Karsten Wenzlaff, Advisor
August 26th, 2025
Karsten Wenzlaff is a Crowdfunding and Fintech Expert from Germany. He is Secretary-General of Digit[...]
Category Archives: Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech
NCFA Weekly Fintech Intelligence Jan 17-23, 2026
January 23, 2026 | NCFA Fintech Whisperer Weekly Intelligence | Artificial Intelligence And Data, Payments And Money Movement, Digital Assets Blockchain And Tokenization, Open Banking Open Finance And Data Sharing, Risk Compliance And Regtech
Image: Freepik
This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors. This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis. (Missed prior week's Fintech Whisperer? (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026)
Weekly Fintech Market Intelligence Jan 17-23, 2026
AI In Finance
UK Parliament Treasury Committee Publishes AI In Financial Services Report
Jan 20, United Kingdom
- 75% of UK financial services firms use AI, with the highest take up among insurers and international banks operating in the UK.
- The report calls for practical FCA guidance by the end of 2026 on how existing consumer protection rules apply to AI, and how senior managers stay accountable when AI harms consumers.
- Calls for AI focused stress testing by the Bank of England and the FCA, and it presses HM Treasury to designate major AI and cloud providers as critical third parties by the end of 2026. Download the 22 page PDF report, 'AI in Financial Services'
This lands in the middle of a problem every operator knows. AI stops being a feature once it touches credit, pricing, advice, fraud decisions, or customer outcomes. Buyers and supervisors ask one thing first. Can you prove how it behaves, who owns the decision, and what happens when it fails. Founders who build strong logs, clear accountability, and testable controls keep momentum when scrutiny rises. Investors should back teams that can ship AI inside regulated environments without betting on fuzzy governance.
Payments And Money Movement
SUNRATE Announces New Alliance With Juniper Travel Technology
Jan 19, United Kingdom
- Juniper integrates SUNRATE cross border payments and commercial card issuing into its travel technology ecosystem for travel companies.
- The announcement lists card issuing and settlement in more than 15 currencies, plus controls like smart spending limits and customizable security settings.
- The announcement lists collections in more than 30 currencies and positions the rollout as progressive with further product expansions planned through 2026 and beyond.
Travel payments stay messy because suppliers, currencies, fraud controls, and reconciliation collide in one workflow. When a travel platform embeds issuing plus FX plus collections, it turns payments into a default layer that buyers adopt without a separate vendor decision. Fintechs that sell cards, FX, or payables into travel win faster when they integrate into the platforms that already control inventory and supplier routing, and when they ship audit ready controls that finance teams can trust at scale.
Digital Assets, Blockchain And Tokenization
UBS Prepares Crypto Investing For Select Private Banking Clients
Jan 23, Switzerland
- UBS prepares to offer cryptocurrency investing options to select private banking clients in Switzerland.
- The report says UBS is selecting partners for a crypto offering and discussions have been underway for several months.
- UBS could start with bitcoin and ether trading for some clients, with potential expansion to Asia Pacific and the United States.
Private bank adoption changes buyer expectations fast. Once a top tier wealth manager treats crypto as an investable asset inside the core private bank, every crypto vendor selling into wealth has to meet private bank standards on suitability, controls, reporting, and operational discipline. Founders that sell custody, execution, portfolio reporting, or risk tooling should expect tougher diligence and longer lists of required evidence. Investors should watch for picks and shovels that fit inside existing wealth compliance rather than products that need new rules to work.
India Central Bank Proposes Linking BRICS Digital Currencies
Jan 19, India
- India’s central bank proposes linkages between BRICS central bank digital currencies to support cross border trade and tourism payments.
- The proposal could be introduced at the 2026 BRICS summit that India hosts.
- India’s e-rupee launched in December 2022 and has attracted seven million retail users.
Cross border CBDC linkage puts sovereign governed interoperability back on the table as an operating roadmap. Fintechs that sell wallets, settlement tooling, compliance rails, and treasury workflows should plan for rule dense governance, shared operating standards, and audit grade traceability that can survive multi jurisdiction scrutiny.
Market Infrastructure
Revolut Scraps US Bank Acquisition Plan And Pursues Standalone US Banking Licence
Jan 23, United States
- A report says Revolut drops plans to buy a US lender and pivots toward applying for its own US banking licence.
- Revolut holds discussions with US officials about a national bank licensing route through the Office of the Comptroller of the Currency.
- A standalone licence path puts Revolut on a track to offer deeper, locally supervised banking products instead of staying limited to partner led distribution.
A serious push for a US banking licence tells the market Revolut wants durable US distribution, not a light footprint. Once a global fintech commits to supervised rails in the United States, competitors face a tighter clock on product depth, compliance maturity, and funding strategy. Founders that sell infrastructure into banks and fintechs should expect more demand for audit ready controls, clean reporting, and resilient operations that hold up under US supervision.
BitGo Prices IPO And Begins Trading On NYSE
Jan 22, United States
- BitGo prices its initial public offering and begins trading on the New York Stock Exchange under its stated ticker.
- The offering includes an underwriter option for additional shares, as described in the release.
- The company frames the raise around scaling custody and related infrastructure for institutional digital asset activity.
Public markets put custody under a harsher light than private capital. Reporting cadence, risk controls, and operational proof start becoming the product. Founders selling into custody, compliance, and settlement stacks should expect tighter vendor scrutiny and cleaner evidence demands. Investors can treat this as a live benchmark for how the market values regulated digital asset infrastructure once it sits in plain view.
Capital One Agrees To Acquire Brex
Jan 22, United States
- Capital One enters a definitive agreement to acquire Brex in a $5.15B cash and stock transaction.
- Brex provides corporate cards, spend management, and payments software used by growth stage and technology companies.
- The transaction is expected to close in mid 2026, subject to regulatory approvals and customary closing conditions.
This deal pulls a modern fintech spend platform directly inside a large US bank instead of leaving it at the partnership layer. Once a bank owns the full card, payments, and spend stack, pricing pressure increases and distribution advantages compound fast. Founders building expense management, treasury, or commercial card tooling should expect tougher competition from vertically integrated banks. Investors should treat this as another signal that late stage fintech exits increasingly come through acquisition by incumbents that want product control, not just vendor relationships.
NYSE Develops Tokenized Securities Platform
Jan 19, United States
- The NYSE announces development of a platform for trading and on chain settlement of tokenized securities, and it will seek regulatory approvals.
- The platform design includes 24-7 operations, instant settlement, orders sized in dollar amounts, and stablecoin based funding.
- The design pairs the NYSE Pillar matching engine with blockchain based post trade systems, with support for multiple chains for settlement and custody.
Tokenization stops looking like a side experiment once a core exchange puts its matching engine and brand behind it. The winners don't come from who talks loudest about crypto. The winners come from who can run clean market structure under supervision, with settlement, custody, funding, and controls that broker dealers and clearing members can defend. Founders building post trade, custody, reconciliation, collateral, and stablecoin treasury tooling should treat this as a buyer signal. Regulated infrastructure buyers want fewer moving parts, stronger audit trails, and reliable operating hours that match global capital flows.
OSFI Sets Two Near Term Touchpoints For Data Collection Modernization
Jan 19, Canada
- OSFI schedules an Industry Day on Feb 12, 2026 to walk filers through the technology and data work tied to Data Collection Modernization.
- OSFI schedules a Technology Open Door Forum on Feb 23, 2026 to cover practical details for institutions preparing for the new platform.
- OSFI positions these sessions inside its multi year Data Collection Modernization program that runs with the Bank of Canada and CDIC, with a new platform expected to go live in 2026.
Data modernization rarely feels exciting until it hits production. When a supervisor modernizes filing rails, every regulated team ends up rewriting workflows, data mapping, controls, and audit evidence. Fintechs that sell reporting, data, regtech, or infrastructure should treat this as a near term buying trigger. Institutions will pick vendors that reduce change risk and make compliance proof simple, not vendors that add another layer of complexity.
Revolut Applies For Full Banking License In Peru
Jan 19, Peru
- Revolut applies for a full banking license in Peru as it expands further in Latin America.
- Revolut targets 100 million customers by 2027 and has more than 70 million retail customers globally.
- A full banking license would expand Revolut’s ability to offer local products inside Peru under local supervision.
Charter expansion at scale. When a global fintech pursues full licenses market by market, it raises the competitive bar on compliance execution, local product depth, and funding strategy. Competitors feel pressure through faster distribution, tighter pricing room, and regulators expecting stronger controls across the category.
Closing Outlook
The firms that win are the ones that control where money moves and can prove they run a tight and compliant shop. Payments and treasury are getting built into the software people already live in, not sold as a separate product. Big fintechs keep chasing full licenses so they can offer more, price tighter, and rely less on partners. Governments keep pushing cross border settlement ideas that bring more rules, more reporting, and more scrutiny.
Founders should treat three things as product work. First, build evidence into the workflow so every action leaves a trace you can explain. Second, design for partner and regulator questions before they show up, not after. Third, sell into distribution points that already own the customer and the switching moment, because that's where adoption actually happens. Investors can use the same filter. Back teams that reduce operating risk while keeping shipping speed. Avoid models that need regulatory fog, fragile partners, or perfect market timing. The upside concentrates in infrastructure and platforms that buyers can trust at scale.
NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets, subscribe to NCFA’s weekly newsletter, view a rundown of current fintech news and insights, or dive into the latest fintech industry research.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
 |  |  |
|---|---|---|
 |  |  |
From Guardrails to Judgment in Claude’s 2026 Constitution
AI Governance and Risks | Jan 23, 2026
Image: Freepik/DC Studio
What Claude’s 2026 Update to Embedded Judgment Changes
On January 21, 2026, Anthropic announced a new 2026 constitution for Claude, an internal framework that guides how its AI models reasons and responds, moving it's intelligence beyond guardrails and towards explicit value-based judgment, see: Claude's new constitution. This update builds on Anthropic’s original 2023 constitutional AI, which focused on constraining harmful outputs instead of embedding decision logic inside the model.
The timing matters. Policymakers are already warning that AI use in financial services is creating risks that existing oversight struggles to address, including opaque decisioning, unclear accountability, and consumer harm, as detailed in the UK Parliament Treasury Committee’s report on artificial intelligence in financial services. In Canada, the federal government launched a Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems, setting expectations for governance, oversight, and risk management at the organizational level rather than inside individual models. Since its launch in September 2023, a growing group of technology, financial services, and infrastructure firms have signed on with early alignment around common principles even as binding AI legislation is still under development.
Seen in that context, Claude’s 2026 constitution provides a clear example of how decision making is being built into AI models themselves, while responsibility for outcomes still sits with the institutions that use them.
From Guardrails to Embedded Judgment
2023 constitution
The original constitution operated primarily as a set of behavioural constraints. It instructed the model on what to avoid and what to prioritize, largely to prevent harmful or non compliant outputs. The emphasis was containment.
2026 revision
The revised constitution introduces embedded judgment logic. Instead of checking outputs against rules, the model is trained to reason through competing objectives using an explicit hierarchy of values.
See: Grok AI Sexual Image Failures Trigger Global Backlash
Under the 2023 framework, a customer support assistant helping with a disputed transaction would follow predefined rules. If the request met policy, the model would proceed. Under the 2026 framework, the model may pause or redirect even when rules allow action, if it determines that safety or downstream harm outweighs helpfulness. The outcome changes not because policy changed, but because judgment moved inside the model. The practical result is that product teams can no longer assume consistent behaviour across similar cases, since internal judgment may lead to different responses even when inputs look the same.
Explicit Prioritization of Values
2023 constitution
Values such as safety, helpfulness, and compliance were present but not clearly ordered. The model generally tried to satisfy all simultaneously.
2026 revision
Anthropic now makes the hierarchy explicit. Broad safety and ethics take priority, followed by compliance with rules and policies. Helpfulness ranks last.
Consider a compliant onboarding flow for a higher risk customer segment. In 2023, the model would guide the user through required steps as long as eligibility criteria were met. In 2026, the model may slow the process, add cautionary language, or decline to provide certain guidance if it determines that risk or misuse concerns outweigh the value of completing onboarding smoothly. Over time, this can change conversion and completion rates in ways that are difficult to trace back to a single rule or policy change.
How Decisions Are Explained
2023 constitution
Explainability centered on technical or policy based reasoning. Outputs were justified by reference to rules or restrictions.
2026 revision
The model is encouraged to explain decisions using value based reasoning, such as safety considerations or ethical caution.
See: AI Immerses Youth Today And The Real Question Of Protection
In a credit related inquiry, a 2023 style response would reference eligibility thresholds or policy rules. A 2026 style response may explain that certain guidance cannot be provided because of safety concerns or potential harm. While that explanation may feel reasonable to a customer, it doesn't currently map cleanly to regulatory expectations that rely on objective, measurable criteria. This creates added pressure on compliance teams to reconcile human readable explanations with audit and supervisory requirements.
How the Model Acts When Unsure (Conservative Bias)
2023 constitution
Uncertainty was handled implicitly through restrictions.
2026 revision
Anthropic explicitly states that uncertainty warrants caution. The model is trained to err toward conservative responses when intent, impact, or downstream effects are unclear.
In financial education or product comparison tools, a 2023 model would provide general guidance within allowed boundaries. A 2026 model may decline to offer comparisons or suggestions if it believes the information could be misused or misunderstood. This reduces risk, but if left unmanaged it can gradually narrow what the product is willing to do, even when the underlying business intent remains unchanged.
What This Changes for Fintechs in Practice
Model risk no longer stops at accuracy, bias, or drift. Those risks are familiar. Since the 2026 constitution itself becomes part of the model, fintechs now inherit a set of embedded priorities that influence how decisions are made when rules alone are not enough. If those priorities are not understood and tested, teams can see unexpected behaviour even when inputs and policies stay the same.
This puts real pressure on procurement and vendor governance. Evaluating models based on performance and compliance checklists is no longer sufficient. Fintechs need to understand how a model handles tradeoffs, when it decides to be cautious, and when it may refuse or redirect actions that the business considers acceptable. Those behaviours directly affect customer experience, conversion, and operational consistency.
See: AI’s Hidden Costs in Replacing Junior Workers
Accountability still sits with the organization. Even when an AI model makes its own call, regulators and customers still look to the firm using it. If an AI driven interaction leads to confusion, exclusion, or harm, the explanation and the responsibility is still firmly with the fintech provider, not the AI system or tool. Embedded judgment raises the stakes for internal oversight because there is less room to say the system simply followed a rule.
Canada’s voluntary AI code is an important step but it operates at a different level. It sets expectations for governance, monitoring, and oversight by organizations. It doesn't however address how a model reasons in real situations. That gap becomes more important now that judgment is being built into some models directly. Fintechs can be in a situation where the code meets expectations but they still face questions that they aren't fully prepared to answer when an AI behaves in ways that are technically compliant but operationally unexpected.
Closing Outlook
The change from Claude’s 2023 constitution to the 2026 update is a breadcrumb trail showing where AI governance is heading. For many firms there could be an emerging gap that shows up when a customer gets a different answer than expected, when a compliance team has to explain why an AI responded the way it did, or when a board asks how much control the firm really has over a third party model.
The real issue is not whether AI follows rules. It is whether fintechs understand how these systems behave in real situations, before that behaviour affects customers, regulators, or the business.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Bank of Canada Clarifies RPAA Trust Tax Treatment for PSPs
RPAA | January 20, 2026
Image: Freepik
Finance Canada Fix Removes Unintended Tax Burden From RPAA Trust Rules
On September 8 2025, the Bank of Canada published a letter to PSPs on a trust tax issue, that said safeguarding end-user funds in “trust” accounts, a requirement under the Retail Payment Activities Act (RPAA), could create unintended tax obligations under the Income Tax Act. The impact threatened to burden PSPs with additional tax filings and compliance complexity for simply holding user funds.
For fintech founders, investors and advisors building or backing PSPs, safeguarding end-user funds is a core requirement of the RPAA. If standard trust arrangements triggered full trust tax treatment, PSPs could end up doing extra tax filings simply to meet payments rules. That would force teams to spend time and money on tax compliance instead of building products, serving customers, or growing the business.
See: Stablecoin Interest and Rewards A Regulatory Fault Line
On December 23 2025, the Bank of Canada issued an update that confirmed the Department of Finance proposed changes to the Income Tax Act so that RPAA safeguarding trust arrangements would not be treated as formal trusts for tax purposes. Instead, qualifying arrangements would be treated as deemed loans from end users to PSPs, removing the risk that PSPs would face extra trust tax filings requirements.
The change is intended to apply retroactively to September 8 2025, subject to legislative approval.
The lesson here is that staying engaged with regulators, raising issues early, and participating in public comment or industry groups can help outcomes that materially affect operations and capital efficiency.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
OpenAI Revenue Surpasses US $20B, Raising Fintech Stakes
AI | January 20, 2026
Image: Freepik
Scale, Pricing Power, and Control Over AI Costs Are Tightening for Fintech Firms
On January 19, 2026 via Reuters, OpenAI's Chief Financial Officer Sarah Friar confirmed that its annualized revenue exceeded US $20B in 2025. Reported figures show revenue was $6B in 2024 and about $2B in 2023, meaning revenue more than tripled this past year alone, mirroring the scale of paid demand for OpenAI services.
See: OpenAI And Intuit Add AI Tools To Tax And Business Apps
Annualized revenue describes what a company would generate over twelve months if current sales levels stayed constant, and is a widely measure to assess momentum in subscription and usage-based businesses. For OpenAI, the number reflects sustained growth in paid ChatGPT subscriptions, enterprise contracts, and API usage across multiple industries.
Scale Now Sets The Rules
OpenAI’s revenue growth closely follows its infrastructure expansion. Reuters reports that the company increased its computing capacity from roughly 0.6 gigawatts in 2024 to about 1.9 gigawatts in 2025, nearly tripling in one year. That level of scale requires access to capital, power, chips, and long-term supplier agreements that only a handful of firms can sustain.
As scale increases, it begins to set the rules of the market.
Infrastructure capacity now determines who can offer AI services at competitive prices, who can guarantee availability during peak demand, and who can absorb cost volatility without disrupting customers. Performance expectations increasingly reflect what the largest providers can deliver, not what smaller firms can economically support.
Where Pressure is Felt First
This trajectory does not mean startups disappear overnight, but it raises the survival bar.
Startups that rely on thin margins face the earliest pressure. This includes companies that resell model access, wrap generic AI features into existing products, or compete primarily on convenience rather than control over data or distribution. As OpenAI captures more value directly through subscriptions, enterprise contracts, and advertising, profit margins for intermediaries narrows.
See: OpenAI Launches AI Jobs Platform to Rival LinkedIn
The pressure shows up first in functions that scale with usage rather than revenue, such as customer support automation, fraud monitoring, transaction screening, onboarding workflows, and real time decisioning. In these areas, AI costs rise with activity even when revenue does not.
By contrast, startups with proprietary data, embedded customer relationships, or regulated market access retain leverage. The dividing line is no longer access to AI. It is control over economics, customers, and accountability.
Implications For Canadian Fintechs
AI pricing is typically usage based. As fintech products scale, AI expenses scale with them, often faster and with less predictability than revenue. This creates margin pressure, particularly in Canada where fintechs operate with smaller domestic scale, tighter capital markets, and higher regulatory expectations. What appears manageable during early deployment can become material at scale.
In regulated financial services, vendor dependency becomes operational risk, and operational risk becomes regulatory exposure.
There is also a governance reality. When AI influences credit decisions, disclosures, complaints, or customer outcomes, fintechs remain fully accountable even when they do not control model behaviour, pricing changes, or service limits.
See: OpenAI Secures $40B – What It Means for Canada
Pricing power in AI is concentrating upstream. Intelligence is becoming a metered utility controlled by a small number of providers with the capital and infrastructure to set terms. Large global firms can absorb cost swings, negotiate volume discounts, and manage vendor risk across portfolios. Many Canadian fintechs cannot.
The strategic question is not whether to use AI, but how tightly to bind core operations to any single supplier. Fintechs that preserve provider flexibility, constrain AI use to high impact functions, and tie spending directly to measurable outcomes retain an advantage (for now). Those that treat AI as an invisible background feature risk discovering too late that it has become a fixed dependency with variable costs.
Closing Perspective
OpenAI’s $20B annualized revenue growth is about market structure limits. Scale now determines who sets prices, who absorbs volatility, and who carries risk. For Canadian fintech, AI decisions now belong alongside cloud infrastructure, payments rails, and core systems as board level considerations.The firms that stay competitive will be the ones that manage AI like any other core cost, with clear oversight and control.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Davos 2026 In A More Competitive and Risky World
Davos | Jan 19, 2026
Image: Current Global Risk Landscape (WEF 2026 Global Risks Report)
What Global Risk, Trade Tension, and Capital Uncertainty Mean for Canada
From January 19 to 23, 2026, global leaders are gathering in Davos, Klosters for the World Economic Forum Annual Meeting 2026, one of the few global forums where heads of government, central bankers, investors, and business leaders meet in the same place to discuss economic risk, trade, and long term stability. This year’s theme is "A Spirit of Dialogue", to address growing concerns that cooperation is weakening as global risks are becoming harder to manage.
Ahead of Davos, the World Economic Forum released its Global Risks Report 2026 (102 page PDF) based on its Global Risks Perception Survey of more than 1,300 experts across government, business, academia, and civil society worldwide. Participants were asked to rank the risks most likely to trigger a global crisis in the short term, as well as the most severe risks over longer time horizons.
What The Global Risks Report 2026 Shows Clearly
The report identifies "geoeconomic confrontation" as the top risk most likely to trigger a material global crisis in 2026. 18% of survey respondents ranked it first, moving it ahead of state based armed conflict for the first time. The report defines geoeconomic confrontation as the deliberate use of tariffs, sanctions, export controls, investment screening, subsidies, capital restrictions, and technology controls to advance national interests, rather than as temporary trade friction.
See: How Competition Powers Canada’s Economic Growth
The report frames the current period as an age of competition, where economic tools increasingly replace diplomacy. It also shows that confidence in multilateral systems is weakening.
68% of respondents expecting a more fragmented global order, where countries manage multiple regional relationships instead of relying on a single rules based framework.
Economic risks remain elevated. An economic downturn ranks 6th among global risks for 2026, reflecting concerns tied to trade fragmentation, high debt levels, and asset price vulnerability. The report doesn't predict a specific recession size, but it highlights how shocks can spread faster in a highly interconnected financial system.
The report also quantifies risks tied to trust and technology. Misinformation and disinformation rank 5th, driven by faster and more scalable digital amplification. Cyber insecurity ranks 9th, while adverse outcomes of AI technologies enter the top ten for the first time, reflecting concerns around misuse, governance gaps, and longer term economic and security effects. Importantly, the report shows AI related risks increasing significantly over the ten year horizon, as leaders view AI as a structural risk that compounds other pressures rather than a short term crisis trigger.
Why Global Risks Matters For Canada At Davos
Canada doesn't set global rules on its own, but it is deeply affected by how those rules evolve. The Global Risks Report makes clear that mid sized, trade dependent economies face higher exposure when economic pressure becomes a primary policy tool.
Market behaviour already price this sensitivity. Canadian equity markets have shown quick reactions to renewed tariff threats and trade policy signals, reinforcing how closely capital pricing tracks global risk narratives. This volatility isn't driven by domestic structural gaps alone, but by uncertainty in the global trade environment.
See: Global Rules Now Count Intangibles. So Can Canada
In Canada, business leaders are already feeling the pressures Davos is wrestling with. In the Bank of Canada Business Outlook Survey for the fourth quarter of 2025, firms report subdued sentiment and weak recent sales growth, and many point to trade tension and uncertainty as key reasons they stay cautious on hiring and investment. Some exporters also report that they are working harder to sell into markets outside the United States, which fits a broader push toward diversification as global risk rises.
For Canada, the forum offers a place to engage with partners, investors, and institutions that are reassessing risk, diversification, and resilience at the same time. In a world where geoeconomic confrontation leads the risk rankings, visibility and credibility matter.
Fintech Implications
The risks highlighted in the Global Risks Report translate into practical considerations for Canada’s fintech and innovation ecosystem.
First, trade concentration is a measurable risk.
When tariffs, sanctions, and investment controls rise, companies with narrow market exposure face greater volatility. Diversifying customers, partners, and capital sources becomes a defensive strategy, not just a growth choice.
Second, capital follows predictability. The report links economic downturn risk to policy uncertainty and fragmented governance. Investors respond by adjusting risk premiums, which affects valuations, fundraising timelines, and exit options, particularly for scale ups.
See: AI Immerses Youth Today And The Real Question Of Protection
Third, technology risk is contextual, meaning technology itself isn't the main risk. The risk comes from how it is used, governed, and trusted, especially when economic and political tensions are already high. The report doesn't treat AI or digital systems as isolated threats. Instead, it positions them as amplifiers that can worsen misinformation, cyber exposure, and economic disruption if governance and trust break down. For Canadian firms competing globally, credibility around security, governance, and responsible deployment increasingly affects whether they win customers and attract capital.
Outlook
Trade, finance, and technology are now at the center of geopolitical strategy, with direct consequences for businesses and investors. Canada’s fintech ecosystem should plan for sustained volatility. Growth strategies built on stable trade assumptions face higher risk. Founders and investors who understand these quantified global risks will be better positioned to manage exposure, attract capital, and compete responsibly in a more uncertain global economy.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
CIRO Cyber Breach Confirms 750,000 Investors Affected
Cybersecurity | January 14, 2026
Image: Freepik/macrovector
Forensic Findings Confirm Investor Data Exposure Following CIRO's August 2025 Breach
On January 14, 2026, the Canadian Investment Regulatory Organization confirmed that approximately 750,000 Canadian investors were impacted by the cybersecurity incident first detected on August 11, 2025, as detailed in its update on unauthorized access to some Canadian investors’ data. CIRO said the confirmation follows the completion of more than 9,000 hours of forensic examination to determine the full scope of the incident.
CIRO first disclosed the cyber incident publicly in August 2025, with early findings focused on registration information connected to member firms and registered individuals. NCFA covered those initial disclosures, CIRO cyber breach puts spotlight on regulatory security, when they were made public in September 2025. Now after
Scope of Investor Data
CIRO stated that the breach resulted from a phishing attack and that investor information copied from its systems may have included dates of birth, phone numbers, annual income, Social Insurance Numbers, government issued identification numbers, investment account numbers, and investment account statements.
CIRO confirmed that it doesn't collect account login credentials such as passwords, security questions, or PINs, so at least that information wasn't exposed.
See: Cybersecurity Bill C8 Raises Fintech Security Bar
According to CIRO, the investor information was collected in the normal course of its investigative, compliance assessment, and market regulation work carried out under its investor protection mandate.
Timeline of Disclosures
On August 11, 2025, CIRO detected a cybersecurity incident and shut down certain systems as a precaution while beginning an investigation.
On August 18, 2025, CIRO publicly disclosed the incident through its announcement on detecting a cybersecurity threat and confirmed that critical regulatory functions continued to operate.
On September 2025, CIRO confirmed that registration information for member firms and registered individuals had been affected and began notifying registrants directly, as outlined in its updates on CIRO cybersecurity incident updates.
On January 14, 2026, CIRO confirmed that approximately 750,000 investors were impacted and began issuing notification letters to affected investors by email or regular mail. CIRO stated that the January disclosure reflects the final findings of the forensic review and confirms the full extent of the data involved.
Notification and Support for Investors
Notification letters to impacted investors are being sent by CIRO starting January 14, 2026, and are being delivered by email or regular mail, as explained on its page covering information for investors affected by the cybersecurity incident.
See: CSA and CIRO Set Clear Rules for Finfluencers
Affected investors are being offered two years of credit monitoring and identity theft protection through both major Canadian credit bureaus. CIRO said there is currently no evidence that the compromised information has been misused and that it continues to monitor for malicious activity, including the dark web.
Implications and Outlook
This latest update materially expands the known scope of the CIRO cyber incident. Earlier disclosures focused on registrant data and regulatory systems. Hundreds of thousands of investors were affected, a significantly larger scale of exposure.
CIRO said that it notified law enforcement and relevant privacy authorities and retained external cybersecurity and forensic specialists to support its investigation. The regulator also acknowledged that a proposed class action has been filed in Quebec Superior Court in relation to the breach, adding a legal angle to the story that will no doubt continue to unfold together with remediation efforts. One might ask why were the disclosures phased, but the cyber incident seems complex given the completion of a 9,000 hour forensic review.
See: CIRO And CSA Signal Reset For Digital Investment Advice
For Canada’s financial system, the CIRO's data breach reinforces that cybersecurity risk extends beyond financial institutions themselves and into the infrastructure that supports regulation and investor protection. How regulators secure sensitive data, communicate evolving findings, and strengthen controls going forward will be important for maintaining confidence in market oversight.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Grok AI Sexual Image Failures Trigger Global Backlash
AI Regulation | Jan 14, 2026
Image: Freepik
Safeguard Failures at New Year Triggers Global Response To Grok's AI Sexual Image Failures
In the first days of January 2026, Elon Musk's AI chatbot Grok (developed by xAI and integrated into X) generated sexual images of real people, including images apparently involving minors, after internal safeguards failed. The issue became public immediately after the New Year and has gone viral since. What began as a platform failure quickly expanded into regulatory, legal, and civil society responses across multiple jurisdictions.
See: Inside the Feedback Loops Driving AI Failure
Malaysia and Indonesia are the only countries that have confirmed national blocks of Grok access, citing the creation of non-consensual sexualised imagery and public safety risks.
European Union officials also warned that failure to address the issue could lead to enforcement under existing digital safety rules. No EU-wide restriction has been imposed.
Public pressure has also played a role. International NGO Oxfam confirmed it's examining reports involving AI generated sexualised images created by altering real photographs, framing the concern around harm, consent, and exploitation.
Individuals whose likenesses were used in non-consensual AI generated sexual imagery have spoken out publicly in the United States, describing personal harm and exploring legal remedies, as reflected in accounts from people targeted by AI sexual images. Some unions and professional groups have also reduced or paused activity on X following the controversy.
Ofcom Investigation Brings Enforcement Risk Into Focus
In the United Kingdom, Ofcom launched a formal investigation into X after what it described as “deeply concerning reports” that Grok was being used to create and share sexualized images, including children.
Ofcom said it will assess whether X failed to remove illegal content quickly once aware of it, whether it took appropriate steps to prevent UK users from seeing such material, and whether it deployed highly effective age assurance measures to stop children from accessing pornographic images.
See: Grok Leak Triggers Global AI Privacy Alarm
If Ofcom finds X has breached UK law, it can impose a fine of up to 10% of worldwide revenue or £18 million (whichever is greater), and can seek a court order requiring internet service providers to block access to X in the UK.
UK ministers publicly backed the investigation, urging Ofcom to complete it swiftly and stating that victims would not accept delay.
Elon Musk responded publicly by criticising government actions, saying the UK government was looking for “any excuse for censorship” after questions were raised about why other AI platforms were not being examined. Separately, Musk said he was unaware Grok had generated explicit images involving minors and stated such uses violate platform rules.
United States And Canada Take Different Paths
The United States has not blocked Grok, but lawmakers have focused on liability. The US Senate unanimously passed legislation allowing victims of non-consensual sexually explicit AI generated images to pursue civil action, including damages and court orders.
Canada has also avoided a ban. Ottawa's AI Minister Evan Solomon responsible for artificial intelligence stated the government will not ban Grok or X at this stage, while acknowledging that Canadian law doesn’t clearly address AI generated non-consensual sexual imagery, and that laws needed updating to address deepfakes.
Why This Matters
To be sure, AI governance tightens once harm involves identifiable individuals as in this case. Across jurisdictions, responses are focusing on consent, child protection, and platform accountability rather than abstract debates about speech. For fintechs and other regulated firms deploying generative AI, scrutiny is on improving governance, safeguards, and enforcement readiness.
See: AI Immerses Youth Today And The Real Question Of Protection
From NCFA's perspective, AI systems should operate within clear legal and ethical boundaries that protect individuals, maintain public trust, and still allow responsible innovation to move forward. As of now, verified developments include two confirmed national blocks, active regulatory investigations, quantified enforcement powers, and new US civil liability legislation. Further responses remain under review.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
