token generally available to retail users.

Institutional settlement now has another bank deposit option on a public blockchain where tokenized assets already trade. Treasury and digital asset teams can compare the legal claim, eligible counterparties, network access and liquidity against stablecoin-based settlement. The commercial test is whether institutions use the additional network for regular transactions, not simply as another technical connection.

Revolut Gets Gibraltar DLT Licence for Global Crypto Expansion

October 19, 2026, Gibraltar
  • The Gibraltar Financial Services Commission granted Revolut Global Digital Assets Limited authorization as a Distributed Ledger Technology provider under Gibraltar's Financial Services Act.
  • The permission covers the transmission and execution of virtual asset orders, virtual asset custody and staking services. Gibraltar's government also confirmed that Revolut has resumed onboarding local residents to its payments app.
  • Revolut reports more than 80 million retail customers and over 16 million crypto users. The company plans to use the Gibraltar entity to support international digital asset expansion, but target markets and rollout dates have not yet been announced.

Revolut now has another regulated entity it can use to expand crypto services without relying on one licensing base for every market. The value will come from where the Gibraltar permission actually opens distribution, custody and staking at scale. Investors should watch which markets are added, how quickly customers migrate to the new entity and whether regulatory expansion improves revenue without adding disproportionate compliance cost.

Wealthtech Investing And Trading

FINMA Approves Switzerland's First Retail Bitcoin ETF

October 20, 2026, Switzerland
  • FINMA approved Switzerland's first exchange traded retail fund that invests directly in Bitcoin, opening a regulated fund route that was previously limited to qualified investors.
  • The regulator granted an exception from normal diversification rules because Bitcoin has a longer trading history and higher volume than other cryptocurrencies. The fund remains subject to operational and custody safeguards, clear risk disclosure and Swiss conduct rules.
  • FINMA stressed that Bitcoin remains highly volatile and investors can lose a substantial amount of capital. Other providers have also submitted or announced applications for Bitcoin ETFs.

Switzerland already had deep crypto infrastructure, but retail fund approval changes distribution. Wealth platforms and advisers can now offer Bitcoin through a supervised investment product instead of pushing every customer toward direct ownership. The advantage is easier custody and familiar fund controls. The risk doesn't disappear, and competing providers will still have to win on fees, liquidity and investor trust.

Digital Identity And Trust

TerraPay Verify Joins JPMorgan Liink for Payee Checks

October 22, 2026, United Kingdom / United Arab Emirates / Global
  • TerraPay Verify has integrated with Kinexys by J.P. Morgan's Liink Confirm, giving connected financial institutions and nonbank providers access to bank account and digital wallet verification before sending a payment.
  • The integration checks recipient details before money moves. TerraPay cites research estimating that 10% to 15% of international payments fail because beneficiary information is wrong, creating delays, manual work and fraud exposure.
  • TerraPay says its wider network reaches more than 7.5 billion bank accounts across 156 plus countries and 3.7 billion digital wallets. Those network figures describe TerraPay's reach, not the number of accounts already verified through Liink.

Failed cross border payments are expensive because the bank or fintech still absorbs investigation, repair and customer service costs. Connecting verification across bank accounts and wallets gives institutions a chance to catch bad recipient data before funds leave. The value will show up in lower exception rates and fewer fraud losses. Adoption will depend on how much coverage Liink participants can use without adding another slow step to the payment flow.

European Payments Council Starts EU Wallet Payment Rules

October 19, 2026, European Union
  • The European Payments Council announced SCARLET, an industry rulebook initiative for using EU Digital Identity Wallets to authenticate payments. Its board approved the work on September 24 and publicly announced it on October 19.
  • The proposed framework covers shared technical rules, participation terms and responsibility for failed or disputed authentication. It targets interoperability among an expected 3,000 plus payment providers and more than 27 wallet providers.
  • The EPC plans consultation in summer 2027 and a first rulebook in December 2027. No operating scheme has entered into force.

Payment providers can’t afford a different wallet authentication arrangement for every country or partner. A common set of rules could lower integration costs and clarify liability. The industry now has time to shape those rules, but firms shouldn’t treat a published development plan as a completed authentication standard.

World Opens ID Verification Tools for Banking and Finance

October 18, 2026, United States / Global
  • World launched the World ID for banking and finance suite for financial firms seeking to check human presence, identity attributes and interactions involving AI agents.
  • The offering uses cryptographic proofs including Proof of Human, Proof of Presence and Proof of Attributes for customer-facing and internal experiences.
  • Bain Capital, OpenExchange, Outtake, Pantera Capital and VanEck Funds are named initial design partners using the technology. No bank-wide adoption rates or financial transaction volumes were published.

Financial identity checks are extending beyond onboarding into agent interactions, remote approvals and sensitive communications. Firms considering these tools need to test exactly which facts a proof establishes, what data must be retained and who accepts liability if a verified participant still gives fraudulent instructions. Design-partner use is an early distribution step, not proof of broad institutional adoption.

Embedded Finance

Stripe and Anthropic Put Business Payments Inside Claude Duet

October 21, 2026, United States / Ireland
  • Anthropic integrated Stripe Link's wallet for agents and Stripe MCP into Claude Duet, a new app launching in research preview for small business owners and professionals.
  • Owners can ask Claude Duet to make purchases, send invoices and payment links, manage products and prices, analyze revenue and issue refunds. Each purchase still requires owner review and approval before Claude completes it with a virtual card.
  • Stripe says Link already powers payments for more than 200 personal agents. That figure describes Link's broader agent network, not adoption of Claude Duet, which remains in research preview.

AI assistants are moving from advice into execution inside everyday business software. Stripe gives Claude access to payment and commerce tools while keeping the owner at the approval point. For founders, that can cut routine admin without handing an agent open ended spending authority. The commercial question is whether customers trust the controls enough to move real purchasing and finance work into the interface.

Payments Infrastructure And Money Movement

HSBC Puts a Regulated Stablecoin Into Everyday Payments

October 23, 2026, Hong Kong
  • HSBC launched RedCoin, ticker RCHKD, on PayMe as its first regulated Hong Kong dollar stablecoin. The Hong Kong Monetary Authority licenses and supervises the stablecoin under Hong Kong's Stablecoins Ordinance.
  • More than 3.3 million PayMe users can activate a stablecoin wallet and use RedCoin for payments to friends and merchants. PayMe reaches more than 100,000 merchants.
  • HSBC Digital Assets Custody safeguards RedCoin. HSBC also plans to extend its use into tokenized investment products, adding retail payments to a digital asset stack that already includes digital bonds, tokenized gold and wholesale tokenized deposits.

Stablecoin adoption is moving into a bank's existing retail distribution rather than asking customers to adopt a new crypto wallet. That cuts a major onboarding barrier. The numbers to watch now are wallet activation, payment frequency and merchant usage. If customers use RedCoin for ordinary transactions, regulated stablecoins start competing as payment products rather than mainly trading and settlement tools.

Nuvei Wins Israeli Direct Acquiring Licence

October 21, 2026, Canada / Israel
  • Montreal based Nuvei secured a direct acquiring licence in Israel, extending its direct acquiring network to 53 markets. The licence was granted by the Israel Securities Authority under local payment services legislation.
  • Direct access to domestic card acquiring can reduce dependence on intermediary acquirers and give Nuvei more control over authorization, reconciliation and settlement services.
  • Nuvei says it has operated in Israel for 20 years and employs more than 300 people there. The new licence adds local regulated capacity, but the company hasn’t disclosed volumes processed under it.

Payment margins can depend on who controls the local acquiring relationship. Nuvei can now bring more of that work inside its own network instead of paying intermediaries. Merchants should compare actual approval rates and processing costs after implementation. For Canadian payment firms, the licence shows how regulated local access can strengthen international distribution.

Mastercard Opens Agent Pay for Machines to Developers

October 20, 2026, United States / Global
  • Mastercard opened developer early access to Agent Pay for Machines after completing payment pilots with Cloudflare, Ant International, Base, BVNK, Coinbase and other partners.
  • In a demonstration, one approved agent budget covered nine payments to two independent merchants. The agent purchased research and generated images without separate accounts or invoices for each service.
  • The design uses x402 payment requests and signed vouchers. Providers verify purchases as they occur and redeem vouchers later. Buyer and seller APIs, sandbox access and documentation are now available for testing.

Agents that buy software services need spending limits that survive across multiple suppliers. Mastercard is testing a way to approve a budget once without granting open access to company funds. The commercial question is whether developers and merchants adopt one shared payment method instead of creating another patchwork of wallets, credits and billing accounts.

Euronet Launches OLON Merchant Payments Platform

October 21, 2026, United States / Europe
  • Euronet launched OLON, a modular merchant commerce platform that combines in store and online payment acceptance with business applications, settlement monitoring and customer services.
  • Its first planned full market deployment is Greece, with a stated reach of approximately 225,000 merchants, 300,000 physical points of sale and 7,000 online shops. Full deployment is still ahead.
  • Euronet says its merchant services business already operates in more than 15 European countries. OLON is also taking shape in Germany and other Southern European markets.

Euronet wants a larger share of the merchant relationship than payment processing alone. Connecting checkout, reconciliation and business software can improve retention and open new service revenue. Merchants will judge the platform on integration costs and daily usefulness. Competing payment providers should watch whether the Greece rollout turns Euronet’s distribution into a durable advantage.

Visa, BILL and Billtrust Process Live Agentic Invoice Payments

October 20, 2026, United States
  • Visa, BILL and Billtrust launched a live pilot processing end-to-end invoice payments through authorized AI agents acting between buyer and supplier platforms.
  • The BILL Payment Agent uses Visa Trusted Agent Protocol, Agentic Directory and tokenized credentials to access Billtrust supplier portals and complete previously approved payment instructions.
  • The pilot is processing transactions with participating buyers and suppliers. Buyers still authorize the underlying invoice payments, and suppliers retain portal controls; general production scale has not been announced.

Business payment automation is crossing a practical barrier: recognized agents can finish authorized transactions inside supplier portals without a person manually completing every step. Finance teams will need to define mandate limits, approval evidence and exception handling before using this model more widely. Successful pilot transactions are a useful milestone, but broad interoperability and dispute processes remain to be proven.

PPRO Forms Council for AI Payments on Local Rails

October 21, 2026, United Kingdom / Europe
  • PPRO launched a Local Payments Council for Agentic Commerce with BLIK, EPI, Bancontact Company and DIAS to develop common technical approaches for noncard payment methods used by buying agents.
  • The work covers agent identity, delegated consent, authorization handoffs, refunds, disputes, liability and payment method discovery.
  • The council is an industry standards initiative. No unified payment rulebook or production adoption deadline has been announced.

Card networks are designing agent payment protocols, but local bank account and wallet schemes can’t simply assume those rules fit. The council gives payment providers a place to settle the hard questions around mandates, identity and refunds before agents become another checkout channel. Its value depends on usable technical specifications and adoption by real payment schemes.

Treasury Liquidity And Cash Management

Hong Kong Expands Offshore RMB Liquidity Support

October 23, 2026, Hong Kong
  • The Hong Kong Monetary Authority designated 12 banks as Primary Liquidity Providers for the offshore renminbi market for a new two year term beginning October 27, 2026.
  • The dedicated RMB repo facility for those banks increases from RMB20 billion to RMB22 billion.
  • HKMA selects providers based partly on their ability to supply offshore RMB funding and make markets in RMB instruments. The authority can continue adjusting the number of providers and the size of the facility as market needs change.

More official repo capacity gives market makers another liquidity buffer as Hong Kong builds deeper offshore RMB markets. The increase itself is modest, but the control point is important. Banks competing for RMB flows now have stronger public liquidity support behind market making, while exchanges, payment firms and treasury platforms get a deeper funding base for products built around offshore RMB.

HSBC Connects Tokenized Deposits to a Tokenized Money Market Fund

October 22, 2026, United Kingdom / Singapore / Global
  • HSBC completed its first transaction using tokenized deposits to invest in a tokenized money market fund with Ant International and Franklin Templeton.
  • The transaction connected HSBC's Tokenised Deposit Service with Ant International's WhaleRTP wholesale settlement platform and a Franklin Templeton tokenized money market fund.
  • HSBC says the structure can support more efficient, always on liquidity management. Company staff describe the transaction as a pilot, so one completed subscription should not be treated as general commercial availability or recurring volume.

Corporate treasurers leave cash idle when fund cut off times don't match when money becomes available. This transaction shows how tokenized bank money can connect that cash directly to an investment product without rebuilding the treasury stack around a stablecoin. The opportunity is better use of working cash. The business case will depend on redemption speed, fund access and whether the model scales beyond bespoke transactions.

Stripe Opens Business Treasury Tasks to AI Agents

October 21, 2026, United States / Ireland
  • Stripe Treasury for agents lets businesses use AI agents to check balances, pay invoices, transfer money between accounts and convert currencies from tools including ChatGPT and Claude.
  • The service sits inside Stripe Treasury, where businesses already manage banking alongside payments. Companies keep control over account access and permissions rather than giving an agent unrestricted authority.
  • Stripe says card creation and agent spending limits are coming next. Those capabilities aren't part of the current launch and shouldn't be treated as live today.

The important shift isn't that an AI can read a balance. It can now carry out approved treasury work inside the financial account. Founders gain leverage if routine transfers and invoice payments move out of the admin queue without weakening controls. Banks and fintechs will need equally clear permission models because the competitive question is moving from who has an AI assistant to who safely lets it touch money.

Regulation And Policy

SEC Puts AI, Tokenization and Treasury Clearing on Its 2027 Exam List

October 23, 2026, United States
  • The SEC's Division of Examinations published its fiscal 2027 priorities for more than 34,000 registrants, including investment advisers, funds, broker dealers, clearing agencies, transfer agents and funding portals.
  • Emerging technology is now an explicit examination area, including advanced AI that can affect market operations, compliance, fraud controls and investor protection.
  • The SEC will also examine risks around Treasury clearing reforms, tokenization and changing market infrastructure, alongside cybersecurity, customer information, private credit and anti money laundering controls.

AI and tokenization are no longer sitting outside the routine examination cycle. Firms using either in regulated workflows should expect questions about governance, supervision, records, controls and investor outcomes. For infrastructure providers, the combination of Treasury clearing and tokenization also puts implementation risk closer to the examiner's desk, not just the product roadmap.

Canada Sets New Federal Rules for Regulatory Competitiveness and Red Tape Reduction

October 21, 2026, Canada
  • Canada published a new Cabinet Directive on Regulatory Competitiveness and Red Tape Reduction, effective December 31, 2026. It replaces the 2018 directive and applies to specified federal regulations made by or approved by Cabinet, Treasury Board or federal ministers.
  • Regulators must assess and communicate the competitiveness impacts of proposed measures, offset $2 for every $1 increase in business regulatory burden over three years, and consider recognized standards for regulatory alignment across jurisdictions.
  • Significant impact regulations must be reviewed within five years, with other regulations reviewed at least every 10 years. The directive also calls for proportionate regulation, reduced overlap and clearer information on how businesses can introduce innovative products and services.

Regulatory competitiveness now has explicit federal policy requirements, but better outcomes aren't automatic. Fintechs and investors should watch whether impact assessments, burden offsets and regulatory reviews actually reduce entry costs and approval friction. The same questions around OSFI's approach to growth and competition extend across federal regulation: will the new requirements make it easier for credible entrants to launch, scale and compete?

OCC Finalizes US Stablecoin Rules and Leaves Rewards Case by Case

October 21, 2026, United States
  • The Office of the Comptroller of the Currency issued its final GENIUS Act rule for payment stablecoin issuers and certain custody activities under its supervision. The rule takes effect January 18, 2027.
  • The rule covers reserve assets, redemption, risk management, audits, custody, capital and supervision. Issuers still cannot pay interest or yield solely because a customer holds, uses or retains a payment stablecoin.
  • The OCC dropped proposed presumptions that could have treated some third party reward arrangements as prohibited. Existing programs get no automatic safe harbour; the OCC says it will judge arrangements on their facts. Applications haven't opened yet, and anti money laundering and sanctions rules remain subject to separate rulemaking.

The final rule gives stablecoin issuers a clearer operating framework, but rewards remain a competitive fault line between banks and crypto platforms. Exchanges may still have room to pay customers when the reward isn't simply interest for holding a stablecoin, yet there is no blanket approval. Issuers and partners now need structures they can defend under OCC review. For banks, the deposit competition debate isn't settled just because the rule is final.

FCA Clarifies Crypto Licensing Exclusions and Application Relief

October 21, 2026, United Kingdom
  • The Financial Conduct Authority opened consultation CP26/36 on proposed guidance for exclusions from the UK's incoming cryptoasset regulatory perimeter. The exclusions address certain stablecoin payment and settlement arrangements, proprietary trading, market making and technical services.
  • The new cryptoasset regime takes effect October 25, 2027. The consultation closes November 18, 2026, with final guidance targeted for January 2027.
  • The FCA will allow limited application forbearance where uncertainty over the technical services exclusion materially affects a firm's ability to complete its arranging permission application. Existing UK crypto businesses seeking authorization under the new regime must apply between September 30, 2026 and February 28, 2027 to benefit from the savings provision.

Crypto firms need to establish which activities require authorization and which qualify for exclusions before committing to licensing and operating structures. The distinction is particularly important for stablecoin payments, decentralized protocol interfaces and technical service providers. Firms affected by uncertainty over arranging permissions should engage with the FCA during the application window rather than assume that forbearance extends the application deadline.

Canada Proposes Wider Bank and Insurer Investment Powers for Fintech

October 17, 2026, Canada
  • The Department of Finance published four proposed regulations covering more than 400 federally regulated financial institutions, including banks, credit unions, insurers and trust companies. The proposals would activate broader technology and investment powers enacted in 2018 but not yet brought into force.
  • Institutions could undertake a wider range of technology activities without prior ministerial approval and acquire substantial or controlling interests in businesses combining financial and nonfinancial activities. Eligible businesses must generate at least 60% of revenue, operating expenses or assets from financial activities.
  • Large institutions with equity above C$12 billion would face limits of 10% of annual revenue and regulatory capital for covered nonfinancial activities. Smaller institutions could use up to 15% of revenue, with the same 10% capital limit. Large institutions would also face transaction and annual reporting requirements. The changes remain proposed, not effective.

Canada's existing restrictions can complicate fintech investments when a business combines financial services with other commercial activities. The proposed fintech investment reforms would give banks and insurers more room to invest, acquire and build technology businesses while retaining limits on their exposure. Fintech founders could gain access to strategic capital and established distribution networks. The commercial test is whether institutions use that flexibility to expand products and partnerships, rather than simply absorb promising competitors.

UK Proposes Cutting Senior Manager Approval Burden

October 22, 2026, United Kingdom
  • The Prudential Regulation Authority proposed removing prior regulatory approval for almost half of its current Senior Manager Functions, replacing those applications with notifications while keeping firm responsibility for fitness and propriety.
  • The proposal would remove recurring certification requirements for approximately 7,700 individuals and extend temporary senior manager cover from 12 to 18 weeks.
  • Comments close January 22, 2027. Implementation is contemplated in the second half of 2027, subject to legislation and final rules; these changes are not in force.

Hiring senior leaders can take months when every role requires an external approval. The UK is proposing to put more of that decision back on regulated firms without removing accountability. Boards and compliance teams should compare the proposed savings with the additional burden of documenting their own assessments before changing staffing or control plans.

Risk Compliance And Regtech

Singapore MAS Sets Anti-Scam Guidance for Retail Brokers

October 20, 2026, Singapore
  • The Monetary Authority of Singapore published Guidelines on Anti-Scam Measures for Brokers covering retail brokerage firms.
  • The guidelines have a confirmed effective date of June 30, 2027, giving firms a defined implementation period.
  • MAS also issued accompanying FAQs and strongly encourages retail brokers to implement the measures as early as practicable.

Retail brokers now have a dated supervisory benchmark for scam controls rather than a general warning about fraud exposure. Firms should review the full guidelines and FAQs against their customer protection, escalation and operational processes, identify changes requiring development or vendor support, and budget the work ahead of June 2027.

Ireland Penalizes Coinbase Over Customer Money Safeguards

October 22, 2026, Ireland
  • The Central Bank of Ireland reached a settlement with Coinbase Ireland over breaches of customer money safeguarding and outsourcing requirements between November 2020 and August 2025.
  • The regulator set a €4.65 million penalty, reduced to €3.25 million under its settlement discount. Coinbase Ireland accepted the findings, but the sanction requires High Court confirmation before taking effect.
  • The findings cite prolonged shortfalls in a safeguarding account, insufficient local oversight of outsourced functions and inadequate escalation and controls over material changes.

A global crypto brand still needs effective controls inside its locally regulated payments entity. Reliance on a parent company doesn’t transfer accountability for safeguarding customer funds. Payment firms expanding into Europe should verify daily reconciliations, board visibility and the resources available to challenge a group service provider when problems appear.

FCA Proposes Financial Crime Controls for AI and Crypto Risks

October 23, 2026, United Kingdom
  • The Financial Conduct Authority opened consultation CP26/38 on updates to its Financial Crime Guide. Proposed revisions cover fraud, sanctions, proliferation financing, data security and financial crime systems.
  • The draft would address emerging risks involving AI and cryptoassets, including the new UK cryptoasset regime expected from October 2027.
  • Responses close December 24, 2026. The consultation is guidance development, not an immediately binding new financial crime rule.

Financial crime controls built around yesterday’s payment and customer patterns can miss risks introduced by agents, crypto products and new vendors. Firms should test whether their transaction evidence, staff escalation and sanctions processes still work across those channels. The consultation offers a chance to challenge unclear expectations before the final guide is issued.

Sustainable Finance ESG And Financial Inclusion

Canada Publishes Final Green and Transition Finance Methodology

October 20, 2026, Canada
  • Canada’s Taxonomy and Transition Planning Council released its final Sustainable Finance Taxonomy Methodology Report, setting out definitions and a process for identifying green and transition economic activities.
  • The methodology considers Canadian economic conditions and Indigenous rights while drawing on international sustainable finance approaches.
  • Sector-specific technical screening criteria and guardrails are still being developed, beginning with electricity, buildings and transportation. The methodology is not a binding rule or a completed list of eligible investments.

A shared classification method could give issuers and capital providers a more consistent basis for assessing transition-finance claims. But the real allocation decisions will turn on sector thresholds, supporting evidence and independent review. Investors and borrowers should not treat today’s methodology as a certification of individual projects or assume that unsettled greenwashing and disclosure risks have disappeared.

Open Banking Open Finance And Data Sharing

Brazil Tightens Open Finance Data Partner Rules

October 22, 2026, Brazil
  • Joint Resolution 21 amends Brazil’s Open Finance rules for institutions sharing customer information or derived, identifiable data with commercial partners, including credit scores.
  • Institutions must strengthen partner contracts, security oversight, governance and reporting. Boards and senior executives receive explicit responsibilities for Open Finance performance and control.
  • Existing partner arrangements must be reported to the central bank by December 1, 2026. The regulator can restrict sharing or order a partnership suspended or terminated where specified risks or breaches arise.

Financial data partnerships now carry clearer accountability beyond the initial customer consent. Banks and fintech aggregators need to map every downstream recipient, inspect contract rights and test whether their oversight works when data are reused. Access to the rail is valuable, but it won’t excuse weak controls at the next company in the chain.

Weekly Close

Canada put C$1.75 billion in venture and growth capital on the table and introduced new rules to make federal regulation more competitive. Internationally, banks and fintechs advanced tokenized deposits, cross-border settlement and AI-controlled financial transactions. These are becoming practical business decisions about who controls customer access, payment infrastructure and compliance costs. The opportunity for Canadian fintechs is to compete on execution, building products customers trust, securing distribution and turning regulatory change into commercial advantage.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech news and insights, industry research, or launch into emerging financial innovation opportunities.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

Why Investors Still Fall for Charismatic Founders

October 20, 2026 | NCFA Story Intelligence | Capital Markets And Funding, Leadership And Governance, Artificial Intelligence And Data

AI illustration for NCFA story on why investors still fall for charismatic founders, showing a startup founder pitching investors as hype, valuation and media attention outpace evidence and due diligence

Theranos, Investor Psychology and the Power of Founder Storytelling

On October 16, 2026, You Can See Everything opened in Canadian theatres. Four days later, the documentary about Elizabeth Holmes is still one of the biggest stories at the North American box office. It opened with about US$15 million from only 855 screens. That's an extraordinary result for a documentary about a founder whose company collapsed years ago and is now serving a federal prison sentence.1

Holmes didn't raise money because investors wanted to lose it. She sold a future that sounded possible, surrounded herself with people whose reputations made belief easier, and built a company whose story moved faster than outsiders could verify the technology. By the time the evidence caught up, investors had committed hundreds of millions of dollars.

What follows is a story of how founder trust becomes part of an investment case and how evidence can lose ground to momentum. The same human problem returns whenever investors finance an uncertain future.

A Founder Learns to Sell the Future 2003 to 2010

Elizabeth Holmes leaves Stanford and starts Theranos with a promise that is easy to understand and hard to ignore. Blood testing should require less blood, hurt less and become easier to access. The mission sounds personal and the market is enormous. Investors aren't being asked to finance another laboratory. They are being asked to back a founder who says healthcare can work differently. That's where trust first enters the deal.

The idea is bigger than the product. Theranos tells investors that its technology can run a broad range of tests from tiny amounts of blood. The company is private, the technology is closely guarded and outsiders have limited access to what happens inside the machines. That secrecy can sound like competitive protection when the founder is believed.

Conviction becomes part of the product. Holmes presents Theranos as a mission driven company that can transform healthcare. Investors hear a founder who appears certain about the future and willing to devote herself to it. That confidence is valuable in a startup because the product, market and operating model are all unfinished. It also makes the founder unusually important to the investment case.

Powerful Names Make Belief Easier 2011 to 2014

Then other people start lending Holmes their credibility. George Shultz joins the board after what was supposed to be a short meeting turns into a conversation lasting more than two hours. Henry Kissinger, William Perry, Sam Nunn, James Mattis and other prominent figures follow. Major investors arrive too. Each new name makes the company easier for the next person to believe. Theranos is no longer only asking whether investors trust Holmes. It's asking whether they trust everyone who already does.

How Theranos Built Borrowed Trust

By 2014, Theranos had assembled a board that looked more like a national security council than a medical technology startup. Former secretaries of state, defence leaders, senators, military commanders and senior business figures gave the company extraordinary status. Fortune later noted how little directly relevant laboratory expertise sat on the board compared with its political and business stature.2

That reputation travelled into fundraising. Court records later listed US$125 million from Rupert Murdoch and nearly US$100 million from RDV Corporation, the investment office associated with the DeVos family, among the losses considered for restitution.3

The names didn't prove the technology worked. They changed the social setting around the investment. A founder sitting alone across the table has to establish credibility. A founder surrounded by respected directors, major retailers, wealthy families and national media arrives with credibility already in the room.

The same pull shows up outside venture capital. The Finfluencer Effect on Canadian Retail Investors reported an OSC experiment with a striking result. 38% of participants exposed to promotional investment content bought the promoted asset, compared with 8% in the control group. The context changes how people act, even when they believe they are making their own decision.

The board looks formidable. Fortune described Theranos in 2014 as having one of the most illustrious boards in American business. George Shultz, Henry Kissinger, William Perry, Sam Nunn, James Mattis and other prominent figures gave Holmes access to experience, networks and public credibility that most young founders could never assemble.4

The board can't substitute for technical oversight. A famous director can open doors and challenge strategy. That doesn't automatically give a board the scientific depth to test a diagnostic platform. Prestige can make a young company look safer while leaving the hardest operating question untouched.

The Story Spirals Beyond the Evidence 2013 to 2015

By now Theranos has a founder people recognize, a board people respect, national retail partners and a story the media wants to tell. The company is valued at about US$9 billion. Every new endorsement makes the earlier endorsements look smarter. Inside that momentum, the distance between the public story and the operating evidence keeps growing. Investors are no longer judging a lonely startup. They are judging a success story that appears to be happening in front of them.

What Theranos Investors Were Told

The SEC later alleged that Theranos raised more than US$700 million through false or exaggerated statements about its technology, business relationships and financial performance. Broader accounts put total lifetime funding above US$900 million, but the SEC figure is the amount tied to the fraud case it brought.5

The financial claims were dramatic. Investor materials projected more than US$100 million in 2014 revenue and about US$1 billion in 2015. Actual 2014 operating revenue was only a little over US$100,000.6

Investors were also told the technology had been used by the US military in Afghanistan and on medevac helicopters. The SEC said it had not. They were told the proprietary analyzer could perform comprehensive testing from a few drops of blood. The SEC said it could perform only a small number of tests, while most patient testing relied on modified commercial machines made by other companies.

The gap wasn't one bad forecast or one late product milestone. Technology claims, revenue expectations, commercial relationships and outside validation all helped support the same investment story.

The numbers make the story feel real. A multibillion dollar valuation, hundreds of millions raised and national retail partnerships give investors familiar business signals. Those signals usually matter. They become dangerous when investors start treating them as evidence about the one thing the company still has to prove.

The media helps close the loop. Holmes becomes a symbol of Silicon Valley ambition. WIRED has now revisited its own 2014 coverage and acknowledged how media enthusiasm helped amplify the founder story before the science received enough scrutiny.7 The founder earns attention because investors believe. Investors see attention and find another reason to believe.

Diligence Still Doesn't Break the Spell 2010 to 2015

The easy story about gullible investors falls apart here. Walgreens visits Theranos, reviews patents, discusses regulation and brings in outside medical expertise. Safeway says it spends more than 100 hours on diligence. These aren't people writing cheques after one inspiring pitch. They are trying to verify the company. Yet the founder still controls much of what they are allowed to see, and some of the evidence they receive later proves unreliable.

How Sophisticated Diligence Still Failed

Walgreens did many of the things investors say they want to see. It visited headquarters, reviewed patents, discussed regulatory strategy and engaged outside experts. A later court record says Holmes sent Walgreens reports bearing logos from Pfizer, GlaxoSmithKline and Schering Plough and described them as independent technical validation. Representatives from those companies later testified that they had not independently validated the technology and had not authorized the use of their logos on those reports.8

Safeway also kept looking. Former CEO Steven Burd testified that the company spent at least 100 hours on diligence. The relationship eventually cost Safeway more than US$360 million before it was abandoned. During testing at Safeway headquarters, Burd said the device could make noise and still fail to deliver the expected result.9

Diligence only works when it reaches the evidence that can kill the deal. A founder controlled demonstration isn't the same as an independent production test. A customer logo isn't the same as a reference call. A report carrying a respected company's name isn't the same as confirmation from that company.

Good diligence can still ask the wrong question. Investors may spend weeks testing market size, legal structure, partnerships and founder references while the core product remains difficult to inspect. A deal room can contain thousands of pages and still miss the fact that matters most.

The founder can become the gateway to the evidence. That creates a dangerous loop. Investors trust the founder enough to accept the materials, then use those materials to decide whether they should trust the founder. Independent verification has to break that loop.

The Evidence Breaks Through 2015 to 2023

Eventually the story meets people who won't accept the controlled version of the evidence. Employees raise concerns. Whistleblowers push information outside the company. John Carreyrou begins reporting for The Wall Street Journal. Regulators and prosecutors follow. The change isn't that Holmes suddenly becomes less persuasive. The change is that outsiders finally have enough independent evidence to judge the claims without relying on her.

The criminal case narrows the facts. In January 2022, a federal jury convicts Holmes of conspiracy to defraud investors and three counts of wire fraud tied to transfers totalling more than US$140 million. The jury acquits her on patient related conspiracy and several patient fraud counts, while other investor counts end without a unanimous verdict.10

The sentence makes the cost tangible. In November 2022, Holmes receives 135 months in federal prison. She begins serving the sentence in 2023. The SEC had put the investor principle plainly years earlier when it said investors are entitled to “complete truth and candor” from companies and executives.11

The Company Dies but the Founder Story Survives 2023 to 2026

Theranos disappears. Holmes goes to prison. Yet the founder story keeps finding an audience. Books, podcasts, television dramas and documentaries revisit the same rise and collapse. Now You Can See Everything turns her final month of freedom into a theatrical event. More than 70% of the opening weekend audience is reportedly under 35. Many of those viewers were children when Theranos was at its peak. The company is dead, but the story is recruiting a new audience.12

Why Founder Stories Change Investment Decisions

Entrepreneurs need stories because early companies contain more uncertainty than evidence. Investors have to imagine the market, the product and the team several years ahead. Research published in 2024 found that investors can become mentally absorbed in a founder's pitch. When that happens, they are more likely to reshape the opportunity positively and commit resources.13

Another large study summarized by Harvard Business Review looked at founders from more than 4,000 US companies. Actual expertise was the strongest predictor of a successful exit, while signals of expertise were more strongly associated with getting funded. The ability to look investable can help win the cheque before the qualities that create long term value have been proven.14

Charisma isn't fraud. Storytelling isn't deception. Investors need founders who can make an uncertain future understandable enough for employees, customers and capital providers to join them. Trouble starts when the story becomes the evidence.

The audience knows how the story ends. That makes the continuing fascination more revealing. People aren't buying tickets because the verdict is unknown. They are watching because confidence, ambition, deception and failure are still compelling human material.

Persuasion still moves money. Canadian investors see the same mechanism in a different setting. How AI Is Changing Canadian Investors’ Decisions found that 84% of surveyed self directed investors used AI, financial creators or both. Technology changes the channel. It doesn't remove the human desire to find someone or something that makes uncertainty feel easier.

AI Brings the Question Back 2026

The next founder asking investors to believe before all the evidence exists probably won't be selling blood tests. Today, capital is rushing toward artificial intelligence, where products, business models and infrastructure costs can change between financing rounds. Carta says more than 60% of venture dollars on its platform went to AI companies in the first quarter of 2026. Investors are again deciding how much future they are willing to finance before the operating record is complete.15

What AI Investors Should Verify Before Believing the Demo

AI makes founder trust unusually important because a compelling demonstration can move faster than production evidence. A model may look remarkable in a controlled setting while customer retention, gross margins, compute costs, data rights and reliability remain unsettled.

Start with customers. Speak to them directly. Find out what is live in production, what is still a pilot and what would disappear if the startup stopped subsidizing usage. Then follow the money. Revenue quality matters more than a large contract headline if the deal depends on heavy discounts, strategic credits or one customer that can leave.

Then test the product outside the founder's preferred demonstration. Ask who chose the prompts, data, workflow and success criteria. Compare performance with realistic alternatives. If the company depends on another model provider, cloud vendor or data source, price that dependency into the investment case.

The current market makes that discipline harder, not less important. The Financial Times reported in September that a new group of AI companies raised roughly US$24 billion in six months, sometimes before they had meaningful products or revenue. Founder pedigree itself was helping unlock capital.16

Elon Musk belongs in a very different category from Holmes. Tesla and SpaceX built real products, customers and operating businesses. Yet Musk also shows how closely a founder's words can become tied to investor expectations. In 2018, the SEC settlement over his “funding secured” tweets required governance changes at Tesla and US$40 million in combined penalties. Musk isn't a Theranos analogue. The episode still shows why markets need controls when one person's credibility can move billions of dollars.17

Investors can use AI Investing Tools to accelerate research. The judgment still belongs to the investor.

Founder conviction still has value. Early stage investors are paid to finance businesses before every answer exists. A founder who can't make others believe in an uncertain future may never recruit the team, customers or capital needed to build it.

Conviction needs independent evidence beside it. Customer calls, production data, technical review, board oversight and financial reconciliation give investors something that doesn't depend on the founder's version of events. The earlier the company, the more important it becomes to know which assumptions are still beliefs.

The Next Founder Won’t Look Like Elizabeth Holmes

Holmes is in prison, Theranos is gone and investors now know how the story ended. That makes the mistakes look obvious in hindsight. They were much harder to see when the company was raising money, signing national partners, attracting famous directors and appearing on magazine covers.

The next founder who lets belief outrun the evidence will probably look nothing like Holmes. The company may be building AI, financial infrastructure, robotics, biotech or something investors have not learned how to value yet. The founder may have respected backers, impressive customers and a demonstration that makes the future feel close enough to touch.

Early founders often have to sell conviction before the product, revenue or market fully exists. That's part of building a venture, not evidence of deception. Investors are financing a future that has not happened yet, so imagination belongs in the deal.

The line gets crossed when aspiration is presented as fact, a controlled demonstration is presented as independent proof, or hoped for traction is sold as something already verified. A founder can sell why the future might happen. The investor still has to know what is already true.

Questions for the Next Deal

  • Will AI investors demand more independent product and customer verification as valuations rise?
  • Can startup boards challenge charismatic founders without removing the conviction that helped build the company?
  • Will venture investors change diligence when founder reputation becomes part of the valuation?
  • Can founders prove ambitious claims without slowing the speed that makes startups competitive?

Related NCFA Intelligence

STORY INTELLIGENCE

How OpenAI And Anthropic Reached Public Markets

OpenAI and Anthropic show what happens when founder vision, strategic backers, governance choices and enormous private capital converge before public market scrutiny arrives.

FOUNDER BUILD

Inside a Licensed Profession: What Ownright’s Build Teaches Fintech Founders

Ownright offers a current founder case where credibility comes from operating evidence, regulatory fit, customer execution and a system that has processed more than $2 billion of transactions.

MARKET ACTIVITY

FNZ Turnaround Tests La Caisse and Canadian Pension Capital

Repeated capital raises and management changes at FNZ show what investor conviction looks like after the cheque is written, when ownership starts turning into active governance.

NCFA INSIGHT

Canada’s Early Stage Startup Funding Funnel Narrows

A tighter Canadian funding market raises the stakes for founders trying to earn attention and for investors deciding which stories deserve scarce early stage capital.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

NCFA Weekly Fintech Intelligence Oct 10-Oct 16, 2026

Oct 10, 2026 | Last Updated: Oct 28, 2026 | NCFA Fintech Whisperer | Artificial Intelligence And Data, Capital Markets Infrastructure And Funding, Cross Border Payments And FX, Cybersecurity Fraud And Financial Crime, Digital Assets Blockchain And Tokenization, Digital Banking And BaaS, Payments Infrastructure And Money Movement, Regulation And Policy, Wealthtech Investing And Trading, Risk Compliance And Regtech, Sustainable Finance ESG And Financial Inclusion

Fintech market intelligence visualization

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors. This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis. (Missed prior week's Fintech Whisperer? (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-March 13, 2026, March 14-March 20, 2026, March 21-March 27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-June 19, 2026, June 20-June 26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-July 24, 2026, July 25-July 31, 2026, August 1-August 7, 2026, August 8-August 14, 2026, August 15-August 21, 2026, August 22-August 28, 2026, August 29-September 4, 2026, September 5-September 11, 2026, September 12-September 18, 2026, September 19-September 25, 2026, September 26-October 2, 2026, October 3-October 9, 2026).

Weekly Fintech Market Intelligence Oct 10 - Oct 16, 2026

Artificial Intelligence And Data

Anthropic Secures Nova Scotia Data Centre as EverWind Plans C$10B Investment

October 16, 2026, Canada
  • Anthropic signed a long-term lease for data centre capacity at EverWind's planned Point Tupper campus in Nova Scotia, marking its first Canadian data centre agreement. EverWind confirmed the tenant commitment without naming Anthropic; Reuters independently identified the company.
  • EverWind plans more than C$10 billion in private investment, including over C$8 billion for the data centre campus and C$2 billion for four Nova Scotia wind projects. The development is projected to support approximately 2,000 construction jobs and 215 permanent positions.
  • The initial 95 MW phase targets late 2027, with a further 325 MW planned for 2028, bringing potential capacity to 420 MW. The expansion remains subject to commercial, technical and regulatory conditions, including electricity system studies and approvals. No computing capacity is operating under this agreement yet.

Anthropic's lease gives EverWind a committed customer for its first development phase, strengthening the commercial case for a major Canadian infrastructure investment. But financing AI compute infrastructure depends on more than tenant demand. Power availability, construction costs and grid approvals determine when that demand becomes revenue. For investors, the distinction is between securing a customer today and delivering profitable computing capacity on schedule.

HKMA Issues Responsible AI Guidance for Hong Kong Banks

October 15, 2026, Hong Kong
  • The Hong Kong Monetary Authority (HKMA) issued Supervisory Guidance for Responsible Adoption of Artificial Intelligence for authorized institutions and introduced its Accountability, Resilience and Trust (ART) framework.
  • The framework includes plans for a training data sharing platform with Cyberport and the University of Hong Kong. More than 60% of use cases in the second generative AI sandbox cohort explored agentic AI.
  • The HKMA will continue agentic AI trials and publish a discussion paper on governance. Proposals for an agent registry and intervention controls are not yet finalized requirements.

Hong Kong banks now have updated supervisory guidance for deploying AI, while future rules for autonomous agents remain under discussion. Banks investing in these systems need clear ownership of decisions, reliable input data and controls that allow staff to intervene. Canadian financial institutions face many of the same questions as they expand AI into lending, compliance and customer service. The operating advantage will depend on speed and cost savings that hold up under supervisory review.

TD Expands Agentic AI Into Mortgage Funding and Discharge

October 13, 2026, Canada
  • TD Bank Group introduced two agentic AI capabilities for mortgage funding and discharge, expanding its use of AI beyond mortgage pre-adjudication.
  • The capabilities coordinate document checks, connect information across systems and flag potential discrepancies. Employees review generated information and retain responsibility for decisions.
  • TD reports that the funding tool can reduce the initial review time by up to half. Its earlier mortgage pre-adjudication process reduced average processing time from 15 hours to less than three minutes.

TD is using AI to clear document checks at more stages of the mortgage process, freeing staff to handle exceptions and borrower decisions. The reported time savings are substantial, but lenders still need to measure end-to-end completion times, error rates and rework. The investment pays off when faster reviews translate into funded mortgages without weaker controls.

Capital Markets Infrastructure And Funding

ESMA Finalizes T+1 Settlement Messaging Rules Ahead of December Deadline

October 16, 2026, European Union
  • ESMA confirmed that the regulatory requirements for the EU’s transition to one business day settlement on October 11, 2027 are complete.
  • From December 7, 2026, investment firms and their professional clients must meet new requirements for trade allocations and confirmations, including standardized electronic communication and machine readable messaging, subject to exceptions for temporary technical disruption.
  • The revised guidelines accompany amended settlement discipline technical standards. ESMA is asking participants across the trading and settlement chain to begin coordinated testing.

The first deadline arrives well before the settlement switch. Brokers, custodians and asset managers now need to reconcile message formats, client instructions and exception handling across counterparties. Canadian firms trading European securities face the same operational handoffs. A short settlement cycle leaves less room to repair missing allocations overnight.

BBVA and Santander Run €150M Syndicated Loan Entirely on Blockchain

October 15, 2026, Spain
  • BBVA and Santander arranged €150 million in syndicated financing for Iberdrola through a distributed ledger platform developed with ioBuilders.
  • The live facility uses the platform for execution and disbursement, interest management, waivers, repayments, loan assignments and maturity.
  • The banks describe it as the first live syndicated financing administered on blockchain throughout the loan lifecycle, rather than only at origination.

Loan syndication involves years of servicing, amendments and lender coordination after the initial funding. Handling those events on a shared record could reduce duplicate reconciliations and disputes over loan status. The same operating question sits behind shared bank blockchain infrastructure: can participants keep one reliable record without adding new integration costs? Lenders will want evidence of repeat transactions before committing more capital.

EU Clarifies When Crowdfunding Platforms Can Charge Membership Fees

October 16, 2026, European Union
  • The European Securities and Markets Authority (ESMA) confirmed that crowdfunding platforms can charge registration, membership or access fees without automatically breaching EU requirements for publicly accessible investment platforms.
  • Before charging, platforms must provide enough free information for prospective investors to understand available opportunities, fees and investment risks. ESMA expects investor categorization, knowledge tests and loss capacity assessments to be completed before retail investors pay for access.
  • ESMA also warns about conflicts involving finfluencers and paid referrals. Platforms must disclose commercial incentives and can't use membership fees to bypass investor protections. The October 16 guidance interprets existing EU crowdfunding rules rather than creating a new licensing regime.

Paid investor communities can create recurring revenue for crowdfunding platforms, but the fee can't become a barrier to understanding what investors are buying. Operators need to show enough deal information before collecting membership payments and explain exactly what those fees purchase. The bigger commercial issue is trust. Platforms that sell access before demonstrating investment value risk higher acquisition costs, complaints and regulatory scrutiny. A subscription model can work, but it still has to earn investors' money.

CIRO Proposes Volatility Controls for Extended Trading Hours

October 13, 2026, Canada
  • CIRO opened a consultation on marketplace thresholds and single stock circuit breakers for trading outside 9:30 a.m. to 4:00 p.m. ET.
  • The proposed guidance addresses how volatility controls should operate during extended sessions, including periods of limited trading activity.
  • Comments close November 12, 2026. The proposed guidance is not yet in force.

Longer trading hours change the conditions under which orders meet available liquidity. Marketplaces and brokers need controls that work when fewer orders are on the book and prices can travel farther on small trades. The consultation gives Canadian trading firms a chance to address threshold design before extended hours become a larger operational commitment.

BNY and Citadel Settle Tokenized Treasury for Triparty Repo

October 13, 2026, United States
  • BNY and Citadel Securities completed an overnight triparty repo using a tokenized two-year U.S. Treasury note as collateral.
  • Citadel Securities purchased the Treasury through Tradeweb. BNY recorded its tokenized representation on a private ledger, settled it within minutes and accepted it as repo collateral.
  • BNY calls this the first tokenized asset used on a major triparty repo platform. Longer settlement hours and digital cash capabilities are planned, not part of the completed transaction.

BNY has demonstrated that tokenized market infrastructure can support real overnight financing, not just digital settlement. For dealers, the advantage could be faster access to collateral and lower funding friction. The economics depend on custody fees, connections to other counterparties and how often the process can be repeated at scale. One completed repo proves the workflow; regular volume would prove the business case.

Federated Hermes and Prometheum Plan Funds for Brokerage Accounts

October 13, 2026, United States
  • Federated Hermes and Prometheum agreed to develop tokenized securities funds for distribution through regulated U.S. brokerage infrastructure. Federated Hermes reported US$911.6 billion in assets under management at June 30, 2026.
  • Prometheum's registered brokerage businesses plan to handle custody, clearing and settlement. Its correspondent clearing service would give introducing brokers a route to distribute the products.
  • The partners target the first fund in Q1 2027. No fund has launched under this arrangement.

The partnership tackles a central obstacle for tokenized funds: reaching investors through regulated broker dealer workflows they already use. Federated Hermes brings investment products; Prometheum would provide custody, clearing and brokerage connections. Managers and intermediaries will judge the offer by distribution costs, settlement performance and investor demand, not the use of tokens alone. The first fund remains planned for 2027.

Origin Bancorp Transfers NYSE Listing to Texas Stock Exchange

October 13, 2026, United States
  • Origin Bancorp arranged to transfer the primary listing of its common shares from the New York Stock Exchange to the Texas Stock Exchange (TXSE), retaining the ticker OBK.
  • Its SEC filing states that NYSE trading was expected to end after October 12, with TXSE trading scheduled to begin at the October 13 market open.
  • TXSE issued trading alert TXSE-2026-056 covering the new listing, providing an operational notice to market participants.

Origin gives TXSE a publicly traded bank issuer and a practical chance to compete for U.S. listings. But a listing win is only the beginning. Brokers and investors will judge the exchange by trading depth, spreads, execution quality and reliable access to market data. Those measures will determine whether other issuers see a commercial reason to follow.

Evernorth Begins Nasdaq Listing With 473 Million XRP Treasury

October 12, 2026, United States
  • Nasdaq set October 12 as the marketplace effective date for Evernorth Holdings' Class A shares and warrants under the symbols XRPN and XRPNW, following completion of its business combination with Armada Acquisition Corp. II on October 9.
  • Evernorth entered the public markets holding approximately 473 million XRP and reported approximately US$300 million in gross cash proceeds from the transaction.
  • The company's strategy combines public equity financing with an XRP treasury and planned institutional investment activities. The listing provides investors with publicly traded exposure to a company whose financial position is substantially tied to XRP.

Evernorth offers stock market investors exposure to a company holding a large XRP treasury without requiring them to buy XRP directly. Its shares may trade at a premium or discount to the underlying assets. Investors should weigh treasury management, operating costs and future capital decisions against the simpler alternative of owning the asset itself.

Ripple Prime Opens 24 Hour Institutional RWA Swap Trading

October 15, 2026, United States / Global
  • Ripple Prime opened round the clock trading and settlement for perpetual swaps linked to more than 100 markets, including equities, indices, ETFs, commodities and foreign exchange.
  • Institutional clients including Virtu are already trading. Ripple Prime acts as principal, with contracts referencing futures listed by Trade.xyz on Hyperliquid.
  • Clients can cross margin positions with other supported assets and use Ripple USD (RLUSD) as collateral where eligible. The service is available through Ripple Prime's British Virgin Islands licensed entity; wider regional access is planned.

Institutions can now manage traditional market exposure through a crypto trading venue when stock and futures exchanges are closed. That's a meaningful opening for firms that trade across time zones, but 24 hour access doesn't guarantee deep liquidity or better prices. Prime brokers and market makers will compare margin efficiency, weekend spreads and counterparty risk with established derivatives markets before moving significant volumes.

Cross Border Payments And FX

Payoneer Canada Registers Under Retail Payment Activities Act

October 13, 2026, Canada
  • Payoneer announced that Payoneer Canada Limited registered with the Bank of Canada as a payment service provider under the Retail Payment Activities Act (RPAA).
  • The registration supports continued Canadian operations, including local-currency collection and cross-border services for businesses, together with locally adapted onboarding and compliance.
  • Payoneer says it supports customers across more than 190 countries and territories through nearly 100 banking and payment service provider partnerships.

RPAA registration gives payment providers a defined route to serve Canadian businesses, along with continuing safeguarding and reporting duties. Payoneer can use that standing in discussions with customers and banking partners. For competing providers, the relevant costs extend beyond registration to the controls needed to maintain it.

RBI Tightens Rupee Derivatives and Introduces 20% FX Risk Reserve

October 10, 2026, India
  • The Reserve Bank of India issued two foreign exchange circulars restricting the rebooking of cancelled rupee derivative contracts and reducing the threshold for certain transactions without establishing underlying exposure from US$100 million to US$5 million.
  • Authorized dealers must obtain and retain customer undertakings confirming that the same underlying exposure has not been hedged with another dealer. The restrictions cover specified over the counter and exchange traded rupee derivatives.
  • The RBI introduced a 20% cash Foreign Exchange Risk Reserve for specified INR derivative contracts exceeding US$2 million. It applies to transactions hedging current account exposures where customers purchase foreign currency against rupees, rather than all foreign exchange derivatives.

The restrictions change how banks price rupee hedges and how companies manage currency exposure. Dealers face cash reserve costs and tighter checks on the transactions they can accept. Corporate treasury teams may need to reassess hedging across multiple banks, especially when a cancelled contract can no longer be rebooked. The immediate commercial impact is on liquidity and flexibility, not just compliance paperwork.

Cybersecurity Fraud And Financial Crime

Hong Kong Sets Cyber Rules for Critical Retail Payment Infrastructure

October 15, 2026, Hong Kong
  • The Hong Kong Monetary Authority issued a Code of Practice for retail payment system infrastructure operators designated as critical infrastructure operators under Hong Kong's Protection of Critical Infrastructures law.
  • The code gives designated payment operators practical requirements for complying with category 1 and category 2 obligations under the legislation. These cover governance, incident response, security management and reporting duties tied to critical computer systems.
  • The code took effect on October 15, 2026. The HKMA can update the requirements as technology, cyber threats and industry practices change.

Payment infrastructure is now being treated as critical digital infrastructure with direct cyber obligations attached. For operators, this moves resilience from good practice into a formal compliance responsibility. Boards and technology teams need to know which systems are designated, who owns incident decisions and whether reporting can happen fast enough when a critical payment service fails.

New Zealand Regulators Set Frontier AI Cyber Expectations

October 15, 2026, New Zealand
  • The Reserve Bank of New Zealand and Financial Markets Authority jointly outlined supervisory expectations for financial institutions managing cybersecurity risks associated with frontier AI, following an industry roundtable with national cybersecurity and government officials.
  • The expectations address three areas: AI-enabled cyber threats, governance and management accountability, and third party concentration risk. Institutions are expected to reassess material changes in their risk exposure and maintain controls appropriate to their business.
  • Regulated firms should maintain incident response and recovery plans, test severe but plausible scenarios and understand their exposure to critical technology suppliers. The expectations build on existing prudential, conduct and operational resilience obligations rather than creating a separate AI rulebook.

Frontier AI is raising the standard of evidence supervisors expect when reviewing financial institutions' cyber resilience. Boards need visibility into where AI changes their threat exposure, which vendors create concentrated dependencies and whether recovery plans still work against faster attacks. The immediate operating priorities are vulnerability management, supplier assurance, incident testing and clear accountability before failures expose gaps.

FIS Opens AI Money Laundering Investigations Tool to US Banks

October 15, 2026, United States
  • FIS made its AML Investigations Agent commercially available to U.S. banks, including institutions that do not use FIS core systems. It developed the tool with support from Anthropic.
  • The agent assembles case evidence and generates recommendations with links to source records. Analysts must explicitly confirm case closures, and each bank retains control of its risk rules and thresholds.
  • Deployment is underway at Amalgamated Bank. Based on its workflow analysis, the bank projects more than 90% less time for initial alert reviews and approximately 98% less time for deeper investigations. These are projections, not realized results.

FIS is taking an AI investigation tool from development into commercial banking operations. The potential savings are substantial because analysts spend considerable time gathering records before judging an alert. But banks still own the compliance decisions. Buyers should examine audit trails, false positives and completed case volumes before relying on projected productivity gains. For Canadian providers, the competitive pressure is on evidence quality and operating cost, not merely the number of alerts an AI system can review.

Incode Launches Cross Institution Network for Repeat and Agentic Fraud

October 14, 2026, United States / Global
  • Incode launched TrustGraph, a privacy preserving network that lets banks, fintechs and other participants detect repeat and agentic fraud using signals from other institutions without pooling or exposing their customer records.
  • Incode reports that institutions in its early access program detected up to 53% more fraud with TrustGraph than with their existing models alone. The network is available now as part of Incode's identity platform.
  • TrustGraph uses secure multiparty computation to compare fraud and trust signals while customer data remains with the institution that collected it. Participants receive explainable signals that can support approval, denial, escalation or additional verification.

Fraud intelligence is becoming shared infrastructure rather than a control each institution builds alone. TrustGraph takes a different technical route from Canada's CSAFE fraud exchange, using cryptographic matching instead of pooling customer records. The commercial advantage grows with participation: more institutions create more opportunities to identify repeat attacks before fraud reaches another account.

EnStream Launches CSAFE Fraud Data Exchange for Canadian Banks

October 14, 2026, Canada
  • EnStream launched the Cross-Sector Anti-Fraud Exchange (CSAFE) to share confirmed fraud intelligence across Canadian banks and telecom providers.
  • Participants include Bell, Rogers, TELUS, BMO, CIBC, Desjardins, National Bank, RBC and Scotiabank. The platform follows an earlier CIBC and Rogers pilot.
  • CSAFE standardizes information submitted by participants. Each institution decides how to use the intelligence in authentication, account opening and transaction screening.

Fraud often crosses the boundary between a mobile account and a bank account. CSAFE gives participating firms confirmed intelligence from both sides, helping them recognize repeat attacks sooner. The financial value will come from fewer losses and investigations without blocking legitimate customers. That depends on timely, accurate contributions and disciplined privacy controls.

Bank of America Faces US$1.21B in AML and Sanctions Actions

October 13, 2026, United States
  • FinCEN assessed US$1.2 billion against Bank of America over failures in anti-money laundering controls, correspondent banking due diligence and suspicious activity reporting.
  • The OCC also imposed a US$750 million Bank Secrecy Act penalty. That amount is credited toward FinCEN's assessment and must not be added again.
  • OFAC separately settled 475 apparent sanctions violations for approximately US$11.6 million. The combined financial resolutions total about US$1.212 billion.

The penalties show how failures in alert handling, correspondent banking controls and sanctions screening can become major financial liabilities. For banking executives, the response requires more than a larger compliance budget: investigations must be timely, findings must reach decision makers and remediation must work across business lines. Investors should track the cost and effectiveness of those repairs.

Digital Assets Blockchain And Tokenization

EU Banking Authority Classifies USDC as First Significant E-Money Token

October 14, 2026, European Union
  • The European Banking Authority (EBA) classified Circle Internet Financial Europe SAS's USDC as the EU's first significant electronic money token under the Markets in Crypto Assets Regulation (MiCA). The EBA reports 45 notified electronic money tokens in the EU.
  • From November 12, 2026, the EBA will directly supervise specified requirements covering own funds, asset reserves, liquidity and recovery and redemption plans.
  • France's ACPR will continue to supervise other areas, including governance, ownership suitability, outsourcing and conflicts of interest. The classification changes supervisory responsibilities; it is not a new USDC launch or authorization.

USDC's designation brings a major stablecoin under closer EU oversight of capital, reserves and redemption. Circle must now manage a split supervisory relationship, while banks and payment providers gain a clearer view of which authority oversees critical financial safeguards. For Canadian stablecoin operators, the decision shows how growing scale can change supervisory obligations even after a token enters the regulated market. Compliance costs and the confidence of institutional counterparties will matter together.

Qivalis Gets Dutch EMI Approval for Bank Backed Euro Stablecoin

October 14, 2026, Netherlands
  • Qivalis announced that De Nederlandsche Bank authorized it as an electronic money institution, a regulatory prerequisite for its proposed euro stablecoin.
  • The 37-bank consortium across 15 European countries plans to serve payment providers, exchanges and financial institutions with a euro settlement asset.
  • The stablecoin has not launched. Issuance still depends on applicable MiCA requirements, including a published white paper.

Authorization gives the bank consortium an important legal foundation for issuing a euro stablecoin. It does not yet provide a token that customers can use. Banks, exchanges and payment providers will evaluate redemption certainty, liquidity and integration costs once issuance begins. Broad institutional backing could support distribution, but demand still has to be earned.

Flowdesk Adds PSD2 Payment Authorization for Stablecoin Services

October 13, 2026, France / European Union
  • France's Prudential Supervision and Resolution Authority authorized Flowdesk Europe as a Payment Institution under PSD2, adding regulated payment permissions to its European digital asset business.
  • The authorization allows Flowdesk Europe to provide custody and transfer services for fiat referenced e money token stablecoins to clients across the European Union.
  • Flowdesk already received its MiCA Crypto Asset Service Provider authorization from France's AMF in June 2026. The two permissions give the company regulated coverage across both crypto asset services and specified stablecoin payment activities.

Stablecoin operators increasingly need both digital asset and payment permissions when products cross from trading into money movement. Flowdesk can now combine MiCA services with PSD2 payment capabilities inside one European regulatory structure. For firms comparing international models with Canada's stablecoin framework, the operating question is how quickly multiple regulatory permissions can translate into custody, transfers and institutional volume.

Standard Chartered Opens Institutional Custody for Ripple RLUSD

October 12, 2026, Singapore / United Arab Emirates
  • Standard Chartered launched institutional custody for Ripple USD (RLUSD) issued on the XRP Ledger. The live service is available to eligible clients through its Dubai International Financial Centre branch, regulated by the Dubai Financial Services Authority.
  • The bank is working with Ripple and LMAX Group to make RLUSD eligible collateral for agreed trading and collateral management products using Standard Chartered's collateral mirroring model.
  • The planned model would allow eligible RLUSD to remain in bank custody while its value is represented to LMAX for trading purposes. Collateral integration is not yet live and remains subject to documentation, testing, regulatory requirements and internal approvals.

Institutional stablecoin use depends on custody, transfer permissions and access to trading venues. Standard Chartered now offers a regulated custody option for RLUSD. Its proposed LMAX integration could let clients use collateral without moving it to an exchange. The commercial benefit will depend on funding efficiency, safeguards and the costs of operating across several counterparties.

Episode Six Adds Live Backing Checks for Bank Issued Tokens

October 15, 2026, United States / Global
  • Episode Six launched Verified Backing within its E6 Token Control Ledger to check bank issued stablecoins and tokenized deposits when they're created and redeemed.
  • The bank side system confirms that a token has recorded backing before issuance, then checks that it's genuine and still outstanding before cash is released on redemption. The checks apply to tokens issued through the E6 ledger.
  • Verified Backing is available now to Episode Six customers in supported markets. It doesn't hold reserves or replace an issuer's audits, attestations or regulatory duties. Episode Six operates in more than 50 countries.

A bank issuing digital money needs to know which tokens are still valid before paying holders back. Episode Six puts that check inside the bank's ledger at the point of redemption, where an error could turn into a direct loss. The commercial question is whether this control reduces reconciliation work and fraud without slowing payment flows. Banks still have to prove the reserves exist; software checks aren't a substitute for that obligation.

Digital Banking And BaaS

Kraken Parent Payward Signs Agreement to Acquire Saldo Bank

October 14, 2026, Europe
  • Kraken parent Payward signed a definitive agreement to acquire Saldo Finance Oy, whose subsidiary Saldo Bank UAB holds a specialized banking licence in Lithuania.
  • Saldo offers deposits and lending in several European markets, including services for fintech partners. Payward intends to combine those capabilities with its existing payments and investment products.
  • Closing is expected in 2027, subject to regulatory approval and other conditions. Payward does not yet own Saldo Bank.

Buying Saldo could give Payward direct control over more European deposit and lending services instead of relying on bank partners for every product. The agreement is not ownership yet, and regulated banking brings capital and supervision costs. Once the deal closes, investors should watch customer uptake, funding costs and whether the combined businesses improve margins.

Crédit Agricole Signs Deal to Acquire Germany’s IKB Bank

October 12, 2026, France / Germany
  • Crédit Agricole agreed to buy 100% of IKB Deutsche Industriebank, giving the French banking group a larger direct position in German SME and midmarket lending if the deal closes.
  • IKB reported about €14.3 billion in assets and an €8.2 billion loan portfolio for 2025.
  • The transaction requires regulatory and competition approvals. Closing is expected by the end of Q2 2027.

IKB would give Crédit Agricole an established German business lending franchise and relationships it would otherwise have to build customer by customer. That creates opportunities to offer existing borrowers more services and fund loans through a larger banking group. Returns will depend on credit quality, customer retention and integration expenses after closing.

Hong Kong Opens Cross Border Banking Data Verification With Chongqing

October 14, 2026, Hong Kong / China
  • The Hong Kong Monetary Authority and Chongqing authorities launched a cross border data validation platform for banking services including account opening and loan applications.
  • The platform uses blockchain records and cryptographic hashes to check customer information without transferring or storing the original documents across the border. Banks are developing uses for data moving in both directions.
  • A related Shenzhen and Hong Kong platform has completed more than 40,000 validations for over 10 banks. Those are results from the earlier system, not transaction volumes from the new Chongqing platform.

Banks need reliable customer records to lend and open accounts across borders, but moving those records creates cost and privacy concerns. This platform lets participating institutions verify information without receiving the underlying files. That could shorten onboarding and credit checks for businesses operating in both markets. The next test is how many banks integrate it, what it costs per verification and whether customers see faster decisions.

Payments Infrastructure And Money Movement

South Africa Sets 2027 Timeline for Direct Nonbank Payment Access

October 16, 2026, South Africa
  • The South African Reserve Bank (SARB) plans to let fintechs, telecom companies and retailers access national payment clearing and settlement infrastructure directly, reducing their reliance on banks as intermediaries.
  • SARB expects to publish payment activity and exemption rules by November 2026. The first licensed nonbank participants could begin operating around March 2027, with broader access targeted for mid-2027. These are planned milestones, not approvals already granted.
  • The reform forms part of SARB's Payments Ecosystem Modernisation programme, which includes a national payments utility built around PayInc, faster digital payments and infrastructure shared across banks and nonbank providers.

Direct payment access could change the economics of launching a fintech in South Africa. Providers would have a route to clearing and settlement without depending on a sponsoring bank for every transaction. That could reduce intermediary costs and give new entrants more control over their services. The commercial opportunity now depends on licensing requirements, connection fees and how quickly the new infrastructure can support real transaction volume.

Visa Direct Puts USDC Cross Border Prefunding Into Production

October 15, 2026, United States / Global
  • Visa Direct moved stablecoin enabled prefunding into commercial production, with payments infrastructure provider Inyo Global as the first enabler for eligible Visa Direct customers and partners.
  • Inyo integrated the service into its existing APIs. Eligible businesses can use USDC to prefund cross border payouts in near real time, rather than relying exclusively on conventional funding windows.
  • Visa says Inyo's platform supports domestic and international payouts across more than 180 countries. Eligibility and geographic availability vary; the announcement does not provide live transaction volumes.

Stablecoin funding can help payment companies keep less idle cash in multiple accounts while supporting payouts outside traditional banking hours. Visa and Inyo now have a production service, but the financial gain depends on conversion costs, liquidity and the actual timing of settlement. Banks and payment fintechs should compare those economics with their existing prefunding arrangements before assuming round the clock access will improve margins.

UK Proposes One Access Rulebook for Payment Systems

October 15, 2026, United Kingdom
  • The UK's Payment Systems Regulator (PSR) opened consultation CP26/3 on replacing overlapping payment system access requirements with one regulatory framework. The proposal forms part of plans to transfer the PSR's responsibilities to the Financial Conduct Authority (FCA).
  • The package includes a revised General Direction 2, consolidated access guidance and an updated compliance reporting template. It covers payment system operators and providers seeking direct or indirect access. Existing access protections would largely remain in place.
  • The changes depend on the planned repeal of overlapping requirements under the Payment Services Regulations 2017. Responses close December 10, 2026. The consultation doesn't change access rights or grant firms new permissions today.

Payment fintechs spend time and money negotiating access to the systems that move customer funds. A simpler rulebook could reduce duplicated compliance work and make access terms easier to challenge when incumbents impose costly conditions. But consolidation alone won't guarantee better access. Founders need to examine connection charges, technical requirements and the rights available when an operator refuses entry. Those details will determine whether the reform lowers the cost of competing or mainly reduces paperwork.

Mastercard and BVNK Launch Stablecoin and Fiat Money Platform

October 15, 2026, United States / United Kingdom
  • Mastercard and BVNK launched Global Money Platform, available through BVNK, combining fiat accounts, stablecoin capabilities and conversion services through a single API.
  • Banks, fintechs and businesses can use modular capabilities for account management, stablecoin linked cards, treasury operations and local bank payouts through Mastercard Move.
  • Nuvei, Marqeta, Ontop, Beem and Almond FinTech are among the first announced integrators. Broader coverage of more than 40 currencies across over 200 countries and territories is planned for 2027, not available in full today.

Mastercard is turning its BVNK acquisition into a distribution channel for businesses that need to hold, convert and pay in both bank money and stablecoins. A single integration may lower development and reconciliation costs for fintechs. But buyers will still compare pricing, available corridors and responsibility for funds across the service. The competitive question is whether bundled infrastructure delivers better working capital management than separate providers.

Nuvei Gains South African Authorization for Local Merchant Payments

October 14, 2026, Canada / South Africa
  • Canada founded payments company Nuvei obtained authorization from the Payments Association of South Africa to offer local merchant payment services.
  • The authorization extends Nuvei’s domestic acceptance and acquiring infrastructure to 52 markets.
  • Nuvei plans to serve local businesses and international merchants through its existing global platform, with local payment routing and operational controls.

Local acceptance capacity gives merchants more than another foreign payment option. It can improve authorization routing and reconciliation where domestic rules differ. Nuvei already connects payment acceptance with enterprise invoice workflows; South African access extends the territory where that infrastructure can be sold. Merchant uptake and transaction performance will decide the return.

Polygon Completes Coinme Deal to Add US Regulated Payment Capacity

October 14, 2026, United States
  • Polygon Labs completed its acquisition of Coinme, adding regulated US money movement capabilities to its Open Money Stack.
  • The combined platform connects conventional payment entry and exit options with transactions recorded on blockchain networks.
  • Tazapay, Mesh, Toku and Kira are named among the first customers adopting the platform. Polygon distinguishes the completed acquisition from capabilities it intends to expand.

Owning licensed payment capacity changes Polygon’s role from infrastructure supplier toward a provider that can connect digital asset transfers to conventional money. It also adds a regulated distribution component to the stablecoin payment infrastructure opportunity. Customers will judge the combined platform by supported payment routes, settlement reliability and total cost, rather than token throughput alone.

Visa Receives Preliminary Approval for Domestic Clearing in China

October 13, 2026, China
  • The People’s Bank of China approved Visa’s Application to Prepare for a domestic bankcard clearing institution.
  • The decision permits Visa to begin formal preparations for a local clearing business; it is not authorization to process domestic card transactions.
  • Visa must complete the remaining regulatory steps before it can commence domestic bankcard clearing operations in China.

Visa has gained a formal route toward operating in China’s domestic card market, but it cannot clear local transactions yet. The next milestones are the remaining approvals and connections with issuing banks, acquirers and merchants. Market share will depend on those relationships and the cost and quality of competing with established networks.

Regulation And Policy

MAS Proposes Independent Dispute Resolution for Payment Firms

October 16, 2026, Singapore
  • The Monetary Authority of Singapore proposed requiring Major Payment Institutions and Standard Payment Institutions to join the Financial Industry Disputes Resolution Centre (FIDReC).
  • The proposal would also cover MAS regulated stablecoin issuers once Singapore’s stablecoin regime takes effect.
  • The consultation opened October 16 and closes November 30, 2026. Membership requirements are proposed, not yet mandatory under this consultation.

Payment providers could face an independent route for customer complaints, beyond their internal case handling. If adopted, membership would add costs for records, escalation and disputed transactions. Canada’s proposed open banking complaint requirements address related responsibilities for participants, although they are a separate regime. Firms selling payment and stablecoin services across borders need to cost customer redress into their operating model.

ESMA Expands Grounds to Delay Inside Information Disclosure

October 16, 2026, European Union
  • ESMA finalized revised Market Abuse Regulation guidelines on when listed issuers may delay public disclosure of inside information.
  • The revisions add five legitimate interests for delay, including requests from public authorities, incomplete information needed for market assessment and risks to sensitive commercial opportunities.
  • The guidelines become applicable when published in the EU’s 24 official languages. ESMA also removed provisions linked to prolonged processes already addressed by June 2026 rule changes.

Listed companies need decisions about delayed disclosure to withstand scrutiny after information becomes public. The revised grounds offer more clarity, but they do not remove the obligation to assess confidentiality and investor impact in each case. Boards and legal teams should update decision records and approval procedures rather than treating the five additions as blanket exemptions.

CSA Finalizes IFRS 18 Changes to Canadian Issuer Disclosure

October 15, 2026, Canada
  • The Canadian Securities Administrators published final amendments to National Instrument 52-112 covering non-GAAP and other financial measures disclosed outside financial statements.
  • The amendments address the new IFRS 18 rules for management defined performance measures and permit certain information to be incorporated by reference to the financial statement notes.
  • Subject to required approvals, the amendments take effect December 29, 2026. IFRS 18 applies to annual periods beginning on or after January 1, 2027.

Public companies must align earnings presentations, investor materials and financial statement notes before the reporting change. The CSA amendments apply to issuer disclosures, while separate IFRS 18 reporting changes affect federally regulated insurers. Finance teams should reconcile definitions across published measures and underlying accounts before disclosures reach investors.

ASIC Consults on Custody and Settlement Rules for Digital Assets

October 15, 2026, Australia
  • ASIC released Consultation Paper 392 to implement the Corporations Amendment (Digital Assets Framework) Act 2026, which is scheduled to commence April 8, 2027.
  • The package proposes operating guidance for digital asset platforms and tokenized custody platforms, together with requirements for holding customer assets, trading, settlement and financial resources.
  • Consultation closes November 27, 2026. Draft instruments may change before adoption.

The consultation puts detailed custody, settlement and capital proposals behind ASIC’s earlier digital asset licensing roadmap. Platform operators can now compare existing controls against draft requirements and price the cost of entering Australia. Firms must distinguish their responsibility for holding customer assets from their role in executing and settling trades.

FSB Proposes Eight Principles to Modernize Financial Regulation

October 14, 2026, Global
  • The Financial Stability Board opened a consultation on eight principles for modernizing financial regulation and supervision, aimed at improving effectiveness, efficiency, risk focus and responsiveness to emerging technologies and market changes.
  • The proposed principles would guide authorities as they review existing requirements while maintaining financial stability safeguards and implementing internationally agreed standards. They are proposals, not new obligations for financial firms.
  • Comments close January 8, 2027, with the final report expected in the first half of 2027. A related FSB implementation review identifies national circumstances and policy design as contributors to uneven adoption of international standards.

Regulatory modernization could affect how quickly new financial products reach customers and how much compliance costs smaller entrants. The consultation gives fintechs and industry associations a chance to identify rules that impose costs without improving outcomes. The real test will be whether future supervisory reforms shorten approval timelines, reduce duplication and preserve financial safeguards.

OCC Identifies Debanking Policies at Nine Major US Banks

October 14, 2026, United States / Canada
  • The US Office of the Comptroller of the Currency reviewed nine large national banks, including TD Bank and BMO Bank, for policies that could restrict services based on lawful activities or customers’ beliefs.
  • The OCC found that all nine had relevant policies during 2020 through September 2025. Its report reflects supervisory findings rather than a newly imposed industry rule.
  • The review followed a US executive order on fair access to banking and examined bank policies, account restrictions and related governance.

Customer screening is now subject to closer scrutiny over why banks accept or decline legitimate businesses. Institutions need documented distinctions between lawful customer activity, financial crime risk and reputational judgments. For Canadian banks with US operations, policy review and audit evidence are practical priorities. Access decisions that cannot be defended consistently can carry supervisory and commercial costs.

MAS Finalizes Consumer Safeguards for Financial Product Marketing

October 12, 2026, Singapore
  • The Monetary Authority of Singapore finalized enhanced safeguards governing how financial institutions and their representatives market financial products through public prospecting activities, including roadshows.
  • Institutions will be expected to limit prospecting to designated areas at commercial premises, appoint qualified supervisors and obtain consumer consent before proceeding with financial product marketing. Street canvassing and door to door prospecting remain prohibited.
  • MAS plans to issue updated marketing and distribution conduct guidelines in 2027, followed by a nine-month transition period for financial institutions to implement the enhanced safeguards.

The new safeguards require financial product distributors to prepare for tighter supervision of public sales activity. Firms should update staff training, customer consent records and controls over where representatives approach people. The transition period creates time to make those changes before MAS applies the revised guidelines.

Wealthtech Investing And Trading

India Tightens Controls on Algorithmic Trading in GIFT IFSC

October 16, 2026, India
  • India's International Financial Services Centres Authority issued new rules for algorithmic trading across GIFT IFSC stock exchanges, broker dealers and remote trading participants. The circular took effect immediately.
  • Trading algorithms require prior exchange approval and conformance testing. Firms must maintain real time risk controls, price and quantity checks, audit trails, tested kill switches and annual system audits.
  • Where AI, machine learning or self learning models influence a trading algorithm, the market participant remains responsible for explaining how the technology affects its decisions. Existing systems must complete required conformance testing within three months.

GIFT IFSC is putting a clear accountability line around automated trading. A firm can use more advanced models, but it can't outsource responsibility to the software or its vendor. Brokers, trading firms and technology providers now have a concrete checklist for approval, testing, surveillance and shutdown controls before they scale automated strategies.

ASIC Proposes Ten-Year Extension of Retail CFD Trading Protections

October 12, 2026, Australia
  • The Australian Securities and Investments Commission opened Consultation CS 64, proposing to extend its contracts for difference product intervention order for another 10 years and amend specific requirements affecting retail trading products.
  • ASIC reports that 68% of retail CFD traders lost money during 2023–24, with aggregate net losses exceeding A$458 million, including A$73 million in fees. The existing order limits leverage and includes protections against excessive retail losses.
  • The consultation proposes targeted amendments addressing industry practices and product developments identified since the order took effect. Comments close November 9, 2026. The proposed extension and amendments are not yet final.

ASIC’s loss figures put pressure on brokers that rely on frequent, highly leveraged retail trading. The proposal could affect product terms, customer acquisition and dealing revenue if adopted. Platforms should assess those consequences now, while regulators consider whether the existing protections still address the products offered to retail investors.

Sustainable Finance ESG And Financial Inclusion

ESMA Clarifies Impact and Climate Transition Claims

October 12, 2026, European Union
  • The European Securities and Markets Authority published two thematic notes on sustainability impact and climate transition claims used in investment funds, bonds and benchmarks. The notes provide examples of clearer and potentially misleading communications based on existing regulatory requirements.
  • For positive impact claims, ESMA distinguishes intentionality, additionality and measurability. Investment managers should explain how their strategies contribute to environmental or social outcomes, including the difference between a company's positive impact and the contribution attributable to investors.
  • Climate transition claims should explain targets, baseline years, implementation plans, progress measures and material assumptions. Firms should distinguish measurable commitments from future ambitions and explain relevant uncertainties. The notes do not create new regulatory requirements.

European asset managers need to distinguish between holding companies with strong environmental credentials and demonstrating how investor capital contributes to measurable improvements. The supervisory examples also clarify how future transition promises should be explained and monitored. Canada's recent green taxonomy and investor trust debate addresses the complementary question of which activities qualify for sustainable financing in the first place.

Risk Compliance And Regtech

FSB Finalizes 12 AI Risk Practices for Financial Institutions

October 15, 2026, Global
  • The Financial Stability Board finalized 12 sound practices for responsible AI adoption by financial institutions, following its June consultation and review of approximately 160 responses.
  • The practices cover board accountability, AI risk assessment, model selection, data governance, explainability, performance monitoring and human oversight throughout the AI lifecycle.
  • Financial institutions are also encouraged to manage AI cybersecurity risks and third party dependencies, including concentration and business continuity risks. The practices are voluntary and do not introduce binding requirements.

The FSB has given financial institutions a common reference for assessing AI controls across business lines and technology providers. Banks and fintechs can compare their existing governance, vendor contracts, model inventories and monitoring against the final practices. The commercial challenge is keeping controls proportionate as AI adoption expands without making every deployment slower or more expensive.

FCA Finds Market Abuse Surveillance Gaps at Seven Retail Brokers

October 14, 2026, United Kingdom
  • The UK Financial Conduct Authority published Market Watch 86 after supervisory visits to seven retail brokerage firms.
  • The review examined surveillance systems, escalation and governance for suspected insider dealing and market manipulation in retail equity trading.
  • The FCA identified weaknesses in how firms manage alerts, review potential suspicious trading and demonstrate effective oversight. These are supervisory findings, not newly enacted trading rules.

Retail brokers cannot treat surveillance as a technology purchase and assume compliance is handled. Alert thresholds, investigation judgments and management review determine whether suspicious trading is escalated. NCFA’s market abuse risk research also covers more complex automated trading behavior. Brokers need case files and decision trails that stand up to supervisory examination.

Weekly Close

This week brought production stablecoin payment services, a live €150 million blockchain loan and new rules for securities settlement and financial disclosures. Canadian firms also gained overseas payment access while domestic regulators advanced trading controls and reporting requirements. For founders, the opportunity lies in replacing costly operational steps with services customers will use repeatedly. Investors should look beyond launches to actual volumes, integration costs and the obligations that follow when a product becomes financial infrastructure.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

Canadian Banks and Telecoms Launch CSAFE Fraud Exchange

October 14, 2026 | Market Activity | Cybersecurity and Fraud, Digital Identity and Trust, Payments Infrastructure

AI illustration of Digital map of Canada showing connected banking and telecom networks sharing fraud intelligence through a secure national exchange

EnStream Connects Confirmed Fraud Intelligence Across Canadian Banks and Telecom Networks

On October 14, 2026, EnStream launched the Cross-Sector Anti-Fraud Exchange (CSAFE) with major Canadian banks and telecom providers, creating a shared platform for identifying repeat fraud across institutions. Members contribute confirmed fraud information that other participants can use during account opening, authentication and transactions. The exchange gives financial institutions a wider view of known fraud activity, with the potential to stop repeat attempts before customers lose money.

Bell, BMO, CIBC, Desjardins, National Bank, RBC, Rogers, Scotiabank and TELUS are the nine founding participants. EnStream, owned by Bell Mobility, Rogers Communications and TELUS Communications, operates the exchange. CSAFE is available now following an earlier pilot involving CIBC and Rogers, and its organizers are inviting additional organizations to participate.

CSAFE Connects Fraud Records That Banks Cannot See Alone

Criminals often target several organizations, taking advantage of the fact that one provider may have little visibility into fraud detected by another. A bank sees account activity and money movement, while a telecom provider has a different view of mobile devices and communications networks. CSAFE connects cross-sector intelligence so participating institutions can identify repeat fraud using information already confirmed elsewhere.

See: SLC Digital and Tracer Labs Partner on SIM Identity Layer

Members contribute confirmed fraud records to EnStream, which combines, standardizes and enriches the information through its platform. It also assesses whether records remain relevant as circumstances change. Each institution uses the resulting intelligence within its own fraud controls, allowing members to strengthen decisions without replacing their existing systems.

A provider may already have effective tools for detecting suspicious account activity but still miss fraud previously identified by another institution. National Bank's Sardine fraud controls is an example of the investment Canadian banks are making in their own detection systems. CSAFE adds a separate source of intelligence that could help participating institutions make those systems more effective.

The CIBC and Rogers pilot provided the foundation for expanding the exchange to other institutions. EnStream describes the pilot as demonstrating the value of sharing confirmed fraud intelligence between sectors. CSAFE's launch is an infrastructure milestone, with its wider financial impact depending on adoption and operating results.

Canada has a substantial fraud problem. The Canadian Anti-Fraud Centre recorded approximately C$351 million in reported losses during the first six months of 2026. Investment fraud accounted for C$139.6 million, followed by significant losses involving phishing and impersonation. The centre estimates that only 5% to 10% of fraud is reported, leaving much of the problem outside official loss figures.

Can Canadian Fintechs Join the CSAFE Exchange?

CSAFE begins with large financial institutions and telecom providers, but EnStream explicitly welcomes additional organizations from finance, technology and other industries. That opens a potential route for fintechs, payment service providers, digital wallets, credit unions and identity technology companies to participate. Membership requirements, pricing and technical access arrangements will determine how practical that opportunity becomes for smaller providers.

For fintech operators, access could improve fraud prevention at several important points in the customer relationship.

  • A payment provider might recognize a previously confirmed fraud pattern before authorizing a transaction, while a digital banking platform could strengthen checks during account opening
  • Participating firms could also contribute intelligence from fraud identified in their own services, making the exchange more useful as membership grows

See: Canadian Fintech Tuhk Raises US$6M Seed Round

Access also has competitive implications. Large banks can invest heavily in fraud analytics and draw on extensive customer activity, while smaller fintechs often work with fewer transactions and more limited internal fraud histories. Shared intelligence could help narrow that gap and allow independent providers to compete more effectively on customer experience, pricing and service. The terms of access will determine whether those benefits extend throughout Canada's financial technology market.

There are opportunities for technology suppliers as well. Fraud analytics providers, identity specialists and systems integration firms could help participants incorporate shared intelligence into existing operations.

Accurate Fraud Records Are Critical to CSAFE's Success

As more institutions join CSAFE, the accuracy of shared fraud records becomes increasingly valuable. EnStream says the exchange operates under a defined governance framework, while each participant remains responsible for its own fraud decisions. Clear rules for accessing, updating and correcting records will help protect legitimate customers from mistaken account restrictions and payment interruptions.

For banks and fintechs, reliable intelligence could reduce fraud losses and investigation costs while making digital services safer for customers. The wider opportunity is to strengthen fraud prevention across Canada's financial system without adding unnecessary friction to everyday banking and payments.

Talking Point

CSAFE creates a common source of confirmed fraud intelligence for Canada's largest banks and telecom providers, with opportunities for additional organizations to participate. As more financial services operate across banking, payments and communications networks, shared fraud protection could become increasingly valuable infrastructure. Will Canadian fintechs gain practical access to CSAFE on competitive terms, allowing the entire financial sector to benefit from stronger fraud prevention?


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

NCFA Weekly Fintech Intelligence Oct 3-Oct 9, 2026

Oct 3, 2026 | Last Updated: Oct 20, 2026 | NCFA Fintech Whisperer | Artificial Intelligence And Data, Digital Banking And BaaS, Capital Markets Infrastructure And Funding, Wealthtech Investing And Trading, Cross Border Payments And FX, Payments Infrastructure And Money Movement, Cybersecurity Fraud And Financial Crime, Regulation And Policy, Risk Compliance And Regtech, Embedded Finance, Lending Consumer Credit And BNPL, Treasury Liquidity And Cash Management, Digital Assets Blockchain And Tokenization, Digital Identity And Trust

Fintech market intelligence visualization

] Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-March 13, 2026, March 14-March 20, 2026, March 21-March 27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-June 19, 2026, June 20-June 26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-July 24, 2026, July 25-July 31, 2026, August 1-August 7, 2026, August 8-August 14, 2026, August 15-August 21, 2026, August 22-August 28, 2026, August 29-September 4, 2026, September 5-September 11, 2026, September 12-September 18, 2026, September 19-September 25, 2026, September 26-October 2, 2026).

Weekly Fintech Market Intelligence Oct 3 - Oct 9, 2026

Artificial Intelligence And Data

OSFI Makes Frontier AI a Supervisory Risk Focus for Canadian Finance

October 8, 2026, Canada
  • Canada's Office of the Superintendent of Financial Institutions says frontier AI can amplify cyber, technology, third party and reputational risks across federally regulated financial institutions.
  • OSFI says institutions should strengthen governance, controls and testing as AI capabilities advance, while boards and senior management remain accountable for the results.
  • The regulator is increasing its ability to assess frontier AI, technology concentration and critical third party dependencies and says these issues will remain part of its supervisory work.

Canadian banks and insurers now have a clearer view of what OSFI expects them to manage as frontier AI moves into financial operations. Firms will need evidence that they can test advanced models, understand critical dependencies and assign responsibility when AI affects important services.

Digital Banking And BaaS

Modern Treasury Applies for National Trust Bank Charter

October 5, 2026, United States
  • Modern Treasury submitted an application to the Office of the Comptroller of the Currency to establish Modern Treasury National Trust Bank.
  • If approved, the limited purpose national trust bank would provide federally supervised digital asset custody and related fiat services alongside Modern Treasury's payments and settlement capabilities.
  • Modern Treasury says its platform has powered more than US$600 billion in payments. The proposed bank would operate separately from the company's software and payment services.

Modern Treasury is trying to move from orchestrating regulated money movement to owning a federally supervised custody capability. That extends the strategy behind its earlier integrated payment infrastructure and would give the company more direct control over custody, settlement and the service boundary between fintech infrastructure and bank partners.

Rain Applies to Establish National Trust Bank

October 5, 2026, United States
  • Rain filed an application with the Office of the Comptroller of the Currency to establish Rain National Trust Bank, a proposed national trust bank based in New York.
  • If approved, the bank would provide fiduciary custody for digital assets and U.S. dollars, manage reserves for permitted stablecoin issuers and issue or redeem U.S. dollar backed stablecoins for institutional clients.
  • The proposed bank would not accept deposits, offer consumer accounts or make commercial loans. Rain says its infrastructure already supports stablecoin cards, wallets and money movement products used by millions of end users.

Rain is seeking to put custody, reserve management and stablecoin issuance inside a federally supervised institution rather than relying on separate providers for each function. Approval would give its fintech and enterprise customers a more direct regulated path from stablecoin infrastructure to banking controls.

hashbank Adds External Crypto Transfers Inside Licensed Banking

October 5, 2026, Georgia
  • hashbank added the ability to receive digital assets from external wallets, convert them to fiat and send assets to external blockchain addresses from the same banking application.
  • The service supports more than 150 digital assets and applies authentication, address verification, anti money laundering procedures and blockchain analytics to transfers.
  • The bank holds a full banking licence from the National Bank of Georgia, began live operations in 2024 and reports approximately 60,000 customers across 73 countries.

A licensed bank is putting external wallet activity inside the same operating environment as fiat accounts. That makes blockchain screening, address verification and conversion part of the banking control stack and gives customers a regulated route between bank balances and self custody without routing every transfer through a separate crypto platform.

Singapore Gulf Bank Adds Banking Infrastructure for Rain

October 4, 2026, Bahrain
  • Singapore Gulf Bank will provide Rain with operational, client money and virtual accounts, primarily in U.S. dollars.
  • The account infrastructure supports daily cash flows, client fund segregation and reconciliation as Rain's transaction volumes increase.
  • Rain was the first cryptocurrency exchange licensed by the Central Bank of Bahrain. Both Rain and Singapore Gulf Bank operate under CBB regulation.

Client money accounts and reconciliation are core operating controls for a regulated exchange, not peripheral banking services. Bringing those functions into a CBB regulated bank relationship gives Rain a more direct operating path for safeguarding customer funds and managing liquidity as its regional business grows.

Capital Markets Infrastructure And Funding

Airtel Money Begins Conditional London Trading

October 9, 2026, United Kingdom / Africa
  • Airtel Money began conditional dealings on the London Stock Exchange on October 9 following an offering priced at £1.96 per share, implying an equity valuation of approximately US$7 billion.
  • The offer involved 270 million existing shares and approximately US$703 million of proceeds to selling holders; it was not a US$703 million primary capital raise by Airtel Money.
  • Unconditional dealings and admission to the FCA Official List are expected October 14. Airtel Africa remains a long-term strategic shareholder of the mobile financial services business.

A mobile money operator with a major African distribution footprint is entering public markets as a separately traded financial platform. Investors can value payments, digital wallets and related services independently from the parent’s telecom business. The deal also tests public-market appetite for financial inclusion businesses with extensive networks and operating exposure across African jurisdictions.

Securitize Launches Tokenized U.S. Stocks for U.S. and Global Investors

October 8, 2026, United States / European Union / Global
  • Securitize launched tokenized access to 12 U.S. stocks, including Apple, Microsoft, Nvidia, Alphabet, Tesla, Meta and Amazon, through its registered broker dealer platform.
  • Each token is backed one for one by an underlying share and represents a security entitlement under U.S. commercial law, preserving applicable economic rights including dividends and voting rights where the underlying share carries them.
  • The product launched on Solana with USDC settlement and is expected to connect with Tokenized Securities Venues including OKXICE as the new U.S. tokenized stock market structure develops.

Tokenized U.S. equities have moved from venue design into a live regulated product available to eligible investors. Securitize is combining conventional share backing and investor rights with blockchain settlement, giving the market a practical test of whether tokenized stocks can expand without separating investors from the legal rights attached to the underlying shares.

DailyPay Adds US$200 Million in Securitized Funding for Earned Wage Access

October 8, 2026, United States
  • DailyPay completed a US$200 million asset-backed securitization of earned wage access receivables, its second such transaction following a US$200 million issuance in June 2025.
  • The transaction brings DailyPay's total receivables-backed debt financing to approximately US$1.4 billion, including its US$960 million secured credit facility. The offering comprised four classes of notes rated from AA (sf) to BB (sf) by Morningstar DBRS.
  • Citi acted as lead bookrunner and structuring agent, joined by Bank of America and Barclays as joint bookrunners. Canadian bank Scotiabank was among the co-managers. DailyPay reports serving more than 2,000 employers and six million employees.

Earned wage access providers must finance payments to employees before the employer's scheduled payroll date. DailyPay's second securitization expands that capacity and gives institutional investors another way to fund short duration payroll receivables. For fintech lenders and funding partners, the important question is whether access to asset-backed financing can reduce capital costs enough to support growth while keeping funding available through weaker credit markets.

Startale Opens Japan Bond Paying Interest and Principal in JPYSC

October 6, 2026, Japan
  • Startale Japan opened subscriptions for a digital corporate bond that will pay both interest and principal redemption in JPYSC, a yen denominated trust type stablecoin issued by SBI Shinsei Trust Bank.
  • Startale says it is Japan's first digital corporate bond to use a yen denominated trust type stablecoin for both interest and principal payments. The offering totals ¥99.9 million and carries a fixed annual rate of 5.00%.
  • JPYSC qualifies as a Type 3 Electronic Payment Instrument under Japan's Payment Services Act, while SBI Shinsei Trust Bank issues the stablecoin and manages the trust assets backing it.

The bond puts a regulated yen stablecoin into the full payment lifecycle of a conventional financing instrument. If the model works operationally, issuers can test stablecoin settlement against familiar corporate debt obligations rather than limiting use to transfers, trading or standalone token experiments.

UK Appoints RBC and Five Banks to Digital Gilt Pilot

October 6, 2026, United Kingdom / Canada
  • HM Treasury selected Barclays, HSBC, Lloyds, Morgan Stanley, NatWest and RBC Capital Markets as joint lead managers for the Digital Gilt Instrument pilot.
  • The managers will support underwriting, investor engagement and distribution of the proposed digitally native, short-dated sovereign bond.
  • The pilot is expected by the first quarter of 2027 and is designed to use a platform inside the UK Digital Securities Sandbox, with settlement recorded onchain. No completed bond issuance was announced on October 6.

RBC’s participation gives Canadian capital markets expertise a direct role in a sovereign issuance experiment, not just a vendor demonstration. For dealers, custodians and infrastructure providers, the practical questions are how digital securities enter established distribution channels and who controls the asset record, settlement and post-issuance servicing.

Sygnum Opens Fidelity Tokenized Liquidity Access in Singapore

October 5, 2026, Singapore
  • Sygnum opened Fidelity International's tokenized U.S. dollar liquidity solution to accredited and institutional investors in Singapore through Sygnum Pte. Ltd.
  • Sygnum's Singapore entity is licensed by the Monetary Authority of Singapore, while its Desygnate infrastructure supports the tokenized product's onchain fund registry, settlement and subscription functions.
  • The Fidelity product first launched with Sygnum in Switzerland in May 2026, making the Singapore rollout an expansion of regulated investor access rather than a new issuance.

An institutional tokenized liquidity product that already operated in Switzerland now has a licensed access route in Singapore. The expansion tests whether tokenized cash management products can move across regulated entities and jurisdictions without rebuilding the underlying issuance and administration infrastructure each time.

CFTC Allows Conditional Conversion to Perpetual Index Futures

October 5, 2026, United States
  • The CFTC’s Division of Market Oversight issued no-action relief permitting designated contract markets to convert certain existing perpetual-style broad-based security index futures into contracts without an expiration date.
  • Conditions include seeking feedback from position holders, giving advance notice and an opportunity to exit, providing risk disclosures, preserving other material contract terms and filing rule amendments.
  • The relief expires October 20, 2026. It does not provide open-ended permission to list any new perpetual futures product.

Exchange operators have a narrowly defined window to alter an existing contract structure, but only with procedural safeguards for participants. The relief provides a near-term test of how regulators handle continuous futures exposure and legacy open positions. Firms should focus on the eligibility conditions and deadline rather than extrapolate a general approval of perpetual derivatives.

OKXICE Files Notice for Tokenized U.S. Stock Venue

October 4, 2026, United States
  • OKXICE filed the public notice required to operate a Tokenized Securities Venue under the SEC's temporary conditional exemption for tokenized National Market System stocks.
  • The venue plans permissioned automated market maker liquidity pools on XLayer, with tokenized stocks paired against USDC, USDG or USDT and access restricted to approved wallets that pass identity, sanctions and wallet screening.
  • The notice lists more than 60 U.S. stocks for planned trading and requires third party tokenized shares to be backed one for one by underlying securities held through a registered broker dealer.

The SEC's five year pathway for tokenized U.S. stock trading now has a concrete venue design behind it. OKXICE combines permissioned wallets, stablecoin settlement, automated liquidity and broker held share backing, turning an exemption into an operating model that other tokenized securities venues can be measured against.

Digital Identity And Trust

Japan FSA Urges Stronger Cyber and Digital Identity Controls

October 9, 2026, Japan
  • Japan's Financial Services Agency issued an October 9 notice to financial institutions following unauthorized access incidents involving customer-facing systems, including breaches exposing identity document images and other personal information.
  • Institutions were asked to review cybersecurity controls, third party risk management and incident response arrangements, and correct deficiencies promptly. The notice also calls for stronger verification of identity document and facial images during remote customer onboarding.
  • From April 1, 2027, regulatory changes will generally discontinue identity verification based on submitted document images in favour of reading IC-chip information. The FSA urged institutions to strengthen their procedures ahead of that deadline rather than wait for implementation.

Remote onboarding is becoming a larger fraud control and technology migration issue for Japanese financial institutions. Banks and fintechs need to test how document authentication, chip reading, customer identity verification and fraud monitoring work together. Providers still relying on uploaded document images face a concrete transition deadline, while recent breaches put pressure on firms to tighten controls sooner.

Wealthtech Investing And Trading

Thailand SEC Finalizes Crypto ETF Rules for Bitcoin and Ethereum

October 8, 2026, Thailand
  • Thailand's Securities and Exchange Commission issued 11 notifications establishing a regulatory framework for cryptocurrency exchange traded funds. The rules take effect on October 16, 2026.
  • Initially, eligible funds may invest in Bitcoin and Ethereum. Crypto ETFs must operate as passive investment vehicles, maintain average annual net exposure of at least 80% to the underlying cryptocurrency and trade exclusively on the Stock Exchange of Thailand.
  • The framework requires SEC regulated digital asset custody, investor risk acknowledgements and restrictions on margin lending. It also permits qualified digital asset businesses to serve as fund supervisors and allows domestic mutual funds and private funds to invest in Thai crypto ETFs within existing limits.

Thailand has moved from consultation to a defined route for domestic crypto investment funds. Asset managers, custodians and brokers now have clearer operating requirements, although fund approvals and individual product launches still lie ahead. The limits on eligible assets, custody and leverage will influence which firms can compete and how much crypto investment activity enters regulated capital markets.

FCA Consults on Redemption Terms for Illiquid Retail Funds

October 8, 2026, United Kingdom
  • The Financial Conduct Authority opened consultation CP26/35 on aligning redemption terms with the time needed to sell illiquid assets in authorized retail investment funds.
  • The proposals focus on non-UCITS retail schemes with at least 50% of assets in inherently illiquid investments, including relevant exposures held through pensions and other wrappers.
  • The consultation closes December 11, 2026. The FCA has not yet imposed final redemption changes on the affected funds.

Liquidity promises and asset liquidity have to match. Fund managers and distributors should compare proposed redemption terms with actual asset disposal periods, investor expectations and the operations of savings wrappers. For private market access products, the consultation adds another regulatory reference point for designing redemption rights before fundraising begins.

ASIC Sandbox Authorizes Pocket Adviser AI Investment Advice

October 8, 2026, Australia
  • The Australian Securities and Investments Commission lists Pocket Adviser Pty Ltd as an active user of its enhanced regulatory sandbox, with an exemption effective October 8, 2026.
  • The exemption covers personal and general advice to retail clients on specified bank deposit facilities and securities listed on prescribed Australian financial markets.
  • Pocket Adviser intends to offer an AI-powered mobile and web service creating personalized ETF investment plans for people aged 18 to 30. The exemption expires October 7, 2028; the register does not establish that the product has commercially launched.

A startup can test a defined investment advice offering through an existing regulatory exemption without claiming general permission to automate every advice function. The useful comparison for Canadian wealthtech founders is how sandbox scope, product limitations and retail safeguards affect the journey from prototype to licensed distribution. Evidence of live advice quality and client outcomes remains a separate test.

La Caisse Takes a Bigger Role in FNZ's Turnaround

October 5, 2026, Canada and Global
  • The Financial Times reported that La Caisse, FNZ's largest investor, became more directly involved in the global wealth technology company's turnaround after another management change.
  • FNZ appointed Stephen Welch Executive Group Chair and interim CEO in September. Its board currently includes three La Caisse representatives, alongside directors representing Motive Partners and Generation Investment Management.
  • FNZ has raised US$2.6 billion from existing shareholders since August 2024. The company reports US$2.5 trillion of assets on platform and more than 30 million end customers.

This is no longer only a financing story. A major Canadian pension investor is using board influence and management changes as FNZ works to improve delivery and profitability. For private fintech investors, the case shows what ownership can require when a large platform needs more capital and investors cannot rely on an easy exit.

Cross Border Payments And FX

Payward and Singapore Gulf Bank Connect 24/7 Settlement

October 5, 2026, Asia and Gulf Region
  • Payward integrated SGB Net, Singapore Gulf Bank's real time multicurrency clearing network, for selected institutional clients in Asia and the Gulf region.
  • The connection lets participating clients settle transactions instantly 24 hours a day, seven days a week, starting with U.S. dollars. Additional currencies and clients are planned.
  • Singapore Gulf Bank will also use Kraken Prime as an additional source of digital asset liquidity.

Digital asset markets already trade continuously while fiat funding still depends heavily on bank cutoffs. Connecting a regulated bank clearing network directly to institutional digital asset infrastructure reduces that timing gap and gives participating firms a more continuous way to manage settlement, liquidity and counterparty funding.

Payments Infrastructure And Money Movement

Mastercard Sets European Offline Card Payment Deadlines

October 8, 2026, Europe
  • Mastercard will require newly issued cards across Europe to support offline payments from February 2027 and new or replacement terminals to support the capability from May 2027.
  • Offline chip-and-PIN transactions can receive local approval during connectivity failures, within a bank-set limit of up to €200 per transaction, and are submitted for clearing after connections return.
  • The capability already operates in Denmark, Sweden, Estonia and Latvia. The new requirements extend acceptance and issuance obligations across Mastercard’s European network.

Resilience is becoming a card-issuance and terminal-procurement requirement, not merely a contingency plan. Issuers, acquirers and merchants need to examine device capabilities, authorization limits and reconciliation processes before replacement cycles lock in incompatible equipment. Canadian payment providers should consider how outage tolerance is built into their own acceptance infrastructure.

BDO Unibank Moves Swift and PESONet Processing Onto Finastra

October 7, 2026, Philippines
  • BDO Unibank deployed Finastra Global PAYplus for high value and mass payments, including Swift and inbound PESONet processing.
  • The bank is bringing payment processing into a common hub with greater automation, configurable rules, ISO 20022 support and resilience controls.
  • Finastra says BDO is the largest commercial bank in the Philippines using Global PAYplus and can connect additional payment networks through the same platform.

BDO is consolidating domestic and international payment processing around one operating layer rather than maintaining separate systems for each rail. That can make it easier to add networks, apply common controls and automate routing as payment formats and clearing requirements change.

Cybersecurity Fraud And Financial Crime

CrowdStrike Finds Agentic AI Used Against South Korean Financial Firms

October 7, 2026, South Korea
  • CrowdStrike found infrastructure linked to a campaign against South Korean financial organizations that resulted in data theft from late September into early October.
  • The attacker used ARTEX, an open source agentic penetration testing tool, alongside several large language models to research vulnerabilities and conduct intrusion activity.
  • CrowdStrike says the campaign demonstrates how a financially motivated attacker can use AI tools to conduct multiple intrusions in a short period and expects adversaries to keep experimenting with this approach.

Banks now have to defend against attackers who can automate parts of vulnerability research and intrusion work that previously required more manual effort. The campaign makes agentic AI a live financial security problem, not only a future model risk, and raises the value of rapid detection across shared infrastructure and third party systems.

Regulation And Policy

EU Council Agrees New Supervision Model for Capital Markets

October 9, 2026, European Union
  • The Council of the European Union agreed key elements of its negotiating position on the Market Integration and Supervision Package, covering trading venues, securities depositories, central counterparties and crypto service providers.
  • Its position would transfer oversight of significant cross-border market operators to ESMA, while reserving direct supervision of crypto service providers for the most significant cross-border firms.
  • The package also proposes a voluntary pan-European market operator licence and a depositary passport for funds. The Council position is not enacted legislation and must proceed through the EU legislative process.

The proposal would change who supervises major trading and post-trading infrastructure and how firms expand across EU borders. Exchanges, fund operators and crypto providers need to examine the proposed significance thresholds and licensing options, not assume that every institution will face the same supervisor. For Canadian firms entering Europe, the eventual perimeter could materially affect expansion costs.

ESMA Tells EU Crypto Firms to Stop Services for Non MiCA Stablecoins

October 8, 2026, European Union
  • The European Securities and Markets Authority says crypto firms authorized under MiCA should stop providing EU clients services involving stablecoins that do not comply with MiCA.
  • The position covers trading platforms, exchanges, execution, order handling, advice, transfers, custody, administration and portfolio management.
  • National regulators should require firms to prevent clients from acquiring or increasing exposure to non compliant stablecoins and remediate remaining existing exposures as soon as possible and no later than three months after the opinion.

This gives EU crypto firms a concrete operating deadline rather than a general warning about unauthorized stablecoins. Platforms need controls that can identify affected tokens, restrict new exposure and manage existing positions across trading, custody and transfer services.

CSA Bans Investment Fund Chargeback Compensation

October 8, 2026, Canada
  • The Canadian Securities Administrators published final amendments to National Instrument 31-103 that prohibit chargeback arrangements in the distribution of publicly offered investment fund securities.
  • Under these arrangements, a dealer or dealing representative can be required to repay upfront compensation when an investor redeems securities before a specified period ends.
  • The regulator identified a conflict between an adviser’s financial incentive to retain a client’s investment and the client’s freedom to redeem. The amendments change the permissible compensation structure, rather than banning upfront commissions generally.

Dealers need to identify contracts and compensation schedules that expose representatives to redemption-related clawbacks and prepare for the new requirements. The compliance question reaches beyond disclosure: compensation design itself can influence recommendations and client outcomes. Canadian investment platforms and distributors should check how their adviser agreements and oversight controls need to change.

CFTC Opens Rulemaking Inquiry on Retail Crypto Transactions

October 5, 2026, United States
  • The Commodity Futures Trading Commission issued an advance notice of proposed rulemaking on leveraged, margined and financed retail crypto asset transactions under the Commodity Exchange Act.
  • The agency is seeking input on a potential crypto-specific category of designated contract market registration and the conduct and customer protection requirements that should accompany it.
  • Comments are due 60 days after publication in the Federal Register. The notice requests information for possible future rules; it does not itself authorize a new category of crypto exchange.

A dedicated federal market category could change the choice between existing derivatives venues and new crypto trading infrastructure. Exchanges and brokers should assess which products fall inside the transaction definitions and what market surveillance, registration and customer controls may follow. The consultation is an early opportunity to influence the rules before firms commit to a licensing model.

FinCEN Withdraws Two Proposed Digital Asset Compliance Rules

October 5, 2026, United States
  • The U.S. Financial Crimes Enforcement Network (FinCEN) formally withdrew two proposed digital asset regulations concerning transactions involving convertible virtual currencies, unhosted wallets and cryptocurrency mixing.
  • The first proposal would have imposed additional recordkeeping, identity verification and reporting requirements on certain cryptocurrency transactions involving unhosted wallets. The second proposed a special anti-money laundering measure targeting cryptocurrency mixing as a class of transactions of primary money laundering concern.
  • FinCEN confirmed both withdrawals on October 5, 2026, following consideration of public comments. Neither proposal had become a final rule, so the withdrawals do not repeal existing anti-money laundering obligations.

Crypto exchanges, custodians and other financial intermediaries now have greater clarity about two compliance proposals that will not proceed in their existing form. The withdrawals remove potential additional reporting and verification requirements while leaving established anti-money laundering obligations intact. For firms serving U.S. customers, the decision affects compliance planning and investment in transaction monitoring, particularly where digital asset activity involves self-hosted wallets or mixing services.

Risk Compliance And Regtech

American Express Faces US$350 Million AML Penalty

October 8, 2026, United States
  • The Office of the Comptroller of the Currency assessed a US$350 million civil penalty and a cease-and-desist order against American Express National Bank for Bank Secrecy Act and anti-money laundering program deficiencies.
  • The OCC cited inadequate staffing and expertise, weak risk assessments, testing and training, and customer due diligence that failed to reflect the bank’s substantial credit and charge card activities.
  • Breakdowns in suspicious activity monitoring and reporting affected approximately US$13 billion in suspected trade-based money laundering activity over the past decade. The Federal Reserve issued coordinated orders against related American Express entities.

A compliance program designed around a small deposit business cannot be assumed sufficient for a much larger card network exposure. Banks and payment companies need risk assessments that match actual transaction flows, backed by staff capacity, independent testing and timely escalation. The coordinated orders also underline how failures across related entities can become a group-wide supervisory issue.

MAS Sets Financial Sector AI Risk Guidelines

October 7, 2026, Singapore
  • The Monetary Authority of Singapore published artificial intelligence risk management guidelines applying to financial institutions across banking, securities, payment services and insurance.
  • The guidelines address AI governance, risk identification, oversight and controls proportionate to each institution’s exposure, including the scale and nature of its AI applications.
  • The guidelines take effect on October 7, 2027. This is a published supervisory standard, not evidence that every AI use case requires separate regulatory approval.

Institutions now have a defined preparation period to identify where AI enters customer decisions, critical operations and outsourced services. Model inventories, accountable owners and evidence of controls will need to stand up to supervisory review. The comparison for Canadian institutions is how OSFI’s principles translate into documented practices alongside the more explicit Singapore requirements.

S&P Global Launches Risk Assessments for Digital Asset Lending Vaults

October 4, 2026, Global
  • S&P Global Ratings launched its Vault Risk Assessment, a forward looking analytical framework for digital asset lending vaults that evaluates the relative risk of impairment to an investor's position.
  • The framework assesses portfolio credit quality, liquidity mismatch, curator, blockchain, protocol, vault security and governance risk. S&P says the assessment is not a credit rating and does not comment on yield.
  • S&P says deposits in digital asset lending vaults reached approximately US$10 billion in September 2026, up from US$1.5 billion in September 2024.

Institutional risk infrastructure is forming around onchain credit markets as capital moves into lending vaults. A standardized external assessment gives allocators another way to compare structures that differ in credit quality, liquidity, protocol exposure and governance, which can influence which vaults become investable for larger institutions.

Embedded Finance

SAP Pay Adds Circle USDC and EURC to Cloud ERP Payments

October 7, 2026, Global
  • Tereina and Circle are integrating USDC and EURC into Tereina's payment infrastructure, starting with eligible SAP Cloud ERP customers using SAP Pay.
  • SAP Pay sits directly inside SAP Cloud ERP and can support traditional payment methods alongside digital currency rails without moving payment execution into a separate application.
  • USDC is intended for eligible U.S. dollar payment workflows and EURC for euro workflows, giving businesses another settlement option inside existing ERP processes.

Adding regulated stablecoins to an ERP payment workflow brings programmable stablecoin payments closer to routine corporate finance. Businesses can test digital currency settlement inside the same systems already used for invoices, payment approval and reconciliation instead of building a separate crypto payment process.

Lending Consumer Credit And BNPL

Plaid Expands LendScore Into AI Credit Decision Infrastructure

October 6, 2026, United States
  • Plaid expanded its LendScore family with an upgraded core model, specialized scores for auto, short term and home lending, and LendScore Arc, a transformer based credit risk model that learns from transaction sequences.
  • Plaid reports 42% greater predictive lift than traditional credit data alone for its core model, alongside 39% lower delinquency at the same approval rate and 6.3% more approvals at the same level of risk.
  • The scores use consumer permissioned financial data and Plaid network insights and are delivered through Plaid Check, its consumer reporting agency, for use in approvals, pricing, credit limits and other lending decisions.

Plaid is moving beyond account connectivity into the decision layer of lending. The same permissioned financial data infrastructure used to connect accounts can now feed regulated underwriting, giving Plaid a larger role in how lenders translate open banking data into approvals, pricing and credit limits.

Experian Creates Cashflow Data Bureau for Open Banking Underwriting

October 6, 2026, United States
  • Experian announced Experian Cashflow Data Bureau Inc., a new consumer reporting agency operating under the Fair Credit Reporting Act.
  • The bureau brings together consumer consent and connectivity, standardized cash flow reporting, transaction categorization, attributes and scoring, analytics and decisioning around permissioned bank account data.
  • Experian says the new bureau is designed to make cash flow information easier for lenders to incorporate alongside traditional credit data rather than replace existing credit histories.

Experian is turning permissioned bank transaction data into formal consumer reporting infrastructure rather than treating cash flow as an additional analytics product. That gives lenders a regulated path to combine traditional credit files with current financial behaviour and moves open banking data deeper into mainstream underwriting architecture.

Treasury Liquidity And Cash Management

OCBC and Ant Open 24/7 Tokenized Deposit Treasury Corridor

October 7, 2026, Singapore / Malaysia
  • OCBC introduced a tokenized deposit solution for Ant International that supports continuous intra-group treasury management and liquidity transfers between Singapore and Malaysia.
  • The service is available through Ant International’s WhaleRTP platform and initially enables SGD- and USD-denominated tokenized deposit transfers around the clock.
  • The arrangement builds on OCBC’s existing bank tokenization work. It is a treasury service for Ant entities, not a general retail stablecoin payment launch.

Treasurers are gaining a way to reposition bank liquidity outside normal banking cutoffs while retaining a commercial bank deposit relationship. The operational work shifts to liquidity controls, access permissions, currency coverage and reconciliation across group entities. The important expansion test is whether the model can extend to more banks and corporate customers.

Ant International and HSBC Expand Tokenized Deposits Into UAE Treasury

October 6, 2026, United Arab Emirates / Hong Kong / Singapore
  • Ant International and HSBC completed pilot transactions using HSBC's Tokenised Deposit Service for real time UAE dirham transfers inside the UAE and U.S. dollar transfers initiated from the UAE to markets including Hong Kong and Singapore.
  • The transactions originated through Ant International's WhaleRTP blockchain based treasury platform and executed in real time through HSBC's tokenized deposit infrastructure.
  • Ant International is HSBC's first Middle East client to use the service. HSBC says its Tokenised Deposit Service is live in six markets, while WhaleRTP is supported by more than 20 banks and handles more than 17 currencies.

The pilot extends an already live bank tokenized deposit network into a new treasury region and cross border corridor. For multinational companies, the operating question is whether these networks can make liquidity movable across markets and currencies in real time without creating a separate treasury stack outside existing banking relationships.

Digital Assets Blockchain And Tokenization

Bank of Russia Admits First Nine Registered Crypto Operators

October 6, 2026, Russia
  • The Bank of Russia registered five digital depositories and four organizations conducting digital currency exchange activities under transitional provisions of legislation effective September 1, 2026.
  • Digital depositories may record and transfer digital currencies and digital rights. Registered exchange operators may buy and sell digital currencies on their own account outside organized trading.
  • The admitted firms must observe transaction and recordkeeping rules now and meet the full legislative requirements by September 1, 2027.

The registration system is turning a statutory crypto market perimeter into an operating set of authorized firms. Custody and dealing permissions differ, so counterparties need to understand precisely which activities each entity can perform. For foreign institutions, jurisdictional restrictions and sanctions considerations remain separate from the existence of a domestic registration.

Weekly Close

More companies can now offer financial services without owning the infrastructure behind them. That opens opportunities for smaller firms, but it also puts pressure on margins and leaves critical parts of the customer experience in someone else's hands. Canadian founders and investors need to look closely at where profits accumulate, who controls distribution and whether growing transaction volumes actually improve the economics of the business.

Follow the next developments in NCFA’s newsletter, browse fintech coverage and industry research, or review innovation opportunities.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

OSFI Flags Frontier AI Risks Across Canadian Finance

October 8, 2026 | NCFA Insight | Artificial Intelligence And Data, Risk Compliance And Regtech, Cybersecurity And Fraud

AI illustration of frontier AI, cloud and technology dependencies across Canadian financial institutions as OSFI highlights shar

Shared AI Infrastructure Is Becoming a Financial System Blind Spot

On October 8, 2026, the Office of the Superintendent of Financial Institutions warned that a small number of companies now dominate frontier AI models and the cloud infrastructure used by Canadian financial institutions, raising the risk of shared technology failures across the financial system. If one critical provider suffers an outage, cyber incident or operating failure, several financial institutions could be affected at the same time. OSFI also says institutions may struggle to maintain a clear view of AI use, vulnerabilities and controls at critical technology providers as adoption expands.

See: AI Payments Challenge Consent Rules And Liability

Canadian financial firms are advancing on AI swiftly. The Bank of Canada's 2026 Financial System Survey found that nearly all 54 respondents use AI, with planned expansion into investment management, financial crime prevention, customer service and operating workflows. Respondents themselves raised concentration among a small number of AI and cloud providers and the risk of shared mistakes when firms use similar models. OSFI now says it will assess common dependencies on critical service providers and their effects across the financial system. Canada can supervise how individual firms manage vendors, but it also needs to know when several institutions ultimately depend on the same model, cloud, API or software supplier.

What OSFI Added on October 8

OSFI hasn't introduced new AI rules. Its April frontier AI bulletin already warned that advanced models can find and chain software vulnerabilities at machine speed. Its July guidance on generative and agentic AI went further, including controls around agent identity, permissions, approvals and auditability. Those risks become more consequential as financial AI agents gain more authority inside regulated systems. The October update raises these concerns inside OSFI's formal risk outlook and puts more weight on what happens when the same suppliers support multiple institutions.

Issue Already known What changed October 8 Why it matters
AI cyber capability OSFI had already warned that frontier models can speed up vulnerability discovery and attacks. Frontier AI now receives focused treatment in OSFI's formal risk outlook. AI moves closer to regular prudential supervision rather than remaining a specialist technology issue.
Shared providers Existing guidance already covered third party concentration and AI dependencies. Directly links concentrated frontier model and cloud providers with disruptions that can affect several institutions. A supplier failure can become a financial system problem rather than stay inside one firm.
Foreign technology dependence Third party and operating risk rules already covered outside technology providers. OSFI now highlights growing dependence on technology services outside Canada. Foreign policy, technology restrictions or geopolitical events can affect access to services Canadian firms rely on.
Common financial system exposure The Bank of Canada and international regulators had already raised concentration concerns. OSFI says it will assess common dependencies on critical service providers and their wider effects. Regulators need to understand connections across firms, not only risk inside each institution.
AI adoption Financial institutions were already expanding AI use. Warns that moving too slowly can also weaken competitiveness and resilience. Risk management cannot simply mean slowing AI deployment.

OSFI is asking institutions to go faster and become more careful at the same time. Frontier AI can improve productivity, cyber defence and vulnerability detection, but governance, testing and controls have to keep pace. The Bank of Canada survey shows how quickly that tension is becoming operational. Nearly all respondents already use AI, 58% report difficulty integrating it into existing infrastructure and workflows, 56% cite talent constraints, and many expect to expand use over the next two years.

Canada Still Lacks a Public Map of Shared AI Dependencies

A bank may know which technology company it hired without seeing every dependency underneath that supplier. A fintech might use software that calls another company's model through an API while both services ultimately run on the same cloud infrastructure. Two vendors that look separate on a procurement list can still fail together. OSFI's July guidance reflects that problem by telling institutions to map internal and external AI dependencies, test failure scenarios, assess whether AI services can be moved or replaced and require suppliers to disclose whether they use AI to deliver services.

No public Canadian source currently shows which frontier models, cloud providers, APIs and supporting services are shared across regulated financial firms. That doesn't mean OSFI or the institutions have no visibility. It means the public evidence doesn't show a complete view across the system, while OSFI itself says firms may find it difficult to understand AI use and controls at critical third parties. The Financial Stability Board reached a similar conclusion internationally. Its AI monitoring framework focuses specifically on third party dependencies, provider concentration and the data gaps that make those risks harder to track.

The Bank of England's July Financial Stability Report says frontier AI could increase the risk of several firms or technology suppliers being disrupted at once and is being incorporated into financial sector cyber and operating tests. Its scenarios consider simultaneous disruption across firms, common technology supply chains and whether suppliers could support all affected clients at the same time. Canada has identified many of the same risks, but OSFI's October update shows that mapping and assessing common dependencies is still part of the work ahead.

Banks Need Better Tools to Track AI Dependencies

Financial institutions need better ways to see which models, clouds, APIs, datasets and agents support critical workflows, where suppliers overlap and whether a service can actually be replaced during an outage. They will also need clear records showing which AI system acted, what access it had, which data it used and who approved important actions. AI agents inside payment flows already make identity, permissions, approval limits and audit trails practical operating requirements rather than abstract governance concerns.

The commercial regtech opportunity is beyond generic AI compliance software. Banks, insurers and fintechs may need live dependency maps, supplier overlap monitoring, model switching tools, agent access controls, failure testing and records that can be reviewed by boards and regulators. The recent Agentic Regulator projects show builders already working on agent identity, auditability, market monitoring and automated supervisory tools. Smaller institutions may need these tools most because they depend more heavily on outside AI providers and have less capacity to build comparable controls themselves.

See: OECD-FSB Discuss New AI Trends in Finance

Simply adding more vendors won't solve the problem if those vendors rely on the same models or cloud infrastructure underneath. Better visibility, tested alternatives and clear permission controls may be more important than the number of contracts an institution signs. As AI moves closer to financial decisions, companies that can safely connect data, models and automated actions will gain an operating advantage. The tools that make those connections visible and controllable may become just as important as the models themselves.

Talking Point

OSFI's October warning is really about the infrastructure underneath financial AI. Canadian institutions are adopting more capable models while relying on a technology supply chain that is concentrated, layered and often outside Canada. The next supervisory challenge is knowing when many firms depend on the same underlying technology before an outage, cyber attack or model failure reveals the connection. That also creates a clear opening for Canadian fintech and RegTech companies that can map AI dependencies, test alternatives, control autonomous agents and produce reliable records of what those systems do.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

National Security Is Now Part of Financial Supervision

October 6, 2026 | Regulation And Policy, Banking And Credit, Financial Crime And Compliance, Cybersecurity And Operational Resilience, Digital Assets Blockchain And Tokenization, Payments And Money Movement

AI illustration of digital financial infrastructure showing payments, cyber security, data networks and financial system risk

Foreign Interference, Cyber Threats and State Risk Are Now Part of Financial Oversight

On August 20, 2026, Toronto Centre published the podcast episode The Landscape of Financial Supervision and Security, featuring Tom Keatinge, Founding Director of the Centre for Finance and Security at RUSI, in conversation with former Basel Committee Secretary General Bill Coen. They discussed how financial supervisors should respond when foreign interference, sanctions, cyber threats and state activity move through the same institutions and infrastructure they already supervise.

Canada has been building an answer since 2023. OSFI now assesses whether federally regulated financial institutions can protect themselves against threats to their integrity and security, including foreign interference. It has also built a national security function that brings classified intelligence into supervisory work. What began as a legislative mandate is now part of how Canadian financial institutions are supervised.

  • OSFI's integrity and security mandate explicitly includes foreign interference
  • Its guidance tells institutions to assess undue influence, foreign government connections, malicious activity and third party risk
  • OSFI can require institutions to address weak integrity or security controls
  • Its national security function works with Canada's security and intelligence community and FINTRAC
  • On September 8, 2026, Josée Turcotte became Deputy Superintendent responsible for integrity, national security and threats related to money laundering

A bank can be well capitalized and still face risk from foreign interference, state sponsored cyber activity, opaque ownership or compromised third parties. OSFI's integrity and security framework puts those threats inside its supervisory mandate.

How National Security Became Part of OSFI Supervision

In 2023, parliament expanded OSFI's mandate through Bill C 47. Federally regulated financial institutions became responsible for having policies and procedures to protect against threats to their integrity and security, including foreign interference. OSFI described the expanded mandate as a significant increase in the type of oversight it provides.

In 2024, OSFI finalized its Integrity and Security Guideline. Institutions were expected to assess risks involving foreign interference, undue influence, ownership, third parties, malicious activity and unauthorized access to their operations or assets.

In 2025, OSFI identified integrity and security as a major risk to Canada's financial system. Its work increasingly included state linked actors, cyber threats, geopolitical risk and intelligence sharing with federal security partners.

In 2026, The work continues as part of regular supervision. OSFI's 2026 to 2027 risk outlook continues to identify foreign interference, malicious cyber activity and threats to critical financial infrastructure. In September, OSFI appointed senior leadership with direct responsibility for integrity and national security.

National security has moved through legislation, supervisory guidance, intelligence capability, risk assessment and senior accountability. Banks should expect it to remain part of supervision, while fintechs may face many of the same expectations by extension through third party relationships with regulated financial institutions, including tighter due diligence, cyber, data, sanctions and incident reporting requirements.

What If the Money Is Legal but the Purpose Is Hostile?

Keatinge argues that traditional anti money laundering controls are better at finding known financial crime than activity backed by a hostile state. Money used to fund influence or interference may come from a legal source, move through regulated institutions and involve companies or people that appear legitimate. The problem may not be where the money came from. It may be who is directing the activity and why.

FATF has not said its framework is inadequate for political interference, but its own work shows how difficult state linked financial activity can be to detect. A June 2025 review found only 16% of assessed jurisdictions demonstrated high or substantial effectiveness in implementing targeted financial sanctions related to proliferation. The networks FATF describes often use front companies, hidden ownership, intermediaries, trade and virtual assets. FATF's proliferation financing review documents those methods.

FINTRAC's counter proliferation work covers sanctions evasion and threats to the security of Canada. Reporting entities are expected to look through ownership, control and corporate relationships when suspicious activity appears. A transaction can look ordinary while the people, companies or purpose behind it tell a different story.

Stablecoins Can Affect Bank Funding as Well as Payments

Keatinge uses stablecoins to show how financial innovation can create economic and security risks at the same time. If households and businesses in a smaller economy transfer substantial savings from local bank deposits into US dollar stablecoins, local banks may lose part of the funding they use to make loans. At scale, that can become a financial stability and monetary sovereignty issue, especially when domestic savings and payments depend more heavily on assets and infrastructure controlled outside the country.

BIS research published in 2026 says stablecoins could make bank funding more expensive if people move money out of deposits. That could leave banks with less money to lend, including to small businesses. The IMF also warns that if money moves from local bank deposits into stablecoins backed by assets held abroad, less funding may remain in the domestic banking system. So far, however, the IMF says there is no clear evidence that this has caused widespread bank disintermediation.

Stablecoins also raise sanctions, cyber and financial crime concerns. FATF has identified virtual assets in proliferation financing and sanctions evasion, while state sponsored cyber actors have stolen digital assets to help fund government programs. Canada's stablecoin regulatory framework brings these risks into the wider debate over how digital money should be supervised.

Financial Infrastructure Is Becoming a Security Target

Keatinge describes the financial system as a domain of geopolitical conflict. Regulators usually use different language, but sanctions, cyberattacks and financial infrastructure already play direct roles in relations between states. Governments can restrict access to financial transactions and services, state sponsored actors target financial institutions and payment networks, and financial infrastructure is treated as critical infrastructure.

In May 2026, G7 finance ministries, central banks, bank supervisors and market authorities ran a cross border exercise based on a large scale cyberattack affecting financial systems across G7 countries. They tested how authorities would respond, restore services, communicate during the crisis and coordinate across borders. The G7 exercise shows how a cyberattack on one part of the financial system can quickly affect institutions in other countries.

A serious attack on payments, banking access, market infrastructure or a major technology provider can disrupt services and weaken confidence at the same time. Firms building payment, identity, digital asset or financial infrastructure need to treat resilience as part of the product, not just an internal technology issue.

Five Cases Show Where Security Risk Reaches Finance

1. Foreign influence and a provincial referendum
In September 2026, Canada's Foreign Influence Transparency Commissioner said the office was aware of concerns about foreign influence activities directed at the Alberta referendum. The Commissioner reminded participants that arrangements with foreign principals intended to influence a provincial referendum can require registration. The Commissioner's statement shows how political influence can intersect with payments, intermediaries and funding relationships.

2. Crowdfunding brought permanently into financial crime controls
During the 2022 Emergencies Act response, Canada temporarily extended anti money laundering and anti terrorist financing obligations to donation crowdfunding platforms and certain payment service providers. After the emergency ended, the government made separate regulatory changes that permanently brought donation crowdfunding platforms and certain payment processors, including businesses handling fiat or virtual currency transactions into Canada's AML regime. NCFA challenged the permanent rules, arguing that the government had not published enough evidence to justify their scope and that smaller platforms would carry a disproportionate compliance burden. The episode shows how a security event can lead to lasting regulatory change for an entire fintech sector.

3. Digital assets used to preserve access to global finance
In August 2026, the US Treasury sanctioned two digital asset exchanges and a network of front companies that it said Iran used to launder billions of dollars, maintain covert access to international financial systems and support sanctioned actors. The Treasury action shows how exchanges, wallets and corporate networks can become part of sanctions enforcement even when a traditional bank is not at the centre of the transaction.

4. Payments routed through intermediaries
FINTRAC requires transactions originating from or bound for Russia to be treated as high risk and calls for additional checks on identity, source of funds or virtual currency, transaction purpose and beneficial ownership. Its sanctions guidance also describes shell companies, intermediary jurisdictions, crypto exchanges and brokers being used to obscure sanctioned activity. FINTRAC's Russia guidance shows why screening the immediate sender or destination may not reveal the real exposure.

5. Cyber theft used to fund weapons programs
FINTRAC has documented North Korea's use of cyber theft, digital assets, front companies and financial intermediaries in activity connected with weapons of mass destruction and ballistic missile programs. FINTRAC's proliferation bulletin connects cyber security, wallet intelligence, beneficial ownership and sanctions controls to the same state backed financing problem.

For fintechs, the risk may be behind the payment in who owns the company, who benefits, where the money is routed or what the transaction is meant to achieve. A security event can also bring new rules to an entire sector with little time to prepare.

Banks and Fintechs Will Need Better Threat Intelligence

Banks and credit unions may have to look beyond capital, liquidity and operational risk to ownership, foreign influence, sanctions, cyber threats and insider risk. Smaller institutions could face higher compliance costs as national security becomes more closely tied to supervision.

For fintechs and payment firms, onboarding may need to go beyond identity checks and standard AML screening. State linked counterparties, unusual ownership structures, high risk jurisdictions and cyber exposure can all matter. Faster payments and digital assets also leave less time to spot and stop suspicious activity.

See: FINTRAC Revocations Raise The Compliance Bar

RegTech firms have a clear opportunity. The challenge is to combine transaction data with beneficial ownership, sanctions, corporate networks and cyber intelligence without overwhelming compliance teams with false positives. AI, programmable finance and financial crime increasingly meet inside the same monitoring systems.

Founders and investors should expect these issues to arise earlier. They can affect product design, bank partnerships, regulatory approvals and access to capital well before a company reaches bank scale.

Talking Point

National security is becoming part of everyday financial supervision. The difficult challenge is spotting harmful activity when the money and transaction both look legitimate. Banks and fintechs will need to understand not just where money comes from, but who is behind it, where it is going and what it is meant to achieve.


NCFA Canada logoThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter