Global fintech and funding innovation ecosystem

Category Archives: Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech

August 21, 2026   Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech, Enterprise, Scaleup, Entrepreneurs, Start-ups, Small Businesses, FinTech and Alternative Finance, Fintech and Healthcare, Fintech Services, Innovation and Resources, Leadership, Competition, Human Capital, Health, Marketing, Strategy, Growth, Design, Personal Finance, Tech, Tools, Productivity   No comments

How Fintech Is Redefining Employee Health Benefits in Canada

August 21, 2026

AI Image – Professionals meeting in a modern office while reviewing digital employee health benefits and health spending account tools on a tablet and laptop

Employee benefits have undergone a quiet technological transformation. Not long ago, managing a health benefits plan meant paper forms, printed receipts, mailed claims, and significant administrative work for employers and employees. Over time, insurance providers digitized much of the process. Employees could submit claims online, access their coverage through a website, and eventually manage their benefits from a mobile device.

Today, another shift is taking place. The rise of digital financial infrastructure is making it possible for businesses to rethink not only how benefits are administered, but also what type of benefit they provide in the first place. Instead of purchasing a traditional insurance plan and paying recurring premiums to an insurance provider, some businesses are choosing a Health Spending Account, where the employer establishes a healthcare spending budget and employees are reimbursed for eligible expenses. This development is closely connected to the broader evolution of fintech.

From Paper Forms to Digital Benefits

Traditional employee benefits were built around an insurance model. An employer purchased coverage from an insurer, employees received a defined set of benefits, and claims were processed through the insurance provider. For decades, much of the administration surrounding that process was paper-based. Employees might fill out claim forms, collect receipts, submit documentation, and wait for reimbursement.

The internet gradually changed that process. Insurance providers began offering online portals where employees could submit claims electronically, view coverage details, and track reimbursements. Electronic payments replaced cheques, while digital records replaced much of the paperwork that had previously been required to administer a benefits plan.

The underlying insurance product remained largely the same, but the infrastructure surrounding it became digital. This was an important first step in the digitization of employee benefits, but it also raised a bigger question: if technology can digitize the administration of benefits, can it also change the underlying model?

Beyond Digitizing Insurance

Fintech has repeatedly demonstrated that digitizing an existing process is only the beginning. Payments are a good example. Businesses moved from cash and cheques to credit cards, online banking, electronic funds transfers, and automated payments. Accounting moved from desktop software and paper records to cloud-based platforms, while lending increasingly moved online, with applications, underwriting, and funding taking place digitally.

These developments created something more important than convenience: new financial infrastructure. Once the infrastructure exists, businesses can build entirely new products and services on top of it.

See:

The same thing is happening with employee benefits. Modern benefits platforms can connect employers, employees, financial institutions, and payment systems through software. Claims can be submitted digitally, reviewed electronically, and reimbursed through electronic funds transfer. Once these pieces of infrastructure exist, businesses have more options than simply purchasing a traditional insurance product.

Separating the Benefit From the Insurance Product

This is where Health Spending Accounts become particularly interesting from a fintech perspective. A traditional health insurance plan transfers a defined set of healthcare risks to an insurance provider. The employer pays premiums in exchange for coverage according to the terms of the insurance policy.

An HSA takes a different approach. The employer establishes a defined healthcare spending allocation for employees, and employees submit eligible expenses for reimbursement, subject to the rules of the plan. Rather than purchasing an insurance product that provides a predetermined package of coverage, technology can provide the infrastructure needed to administer a defined healthcare budget.

This distinction opens up an entirely different model for employee benefits. The business can establish the amount it wants to make available, while employees have greater flexibility in how they use that benefit within the eligible expense rules.

Why This Wasn't Always Practical

The concept of giving employees a healthcare spending allowance is not new. What has changed is the infrastructure required to administer it efficiently.

Imagine an employer with 20 employees trying to manage an HSA using paper forms and cheques. Every claim would require documentation. Someone would need to review the expense, calculate the reimbursement, record the transaction, update the employee's available balance, and issue payment. The administrative burden could quickly outweigh the benefit of the flexibility.

Digital infrastructure changes that equation. An employee can submit a claim online, upload supporting documentation, and have the claim reviewed through a centralized platform. The employee's available balance can be updated electronically, while approved reimbursements can be sent directly to their bank account. What once required multiple manual steps can now be handled through a single digital workflow.

Payments Infrastructure Is a Key Piece of the Puzzle

The evolution of electronic payments has been particularly important in making this model practical. Electronic funds transfer (EFT), pre-authorized debits (PADs), and other digital payment infrastructure allow money to move between businesses and individuals without paper cheques or manual bank transfers.

For an HSA platform, this infrastructure can operate on both sides of the transaction. When an employee submits an eligible claim, reimbursement can be sent electronically to their bank account. On the employer side, funds can be automatically withdrawn when claims are approved, allowing the business to fund reimbursements without manually paying an invoice for every transaction.

See:  Canada Real-Time Rail Rules And Access Intelligence Guide

The result is a much more automated financial workflow: an employee submits a claim, the claim is reviewed, reimbursement is approved, funds are transferred electronically, and the employer's account is automatically debited. The development of these payment rails is an important part of what makes a digital, claims-based benefits model feasible at scale.

From Fixed Premiums to Usage-Based Benefits

Digital HSA platforms also introduce a different way for businesses to think about benefit costs. With a traditional insurance plan, employers generally pay recurring premiums for coverage, regardless of how much employees ultimately use the plan. An HSA can instead operate on a claims-based model, where the employer establishes a budget but funds are used as eligible claims are submitted.

This can provide small businesses with greater visibility and control over healthcare spending. Rather than paying a fixed premium for a predefined package of coverage, a business can establish how much it is prepared to allocate toward employee healthcare and allow employees to use that allocation for eligible expenses.

This reflects a broader fintech trend toward usage-based financial products. Businesses increasingly expect technology to provide more transparency into where money is going and to reduce the friction involved in moving and managing funds.

Employee Choice Becomes Part of the Product

The digital transformation of benefits is also changing the employee experience. Traditional insurance plans are designed around predefined coverage. An employee may have coverage for certain services but little or no use for others.

An HSA can approach the problem differently. Instead of deciding exactly which healthcare services employees should use, the employer establishes a budget and employees decide how to use that budget among eligible expenses. One employee might use their allocation primarily for dental expenses, while another might have significant vision, physiotherapy, or prescription medication expenses.

This creates a more personalized benefit without requiring the employer to manually manage every reimbursement. The software handles the administrative infrastructure while the employee has greater choice over how to use the benefit.

Fintech Is Changing the Role of the Middleman

This shift reflects a broader pattern across financial technology. Fintech does not always eliminate traditional financial institutions, but it can change where value is created and which parts of a financial transaction require an intermediary.

Digital payment platforms have reduced the need for businesses to rely on traditional payment processes. Online lending platforms have created alternatives to traditional lending channels. Digital investment platforms have reduced some of the friction involved in accessing financial markets.

Similarly, digital benefits infrastructure gives businesses an alternative to relying exclusively on traditional insurance-based employee benefits. The opportunity is not simply to make insurance administration faster. It is to allow businesses to choose a fundamentally different way of delivering healthcare benefits.

This is an important distinction. The innovation is not necessarily that an insurance product has become easier to use online. It is that the availability of digital claims administration and payment infrastructure makes it possible for a business to consider a different financial model altogether.

The Opportunity for Small Businesses

This evolution is particularly relevant to small businesses. Large companies have traditionally had access to dedicated benefits teams, negotiated insurance plans, and significant administrative resources. A five-person business typically does not have those resources.

Digital platforms can make sophisticated financial and benefits infrastructure accessible to businesses that previously would not have had the resources or administrative capacity to manage it themselves. A small business can establish a defined benefit budget, provide employees with access to a digital claims platform, and use electronic payments without building the infrastructure internally.

That can change the competitive landscape. A small business may not be able to compete with a large corporation on salary alone, but it can potentially offer a flexible digital health benefit that employees can use according to their individual needs. Technology effectively lowers the administrative barrier to offering that benefit.

The Next Stage of Digital Benefits

The evolution of employee benefits follows a familiar fintech pattern. First, the paper process was digitized. Then the user experience moved online. Now the underlying financial model itself is being reconsidered.

Health Spending Accounts are one example of what becomes possible when digital claims administration, cloud software, automated payments, and electronic banking infrastructure come together. For businesses considering this approach, understanding how Health Spending Accounts work is an important step in evaluating whether a digital, claims-based benefit model makes sense for their workforce.

The important development is not simply that employees can submit a claim from their phone instead of filling out a form. It is that technology has made it possible to rethink the relationship between employers, employees, insurers, and healthcare spending altogether.

As fintech continues to develop, more financial products may follow the same path: from paper, to digital, to fundamentally different. Employee benefits may be one of the clearest examples of that transition already underway.

NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Read More
August 20, 2026   Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech, FinTech and Alternative Finance, Fintech International, Innovation and Resources, Regtech, Compliance, Governance, Research, Tech, Tools, Productivity, Venture Funding and Building   No comments

FINRA Cybersecurity Practices For Member Firms

August 19, 2026 | NCFA Resource | Cybersecurity And Fraud, Risk Compliance And Regtech, Capital Markets And Market Infrastructure

NCFA Resource – FINRA Cybersecurity Practices For Member Firms

12 Controls For Cyber Risk, Vendors, Access And Recovery

In August 2026, the Financial Industry Regulatory Authority published Cybersecurity Effective Practices, a 12-part framework for FINRA member firms reviewing cybersecurity programs, controls and operating procedures. A firm can use the resource as a structured checklist for who owns cybersecurity, which systems and vendors create risk, who can access sensitive data, how threats are detected, and whether the business can recover when systems fail. FINRA designed the practices to scale with firm size, business model, technology complexity and risk profile.

What It Does In Practice

FINRA organizes the resource around 12 areas:

  1. governance
  2. risk management
  3. third party risk management
  4. asset management
  5. access control and identity management
  6. data protection
  7. security awareness and training
  8. vulnerability and patch management
  9. security monitoring
  10. threat intelligence and information sharing
  11. incident response and reporting
  12. resilience and recovery

The framework starts with accountability and risk ownership. FINRA recommends a designated cybersecurity lead, regular reporting to senior decision makers, documented policies and periodic reviews, while also making cyber risk part of decisions about new technology, systems and operating changes. From there, firms are expected to identify the information, systems and business functions they depend on, assess threats such as ransomware, insider activity and vendor exposure, test important systems for weaknesses and revisit those risks when technology or operations change.

Third party risk receives detailed treatment. FINRA treats vendors with access to customer information or critical systems as part of the firm’s security perimeter. Firms should know which vendors have access, understand important fourth party relationships and identify which providers support critical operations. Contracts can address audit rights, data handling, breach notification and visibility into subcontractors, while ongoing oversight should include access monitoring and a documented process for removing access and handling customer information when a relationship ends.

That concern extends beyond US broker dealers. Weak access control governance can expose sensitive information when a partner or service provider retains permissions that are unnecessary or poorly monitored. FINRA’s guidance connects vendor governance with the practical question of who can access systems and data, for how long, and under what controls.

Asset management and access control fit naturally together. FINRA recommends keeping a current inventory of hardware, software, cloud services and data flows, assigning owners to important assets and identifying systems that no longer receive security updates. Once firms know what they have, they can control who gets access through unique credentials, role based permissions, multifactor authentication, periodic entitlement reviews, segregation of duties and least privilege. Access should also be changed or removed promptly when employees change roles or leave.

Data protection, training and patching cover another part of the operating picture. Firms are encouraged to classify sensitive data, encrypt it at rest and in transit where feasible, control retention and protect backups, including with immutable or air gapped storage. FINRA also recommends ongoing employee training, role specific instruction for staff with sensitive access and phishing simulations backed by records of participation. Vulnerability management should include regular scanning, risk based patch priorities and verification that remediation work was completed rather than assumed.

Who Gets Value

The primary users are FINRA member broker dealers, including compliance teams, cybersecurity leaders, technology teams, operations executives and senior management. Smaller firms can use the 12 areas to identify where basic controls are missing without trying to copy the cybersecurity program of a much larger institution, while larger firms can use the same structure to review whether responsibilities, documentation and technical controls are working together.

Technology providers, managed security firms, consultants and RegTech companies serving broker dealers can also use the resource to understand what clients may expect around access, logging, vendor controls, data handling, patching, incident response and recovery. Boards and senior executives can use it as a governance checklist because FINRA makes cybersecurity ownership, management reporting, resource decisions and documented risk acceptance part of the program rather than leaving cyber risk entirely with the technology team.

Strengths And Limits

The main strength is that FINRA connects governance directly to operating controls. A firm can follow the framework from senior accountability through asset inventories, identity controls, encryption, training, monitoring and recovery testing, which makes the document more useful than a high level cyber policy statement.

Third party risk is also handled with more depth than a basic checklist. Firms are expected to understand vendor dependencies, monitor privileged access, address fourth parties and plan how systems and data will be handled when a provider relationship ends. Security monitoring extends that discipline to unusual access, suspicious data transfers, system changes and privileged accounts, with logs retained long enough to support operations, investigations, forensic work and applicable recordkeeping requirements.

The framework also includes threat intelligence, incident response and recovery. FINRA recommends using relevant threat feeds, updating defenses as attack methods change and participating in trusted information sharing networks. Incident response focuses on how a firm detects, escalates and contains an event, while recovery planning deals with how critical systems and data return to service afterward. Tested backups, tabletop exercises, offline procedures and defined Recovery Point Objectives and Recovery Time Objectives all help firms decide how much data loss and downtime different systems can tolerate.

The main limitation is jurisdiction. FINRA developed the resource for US member firms and connects several practices to US requirements, including SEC Regulations S-P and S-ID, FINRA Rules 3110 and 4370, and Exchange Act recordkeeping rules. The document also doesn't create new legal or regulatory requirements or reinterpret existing ones. For Canadian financial technology and service firms, its best use is as a practical comparison and control review, not as a statement of Canadian regulatory obligations.

Key Resources

FINRA Cybersecurity Effective Practices (12-part cybersecurity control framework)

Cybersecurity Effective Practices PDF (downloadable nine page resource)

Small Firm Cybersecurity Checklist (small firm program checklist last reviewed February 2024)

Core Cybersecurity Threats And Controls (small firm threats and control questions)

FINRA Cybersecurity Resources (cybersecurity tools, guidance and related material)

2026 Cybersecurity And Cyber Enabled Fraud (current threats and effective practices)

Proposed Class Action Targets Equifax Access Controls (access governance and third party permissions)

NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Read More
August 14, 2026   Blockchain, Crypto, Digital Assets Regulations, Blockchain, Crypto, Digital Assets, Tokens, CBDCs, Stablecoins, Metaverse, NFTs, Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech, Enterprise, Scaleup, FinTech and Alternative Finance, Fintech International, Fundraising, Investing, Trading, Innovation and Resources, Leadership, Competition, Human Capital, Health, Online Funding / Investing Portals, Payments, Transfers, Rewards, Regtech, Compliance, Governance, Research, Tech, Tools, Productivity, Venture Funding and Building   No comments

NCFA Weekly Fintech Intelligence Aug 8-14, 2026

Aug 8, 2026 | NCFA Fintech Whisperer | Digital Banking And BaaS, Regulation And Policy, SME Finance And Business Banking, Digital Assets Blockchain And Tokenization, Payments Infrastructure And Money Movement, Capital Markets Infrastructure And Funding, Artificial Intelligence And Data, Wealthtech Investing And Trading, Embedded Finance, Risk Compliance And Regtech, Lending Consumer Credit And BNPL, Cybersecurity Fraud And Financial Crime

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-24, 2026, July 25-July 31 2026, August 1-August 7, 2026).

Weekly Fintech Market Intelligence Aug 8 - 14, 2026

Wealthtech Investing And Trading

Gate Expands Into U.S. Stocks And Tokenized Equities Through Alpaca

August 13, 2026, Global
  • Gate, which Alpaca says serves more than 58 million users, launched access to more than 10,000 U.S. listed stocks and ETFs, eligible IPO allocations and tokenized stocks using Alpaca infrastructure.
  • Alpaca provides the brokerage infrastructure behind the offering and supports custody and settlement of the underlying shares associated with Gate's gStocks tokenized stock product.
  • One day earlier, Crypto.com launched Tokenized Stocks through Alpaca for a platform serving more than 150 million customers, offering economic exposure to 1,500 U.S. stocks and ETFs from US$1, with selected products available around the clock.
  • Crypto.com's products are derivative financial instruments that provide economic exposure rather than ownership of the underlying shares or associated shareholder rights.

Large crypto platforms are starting to look more like multi asset investment distributors, but the infrastructure underneath them is still regulated brokerage, custody and settlement. Alpaca has been building specifically for this role, which NCFA recently examined in its global brokerage platform expansion. The competitive question is who controls that regulated layer as crypto, traditional securities and tokenized products converge inside the same customer interface.

BlackRock Canada Embeds Bitcoin In Diversified ETF

August 10, 2026, Canada
  • BlackRock Canada launched the iShares Equity + Bitcoin ETF Portfolio, or IBQT, on the Toronto Stock Exchange with a strategic allocation of approximately 97% global equities and 3% bitcoin.
  • The fund carries a 0.22% management fee and packages Canadian, U.S., international and emerging market equities with bitcoin exposure inside one portfolio.
  • IBQT currently gets its bitcoin exposure through BlackRock’s Canadian IBIT fund, extending that product from a standalone bitcoin investment into a component of a diversified portfolio.

IBQT changes where the crypto allocation decision happens. Investors choosing the fund are buying a diversified equity portfolio with bitcoin already assigned a modest strategic weight, rather than adding crypto separately. That puts bitcoin closer to conventional portfolio construction and gives Canadian advisers and investors a simple way to combine traditional markets and digital assets in one listed product.

Payments Infrastructure And Money Movement

Flywire And Trustly Bring Pay By Bank To Canada

August 12, 2026, Canada / United States
  • Flywire expanded its Trustly partnership into Canada and the United States, letting payers authorize large domestic and cross border payments directly from their bank accounts.
  • In Canada, the payment itself runs through Pre Authorized Debit. Trustly adds bank authentication and account connectivity around that existing rail rather than using Canada’s future regulated payment initiation framework.
  • The service removes manual account entry during checkout and adds payment verification and risk controls around higher value bank transfers.

Pay by Bank is reaching Canadian customers before regulated payment initiation does. Foreign providers are improving the experience around an existing Canadian bank rail instead of waiting for new infrastructure. That makes the commercial timing important for Canada’s open banking opportunity: future regulated access will enter a market where some of the customer experience is already being built.

Dream Payments Launches Programmable U.S. Payout Network

August 11, 2026, Canada / United States
  • Toronto based Dream Payments launched Dream Payouts for eligible U.S. businesses in collaboration with J.P. Morgan Payments, supporting payments to suppliers, partners and individuals.
  • Eligible payments can arrive through the RTP network in under 30 seconds, including nights, weekends and holidays, with ACH and wire available when instant delivery is unavailable or not selected.
  • Software platforms can embed payout capabilities, while Dream provides recipient onboarding, identity checks, banking verification, approval controls and transaction tracking from initiation through settlement.
  • Dream says the infrastructure can support software and AI agents that initiate, approve and reconcile payments within defined business controls.

Dream is taking infrastructure built by a Canadian fintech into U.S. business payment workflows where the payment can start inside the software that created the obligation. That also gives agent payment infrastructure a more concrete operating model: software can participate in the workflow, but identity, authority, approval and settlement controls still determine whether money moves.

Francisco Partners To Acquire Moneris For C$2 Billion

August 10, 2026, Canada
  • Francisco Partners agreed to acquire Moneris from RBC and BMO for approximately C$2.0 billion in cash, with each bank receiving half of the proceeds. The transaction remains subject to regulatory approvals and other closing conditions.
  • RBC and BMO will keep exclusive referral relationships with Moneris even as ownership of the payments company transfers to Francisco Partners.
  • Moneris says it has nearly 2,000 employees in Canada and will retain its Canadian headquarters and technology infrastructure after the transaction closes.

Last year’s Moneris sale discussion has become a signed change of control. RBC and BMO are giving up ownership while preserving customer distribution, leaving Francisco Partners to decide how aggressively Moneris invests across merchant acquiring, commerce software and payments technology. The separation between infrastructure ownership and bank distribution is the more consequential part of the deal.

Capital Markets Infrastructure And Funding

Canada Starts Trial Of Government Securities Fail Fee Framework

August 13, 2026, Canada
  • CIMPA and CDS will begin the first stage of Canada's fail fee framework for Government of Canada bond and T-bill transactions on September 8, 2026.
  • The trial will run for at least 18 months. Settlement fails and indicative fees will be calculated, statistics will be published and CDS participants will receive reports and indicative invoices.
  • No fail fees will be charged or paid during this first stage. The Canadian Fixed-Income Forum will decide whether payments are activated later.

Canada is putting a settlement discipline framework into live measurement before imposing a financial penalty. That gives dealers, custodians and market infrastructure providers time to see where fails occur, what the operational burden looks like and whether the fee design changes settlement behaviour. The evidence from the trial will determine whether a reporting framework eventually becomes an economic incentive.

Canada Starts Standardized Government Collateral Trading On CCMS

August 12, 2026, Canada
  • CIMPA, TMX Group and Clearstream have started repo trading using a standardized Government of Canada General Collateral basket on the Canadian Collateral Management Service.
  • CCMS automates repo collateral management and supports unlimited real time collateral substitution, giving participants another way to manage liquidity and collateral throughout a transaction.
  • The first GoC basket is expected to be followed by standardized baskets covering provincial securities, Canada Mortgage Bonds, NHA mortgage backed securities, public sector securities and corporate collateral.

Canada's repo market now has a standardized collateral workflow running on infrastructure that the Bank of Canada also plans to use for its domestic repo operations. Wider adoption would make collateral easier to allocate and substitute across financing activity while reducing manual processing. The next evidence is usage: how much repo activity migrates onto CCMS and whether the additional baskets deepen participation beyond Government of Canada securities.

PointsKash Expands Capital Commitment To Support National Kiosk Rollout

August 12, 2026, United States
  • PointsKash announced an expanded strategic capital commitment of up to US$100 million from Hawk Capital Advisors to support commercialization and national deployment of its financial services platform.
  • The first phase provides for up to US$35 million through October 30, 2026 for priorities including refurbishment and deployment of approximately 2,100 company owned KashPoint kiosks, technology integration, merchant activation, PK Pay development and working capital.
  • A second phase could provide up to another US$65 million between February and April 2027, subject to operating and deployment milestones, customary closing conditions and financing availability.

The financing connects capital directly to deployment of a physical and digital financial services network rather than funding an undefined expansion plan. PointsKash acquired more than 2,100 cryptocurrency kiosks earlier in August and now has a staged capital structure intended to refurbish and redeploy that hardware while building payments, merchant and mobile services around it. The conditional structure also keeps a clear line between near term funding and the larger amount that depends on execution.

CIRO Short Sale Settlement Rule Takes Effect

August 11, 2026, Canada
  • CIRO now requires a Participant or Access Person to have a reasonable expectation that a short sale can settle on the intended settlement date before entering the order.
  • The rule adds a positive control before execution instead of relying only on action after a trade fails to settle.
  • CIRO provides defined exceptions, including certain sales involving securities a person is deemed to own, subject to prescribed delivery conditions.

The rule changes where settlement risk has to be dealt with. Firms must support the expectation of settlement before a short sale reaches the market, putting more responsibility on trading controls, securities availability and supervision. Difficult to borrow securities and repeated settlement failures will show how demanding the requirement becomes in practice.

Artificial Intelligence And Data

RBI Sets Concrete AI Governance Expectations For Banks

August 11, 2026, India
  • Reserve Bank of India Governor Sanjay Malhotra told banks to maintain inventories of material AI systems and establish governance that assigns clear responsibility for their use and risks.
  • He called for contracts with AI providers to preserve audit, explanation and exit rights, while material systems should be stress tested and tested against adversarial behaviour before deployment and periodically afterward.
  • Banks should retain meaningful human oversight where an AI error could materially harm a customer or financial stability, including lending, fraud and other consequential decisions.

RBI is pushing AI governance into the same operating disciplines banks already use for material risk. That aligns with Canadian work on regulated AI, where model oversight, vendor access, fallback plans and proof of control are becoming practical requirements. The advantage will come from deploying useful AI while being able to show who owns the risk and how the system is controlled.

Cross Border Payments And FX

Brazil Explores Linking Pix To Foreign Payment Systems

August 10, 2026, Brazil
  • Brazil’s central bank is assessing bilateral connections between Pix and foreign instant-payment systems, as well as participation in multilateral payment hubs, to support lower-cost and faster cross-border transfers.
  • The work goes beyond earlier discussion of possible international expansion. Banco Central do Brasil had already placed Pix Internacional on its 2027+ development agenda in March, and the August update points to more concrete interoperability options.
  • Pix processed nearly 80 billion transactions worth more than R$35 trillion in 2025, giving any international connection potential scale well beyond a niche cross-border payment product.

Pix is starting to test whether a national instant-payment rail can connect directly into foreign payment infrastructure rather than relying only on traditional correspondent channels. NCFA’s cross border payments benchmark shows why that distinction matters: strong domestic rails don’t automatically solve international cost, speed or interoperability. The practical questions are which systems Brazil connects to first, how FX, compliance and settlement are handled across jurisdictions, and whether this becomes a repeatable model for other domestic real time rails.

Digital Assets Blockchain And Tokenization

OCC Conditionally Approves World Liberty National Trust Bank

August 14, 2026, United States
  • The OCC granted preliminary conditional approval for World Liberty Trust Company, National Association, the proposed national trust bank of Trump family backed World Liberty Financial.
  • The approved business plan covers USD1 issuance and redemption, maintenance of USD1 reserve assets, fiduciary digital asset custody and limited conversion services for custody customers.
  • The approval is not authority to begin operations. The proposed bank is limited to trust company activities, does not plan to become an FDIC insured depository institution and must satisfy remaining OCC conditions before commencing business.

USD1 could move from a stablecoin structure supported by external service providers into a federally supervised trust bank that combines issuance, redemption, reserves and custody. That would bring more of the operating stack behind a payment stablecoin inside one regulated entity, while concentrating responsibility for reserve management, safeguarding and compliance.

Deribit Gets Dubai Broker Dealer Licence And Coinbase Liquidity

August 13, 2026, United Arab Emirates
  • Deribit FZE received a Broker Dealer Licence from Dubai's Virtual Assets Regulatory Authority, expanding the permissions behind its existing regulated spot trading operation.
  • Spot buy, sell and trade orders placed on Deribit can now be routed to Coinbase Exchange for execution, giving clients access to deeper liquidity and hundreds of additional assets.
  • The upgraded spot service is rolling out to retail, qualified and institutional investors. Assets acquired through it can also be used as collateral for Deribit derivatives trading, subject to regulatory approval.

The Coinbase acquisition is moving from ownership into shared market infrastructure. Deribit can keep its derivatives interface while drawing on Coinbase's spot liquidity and execution stack, extending the Deribit acquisition strategy into day to day trading. That brings spot execution, collateral and derivatives closer together inside one regulated operating structure.

Perpetual Markets Extends Regulated European Venue Into Crypto

August 13, 2026, Cyprus / European Union
  • PM MTF Ltd received CySEC authorization under MiCA for crypto asset services alongside its existing regulated European trading venue.
  • The authorized activities include operating a crypto asset trading platform, custody and administration, execution of orders, reception and transmission of orders, and crypto asset transfers.
  • The authorization provides a regulated route for Perpetual Markets to extend crypto services across the EEA, including infrastructure that can support institutional and white label distribution.

The significance is the combination of existing regulated market infrastructure with newly authorized crypto services. Rather than building a separate crypto venue, Perpetual Markets can extend an established MTF operating model into digital assets, giving brokers and institutions another route to offer crypto products under a European regulatory framework. The announcement authorizes expansion, but does not establish that every permitted crypto service is already live at scale.

Anchorpoint Starts Institutional Rollout Of Regulated HKD Stablecoin

August 12, 2026, Hong Kong
  • Hong Kong licensed issuer Anchorpoint began phase one of HKD At Par, or HKDAP, through Beta Access for institutional distributors and professional investors.
  • Authorized distributors can provide conversion between HKDAP and fiat currency for institutions, corporate users and professional investors while integrating the stablecoin into commercial and financial applications.
  • Anchorpoint is initially targeting cross border payments and settlement and distribution of tokenized real world assets. Broader retail access could begin as early as the end of 2026, depending on market conditions.

Hong Kong's stablecoin regime has crossed from licensing into controlled distribution and commercial use. That builds on the tokenized finance strategy NCFA has been tracking through Standard Chartered and Hong Kong's regulators. HKDAP now has to prove that regulated tokenized money can attract repeat transaction flow across payments, asset settlement and institutional distribution rather than remain a licensed product with limited circulation.

Coinbase Gets Abu Dhabi Permission For Tokenized Securities Hub

August 11, 2026, United Arab Emirates
  • Coinbase received Financial Services Permission from the Financial Services Regulatory Authority of ADGM to arrange investment deals and provide custody in support of tokenized securities.
  • Coinbase says securities issued through the structure will be backed by underlying shares, with verified token holders receiving shareholder rights including dividends and voting.
  • Transfers will be subject to ongoing sanctions screening, with wallet level freeze and seizure capabilities where required.

The important distinction is the legal and operating structure behind the token. Coinbase is combining regulated custody, underlying shares, investor rights and blockchain transferability rather than offering price exposure alone. That puts the model inside the infrastructure test NCFA is tracking for regulated tokenized assets: whether ownership rights, custody, compliance and transfer can work together at market scale.

Robinhood Uses Bitstamp To Bring Crypto Into Its UK App

August 10, 2026, United Kingdom
  • Robinhood has begun rolling crypto trading out to eligible UK customers, adding more than 50 digital assets directly inside its main investing app alongside equities, ISAs, options and futures.
  • Crypto trading is provided through Bitstamp UK Ltd, bringing the regulated UK infrastructure Robinhood acquired with Bitstamp into Robinhood’s retail distribution channel. Robinhood completed the acquisition in June 2025 to accelerate its crypto expansion outside the U.S.
  • The rollout is a material follow-on to Robinhood’s July 1 announcement, when the company said UK crypto trading was coming soon but had not yet launched it. Robinhood’s own disclosure at the time still said its UK entity did not offer crypto trading or custody.
  • The launch also adds Cortex Digests for Crypto, using generative AI to combine news, market data, technical indicators and Robinhood information into asset-level market summaries.

Bitstamp is becoming more than an acquired exchange for Robinhood. Its UK crypto infrastructure now lets Robinhood add digital assets to the same interface where customers already invest across traditional markets. The next test is whether that combination deepens customer activity and gives Robinhood a repeatable way to extend its wider investment platform into regulated crypto markets.

Revolut Launches Phased EURR Stablecoin Testing

August 8, 2026, Denmark / Poland / Portugal
  • Revolut announced phased testing of EURR on Ethereum for eligible customers in Denmark, Poland and Portugal beginning in August.
  • EURR is a euro-pegged e-money token issued by Bridge Building S.A., a Stripe company regulated by Luxembourg’s CSSF as a MiCA crypto-asset service provider and electronic money institution.
  • Eligible customers can use EURR across supported crypto services, external wallets and blockchain networks. Revolut expects to add more markets later in 2026 and says stablecoins tied to other currencies are in development through separate regulatory processes.

Bridge provides the regulated issuance while Revolut distributes EURR through its customer app. NCFA tracked Bridge’s European authorizations in July. The immediate evidence is limited to phased testing in three markets, and Revolut has not published EURR circulation, adoption or transaction-volume data.

Lending Consumer Credit And BNPL

Shakepay Launches Bitcoin Backed Line Of Credit In Canada

August 13, 2026, Canada
  • Shakepay launched BLOC, a revolving line of credit that lets eligible Canadian customers borrow against bitcoin held with Shakepay without selling it.
  • Customers can borrow up to C$50,000 starting at 9.5% APR and track their balance, payments, collateral and loan to value ratio inside the Shakepay app.
  • BLOC is offered by Shakepay Credit Inc. under exemptive relief. If collateral values fall, borrowers may need to add bitcoin, repay part of the balance or face liquidation under the product terms.

Crypto backed lending is becoming part of the product stack offered by Canadian trading platforms. Shakepay is integrating the credit relationship directly into its own account experience, while embedded crypto lending at Netcoins uses APX to supply the lending operation behind the interface. The two models create different economics and different responsibility for underwriting, collateral controls and servicing.

Better And Coinbase Open Token-Backed Mortgages

August 12, 2026, United States
  • Better and Coinbase opened their token-backed conforming mortgage to eligible Coinbase One members on August 12, according to an August 26 company announcement.
  • Better originates and services the mortgage, Coinbase powers the digital-asset component and the first lien is designed to meet Fannie Mae guidelines.
  • Approved borrowers can pledge crypto without selling it. Eligible Coinbase One members can receive a lender-funded closing credit equal to 1% of the mortgage value, capped at US$10,000.
  • The earlier waitlist represented more than US$260 million in projected loan volume. That figure indicates demand, not funded mortgages.

General availability converts the earlier token-backed mortgage launch into an open lending product. Funded volume, borrower performance, collateral custody and the treatment of pledged assets during delinquency will show whether the model can operate at conforming-mortgage scale.

Mortgage Automator Brings Construction Draw Management Into The Loan File

August 10, 2026, Canada
  • Toronto based Mortgage Automator launched Draw Management, bringing construction budgets, draw schedules and approvals directly into the active loan file for private lenders.
  • The feature automatically flags budget variances and applies Project Health scoring so lenders can monitor construction progress and draw risk without relying on separate spreadsheets or disconnected workflows.
  • The launch follows Mortgage Automator's August 4 acquisition of Lendr, extending its expansion into construction and private lending infrastructure across North America.

Construction lending is operationally intensive because capital is released in stages and each draw depends on current budget, progress and compliance information. Moving those controls into the loan system can reduce reconciliation work and make exceptions visible earlier, while giving private lenders a more integrated way to manage construction credit as portfolios scale.

Digital Banking And BaaS

TD Adds In-App Payroll Deposit Switching With Atomic

August 10, 2026, Canada
  • TD launched an in-app payroll direct-deposit switching experience that lets customers redirect payroll deposits to a TD account in about one minute with most employers.
  • The capability is powered by Atomic and sits inside the TD app, removing the need for customers to separately obtain banking details and update payroll information through their employer.
  • TD says it is the first Canadian financial institution to offer a fully integrated in-app payroll switching experience and has exclusive Canadian rights to Atomic’s capability through the end of 2026.

Opening a new bank account is easier than making it the primary account. Payroll switching reduces the work required to redirect recurring income and adds an operational layer to open banking and financial portability. Competition improves when customers can act on a better banking option, not only compare one. The next measure is whether easier switching translates into more primary-account relationships and deposits.

Revolut Receives Full French Banking Licence

August 10, 2026, France / Western Europe
  • Revolut Bank S.A. received a full French banking licence following a joint assessment by France’s ACPR and the European Central Bank, with the decision formally adopted by the ECB Governing Council.
  • The new French bank will begin serving customers in France before progressively expanding across Germany, Ireland, Italy, Portugal and Spain. Revolut Bank UAB in Lithuania remains the group’s other European banking hub.
  • Revolut says Western Europe now accounts for about 30 million customers. It has committed more than €1 billion to the region and is hiring more than 600 people across its Western European markets.

The licence turns Revolut’s banking expansion into a two-hub European structure with a new regulated entity serving its largest regional customer base. The execution test is how quickly customers and products migrate to the French bank, and whether local licences give Revolut more room to deepen lending, business banking and other regulated services across Western Europe.

Regulation And Policy

CFTC Uses Emergency Authority To Keep Kalshi Operating

August 11, 2026, United States
  • The CFTC exercised emergency authority after Kalshi notified the Commission of a market emergency tied to litigation brought by New York Attorney General Letitia James.
  • The Commission ordered Kalshi to continue operating in accordance with the Commodity Exchange Act Core Principles. New York is seeking to stop Kalshi from offering event contracts nationwide and is pursuing more than US$36 billion in damages.
  • The CFTC says federal law requires a uniform national derivatives market and has challenged state efforts to apply gambling laws to federally regulated designated contract markets in several jurisdictions.

The dispute is becoming a direct test of who controls access to event contracts in the United States. The CFTC is treating Kalshi as national derivatives infrastructure while states continue to challenge parts of the market through gaming law. NCFA’s regulated event contract infrastructure brief tracks the same boundary between exchange regulation, market integrity and product access.

FCA Adds Five Fintechs To Scale-Up Regulatory Unit

August 10, 2026, United Kingdom
  • ClearScore, Modulr, Teya, Urban Jungle and Zilch became the first firms regulated solely by the FCA to join its Scale-up Unit.
  • The unit gives fast-growing regulated firms a dedicated regulatory contact for product launches, permission changes, policy developments and other issues that arise as they expand.
  • The FCA also published findings from a 15-firm high-growth pilot, including weaknesses where governance, board oversight, risk management and controls had not kept pace with business growth.

The FCA is making regulatory engagement part of the scale up process rather than waiting for rapid growth to create supervisory problems. NCFA’s closer look at the five firms shows how that support intersects with payments, credit, insurance and European expansion. For fintechs, the tradeoff is clearer: faster access to regulatory guidance comes with closer attention to whether governance, controls and customer protections are developing at the same rate as products, customers and market expansion.

Senate Sets September Procedural Vote On CLARITY Act

August 8, 2026, United States
  • Senate leadership filed cloture on the motion to proceed to H.R. 3633, the Digital Asset Market Clarity Act, after the chamber left for its August recess without voting on the bill.
  • The Senate schedule says the cloture motion will ripen on September 15 at 2:15 p.m., creating a formal procedural route toward floor consideration when senators return.
  • The bill still faces a 60-vote threshold and unresolved negotiations, including bank concerns over stablecoin rewards and proposed ethics provisions.

The CLARITY Act has moved from an uncertain post-recess commitment to a scheduled Senate procedure. The September vote will test whether negotiators can assemble enough support to advance a federal market-structure framework and narrow the remaining disagreements over banking, stablecoins and digital-asset oversight.

SME Finance And Business Banking

Mercury Lets Businesses Issue Dedicated Cards To AI Agents

August 11, 2026, United States
  • Mercury launched Mercury Spend with budgets, expense policies and company cards managed through one spending system.
  • Businesses can issue dedicated cards to AI agents for approved transactions and monitor their spending separately from employee activity.
  • Budgets and expense policies provide the control layer around those cards, while Mercury can automatically categorize transactions and lock cards when required tasks remain overdue.

The important change is that an AI agent can now receive its own controlled payment credential rather than only prepare a transaction for someone else. That makes permission design part of the payment product. NCFA has already tracked how AI agents use card rails; Mercury brings the same question inside company spending, where budgets and policy controls define how much authority software actually receives.

SIDBI Takes Invoice Fraud Controls Into Live MSME Lending

August 10, 2026, India
  • SIDBI and MonetaGo confirmed that Secure Financing is live on SIDBI’s GST-Sahay invoice-based financing platform following a pilot and three months of production use.
  • The system validates invoices financed through India’s TReDS infrastructure and checks invoices across participating factoring platforms and lenders, including SBI Global Factors and India Factoring.
  • The production milestone follows the November 2025 SIDBI-MonetaGo partnership. The system is designed to identify duplicate financing and strengthen invoice validation before credit is advanced to MSMEs.

Invoice financing fraud controls are becoming shared lending infrastructure rather than checks performed inside one lender at a time. MonetaGo has been working on shared trade finance fraud controls for years; the SIDBI deployment brings that model into live MSME lending. The test is whether interoperable validation reduces duplicate financing and exceptions at scale while making cash flow credit faster and safer across multiple lenders and factoring platforms.

Embedded Finance

Mews Gains EEA Electronic Money Institution Licence

August 11, 2026, European Economic Area
  • De Nederlandsche Bank granted Mews Financial Services B.V. an Electronic Money Institution licence, giving the hospitality software company regulated financial standing across the EEA.
  • Mews plans to bring payment services, financial workflows and hotel operating data into the same platform, alongside safeguarding, fraud monitoring, sanctions screening and anti money laundering controls.
  • The company processed US$19.7 billion in hotel transaction value in 2025. Regulated capabilities are expected to begin with a Netherlands pilot in late 2026 before expanding across the EEA.

Mews is taking embedded finance beyond connecting hotels to outside financial providers. Its own regulated entity can now sit inside the software where hotel revenue, operations and payments already meet. That changes the regulatory boundary for embedded finance: vertical software can become part of the licensed financial infrastructure instead of remaining only the distribution layer.

Risk Compliance And Regtech

TransFi Puts AI Into Cross Border Compliance Workflows

August 14, 2026, Global
  • TransFi launched JARVIS, a proprietary compliance intelligence platform that combines KYC and sanctions screening, internet profiling, behavioural and biometric signals, and fiat and blockchain transaction monitoring.
  • JARVIS builds risk profiles, uses heuristics and AI research to recommend actions on high confidence matches, and escalates complex or ambiguous cases for human review.
  • Final KYC, KYB, transaction monitoring and screening decisions remain with TransFi's compliance team under MLRO oversight.

AI is entering compliance as an investigation and decision support layer rather than replacing accountable human approval. That model fits the emerging market for AI powered compliance workflows where evidence, escalation, auditability and human control determine whether automation can be trusted. TransFi's operating test is whether JARVIS reduces review effort across multiple jurisdictions without weakening decision quality.

Cybersecurity Fraud And Financial Crime

Trezor Customer Data Exposed In Shipping Provider Breach

August 13, 2026, Global
  • Trezor disclosed that a breach at shipping provider ShipMonk exposed customer information including names, email addresses, phone numbers and shipping addresses.
  • Approximately 11,742 customers had full contact and shipping information exposed, while another 1,947 had partial exposure, bringing the affected total to about 13,689 customers.
  • Trezor says its own systems, devices and services were not compromised. The company warns that the exposed information could instead be used for more sophisticated phishing and impersonation attempts.

The breach shows how self custody can inherit risk from suppliers that never touch a private key. Fulfilment providers still hold enough identity and location data to expose hardware wallet owners to targeted attacks, making vendor controls and data retention part of hardware wallet security rather than a separate privacy issue.

Weekly Close

Financial infrastructure is becoming easier to enter and harder to operate well. Bank switching is getting simpler, payments are becoming programmable, AI agents are gaining spending authority and software platforms are taking on regulated financial roles. At the same time, regulators are putting more weight on governance, settlement discipline, market access and accountability. The competitive advantage is moving toward firms that can combine better distribution with stronger control of the infrastructure underneath it.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.

NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Read More
August 7, 2026   Blockchain, Crypto, Digital Assets Regulations, Blockchain, Crypto, Digital Assets, Tokens, CBDCs, Stablecoins, Metaverse, NFTs, Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech, Enterprise, Scaleup, FinTech and Alternative Finance, Fintech International, Fundraising, Investing, Trading, Innovation and Resources, Leadership, Competition, Human Capital, Health, Online Funding / Investing Portals, Payments, Transfers, Rewards, Regtech, Compliance, Governance, Research, Tech, Tools, Productivity, Venture Funding and Building   No comments

NCFA Weekly Fintech Intelligence Aug 1-7, 2026

Aug 1, 2026 | NCFA Fintech Whisperer | Digital Assets Blockchain And Tokenization, Treasury Liquidity, Embedded Finance, Artificial Intelligence And Data, Cybersecurity Fraud And Financial Crime, SME Finance And Business Banking, Payments Infrastructure And Money Movement, Capital Markets Infrastructure And Funding, Regulation And Policy, Risk Compliance And Regtech

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-24, 2026, July 25-July 31 2026).

Weekly Fintech Market Intelligence Aug 1 - 7, 2026

Artificial Intelligence And Data

AMD To Acquire Toronto AI Chip Startup Taalas

August 6, 2026, Canada / United States
  • AMD reached a definitive agreement to acquire Toronto based Taalas, whose specialized silicon is designed to reduce compute and memory bottlenecks in AI inference. The transaction remains subject to regulatory approvals and other closing conditions.
  • AMD plans to integrate Taalas technology into its AI accelerator roadmap and develop system level solutions alongside AMD Instinct GPUs, bringing the Canadian company’s inference architecture into one of the major global AI computing platforms.
  • Taalas was founded in Toronto in 2023. AMD says it intends to retain and grow the Canadian team as part of its semiconductor and AI presence in the country.

The acquisition puts Canadian inference technology inside AMD as competition for AI compute intensifies. NCFA’s deeper look at the Taalas acquisition examines the Canadian tradeoff more closely: engineering can remain here while ownership, capital allocation and the commercial direction of the technology move inside a global semiconductor company.

Scotiabank Deploys Three Knowledge Agents Across Enterprise Workflows

August 6, 2026, Canada
  • Scotiabank introduced three governed knowledge agents through Scotia Intelligence: Delivery Navigator, the Travel and Expense Knowledge Agent and the Procurement Knowledge Agent.
  • The agents draw from approved internal information sources to help employees find policies, procedures and operational guidance. Scotiabank has not said they independently approve projects, expenses or procurement decisions.
  • More than 71,000 employees have access to Scotia Intelligence, and the bank reports that employees have generated 14 million actions through the platform.
  • More than 80% of Scotiabank’s global workforce and over 90% of employees at director level or higher have completed at least one internal AI course.
  • “Actions” is Scotiabank’s usage measure. It does not represent completed workflows, hours saved, financial returns or the number of active employees.

Scotiabank is progressing from general AI assistance to governed financial workflows built around approved information sources and defined employee tasks. The next measures are repeat usage, time saved, answer quality and whether the agents can support more complex work without weakening human review, data controls or accountability.

AMD To Acquire Toronto AI Chip Startup Taalas

August 6, 2026, Canada / United States
  • AMD reached a definitive agreement to acquire Toronto based Taalas, whose specialized silicon is designed to reduce compute and memory bottlenecks in AI inference. The transaction remains subject to regulatory approvals and other closing conditions.
  • AMD plans to integrate Taalas technology into its AI accelerator roadmap and develop system level solutions alongside AMD Instinct GPUs, bringing the Canadian company’s inference architecture into one of the major global AI computing platforms.
  • Taalas was founded in 2023 and has built its engineering team in Canada. AMD says it intends to retain and grow that team as part of its existing Canadian semiconductor and AI presence.

The acquisition puts differentiated Canadian AI infrastructure inside AMD as competition for inference performance intensifies. It also adds another example to the question of who owns Canadian AI infrastructure as domestic companies scale. Taalas keeps its engineering base in Canada, but its technology, capital requirements and commercial reach will now sit inside AMD’s global platform.

EU AI Content Transparency Rules Take Effect

August 2, 2026, European Union
  • Article 50 of the EU AI Act now requires providers of covered generative AI systems to mark artificially generated or manipulated audio, images, video and text in a machine-readable and detectable format.
  • Organizations using AI professionally must disclose deepfakes and public-interest text generated or manipulated by AI when it lacks human review, editorial control and an accountable publisher.
  • People must also be informed when they interact directly with certain AI systems or are exposed to emotion-recognition and biometric-categorization tools.
  • The Commission’s AI content icons are optional, but the underlying disclosure requirements are mandatory. Content released before August 2 does not require retroactive labelling.

Europe has turned AI-content provenance into an operating compliance requirement. Banks, fintechs, insurers, publishers and AI providers now need controls that preserve machine-readable markings across creation, editing, distribution and resharing while documenting when human editorial oversight creates an exception.

Digital Assets Blockchain And Tokenization

Circle Sets September 16 Launch For Arc Mainnet

August 5, 2026, United States / Global
  • Circle scheduled Arc’s public mainnet launch for September 16. The network is currently operating as a private mainnet with more than 100 institutional and ecosystem builders.
  • BlackRock, DTCC, Galaxy, Global Payments, ICE, Mastercard, MoneyGram, SBI Group, Standard Chartered, Sumitomo Corporation and Visa are joining Circle as founding validators.
  • BlackRock is expected to deploy its BUIDL tokenized fund on Arc, while Circle and DTCC are working toward tokenizing DTC-custodied assets on the network beginning in the second half of 2027.
  • Circle plans to introduce an application framework, AI-powered development tools and capabilities for issuing and managing tokenized real-world assets when the public network launches.
  • Arc supports open application development but operates through a permissioned validator set. Circle states that planned features remain subject to modification, delay or cancellation.

Circle is placing banks, asset managers, market infrastructure providers and payment networks inside the operation of its blockchain rather than treating them only as users. The next test is whether Arc launches on schedule with live institutional integrations, meaningful transaction activity and connections to assets and liquidity outside Circle’s own ecosystem.

South Africa Proposes Cross-Border Crypto Transfer Framework

August 3, 2026, South Africa
  • South Africa’s National Treasury and Reserve Bank published a draft Crypto Assets Manual governing cross-border crypto activities.
  • A transfer becomes reportable when crypto moves between an authorized South African crypto asset service provider and an offshore provider, or from a domestic provider to a non-custodial wallet.
  • Authorized providers would report qualifying inflows and outflows to the Reserve Bank’s Financial Surveillance Department and comply with specified authorization, monitoring and administrative requirements.
  • Initially, only individuals could transfer crypto offshore through authorized providers using their single discretionary or foreign capital allowances.
  • The proposal doesn’t give crypto legal tender status or distinguish between different types of crypto assets. Comments are due September 30, 2026.

South Africa is bringing offshore platforms and self-custodied wallets inside its capital flow controls without treating every domestic crypto transaction as cross-border. The framework could improve regulatory visibility, but its operating impact will depend on authorization capacity, reporting costs and whether users continue using regulated channels when transferring assets internationally.

Payments Infrastructure And Money Movement

Mastercard And PEXA Test Programmable Property Payments

August 5, 2026, United Kingdom
  • Mastercard and PEXA will explore programmable account-to-account payments that reserve buyer funds and release them automatically only when agreed property completion conditions are met.
  • The proposed model is expected to be tested through Mastercard’s A2A Sandbox, combining PEXA’s digital property completion infrastructure with Mastercard’s payment orchestration capabilities and Vocalink’s UK account-to-account infrastructure.
  • The work builds on PEXA’s Bank of England Synchronisation Lab use case, which is testing coordination between lender funds held in the renewed RTGS service and property title lodgement.

Property completion gives programmable finance a demanding test because payment release depends on a verified event outside the payment system. Banks and infrastructure providers will need clear rules for defining completion conditions, confirming title status, cancelling reserved funds, handling failed transactions and assigning liability across the payment and property networks.

Treasury Liquidity

Wells Fargo Plans Tokenized Deposits For Corporate Clients

August 4, 2026, United States / Global
  • Wells Fargo plans to launch tokenized deposits for corporate and commercial clients during fall 2026.
  • Clients would be able to transfer, program and settle bank deposits around the clock using blockchain infrastructure. The product is a tokenized commercial bank deposit, not a stablecoin.
  • The initial product will support U.S. dollars and British pounds for cross-border payments, with additional countries and currencies planned for 2027 based on client demand.
  • The deposits will operate on Wells Fargo’s proprietary blockchain platform. The bank said the product could connect with private networks and the planned U.S. bank-led tokenized deposit network.
  • Wells Fargo hasn’t disclosed whether initial transfers will be limited to its own customers or which operating jurisdictions will receive access first.

Wells Fargo is bringing programmable commercial bank money into corporate treasury while banks compete with stablecoins for always-on settlement. The next test is whether clients can move funds beyond Wells Fargo’s customer and network boundaries without losing the speed, control and regulatory treatment that make tokenized deposits attractive.

SME Finance And Business Banking

FIS Extends Digital One Commercial Across Asia-Pacific

August 4, 2026, Asia-Pacific / Global
  • FIS launched Digital One Commercial in Asia-Pacific, completing the platform’s availability across the United States, Europe, the Middle East and Africa, and Asia-Pacific.
  • The core-agnostic platform combines business payments, cash management, trade finance, foreign exchange and corporate treasury services through one commercial-banking interface.
  • FIS says one unnamed Asia-Pacific bank operates the platform across 15 countries, serving approximately 350,000 business customers and more than one million end users from a single instance.
  • The platform supports regional payment infrastructure including PayNow, GIRO and FAST, alongside SWIFT and ISO-based messaging, multiple languages, currencies and time zones.
  • The announcement does not identify the bank. The reported customer and user figures describe the existing deployment and should not be treated as customers acquired through this launch.

FIS now has bank-issued digital money infrastructure and a commercial-banking platform spanning payments, treasury and trade finance. The immediate test is whether one shared platform can handle local payment rails, regulatory requirements and corporate workflows while reducing the cost and complexity of entering additional markets.

Embedded Finance

Nuvei Embeds Payments Inside BlackLine Invoice Workflows

August 5, 2026, Canada / Global
  • Nuvei and BlackLine integrated payment acceptance directly into BlackLine’s invoice-presentment and payment workflows. The companies say the integration is already being used by enterprise customers.
  • Businesses can accept cards, bank transfers and local payment methods from invoices and automatically match incoming payments to outstanding receivables.
  • The workflow gives finance teams payment-status and cash-position visibility while providing customers with one interface to view, question and pay invoices.
  • The integration supports collections in 150 currencies from more than 190 markets.
  • The announcement does not identify participating customers or disclose customer counts, payment volume, collection-time improvements or cost savings.

Nuvei is moving payment acceptance and reconciliation into the enterprise receivables stack instead of leaving payment as a separate process. The operating test is whether live deployments reduce unmatched receivables and improve collection visibility across complex international operations.

Mintoak Acquires ICC Loyalty To Expand Bank Platform

August 4, 2026, India / United Arab Emirates / Middle East / Africa
  • Mintoak acquired Dubai-headquartered ICC Loyalty, adding consumer rewards and loyalty capabilities to its bank-distributed merchant platform.
  • The acquisition extends Mintoak’s platform beyond merchant payments and business tools into customer engagement, rewards and retention services.
  • Banks and financial institutions using Mintoak will be able to offer the combined capabilities through their own digital channels and customer relationships.
  • The transaction supports Mintoak’s expansion across the Middle East and Africa, where it distributes financial technology through banks and merchant acquirers.

The acquisition connects merchant services and consumer loyalty inside one bank-controlled platform. The next test is whether financial institutions use the combined infrastructure to strengthen SME relationships, increase customer activity and compete with standalone payment and commerce platforms.

Allied Universal Selects Chime Workplace For 320,000 Employees

August 3, 2026, United States
  • Allied Universal plans to offer Chime Workplace to approximately 320,000 North American employees at no cost to the company or its workforce.
  • The workplace package combines earned-wage access, savings paying up to 3.75% APY, investing and credit-building tools inside one employer-distributed service.
  • Allied Universal receives a workplace portal showing how participating employees use the benefit to save, build credit and manage their financial activity.
  • At First Student, 46% of actively enrolled employees began saving within two months. Chime reports that 76% of that group continued building savings.
  • The announcement doesn’t disclose an implementation date, enrollment target, First Student sample size or the amount employees saved.

Chime is using employers as a distribution channel for several consumer financial products rather than offering earned-wage access as a standalone benefit. The operating measures are how many eligible employees enroll, whether they use multiple products and whether the early savings behaviour continues across a workforce of this size.

Risk Compliance And Regtech

FCA Opens Its Handbook Through A Machine Readable API

August 6, 2026, United Kingdom
  • The FCA launched a free API that gives firms and technology providers direct access to structured, machine readable data from the FCA Handbook.
  • The API automatically draws from the current Handbook and can feed rules, guidance and updates into compliance monitoring, regulatory change management and other RegTech systems.
  • The FCA also identifies AI as a use case, giving tools access to trusted and current regulatory data that can support more accurate and transparent outputs.

The FCA is making regulation easier for software to consume, not just easier for people to read. That creates a direct data layer between the regulator and the systems firms use to track obligations and compliance changes. It also strengthens the case for AI powered regulatory intelligence, where reliable source data is one of the constraints on using AI safely in regulated workflows.

MVB Bank Shifts AML And KYC Work To Bretton AI

August 6, 2026, United States
  • MVB Bank selected Bretton AI under a multi year agreement to support AML transaction monitoring, KYC casework and enhanced due diligence for its fintech banking business.
  • Bretton combines its AI platform with a U.S. operations team, while a trained analyst reviews every AI assisted output before completed work reaches MVB.
  • MVB remains responsible for the compliance program, decisions and regulatory filings. Bretton charges for completed work rather than analyst hours, tying the service model to compliance output instead of staffing levels.

MVB is changing more than the software used by its compliance team. It is buying completed AML and KYC work through an AI assisted managed service while keeping responsibility for the underlying risk program. That puts the AI compliance burden into a new operating model where banks have to prove that automation, human review and outsourced execution still produce controlled and defensible decisions.

Cybersecurity Fraud And Financial Crime

Visa To Acquire BioCatch For US$2.4B

August 3, 2026, United States / Israel / Global
  • Visa agreed to acquire behavioural-biometrics and fraud-intelligence provider BioCatch for US$2.4 billion in cash.
  • BioCatch analyzes more than 3,000 behavioural and device indicators to distinguish legitimate customers from account takeovers, scams, money mules and application fraud before funds are transferred.
  • The company serves more than 350 financial institutions across 21 countries and protects approximately 760 million users operating 1.8 billion devices.
  • The transaction is expected to close by the end of Visa’s fiscal second quarter of 2027, subject to regulatory approvals and other customary closing conditions.

Visa is assembling transaction, behavioural and device intelligence inside its global security portfolio. The competitive test is whether BioCatch helps financial institutions identify compromised customers, manipulation and mule accounts before suspicious activity reaches the payment authorization stage.

Capital Markets Infrastructure And Funding

Schroders Wins Approval For Tokenized Money-Market Fund

August 6, 2026, Ireland / United Kingdom
  • Schroders received Central Bank of Ireland approval to launch SOAR, Schroders Onchain Active Returns, as a tokenized share class of an Ireland-domiciled U.S.-dollar money-market fund.
  • Kinexys by J.P. Morgan will connect blockchain transactions with the fund’s transfer agent, allowing approved investors to use smart contracts for redemptions and transfers between Schroders clients.
  • Schroders identifies collateral use and round-the-clock treasury and liquidity management as future applications. It has not disclosed initial assets, investor transactions or live collateral activity.

Tokenization is being added to the regulated ownership and transfer records of a conventional investment fund, rather than operating as a separate digital wrapper. The next test is whether institutions use the shares for collateral, treasury and liquidity workflows, and whether onchain transfers reduce processing time without weakening investor controls, recordkeeping or legal certainty.

Regulation And Policy

New Mexico Court Imposes Youth Safety Controls On Meta

August 6, 2026, United States
  • A New Mexico court ordered Meta to pay $567 million into a teen mental health fund, in addition to an earlier $375 million jury award. Meta says it will appeal.
  • The order requires changes affecting youth accounts, including usage limits, notification controls, protections against suspicious adult contact and stronger age verification.
  • The requirements also extend to AI chatbot interactions involving minors, deletion of data tied to underage users and twice yearly compliance reporting.

The ruling goes beyond financial penalties and reaches how a major digital platform is designed and governed. Fintechs and AI platforms should watch whether courts increasingly use product controls, age assurance, monitoring and reporting requirements to address consumer harm before legislators or regulators create wider rules.

Canada Launches Foreign Influence Registry With New Disclosure Duties

August 4, 2026, Canada
  • Canada brought the Foreign Influence Transparency and Accountability Act and its regulations into force and opened a public registry of foreign influence activities.
  • Registration can apply when an individual or entity has an arrangement with a foreign principal, seeks to influence a Canadian political or governmental process and undertakes a covered activity. Corporations, partnerships, joint ventures, funds and associations are among the entities included.
  • New arrangements must be registered within 14 days. Arrangements that existed before August 4 must be registered by October 3, 2026, with administrative penalties ranging from $250 to $1 million for violations.

Fintech companies, funds and industry associations can fall within the regime when coordinated work with a foreign principal involves policy advocacy, public communications or government decision making. Routine international business relationships alone are insufficient under the Commissioner’s guidance. Organizations with covered activity need to identify the arrangement, document who directs or coordinates the work and keep the registry information current.

South Africa Proposes Cross-Border Crypto Framework

Aug 1, 2026, South Africa
  • The South African Reserve Bank proposed an authorization and supervision framework for crypto-asset service providers facilitating transactions treated as cross-border capital flows.
  • The draft manual sets out application requirements, permitted transactions, operating conditions, recordkeeping and regulatory reporting obligations for authorized providers.
  • The framework follows five regulatory-sandbox use cases. Comments close September 30, 2026, and implementation remains dependent on final Capital Flow Management Regulations.

South Africa is bringing cross-border crypto transfers inside its capital-flow controls rather than treating them only as domestic virtual-asset activity. Providers will need to connect wallet and transaction infrastructure with customer records, regulatory reporting and exchange-control permissions. The final rules will determine which transfers can proceed routinely and which require additional authorization.

Conclusion

AI agents need clear authority. Payments need verified conditions before money is released. Tokenized funds still need trusted records. Cross border crypto still has to fit inside regulatory controls. The technology can act faster, but firms still need to know who can act, what they can approve and which record settles the outcome.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.

NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Read More
August 6, 2026   Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech, Fintech AI/ML, Data-driven, Automation, Generative AI, FinTech and Alternative Finance, Innovation and Resources, Leadership, Competition, Human Capital, Health, Legal Issues, Regulation, Consultation, Regtech, Compliance, Governance, Tech, Tools, Productivity, Venture Funding and Building   No comments

AI Spending, Board Oversight And Investor Disclosure

Aug 6, 2026 | NCFA Insight | Artificial Intelligence And Data, Risk Compliance And Regtech, Capital Markets And Market Infrastructure

AI Image – Boardroom team reviewing AI spending, deployment and disclosure metrics in a bright daytime office setting

What Boards And Investors Need To See As AI Costs Rise

On July 29, 2026, a shareholder filed a Rackspace securities complaint alleging that the cloud company failed to explain how its AI plans were affecting capacity, spending and revenue. The complaint says Rackspace reaffirmed its 2026 guidance in May, then cut expected annual revenue by US$150 million in July. It also alleges that resources moved away from the more profitable Private Cloud business while margins absorbed restructuring and AI investment.

Those claims haven't been proven, and the court hasn't decided whether Rackspace or its directors did anything wrong. The filing still raises a useful question. Once an AI plan changes how a company spends, allocates computing capacity or describes future results, the board needs a clear view of the economics behind it. Investors may need that view too.

Lawsuits Follow The Gap Between AI Plans And Results

Rackspace isn't an isolated case. Recent complaints against Oracle, Microsoft, ZoomInfo and Upstart use different facts, but each asks whether the company story kept pace with what was happening inside the business.

An Oracle shareholder complaint alleges that the company understated the financing pressure created by its AI infrastructure build. Oracle later projected US$50 billion of capital spending for fiscal 2026, US$15 billion above its September 2025 projection, while reporting more than US$10 billion of negative free cash flow. The complaint focuses on whether investors received enough information about the scale, financing and cash impact.

A Microsoft securities complaint focuses on a different pressure point. The plaintiffs allege that Microsoft overstated Copilot adoption and didn't adequately explain that AI products were competing with Azure customers for computing capacity. Microsoft reported US$72.4 billion of capital spending in the first half of its fiscal year, almost as much as it spent in the prior full year. The unresolved issue is whether product demand, available capacity and investor disclosure remained aligned as the build accelerated.

ZoomInfo adds the risk of AI weakening the business that funds the transition. Its June 2026 complaint alleges that customers were using internal AI tools and moving away from seat-based subscriptions toward consumption pricing. The plaintiffs argue that management failed to explain how AI was changing demand for the existing model.

None of these cases proves misconduct. Shareholder complaints present company events through the plaintiff's theory, and a falling share price does not establish that earlier disclosure was misleading. The filings are interesting because they show where disputes are forming. Investors are asking what was spent, what reached customers, what revenue followed and what the rest of the business gave up.

Boards Need The Numbers Behind The AI Plan

A board cannot judge an AI strategy from product demos or spending totals alone. It needs to know what the money produced, such as more computing capacity, products in market, paying users, lower costs, higher revenue or better service.

Usage numbers can hide as much as they reveal. An enabled account may never use the product. An active user may not pay. Even paid adoption says little about retention, margins or the cost of serving that customer.

Savings claims need the same scrutiny. AI may reduce work in one team while increasing cloud costs, review time or customer complaints elsewhere. Early pilots do not need to make money immediately, but management should know what would justify further investment and what would cause it to pull back.

Boards also need to see what the AI plan is displacing. Computing capacity assigned to one product cannot serve another workload. Engineers moved to a new platform are no longer maintaining something else. A sales team promoting an AI add-on may spend less time selling the core product. Those choices may be reasonable, but the trade-offs should be clear before a profitable business starts carrying an open-ended investment.

Directors do not need to become model engineers but they do need enough operating information to test whether the plan is working. That includes supplier commitments, capacity constraints, effects on established products and a clear explanation when results fall short.

The SEC Investor Advisory Committee's AI disclosure recommendation follows the same logic. It calls on issuers to define what they mean by AI, explain how the board oversees it and disclose material effects on operations and customers. It also argues that companies can provide much of this information through existing disclosure requirements. The recommendation comes from an SEC advisory committee. It is not an SEC rule.

Financial Firms Carry More Than Spending Risk

For banks and fintechs, weak AI performance can reach customers before it appears in an earnings release. A model may change who receives credit, how a transaction is flagged or what recommendation reaches an investor. It can also create more manual review, complaints and losses when performance moves in the wrong direction.

The Upstart securities complaint brings that issue into automated lending. Plaintiffs allege that a model update reacted too strongly to negative economic signals, reducing loan approvals and conversions while affecting revenue and guidance. The filing shows why boards need model performance connected to approval rates, customer outcomes and financial forecasts.

That connection becomes harder when a firm depends on an outside cloud, model or data provider. A vendor change can alter cost or performance. An outage can interrupt a regulated process. Concentration can leave the company without a workable alternative. NCFA's analysis of feedback loops behind AI failures shows how model output, human responses and operating data can reinforce an error before the full effect is visible.

The Financial Stability Board's 2026 consultation proposes 12 practices covering governance, the AI lifecycle, cyber risk and outside providers. It is not a binding international standard. In Canada, OSFI's Guideline E-23 on model risk takes effect on May 1, 2027 for federally regulated financial institutions. It expects clear ownership, model inventories, monitoring and communication to senior management and boards.

AI is already moving into governed financial workflows. Board reporting has to keep pace. Spending and adoption belong beside model exceptions, overrides, complaints and losses. Otherwise, financial results may arrive after the operating warning signs.

Canada Already Has A Route To Better AI Disclosure

Canadian boards do not need an AI-specific statute before asking these questions. Under the Canada Business Corporations Act, directors of federal corporations must act honestly and in good faith and exercise the care, diligence and skill of a reasonably prudent person.

Canadian continuous-disclosure requirements separately require reporting issuers to publish financial statements, management's discussion and analysis, material-change reports and other prescribed information. The exact obligation depends on the issuer and the facts.

AI is already appearing in Canadian filings. The Ontario Securities Commission reviewed 225 companies in the S&P/TSX Composite and found that 72 issuers mentioned AI in 2024 annual management discussion and analysis. That is 32% of the sample. The OSC described the work as a proof of concept and did not assess whether any issuer's disclosure was adequate.

Simply mentioning AI more often will not make disclosure more useful. Investors need to know how much the company is spending, what is already in use, how customers are responding and what has changed since the last report. When AI affects capacity, margins, revenue or a regulated customer decision, a generic risk paragraph is not enough.

Canada may get more immediate value from clearer reporting on AI costs, live deployment, board oversight and business results. A separate AI disclosure rule is not the only option. Existing board duties and continuous-disclosure requirements already give companies a reason to make sure their public statements match what management is seeing inside the business.

Poor AI performance is not automatically a governance failure or securities violation. A board can approve a reasonable investment that does not work. Litigation can also overstate what directors could have known at the time. The difficult question is whether the company’s internal numbers had changed while its public story stayed the same.

Talking Point

When an AI plan changes spending, capacity or revenue, what should the board see before investors hear the same growth story again?

Continue through the operating controls, supervisory questions and financial risks most closely connected to material AI deployment.

CAPITAL MARKETS OVERSIGHT

IOSCO AI Supervisory Toolkit For Capital Markets

The governance, model risk and accountability questions supervisors can bring into reviews of AI used by market firms.

CANADIAN FINANCE

OSFI And GRI Workshops Reveal What Regulated AI Needs

Canadian operating constraints around AI governance, outside providers, customer outcomes and financial stability.

Frequently Asked Questions About AI Spending And Board Oversight

When does AI spending become a board issue?

AI spending becomes a board issue when it is material to strategy, capital commitments, margins, capacity, customer outcomes or regulated operations.

Do the current AI lawsuits prove companies misled investors?

No. The complaints contain allegations that have not been proven, and courts have not decided the merits. They identify the spending, adoption, capacity and business-model questions investors are asking.

What AI information should a board receive?

The board should see enough financial, operating, customer and model-performance information to challenge the investment and recognize when results depart from the approved plan.

Does Canada have a special AI disclosure rule for public companies?

Canada does not have a single AI-specific securities disclosure rule for public issuers. Existing corporate duties and securities requirements can still apply when AI costs, risks or operating effects become material.

Why is AI oversight harder for banks and fintechs?

An AI model can affect credit, fraud controls, suitability, customer service and complaints before its full financial effect appears in company results.

This article is provided for informational purposes and does not constitute investment, financial or legal advice. Lawsuits discussed contain allegations that have not been proven in court. Recommendations, consultations and regulatory requirements may change.

NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

Read More
July 31, 2026   Blockchain, Crypto, Digital Assets Regulations, Blockchain, Crypto, Digital Assets, Tokens, CBDCs, Stablecoins, Metaverse, NFTs, Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech, Enterprise, Scaleup, FinTech and Alternative Finance, Fintech International, Fundraising, Investing, Trading, Innovation and Resources, Leadership, Competition, Human Capital, Health, Online Funding / Investing Portals, Payments, Transfers, Rewards, Regtech, Compliance, Governance, Research, Tech, Tools, Productivity, Venture Funding and Building   No comments

NCFA Weekly Fintech Intelligence Jul 25-31, 2026

July 25, 2026 | NCFA Fintech Whisperer | Payments And Money Movement, Embedded Finance, Capital Markets Infrastructure And Funding, Digital Assets Blockchain And Tokenization, Wealthtech Investing And Trading, Cross Border Payments And FX, Cybersecurity Fraud And Financial Crime, Lending Consumer Credit And BNPL, Artificial Intelligence And Data, Open Banking Open Finance And Data Sharing, Competition And Market Structure, Financial Inclusion, Insurance And Insurtech, Banking And Credit, Sustainable Finance And ESG

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-24, 2026).

Weekly Fintech Market Intelligence Jul 25 - 31, 2026

Payments And Money Movement

Visa Plans 2,600 Job Cuts Across Technology And Product

July 28, 2026, United States / Global
  • Visa plans to eliminate approximately 2,600 positions, representing about 7% of its global workforce.
  • A company spokesperson confirmed that the reductions will primarily affect technology and product teams, although other functions will also be affected.
  • Chief Executive Ryan McInerney told employees that Visa is seeking greater efficiency so it can reinvest in its highest-potential opportunities.
  • Artificial intelligence is affecting how Visa completes work and develops products, but reporting indicates that it was not the sole reason for the restructuring.

Visa is reducing staff in the teams building and maintaining payment products while stablecoins, account-to-account payments and agentic commerce increase competitive pressure. The next evidence should show which capabilities lose capacity, where investment increases and whether product delivery improves following the restructuring.

Lianlian Extends Live AI Procurement Payments To UnionPay

July 27, 2026, China / Global
  • Lianlian DigiTech and UnionPay International signed an agreement connecting Lianlian’s AI-agent platform with UnionPay’s global payment network.
  • The initial deployment focuses on global procurement, with the agent supporting supplier matching, product selection and payment execution while the user retains final approval.
  • The partnership also covers AI-token replenishment, overseas merchant acceptance and joint development of AI technology for financial services.
  • Three days earlier, Visa and Lianlian completed a live B2B agentic transaction in which LoopXPay sourced a product, compared suppliers, placed the order and executed payment within predefined spending and approval controls.

Lianlian is progressing from one controlled transaction to connecting the same procurement model with a second global payment network. That makes this operating evidence rather than another agentic-commerce concept. The human approval, verified-agent and spending-control design also gives practical form to the consent and liability questions examined in AI Payments Challenge Consent Rules And Liability.

UAE Approvals Expand Nonbank Stored Value Competition

July 27 and 28, 2026, United Arab Emirates
  • Checkout.com received in-principle approval from the Central Bank of the UAE for a Stored Value Facilities licence.
  • Once fully licensed, Checkout.com plans to connect card issuing with its existing UAE acquiring operation so merchants can fund cards from acquired balances. The company reports that its MENA processing volume increased 62% between 2024 and 2025.
  • Pemo received separate in-principle approval on July 28, supporting planned digital wallet and fund holding capabilities for more than 6,000 UAE business customers.
  • Neither company can operate the proposed stored value capabilities until it satisfies the remaining licensing conditions. Pemo states that nothing changes for customers during the interim period.

Together, the approvals create two routes into regulated stored value: a global acquirer connecting merchant acceptance with issuing, and a local spend platform seeking direct control over customer funds. The competitive test begins after final licensing, operating launches and evidence that merchants or small businesses use the new account, card funding and wallet capabilities.

Payments Canada Sets End Date For Paper PAD Clearing

July 27, 2026, Canada
  • Payments Canada implemented administrative and operational amendments to its Automated Clearing Settlement System rules on July 27.
  • Rules A1 and H1 establish that paper pre-authorized debit items will become ineligible for exchange, clearing and settlement through the ACSS on December 1, 2028.
  • Rules F1 and F4 now require notification when a Notice of Change process is stopped and reissued, while Rule H6 clarifies settlement timing.
  • Other amendments update the definition of a member and address new membership structures, clearing arrangements and mergers.

Canada is setting a retirement date for a paper clearing method while updating the operating rules around membership and account changes. Banks, payment service providers and businesses that still originate paper PAD items now have a conversion deadline covering processing, exceptions and reconciliation. The change concerns the existing batch system and complements, rather than replaces, the modernization tracked in NCFA's Real-Time Rail guide.

Open Banking Open Finance And Data Sharing

UK Open Banking Surpasses One Billion Payments

July 28, 2026, United Kingdom
  • The UK open banking ecosystem has recorded more than one billion payments and 100 billion API calls since its launch more than eight years ago.
  • June produced 2.81 billion API calls, up 4.4% from May and the highest monthly volume reported to date.
  • More than 40 million open banking payments were made during June.
  • Variable recurring payments increased 6.7% from May, while single domestic payments declined 1.2%.

The UK provides a working volume benchmark for open banking commercialization in Canada. The next measures are payment share, merchant adoption, fraud outcomes, service reliability and whether variable recurring payments can compete with card-on-file and direct debit services.

Sustainable Finance And ESG

Singapore Opens Climate-First Disclosure Standards Consultation

July 27, 2026, Singapore
  • Singapore’s Accounting and Corporate Regulatory Authority opened consultation on draft Singapore Sustainability Disclosure Standards, with comments accepted until October 25.
  • The standards are based on the International Sustainability Standards Board framework, but only climate-related SFRS S2 would be mandatory. Broader sustainability reporting under SFRS S1 would remain voluntary.
  • The draft includes Singapore-specific transition reliefs and requires companies to make an explicit statement of compliance with SFRS S2.
  • ACRA also launched a Sustainability Assurance Body of Knowledge, while related training can receive subsidies covering up to 90% of course fees.

Singapore is pairing disclosure requirements with assurance skills, training support and phased implementation. The practical test is whether this approach produces comparable climate information without allowing voluntary reporting outside SFRS S2 to become a lasting information gap.

ECB Extends Climate Factors To Corporate Credit Claims

July 24, 2026, European Union / Euro Area
  • The European Central Bank will extend climate-related valuation adjustments to certain eligible credit claims owed by non-financial corporations and pledged in Eurosystem refinancing operations.
  • Each adjustment will reflect sector stress, the corporate debtor’s exposure to transition-related uncertainty and the credit claim’s remaining maturity.
  • The maximum additional reduction in collateral value will be 5% across eligible corporate bonds and credit claims. Individual climate-factor values will not be published.
  • Implementation is planned for no earlier than the end of 2027, with climate-factor values updated annually.

The ECB is turning climate-transition exposure into a direct input when valuing collateral used for central-bank liquidity. The next test is whether the 5% ceiling materially affects collateral selection, corporate lending data and the financing conditions faced by transition-exposed businesses.

Artificial Intelligence And Data

Chime Cuts 10% Of Workforce As AI Reshapes Operations

July 31, 2026, United States
  • A Chime spokesperson confirmed that the digital banking company is cutting 10% of its workforce, affecting nearly 150 employees.
  • Chief Executive Chris Britt told employees that AI is changing what teams can accomplish but requires different skills, fewer organizational layers and new capabilities.
  • Britt said the reorganization is intended to create a flatter structure while Chime accelerates growth and demonstrates operating discipline as a public company.
  • Chime previously reported that AI-assisted development increased from approximately 29% to 84% of code shipped in four months while product and engineering headcount remained flat.

Chime connects a measurable increase in AI-assisted development with a material change in workforce structure. Following Block’s larger AI-led operating reset, the development strengthens the evidence that fintechs are applying AI to organizational design as well as customer products. The next test is whether smaller teams produce faster releases, stronger growth and better margins without weakening product quality, compliance or customer support.

RBC Extends Vector AI Partnership Through 2032

July 30, 2026, Canada
  • RBC renewed its platinum sponsorship of the Vector Institute for five additional years through 2032, extending a relationship that began when Vector launched in 2017.
  • The collaboration covers agentic AI, retrieval augmented generation, computer vision, federated learning and responsible enterprise adoption.
  • RBC reports that the relationship has supported 30 applied AI projects and helped the bank recruit 200 specialists affiliated with Vector.
  • RBC also established a dedicated AI Group earlier in 2026 that reports to the chief executive and is responsible for converting research and use cases into operating capabilities.

The renewal links research access, specialist recruitment and applied development to RBC’s enterprise AI program. The measures that count through 2032 are production deployments, control performance, reusable intellectual property and retention of Canadian AI talent. NCFA’s governed financial workflows analysis identifies the permissions, approved tools, human review and audit evidence required as agentic AI reaches regulated banking work.

HSBC Plans Global AI Centre In Singapore

July 27, 2026, Singapore / Global
  • HSBC plans to launch a Global AI Centre of Excellence in Singapore during the second half of 2026.
  • The bank plans to hire more than 100 specialists across natural language processing, data science, AI governance and human-centred design.
  • Initial work will cover customer wealth conversations, agentic treasury solutions and AI-enabled digital payments.
  • HSBC intends to deploy capabilities developed by the centre across its global network while retaining human judgment, decision-making and accountability.

HSBC is placing treasury, payments and wealth workflows inside one global AI capability plan. The proof points will arrive after launch through production deployments, measurable customer and operating outcomes, control performance and evidence that systems can meet different data, governance and conduct requirements across jurisdictions.

BlackLine Releases Multi-Agent Reconciliation System

July 27, 2026, United States / Global
  • BlackLine made Verity Prepare generally available for financial reconciliation and accounting-close workflows.
  • The multi-agent system analyzes supporting documents, matches transactions, identifies reconciling items and assembles audit-ready reconciliations.
  • BlackLine says the system provides transparent reasoning, auditability and human oversight.
  • The product targets manual reconciliation preparation while keeping accountants responsible for review and final control.

Verity Prepare is a production example of governed financial workflows entering accounting operations. The useful measures are close time, exception accuracy, audit adjustments, human overrides and whether finance teams can trace every source and decision used to prepare a reconciliation.

Embedded Finance

X Money Launches Accounts And Payments Inside X

July 27, 2026, United States
  • X Money began rolling out to X Premium and Premium+ subscribers in the United States following earlier limited testing.
  • Cross River provides the regulated banking infrastructure and access to payment rails behind the service.
  • The offering combines interest-bearing, FDIC insured accounts, peer-to-peer payments and a Visa debit card inside the X platform.
  • The initial service is limited to the United States. The Cross River announcement does not include cryptocurrency or stablecoin capabilities.

The launch places a deposit account, card and peer-to-peer payment relationship inside a social platform that already owns communication and audience distribution. Cross River provides the regulated banking layer while X controls the customer interface. The commercial test is whether subscribers use X for recurring deposits and payments, and whether the partners can manage fraud, support and compliance at social platform scale.

Capital Markets Infrastructure And Funding

ICE Agrees To Acquire MarketAxess For US$5.7B

July 30, 2026, United States / Global
  • Intercontinental Exchange agreed to acquire electronic bond trading platform MarketAxess for approximately US$5.7 billion.
  • ICE will pay US$167 per share in cash, representing a 33% premium to MarketAxess’s previous closing price.
  • The combined business is intended to connect fixed income price analytics, electronic execution, market data and post-trade compliance tools.
  • The transaction is expected to close during the first half of 2027, subject to regulatory approval.

The transaction would place a larger share of fixed income data, execution and compliance workflow inside ICE. Market participants and regulators should examine how the combination affects platform access, data pricing, execution choice and competition across electronic bond markets.

DTCC Reports Treasury Clearing Readiness Ahead Of Deadline

July 27, 2026, United States / Global Markets
  • More than US$1.2 trillion in daily Treasury cash activity is already centrally cleared through DTCC’s Fixed Income Clearing Corporation.
  • Survey respondents estimated that another US$300 billion to US$400 billion in average daily Treasury cash activity remains outside central clearing.
  • Seventy-nine per cent of responding netting members reported having the necessary FICC account structures, while nearly every respondent requiring an account had established one or entered onboarding.
  • Approximately one-third of responding dealers expect to provide Treasury cash clearing to clients.
  • The cash clearing deadline is December 31, 2026, followed by the Treasury repo clearing deadline on June 30, 2027.

The mandate is driving a market infrastructure conversion measured in trillions of dollars per day. The implementation test now concerns client capacity, onboarding completion, collateral and margin demands, clearing costs and whether remaining participants can connect without concentrating access among a small group of dealers.

ESMA Authorizes EuroCTP For EU Equity Tape

July 27, 2026, European Union
  • ESMA authorized EuroCTP to operate the European Union consolidated tape for shares and exchange traded funds.
  • The service will combine pre-trade and post-trade information from multiple contributors into a single market data stream.
  • Retail investors, academics, civil society organizations and regulators will receive the data without charge. Other users will pay a reasonable fee.
  • EuroCTP has until September 30 to complete the operational and technical arrangements needed to begin service.
  • The provider will operate the tape for five years from its launch date under direct ESMA supervision.

The authorization converts the European consolidated tape from regulatory design into supervised market infrastructure. A common view of prices and trading activity could improve price discovery while reducing the information advantage created by fragmented venue data. Canadian exchanges, dealers and regulators should compare EuroCTP on data cost, latency, venue coverage, retail access and commercial use once operations begin.

Robinhood Schedules Public Roadshow For Venture Fund II

July 27, 2026, United States
  • Robinhood scheduled an August 3 public roadshow for Robinhood Ventures Fund II following its June 30 Form N-2 filing with the Securities and Exchange Commission.
  • RVII is structured as a business development company that plans to invest in early and growth stage private companies.
  • The strategy focuses on companies that participated in Y Combinator or were founded by people who participated in the accelerator.
  • Robinhood plans to make the roadshow available through its app and YouTube instead of limiting it to institutional investors.
  • The proposed NYSE listing remains subject to SEC review. Shares cannot be sold until the registration statement becomes effective.

RVII would package private company exposure inside an exchange listed fund, extending public access from IPO allocation toward venture portfolios. The structure provides a US comparator for retail IPO access in Canada while placing private company valuation, liquidity, fees and portfolio concentration inside a public investment product.

Ontario Teachers Commits Up To €200 Million To M&G CLO Platform

July 27, 2026, Canada / United Kingdom / Europe
  • Ontario Teachers’ Pension Plan and M&G Investments formed a joint venture to expand M&G’s European collateralized loan obligation platform.
  • Ontario Teachers will provide up to €200 million for equity investments in future M&G Margay CLO issuances and participate in the long-term economics of the business.
  • The Margay platform manages €1.6 billion within M&G’s broader €10 billion loan platform and €27 billion structured and private credit business.
  • Capital will be committed to individual transactions under an agreed investment framework.

Canadian pension capital is providing repeat issuance capacity instead of purchasing one completed security. The structure gives Ontario Teachers direct exposure to CLO equity and platform economics while helping M&G expand its European corporate credit securitization business. It also belongs beside the Bank of Canada’s warning about private credit transparency and non bank leverage. Credit quality, leverage, issuance volumes and performance through weaker credit cycles will determine the value and risk of the model.

Rock Tech Links Ontario Lithium Offtake To Conditional US$80 Million Prepayment

July 27, 2026, Canada / Switzerland
  • Rock Tech Lithium signed a binding seven-year offtake agreement with Transamine covering the planned production from its Georgia Lake project in Ontario.
  • Deliveries are expected to begin in 2028 and rise from 50,000 dry tonnes in the first year to 100,000 dry tonnes annually thereafter, subject to project development and contractual adjustments.
  • The agreement preserves an option to convert the supply arrangement from spodumene concentrate to battery-grade lithium hydroxide or carbonate for Rock Tech’s planned Red Rock converter.
  • It also establishes a framework for a development prepayment of up to US$80 million, but final terms, funding and availability remain subject to financing, permits, due diligence and completion of the definitive feasibility study.

The structure connects a long-term commodity buyer, project financing and domestic processing optionality inside one capital formation strategy. It provides a Canadian example of how offtake commitments can help finance critical mineral infrastructure without giving up the option to capture more value through domestic conversion. The financing should be treated as conditional until definitive terms are executed and funds become available.

Digital Assets Blockchain And Tokenization

Coinbase Posts Third Consecutive Quarterly Loss

July 30, 2026, United States / Global
  • Coinbase reported a US$359.5 million net loss for the second quarter, its third consecutive quarterly loss.
  • Total revenue declined 19% from the prior year to approximately US$1.22 billion, while transaction revenue fell 21%.
  • Subscription and services revenue declined 12.2% to approximately US$555.1 million.
  • Coinbase nevertheless reported a record 10.3% share of crypto trading volume while continuing to expand into derivatives, stablecoins, equities and prediction markets.

The results increase the commercial pressure behind Coinbase’s Everything Exchange strategy. Its Deribit acquisition and wider product expansion now need to produce enough repeat revenue to reduce the company’s dependence on spot crypto trading cycles.

3iQ Wins Gelephu Bitcoin Reserve Mandate

July 30, 2026, Canada / Bhutan
  • Gelephu Mindfulness City appointed Toronto-based 3iQ to manage a dedicated mandate backed by a portion of its Bitcoin reserves.
  • Gelephu previously allocated up to 10,000 BTC from Bhutan’s national holdings to support development of the city. The size of the 3iQ mandate was not disclosed.
  • 3iQ and Gelephu will collaborate on institutional digital asset management infrastructure, local talent development and knowledge transfer.
  • 3iQ also plans to establish a long-term presence in Gelephu, which is being developed as a special administrative region and international financial centre.

The mandate places a Canadian digital asset manager inside a sovereign-linked reserve program and a planned international financial centre. The next measures are mandate size, custody, investment limits, governance, public reporting and whether the partnership converts Bitcoin reserves into durable financial capacity. It also extends the institutional strategy NCFA examined when Coincheck agreed to acquire 3iQ.

OSC Finds Canadian Crypto Ownership Reaches 25%

July 28, 2026, Canada
  • An Ontario Securities Commission survey of 2,360 Canadians found that 59% are aware of crypto assets and 25% own them.
  • Half of crypto owners checked whether a trading platform was registered before using it, compared with 38% in 2023.
  • Many respondents still misunderstood how crypto assets are regulated, whether they carry insurance protection and which transactions they support.
  • Among respondents aware of crypto assets, 38% said they were highly likely to purchase them in the future, an increase of 18 percentage points from 2023.
  • Awareness and ownership of stablecoins and tokenized real world assets remain limited, although respondents familiar with them reported strong interest.

Canada now has a much larger crypto-owning population, but product knowledge and investor protection understanding have not kept pace. Compared with the OSC 2023 survey, platform registration checks are improving while ownership has increased sharply. Regulators and platforms should track whether greater participation produces stronger product knowledge, greater use of registered venues and better complaint outcomes.

Circle Acquires IBM Blockchain Patent Portfolio

July 27, 2026, United States / Global
  • Circle acquired fundamental assets from the IBM blockchain patent portfolio, covering more than 680 patent families and nearly 1,000 issued patents worldwide.
  • The intellectual property covers blockchain technology, banking, financial services, insurance, enterprise infrastructure, supply chain verification and secure cloud operations.
  • Circle says the acquisition makes it the leading holder of blockchain patents in the United States.
  • The portfolio will support USDC, Circle Payments Network, Arc and additional onchain and agentic financial products.
  • Circle and IBM also plan to examine additional commercial opportunities.

The acquisition gives Circle strategic control over intellectual property that reaches beyond stablecoins into banking, cloud infrastructure and enterprise financial systems. Canadian institutions evaluating USDC and Circle infrastructure should examine how the larger patent position affects licensing, interoperability, supplier dependence and competitive access. NCFA previously tracked Circle compliance with Canadian VRCA requirements.

Payward Agrees To Acquire Magic Labs Embedded Wallet Business

July 27, 2026, United States / Global
  • Magic Labs agreed to sell its embedded wallet business to Kraken parent Payward through an asset sale.
  • Magic Labs and Payward will remain independent companies, while wallet customers will transfer to Payward Services following completion.
  • Magic Labs reports that its infrastructure has created more than 60 million wallets and supports more than 200,000 developers.
  • The remaining company will operate as Newton Labs and focus on Newton Protocol, which applies compliance, identity, security and risk policies before transactions settle onchain.

Payward is bringing scaled embedded wallet infrastructure into the same operating stack as trading, custody and other financial services. The acquisition follows its xStocks expansion into global equity markets and adds another product layer to its shared infrastructure strategy. For Canada, Payward also operates Kraken through a national restricted dealer registration. Newton Labs is concentrating separately on transaction authorization, compliance and risk controls before settlement.

HashKey Combines Regional Crypto Accounts Inside One App

July 27, 2026, Hong Kong / Singapore / United Arab Emirates / Bermuda
  • HashKey merged its previously separate HashKey Exchange and HashKey Global applications into one customer portal.
  • The app connects its operations in Hong Kong, Singapore, Dubai and Bermuda while keeping the underlying services subject to their local licences and regulatory restrictions.
  • Users can manage eligible regional accounts through one interface based on their identity, business verification and jurisdiction.
  • Restricted products and regional services remain unavailable to users who do not meet the applicable local requirements.

HashKey is testing whether a digital asset group can offer one customer interface across several regulatory systems without combining the underlying legal entities, licences or product permissions. The same country by country constraint appears in RedotPay’s regulated market expansion. Account portability, data boundaries, regulatory accountability and consistency between regional services will determine whether HashKey’s architecture can scale.

BitMart Starts Orderly Wind Down Of Trading Platform

July 26, 2026, Global
  • BitMart began suspending new registrations, cryptocurrency and fiat deposits, new positions and new trading orders on July 26.
  • All spot, futures and other trading services are scheduled to stop on August 26. Remaining futures positions may be settled using the applicable prices and platform rules.
  • Earn, staking, lending, launchpad and related products will be discontinued in separate phases.
  • BitMart plans to cease trading platform operations on January 31, 2027. Customers will retain account, record and withdrawal access for a specified period afterward.
  • The company cited its operating conditions, market environment and future strategy without disclosing a specific financial, regulatory or solvency event.

BitMart’s notice followed BitMEX by three days and AscendEX within the same month. The companies disclosed different circumstances, so the timing alone does not establish a shared cause. The sequence still warrants review of exchange liquidity, customer migration, operating costs, regulatory access and competition from onchain venues. Users and counterparties should track withdrawal processing, asset segregation, proof of reserves, financial disclosure and the controls used to settle positions during the wind down.

Lending Consumer Credit And BNPL

Harvey Norman And Latitude Fined A$55M Over Credit Ads

July 28, 2026, Australia
  • The Federal Court imposed a A$35 million penalty against Harvey Norman and A$20 million against Latitude Finance Australia.
  • ASIC describes the A$55 million combined amount as its highest penalty for misleading conduct involving financial products or services.
  • The advertisements promoted a 60 month interest free payment method while obscuring that customers needed an eligible credit card and could incur establishment and monthly service fees.
  • The campaign ran thousands of times between January 2020 and August 2021 and reached millions of Australians. Both companies must display corrective advertising on their websites for 90 days.

The penalties establish a high cost benchmark for advertising interest free finance without clearly presenting the continuing credit account and fees behind it. Retailers and lenders share exposure when they jointly design and distribute the offer. The decision also provides an enforcement comparator for the UK BNPL regulatory framework, where product presentation and consumer understanding remain central.

Insurance And Insurtech

Cowbell Launches AI Native Insurance Decision System

July 28, 2026, United States / Global
  • Cowbell launched OMNI, an AI decision system supporting underwriting, claims, cybersecurity services, customer engagement and product development.
  • Specialized agents analyze submissions, assess risk and prepare coverage and pricing recommendations, while human underwriters retain final decision authority.
  • Cowbell’s risk platform draws on data covering more than 55 million entities globally.
  • The company reports that OMNI has supported 53% growth in new business since deployment.
  • Cowbell also reports reducing new-product deployment cycles from approximately eight months to as little as six weeks.

Cowbell is attaching AI to measurable underwriting and product-development outcomes while keeping final authority with underwriters. Independent performance evidence on pricing accuracy, loss ratios, claims, regulatory outcomes and business retained after renewal will provide a stronger test of the operating model.

Cover Genius Acquires Friendsurance

July 28, 2026, Germany / Europe / Global
  • Cover Genius acquired Friendsurance, a Berlin-based digital bancassurance platform serving banks and insurers.
  • The acquisition became effective immediately, and financial terms were not disclosed.
  • Friendsurance brings European banking relationships, bank technology and an architecture designed around PSD2 open banking and regional GDPR requirements.
  • The Friendsurance team will join Cover Genius as the combined business expands embedded insurance distribution across Germany, Austria and Switzerland.
  • Cover Genius reports operations in more than 60 countries, 73 million protected customers and 240 million policies representing US$3.2 billion in gross written sales.

The acquisition combines global embedded-insurance distribution with local banking integrations and regulatory infrastructure. The commercial measures are new bank deployments, policy conversion, non-interest revenue for participating institutions and whether the combined platform can expand beyond the German-speaking market without adding heavy implementation work.

Wealthtech Investing And Trading

Robinhood Hits Record Revenue As Crypto Income Falls

July 29, 2026, United States / Global
  • Robinhood reported record quarterly revenue of approximately US$1.31 billion, an increase of 32% from the prior year.
  • Cryptocurrency transaction revenue declined 38%, reflecting weaker crypto trading conditions.
  • Robinhood Gold subscriptions increased 39% to 4.8 million.
  • Activity across equities, options and event contracts helped the company produce record revenue despite the decline in crypto income.

Robinhood’s wider product mix is absorbing weaker crypto revenue more effectively than a platform that depends heavily on digital asset trading. The results extend the household finance strategy examined in Robinhood’s product expansion. The next measures are retention, revenue concentration and whether event contracts and subscriptions remain durable through weaker trading cycles.

Webull Opens Managed Individual Bond Portfolios To Smaller Accounts

July 27, 2026, United States
  • Webull Advisors launched what it describes as the first robo-advised individual bond portfolio service for retail investors.
  • Clients directly own the underlying bonds, while Webull Advisors makes portfolio construction, monitoring and investment decisions using Moment’s fixed income infrastructure.
  • The Enhanced Cash strategy invests in short-term US Treasuries with a US$500 minimum and a 15 basis point annual fee.
  • The High Income strategy invests across investment-grade and high-yield bonds with a US$2,000 minimum and a 30 basis point annual fee.

Webull is making individually managed bond portfolios economical at account sizes previously served mainly through funds and ETFs. Canadian platforms are pursuing a related ownership model through products such as Wealthsimple’s direct indexing and fractional gold services. Brokers and digital advisers still need to address suitability, liquidity, credit risk, tax reporting and whether customers understand what they directly own.

Orion Launches Account Opening With Goldman Sachs Custody

July 27, 2026, United States
  • Orion launched Dynamic New Account Opening inside its Advisor Portal, with Goldman Sachs Custody Solutions as the first live custodian.
  • The workflow adapts to account type, household structure and custodian while centralizing data collection and reducing duplicate entry.
  • Advisors can use DocuSign or a fully digital process, with account information transmitted through direct custodian APIs.
  • The service is available to Orion Advisor Technology clients using Goldman Sachs Custody Solutions. Orion plans support for Portfolio Solutions clients later this summer and additional custodians later in 2026.
  • Orion reports US$6.6 trillion in assets under administration and more than 8.6 million technology accounts as of June 30.

The integration embeds custody onboarding inside the advisor’s existing platform at significant operating scale. Account-opening time, rejection rates, correction work, client completion and the number of participating custodians will determine whether the architecture materially improves advisor and client workflows.

Cross Border Payments And FX

KB Kookmin Plans Kinexys Payments For Importers And Exporters

July 26, 2026, South Korea / Asia / Global
  • KB Kookmin Bank plans to launch a corporate import and export payment service using J.P. Morgan’s Kinexys blockchain payment network in August.
  • It will be the first South Korean financial institution to apply Kinexys to corporate import and export payments.
  • The service will initially support US dollar payments across ten countries through KB Kookmin’s domestic branches and Singapore branch.
  • Kinexys connects with the Swift network and supports near real-time, 24-hour international payments, foreign exchange and programmable transfers.

The planned service takes an institutional blockchain payment network into the operating workflow of importers and exporters. RBC and TD are already participating in Swift’s blockchain ledger prototype, giving Canada a direct institutional comparator. Banks should compare settlement times, foreign exchange costs, liquidity requirements and exception handling with conventional correspondent banking once the KB Kookmin service launches.

Cybersecurity Fraud And Financial Crime

EU Regulators Set Cyber Controls For Frontier AI Risk

July 31, 2026, European Union
  • The EBA, EIOPA and ESMA told financial firms to adapt ICT risk controls as frontier AI makes it faster to discover and exploit vulnerabilities, target shared infrastructure and use weaknesses that affect multiple institutions.
  • The regulators say periodic security checks may no longer be enough. Their recommendations include continuous vulnerability scanning, more frequent testing, behavioural monitoring, stronger access controls and tighter cybersecurity standards across technology suppliers.
  • The statement connects these measures to existing DORA and AI Act obligations and says frontier AI risk is also being incorporated into oversight of critical ICT service providers.

The regulatory focus is advancing from recognizing frontier AI as a systemic cyber threat to changing how financial firms defend against it. The gap between finding a vulnerability and exploiting it is getting shorter, which puts more weight on continuous controls, faster response and technology supplier oversight. NCFA’s AI and financial crime intelligence tracks the same convergence between AI capability, cyber resilience and financial infrastructure.

Bank Of America Agrees To Acquire MDSec

July 30, 2026, United States / United Kingdom
  • Bank of America agreed to acquire UK information security consultancy MDSec, which employs approximately 65 cybersecurity professionals.
  • The transaction is expected to close during the fourth quarter of 2026, subject to regulatory approval. Financial terms were not disclosed.
  • MDSec provides specialist security consulting from Macclesfield, England. Bank of America already operates a cyber threat operations centre nearby in Chester.
  • The acquisition would bring specialist cybersecurity testing and advisory capabilities directly inside the bank.

Bank of America is choosing direct ownership of specialist cyber expertise as financial institutions face faster vulnerability discovery, AI-enabled attacks and growing operational resilience requirements. The operating test is whether the acquired team improves vulnerability testing, threat detection and response across the bank without losing the external perspective that made the consultancy valuable.

IBM Finds AI Used In One Quarter Of Data Breaches

July 29, 2026, Global
  • The IBM Cost of a Data Breach Report found that one in four malicious breaches studied involved attacker use of artificial intelligence, an increase of 56% from the prior year.
  • AI-enabled breaches cost an average of US$6 million, compared with the overall global average of US$4.99 million.
  • Organizations using security AI and automation extensively saved an average of US$1.93 million compared with organizations using none.
  • Critical infrastructure accounted for 62% of AI-enabled attacks, with financial services and energy recording the highest concentrations.
  • More than half of surveyed organizations use agents for threat detection and containment, while only 18% use them for vulnerability management.

Attack automation is reducing the cost and time required to exploit weaknesses while delayed remediation continues to produce multimillion-dollar losses. Financial institutions should test controls for agent identities, APIs, cloud configuration, vulnerability remediation and cryptographic inventories. NCFA has already explained why fintech cannot wait for quantum computing, and the IBM findings strengthen the financial case for beginning that work now.

Triple-A Says Client Funds Stayed Separate During Treasury Wallet Breach

July 27, 2026, Singapore / Global
  • Triple-A identified unauthorized access on July 25 to wallets containing the stablecoin payment provider’s own digital assets.
  • The company says client funds were unaffected because it does not custody client digital assets and holds client money separately in trust accounts with safeguarding institutions.
  • Triple-A placed certain services into maintenance mode for approximately three hours while securing the infrastructure and completing security checks.
  • The company says the financial impact is being absorbed by its treasury reserves and that cybersecurity specialists, blockchain forensic investigators and Singapore Police are investigating.

The incident provides a direct operating test of customer asset segregation during a digital asset security breach. The control appears to have limited the exposure to company treasury assets, although the cause, total loss, wallet control failures and recovery prospects remain undisclosed. Canadian safeguarding rules for payment service providers similarly require customer funds to be protected through dedicated accounts, trust arrangements, insurance or guarantees. Stablecoin payment providers still need strong treasury wallet governance even when customer funds are separately safeguarded.

Bank Of Baroda Confirms Employee Email Compromise

July 27, 2026, India
  • Bank of Baroda confirmed that an employee email account was compromised, resulting in unauthorized access to certain data.
  • The bank said it promptly identified the incident, implemented containment measures and began a forensic investigation with relevant authorities.
  • Bank of Baroda said its core banking systems were not accessed and remain secure.
  • Reuters reported that data had appeared on the dark web, but the affected customer count and full scope of the exposure remain unconfirmed.

The incident separates core-system resilience from identity and data exposure. A bank can keep its transaction engine operating while one compromised mailbox still creates privacy, fraud and customer risks. The forensic findings need to establish what data was accessible, whether credentials were exposed and how far the attacker travelled beyond the email account.

HKMA Finds Banks At An Early Stage Of Quantum Readiness

July 27, 2026, Hong Kong
  • The Hong Kong Monetary Authority released its first Quantum Preparedness Index and a whitepaper assessing the banking sector’s readiness for post-quantum cryptography.
  • Hong Kong’s banking sector scored 2.3 out of 10 across awareness, planning, pilots and practical preparedness.
  • Sixty-eight per cent of surveyed banks had developed awareness or progressed into planning or pilots, while 32% had not started their transition. Approximately half had no formal post-quantum plan.
  • About half of respondents had discussed quantum computing at board level, while approximately one-third had begun exploring or piloting quantum-related initiatives.
  • HKMA aims to raise the sector’s index score to 10 by 2030 through a post-quantum toolkit, industry workshops, transition planning and stronger cryptographic agility.

The index turns quantum risk into a measurable banking-sector readiness program. It adds a concrete adoption baseline to why fintech can’t wait for quantum computing: awareness is spreading, but formal planning and practical migration remain well behind the regulator’s 2030 objective.

Competition And Market Structure

Zedcrest Completes Acquisition Of Leatherback

July 27, 2026, Nigeria / United Kingdom / Global
  • Zedcrest Group completed its acquisition of Leatherback, a UK-founded cross-border payments and financial technology company.
  • The transaction follows Zedcrest’s original investment in Leatherback in 2021.
  • Leatherback supports sending, receiving, converting and managing money across multiple currencies through one platform.
  • Leatherback will retain its existing leadership and London headquarters. It has opened a West African hub in Nigeria and plans additional hubs in Canada and Kenya.

The acquisition combines Leatherback’s cross-border payment technology with Zedcrest’s capital, governance and financial-services operations. Canada becomes directly relevant if the planned North American hub opens. Licensing, banking partners, supported corridors, staffing and Canadian customer activity will determine whether that plan develops into a meaningful market entry.

Financial Inclusion

Mastercard, Heifer And KCB Digitize Payments For 30,000 Farmers

July 28, 2026, Kenya
  • Heifer International, Mastercard, KCB Foundation and KCB Bank Kenya launched a nine-month pilot for 30,000 smallholder dairy farmers.
  • The Farmer Visibility Project will digitize milk deliveries, payments, savings and purchases.
  • Mastercard’s Farm Pass will create farmer profiles and transaction records that can support access to markets and financial services.
  • KCB will provide banking access through accounts, cards, agents and participating merchants.

The pilot treats transaction history as financial infrastructure for farmers who may have limited conventional credit records. The operating test is whether digital records lead to active accounts, lower payment friction, useful savings behaviour and responsible access to financing rather than simply creating more profiles.

Banking And Credit

Lloyds Commits £13B To Digital And AI Strategy

July 30, 2026, United Kingdom
  • Lloyds Banking Group plans to invest more than £13 billion through 2030 under its Accelerate 2030 strategy.
  • The bank plans a Lloyds Smart Wallet using technology from Curve, alongside expanded wealth, workplace pension and transport finance services.
  • Planned AI applications include personalized financial guidance, support for relationship managers and faster mortgage processing.
  • Lloyds is targeting approximately £2 billion of additional cost savings by 2030. The bank reported £4.3 billion of first-half pre-tax profit, up 23% from the prior year.

Lloyds is connecting acquired wallet technology, AI and its existing banking distribution inside one operating strategy. Canadian banks should watch wallet adoption, mortgage processing time, customer activity and whether the investment creates new revenue or mainly lowers operating costs.

Conclusion

Fintech value is concentrating at the control points between customer access and regulated execution. Distribution can now be embedded almost anywhere, but deposits, payments, market data, clearing and governed AI still depend on infrastructure that’s difficult to replace. That creates a sharper strategic choice: own the customer relationship, own a critical operating layer, or risk becoming a feature inside someone else’s stack.  NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.

NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Read More
July 27, 2026   Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech, Digital, NEO, Open Banking, Open Finance, Enterprise, Scaleup, Entrepreneurs, Start-ups, Small Businesses, Fintech AI/ML, Data-driven, Automation, Generative AI, FinTech and Alternative Finance, Fintech International, Fintech Services, Innovation and Resources, Regtech, Compliance, Governance, Tech, Tools, Productivity, Venture Funding and Building   No comments

Open Banking API – The New Attack Perimeter in the Financial Sector

Open Banking API – A new target for cyberattacks in Fintech

We're opening up more and more APIs to partners, fintech services, and client applications. The only question is whether we're confident these same APIs aren't opening up new paths for attackers.

Open Banking Is Changing Not Just How Data Moves, But the Trust Model Itself

Just a few years ago, a bank mostly dealt with its own systems. A customer would log into the app, check their balance, make a transfer. The whole journey stayed inside the perimeter of a single organization.

Today, one customer might simultaneously use a mobile banking app, a budgeting service, an accounting platform, a payment provider, and an AI assistant that analyzes their spending. All of these services exchange data through APIs - interfaces that let different systems talk to each other according to a set of established rules.

Open Banking isn't just a regulatory requirement or a new integration channel - it's a shift in the trust model itself. A bank used to be responsible for security within its own infrastructure. Now it hands off part of its data to dozens of external services, and those services, in turn, rely on the bank. The more participants in the ecosystem, the more points there are where trust is either reaffirmed or cracked, every single day.

Why APIs Have Become the New Attack Perimeter

Attackers are less and less interested in finding a weak spot inside any one bank. Today, hackers target the interaction between systems itself. The longer the chain - bank, fintech, payment hub, partner app - the more places there are for something to go wrong.

Common examples include:

  • authorization flaws, where a user of one app can reach another app's operations;
  • excessive permissions granted "just in case";
  • access controls that check whether someone is logged in, but not whether the data actually belongs to them;
  • risky third-party integrations, where a partner's weakness becomes an entry point into the bank's system;
  • token leaks through logs or unsecured channels;
  • vulnerable business logic that can be bypassed in ways no one planned for.

An API can perform flawlessly on the functional side - fast, stable, no errors in the logs - and still carry a critical vulnerability. Functional correctness and cybersecurity don't always go together.

Why Standard Checks Aren't Enough Anymore

Banks and fintech companies generally don't neglect API security. They go through certifications, run automated scans, do code reviews and QA. But none of these tools answer the one question that matters most: can this specific API's logic be bypassed in a way its developer never anticipated? Scanning catches known vulnerability patterns; code review and QA confirm the code does what it was built to do. Neither one thinks like an attacker who isn't hunting for a bug in the code, but for a logical gap in how the API interacts with other systems.

That's why most attacks on financial APIs today aren't about technical mistakes - they're about logic: the sequence of actions, the boundaries of authority, the trust placed in data coming from the client. It's also why modern Cybersecurity Solutions for Fintech increasingly go beyond formal compliance with standards, testing real-world abuse scenarios at the points where multiple systems meet.

What to Check in Your Open Banking API

Open Banking API – Security Checklist

Here's a short checklist for reviewing every external API in your ecosystem:

  • Can a user of one account reach another account's data?
  • Do all authorization levels - for the client, the partner, and internal processes - work correctly and consistently?
  • Can an expired or revoked token still be used?
  • Are all endpoints equally protected, including the ones not visible in the main interface?
  • Can business restrictions - limits, action sequencing, operation statuses - be bypassed?
  • Is the number of requests per client or integration rate-limited over time?
  • Are actions that deviate from normal behavior actually logged?

If you don't have a confident answer to any of these, that's reason enough to look closer.

How to Check What Automated Tools Can't See

It's worth telling apart three things that often get lumped together. Vulnerability scanning looks for known vulnerabilities by signature, catching familiar vulnerability classes, common misconfigurations, and known dangerous patterns. Automated testing checks whether the code performs its intended functions correctly. Separate from both is API Penetration Testing (https://datami.ee/services/pentest/api-penetration-testing/) - manual testing in which a specialist plays the role of a real attacker: combining requests, tweaking parameters, hunting for unusual sequences of actions that a scanner, in most cases, won't flag as anomalous, because each individual request looks legitimate on its own.

It's also best if this kind of testing is handled by an external team. In-house specialists tend to know their own API inside and out - and that's precisely what makes it hard for them to spot an unconventional abuse scenario, since day-to-day work with a system's logic doesn't train you to look at it through the eyes of someone deliberately trying to break it. External specialists bring experience from other architectures and payment integrations, so they're more likely to catch the gaps a team had written off as unimportant.

Open Banking Only Works When Trust Works

A bank can offer the most convenient digital service and the best partner API on the market. But if even one partner or customer stops trusting the security of the data exchange, the benefits of Open Banking vanish almost instantly. Trust here isn't a bonus feature - it's the baseline condition, and without it the whole structure loses its meaning.

See:  Innovation Opportunities Open Banking in Canada

That's why investing in API protection in the financial sector isn't just about regulatory compliance - it's about sustaining trust across the whole ecosystem: between bank and fintech, fintech and customer, and customer and every new service they let into their data.

NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Read More
« Older posts
Newer posts »