Category Archives: Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech

NCFA Weekly Fintech Intelligence Aug 22-28, 2026

Aug 22, 2026 | NCFA Fintech Whisperer | Capital Markets Infrastructure And Funding, Cross Border Payments And FX, Payments Infrastructure And Money Movement, Cybersecurity Fraud And Financial Crime, Artificial Intelligence And Data, Lending Consumer Credit And BNPL, Treasury Liquidity And Cash Management, Sustainable Finance ESG And Financial Inclusion, Digital Banking And BaaS, Wealthtech Investing And Trading, Regulation And Policy, Digital Assets Blockchain And Tokenization, Risk Compliance And Regtech

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-24, 2026, July 25-July 31 2026, August 1-August 7, 2026, August 8-August 14, 2026, August 15-August 21, 2026).

Weekly Fintech Market Intelligence Aug 22 - 28, 2026

Digital Assets Blockchain And Tokenization

39 Banking Associations Form BankChain Alliance

August 25, 2026, United States
  • The Texas Bankers Association and 38 other state banking associations formed BankChain Alliance to develop a common blockchain network owned, designed and governed by the banking industry.
  • The proposed network would support smart payment tools, tokenized deposits, stablecoins and automated settlement while operating within bank regulatory and security requirements.
  • The alliance is selecting a technology partner, targeting a 2027 launch and planning interoperability with other networks. Banks across the United States will be invited to become owners.

BankChain Alliance adds an association led ownership model to existing bank tokenized deposit networks. Its published plan gives community and regional banks a proposed role in governing shared infrastructure, although the technology provider and participating bank commitments remain unresolved.

Capital Markets Infrastructure And Funding

RQD Clearing Raises US$74M For Clearing And Custody

August 27, 2026, United States
  • RQD Clearing received a US$74 million minority investment led by Bain Capital Tech Opportunities, with participation from ABN AMRO Clearing Bank and Nyca Partners.
  • RQD reported more than 543 million ledger transactions and approximately 515 million equity transactions year to date, covering 69.5 billion shares and nearly US$2 trillion in notional value.
  • The firm also reported nearly 64.8 million options contracts representing US$3.93 trillion in notional value. The capital will support geographic expansion, product development, digital assets, tokenization and custody infrastructure.

RQD combines the financing announcement with disclosed operating volume from its proprietary clearing platform. The expansion plan covers digital-asset custody and tokenization alongside equities and options infrastructure. NCFA’s Alpaca platform analysis examines another provider combining brokerage distribution with regulated clearing and custody.

CIMB Settles Tokenized Sukuk With Tokenized Deposits

August 27, 2026, Malaysia
  • CIMB completed a controlled-environment pilot that settled tokenized sukuk using tokenized commercial-bank deposits.
  • The pilot involved a RM1.68 billion issuance under CIMB Islamic Bank’s RM10 billion Senior Sukuk Wakalah Programme. RM1.38 billion was represented in tokenized form and subscribed by 12 institutional investors, while RM300 million was issued conventionally.
  • The work took place through Bank Negara Malaysia’s Digital Asset Innovation Hub. CIMB said it also consulted the Securities Commission Malaysia, and the tokenization layer did not alter the sukuk’s economic or Shariah structure.

The pilot tested the digital asset and payment legs within the same institutional transaction. NCFA’s tokenized market infrastructure analysis explains why tokenized securities require a compatible settlement asset. CIMB identifies coupon distribution, secondary transfers and redemption as potential future applications. Commercial production availability has not been announced.

Tradeweb Completes Fully Onchain Sovereign Repo

August 27, 2026, United States
  • Virtu Financial, M1X Global and Tradeweb completed what they describe as the first fully onchain repo using a sovereign digital bond as the securities leg.
  • The bilateral transaction involved regulated institutional counterparties on Tradeweb. Securities delivery, the cash leg and the return settled atomically on Canton.
  • The complete repo cycle, including execution and repurchase, took less than 10 minutes without prime broker intermediation.
  • USDM1 is issued by the Republic of the Marshall Islands under New York law and backed one-for-one by short-dated U.S. Treasurys held in bankruptcy-remote custody.

The completed transaction extends Canton's institutional custody and collateral infrastructure into a full repo cycle. Repeat volume, additional counterparties and accepted legal, accounting and capital treatment will determine whether the structure advances beyond a single transaction.

Canadian Fintech Investment Reaches US$996.7M In H1 2026

August 25, 2026, Canada
  • Canadian fintech investment totalled US$996.7 million across 47 deals in H1 2026, compared with US$1.7 billion across 82 deals one year earlier.
  • Second quarter investment reached US$621.7 million across 23 deals, up from US$375 million across 24 deals in the first quarter. Nesto's US$218.6 million Series E was the largest transaction.
  • AI and machine learning accounted for 19 deals, followed by digital assets and cryptoassets with eight. KPMG expects the Real-Time Rail and Consumer-Driven Banking reforms to affect service costs, competition and consolidation.

The H1 numbers extend the concentration documented in KPMG's 2025 fintech investment review. Canadian founders now face a market where capital favours scale, regulated access, specialized technology and measurable economics. Infrastructure reform could improve the position of companies that can convert lower data and payment friction into customer adoption.

EDGE Gives ProphetX Traders 24/7 Exchange Funding

August 25, 2026, United States
  • EDGE Markets integrated EDGE Connect with ProphetX, giving eligible users real time deposits around the clock, daily deposit limits of up to US$1 million and no deposit fees charged to ProphetX participants.
  • EDGE Boost provides dedicated FDIC insured deposit accounts, while EDGE Connect uses FedNow for near real time fund movement without banking hour restrictions.
  • The ProphetX integration follows EDGE partnerships with Kalshi and Polymarket. EDGE says its Boost product has processed more than US$2 billion in transactions.

This is a material follow-on to the June financing behind EDGE's prediction market banking infrastructure. ProphetX provides named distribution and active account funding use for EDGE Connect. Higher limits, dedicated insured accounts and continuous FedNow access give the rail an operating profile that routine partnership announcements lack.

Gemini And Apex Plan Regulated Prediction Market Distribution

August 24, 2026, United States
  • Gemini and Apex Fintech Solutions signed a non-binding letter of intent under which Gemini Titan would become the exclusive regulated venue for crypto event contracts distributed through Apex's futures commission merchant to brokerage clients.
  • Participating brokerages could offer crypto event contracts without building direct exchange connectivity, with Gemini providing execution and clearing through its regulated derivatives infrastructure.
  • Gemini Titan holds a CFTC Designated Contract Market licence, while Gemini Olympus received a Derivatives Clearing Organization licence in April 2026.

Apex could give Gemini a distribution route through brokerage platforms that already serve tens of millions of investors, while Gemini supplies the regulated venue, execution and clearing. That directly expands the commercial case for event contract distribution infrastructure around brokerage connectivity, compliance and access. The parties still need a definitive agreement, so the LOI establishes the proposed structure rather than a completed rollout.

Cross Border Payments And FX

Canada And India Advance UPI And Remittance Cooperation

August 27, 2026, Canada / India
  • Canada and India concluded their inaugural Finance Ministers’ Economic and Financial Dialogue, following the commitment announced by the countries’ prime ministers in March.
  • The finance ministers agreed to support engagement among authorities and industry participants on cross-border remittances and merchant payments.
  • They welcomed wider use of India’s Unified Payments Interface in Canada through payment-service-provider partnerships. The statement does not identify a provider, payment corridor or launch date.

The March dialogue announcement established the bilateral payments file. The completed August meeting adds an agreement to explore UPI distribution and cross-border payment partnerships, while commercial implementation remains unresolved.

Visa And Nium Put Stablecoin Settlement Inside MAS BLOOM

August 25, 2026, Singapore
  • Visa joined the Monetary Authority of Singapore's BLOOM initiative, which is testing interoperability between established payment systems and stablecoin payment rails.
  • Nium is Visa's first partner to pilot stablecoin settlement under BLOOM, including settlement seven days a week across weekends and public holidays.
  • The pilot will support regulated stablecoins backed by major currencies, including U.S. dollar and euro denominated stablecoins, while using Visa's network, security and compliance capabilities.

This is a material follow-on to Visa and Nium's earlier stablecoin settlement work. BLOOM adds central bank led governance, multicurrency scope and an explicit interoperability mandate. Together with Nium's recent U.S. card issuance expansion, the pilot gives Nium a larger role across both payment distribution and institutional settlement.

Fasset Raises US$68M To Expand Stablecoin Banking Infrastructure

August 24, 2026, Global
  • Fasset raised a US$68 million Series C led by SBI Group at a US$1 billion valuation, bringing its 2026 fundraising to US$119 million.
  • The company reports more than US$40 billion in annualized transaction volume across more than 3 million wallets, 1,000 enterprises and 125 countries.
  • The capital will expand Own Network, which connects banks, payment providers, liquidity providers, custodians and settlement networks across more than 100 banking corridors, while increasing investment in stablecoin settlement and AI-enabled transaction routing.

Fasset is putting new capital into the banking, liquidity and settlement connections behind its existing transaction volume. Stablecoins already support settlement across parts of Own Network, placing the company inside the infrastructure opportunity around programmable stablecoin payments rather than relying on token issuance alone. Its 100-plus banking corridors give Fasset a base for competing on routing cost, settlement reach and access across markets where payment infrastructure remains fragmented.

Treasury Liquidity And Cash Management

RBC Unifies Global Transaction Banking Across Canada And The U.S.

August 25, 2026, Canada
  • RBC formally established Global Transaction Banking as a unified business combining transaction banking capabilities from Commercial Banking in Canada and the U.S. with RBC Capital Markets.
  • The offering brings RBC Clear in the U.S. and RBC Edge in Canada together with foreign exchange, payments, trade finance, working capital and liquidity management capabilities.
  • RBC appointed dedicated leaders for products, platforms and solutions and for client coverage, with the business positioned to support deposit generation and global growth.

RBC is consolidating ownership of the corporate cash cycle, from payment execution and foreign exchange to liquidity and trade finance. Multinational clients gain a coordinated entry point across Canada and the U.S., raising the integration benchmark for fintechs selling treasury software, cross border payments or working capital tools into the same accounts. The structure continues the transaction banking competition already pushing large banks to invest in digital business payment capabilities.

Digital Banking And BaaS

Deutsche Bank Selects Vault Core For German Private Bank

August 27, 2026, Germany
  • Deutsche Bank selected Thought Machine’s Vault Core as the core banking engine for all German Personal Banking and Wealth Management banking and lending products.
  • The Private Bank plans to reduce 15 core banking systems to two cloud-based platforms. Development is underway, testing is planned by year-end and product migrations are scheduled to begin in 2027.
  • GFT will serve as the implementation partner. Deutsche Bank plans to invest about €600 million in IT, operations and AI by the end of 2028 and expects approximately €300 million in annual run-rate savings by then.

This is a defined core replacement with a named platform, systems integrator, investment budget and migration sequence. Deutsche Bank says the old and new systems will operate in parallel during the transition to support operational resilience and continuity of service. Testing remains planned for year-end, and no migrated products have yet been reported.

Tyfone Brings Auditable AI Into Community Banking

August 26, 2026, United States
  • Tyfone unveiled nFinia Reimagined, a digital banking platform with its Fathom AI capability embedded throughout the customer experience.
  • Account holders can ask questions in natural language, receive answers grounded in their financial information and the institution’s products, policies and services, and continue from conversation to action.
  • iTHINK Financial is the first named customer and expects to launch Fathom this fall. Tyfone says data is isolated by institution, interactions are logged and auditable, transactions require account holder consent, and existing authentication, fraud detection and approval processes remain in place.

The design gives community banks and credit unions a way to offer AI assistance inside authenticated banking while maintaining institution-level data and transaction controls. iTHINK gives the launch a concrete customer and near-term operating timeline.

Payments Infrastructure And Money Movement

Syria Processes First International Card Payment In 15 Years

August 27, 2026, Syria
  • Mastercard and QNB Group processed Syria’s first international card payment in more than 15 years.
  • Following a technical reconnection to Mastercard’s global network, QNB Syria processed a point-of-sale transaction at an eligible approved local merchant using an internationally issued Mastercard.
  • Mastercard said the transaction demonstrated that the new infrastructure can accept internationally issued cards in Syria.

The transaction verifies that the connection can process an international card at an approved Syrian merchant. The announcement does not disclose how many merchants are enabled, which issuing markets can participate or when international card acceptance will become widely available.

Bank Of England Defers RTGS And CHAPS Standards

August 27, 2026, United Kingdom
  • The Bank of England deferred its entire November 2026 RTGS standards release, including the messaging standards for CHAPS payments.
  • The decision follows Swift's delay of its November standards release after financial institutions requested more time to prepare for the removal of unstructured postal addresses.
  • The Bank is coordinating with Swift, other market infrastructures and RTGS participants to preserve interoperability and reduce late-stage implementation risk.
  • Revised timelines have not been published. The Bank said it will provide updates so organizations can amend their implementation plans.

Banks, payment firms and vendors must revise ISO 20022 delivery schedules without treating the delay as cancellation. Release dependencies, vendor contracts and address-data remediation still need clear ownership while the industry waits for a replacement timeline.

USD1 Goes Live As Canton Settlement Asset

August 25, 2026, United States / Global
  • World Liberty Financial's USD1 stablecoin is now natively issued on Canton by BitGo Bank & Trust, National Association.
  • Institutions can configure USD1 as the cash leg for tokenized real-world asset transactions and use it for collateral, lending, funding, redemption and 24-hour settlement.
  • USD1 has more than US$4 billion in circulation and is backed by short-term U.S. Treasurys, government money market funds, dollar deposits and other cash equivalents.
  • Canton reports more than US$9 trillion in tokenized assets issued or processed each month, but the announcement does not identify live USD1 transaction volume on the network.

The launch extends USD1's institutional settlement use cases from a planned fund-services pilot to native availability on Canton. Named counterparties and recurring atomic settlement volumes are still needed to prove adoption.

Commonwealth Bank Launches PaidIt For Verified Payouts

August 25, 2026, Australia
  • Commonwealth Bank launched PaidIt to manage settlements, remediation payments and refunds when recipient information is missing, incomplete or outdated.
  • Its recipient-matching engine applies identity and account checks to determine which payouts can be automated and which require further review. The platform connects through APIs and uses Australia’s New Payments Platform, PayID and ConnectID.
  • PaidIt is already used within the bank in some cases, with a median experience of less than two minutes from the start of a claim to funds reaching the recipient’s account.
  • Additional CommBank units and institutional clients are scheduled to receive the service. Hay Limited issues the PaidIt Account, while CBA New Digital Businesses acts as its authorized representative.

PaidIt combines identity resolution, recipient communication and payment delivery for cases that often depend on manual tracing. CBA’s internal use gives the product operating evidence ahead of its planned institutional client rollout.

Canada's Real-Time Rail By-law And Rules Take Effect

August 24, 2026, Canada
  • The Real-Time Rail By-law and approved RTR Rules came into force on August 24, establishing the legal framework for Canada's new real-time payment system.
  • The framework defines the roles and responsibilities of participants that will exchange, clear and settle payments through the RTR.
  • Participant onboarding, technical integration, testing and certification continue ahead of Payments Canada's planned Q4 2026 production launch.

August 24 gives prospective RTR participants a live legal framework, while operational access still depends on membership, settlement arrangements, technical integration, fraud controls, testing and certification. The RTR rules and access requirements show why eligibility alone does not put a PSP into production. Firms that can clear the remaining technical and operating requirements will be better positioned to build instant payment, pay by bank, treasury and embedded payment products when the system launches.

Wealthtech Investing And Trading

Vanguard Agrees To Acquire RIA Custodian Altruist

August 26, 2026, United States
  • Vanguard entered a definitive agreement to acquire Altruist, a wealth technology and custody platform serving registered investment advisors.
  • Altruist combines custody infrastructure, advisor technology, established RIA relationships and digital workflows for independent advisors.
  • After closing, Altruist is expected to retain its leadership, brand, advisor focus and standalone operating model under Vanguard ownership.
  • Financial terms were not disclosed. Closing is expected later in 2026, subject to regulatory approvals and customary conditions.

Owning Altruist gives Vanguard direct infrastructure across RIA custody and advisor workflows, not only fund distribution. Advisors and competing platforms should watch closing conditions, pricing, product access and whether standalone governance preserves Altruist's independence.

Flanks Connects Regulated Wealth Data To Perplexity

August 25, 2026, Spain
  • Flanks made its wealth-data connector available inside Perplexity’s Answer Engine and Computer agent platform.
  • Users can query portfolio holdings, investment positions and transaction histories from more than 700 institutions and use the information for reporting, portfolio monitoring, meeting preparation and ETF overlap analysis.
  • Flanks says it processes more than 8.2 million portfolios monthly across 33 countries and covers over €43 billion in assets. The company is regulated as an Account Information Service Provider by the Bank of Spain under European Central Bank supervision.

Putting regulated multibank data inside an agent interface connects advisory automation to a structured financial source layer. For wealth firms evaluating governed AI agent workflows, the integration supports portfolio analysis and adviser preparation inside an environment they may already use.

Cybersecurity Fraud And Financial Crime

Nasdaq Verafin To Add Q6 Dark Web Fraud Intelligence

August 27, 2026, United States / Global
  • Nasdaq Verafin will integrate Q6 Cyber’s dark-web intelligence into the fraud and anti-money-laundering platform used by more than 2,800 financial institutions.
  • Q6 reported collecting more than 1.2 million compromised checks, 57 million unique compromised credentials and 158 million compromised payment cards during the previous 18 months.
  • In a proof of concept, the companies measured an average of 10 days between Q6 detecting a stolen-check listing and the first associated fraudulent check being returned.

Nasdaq says Q6 data will appear as high-risk alerts inside the existing Verafin investigation workflow, covering check fraud, payment-card fraud and account takeover. The proof-of-concept average demonstrates potential lead time, but it does not establish that every alert will arrive before a fraudulent transaction.

Socure Acquires Fravity For Agentic Fraud Operations

August 27, 2026, United States
  • Socure acquired Fravity, an agentic platform that automates fraud, risk and compliance operations, alongside a strategic growth investment led by Summit Partners.
  • The investment values Socure at US$5.2 billion and includes primary capital plus an employee secondary tender offer.
  • Fravity will be integrated into Socure's RiskOS platform as RiskOS_Agents. The companies already share enterprise customers using both systems in production.
  • Socure reported US$364 million in annual recurring revenue for the second quarter, 63% year-over-year growth and more than 3,000 customers.

Fraud and compliance teams can now buy agentic case operations within a large identity platform rather than assembling a separate agent layer. Regulated customers still need evidence for each automated decision, clear escalation rules and accountable human owners when an agent closes or changes a case.

U.S. Treasury Launches Finance Quantum Task Force

August 24, 2026, United States
  • The U.S. Treasury launched a public-private Quantum-Readiness Task Force for the financial sector after Executive Order 14412.
  • Its three workstreams cover sector alignment and post-quantum cryptography transition, third-party and vendor readiness, and digital assets and emerging technology risk.
  • The group will bring together government, financial institutions, market infrastructures and technology providers.
  • Work will address critical dependencies, cryptographic agility, interoperability, operational resilience and implementation risk across third parties and digital assets.

The task force turns quantum readiness for fintech into a coordinated financial-sector program. Institutions and vendors should inventory cryptography, rank critical systems and document external dependencies before sector guidance becomes a delivery deadline.

Safeheron And RFI Launch Cross-Border Post-Quantum Financial Pilot

August 24, 2026, Singapore / Global
  • The Responsible Fintech Institute and Safeheron launched a cross-jurisdiction pilot to test post-quantum cryptography for regulated digital asset transactions with participating banks and regulatory stakeholders.
  • The pilot uses an MPC protocol supporting NIST's ML-DSA-65 signature standard, with testing covering wallet generation and onchain transfers on the quantum-resistant NEAR testnet.
  • Bison Bank and DK Bank are participating alongside regulatory stakeholders including ADGM, Malta's MFSA and the Gelephu Financial Services Office, while the protocol research and testing results are intended to be published and the underlying code eventually open sourced.

This puts post-quantum preparation into an institutional transaction environment where banks and regulators can test the same cryptographic architecture before migration becomes an operating requirement. That is the implementation work behind financial sector quantum readiness: testing wallet controls, signing standards, governance and cross-border interoperability while existing cryptography still works. A shared reference architecture could also reduce the cost and uncertainty of each institution designing its own migration approach.

SEBI Adds IT Resilience Index and Standardized Cyber Reporting

August 24, 2026, India
  • SEBI introduced an IT Resilience Index for market infrastructure institutions, covering stock exchanges, clearing corporations and depositories.
  • The index establishes a common mechanism for monitoring the availability, reliability, performance and cyber resilience of critical market technology systems.
  • On the same day, SEBI aligned its cyber incident reporting portal with the Financial Stability Board's FIRE format, bringing incident reporting closer to a common international structure.

India is making technology resilience more measurable while standardizing how cyber incidents enter regulatory reporting. Exchanges, clearing corporations and depositories now face a more structured test of whether critical systems remain reliable and recoverable, while common incident data should make weaknesses easier to compare across institutions and over time.

U.S. Treasury Launches Financial Quantum Readiness Task Force

August 24, 2026, United States
  • The U.S. Treasury launched a public private Quantum Readiness Task Force to accelerate the financial sector's transition to quantum safe technology.
  • The task force has three workstreams covering post quantum cryptography transition, third party and vendor readiness, and digital assets and emerging technology risk.
  • Treasury says the initiative will bring together government, financial institutions, market infrastructure providers and technology companies to address cryptographic dependencies, interoperability, operational resilience and implementation challenges.

The task force turns federal quantum policy into a financial sector implementation program. Firms now have a coordinated forum focused on cryptographic inventories, vendor dependencies, digital assets and migration execution. It extends the operating case in quantum readiness analysis: the immediate challenge is finding vulnerable cryptography and planning replacements before migration becomes an operational deadline.

Artificial Intelligence And Data

Hong Kong Selects 36 Agentic AI Finance Pilots

August 27, 2026, Hong Kong
  • Hong Kong's four financial regulators and Cyberport selected 36 use cases from nearly 100 proposals for the first GenA.I. Sandbox++ cohort.
  • The cohort involves 30 financial institutions and 27 technology partners across banking, securities, insurance and pensions.
  • Projects cover customer onboarding, payments, insurance claims, customer interactions and AI systems supervising other AI systems.
  • Participants will onboard to Cyberport's platform before technical trials begin later in 2026.

The cohort gives regulators a supervised setting to examine how autonomous financial systems are authorized, monitored and escalated. The useful proof will come from controls that preserve human accountability when an agent completes a task or supervises another agent.

Rocket Money Gives Rowan Authority To Act

August 25, 2026, United States
  • Rocket Money launched Rowan, an Anthropic-powered personal-finance agent that monitors a user's finances and acts through text instructions.
  • Rowan can renegotiate recurring bills, cancel subscriptions and create automated savings transfers after receiving a user's direction.
  • Rocket Money says the system combines adaptable agents with strict code and team-based human verification.
  • Access is limited to select Premium Plus subscribers, with wider availability planned later in 2026.

Rowan takes delegated AI access to financial accounts from recommendations into execution. Permission limits, action logs, reversibility and responsibility for losses become core product controls when a conversation can trigger a financial action.

Google Introduces Gemini Enterprise For Financial Services In Preview

August 25, 2026, Global
  • Google Cloud introduced Gemini Enterprise for Financial Services in preview for capital markets and corporate banking workflows.
  • The platform combines reusable financial skills, secure Model Context Protocol connectors, financial agents and a governed control plane that preserves existing data permissions and entitlements.
  • Its Financial Research agent includes more than 50 foundational skills and provides confidence scores, stated methodologies, data snapshots and source citations. Google says customer data and model outputs are not used to train or fine-tune its foundation models.

Google is packaging domain methods, licensed data access, workflow execution and governance as one financial AI stack. Banks evaluating the preview will need to examine the quality of its research outputs, permission controls, audit records and integration with existing systems. The same control requirement is already visible in AI agent spending infrastructure, where authorization and observability determine whether automated execution can enter production.

Starling Gives Business Customers An AI Assistant That Can Move Money

August 24, 2026, United Kingdom
  • Starling launched its agentic AI assistant to all business customers, extending a capability first introduced for personal accounts in March 2026.
  • The assistant can execute banking commands including calculating a percentage of recent earnings and transferring the amount into a dedicated account space for tax purposes, while also supporting invoice fraud checks and Making Tax Digital guidance.
  • Starling says the opt-in assistant uses Google Gemini on Google Cloud, keeps customer data inside Starling's cloud environment and does not use that data for model training. The bank plans to add a new assistant tool every week for the rest of 2026.

Starling has moved agentic AI inside the authenticated business banking workflow and given it authority to execute a defined financial action, rather than limiting it to analysis or customer support. That brings the consent and liability questions around AI initiated payments into a live bank product: who authorizes the action, what limits apply, how the instruction is recorded and what happens when an automated decision is wrong. For business banking, the commercial opportunity is also concrete. The bank can automate tax, invoicing, fraud checks and cash management inside the account instead of leaving those workflows to separate software providers.

Lending Consumer Credit And BNPL

Equifax Finds Ontario Mortgage Stress Persisting As National Delinquency Growth Slows

August 24, 2026, Canada
  • Equifax Canada says total consumer debt reached $2.68 trillion in Q2 2026, up 4.18% from a year earlier, while non-mortgage debt rose 4.8% to $712.2 billion.
  • The national 90+ day non-mortgage balance delinquency rate eased to 1.76% from 1.79% in Q1, but remained above the 1.70% recorded in Q2 2025.
  • Ontario mortgage holders remain under greater pressure, with 90+ day missed mortgage payments rising every quarter for four years and non-mortgage debt held by mortgage borrowers reaching $304.6 billion in Q2.

The national improvement does not describe every borrower or every region. Ontario homeowners are carrying persistent mortgage stress while severe non-mortgage delinquency has eased slightly across Canada, giving lenders a more uneven credit picture than the headline rate suggests. That divergence affects underwriting, limit management and collections across consumer lending, including products now becoming more visible in Canadian credit files. Geographic exposure and housing obligations are becoming more important when lenders assess where household credit risk is actually accumulating.

Sustainable Finance ESG And Financial Inclusion

New Zealand Enacts Bar on Emissions-Related Tort Claims

August 24, 2026, New Zealand
  • The Climate Change Response (Tort Liability) Amendment Act 2026 received Royal Assent on August 24 and came into force the following day.
  • The legislation prevents findings of tort liability for climate effects or related harm caused by greenhouse gas emissions, including activities that cause or contribute to those emissions.
  • The bar applies to unresolved proceedings that began before the law took effect. New Zealand’s emissions targets, budgets and Emissions Trading Scheme obligations remain in place.

For banks, insurers and investors, the liability perimeter has narrowed. Statutory emissions duties remain, while private climate claims can no longer use this route through tort law. Underwriting, due diligence and climate-risk analysis should reflect the distinction.

Risk Compliance And Regtech

APRA and ASIC Raise Frontier AI Resilience Expectations

August 27, 2026, Australia
  • APRA and ASIC published findings from nine frontier AI roundtables involving more than 600 participants and 380 entities across banking, insurance, payments, markets, credit and other financial services.
  • The regulators expect firms to act now and demonstrate that governance, escalation, recovery, assurance and operational resilience can work under faster AI enabled cyber and technology disruption.
  • APRA and ASIC say frontier AI preparedness will remain a heightened supervisory focus, including third party dependencies, recovery arrangements, board decision making and critical market infrastructure resilience.

Frontier AI preparedness is moving from awareness into evidence of execution. Financial firms need tested escalation authority, recovery plans, dependency mapping and governance that still works when incident timelines compress. The supervisory question is increasingly whether organizations can prove those controls operate under pressure, not whether boards have discussed AI risk.

Regulation And Policy

UK Expands Bank of England Payments Innovation Mandate

August 27, 2026, United Kingdom
  • The UK government intends to give the Bank of England a secondary objective to facilitate innovation when regulating systemic payment systems, while financial stability remains its primary objective.
  • The expanded mandate will cover payment systems using digital settlement assets such as stablecoins and extend an innovation objective already applied to central counterparties and central securities depositories.
  • The government expects to implement the change through amendments to the Financial Services and Markets Bill, with the Bank reporting annually to Parliament on progress against the objective.

The mandate changes how payment innovation enters supervisory decision making at the central bank. Stablecoin and payment infrastructure proposals will still have to satisfy financial stability requirements, but innovation becomes an explicit secondary consideration rather than an external policy goal. The practical test is how that mandate affects approvals, infrastructure design and competition as new payment models reach systemic scale.

CSA And CIRO Clarify Sports Event Contract Treatment

August 27, 2026, Canada
  • The Canadian Securities Administrators said event contracts based on sports and entertainment activities or outcomes should not be regulated under securities and derivatives legislation.
  • CIRO said it does not consider it appropriate to facilitate or approve dealer applications to trade those contracts. The regulatory status of other event-contract categories remains under assessment.
  • Two CIRO dealers are currently authorized to facilitate trading in a limited set of event contracts under conditions developed with the CSA.

The notice separates sports and entertainment products from the limited event contracts already available through Canadian investment dealers. NCFA’s event contract infrastructure brief tracks the dealer controls, surveillance, settlement and product-classification requirements connected to permitted contracts.

OCC And FDIC Standardize Bank Supervisory Findings

August 27, 2026, United States
  • The OCC and FDIC issued a final rule establishing a uniform definition of an unsafe or unsound practice for enforcement actions under 12 U.S.C. § 1818 and related supervisory work.
  • The rule establishes common standards for when and how examiners issue Matters Requiring Attention and communicate supervisory observations and legal violations.
  • The agencies said examiners should prioritize material financial risks over policy, process, documentation and other nonfinancial concerns. The rule applies only to institutions supervised by the OCC or FDIC.

The final rule directs supervisory attention toward material financial risk and compliance with banking law. It also requires the agencies to tailor unsafe-or-unsound findings and MRA treatment to institution-specific risk factors. The rule does not apply to institutions outside OCC or FDIC supervision.

UK Plans Bank Of England Payments Innovation Objective

August 27, 2026, United Kingdom
  • The UK government intends to give the Bank of England a secondary objective to support innovation in payment systems and emerging forms of digital money.
  • Financial stability will remain the Bank's primary objective. The new duty will not require support for innovation that would undermine stability.
  • The duty will apply to systemic payment systems, including systems using digital settlement assets such as stablecoins.
  • The Bank will report annually to Parliament. The government expects to add the change to the Financial Services and Markets Bill.

Payment firms and stablecoin providers will gain a formal innovation consideration within Bank of England supervision, but no automatic approval or lighter standard. Product teams will still need to prove that new payment models protect stability, resilience and users.

Meta Agrees To Up To US$17.1 Billion Settlement With Teen Platform Controls

August 26, 2026, United States
  • Meta agreed to pay up to US$17.1 billion to resolve state law and Children’s Online Privacy Protection Act claims brought by state attorneys general. The principal settlement remains subject to court approval.
  • The proposed controls would limit users under 18 to two hours per day across Facebook and Instagram, restrict access between midnight and 6 a.m. and curtail notifications at night and during school hours.
  • Meta would strengthen age assurance measures and give young users the option of a chronological, non-algorithmic feed. Parents using its supervision tools could make that feed the default.

The proposed consent judgment gives algorithm design liability a concrete control framework built around age assurance, usage restrictions and parental permissions. Fintech teams offering youth accounts, gamified investing or automated recommendations can compare their controls with these requirements while the court reviews the agreement.

Thailand Consults on Crypto ETFs and Foreign Custody

August 24, 2026, Thailand
  • Thailand's Securities and Exchange Commission opened consultation on draft rules for establishing and supervising crypto exchange traded funds in the domestic market.
  • The consultation also proposes revised qualification requirements for foreign digital asset custodians serving mutual funds and private funds that invest in digital assets.
  • The proposals are intended to expand investor choice, support new capital market products and establish more consistent standards for offshore custody of fund owned digital assets.

Thailand is working on both sides of institutional crypto access at once: the investment product investors can buy and the custody arrangements funds can use behind it. That puts product approval, offshore asset safeguarding and institutional distribution inside the same regulatory design problem rather than treating crypto ETFs as a listing question alone.

Weekly Close

Control of the rails, data, distribution and risk is becoming more valuable. Capital is concentrating around firms that can prove scale and economics, while banks and infrastructure providers invest directly in tokenized settlement, real-time funding, AI and fraud controls. The opportunity remains large, but owning a critical part of how money moves is becoming more valuable than adding another product.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Meta’s $17.1B Settlement Targets Teen Engagement Features

August 26, 2026 | NCFA Insight | Regulation And Policy, Artificial Intelligence And Data, Risk Compliance And Regtech, Competition And Market Structure

AI Image – Teen girl scrolling social media on smartphone

Time limits, age checks and feed controls for teen users

On August 26, 2026, U.S. attorneys general announced a settlement with Meta worth up to US$17.1 billion over allegations that Facebook and Instagram were designed to keep children and teens engaged despite risks to their health and well-being. If the court approves the agreement, Meta also has to limit how long minors can use its apps, restrict overnight access and school-hour notifications, strengthen age checks and give families more control over what young users see.

Meta isn't required to admit it did anything wrong under the settlement. It does expect to record an approximately US$10 billion legal expense in Q3 2026. Governments aren't only extracting billions from Meta. They're putting enforceable limits on features that help determine how often young people open Facebook and Instagram, how long they stay and what keeps them scrolling.

Meta Has to Change How It Competes for Teen Attention

Users under 18 will start with a combined two-hour daily limit across Facebook and Instagram. Parents can approve more time, but teens can't simply turn the limit off themselves. Meta also has to block most access from midnight to 6 a.m. by default and mute most notifications during school hours.

The agreement goes deeper. Teens get regular break prompts and more control over personalized feeds, autoplay and visible like counts. Meta also has to strengthen age assurance, identify children under 13, improve parental controls and maintain protections against harmful content and unwanted adult contact.

Recommendations, notifications, autoplay and frictionless consumption help technology companies turn attention into usage, retention and advertising revenue. That's why the settlement is strategically important. A feature can be commercially valuable for years and still become expensive if evidence eventually shows that the same behaviour driving engagement is contributing to harm.

NCFA's Algorithms Go On Trial As AI Scales Across Society unveiled the lawsuits challenging recommendation systems, infinite scroll, autoplay and notifications as deliberate product choices rather than simply arguing about what users post. Those cases have now produced jury findings, large financial awards and operating restrictions. The debate over addictive design is becoming much harder for boards to leave with legal counsel or the product team.

US$17.1 Billion Changes the Boardroom Math

Meta can afford the settlement though. The company earned enough to absorb an approximately US$10 billion quarterly legal charge without changing the financial guidance it gave investors in July. Markets also reacted positively after the settlement was announced, reflecting relief that Meta avoided the potentially larger uncertainty of continuing the federal trial.

That is precisely why boards should study what happened.

Years of complaints, research, lawsuits and internal evidence accumulated around the same basic concern: were Facebook and Instagram using product features to keep children engaged in ways that could harm them? The exposure grew from a difficult policy issue into jury verdicts, court-ordered controls and now one of the largest state settlements ever reached with a single company.

August coverage of the New Mexico Meta ruling showed how quickly the consequences were already expanding. That case combined a US$375 million jury award with a further US$567 million abatement fund and requirements affecting teen usage, notifications, age assurance, adult contact and AI chatbot interactions involving minors.

If management keeps getting signals that a profitable feature may be harming young users and keeps pushing it anyway, the issue eventually belongs with the board. Investors should know when those warnings reach directors, what they’re told and who can decide that the revenue is no longer worth the risk.

Meta Wants Its Biggest Rivals Playing by the Same Rules

Meta also negotiated an unusually strategic feature into the settlement.

Its own disclosure describes an approximately US$18 billion payment structure over ten years. About US$12.7 billion is allocated to participating states regardless of what competitors do. Roughly US$5.3 billion is released only if both TikTok and YouTube adopt specified teen protections and make matching payments.

That gives Meta billions of reasons to bring its competitors along.

See: Meta AI Rules Trigger Calls for Stricter Oversight

Commercially, the logic makes sense given the amount of competition. If Facebook and Instagram restrict teen usage while TikTok and YouTube remain more permissive, users and coveted 'attention' can migrate to competing apps. Meta bears the cost while rivals gain more opportunity to capture the hours, content consumption and advertising inventory Meta gives up.

The terms get tougher if TikTok and YouTube participate. Meta's daily limit falls from two hours across Facebook and Instagram to one hour per app, while its nighttime block expands from midnight to 6 a.m. to 10 p.m. through 7 a.m.

So Meta isn't simply asking competitors to copy its safety policies. It is trying to prevent child-safety rules from becoming a competitive handicap carried mainly by Facebook and Instagram.

TikTok and YouTube haven't agreed to the framework. Until they do, Meta could still end up operating under restrictions its largest rivals don't share.

AI Image – Parent discussing smartphone use and online safety with teenage son

Years of Child Safety Warnings Are Becoming Operating Rules

Concern about how digital products affect children has been building for years. In 2023, NCFA analyzed Canadian research into children's privacy and consent that called for stronger safeguards to be built into digital products from the start. Children don't assess consent, persuasive design or data collection the way adults do, yet personalization and recommendation systems routinely influence what they watch, read and do next.

Meta's settlement gives those concerns a much larger financial consequence. Governments are no longer relying only on warnings or disclosure requirements. They are specifying age checks, usage limits, notification controls, parental oversight and independent monitoring.

Once those requirements appear in a multibillion-dollar agreement, other platforms know what regulators may ask for next. The settlement doesn't create legal precedent, but it gives attorneys general a detailed set of measures they can use in future negotiations and enforcement.

AI Raises the Stakes for Youth Safety

AI companions and conversational assistants can respond personally, remember context and keep conversations going. Research into youth use of AI reported that 72% of teens had tried AI companions and examined evidence of young people using generative AI for emotional and mental health support.

AI can change the type of exposure a child experiences. A recommendation feed influences what a young person sees next. An AI system can respond directly, adapt to the conversation and encourage the user to keep engaging.

For companies serving children or vulnerable users, it's even more important to know what the system is encouraging, where harmful patterns are appearing and who can change the product when the interaction becomes uncomfortable.

See: California Jury Opens a New Liability Lane for Addictive Platform Design

The same principle can be seen in fintech where younger customers use digital wallets, investing apps, financial education tools and AI assistants. Meta's settlement rules don't apply to those products. The relevant lesson is that companies need to understand how their own systems influence behaviour before a regulator or court does it for them.

Meta's US$17.1 billion settlement shows how expensive the problem can become when concerns about engagement, harm and product design build for years without a convincing response.

Talking Point

When a company knows a profitable engagement feature may be harming young users, who should have the authority to decide when growth has gone too far?


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Fobi Launches Continuous Digital Identity Verification

August 25, 2026 | NCFA Insight | Digital Identity And Trust, Cybersecurity Fraud And Financial Crime, Risk Compliance And Regtech

AI Image – Continuous digital identity verification infographic showing identity checks, location verification, AI agent controls and secure payments

Continuous Authentication And AI Agent Authorization

On August 25, 2026, Vancouver based Fobi AI launched Fobi AltID 3.0, expanding its digital identity technology beyond credential verification. Fobi says the new platform can continuously authenticate a verified person, confirm authorization and use satellite positioning to add location and time to the decision. Financial services and customer identity checks are among its intended uses.

The existing Fobi digital identity wallet focuses on proving identity or age while limiting how much personal information needs to be shared. The new proposition goes further. Once someone has been verified, Fobi wants the credential to keep helping organizations decide whether the right person is still present and allowed to complete an action.

That addresses a real financial control problem. Verifying someone when an account is opened does not prove that the same person still controls a session months later, approved a particular payment or gave software permission to act for them. The gap gets wider as financial services automate more activity.

The launch names financial services as a target market but doesn't identify a bank, credit union, payment company or financial pilot. It also doesn't explain how an AI agent would be given, restricted or stripped of authority. Those are important boundaries between the product Fobi has launched and the larger trust infrastructure it wants to build.

Continuous Authentication Extends Trust Beyond Onboarding

This approach already has support in established digital identity practice. NIST continuous authentication guidance allows organizations to monitor characteristics such as behaviour, device information, location, timing and network activity after a user has logged in. Suspicious changes can trigger another identity check or end the session.

For financial firms, that can add protection without repeatedly asking customers to upload identity documents. An account can remain usable while the service watches for changes that make the current activity look less like the person who was originally authenticated.

Fobi adds location to that decision. The company says satellite positioning can connect a verified person with where and when an interaction occurs. Location can strengthen a risk decision, but Fobi has not disclosed the positioning technology, accuracy or protections against false location data. NIST also treats geolocation as one piece of a wider risk assessment rather than proof of identity on its own.

More monitoring also creates more privacy responsibility. Behaviour, devices and location can all reveal sensitive information. NIST requires those uses to be included in privacy risk assessments. Fobi says the personal information used for the original verification can be removed from the ongoing process, but further disclosure is needed to show what the platform continues to observe and retain.

Canada is dealing with the same combination of identity, consent and security as financial data becomes easier to share. The proposed Canada Open Banking and Consumer Driven Banking Rules bring authentication, consumer permission, security and evidence of authorization into the same operating framework. Persistent digital identity becomes more useful when those controls have to work after onboarding rather than only at the beginning of the relationship.

AI Agents Make Authorization A Bigger Financial Problem

AI agents make the distinction between identity and authority easier to see. A bank may know who owns an account and still need to know whether software has permission to spend $500, change an instruction or continue acting tomorrow. AI agents with wallet access increases the urgency of defining what software can do, for how long and on whose authority.

Payment networks are already building controls around that problem. The Visa Trusted Agent Protocol lets merchants verify that an AI agent is legitimate and has permission to act for a customer. Visa's specifications also allow merchants to limit an agent to a specific purpose, such as browsing or making a payment.

Mastercard Verifiable Intent, developed with Google, records what a person authorized before an AI agent acts. Mastercard is designing it to work across wallets, platforms, payment networks and different agent systems.

The same convergence appears in the FCA Emerging Technology Horizon Scan 2026, where digital identity, AI agents, consumer control and programmable finance intersect. For fintechs, the opportunity goes beyond proving who somebody is toward proving what a person or piece of software is allowed to do.

Open digital credentials could make those permissions easier to carry between services. The W3C digital credential standard provides a common way to issue and verify secure, privacy respecting credentials. Fobi has not disclosed whether its new platform supports that standard or another open identity framework. Interoperability is necessary if the technology is expected to work across banks, fintechs, payment networks and other organizations rather than mainly inside Fobi's own products.

Fobi is also positioning post quantum security as part of the platform. Financial firms are already preparing for post quantum cryptography as new security standards replace encryption that future quantum computers could threaten. Fobi has not identified which algorithms or standards it uses, or provided independent technical validation. For now, quantum readiness remains a product claim that still needs evidence rather than the main reason to assess the launch.

The more immediate opportunity is digital trust. Identity can establish the person. Ongoing authentication can flag when something changes. Authorization can control what a person or AI agent is allowed to do. Those capabilities also connect digital identity, cybersecurity and automated finance across the Financial Innovation Map.

Fobi now has to prove that its technology can join those pieces in practice. A financial institution deployment, support for open credentials or documented controls for delegated authority would make the case much stronger. Until then, the launch is a credible expansion of Fobi's digital identity technology into a financial problem that is becoming harder as software gains more authority.

Talking Point

As AI agents gain access to payments, financial accounts and digital credentials, will proving identity once be enough, or will financial services need to keep verifying who is in control and exactly what they are allowed to do?


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

NCFA Weekly Fintech Intelligence Aug 15-21, 2026

Aug 15, 2026 | NCFA Fintech Whisperer | Cybersecurity Fraud And Financial Crime, Capital Markets Infrastructure And Funding, Wealthtech Investing And Trading, Digital Assets Blockchain And Tokenization, Cross Border Payments And FX, Regulation And Policy, Insurance And Insurtech, Treasury Liquidity And Cash Management, Artificial Intelligence And Data, SME Finance And Business Banking, Risk Compliance And Regtech

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-24, 2026, July 25-July 31 2026, August 1-August 7, 2026, August 8-August 14, 2026).

Weekly Fintech Market Intelligence Aug 15 - 21, 2026

Regulation And Policy

OCC Says 23 Of 40 New Bank Charter Applications Involve Digital Assets

August 19, 2026, United States
  • Comptroller Jonathan Gould said the OCC received 40 applications for new bank charters during roughly the previous 18 months, with 23 business plans involving some form of digital asset activity.
  • Gould said payment stablecoins are becoming an ordinary part of the prospective charter pipeline as applicants integrate digital assets into regulated banking models.
  • The OCC is also implementing its responsibilities under the GENIUS Act and expects to issue a final payment stablecoin rule by November.

The numbers show digital assets becoming part of bank formation rather than remaining mainly an activity added to established institutions. More than half of the OCC's recent charter applications include digital asset activity, extending the same infrastructure-ownership question behind Ripple's U.S. bank charter application across a much larger applicant pool. These are applications, not approved banks, but the pipeline shows how many digital asset firms are trying to bring licensing, custody, payments and stablecoin activity inside regulated banking structures.

MAS Introduces New Measures To Strengthen Singapore's Asset Management Hub

August 19, 2026, Singapore
  • The Monetary Authority of Singapore introduced a package of measures intended to strengthen Singapore's competitiveness as an international asset-management centre.
  • The package includes a proposed tax exemption for qualifying profit-related returns earned by fund-management professionals and a MAS investment programme focused on hedge-fund managers operating in Singapore.
  • Singapore will also introduce an Investment Management Track under the Overseas Networks & Expertise Pass to support recruitment of experienced investment-management professionals.

Singapore is combining tax policy, institutional capital and immigration settings to compete for asset managers and investment talent. The package goes beyond licensing or regulatory simplification by addressing where firms locate teams, where experienced professionals work and whether managers can build enough local scale to anchor investment activity in Singapore. That makes asset-management competitiveness an industrial-policy question as well as a financial-services one.

CSA Reports C$4B Raised Under Expanded Listed Issuer Exemption

August 18, 2026, Canada
  • The Canadian Securities Administrators says hundreds of listed issuers raised almost C$4 billion during the first year after limits under the Listed Issuer Financing Exemption were increased, an eightfold increase in the pace of capital raising compared with the original limits.
  • CSA members issued 763 investor alerts, cautions and warnings during the reporting period, with more than 85% related to crypto assets, and deactivated 11,728 malicious websites representing 19,860 URLs.
  • The CSA says Project Tokenization engaged more than 240 organizations while regulators also continued examining stablecoins, prediction markets and the use of AI in capital markets.

The report provides unusually concrete evidence on both sides of Canada's securities-policy agenda. Regulators are lowering friction in parts of the capital-raising system while expanding technology-enabled fraud disruption and examining new digital market structures. The C$4 billion raised under the expanded exemption strengthens the question of who gets capital as funding channels multiply because it gives regulators measurable evidence that changing financing limits can alter how Canadian public companies access capital.

Bank Of Canada Publishes Nine RPAA Violations

August 18, 2026, Canada
  • The Bank of Canada's August 18 publication of three enforcement notices brought its public Retail Payment Activities Act list to nine payment service providers.
  • Each notice records a section 23 violation for performing retail payment activities without submitting a registration application.
  • The Bank imposed no administrative monetary penalty in the nine published cases. The notices remain public for five years.
  • An internal review maintained the nature of Equals Money's violation and its zero-dollar penalty, while finding that the Act did not authorize replacing the notice with a warning letter.

As NCFA's review of the RPAA notices explains, a zero-dollar penalty still creates a durable public compliance record. Registration checks now belong in partner onboarding, procurement, investor diligence and market-access planning for payment firms serving Canada.

SEC Proposes Crypto Fundraising Rules With US$5M And US$75M Exemptions

August 18, 2026, United States
  • The U.S. Securities and Exchange Commission proposed Regulation Crypto Assets, a tailored securities offering regime for certain investment contracts involving crypto assets.
  • A proposed startup exemption would permit offerings of up to US$5 million during a four-year period, while a fundraising exemption would allow offerings of up to US$75 million during each 12-month period.
  • Issuers would face principles-based disclosure requirements and remain subject to federal antifraud and antimanipulation rules. The proposal also includes a conditional safe harbour addressing when a crypto asset would no longer be treated as subject to an investment contract.

The SEC is moving from defining how securities law applies to crypto toward creating specific capital-raising pathways for the sector. Its March crypto market structure interpretation established a classification and lifecycle framework; Regulation Crypto Assets would add tailored exemptions that qualifying issuers could use to raise capital within it. If adopted, the rules could materially change how early stage crypto ventures fund development, what they must disclose and how token-based fundraising competes with established private-market exemptions.

U.S. Treasury Proposes GENIUS Act Rules For Payment Stablecoins

August 17, 2026, United States
  • The U.S. Treasury issued a proposed rule to implement Section 3 of the GENIUS Act governing the issuance, offering and sale of payment stablecoins in the United States.
  • The proposal defines when an issuer would need an appropriate federal or state GENIUS licence and when a payment stablecoin is considered offered or sold to a person in the United States.
  • Treasury says the Act is expected to take effect January 18, 2027, with additional restrictions beginning July 18, 2028 on digital asset service providers offering payment stablecoins that are not issued by licensed issuers.

The proposal turns the GENIUS Act from legislation into an operating framework for stablecoin issuers and the platforms that distribute their tokens. The definitions of where issuance occurs, which issuers need a licence and when a stablecoin is being offered into the U.S. market will determine how domestic and foreign providers structure access. For exchanges, wallets and payment platforms, compliance will increasingly depend on the regulatory status of the stablecoins they make available, not only on their own licences.

Payments Infrastructure And Money Movement

Helcim Raises C$53M As Payments Volume Approaches C$10B

August 21, 2026, Canada
  • Calgary based Helcim closed a C$53 million Series C led by BDC Capital's Growth Venture Fund, with Curql Collective, Gold House Ventures and existing investors participating.
  • Helcim says it serves more than 22,000 active merchants, has passed C$150 million in annual revenue and expects to process nearly C$10 billion in payments during 2026.
  • The company plans to invest in payment software, hardware and integrations while expanding into vendor payments and tools for managing everyday business finances.

Helcim is using a 22,000 merchant distribution base to extend beyond payment acceptance into more of the financial workflow around small businesses. Vendor payments and business finance could increase revenue per merchant while putting Helcim into closer competition with processors, banks and software platforms that already bundle payments with operating tools. Nearly C$10 billion in expected annual volume gives that expansion enough scale to watch.

Modulr Becomes Direct CHAPS Participant At Bank Of England

August 19, 2026, United Kingdom
  • Modulr became a direct participant in CHAPS and can now settle high value, same day payments directly at the Bank of England.
  • The Bank of England lists Modulr FS Limited among its CHAPS direct participants. Payment obligations between participants settle individually through real time gross settlement on the day they are submitted.
  • With existing direct connections to Faster Payments and Bacs, Modulr is the only UK non-bank payment service provider with direct access to all three major domestic payment schemes.

Direct participation removes an intermediary from Modulr’s CHAPS settlement process and gives it more control over payment routing and liquidity. The development offers a useful comparison with Canada’s expanding non-bank rail access, where membership and system participation determine how much infrastructure control payment providers can obtain.

AlphaPay Completes Motion Pay Integration In Canada

August 19, 2026, Canada
  • Payment Asia Group announced that its Canadian business AlphaPay completed the acquisition and integration of Canadian payment provider Motion Pay.
  • The combination brings Motion Pay's merchant network and operating resources into AlphaPay's platform, which supports international wallets and Canadian payment methods including Interac, Visa and Mastercard.
  • Payment Asia also disclosed a recent Canadian money services business registration as it expands local and cross-border payment services in North America.

The integration gives AlphaPay more Canadian merchant distribution while connecting domestic payment acceptance with Payment Asia's international payment capabilities. The strategic value will depend on whether the combined business can convert that larger merchant footprint into meaningful transaction volume and cross-border activity. The regulatory point also requires precision: Canadian MSBs are registered with FINTRAC, so the company's use of the term "MSB licence" should not be read as a separate banking or payment licence.

Nium Launches Domestic Card Issuance In The United States

August 19, 2026, United States
  • Nium launched domestic U.S. card issuance, extending its issuing platform into North America alongside existing capabilities across APAC, Europe and the Middle East.
  • The company says businesses can combine local U.S. card issuance with its payment infrastructure spanning more than 190 countries through one platform.
  • Nium issued more than 41 million card credentials across APAC, the Middle East and Europe during the previous 12 months, and its U.S. offering includes physical, virtual, single-use and multi-use credentials.

Domestic U.S. issuance gives Nium another local component inside a payment network already built for international use. Businesses operating across regions can reduce the number of separate issuing integrations they maintain while combining card programmes with cross-border payouts. That matters most in sectors such as travel and supplier payments, where one transaction can require several payment methods across multiple countries.

New Zealand Opens National Payments Upgrade Consultation

August 18, 2026, New Zealand
  • The Reserve Bank of New Zealand opened a public consultation on upgrading the country’s retail-payment infrastructure. Responses are due by October 27, 2026.
  • About NZ$2 trillion in retail payments passes between New Zealand bank accounts annually, yet the country remains one of the few developed economies without a real-time retail-payment system.
  • The consultation covers instant 24-hour payments, fraud safeguards, faster cross-border transactions, competition, technology adoption and clearer responsibility for system-wide planning.

New Zealand is still considering the architecture and governance of infrastructure that Canada has placed into approved rules through its Real-Time Rail framework. Payment providers have an early opportunity to address access, fraud responsibilities, interoperability and the role of nonbanks before New Zealand selects its modernization approach.

ECB Brings Offline Digital Euro Into Secure Hardware

August 18, 2026, European Union
  • The European Central Bank opened an expression of interest process to refine the standards needed for offline digital euro functionality.
  • The technical work examines deployment through embedded Secure Elements and embedded SIMs in smartphones, with participation sought from equipment manufacturers, mobile operators, virtual network operators and standards organizations.
  • Selected participants will assess the maturity, industry support and implementation constraints of the proposed standards. Applications are due September 25, ahead of a digital euro pilot planned for the second half of 2027.

Offline capability makes hardware compatibility, mobile operator participation and secure deployment part of payment infrastructure design. The consultation gives payment providers and technology companies a direct route into the standards discussion before the pilot begins.

Treasury Liquidity And Cash Management

Stripe Launches Treasury In Australia For Global Business Money Management

August 19, 2026, Australia
  • Stripe launched Treasury in Australia, allowing businesses to accept payments, hold and convert funds and pay recipients from the same Stripe environment.
  • Businesses can receive and hold AUD, USD, GBP and EUR, convert across 10 supported currencies and use incoming revenue to pay suppliers, contractors and third parties in nearly 100 countries.
  • Stripe also plans to bring Treasury for Platforms to Australia later in 2026, allowing platforms to embed financial accounts for their own customers.

Stripe is reducing the separation between payment acceptance and treasury operations for businesses already using its platform. Revenue can become available for supplier and contractor payments without first being transferred through a separate external banking workflow, while currency conversion stays inside the same system. Treasury for Platforms would extend that model further by letting software platforms distribute account functionality directly to their customers.

Artificial Intelligence And Data

Anchorage Digital Launches Regulated Banking Infrastructure For AI Agents

August 21, 2026, United States
  • Anchorage Digital launched Agentic Banking, institutional infrastructure designed to let organizations fund and control AI agents interacting with financial assets.
  • The platform applies corporate spending policies, Know Your Agent identity standards and real time compliance controls before settlement across stablecoins, fiat rails or tokenized credentials.
  • Anchorage is working with Google Cloud on cloud based key management and transaction infrastructure that combines Google's AI capabilities with Anchorage Digital's regulated custody and settlement services.

Giving an AI agent access to capital requires controls over identity, authority, spending limits, compliance and settlement before the transaction happens. Anchorage is putting those controls inside regulated banking infrastructure, extending the issues already emerging around AI payment consent and liability into institutional treasury and digital asset workflows. Banks, payment firms and fintech platforms now have a clearer benchmark for what controlled agent access to money can look like.

Binance Launches Agent OS For AI Access To Trading And Payments

August 20, 2026, Global
  • Binance launched Agent OS, a standardized developer layer connecting AI applications to its market data, account information, trading, wallet, payment and on-chain infrastructure.
  • Users can assign agents to dedicated subaccounts, configure permissions and revoke access, while supported agents can retrieve market and portfolio information and place trades within those controls.
  • The platform combines Binance APIs, Wallet Agentic Hub, x402 programmable payments, Skill Hub and Model Context Protocol support so developers do not need separate integrations for each financial capability.

Agent OS puts AI applications closer to financial actions rather than limiting them to analysis or recommendations. The important control boundary is between what an external agent decides and what Binance permits it to execute. That connects directly to the growing AI governance and compliance burden around authorization, audit trails, transaction limits and accountability when agents can act on financial infrastructure.

Ant International Expands FalconTST Financial Forecasting Model

August 20, 2026, Global
  • Ant International introduced FalconTST 2.0, the latest version of its time-series foundation model for forecasting financial and operational data.
  • The model is being applied with financial institutions including Barclays, Citi, Deutsche Bank and Standard Chartered across forecasting use cases.
  • Ant International has also made the Falcon 2.0 API available and maintains an open implementation of the FalconTST model family for time-series forecasting.

Financial AI is extending beyond conversational tools into models designed specifically for numerical sequences such as liquidity, transaction flows and other time-dependent financial data. Adoption by global banks gives the model more significance than a research release alone because forecasting accuracy can affect treasury, risk and operating decisions. That also raises the AI compliance burden around model validation, data quality, oversight and evidence when specialist models influence financial decisions.

Sun Life Reports Advisor AI Use Across More Than 11,000 Client Conversations

August 19, 2026, Canada
  • Sun Life says its generative AI Notes Assistant can summarize client meetings, compile action items and draft follow-up emails, saving advisors an estimated 15 to 30 minutes per client session.
  • An AI powered advisor concierge launched in July has already been used in more than 11,000 client conversations to help advisors retrieve information on products, policies and processes.
  • Sun Life says the tools operate within governance, privacy and security controls while retaining human judgment and accountability in the advisor workflow.

The useful evidence is adoption inside a real advisory workflow rather than another AI pilot announcement. More than 11,000 client conversations and measurable administrative time savings show where AI governance for Canadian financial advisors is becoming operational: meeting records, follow-up communications and internal information retrieval. As these tools become routine, firms need controls that keep advisor responsibility intact while still capturing the productivity benefit.

Stripe Agrees To Acquire OpenRouter As AI Infrastructure Expands

August 19, 2026, United States / Global
  • Stripe agreed to acquire OpenRouter, an AI model gateway that routes and optimizes token usage across more than 400 models from over 80 providers.
  • OpenRouter evaluates requests based on factors including task complexity, price, speed and reliability and is used by companies including NVIDIA, Zoom and Lovable.
  • Stripe says the acquisition will combine model-routing optimization with infrastructure it already provides for payments, billing and AI token economics.

Stripe is extending beyond the financial transaction layer into the infrastructure that determines which AI model handles a request and at what cost. That builds on Stripe's expanding infrastructure stack across payments, billing and financial operations. OpenRouter gives Stripe a position in both revenue collection and one of the largest variable costs facing AI companies: model and compute usage.

AWS Launches AgentCore Payments For Autonomous AI Transactions

August 18, 2026, Global
  • AWS made Amazon Bedrock AgentCore payments generally available, allowing AI agents to discover, access and pay for paid APIs, MCP services and content in production environments.
  • The service integrates with Coinbase and Stripe Privy wallets, supports x402 and the Machine Payment Protocol and can enforce configurable spending limits at the infrastructure layer.
  • AgentCore provides payment-session budgets, expiry controls, audit trails and transaction observability intended to limit and monitor autonomous agent spending.

Giving an AI agent permission to transact creates a different control problem from giving it permission to retrieve information or call software tools. AgentCore places deterministic spending limits and transaction records around an otherwise non-deterministic agent, separating the agent's decision process from the infrastructure that authorizes payment. That control layer is becoming central to whether autonomous financial activity can be deployed at production scale.

Wealthtech Investing And Trading

Kraken Launches U.S. Stock Trading Across The EEA

August 18, 2026, European Economic Area
  • Kraken launched access to more than 7,000 U.S. listed stocks for eligible customers across the EEA under its MiFID II authorization.
  • Traditional shares can now sit alongside more than 600 crypto assets and 700+ xStocks inside Kraken's regulated multi asset environment, without customers moving capital between separate platforms.
  • The conventional stocks and xStocks remain legally different products. The stock service is provided through Payward Europe Digital Solutions (CY) Limited, while xStocks are separately issued tokenized products backed by underlying shares.

Kraken is extending a crypto distribution platform into conventional brokerage while keeping tokenized equities available beside traditional shares. That gives customers two different ownership and market-access structures inside one interface and puts more competitive pressure on brokers that still separate securities, crypto and tokenized products across different accounts.

Capital Markets Infrastructure And Funding

CFTC Proposes More Flexible Execution Rules For Permitted Swaps

August 20, 2026, United States
  • The Commodity Futures Trading Commission proposed removing the requirement that swap execution facilities maintain an order book for transactions classified as permitted transactions.
  • The proposal would allow SEFs greater flexibility in deciding which execution methods they make available for swaps that are not subject to the mandatory trade-execution requirement.
  • The change would preserve the separate execution framework for required transactions while reducing a prescriptive platform requirement for the permitted category.

The proposal addresses how much trading functionality regulators should require when a swap does not have to trade through a prescribed execution method in the first place. Removing the order-book requirement could lower operating complexity for SEFs and give participants more choice in how less standardized or less liquid transactions are executed. The regulatory tradeoff is whether greater flexibility improves market efficiency without weakening transparency or competitive access.

Natural Adds Up To US$100M For AI Agent Payments

August 19, 2026, United States
  • Natural raised a credit facility of up to US$100 million from Upper90, adding to more than US$40 million in equity financing.
  • The facility gives Natural additional capital capacity for its payment and credit products as payment volume and deployed credit increase.
  • Natural identifies itself as a financial technology company. Wallet Account and banking services are provided by Column N.A., Member FDIC.

Natural says payment infrastructure at scale requires capital because funds can be advanced before cash settles. The Upper90 facility adds dedicated financing capacity to the software and payment products Natural is building for AI agents. It complements AI agent spending controls emerging elsewhere in the stack, where transaction limits, authorization records and auditability govern automated payments.

CFTC Seeks Input On Derivatives Markets For AI Compute

August 19, 2026, United States
  • The Commodity Futures Trading Commission requested public input on potential derivatives markets tied to computing capacity used by artificial intelligence and other high-performance workloads.
  • The review covers issues including market liquidity, price formation, manipulation, customer protection and how compute derivatives could be structured and traded.
  • The CFTC is also examining perpetual or other futures-style products that could allow companies and investors to manage exposure to changing compute costs.

Compute is starting to behave like a financial input rather than only a technology expense. Secondary markets are already emerging around scarce AI capacity, with market participants looking for better price discovery, liquidity and ways to manage infrastructure cost risk. Derivatives would take that development further by allowing firms to hedge future compute costs and availability, bringing market structure, manipulation and customer-protection questions directly into AI infrastructure.

ESMA Proposes Reporting Framework For Third Country CCP Clearing

August 18, 2026, European Union
  • ESMA opened consultation on technical standards for annual reporting by EU clearing members and clients on activity conducted through recognised third country central counterparties under EMIR Article 7d.
  • The proposed reporting includes instrument types, average annual cleared values by EU currency and asset class, margins, default-fund contributions and the largest payment obligation.
  • ESMA is trying to reuse information already available through existing EU reporting regimes and limit duplicate requirements, with comments due October 12, 2026.

The consultation exposes a tension inside post trade regulation: supervisors want better visibility into EU dependence on non-EU clearing infrastructure, but much of the relevant transaction information is already reported elsewhere. ESMA's design work therefore centres on identifying genuine data gaps rather than creating another parallel reporting system. The final technical standards will determine how much additional operational burden clearing firms face for that added visibility.

India Proposes Regulated GPU Leasing Through GIFT IFSC

August 18, 2026, India
  • IFSCA opened a consultation on specifying operating leases and hybrid operating and financial leases of GPUs and connected data-centre equipment as a financial product.
  • The proposed scope includes accelerated processors, AI servers, storage, networking, interconnect and power equipment needed to operate integrated computing clusters.
  • Financial institutions in GIFT IFSC could hold the equipment directly or use lease-in, lease-out arrangements. The proposal remains subject to consultation, subsequent notification and inclusion in the IFSC leasing framework.

A regulated leasing route would let AI operators finance compute capacity over time while giving GIFT IFSC a position in the capital layer beneath AI deployment. The proposal addresses the AI infrastructure costs that are becoming a material constraint on production use.

Alpaca Registers As Futures Commission Merchant For Prediction Markets

August 17, 2026, United States
  • Alpaca Derivatives LLC has registered with the CFTC as a futures commission merchant and is an NFA member as Alpaca prepares to add prediction markets to its infrastructure platform.
  • The company plans to let fintechs and financial platforms embed access to event contracts alongside other investment products through Alpaca infrastructure.
  • Alpaca Derivatives has not yet begun regulated FCM business operations, so the registration establishes the regulatory structure for a future launch rather than live customer access today.

Prediction markets are moving closer to the brokerage infrastructure already used to distribute financial products through fintech apps. That strengthens the innovation opportunity in regulated event contract infrastructure, where distribution, compliance, market integrity and settlement become as important as the contracts themselves. Alpaca's next proof point is whether partners actually embed the product once regulated operations begin.

Digital Assets Blockchain And Tokenization

Blockchain.com Enters Nigeria SEC Regulatory Incubation Programme

August 18, 2026, Nigeria
  • Blockchain.com was admitted to the Nigerian Securities and Exchange Commission's Accelerated Regulatory Incubation Programme after satisfying the programme's initial participation requirements.
  • The company is authorized to operate within ARIP's defined sandbox scope while remaining subject to testing, compliance obligations and regulatory conditions set by the SEC.
  • ARIP gives Blockchain.com a supervised route to develop its Nigerian presence while the SEC evaluates digital asset business models, investor safeguards and anti money laundering controls.

The significance is regulated market access rather than a full crypto licence. Nigeria is using supervised incubation to bring international digital asset firms inside its regulatory perimeter while retaining control over permitted activities and operating conditions. For Blockchain.com, that creates a formal route into a large African digital finance market without treating sandbox admission as unrestricted authorization.

China Adds Eight Banks To The e-CNY Operating Network

August 17, 2026, China
  • China added eight commercial banks to the e-CNY operating network, increasing the number of participating operators from 22 to 30.
  • The newly added banks will begin providing digital yuan services after completing the required operational and technical preparations.
  • The expansion follows an earlier 2026 increase from 10 to 22 operators, extending the institutional distribution network behind China's central bank digital currency.

Adding more operating banks widens the distribution infrastructure behind the e-CNY without proving that customer adoption or transaction volumes have increased. The expansion builds on China's earlier digital yuan bank expansion and shows the operating network continuing to grow through established financial institutions rather than remaining concentrated among the original participants.

Cross Border Payments And FX

RoamQR And Pix Go Live For Cross Border QR Payments In Brazil

August 21, 2026, Brazil / Asia
  • Liquid Group and PagBrasil launched Phase 1 of the RoamQR and Pix connection, allowing users of participating Asian banking apps and digital wallets to pay participating Brazilian merchants by scanning existing Pix QR codes.
  • The companies completed commercial agreements, technical integration, certification and operational readiness after announcing the partnership in November 2025, making Brazil RoamQR's first live payment corridor in Latin America.
  • A planned second phase would allow Brazilian Pix users to make QR payments in Singapore and other RoamQR markets, subject to implementation readiness and regulatory approvals.

RoamQR connects international users to Pix without requiring Brazilian merchants to install new hardware or replace the QR infrastructure they already use. Participating wallets also avoid building separate bilateral integrations for each market. That is the interoperability problem highlighted in the cross border payments benchmark: strong domestic rails create more value when networks can connect them across borders without rebuilding the customer and merchant experience.

BOCHK And Ant International Expand Payments Treasury And SME Infrastructure

August 20, 2026, Hong Kong / Southeast Asia
  • Bank of China (Hong Kong) and Ant International formed a strategic partnership covering cross-border payments, real-time corporate liquidity management, AI-enabled treasury services and financial services for SMEs.
  • BOCHK will provide accounts and settlement banking services supporting Alipay+ payments across Southeast Asia, where the Alipay+ ecosystem spans more than 50 mobile payment partners covering over 2 billion user accounts.
  • Ant International's Bettr and BOCHK will explore blockchain and tokenization for real-time cash-flow and investment solutions, while WorldFirst will work with the bank on cross-border fund-management services for SMEs.

The partnership joins several financial layers that are often handled separately: consumer payment settlement, corporate liquidity, foreign exchange, tokenized treasury infrastructure and SME cross-border banking. It also fits Hong Kong's wider push toward tokenized financial infrastructure, where banks are combining regulated balance-sheet access with digital settlement and asset infrastructure rather than treating tokenization as a standalone product experiment.

TerraPay And Deutsche Bank Expand Cross Border Payment Connectivity

August 20, 2026, Global
  • TerraPay and Deutsche Bank announced an expanded relationship connecting TerraPay's cross-border payment infrastructure with Deutsche Bank's correspondent banking capabilities.
  • The arrangement gives TerraPay access to Deutsche Bank payment and foreign exchange services to support settlement across its international payment network.
  • The partnership connects fintech distribution with bank settlement infrastructure as TerraPay continues to provide cross-border payments into bank accounts and mobile wallets across multiple markets.

Cross-border payment platforms can simplify the customer-facing experience, but settlement still depends heavily on regulated banking infrastructure, currency access and correspondent relationships underneath the API. Those dependencies are a central reason faster cross-border payments remain operationally difficult. Deutsche Bank gives TerraPay another institutional layer for moving and settling funds across currencies and jurisdictions, where corridor coverage, liquidity and local network access still determine performance.

Fiserv Connects Merchant Platforms To Thunes Global Payout Network

August 17, 2026, United States / Global
  • Fiserv and Thunes are connecting Fiserv's merchant ecosystem to international payouts through a single integration for ecommerce platforms, marketplaces and other business customers.
  • Thunes says its Direct Global Network reaches 12 billion bank accounts and mobile wallets across more than 140 countries and 90 currencies.
  • The service will support payments to employees, suppliers and other recipients by combining Fiserv's merchant distribution with Thunes' cross border payout infrastructure.

Cross border payment competition is increasingly about how much complexity a platform can remove for the business initiating the payment. A single integration into global payout infrastructure can reduce the need to manage separate banking, wallet and local payment connections market by market. Fiserv now gives Thunes a much larger distribution channel into platforms and marketplaces that already manage business payment flows.

Afriex Details Global Innovations Bank Partnership Behind Cross Border Payments

August 17, 2026, United States / Africa / Global
  • Afriex disclosed details of a Global Innovations Bank partnership that became effective in Q2 2026 and supports sponsor banking and settlement for its cross-border payments infrastructure.
  • The arrangement provides Global USD Account access, expanded banking and regulatory coverage and faster settlement across supported corridors, with additional treasury and foreign exchange capabilities planned.
  • Afriex says its infrastructure processes more than US$600 million annually across more than 35 countries for remittance providers, payroll companies, ecommerce businesses, fintechs, banks and enterprises.

The Aug. 17 trigger is the public disclosure of the operating relationship, not the date the partnership became effective. The substance sits underneath Afriex's payment API: sponsor banking, settlement access and regulatory coverage determine how reliably the platform can connect local payment rails with international money movement. For cross-border fintechs, those banking relationships remain core infrastructure even when customers experience the service through a single API.

Insurance And Insurtech

Munich Re Agrees To Acquire Cyber Insurtech At-Bay For US$575M

August 19, 2026, United States / Germany
  • Munich Re agreed to acquire U.S. cyber-insurtech At-Bay at an enterprise value of US$575 million, with closing expected in the first quarter of 2027 subject to regulatory approvals and other customary conditions.
  • At-Bay had US$278 million in gross written premiums at the end of 2025, employs approximately 280 people and provides insurance and security services to close to 40,000 U.S. businesses.
  • The business will sit under Hartford Steam Boiler within Munich Re Specialty, combining cyber underwriting with continuous monitoring, risk mitigation and security technology.

The acquisition puts insurance capacity, underwriting data and active cyber defence inside the same operating structure. At-Bay already monitors insured risk throughout the policy lifecycle, giving Munich Re a platform that can influence both loss prevention and pricing rather than relying only on claims experience after an incident. That integration could become more important as cyber insurers compete on the quality of the security controls wrapped around coverage.

SME Finance And Business Banking

Boost Launches Integrated Banking Payments And Financing Platform For Malaysian SMEs

August 18, 2026, Malaysia
  • Boost launched Boost SME, a fully digital business banking platform combining accounts, payment acceptance and financing for Malaysian small businesses.
  • Businesses can open an account in as little as five minutes and receive same-day DuitNow QR settlements, including on weekends and Malaysian public holidays.
  • Financing includes Merchant Cash Advance and Boost Bank Biz Loans of up to RM300,000, with approvals advertised as fast as 10 minutes and disbursement as fast as 24 hours after acceptance.

Boost is putting banking, merchant payments and credit inside one operating interface for small businesses rather than distributing them as separate products. Same-day settlement can feed directly into cash management while transaction history can sit closer to financing decisions. For SMEs, the value depends on whether that integration reduces the time between making a sale, receiving usable funds and obtaining working capital when it is needed.

Cybersecurity Fraud And Financial Crime

Capco Finds 36% Of Canadians Faced Attempted Payment Fraud

August 2026, Canada
  • Capco surveyed 1,000 Canadian consumers and found 36% had experienced an attempted payment fraud during the previous two years.
  • Security was identified as an important factor when choosing a financial institution by 60% of respondents, while advanced fraud protection was selected by 46%.
  • Only 33% were very confident their primary financial institution would protect them from payment fraud, while 52% said their institution had not informed them about deepfake payment threats or they could not recall receiving that guidance.

Canada's move toward faster payments compresses the time available to detect scams before money leaves an account. The survey shows that consumers already put security ahead of speed and convenience, while confidence in fraud protection remains uneven. As Real Time Rail testing and access advance, banks and payment providers will need fraud controls that work across identity, accounts and transaction channels rather than relying mainly on intervention after a suspicious payment has been completed.

Hong Kong SFC Tightens Controls Around eDDA Deposits

August 20, 2026, Hong Kong
  • The Securities and Futures Commission issued controls for licensed corporations, virtual-asset service providers and associated entities using simplified electronic Direct Debit Authorisation to receive client deposits.
  • When a payer bank does not confirm an authorization directly with the account owner, the licensed firm initiating the arrangement bears primary responsibility for obtaining proper authorization and may face related indemnity claims.
  • Firms should verify account ownership, consider small-value verification transfers, apply transaction limits or withholding periods, use stronger authentication where appropriate and decline instructions when required checks cannot be completed.
  • Specified warning signs include rapid or unusually large deposits, activity inconsistent with a client’s profile, new wallet addresses added around an eDDA setup and deposits quickly converted into virtual assets for withdrawal.

The circular connects Faster Payment System deposits directly to trading-account and virtual-asset controls. Efficient funding depends on whether firms can verify ownership, stop suspicious instructions and manage the liability attached to simplified authorization.

AUSTRAC Finds Coordinated Mortgage Fraud Across Major Australian Banks

August 19, 2026, Australia
  • AUSTRAC's Fintel Alliance analysed data from 10 major Australian banks and identified potentially hundreds of millions of dollars in suspected fraudulent mortgage loans, with much of the activity linked to properties in Sydney.
  • Operation Claw found recurring use of inflated incomes, misrepresented employment, fabricated business activity and false or misleading documents across multiple lenders.
  • Participating banks have used the intelligence to investigate potentially fraudulent loans, strengthen controls and make referrals, while AUSTRAC has shared relevant names and entities with regulatory and law-enforcement agencies.

The investigation shows why mortgage fraud controls cannot rely only on what one lender can see inside its own book. Repeated brokers, accountants, law firms, documents and funding patterns became more visible when information from multiple banks was analysed together. For lenders, that strengthens the case for shared intelligence and earlier detection before questionable loans are approved and funds become harder to recover.

SafePal Data Breach Exposes Order Details For Nearly 40,000 Customers

August 16, 2026, Global
  • SafePal disclosed unauthorized access to customer order information affecting approximately 39,798 people who placed orders between March 2, 2025 and April 11, 2026.
  • The exposed data included names, email addresses, shipping addresses, phone numbers and purchase details. SafePal says seed phrases, private keys, wallet passwords, payment-card data and access to customer funds were not compromised.
  • SafePal fixed the order-tracking authorization flaw, shortened relevant data retention to 90 days and says it has taken down more than 30 fraudulent websites and phishing links connected with scam activity.

Hardware wallet security now extends beyond protecting private keys. Order records can identify where crypto holders live and what they purchased, creating targeted phishing, impersonation and physical-security risks even when the wallet itself remains secure. That adds a customer-data layer to the self custody security risks already exposed by device and firmware failures.

Risk Compliance And Regtech

APRA Adds Quantum, Platform And Stored Value Risks To Plan

August 20, 2026, Australia
  • APRA published its 2026–27 Corporate Plan, setting priorities for the next four years and a policy and supervision agenda covering the next 12 to 18 months.
  • Supervision will examine resilience to AI-enabled cyber threats, quantum-computing risk and concentrated reliance on common technology platforms and material service providers.
  • APRA also plans to develop a prudential framework for large stored-value facility providers and work with ASIC on implementation guidance, subject to the Australian government completing the relevant reforms.

APRA’s earlier focus on AI risk governance now extends to shared technology dependencies and stored-value infrastructure. Banks, fintech vendors and wallet providers should expect closer scrutiny of resilience, provider concentration and accountability across outsourced systems.

Weekly Close

Like the several past months, this week’s Whisperer shows financial infrastructure becoming more integrated, more programmable and more regulated at the same time. The edge is going to firms that can combine distribution, trusted controls and ownership of the infrastructure underneath payments, AI, digital assets and capital markets without adding friction faster than they add capability.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

How Fintech Is Redefining Employee Health Benefits in Canada

August 21, 2026

AI Image – Professionals meeting in a modern office while reviewing digital employee health benefits and health spending account tools on a tablet and laptop

Employee benefits have undergone a quiet technological transformation. Not long ago, managing a health benefits plan meant paper forms, printed receipts, mailed claims, and significant administrative work for employers and employees. Over time, insurance providers digitized much of the process. Employees could submit claims online, access their coverage through a website, and eventually manage their benefits from a mobile device.

Today, another shift is taking place. The rise of digital financial infrastructure is making it possible for businesses to rethink not only how benefits are administered, but also what type of benefit they provide in the first place. Instead of purchasing a traditional insurance plan and paying recurring premiums to an insurance provider, some businesses are choosing a Health Spending Account, where the employer establishes a healthcare spending budget and employees are reimbursed for eligible expenses. This development is closely connected to the broader evolution of fintech.

From Paper Forms to Digital Benefits

Traditional employee benefits were built around an insurance model. An employer purchased coverage from an insurer, employees received a defined set of benefits, and claims were processed through the insurance provider. For decades, much of the administration surrounding that process was paper-based. Employees might fill out claim forms, collect receipts, submit documentation, and wait for reimbursement.

The internet gradually changed that process. Insurance providers began offering online portals where employees could submit claims electronically, view coverage details, and track reimbursements. Electronic payments replaced cheques, while digital records replaced much of the paperwork that had previously been required to administer a benefits plan.

The underlying insurance product remained largely the same, but the infrastructure surrounding it became digital. This was an important first step in the digitization of employee benefits, but it also raised a bigger question: if technology can digitize the administration of benefits, can it also change the underlying model?

Beyond Digitizing Insurance

Fintech has repeatedly demonstrated that digitizing an existing process is only the beginning. Payments are a good example. Businesses moved from cash and cheques to credit cards, online banking, electronic funds transfers, and automated payments. Accounting moved from desktop software and paper records to cloud-based platforms, while lending increasingly moved online, with applications, underwriting, and funding taking place digitally.

These developments created something more important than convenience: new financial infrastructure. Once the infrastructure exists, businesses can build entirely new products and services on top of it.

See:

The same thing is happening with employee benefits. Modern benefits platforms can connect employers, employees, financial institutions, and payment systems through software. Claims can be submitted digitally, reviewed electronically, and reimbursed through electronic funds transfer. Once these pieces of infrastructure exist, businesses have more options than simply purchasing a traditional insurance product.

Separating the Benefit From the Insurance Product

This is where Health Spending Accounts become particularly interesting from a fintech perspective. A traditional health insurance plan transfers a defined set of healthcare risks to an insurance provider. The employer pays premiums in exchange for coverage according to the terms of the insurance policy.

An HSA takes a different approach. The employer establishes a defined healthcare spending allocation for employees, and employees submit eligible expenses for reimbursement, subject to the rules of the plan. Rather than purchasing an insurance product that provides a predetermined package of coverage, technology can provide the infrastructure needed to administer a defined healthcare budget.

This distinction opens up an entirely different model for employee benefits. The business can establish the amount it wants to make available, while employees have greater flexibility in how they use that benefit within the eligible expense rules.

Why This Wasn't Always Practical

The concept of giving employees a healthcare spending allowance is not new. What has changed is the infrastructure required to administer it efficiently.

Imagine an employer with 20 employees trying to manage an HSA using paper forms and cheques. Every claim would require documentation. Someone would need to review the expense, calculate the reimbursement, record the transaction, update the employee's available balance, and issue payment. The administrative burden could quickly outweigh the benefit of the flexibility.

Digital infrastructure changes that equation. An employee can submit a claim online, upload supporting documentation, and have the claim reviewed through a centralized platform. The employee's available balance can be updated electronically, while approved reimbursements can be sent directly to their bank account. What once required multiple manual steps can now be handled through a single digital workflow.

Payments Infrastructure Is a Key Piece of the Puzzle

The evolution of electronic payments has been particularly important in making this model practical. Electronic funds transfer (EFT), pre-authorized debits (PADs), and other digital payment infrastructure allow money to move between businesses and individuals without paper cheques or manual bank transfers.

For an HSA platform, this infrastructure can operate on both sides of the transaction. When an employee submits an eligible claim, reimbursement can be sent electronically to their bank account. On the employer side, funds can be automatically withdrawn when claims are approved, allowing the business to fund reimbursements without manually paying an invoice for every transaction.

See:  Canada Real-Time Rail Rules And Access Intelligence Guide

The result is a much more automated financial workflow: an employee submits a claim, the claim is reviewed, reimbursement is approved, funds are transferred electronically, and the employer's account is automatically debited. The development of these payment rails is an important part of what makes a digital, claims-based benefits model feasible at scale.

From Fixed Premiums to Usage-Based Benefits

Digital HSA platforms also introduce a different way for businesses to think about benefit costs. With a traditional insurance plan, employers generally pay recurring premiums for coverage, regardless of how much employees ultimately use the plan. An HSA can instead operate on a claims-based model, where the employer establishes a budget but funds are used as eligible claims are submitted.

This can provide small businesses with greater visibility and control over healthcare spending. Rather than paying a fixed premium for a predefined package of coverage, a business can establish how much it is prepared to allocate toward employee healthcare and allow employees to use that allocation for eligible expenses.

This reflects a broader fintech trend toward usage-based financial products. Businesses increasingly expect technology to provide more transparency into where money is going and to reduce the friction involved in moving and managing funds.

Employee Choice Becomes Part of the Product

The digital transformation of benefits is also changing the employee experience. Traditional insurance plans are designed around predefined coverage. An employee may have coverage for certain services but little or no use for others.

An HSA can approach the problem differently. Instead of deciding exactly which healthcare services employees should use, the employer establishes a budget and employees decide how to use that budget among eligible expenses. One employee might use their allocation primarily for dental expenses, while another might have significant vision, physiotherapy, or prescription medication expenses.

This creates a more personalized benefit without requiring the employer to manually manage every reimbursement. The software handles the administrative infrastructure while the employee has greater choice over how to use the benefit.

Fintech Is Changing the Role of the Middleman

This shift reflects a broader pattern across financial technology. Fintech does not always eliminate traditional financial institutions, but it can change where value is created and which parts of a financial transaction require an intermediary.

Digital payment platforms have reduced the need for businesses to rely on traditional payment processes. Online lending platforms have created alternatives to traditional lending channels. Digital investment platforms have reduced some of the friction involved in accessing financial markets.

Similarly, digital benefits infrastructure gives businesses an alternative to relying exclusively on traditional insurance-based employee benefits. The opportunity is not simply to make insurance administration faster. It is to allow businesses to choose a fundamentally different way of delivering healthcare benefits.

This is an important distinction. The innovation is not necessarily that an insurance product has become easier to use online. It is that the availability of digital claims administration and payment infrastructure makes it possible for a business to consider a different financial model altogether.

The Opportunity for Small Businesses

This evolution is particularly relevant to small businesses. Large companies have traditionally had access to dedicated benefits teams, negotiated insurance plans, and significant administrative resources. A five-person business typically does not have those resources.

Digital platforms can make sophisticated financial and benefits infrastructure accessible to businesses that previously would not have had the resources or administrative capacity to manage it themselves. A small business can establish a defined benefit budget, provide employees with access to a digital claims platform, and use electronic payments without building the infrastructure internally.

That can change the competitive landscape. A small business may not be able to compete with a large corporation on salary alone, but it can potentially offer a flexible digital health benefit that employees can use according to their individual needs. Technology effectively lowers the administrative barrier to offering that benefit.

The Next Stage of Digital Benefits

The evolution of employee benefits follows a familiar fintech pattern. First, the paper process was digitized. Then the user experience moved online. Now the underlying financial model itself is being reconsidered.

Health Spending Accounts are one example of what becomes possible when digital claims administration, cloud software, automated payments, and electronic banking infrastructure come together. For businesses considering this approach, understanding how Health Spending Accounts work is an important step in evaluating whether a digital, claims-based benefit model makes sense for their workforce.

The important development is not simply that employees can submit a claim from their phone instead of filling out a form. It is that technology has made it possible to rethink the relationship between employers, employees, insurers, and healthcare spending altogether.

As fintech continues to develop, more financial products may follow the same path: from paper, to digital, to fundamentally different. Employee benefits may be one of the clearest examples of that transition already underway.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

FINRA Cybersecurity Practices For Member Firms

August 19, 2026 | NCFA Resource | Cybersecurity And Fraud, Risk Compliance And Regtech, Capital Markets And Market Infrastructure

NCFA Resource – FINRA Cybersecurity Practices For Member Firms

12 Controls For Cyber Risk, Vendors, Access And Recovery

In August 2026, the Financial Industry Regulatory Authority published Cybersecurity Effective Practices, a 12-part framework for FINRA member firms reviewing cybersecurity programs, controls and operating procedures. A firm can use the resource as a structured checklist for who owns cybersecurity, which systems and vendors create risk, who can access sensitive data, how threats are detected, and whether the business can recover when systems fail. FINRA designed the practices to scale with firm size, business model, technology complexity and risk profile.

What It Does In Practice

FINRA organizes the resource around 12 areas:

  1. governance
  2. risk management
  3. third party risk management
  4. asset management
  5. access control and identity management
  6. data protection
  7. security awareness and training
  8. vulnerability and patch management
  9. security monitoring
  10. threat intelligence and information sharing
  11. incident response and reporting
  12. resilience and recovery

The framework starts with accountability and risk ownership. FINRA recommends a designated cybersecurity lead, regular reporting to senior decision makers, documented policies and periodic reviews, while also making cyber risk part of decisions about new technology, systems and operating changes. From there, firms are expected to identify the information, systems and business functions they depend on, assess threats such as ransomware, insider activity and vendor exposure, test important systems for weaknesses and revisit those risks when technology or operations change.

Third party risk receives detailed treatment. FINRA treats vendors with access to customer information or critical systems as part of the firm’s security perimeter. Firms should know which vendors have access, understand important fourth party relationships and identify which providers support critical operations. Contracts can address audit rights, data handling, breach notification and visibility into subcontractors, while ongoing oversight should include access monitoring and a documented process for removing access and handling customer information when a relationship ends.

That concern extends beyond US broker dealers. Weak access control governance can expose sensitive information when a partner or service provider retains permissions that are unnecessary or poorly monitored. FINRA’s guidance connects vendor governance with the practical question of who can access systems and data, for how long, and under what controls.

Asset management and access control fit naturally together. FINRA recommends keeping a current inventory of hardware, software, cloud services and data flows, assigning owners to important assets and identifying systems that no longer receive security updates. Once firms know what they have, they can control who gets access through unique credentials, role based permissions, multifactor authentication, periodic entitlement reviews, segregation of duties and least privilege. Access should also be changed or removed promptly when employees change roles or leave.

Data protection, training and patching cover another part of the operating picture. Firms are encouraged to classify sensitive data, encrypt it at rest and in transit where feasible, control retention and protect backups, including with immutable or air gapped storage. FINRA also recommends ongoing employee training, role specific instruction for staff with sensitive access and phishing simulations backed by records of participation. Vulnerability management should include regular scanning, risk based patch priorities and verification that remediation work was completed rather than assumed.

Who Gets Value

The primary users are FINRA member broker dealers, including compliance teams, cybersecurity leaders, technology teams, operations executives and senior management. Smaller firms can use the 12 areas to identify where basic controls are missing without trying to copy the cybersecurity program of a much larger institution, while larger firms can use the same structure to review whether responsibilities, documentation and technical controls are working together.

Technology providers, managed security firms, consultants and RegTech companies serving broker dealers can also use the resource to understand what clients may expect around access, logging, vendor controls, data handling, patching, incident response and recovery. Boards and senior executives can use it as a governance checklist because FINRA makes cybersecurity ownership, management reporting, resource decisions and documented risk acceptance part of the program rather than leaving cyber risk entirely with the technology team.

Strengths And Limits

The main strength is that FINRA connects governance directly to operating controls. A firm can follow the framework from senior accountability through asset inventories, identity controls, encryption, training, monitoring and recovery testing, which makes the document more useful than a high level cyber policy statement.

Third party risk is also handled with more depth than a basic checklist. Firms are expected to understand vendor dependencies, monitor privileged access, address fourth parties and plan how systems and data will be handled when a provider relationship ends. Security monitoring extends that discipline to unusual access, suspicious data transfers, system changes and privileged accounts, with logs retained long enough to support operations, investigations, forensic work and applicable recordkeeping requirements.

The framework also includes threat intelligence, incident response and recovery. FINRA recommends using relevant threat feeds, updating defenses as attack methods change and participating in trusted information sharing networks. Incident response focuses on how a firm detects, escalates and contains an event, while recovery planning deals with how critical systems and data return to service afterward. Tested backups, tabletop exercises, offline procedures and defined Recovery Point Objectives and Recovery Time Objectives all help firms decide how much data loss and downtime different systems can tolerate.

The main limitation is jurisdiction. FINRA developed the resource for US member firms and connects several practices to US requirements, including SEC Regulations S-P and S-ID, FINRA Rules 3110 and 4370, and Exchange Act recordkeeping rules. The document also doesn't create new legal or regulatory requirements or reinterpret existing ones. For Canadian financial technology and service firms, its best use is as a practical comparison and control review, not as a statement of Canadian regulatory obligations.

Key Resources

FINRA Cybersecurity Effective Practices (12-part cybersecurity control framework)

Cybersecurity Effective Practices PDF (downloadable nine page resource)

Small Firm Cybersecurity Checklist (small firm program checklist last reviewed February 2024)

Core Cybersecurity Threats And Controls (small firm threats and control questions)

FINRA Cybersecurity Resources (cybersecurity tools, guidance and related material)

2026 Cybersecurity And Cyber Enabled Fraud (current threats and effective practices)

Proposed Class Action Targets Equifax Access Controls (access governance and third party permissions)


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

NCFA Weekly Fintech Intelligence Aug 8-14, 2026

Aug 8, 2026 | NCFA Fintech Whisperer | Digital Banking And BaaS, Regulation And Policy, SME Finance And Business Banking, Digital Assets Blockchain And Tokenization, Payments Infrastructure And Money Movement, Capital Markets Infrastructure And Funding, Artificial Intelligence And Data, Wealthtech Investing And Trading, Embedded Finance, Risk Compliance And Regtech, Lending Consumer Credit And BNPL, Cybersecurity Fraud And Financial Crime

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-24, 2026, July 25-July 31 2026, August 1-August 7, 2026).

Weekly Fintech Market Intelligence Aug 8 - 14, 2026

Wealthtech Investing And Trading

Gate Expands Into U.S. Stocks And Tokenized Equities Through Alpaca

August 13, 2026, Global
  • Gate, which Alpaca says serves more than 58 million users, launched access to more than 10,000 U.S. listed stocks and ETFs, eligible IPO allocations and tokenized stocks using Alpaca infrastructure.
  • Alpaca provides the brokerage infrastructure behind the offering and supports custody and settlement of the underlying shares associated with Gate's gStocks tokenized stock product.
  • One day earlier, Crypto.com launched Tokenized Stocks through Alpaca for a platform serving more than 150 million customers, offering economic exposure to 1,500 U.S. stocks and ETFs from US$1, with selected products available around the clock.
  • Crypto.com's products are derivative financial instruments that provide economic exposure rather than ownership of the underlying shares or associated shareholder rights.

Large crypto platforms are starting to look more like multi asset investment distributors, but the infrastructure underneath them is still regulated brokerage, custody and settlement. Alpaca has been building specifically for this role, which NCFA recently examined in its global brokerage platform expansion. The competitive question is who controls that regulated layer as crypto, traditional securities and tokenized products converge inside the same customer interface.

BlackRock Canada Embeds Bitcoin In Diversified ETF

August 10, 2026, Canada
  • BlackRock Canada launched the iShares Equity + Bitcoin ETF Portfolio, or IBQT, on the Toronto Stock Exchange with a strategic allocation of approximately 97% global equities and 3% bitcoin.
  • The fund carries a 0.22% management fee and packages Canadian, U.S., international and emerging market equities with bitcoin exposure inside one portfolio.
  • IBQT currently gets its bitcoin exposure through BlackRock’s Canadian IBIT fund, extending that product from a standalone bitcoin investment into a component of a diversified portfolio.

IBQT changes where the crypto allocation decision happens. Investors choosing the fund are buying a diversified equity portfolio with bitcoin already assigned a modest strategic weight, rather than adding crypto separately. That puts bitcoin closer to conventional portfolio construction and gives Canadian advisers and investors a simple way to combine traditional markets and digital assets in one listed product.

Payments Infrastructure And Money Movement

Flywire And Trustly Bring Pay By Bank To Canada

August 12, 2026, Canada / United States
  • Flywire expanded its Trustly partnership into Canada and the United States, letting payers authorize large domestic and cross border payments directly from their bank accounts.
  • In Canada, the payment itself runs through Pre Authorized Debit. Trustly adds bank authentication and account connectivity around that existing rail rather than using Canada’s future regulated payment initiation framework.
  • The service removes manual account entry during checkout and adds payment verification and risk controls around higher value bank transfers.

Pay by Bank is reaching Canadian customers before regulated payment initiation does. Foreign providers are improving the experience around an existing Canadian bank rail instead of waiting for new infrastructure. That makes the commercial timing important for Canada’s open banking opportunity: future regulated access will enter a market where some of the customer experience is already being built.

Dream Payments Launches Programmable U.S. Payout Network

August 11, 2026, Canada / United States
  • Toronto based Dream Payments launched Dream Payouts for eligible U.S. businesses in collaboration with J.P. Morgan Payments, supporting payments to suppliers, partners and individuals.
  • Eligible payments can arrive through the RTP network in under 30 seconds, including nights, weekends and holidays, with ACH and wire available when instant delivery is unavailable or not selected.
  • Software platforms can embed payout capabilities, while Dream provides recipient onboarding, identity checks, banking verification, approval controls and transaction tracking from initiation through settlement.
  • Dream says the infrastructure can support software and AI agents that initiate, approve and reconcile payments within defined business controls.

Dream is taking infrastructure built by a Canadian fintech into U.S. business payment workflows where the payment can start inside the software that created the obligation. That also gives agent payment infrastructure a more concrete operating model: software can participate in the workflow, but identity, authority, approval and settlement controls still determine whether money moves.

Francisco Partners To Acquire Moneris For C$2 Billion

August 10, 2026, Canada
  • Francisco Partners agreed to acquire Moneris from RBC and BMO for approximately C$2.0 billion in cash, with each bank receiving half of the proceeds. The transaction remains subject to regulatory approvals and other closing conditions.
  • RBC and BMO will keep exclusive referral relationships with Moneris even as ownership of the payments company transfers to Francisco Partners.
  • Moneris says it has nearly 2,000 employees in Canada and will retain its Canadian headquarters and technology infrastructure after the transaction closes.

Last year’s Moneris sale discussion has become a signed change of control. RBC and BMO are giving up ownership while preserving customer distribution, leaving Francisco Partners to decide how aggressively Moneris invests across merchant acquiring, commerce software and payments technology. The separation between infrastructure ownership and bank distribution is the more consequential part of the deal.

Capital Markets Infrastructure And Funding

Canada Starts Trial Of Government Securities Fail Fee Framework

August 13, 2026, Canada
  • CIMPA and CDS will begin the first stage of Canada's fail fee framework for Government of Canada bond and T-bill transactions on September 8, 2026.
  • The trial will run for at least 18 months. Settlement fails and indicative fees will be calculated, statistics will be published and CDS participants will receive reports and indicative invoices.
  • No fail fees will be charged or paid during this first stage. The Canadian Fixed-Income Forum will decide whether payments are activated later.

Canada is putting a settlement discipline framework into live measurement before imposing a financial penalty. That gives dealers, custodians and market infrastructure providers time to see where fails occur, what the operational burden looks like and whether the fee design changes settlement behaviour. The evidence from the trial will determine whether a reporting framework eventually becomes an economic incentive.

Canada Starts Standardized Government Collateral Trading On CCMS

August 12, 2026, Canada
  • CIMPA, TMX Group and Clearstream have started repo trading using a standardized Government of Canada General Collateral basket on the Canadian Collateral Management Service.
  • CCMS automates repo collateral management and supports unlimited real time collateral substitution, giving participants another way to manage liquidity and collateral throughout a transaction.
  • The first GoC basket is expected to be followed by standardized baskets covering provincial securities, Canada Mortgage Bonds, NHA mortgage backed securities, public sector securities and corporate collateral.

Canada's repo market now has a standardized collateral workflow running on infrastructure that the Bank of Canada also plans to use for its domestic repo operations. Wider adoption would make collateral easier to allocate and substitute across financing activity while reducing manual processing. The next evidence is usage: how much repo activity migrates onto CCMS and whether the additional baskets deepen participation beyond Government of Canada securities.

PointsKash Expands Capital Commitment To Support National Kiosk Rollout

August 12, 2026, United States
  • PointsKash announced an expanded strategic capital commitment of up to US$100 million from Hawk Capital Advisors to support commercialization and national deployment of its financial services platform.
  • The first phase provides for up to US$35 million through October 30, 2026 for priorities including refurbishment and deployment of approximately 2,100 company owned KashPoint kiosks, technology integration, merchant activation, PK Pay development and working capital.
  • A second phase could provide up to another US$65 million between February and April 2027, subject to operating and deployment milestones, customary closing conditions and financing availability.

The financing connects capital directly to deployment of a physical and digital financial services network rather than funding an undefined expansion plan. PointsKash acquired more than 2,100 cryptocurrency kiosks earlier in August and now has a staged capital structure intended to refurbish and redeploy that hardware while building payments, merchant and mobile services around it. The conditional structure also keeps a clear line between near term funding and the larger amount that depends on execution.

CIRO Short Sale Settlement Rule Takes Effect

August 11, 2026, Canada
  • CIRO now requires a Participant or Access Person to have a reasonable expectation that a short sale can settle on the intended settlement date before entering the order.
  • The rule adds a positive control before execution instead of relying only on action after a trade fails to settle.
  • CIRO provides defined exceptions, including certain sales involving securities a person is deemed to own, subject to prescribed delivery conditions.

The rule changes where settlement risk has to be dealt with. Firms must support the expectation of settlement before a short sale reaches the market, putting more responsibility on trading controls, securities availability and supervision. Difficult to borrow securities and repeated settlement failures will show how demanding the requirement becomes in practice.

Artificial Intelligence And Data

RBI Sets Concrete AI Governance Expectations For Banks

August 11, 2026, India
  • Reserve Bank of India Governor Sanjay Malhotra told banks to maintain inventories of material AI systems and establish governance that assigns clear responsibility for their use and risks.
  • He called for contracts with AI providers to preserve audit, explanation and exit rights, while material systems should be stress tested and tested against adversarial behaviour before deployment and periodically afterward.
  • Banks should retain meaningful human oversight where an AI error could materially harm a customer or financial stability, including lending, fraud and other consequential decisions.

RBI is pushing AI governance into the same operating disciplines banks already use for material risk. That aligns with Canadian work on regulated AI, where model oversight, vendor access, fallback plans and proof of control are becoming practical requirements. The advantage will come from deploying useful AI while being able to show who owns the risk and how the system is controlled.

Cross Border Payments And FX

Brazil Explores Linking Pix To Foreign Payment Systems

August 10, 2026, Brazil
  • Brazil’s central bank is assessing bilateral connections between Pix and foreign instant-payment systems, as well as participation in multilateral payment hubs, to support lower-cost and faster cross-border transfers.
  • The work goes beyond earlier discussion of possible international expansion. Banco Central do Brasil had already placed Pix Internacional on its 2027+ development agenda in March, and the August update points to more concrete interoperability options.
  • Pix processed nearly 80 billion transactions worth more than R$35 trillion in 2025, giving any international connection potential scale well beyond a niche cross-border payment product.

Pix is starting to test whether a national instant-payment rail can connect directly into foreign payment infrastructure rather than relying only on traditional correspondent channels. NCFA’s cross border payments benchmark shows why that distinction matters: strong domestic rails don’t automatically solve international cost, speed or interoperability. The practical questions are which systems Brazil connects to first, how FX, compliance and settlement are handled across jurisdictions, and whether this becomes a repeatable model for other domestic real time rails.

Digital Assets Blockchain And Tokenization

OCC Conditionally Approves World Liberty National Trust Bank

August 14, 2026, United States
  • The OCC granted preliminary conditional approval for World Liberty Trust Company, National Association, the proposed national trust bank of Trump family backed World Liberty Financial.
  • The approved business plan covers USD1 issuance and redemption, maintenance of USD1 reserve assets, fiduciary digital asset custody and limited conversion services for custody customers.
  • The approval is not authority to begin operations. The proposed bank is limited to trust company activities, does not plan to become an FDIC insured depository institution and must satisfy remaining OCC conditions before commencing business.

USD1 could move from a stablecoin structure supported by external service providers into a federally supervised trust bank that combines issuance, redemption, reserves and custody. That would bring more of the operating stack behind a payment stablecoin inside one regulated entity, while concentrating responsibility for reserve management, safeguarding and compliance.

Deribit Gets Dubai Broker Dealer Licence And Coinbase Liquidity

August 13, 2026, United Arab Emirates
  • Deribit FZE received a Broker Dealer Licence from Dubai's Virtual Assets Regulatory Authority, expanding the permissions behind its existing regulated spot trading operation.
  • Spot buy, sell and trade orders placed on Deribit can now be routed to Coinbase Exchange for execution, giving clients access to deeper liquidity and hundreds of additional assets.
  • The upgraded spot service is rolling out to retail, qualified and institutional investors. Assets acquired through it can also be used as collateral for Deribit derivatives trading, subject to regulatory approval.

The Coinbase acquisition is moving from ownership into shared market infrastructure. Deribit can keep its derivatives interface while drawing on Coinbase's spot liquidity and execution stack, extending the Deribit acquisition strategy into day to day trading. That brings spot execution, collateral and derivatives closer together inside one regulated operating structure.

Perpetual Markets Extends Regulated European Venue Into Crypto

August 13, 2026, Cyprus / European Union
  • PM MTF Ltd received CySEC authorization under MiCA for crypto asset services alongside its existing regulated European trading venue.
  • The authorized activities include operating a crypto asset trading platform, custody and administration, execution of orders, reception and transmission of orders, and crypto asset transfers.
  • The authorization provides a regulated route for Perpetual Markets to extend crypto services across the EEA, including infrastructure that can support institutional and white label distribution.

The significance is the combination of existing regulated market infrastructure with newly authorized crypto services. Rather than building a separate crypto venue, Perpetual Markets can extend an established MTF operating model into digital assets, giving brokers and institutions another route to offer crypto products under a European regulatory framework. The announcement authorizes expansion, but does not establish that every permitted crypto service is already live at scale.

Anchorpoint Starts Institutional Rollout Of Regulated HKD Stablecoin

August 12, 2026, Hong Kong
  • Hong Kong licensed issuer Anchorpoint began phase one of HKD At Par, or HKDAP, through Beta Access for institutional distributors and professional investors.
  • Authorized distributors can provide conversion between HKDAP and fiat currency for institutions, corporate users and professional investors while integrating the stablecoin into commercial and financial applications.
  • Anchorpoint is initially targeting cross border payments and settlement and distribution of tokenized real world assets. Broader retail access could begin as early as the end of 2026, depending on market conditions.

Hong Kong's stablecoin regime has crossed from licensing into controlled distribution and commercial use. That builds on the tokenized finance strategy NCFA has been tracking through Standard Chartered and Hong Kong's regulators. HKDAP now has to prove that regulated tokenized money can attract repeat transaction flow across payments, asset settlement and institutional distribution rather than remain a licensed product with limited circulation.

Coinbase Gets Abu Dhabi Permission For Tokenized Securities Hub

August 11, 2026, United Arab Emirates
  • Coinbase received Financial Services Permission from the Financial Services Regulatory Authority of ADGM to arrange investment deals and provide custody in support of tokenized securities.
  • Coinbase says securities issued through the structure will be backed by underlying shares, with verified token holders receiving shareholder rights including dividends and voting.
  • Transfers will be subject to ongoing sanctions screening, with wallet level freeze and seizure capabilities where required.

The important distinction is the legal and operating structure behind the token. Coinbase is combining regulated custody, underlying shares, investor rights and blockchain transferability rather than offering price exposure alone. That puts the model inside the infrastructure test NCFA is tracking for regulated tokenized assets: whether ownership rights, custody, compliance and transfer can work together at market scale.

Robinhood Uses Bitstamp To Bring Crypto Into Its UK App

August 10, 2026, United Kingdom
  • Robinhood has begun rolling crypto trading out to eligible UK customers, adding more than 50 digital assets directly inside its main investing app alongside equities, ISAs, options and futures.
  • Crypto trading is provided through Bitstamp UK Ltd, bringing the regulated UK infrastructure Robinhood acquired with Bitstamp into Robinhood’s retail distribution channel. Robinhood completed the acquisition in June 2025 to accelerate its crypto expansion outside the U.S.
  • The rollout is a material follow-on to Robinhood’s July 1 announcement, when the company said UK crypto trading was coming soon but had not yet launched it. Robinhood’s own disclosure at the time still said its UK entity did not offer crypto trading or custody.
  • The launch also adds Cortex Digests for Crypto, using generative AI to combine news, market data, technical indicators and Robinhood information into asset-level market summaries.

Bitstamp is becoming more than an acquired exchange for Robinhood. Its UK crypto infrastructure now lets Robinhood add digital assets to the same interface where customers already invest across traditional markets. The next test is whether that combination deepens customer activity and gives Robinhood a repeatable way to extend its wider investment platform into regulated crypto markets.

Revolut Launches Phased EURR Stablecoin Testing

August 8, 2026, Denmark / Poland / Portugal
  • Revolut announced phased testing of EURR on Ethereum for eligible customers in Denmark, Poland and Portugal beginning in August.
  • EURR is a euro-pegged e-money token issued by Bridge Building S.A., a Stripe company regulated by Luxembourg’s CSSF as a MiCA crypto-asset service provider and electronic money institution.
  • Eligible customers can use EURR across supported crypto services, external wallets and blockchain networks. Revolut expects to add more markets later in 2026 and says stablecoins tied to other currencies are in development through separate regulatory processes.

Bridge provides the regulated issuance while Revolut distributes EURR through its customer app. NCFA tracked Bridge’s European authorizations in July. The immediate evidence is limited to phased testing in three markets, and Revolut has not published EURR circulation, adoption or transaction-volume data.

Lending Consumer Credit And BNPL

Shakepay Launches Bitcoin Backed Line Of Credit In Canada

August 13, 2026, Canada
  • Shakepay launched BLOC, a revolving line of credit that lets eligible Canadian customers borrow against bitcoin held with Shakepay without selling it.
  • Customers can borrow up to C$50,000 starting at 9.5% APR and track their balance, payments, collateral and loan to value ratio inside the Shakepay app.
  • BLOC is offered by Shakepay Credit Inc. under exemptive relief. If collateral values fall, borrowers may need to add bitcoin, repay part of the balance or face liquidation under the product terms.

Crypto backed lending is becoming part of the product stack offered by Canadian trading platforms. Shakepay is integrating the credit relationship directly into its own account experience, while embedded crypto lending at Netcoins uses APX to supply the lending operation behind the interface. The two models create different economics and different responsibility for underwriting, collateral controls and servicing.

Better And Coinbase Open Token-Backed Mortgages

August 12, 2026, United States
  • Better and Coinbase opened their token-backed conforming mortgage to eligible Coinbase One members on August 12, according to an August 26 company announcement.
  • Better originates and services the mortgage, Coinbase powers the digital-asset component and the first lien is designed to meet Fannie Mae guidelines.
  • Approved borrowers can pledge crypto without selling it. Eligible Coinbase One members can receive a lender-funded closing credit equal to 1% of the mortgage value, capped at US$10,000.
  • The earlier waitlist represented more than US$260 million in projected loan volume. That figure indicates demand, not funded mortgages.

General availability converts the earlier token-backed mortgage launch into an open lending product. Funded volume, borrower performance, collateral custody and the treatment of pledged assets during delinquency will show whether the model can operate at conforming-mortgage scale.

Mortgage Automator Brings Construction Draw Management Into The Loan File

August 10, 2026, Canada
  • Toronto based Mortgage Automator launched Draw Management, bringing construction budgets, draw schedules and approvals directly into the active loan file for private lenders.
  • The feature automatically flags budget variances and applies Project Health scoring so lenders can monitor construction progress and draw risk without relying on separate spreadsheets or disconnected workflows.
  • The launch follows Mortgage Automator's August 4 acquisition of Lendr, extending its expansion into construction and private lending infrastructure across North America.

Construction lending is operationally intensive because capital is released in stages and each draw depends on current budget, progress and compliance information. Moving those controls into the loan system can reduce reconciliation work and make exceptions visible earlier, while giving private lenders a more integrated way to manage construction credit as portfolios scale.

Digital Banking And BaaS

TD Adds In-App Payroll Deposit Switching With Atomic

August 10, 2026, Canada
  • TD launched an in-app payroll direct-deposit switching experience that lets customers redirect payroll deposits to a TD account in about one minute with most employers.
  • The capability is powered by Atomic and sits inside the TD app, removing the need for customers to separately obtain banking details and update payroll information through their employer.
  • TD says it is the first Canadian financial institution to offer a fully integrated in-app payroll switching experience and has exclusive Canadian rights to Atomic’s capability through the end of 2026.

Opening a new bank account is easier than making it the primary account. Payroll switching reduces the work required to redirect recurring income and adds an operational layer to open banking and financial portability. Competition improves when customers can act on a better banking option, not only compare one. The next measure is whether easier switching translates into more primary-account relationships and deposits.

Revolut Receives Full French Banking Licence

August 10, 2026, France / Western Europe
  • Revolut Bank S.A. received a full French banking licence following a joint assessment by France’s ACPR and the European Central Bank, with the decision formally adopted by the ECB Governing Council.
  • The new French bank will begin serving customers in France before progressively expanding across Germany, Ireland, Italy, Portugal and Spain. Revolut Bank UAB in Lithuania remains the group’s other European banking hub.
  • Revolut says Western Europe now accounts for about 30 million customers. It has committed more than €1 billion to the region and is hiring more than 600 people across its Western European markets.

The licence turns Revolut’s banking expansion into a two-hub European structure with a new regulated entity serving its largest regional customer base. The execution test is how quickly customers and products migrate to the French bank, and whether local licences give Revolut more room to deepen lending, business banking and other regulated services across Western Europe.

Regulation And Policy

CFTC Uses Emergency Authority To Keep Kalshi Operating

August 11, 2026, United States
  • The CFTC exercised emergency authority after Kalshi notified the Commission of a market emergency tied to litigation brought by New York Attorney General Letitia James.
  • The Commission ordered Kalshi to continue operating in accordance with the Commodity Exchange Act Core Principles. New York is seeking to stop Kalshi from offering event contracts nationwide and is pursuing more than US$36 billion in damages.
  • The CFTC says federal law requires a uniform national derivatives market and has challenged state efforts to apply gambling laws to federally regulated designated contract markets in several jurisdictions.

The dispute is becoming a direct test of who controls access to event contracts in the United States. The CFTC is treating Kalshi as national derivatives infrastructure while states continue to challenge parts of the market through gaming law. NCFA’s regulated event contract infrastructure brief tracks the same boundary between exchange regulation, market integrity and product access.

FCA Adds Five Fintechs To Scale-Up Regulatory Unit

August 10, 2026, United Kingdom
  • ClearScore, Modulr, Teya, Urban Jungle and Zilch became the first firms regulated solely by the FCA to join its Scale-up Unit.
  • The unit gives fast-growing regulated firms a dedicated regulatory contact for product launches, permission changes, policy developments and other issues that arise as they expand.
  • The FCA also published findings from a 15-firm high-growth pilot, including weaknesses where governance, board oversight, risk management and controls had not kept pace with business growth.

The FCA is making regulatory engagement part of the scale up process rather than waiting for rapid growth to create supervisory problems. NCFA’s closer look at the five firms shows how that support intersects with payments, credit, insurance and European expansion. For fintechs, the tradeoff is clearer: faster access to regulatory guidance comes with closer attention to whether governance, controls and customer protections are developing at the same rate as products, customers and market expansion.

Senate Sets September Procedural Vote On CLARITY Act

August 8, 2026, United States
  • Senate leadership filed cloture on the motion to proceed to H.R. 3633, the Digital Asset Market Clarity Act, after the chamber left for its August recess without voting on the bill.
  • The Senate schedule says the cloture motion will ripen on September 15 at 2:15 p.m., creating a formal procedural route toward floor consideration when senators return.
  • The bill still faces a 60-vote threshold and unresolved negotiations, including bank concerns over stablecoin rewards and proposed ethics provisions.

The CLARITY Act has moved from an uncertain post-recess commitment to a scheduled Senate procedure. The September vote will test whether negotiators can assemble enough support to advance a federal market-structure framework and narrow the remaining disagreements over banking, stablecoins and digital-asset oversight.

SME Finance And Business Banking

Mercury Lets Businesses Issue Dedicated Cards To AI Agents

August 11, 2026, United States
  • Mercury launched Mercury Spend with budgets, expense policies and company cards managed through one spending system.
  • Businesses can issue dedicated cards to AI agents for approved transactions and monitor their spending separately from employee activity.
  • Budgets and expense policies provide the control layer around those cards, while Mercury can automatically categorize transactions and lock cards when required tasks remain overdue.

The important change is that an AI agent can now receive its own controlled payment credential rather than only prepare a transaction for someone else. That makes permission design part of the payment product. NCFA has already tracked how AI agents use card rails; Mercury brings the same question inside company spending, where budgets and policy controls define how much authority software actually receives.

SIDBI Takes Invoice Fraud Controls Into Live MSME Lending

August 10, 2026, India
  • SIDBI and MonetaGo confirmed that Secure Financing is live on SIDBI’s GST-Sahay invoice-based financing platform following a pilot and three months of production use.
  • The system validates invoices financed through India’s TReDS infrastructure and checks invoices across participating factoring platforms and lenders, including SBI Global Factors and India Factoring.
  • The production milestone follows the November 2025 SIDBI-MonetaGo partnership. The system is designed to identify duplicate financing and strengthen invoice validation before credit is advanced to MSMEs.

Invoice financing fraud controls are becoming shared lending infrastructure rather than checks performed inside one lender at a time. MonetaGo has been working on shared trade finance fraud controls for years; the SIDBI deployment brings that model into live MSME lending. The test is whether interoperable validation reduces duplicate financing and exceptions at scale while making cash flow credit faster and safer across multiple lenders and factoring platforms.

Embedded Finance

Mews Gains EEA Electronic Money Institution Licence

August 11, 2026, European Economic Area
  • De Nederlandsche Bank granted Mews Financial Services B.V. an Electronic Money Institution licence, giving the hospitality software company regulated financial standing across the EEA.
  • Mews plans to bring payment services, financial workflows and hotel operating data into the same platform, alongside safeguarding, fraud monitoring, sanctions screening and anti money laundering controls.
  • The company processed US$19.7 billion in hotel transaction value in 2025. Regulated capabilities are expected to begin with a Netherlands pilot in late 2026 before expanding across the EEA.

Mews is taking embedded finance beyond connecting hotels to outside financial providers. Its own regulated entity can now sit inside the software where hotel revenue, operations and payments already meet. That changes the regulatory boundary for embedded finance: vertical software can become part of the licensed financial infrastructure instead of remaining only the distribution layer.

Risk Compliance And Regtech

TransFi Puts AI Into Cross Border Compliance Workflows

August 14, 2026, Global
  • TransFi launched JARVIS, a proprietary compliance intelligence platform that combines KYC and sanctions screening, internet profiling, behavioural and biometric signals, and fiat and blockchain transaction monitoring.
  • JARVIS builds risk profiles, uses heuristics and AI research to recommend actions on high confidence matches, and escalates complex or ambiguous cases for human review.
  • Final KYC, KYB, transaction monitoring and screening decisions remain with TransFi's compliance team under MLRO oversight.

AI is entering compliance as an investigation and decision support layer rather than replacing accountable human approval. That model fits the emerging market for AI powered compliance workflows where evidence, escalation, auditability and human control determine whether automation can be trusted. TransFi's operating test is whether JARVIS reduces review effort across multiple jurisdictions without weakening decision quality.

Cybersecurity Fraud And Financial Crime

Trezor Customer Data Exposed In Shipping Provider Breach

August 13, 2026, Global
  • Trezor disclosed that a breach at shipping provider ShipMonk exposed customer information including names, email addresses, phone numbers and shipping addresses.
  • Approximately 11,742 customers had full contact and shipping information exposed, while another 1,947 had partial exposure, bringing the affected total to about 13,689 customers.
  • Trezor says its own systems, devices and services were not compromised. The company warns that the exposed information could instead be used for more sophisticated phishing and impersonation attempts.

The breach shows how self custody can inherit risk from suppliers that never touch a private key. Fulfilment providers still hold enough identity and location data to expose hardware wallet owners to targeted attacks, making vendor controls and data retention part of hardware wallet security rather than a separate privacy issue.

Weekly Close

Financial infrastructure is becoming easier to enter and harder to operate well. Bank switching is getting simpler, payments are becoming programmable, AI agents are gaining spending authority and software platforms are taking on regulated financial roles. At the same time, regulators are putting more weight on governance, settlement discipline, market access and accountability. The competitive advantage is moving toward firms that can combine better distribution with stronger control of the infrastructure underneath it.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets. Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter