Karsten Wenzlaff, Advisor
August 26th, 2025
AI | Nov 28, 2024

Image: Freepik
Well there's not a day that goes by that artificial intelligence (AI) doesn't amaze while also inflicting fear. AI's latest milestone is unsettling, as its been proven that it can clone human voices so convincingly that even bank's advanced security systems can be tricked. This article is based on an investigative piece by Shari Vahl at the BBC who proved that a clone of her voice breached two major bank's voice ID systems. The security and fraud implications raise the frightening truth that current authentication protections are not good enough in the era of generative AI.
Today, voice cloning believe it or not is pretty straightforward. There are a growing number of voice cloning services that varying features and capabilities such as ElevenLabs, Resemble AI, and Respeecher. Descript compares a few of the pros and cons of the best AI voice cloning tools here.
So Vahl cloned her voice and tested it on the 'voice ID' systems of Santander and Halifax banks. Both systems use a simple phase to authenticate voice ID, "my voice is my password' and grant full access to bank accounts and tools. Here's how the conversation went.

Image: Shari Vahl Voice ID authentication with Voice Clone at Santander bank
Yes, as you see from the conversation above, using her cloned voice she successfully passed Voice ID and logged into her account, using basic speaker equipment at home. She duplicated the same process at Halifax Bank with the same result so she was two for two in hacking into her own bank account with a cloned voice ID.
Many companies such as Rogers say that Voice ID or Voice biometrics is more secure than traditional PINs or passwords but if a cybercriminal can easily pass (or by-pass) a voice ID system using a cloned voice easily, to access sensitive information or drain bank accounts, we've got a serious problem.
Santander and Halifax both defended their systems saying that voice ID is just one layer of their security framework. Here's how they responded according to the BBC article.
Halifax Bank response:
"[Voice ID is an] optional security measure. We are confident that it offers a higher level of security compared to traditional knowledge-based authentication methods, and that our layered approach to security and fraud prevention provides the right level of protection for customers' accounts, while still making them easy to access when needed."
Santander Bank response:
"We have not seen any fraud as a result of the use of voice ID and are confident that it provides greater levels of security than traditional knowledge-based authentication methods. [Voice ID] is one element of our stringent approach to customer security and fraud prevention, with a range of comprehensive checks based on the nature of the customer's request. We constantly review, test and enhance our systems in response to increasingly sophisticated tactics used by fraudsters."
Banks, government, regulators, businesses, and customers all need to wake-up and take the appropriate actions to protect themselves.
While AI is a marvel technology, it's creating new risks that demand smarter protections for all. Similar to the old saying "buyer beware", we now live in an age of "user beware." Stay informed. Stay safe.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Taxes | Nov 26, 2024

AI Image
Yesterday, President-elect Donald Trump announced a 25% tariff to be applied to all of Canada's imports into the U.S., sparking plenty of debate. So far the focus is largely on physical goods like lumber, fuel, aluminum, dairy and food products, and things like cars. But what about fintech services, and more specifically Canada's new Digital Services Tax (DST)? Could they be somehow ensnared with this new tax friction which has already ruffled feathers in Washington (and could become another discussion point for a broader trade dispute?
During Trump's campaign for re-election into office, he must have mentioned tariffs a thousand times or more. He talked about applying tariffs to every country that he thought had an unfair trading relationship with America including Canada. The Canada and Trump Risk Index ranks Canada in third place behind only Mexico and China in terms of which countries are at the greatest risk of a trade policy change. As of Aug 2024, Canada reported a trade surplus with the U.S. of about $11.5 billion CAD which is the difference between how much Canada exports to the U.S. ($43.7 billion CAD) versus imports from the U.S. ($32.3 billion CAD).
Trump's tariff trade policy on imports hopes to push countries like Canada to the negotiating table by making their exports to the U.S. more expensive for American consumer buyers driving down demand. When Trump announced a 25% tariff on all Canadian imported goods, he also mentioned the flow of illegal drugs and people coming from Canada into the U.S.. Prior to that, we also all know that Trump is angry that Canada has not followed-up on its commitment to spend 2% of GDP on defence per it's NATO member agreement. So in Trump's mind, cross-border trade needs a new deal with all countries including Canada.
Canada is now rolling out a unilateral 3% DST aimed at large tech companies like google, Amazon, and Facebook who generate more than $20 million CAD in revenue in Canada. The goal is to make these tech giants pay their fair share of taxes and is quite a shift in Canada's approach to taxing digital economies, and has caused a lot of controversy in Canada and aboard.
Not everyone agrees. The U.S. government sees the DST as unfairly targeting American companies. Earlier this year, the U.S. made a formal complaint under the USMCA trade agreement. If those talks fail, the U.S. could retaliate with their own tax which could get tricky for some larger Canadian fintech companies.
On the surface it seems fintech is safe given that DST is aimed at tech giants and tariffs traditionally focus on physical goods. But trade disputes have a weird way of escalating and if Trump decides to take a stronger stance on Canadian digital tax policies, fintech firms operating in the U.S. could feel the heat.
Take Nuvei for example, a Montreal payment tech company that processes transactions for U.S. businesses. Nuvei reported a total revenue of $357.6 million in the third quarter of 2024 (17% increase year over year). While the U.S. revenue figures aren't specifically disclosed, Nuvei has significant operations and client base down South, suggesting that its revenue from U.S. markets would likely exceed $20 million annually. Or take Wealthsimple who recently expanded into the U.S. and services clients investment tools through its digital platform.
Both companies rely on trouble free cross-border operations to thrive. If the U.S. (or Canada) introduces new restrictions or taxes on digital services, it could make operating harder and more expensive.
Being a neighbour to one of the most lucrative markets in the world has been a big part of Canada's success. But trade tensions can rise and fintech companies need to keep a close watch on trade developments (i.e., tariffs, DST etc) between the U.S. and Canada, and be prepared for new challenges and opportunities that may arise.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Cyber Insurance | Nov 25, 2024

AI Image
Sofia and Liam were co-founders of SparkFin a scaling fintech startup that promised a P2P lending experience with just a few taps on a smartphone. Their platform was getting backed and changing personal finance. The buzz was electric. Performance numbers were soaring and investors were reaching out like never before.
Then one Friday afternoon, everything changed. It begin with an urgent alert from the head of security,
“We’ve detected unusual activity on the platform. User accounts are being accessed without permission.”
Then moments later, social media lit up. Customers were angry and anxious. Funds were drained from their accounts.
Liam froze. Sofia grabbed her phone. This is it. A cyberattack.
Fortunately, SparkFin had taken steps to prepare for this kind of scenario just a few months earlier. Their board had insisted on a robust cyber insurance policy. Liam at the time was hesitant thinking "Is this just another expense for something that might never happen?” but Sofia was more realistic and saw their business as a huge risk that needed protection. "If we’re handling people’s money, we have to be covered," she argued.
That moment was a lifesaver. Sofia contacted their insurance provider’s 24/7 breach response team. Before they knew it, an incident coordinator was on the line and a response plan was set in motion.
The first priority was to contain the breach. SparkFin’s IT team worked alongside cybersecurity specialists provided by the insurance policy. They immediately shut down vulnerable access points and began investigating the attack’s origins. The insurance policy covered the cost of hiring forensic experts to trace the hackers and assess the damage.
Next came damage control. The cyber insurance policy included funds to notify affected users quickly and offering them fraud protection services and covering any direct financial losses from the breach. A public relations specialist was also covered by the cyber insurance who expertly crafted messaging to assure customers their money would be safe.
When regulators stepped in with demands for answers, SparkFin was ready. The insurance policy included coverage for legal fees and compliance experts to handle the high volume of inbound inquiries that demanded a response. This support was critical to staying on top of the complex regulatory landscape SparkFin operated in.
Even though the policy was a lifeline, it wasn’t a silver bullet. The breach knocked user confidence down significantly which led to fewer new signups and investors also started to back off. SparkFin’s policy didn’t cover the lost revenue due to the breach nor did it cover the cost of upgrading their technical infrastructure after the attack to ensure it wouldn’t happen again.
Sofia and Liam also realized they needed to explore extra coverage like reputational harm coverage and funding for proactive security upgrades. "If we’re going to be trusted with people’s finances, we need to make sure we’re protected from all sides," Sofia said.
Once the crisis was under control, the insurance provider offered a post-incident review which revealed weaknesses in their system. Liam worked with cybersecurity experts to implement stricter authentication measures and establish regular testing protocols.
Sofia held employee training sessions to help reduce human error and ensure the entire team understood how to spot phishing scams and other top cyber threats. They also updated their cyber insurance policy by adding coverage for social engineering attacks which was one of the vulnerabilities the hackers had exploited.
Sofia and Liam eventually recovered from the cyberattack and built a stronger and more experienced and resilient SparkFin. Their users returned given SparkFin's transparency and swift response. They were impressed by their handling of the crisis, boosting their confidence in the company.
“Cyber insurance isn’t just a safety net but rather a test of resilience. It didn’t just help us recover but it helped us build back a stronger and more prepared company, proving to our customers and investors that we’re here for the long haul.”
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Cybersecurity | Nov 21, 2024

Image: 2023-2024 Annual Cyber Threat Report (ASD)
We all knew it was coming but it's finally arrived. Cyber threats, cybersecurity, cyber attacks, scams, deepfakes, risks, rugpulls, ransomeware, social engineering, phishing etc are now considered a business critical priority. Particularly financial service firms who interact with and manage high value and sensitive transactional data. The Australian Signals Directorate recently published its annual 2023-2024 Cyber Threat Report (78 page PDF report) with insights into the evolving cyber threat landscape - what it looks like and how to build business resilience and fortify against it.
Fintech firms must manage cybersecurity as an ongoing business function instead of thinking about reacting to one-off incident. Threats are becoming more sophisticated and frequent. Companies need to take proactive steps now to protect their operations and data, and maintain the trust of their customers.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
AI Risks | Nov 19, 2024

Image: Financial Stability Implications of Artificial Intelligence (FSB)
For those who think AI is simply automating tasks, in new report published Nov 14, 2024 titled, "The Financial Stability Implications of Artificial Intelligence" (40 page PDF) the Financial Stability Board (FSB) warns think again. AI is fundamentally changing how financial institutions operate, strategize, and compete. In less than two years, Generative AI and innovative large language models like ChatGPT are game changing the space. Banks and financial institutions are already investing in AI technologies or exploring its capabilities for using AI for everything from complex underwriting to optimizing investment allocations and autonomous bots in the agentic web.
The FSB is warning that these advancements come with deeper and much more significant risks where financial markets would be at the whim of AI systems all reacting in unison given that they are trained on mostly identical data, making the same decisions at lightening speed, all magnifying shock risks that could trigger widespread instability. Let's break it down.
The report highlights that AI relies on special tech infrastructure such as specialized hardware (i.e., NVIDA chips), cloud services, and pre-trained models that collectively are creating a 'single point of failure' risk. The risk is about third-party dependencies and concentration in the AI supply chain. There are only a limited number of providers and in the event of a key provider facing disruption, it could create a systemic vulnerability that could paralyze global financial operations.
As mentioned above, AI models often use the same training data and algorithms which means that many institutions could end up making similar AI-driven decisions under stress. For example, if trading algorithms automatically respond to market drops all in the same fashion, then liquidity could dry up instantly triggering a market meltdown (instead of a routine dip).
We've all heard of 'flash crashes' or recent 'run on banks' that are hyper sensitive in the digital age (think pressing a button to get ones money out versus back in the day, lining up at a bank branch to withdrawal funds). Further, mass adoption of AI on a much larger scale could make these event risks more frequent and severe.
AI technologies are helping both good and bad actors. These days, GenAI can generate realistic fake identities, deepfake videos, and even manipulate sentiment using misinformation campaigns. Imagine a fake video of a CEO announcing a company’s collapse and markets responding negatively before the truth surfaces. Further, a deeper issue of fraud in an AI driven world is that the current fraud detection systems used by governments, central banks, financial institutions, pretty much everyone were not designed to protect against AI smart attacks. And it will take time before these same tools that institutions are using to optimize their operations can also be sophisticated to enough to protect themselves from escalating threats. The 'cat-mouse' game of fraud has always been there but AI risks increasing the gaps in any system.
Simply put, artificial intelligence tools and the ownership entities behind them can prioritize profit over ethics. One example is an AI bot looking to optimize profit may find it beneficial to spread disinformation to then profit from shorting a stock. While the bot may generate returns in the short term, the long term damage to financial markets and the trust in the systems that manage them could become toxic.
There needs to be a mix of better oversight and governance, smarter regulations and more international collaboration. Financial institutions need to rethink how they will adopt and deploy AI by:
The FSB's report is a warning to financial institutions, regulators, and global leaders that they must act now and address vulnerabilities in AI governance, third party dependencies, and security. The stakes are high, and the time to act is now.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |