Karsten Wenzlaff, Advisor
August 26th, 2025
Karsten Wenzlaff is a Crowdfunding and Fintech Expert from Germany. He is Secretary-General of Digit[...]
Category Archives: Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech
5 Vendor Risk Platforms for Fintech IPO Readiness: Closing SOC 2 & SOX Gaps
Jun 9, 2026
Going public puts every control your fintech owns or outsources under a microscope. Auditors, regulators, and future shareholders want hard evidence that third-party weak spots cannot derail your debut.
Roughly 30% of breaches trace back to external suppliers, and each incident costs an average $4.44 million, according to IBM's 2024 Cost of a Data Breach Report. Advisers preparing S-1 filings increasingly want a repeatable way to assess outside cyber risk before the SEC asks, and investors read disciplined third-party oversight as a proxy for operational maturity.
Here is the catch: your SOC 2 program alone will not clear the public-company bar. SOC 2 demonstrates protection of customer data, while SOX 404 focuses on financial-reporting integrity. A purpose-built vendor-risk platform bridges that gap by connecting vendor security evidence to the controls auditors expect in an IPO cycle. We ranked five platforms on the criteria that matter most for IPO prep: compliance fit, automation depth, auditor acceptance, and cost-to-value.
How we ran the numbers
We started with fifteen tools from analyst waves, forums, and twenty competitor write-ups, then removed anything lacking a purpose-built vendor-risk module or fintech case study, leaving five contenders. We scored each on a 100-point scale across four questions:
- IPO-compliance coverage (25 pts): Does it map evidence to SOC 2 and carry it forward into SOX 404 testing? Audit-ready exports earn full marks; static PDFs do not.
- Automation & AI depth (25 pts): How much manual vendor-review work disappears? We looked for AI that flags risky answers and missing evidence, not chatbots that rephrase text.
- Auditor & investor acceptance (20 pts): Big Four familiarity, repeat fintech IPOs, and recognizable trust signals reduce friction.
- Cost-to-value ratio (15 pts): Subscription cost balanced against headcount savings and eleventh-hour consultants.
Two CISOs who took fintechs to market last year reviewed the weighting, confirming it reflects where auditors press hardest.
1. Vanta: your single pane of glass for vendor risk
Vanta folds vendor oversight into the same dashboard you use for SOC 2, helping teams remediate risk up to 45% faster. VRM, compliance automation, Trust Center, and SOX ITGC live in one system with shared evidence and cross-framework mapping.
- Ideal for: fintech security/compliance teams (~50 to 5,000 employees) running SOC 2 and standing up SOX ITGC readiness who want one platform over bespoke bank-style customization.
- Vendor risk: three phases (discovery/onboarding, security reviews, continuous monitoring). Bulk CSV import, configurable intake (business criticality, integration access, data types). Shadow-SaaS discovery via Okta, Azure AD/Entra, and Google Workspace, extended through Jamf, Intune, and JumpCloud.
- AI/automation: AI Questionnaire Review reads SOC 2 reports, ISO statements of applicability, PCI attestations, contracts, and trust-center materials, then drafts cited answers; gaps push to Jira and Slack.
- Compliance depth: 35+ frameworks with cross-mapping. SOX ITGC out of the box with 33 controls and 15 core policies, an estimated 10 to 20 hours to complete, covering access management, change management, and IT operations (ITGC, not full financial process controls).
- Monitoring/ecosystem: continuous vendor monitoring via the Riskey acquisition (third, fourth, nth-party signals); 400+ integrations (recent figures 430 to 450), 1,300+ automated tests including 146+ for AWS and 52 for Azure, tests can run hourly.
- Implementation/pricing: VRM setup under one day with an existing identity provider; ~30-minute AI-assisted vendor reviews. VRM add-on around $300 per vendor per year, or about $600 bundled with Continuous Monitoring.
- Limitations: no contract lifecycle management; limited board-level TPRM portfolio reporting; no proprietary vendor security rating; SOX financial process controls not native.
- Customer signals: BVNK, MoonPay, Tyro Payments; SOX ITGC use at Ginkgo Bioworks and Taboola.
Verdict: best fit if your IPO plan needs one platform to run SOC 2, stand up SOX ITGC, and operationalize vendor oversight. If you need managed analyst services or board-ready vendor portfolio reporting, compare TPRM-specialized options.
2. Optro (formerly AuditBoard): SOX 404 depth auditors expect
Optro rebranded from AuditBoard in March 2026. It keeps the same product family public-company SOX teams know: SOXHUB (SOX program management), CrossComply (multi-framework compliance), and a connected TPRM module. More than half of the Fortune 500 use it, and it is one of the most common SOX systems Big Four auditors are comfortable testing.
- Ideal for: late-stage fintechs (often 500+ employees) running or standing up a formal SOX program, where Finance/Internal Audit own SOX 404 and Security owns SOC 2, and a Big Four firm is expected.
- Core capabilities: SOXHUB runs SOX 404 end to end (risk assessment, narrative documentation, walkthroughs, control testing, deficiency tracking, management response). Out-of-the-box content covers ITGC and key financial process controls including revenue, order-to-cash, and procure-to-pay. CrossComply extends to SOC 2 and ISO 27001; TPRM handles inherent-risk tiering, assessments, and remediation.
- SOC 2/monitoring: lacks the compliance-automation flywheel (Trust Center, hourly tests, AI questionnaire review); continuous vendor monitoring relies on SecurityScorecard or BitSight.
- AI: Optro AI for control mapping, document analysis, and narrative drafting; acquired FairNow in 2025 for AI governance. Enterprise-process AI rather than self-serve vendor-review agents.
- Implementation/pricing: enterprise deployment, typically a few months to a couple of quarters, often partner-supported; quote-based pricing commonly in the high five to six figures annually.
- Limitations: heavier and slower than compliance-automation platforms; TPRM is a module, not the centerpiece; no Trust Center; longer rollouts with professional services.
Verdict: choose Optro if full SOX 404 depth (ITGC plus financial process controls) and audit-firm fluency top your list. For SOC 2 day-to-day, a Trust Center, and AI-compressed vendor reviews, you will likely pair it with another platform.
3. OneTrust: enterprise GRC depth alongside privacy and ethics
OneTrust grew from privacy management into a broad GRC suite with a substantive third-party risk module, serving 14,000+ customers across regulated industries. It fits when vendor oversight has to live next to privacy, ethics, and ESG in one control fabric.
- Ideal for: mid-market and enterprise fintechs (typically 250+ employees) with multi-jurisdictional exposure (EU, UK, US state privacy laws) and an established privacy program.
- TPRM capabilities: full vendor lifecycle (tiering, risk rubrics, questionnaires, evidence, remediation, reassessment). The Vendorpedia exchange offers 6,000+ pre-completed vendor profiles.
- SOC 2/SOX: supports SOC 2 program work but not as a fast-path; no out-of-the-box SOX 404 / ITGC content, a real gap for IPO programs.
- Monitoring: continuous monitoring usually built on BitSight, SecurityScorecard, or RiskRecon (separate subscriptions).
- Framework breadth: pre-built mappings across 20+ standards including DORA, NIS2, PCI DSS, and GDPR. Third-Party Risk Agent launched September 2025 with PDF-limited analysis; roughly 100 integrations, fewer than 50 out-of-the-box evidence collectors; SAP Ariba and ServiceNow are common pairings.
- Pricing: small-business plans around $600 per month; enterprise deployments commonly $50K to $300K per year; the TPRM module $40K to $500K per year. Breadth comes partly from 11+ acquisitions, adding admin overhead.
- Limitations: no out-of-the-box SOX 404 / ITGC; continuous monitoring depends on paid feeds; AI less mature; longer implementation; no fast-path SOC 2 flywheel.
Verdict: right when vendor risk must sit alongside privacy, ethics, and ESG in one enterprise fabric and you can absorb a longer rollout. To consolidate SOC 2, SOX ITGC, and AI-assisted reviews into one fast-moving platform, OneTrust typically needs pairing.
4. Prevalent (Mitratech): bank-grade TPRM depth
Prevalent is a pure-play TPRM platform with more than two decades of specialization, acquired by Mitratech in October 2024 and rated a Strong Performer in Forrester's Third-Party Risk Management Wave (Q1 2026). It is the heavyweight option when vendor risk itself is the program.
- Ideal for: later-stage fintechs (often 500+ employees) with a dedicated TPRM function, bank-partner due diligence, or multinational regulatory requirements.
- Core capabilities: full vendor lifecycle with 800+ pre-built assessment templates mapped across security, privacy, and financial-services requirements; inherent and residual risk scoring on a likelihood-and-impact model; shared assessment repositories via Vendor Intelligence Networks.
- Continuous monitoring: 2,000+ data sources across five domains (cyber, operational, reputational, financial, regulatory), correlated with assessment results.
- SOC 2/SOX: maps vendor responses to AICPA Trust Services Criteria and to SOX requirements for third-party oversight, but does not deliver SOC 2 for your org or SOX ITGC automation/testing.
- Discovery/AI/integrations: no automated vendor discovery or shadow-IT detection; AI is NLP/ML document analysis; integrations target TPRM workflows (CLM, procurement) and risk feeds, not infrastructure testing.
- Implementation/pricing: weeks to months, with "clunky" and "dated UI/UX" feedback and Forrester notes on workflow inflexibility; enterprise quote-based pricing with optional managed services.
- Limitations: no GRC/compliance automation for your own SOC 2; no Trust Center; no automated discovery; longer implementation.
Verdict: choose Prevalent for bank-style TPRM depth, broad regulatory mapping, and multi-domain continuous monitoring. To collapse SOC 2, SOX ITGC, and vendor oversight into one platform, expect to add complementary tools.
5. Venminder: continuous oversight with managed services built in
Venminder is a TPRM platform for regulated financial-services teams that want to outsource a share of vendor due diligence. It pairs software with managed services where certified analysts review vendor materials and deliver risk-rated outputs. Venminder was acquired by Ncontracts in September 2024 (Hg Capital-backed); it has 1,200+ customers, and the combined entity serves 5,000+.
- Ideal for: lean compliance teams (often 1 to 5 people), banking/financial-services orgs optimizing for FFIEC-style oversight and examiner-ready reporting, and teams that value contract/SLA oversight.
- Core capabilities: risk assessments with configurable scoring; template-driven questionnaires (including SIG variants) via a vendor portal; oversight and issue management; contract and SLA management with Venminder paralegals extracting key dates and renewal notifications. VenDiligence managed services use certified analysts (CISSP, CTPRP, CISA, CPA) to produce risk-rated reports.
- SOC 2 fit: does not help you achieve SOC 2; its SOC Assessment service is an analyst-led review of a vendor's SOC 1 or SOC 2 report, including subservice organizations and complementary user entity controls (CUECs).
- SOX: no explicit SOX 404 or ITGC support; plan a separate SOX approach.
- Monitoring/integrations: Venmonitor integrates with SecurityScorecard and ArgosRisk across cyber, business health, privacy, ESG, and adverse-media signals; pre-built integrations include RSA Archer, SecurityScorecard, and ArgosRisk, with an API add-on.
- Implementation/pricing: 30 to 90 days, code-free. Professional estimated $50,000 to $75,000 per year; Enterprise around $125,000 per year (AWS Marketplace), both with unlimited users and vendors; managed services priced per assessment.
- Signals/limitations: 4.6/5 Gartner Peer Insights, 4.7/5 G2, Forrester Strong Performer; named customers include Billtrust, NewRez, Nations Lending, and MassHousing, with Flushing Bank and Frost Bank case studies. VRM-only with no GRC automation, no automated discovery, no AI questionnaire automation, limited integrations, and "rudimentary" reporting per Forrester.
Verdict: strong when capacity and expertise are the constraint and you want platform-plus-analysts diligence with contract oversight. To consolidate SOC 2 evidence, SOX ITGC, and VRM into one system, Venminder adds tool sprawl rather than reducing it.
Conclusion: Bridging SOC 2 and SOX, one vendor list, two audits
In most fintechs, SOC 2 lives with Security and SOX 404 with Finance, and your vendors sit in the overlap. Treat them as two programs and you get two inventories and two sets of audit questions that never reconcile. Build one vendor register that serves both audits instead.
See: NCFA Financial Innovation Map
- Build one third-party inventory. Tag each vendor with two questions: does it handle customer data in your SOC 2 scope, and does it touch systems or reports that roll into your financial statements? The highest-scrutiny group is the vendors that are both.
- Collect the right evidence for the overlap vendors. Pull the vendor's SOC 2 report (security controls) and SOC 1 report or equivalent (financial-control design), and store both under the same vendor record.
- Cross-reference controls so one file supports two checks. If a vendor's change-management clause supports SOC 2 CC8, note that it also supports SOX ITGC Change-Management CM-1. Repeat for access reviews, incident response, and backup testing.
- Hand auditors a consolidated register showing which vendors matter to SOC 2, which to SOX, which to both, and where the evidence lives. That cuts follow-up meetings and keeps your IPO timeline from stalling in evidence-chasing.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
 |  |  |
|---|---|---|
 |  |  |
MindBridge Expands AI Audit Analytics Beyond Sampling
June 8, 2026 | NCFA Market Activity | Artificial Intelligence And Data, Risk Compliance And Regtech
Full Population Analysis Gains Ground In Audit And Assurance
On June 8, 2026, Ottawa based MindBridge expands its AI audit and assurance platform to help audit teams review larger transaction populations and assess risk faster. The update adds full population analysis, subledger analysis, a Monetary Flow Dashboard, transaction level risk assessment, duplicate transaction controls, and large file processing.
MindBridge says KPMG deploys its platform through a global audit platform used in more than 60 countries. The company also points to recent partnerships with BDO and Buzzacott.
Sarah McGinnity, General Manager, Audit & Assurance Solutions at MindBridge:
“Audit and assurance teams are being asked to oversee larger transaction populations, more complex systems, and increasingly automated financial processes without adding proportional time or resources.”
Full Population Analysis Gains Ground
The most important part of the announcement is the focus on full population analysis.
Audit teams have traditionally relied on sampling. AI driven software now makes it possible to review entire transaction populations and identify unusual activity across much larger data sets. That can help auditors spend less time searching for issues and more time investigating the transactions that matter.
See: AI Agents Enter Governed Financial Workflows
MindBridge is positioning its platform around that shift. The latest release gives users more visibility into transaction flows, subledger activity, and risk indicators across financial records.
Audit Technology Moves Into The Control Layer
Many AI products compete on productivity. MindBridge competes on audit quality, risk assessment, and financial controls.
It alters the buying decision. Audit firms, finance teams, and regulated organizations already need oversight, documentation, and evidence. They aren't looking for experimentation. They're looking for better ways to review growing volumes of financial data.
The trend extends beyond audit. Financial institutions are adopting AI in compliance, fraud detection, transaction monitoring, and operational risk. As NCFA noted in its coverage of regulated AI controls and governance, buyers increasingly want systems that support human judgment and provide a clear record of how decisions are made.
Talking Point
If audit software can test full transaction populations instead of samples, the value changes from finding anomalies after the fact to proving where financial risk may occur before judgment calls are made. That's where AI audit tools become useful to CFOs, auditors, and regulators: not as automation, but as evidence infrastructure.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
NCFA Weekly Fintech Intelligence May 30-Jun 5, 2026
May 30, 2026 | NCFA Fintech Whisperer | Payments And Market Infrastructure, Digital Assets Blockchain And Tokenization, Artificial Intelligence And Data, Regulation and Policy, Risk Compliance And Regtech
Image: Freepik
This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors. This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis. (Missed prior week's Fintech Whisperer? (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026).
Weekly Fintech Market Intelligence May 30 - Jun 5, 2026
Digital Assets Blockchain And Tokenization
HKMA Establishes Tokenised Bond Expert Group
June 5, 2026, Hong Kong
- The Hong Kong Monetary Authority convened a Tokenised Bond Expert Group to support further adoption and scalability of tokenized bonds in Hong Kong.
- The group brings together industry representatives with experience and interest in tokenized bond market development.
- HKMA says the group will help identify practical issues, share market experience, and support Hong Kong’s tokenized bond development.
Tokenized bonds are moving from pilots into market structure work. Issuers, dealers, custodians, infrastructure providers, and regulators need practical answers on issuance, settlement, custody, disclosure, and secondary liquidity before tokenized fixed income can scale.
0x Opens Cross Chain API After $230M Private Beta
June 4, 2026, Global
- 0x makes its Cross Chain API generally available after a private beta processed more than $230M in bridged volume.
- The API supports movement across more than 25 blockchains through one integration.
- 0x says the product targets cross chain swaps, payments, real world assets, trading applications, and agent driven workflows.
The value of cross chain infrastructure comes down to whether developers can route liquidity without exposing users to bridge complexity. The $230M private beta gives 0x early usage evidence, but the larger test is reliability across payments, RWAs, trading, and agent workflows when volumes move beyond controlled integrations.
AX Coin Receives Bahrain Stablecoin Issuer Licence
June 3, 2026, Bahrain
- AX Coin Bahrain says it received a Central Bank of Bahrain licence to carry out stablecoin issuer activities.
- The company says it is the first licence granted under Bahrain’s stablecoin regulatory framework.
- AX Coin says the licence supports regulated stablecoin infrastructure for payments, settlement, and institutional digital asset adoption.
Stablecoin licensing is becoming a competitive infrastructure tool for financial centres. Issuers, banks, PSPs, custodians, and regulators should track which jurisdictions turn stablecoin rules into live market access rather than policy design alone.
Franklin Templeton And MoonPay Expand Tokenized Fund Access
June 2, 2026, United States
- Franklin Templeton and MoonPay partner to connect the Benji Technology Platform with MoonPay Trade for eligible institutional clients.
- The integration lets institutions convert between supported stablecoins and tokenized money market fund exposure.
- Franklin Templeton reported $1.74T in assets under management as of April 30, 2026.
Tokenized money market funds are becoming part of institutional onchain liquidity infrastructure. Asset managers, custodians, PSPs, stablecoin issuers, and treasury teams should track how stablecoins connect with regulated fund products, redemption workflows, and stablecoin payment infrastructure.
BitGo And Concrete Launch Institutional DeFi Access Platform
June 2, 2026, United States
- BitGo and Concrete launch an institutional onchain asset growth platform for qualified clients.
- The model keeps underlying digital assets in BitGo Bank & Trust qualified custody while clients access selected DeFi vault strategies.
- The platform targets institutional demand for onchain yield access without moving assets outside a qualified custody structure.
Institutional DeFi is shifting toward custody controlled access models. Asset managers, custodians, exchanges, advisers, and compliance teams should track whether qualified custody plus curated onchain strategies becomes the operating model that brings DeFi exposure into regulated portfolios.
Lending Consumer Credit And BNPL
Cross River Commits $250M For Figure Crypto Backed Loans
June 4, 2026, United States
- Cross River commits to purchase up to $250M in assets tied to Figure’s crypto backed loan product.
- The agreement gives Figure committed forward flow capital for borrowers seeking USD liquidity without selling digital assets.
- Figure says its ecosystem has originated more than $25B in home equity to date and includes DART plus $YLDS, an SEC registered yield bearing stablecoin.
The useful signal is not simply another crypto loan product. It is committed buyer capital behind crypto backed credit, which can make the product more repeatable. The key risks remain collateral volatility, liquidation design, borrower suitability, and whether digital asset wealth can support credit access without turning into hidden leverage.
Better And Coinbase Fund First Fannie Mae Backed Bitcoin Mortgage
June 4, 2026, United States
- Better and Coinbase announce the first funded Fannie Mae backed mortgage using Bitcoin as collateral in the United States.
- The companies plan to make the product available to qualified borrowers nationwide by summer 2026.
- The mortgage structure lets qualified borrowers use Bitcoin or USDC collateral for down payment financing without selling their digital assets.
Crypto collateral can help asset rich borrowers avoid selling Bitcoin or USDC, but housing finance brings stricter expectations around suitability, custody, volatility buffers, and borrower protection. The product will need to prove it expands access without importing crypto market risk into mortgage underwriting.
Payments And Market Infrastructure
Major U.S. Banks Launch Tokenized Commercial Bank Money Initiative
June 5, 2026, United States
- A group of major U.S. financial institutions announced a shared on chain commercial bank money network designed to support regulated digital payments and settlement.
- The initiative connects existing banking infrastructure with tokenized commercial bank deposits and programmable payment capabilities.
- The network targets corporate treasury, liquidity management, and cross border payment use cases where banks, stablecoin issuers, and tokenized money market products increasingly compete.
Large banks are moving from stablecoin observation into direct tokenized money infrastructure. Treasury teams, payment providers, fintechs, custodians, and infrastructure operators now need to track whether commercial bank money becomes a regulated settlement layer for high value payments, liquidity management, and cross border transactions.
Bybit Integrates Western Union USDPT Stablecoin
June 4, 2026, Global
- Bybit becomes the first major crypto exchange to integrate Western Union’s USDPT stablecoin through its fiat channels.
- USDPT is a U.S. dollar stablecoin issued by Anchorage Digital Bank, N.A. on Solana.
- Western Union says its network spans more than 200 countries and territories and nearly 130 currencies.
Western Union’s stablecoin entering a major crypto exchange channel adds another proof point for stablecoins becoming payment infrastructure. PSPs, exchanges, banks, remittance firms, and compliance teams should track how regulated issuers, fiat channels, and global payout networks connect. This adds a distribution proof point for regulated stablecoins. Western Union brings the remittance brand and global currency footprint, while Bybit brings crypto exchange access. The open question is whether USDPT becomes a settlement asset customers actually use, or another branded stablecoin competing for scarce transaction depth.
Bank Of England Advances RTGS Synchronisation Design
June 4, 2026, United Kingdom
- The Bank of England published minutes from its Synchronisation thematic engagement working group on RTGS synchronisation design.
- The working group is gathering industry input to inform the design of a live synchronisation service for atomic settlement in central bank money.
- The Bank is also preparing a Synchronisation Lab for hands-on industry testing during 2026.
Central bank money settlement is being designed for programmable markets. Banks, FMIs, tokenized asset platforms, and settlement operators need to understand how RTGS synchronisation could connect central bank money with external asset ledgers and reduce settlement risk in digital markets.
India And Cambodia Launch UPI KHQR Merchant Payments
June 4, 2026, India and Cambodia
- India’s UPI is now connected to Cambodia’s KHQR network for QR code based merchant payments by Indian travellers.
- The first phase lets Indian travellers use UPI applications at more than 4.5 million KHQR enabled merchants in Cambodia.
- The linkage was developed through NPCI International Payments Limited and ACLEDA Bank under the guidance of the Reserve Bank of India and the National Bank of Cambodia.
Domestic real time payment systems are becoming exportable cross border infrastructure. Payment networks, banks, wallets, tourism merchants, and regulators are building direct QR payment links that reduce card dependence and make national payment rails usable outside their home markets.
Payments Canada Membership Growth Shows Expanding Infrastructure Participation
June 3, 2026, Canada
- Payments Canada reported that 15 organizations have joined its membership in 2026 to date following expanded eligibility rules.
- The latest intake includes Beem Credit Union, Ebury, Shaype, Libro Credit Union, and Newton.
- Earlier 2026 additions included Wise Payments Canada, Float, KOHO, Neo Financial, Paramount Commerce, Brim, Meridian Credit Union, Tru Cooperative Bank, DoBusiness.com, and others.
Access to Canada’s payment infrastructure continues to widen beyond traditional banks and large financial institutions. Fintechs, payment providers, credit unions, foreign exchange firms, and digital finance companies are gaining a larger role in the systems and governance discussions that shape payment modernization.
UKPI Launches Recurring Open Banking Payment Scheme
June 2, 2026, United Kingdom
- UK Payments Initiative launches an industry led scheme for recurring and automated account to account payments powered by open banking.
- The scheme creates a shared rulebook, commercial model, and operational standards for flexible payments to businesses and government.
- The FCA says the UKPI launch should act as a catalyst for other commercial open banking schemes to emerge.
- The launch fits the UK’s broader payments roadmap, which links open banking, account to account payments, payment competition, and next generation infrastructure.
Open banking is moving from one off payments into repeatable payment schemes with shared rules and commercial terms. Banks, PSPs, merchants, fintech platforms, and regulators should track whether recurring account to account payments become a real alternative to cards, direct debit, and closed wallet systems.
Mastercard Expands Settlement To Stablecoins And Always On Options
June 3, 2026, United States
- Mastercard expands settlement capabilities to include stablecoin, intraday, holiday, and weekend settlement options.
- The company says the new capabilities are designed to support on chain card settlement using regulated stablecoins.
- The update builds on Mastercard’s recent New York BitLicense approval and broader digital asset settlement strategy.
Card settlement is no longer limited to traditional banking hours or traditional settlement assets. Banks, acquirers, PSPs, stablecoin issuers, and fintech platforms should track how major payment networks use regulated stablecoins to support faster settlement, lower liquidity friction, and always on money movement.
MoneyGram Launches MGUSD Stablecoin For Global Network
June 3, 2026, United States
- MoneyGram launches MGUSD, a U.S. dollar stablecoin designed to power payment activity across its global network.
- MGUSD is issued on Stellar with support from Bridge, M0, and Fireblocks.
- MoneyGram says MGUSD will support faster settlement, lower working capital needs, and always on cross border money movement.
Stablecoin remittances are moving from fintech experiments into established money transfer networks. Banks, PSPs, remittance firms, stablecoin issuers, and compliance teams should track how large networks use tokenized dollars to reduce settlement friction while staying inside regulated payment flows.
Aeropay Adds Jack Henry Instant Payment Rails
June 2, 2026, United States
- Aeropay integrates Jack Henry Payments Orchestrator to strengthen its pay by bank network.
- The integration adds request for payment and RTP capabilities, with live routing based on performance, availability, and risk conditions.
- The model supports instant account to account payments for merchants and financial institutions looking beyond card based acceptance.
Pay by bank is becoming a practical payment rail strategy, not just a checkout concept. PSPs, banks, merchants, and fintech platforms should track how instant payment routing, risk controls, and settlement access shape competition against cards and traditional ACH flows.
YouSend Launches Stablecoin Remittance Service In Canada
May 30, 2026, Canada
- YouSend launches its stablecoin powered remittance platform in Canada after processing more than 10,000 transactions and over $1M during a silent beta.
- The company says it is registered with FINTRAC as a money services business and currently supports transfers from Canada and the United Kingdom to Nigeria, Ghana, Kenya, and Tanzania.
- YouSend uses stablecoins for settlement while recipients receive local currency through local payout partners, reducing dependence on traditional correspondent banking rails.
- The company says the United States is expected to be its next market.
Stablecoins are gaining traction in regulated payment flows, not just trading markets. Remittances remain one of the clearest real world use cases because settlement speed, foreign exchange costs, and cross border reach matter more than speculative activity. Canadian fintechs, PSPs, banks, and regulators should watch whether stablecoin based remittance models can scale while meeting compliance, safeguarding, and consumer protection requirements.
OpenPayd Targets Nasdaq Listing At $1.145B Valuation
June 1, 2026, Global
- OpenPayd enters a definitive business combination agreement with Titan Acquisition Corp. and plans to list on Nasdaq under the ticker OP.
- The transaction values OpenPayd at approximately $1.145B, with the company reporting more than $85M in annualized recurring revenue as of March 2026.
- OpenPayd says it processes more than $240B in annualized transaction volume and serves more than 1,100 customers across 180 countries.
- The company’s infrastructure spans fiat accounts, embedded payments, FX, stablecoin ramps, open banking, real time payments, and agentic payment workflows.
OpenPayd’s planned Nasdaq listing puts programmable money movement under public market scrutiny. PSPs, banks, stablecoin firms, embedded finance platforms, investors, and regulators should track how the listing exposes the economics, licensing footprint, transaction volume, and risk controls behind global payment infrastructure.
Risk Compliance And Regtech
U.S. Treasury Targets Iranian Crypto Exchanges
June 2, 2026, United States
- OFAC designates Nobitex, Iran’s largest digital asset exchange, along with three other Iranian digital asset exchanges.
- Treasury says Nobitex processed more than 50% of all Iranian digital asset inflows in 2025.
- Treasury says Nobitex helped the Central Bank of Iran access hundreds of millions of dollars in stablecoins while supporting sanctions evasion and IRGC linked activity.
Crypto sanctions enforcement is moving deeper into exchange infrastructure and stablecoin flows. Exchanges, custodians, PSPs, blockchain analytics firms, and compliance teams should track how sanctions screening, stablecoin monitoring, and cross border counterparty controls become core operating requirements.
Artificial Intelligence And Data
EU Advances Technology Sovereignty Strategy Across AI, Cloud, Data And Digital Infrastructure
June 3, 2026, European Union
- The European Commission unveiled a technology sovereignty package aimed at strengthening European capabilities across artificial intelligence, cloud computing, semiconductors, quantum technologies, digital infrastructure, and strategic data assets.
- The initiative seeks to reduce reliance on foreign technology providers while supporting investment, procurement, research, industrial capacity, and digital resilience across member states.
- The package positions technology sovereignty as an economic competitiveness, security, and infrastructure priority for Europe's digital future.
Technology policy is increasingly becoming infrastructure policy. As governments focus on AI capacity, cloud services, strategic data assets, semiconductor supply chains, and digital resilience, firms may face growing pressure to evaluate technology dependencies, procurement choices, hosting arrangements, and infrastructure risk. The result could be a more fragmented global technology environment shaped by competing sovereignty frameworks.
UK Regulators Seek Input On Consumer Interest And AI
June 3, 2026, United Kingdom
- The Digital Regulation Cooperation Forum opened a call for input on consumer risks and benefits from generative and agentic AI.
- The call asks about unauthorized AI transactions, agentic collusion, hallucinations, hyper personalisation, consent, oversight, redress and accountability.
- The DRCF said responses may inform future thematic work, webinars, roundtables and the 2027 Responsible AI Forum.
Consumer AI policy is moving toward practical controls for trust, consent and accountability. Banks, fintechs, AI firms, platforms and regulators should watch how user controls, complaint routes, audit trails and outcomes based duties apply when AI systems influence financial decisions or act for consumers.
Google Gemma 4 Brings Local Multimodal Agents To Laptops
June 3, 2026, Global
- Google introduces Gemma 4 12B, an open model designed to run locally on consumer laptops with 16GB of RAM.
- The model supports multimodal and agentic workflows, including text, image, audio, video understanding, coding, and local tool use.
- Google’s AI Edge stack lets developers run local agents, serve local model endpoints, analyze data, execute scripts, and build on device workflows.
The operating change is where AI work happens. If capable agents can run locally, more sensitive analysis, file handling, audio processing, and workflow automation can stay on device instead of moving through cloud APIs. That could change enterprise AI design, human oversight, privacy controls, and bot to bot workflows.
White House Creates Voluntary Review Process For Advanced AI Models
June 2, 2026, United States
- President Trump signed an executive order establishing a voluntary federal review process for advanced artificial intelligence models before public release.
- The framework allows developers to submit frontier AI systems for cybersecurity and security testing, with reviews expected to take up to 30 days.
- The order directs federal agencies to support AI innovation while strengthening safeguards against cyber threats, misuse, and risks to critical infrastructure.
- The initiative signals a U.S. preference for voluntary oversight and security testing rather than mandatory pre-release approval requirements.
The United States is testing a lighter regulatory model for frontier AI that relies on voluntary participation, security evaluation, and industry cooperation. Financial institutions, fintechs, infrastructure providers, and AI developers should watch whether this approach accelerates deployment while maintaining confidence in systems that increasingly influence payments, capital markets, fraud controls, and critical infrastructure.
Regulation And Policy
Revolut U.S. Bank Plans FDIC Products And Stablecoin Access
June 3, 2026, United States
- Reuters reports Revolut’s planned U.S. bank aims to offer FDIC insured products, stablecoins, multi currency deposits, stock trading, and crypto services.
- Revolut’s U.S. CEO said the company expects the bank to begin operating next year, with headquarters in Stamford, Connecticut and an office in New York.
- Revolut has applied for a U.S. national bank charter and said the licence would support direct access to payment rails, insured deposits, lending, and new banking revenue streams.
- The update builds on Revolut’s earlier standalone U.S. banking licence path.
Revolut’s U.S. strategy shows why bank charters are becoming infrastructure plays for global fintechs. FDIC insured products, payment rail access, stablecoin services, and securities trading under one app could raise the competitive bar for sponsor bank dependent fintech models.
UK Lawmakers Push Bank Of England To Ease Stablecoin Plans
June 2, 2026, United Kingdom
- Reuters reports UK lawmakers are urging the Bank of England to ease proposed stablecoin rules that industry groups say could make UK issuance less competitive.
- The debate centres on whether systemic stablecoin issuers should face strict central bank safeguards or a more flexible regime that supports market development.
- The pressure comes as the UK tries to grow digital asset activity while keeping payment stability, redemption, reserve, and consumer protection risks under control.
Stablecoin regulation is becoming a competitiveness question, not only a risk control exercise. Issuers, banks, PSPs, custodians, and policymakers should track whether the UK loosens its approach or keeps tougher safeguards that could limit domestic stablecoin scale.
EBA And NYDFS Sign Stablecoin Supervision Agreement
June 2, 2026, European Union and United States
- The European Banking Authority and the New York State Department of Financial Services signed a memorandum of understanding on cross border stablecoin supervision.
- The agreement supports cooperation on entities engaged in stablecoin activities, market trends, risks, and stablecoin market integrity.
- NYDFS says the memorandum applies only to stablecoin related activities of supervised entities.
Stablecoin supervision is becoming cross border supervision. Issuers, exchanges, custodians, payment firms, and compliance teams should expect more information sharing between regulators as stablecoin activity crosses jurisdictions, banking systems, and payment networks.
Conclusion
The word of the week is 'control'. Banks, payment networks, fintechs, custodians, stablecoin issuers, and AI providers are competing closer to the infrastructure layer, where settlement, custody, compliance, data, and distribution decisions get made. Which rails, licenses, partners, and operating models create durable access before the next layer of financial infrastructure gets locked in?
NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets, subscribe to NCFA weekly newsletter updates, view a rundown of current fintech news and insights, or dive into the latest fintech industry research.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Canada Wants Sovereign AI. The Cloud Says Otherwise
June 3, 2026 | NCFA Insight | Artificial Intelligence And Data, Regulation And Policy
Cloud Concentration, Compute Access, and AI Sovereignty
On June 2, 2026, the Canadian Anti Monopoly Project released Parting Clouds: Creating A Competitive Marketplace For Compute that says three American companies control 85% of Canada's public cloud market. Canada wants sovereign AI. It's a gap that Ottawa needs to address before it commits more public money to AI infrastructure.
Globally, those same three firms Amazon, Microsoft, and Google, hold about 66% of the public cloud market. AI runs on compute, but most firms access that compute through cloud platforms. The more difficult it becomes to move data, workloads, and AI services between providers, the more dependent organizations become on a small number of platforms.
Compute Is Capacity. Cloud Is Control.
Compute means the physical capacity. Think data centres, chips, GPUs, servers, storage, power, cooling, and networks. Cloud is the commercial aspect that packages that capacity into services like APIs, software tools, security controls, and platform ecosystems.
Canada can fund more compute and still leave firms locked into the same cloud stacks. That concern connects to NCFA’s earlier analysis of Canada’s AI capital flight problem, where public AI investment doesn't always translate into long term domestic value especially if customers cannot move their data, workloads, models, and services without high technical and financial costs.
The CAMP report makes that point clearly. The goal isn't simply Canadian ownership. The goal is a market where customers can switch providers without rebuilding core systems. Most Canadian firms cannot replace that stack overnight.
Federal spending tells the same story. From 2019 to 2020 through 2022 to 2023, Shared Services Canada spent $310.4M on cloud services. The report says 66% went to Microsoft, 16% to Amazon, 14% to Salesforce, and 4% to other providers.
AI Deepens Cloud Lock In
Cloud concentration already creates switching barriers through proprietary services, opaque pricing, and weak interoperability.
AI makes those barriers harder to manage. A fraud model, compliance agent, lending workflow, or payment risk tool can become tied to a provider’s data services, model tools, security layer, and deployment environment.
Moving clouds then means more than moving storage. It can mean rebuilding how the product works.
Five firms control about 75% of global AI compute power, with Google alone controlling about 31%. That concentration shows why AI sovereignty is not only about funding more capacity. It's also about keeping customers mobile before AI markets harden around the same platforms.
Domestic Monopolies Are Still Monopolies
The name of this section is the report's strongest warning and it should affect Ottawa's strategy.
More Canadian data centres can help. Domestic compute can support sensitive workloads, national resilience, and local AI capacity. Ottawa has already backed 44 Canadian AI compute projects, but if public funding only creates protected local gatekeepers, Canada may replace one dependency with another.
The better goal is customer mobility. Can a Canadian fintech move workloads from one provider to another? Can a public agency compare cloud pricing easily? Can a startup use AI tools without being trapped inside one ecosystem? Can sensitive workloads use Canadian infrastructure without sacrificing portability?
What Ottawa Should Do
Ottawa should fund infrastructure, but also change the market around portability, interoperability, transparent pricing, and competition.
The CAMP report recommends using public procurement to require portable data, interoperable services, and common technical standards. It also calls for closer scrutiny of egress fees, bundling, tying, discriminatory licensing, cloud credits, and acquisitions that absorb Canadian talent and intellectual property.
See: AI Data Centres Test B.C.’s Clean Power Limits
This approach has tradeoffs. Procurement can move faster than legislation, but it needs technical discipline. Competition enforcement can target lock in, but cases take time. Interoperability can lower switching costs, but it will not instantly match the full global scale of AWS, Azure, or Google Cloud. Domestic infrastructure can improve resilience, but only if it avoids new lock in.
The Questions Ottawa Should Answer
Will Canada measure AI sovereignty by domestic capacity, or by real customer choice?
Will public funding require portability, open standards, and transparent pricing?
Will Canadian fintechs and AI startups be able to move workloads across providers without rewriting core systems?
Will the strategy treat cloud concentration as a competition issue, not only an innovation issue?
Will Canada build a market where providers compete on price, performance, trust, and service quality, or one where customers stay trapped because switching costs are too high?
Talking Point
If a Canadian fintech cannot realistically move its AI stack from one provider to another, who holds the leverage?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Lastwall Raises $16M For Cyber Resilience Infrastructure
June 1, 2026 | NCFA Fintech Market Activity | Risk Compliance And Regtech, Artificial Intelligence And Data
Canadian Identity Security Scaleup Targets Critical Infrastructure
On May 27, 2026, Fredericton based cybersecurity scaleup Lastwall raised $16 million in a round led by BDC Capital’s StrongNorth Fund, See Isabelle Hudon, President and CEO BDC's LinkedIn announcement. The round also included the New Brunswick Innovation Foundation, Frostbite Capital, Blue Bear Capital, BlueWing Ventures, and 18West.
It's a Canadian cybersecurity story, not a military procurement story. Lastwall works in defence, government, and critical infrastructure environments, but the announcement is about growth capital for identity first security, zero trust access, and quantum resilient protection. For NBIF, it's the largest single investment in its history through the round.
Karl Holmqvist, Founder and CEO, Lastwall:
“We proved our model in the world’s most demanding federal market. We earned FedRAMP Moderate Authorization, secured U.S. government systems, and built a platform for the realities of modern cyber warfare. Now, we’re bringing those trusted capabilities home to help strengthen Canada’s cyber resilience at a defining moment for national security.”
Identity Security Is Critical Infrastructure
Lastwall secures access across cloud, hybrid, disconnected, and low bandwidth environments. It's important for energy, telecom, transportation, defence, government, and public sector systems where a failed login layer can become an operational risk.
The product focus is identity, authentication, credential protection, privileged access, and zero trust controls. Lastwall also says quantum resilient protection is built into the platform, which is key for systems that need to stay secure beyond the current threat cycle.
See: Google Brings Quantum Crypto Migration Closer
For fintechs and financial institutions, digital identity and access control are now resilience infrastructure. Fraud, account takeover, insider risk, cloud access, vendor access, and critical system protection all depend on knowing who is connecting, from where, and under what conditions.
Peter Dawe, BDC’s Vice President of Defence Strategy and a recently retired Major General, joined Lastwall’s board as part of the financing. That gives the company closer defence and sovereign capability expertise as Canada looks for more domestic cyber capacity.
Canada’s cyber resilience gap isn't only about monitoring threats. It's also about securing access to the systems that run public services, financial infrastructure, energy, communications, and national security. Canada’s new cyber law and PSP oversight are already raising the bar for security, resilience, and vendor accountability. Lastwall’s funding shows Canadian capital is starting to treat identity security as a sovereign capability, not just another software category.
Talking Point
Can Canadian cybersecurity firms turn U.S. federal proof into domestic critical infrastructure adoption before cyber resilience becomes a procurement emergency?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
NCFA Weekly Fintech Intelligence May 23-29, 2026
May 29, 2026 | NCFA Fintech Whisperer Weekly Intelligence | Payments And Market Infrastructure, Artificial Intelligence And Data, Digital Assets Blockchain And Tokenization, Capital Markets And Market Infrastructure
Image: Freepik
This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors. This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis. (Missed prior week's Fintech Whisperer? (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026).
Weekly Fintech Market Intelligence May 23 - 29, 2026
Artificial Intelligence And Data
UK ICO Plans AI And Agentic Systems Guidance
May 27, 2026, United Kingdom
- The ICO says it will develop an AI and ADM statutory code of practice to clarify data protection requirements for organizations developing and deploying AI systems.
- The regulator will publish guidance on how agentic AI systems can comply with UK GDPR.
- The ICO also plans public guidance on personal data use in AI tools and transparency resources for SMEs and public bodies procuring cloud based AI services.
AI compliance is moving from broad principles into operating guidance for agents, automated decisions, procurement, and personal data use. Fintechs, banks, insurers, regtech firms, and AI vendors should track how privacy rules shape AI product design, governance, and customer trust.
Payments And Market Infrastructure
Bank Of Canada Joins BIS Project Agorá Wholesale Settlement Tests
May 27, 2026, Canada
- The Bank of Canada joins the next phase of BIS Project Agorá after the project tested wholesale cross border settlement using tokenized commercial bank deposits and wholesale central bank money.
- The BIS published a 97 page Project Agorá report covering unified ledger design, programmable settlement logic, liquidity coordination, and atomic settlement testing across jurisdictions.
- The project involves the BIS Innovation Hub, seven central banks, and major private financial institutions testing whether tokenized deposits and wholesale central bank money can improve cross border payment efficiency.
- The Bank of Canada says the next phase will test how the model performs with real value transactions and more complex settlement scenarios.
Project Agorá's focus is not retail crypto speculation. It is wholesale financial infrastructure, cross border settlement efficiency, programmable payments, and institutional control over tokenized money movement. Go deeper, visit NCFA's curated fintech reports and research library, where the BIS Project Agorá report is listed.
Fed Proposes Limited Payment Accounts For Eligible Firms
May 26, 2026, United States
- The Federal Reserve requests comment on special purpose Payment Accounts for legally eligible institutions to clear and settle certain payment activity through Reserve Bank accounts.
- The proposal would update the Payment System Risk Policy and Account Access Guidelines, with Payment Accounts separate from full Master Accounts.
- Payment Accounts would include tighter controls, including no intraday credit, no discount window access, no interest on balances, limited services, and balance limits generally capped at $1B.
- The Fed discusses use cases raised by commenters including stablecoin reserve operations, tokenized securities settlement, tokenized assets, pay by bank checkout, B2B transfers, instant wages, refunds, and the U.S. dollar leg of cross border transactions.
- Comments are due by July 27, 2026 under Docket No. OP-1878.
This is not open access to the Fed system. It is a narrower settlement pathway for legally eligible firms operating outside the traditional bank model. Stablecoin issuers, PSPs, crypto firms, tokenization platforms, and embedded finance providers should track whether limited Reserve Bank account access becomes a practical alternative to sponsor bank dependence. This connects to NCFA’s analysis of Fed Payment Accounts and fintech settlement access.
Digital Assets Blockchain And Tokenization
Open Transaction Layer Launches For Onchain Finance
May 28, 2026, United States
- Open Transaction Layer launches as an industry initiative for identity, messaging, and transaction coordination across onchain finance.
- Founding participants include Fireblocks, Checkout.com, Cross River Bank, MetaMask, Robinhood, Securitize, SoFi, Stellar Development Foundation, Solana Foundation, and others.
- The initiative targets coordination between institutions, wallets, protocols, and agents as tokenized finance and onchain payments become more complex.
Onchain finance needs shared coordination standards before institutional adoption can scale cleanly. Banks, wallets, PSPs, exchanges, tokenization platforms, and agentic payment builders should track whether identity, messaging, and transaction standards become competitive infrastructure rather than optional middleware.
Mastercard Receives New York BitLicense
May 27, 2026, United States
- Mastercard receives a New York BitLicense from the New York State Department of Financial Services.
- The approval expands Mastercard’s regulated digital asset permissions in New York, one of the strictest U.S. state licensing regimes for virtual currency activity.
- Mastercard says the licence supports its work across digital assets, stablecoins, and tokenized settlement services.
Large payment networks are adding regulated digital asset permissions to support stablecoin, tokenized settlement, and digital asset infrastructure at institutional scale. Banks, PSPs, exchanges, custodians, and fintech platforms should track which firms secure licences that let crypto services connect with mainstream payment networks.
SoFi Brings Bank Issued Stablecoin To 15 Million Members
May 27, 2026, United States
- SoFi says nearly 15 million members can now buy, sell, hold, and convert SoFiUSD directly inside the SoFi app.
- SoFiUSD becomes the first stablecoin issued by a U.S. national bank to launch on a banking platform.
- The stablecoin is issued by SoFi Bank, N.A. and is designed as a fully reserved, 1:1 redeemable U.S. dollar stablecoin operating on public blockchains.
- SoFi says upcoming features include blockchain based international transfers and conversion into interest bearing tokenized deposits.
Stablecoins are moving deeper into consumer banking distribution, not just crypto infrastructure. Banks, fintechs, PSPs, and regulators should watch whether regulated bank issued stablecoins begin competing directly with cards, deposits, remittance products, and embedded payment flows. Also supports this analysis of stablecoins becoming payment infrastructure.
Tether Plans Georgian Lari Stablecoin With Government Support
May 25, 2026, Georgia
- Tether says it plans to launch GEL₮, a stablecoin representing the Georgian lari, with support from the Government of Georgia.
- Reuters reports Tether did not clarify the exact structure of the partnership or whether the initiative would amount to a central bank digital currency.
- The initiative targets digital payments, cross border commerce, remittances, and fintech development using regulated digital fiat infrastructure.
National currency stablecoins are expanding beyond major economies. Stablecoin issuers, banks, PSPs, regulators, and treasury teams should track how smaller jurisdictions use digital fiat infrastructure to compete for payment flows, fintech investment, and cross border settlement.
Regulation And Policy
SEC Proposes Rescinding Climate Disclosure Rules
May 29, 2026, United States
- The SEC proposes rescinding its 2024 climate related disclosure rules in full.
- The Commission says the rules exceed its statutory authority, conflict with a materiality based disclosure model, and impose costs not justified by their expected informational benefits.
- The 2024 rules had been stayed since April 2024 during litigation and never took effect.
- Public comments will run for 60 days after publication in the Federal Register.
Climate disclosure is moving back toward company specific materiality rather than a dedicated SEC climate reporting regime. Public companies, fintech lenders, ESG data providers, regtech firms, investors, and capital markets platforms should track how climate risk reporting moves across U.S. federal rules, state rules, EU requirements, and voluntary investor expectations.
OCC Approves United Texas Bank National Charter Conversion
May 28, 2026, United States
- The OCC grants conditional approval for United Texas Bank to convert from a Texas state chartered bank into a national bank.
- The approval brings the bank under OCC supervision and includes conditions tied to governance, risk management, compliance, and Bank Secrecy Act controls.
- The charter conversion matters for firms watching how banks with digital asset, correspondent banking, and settlement ambitions move into federal supervision.
Bank charter strategy is becoming part of digital asset and payment infrastructure competition. Banks, fintechs, stablecoin firms, custodians, and compliance teams should track which institutions secure federal supervision, stronger operating permissions, and clearer access to national banking infrastructure.
France Warns Crypto Firms Ahead Of MiCA Deadline
May 28, 2026, France
- Reuters reports France’s markets regulator warned crypto firms they could face blacklisting and prosecution if they operate without EU authorization after the end of June.
- The warning raises the compliance stakes for crypto firms relying on transition periods under MiCA.
- The deadline affects market access for crypto asset service providers operating across EU jurisdictions.
MiCA is moving from licensing theory into enforcement risk. Crypto exchanges, custodians, wallet providers, brokers, and compliance teams should treat EU authorization, local regulator engagement, and operating perimeter checks as immediate market access priorities.
Spain Blocks Polymarket And Kalshi Over Gambling Licences
May 26, 2026, Spain
- Spain’s Consumer Rights Ministry temporarily blocks access to prediction market platforms Polymarket and Kalshi while regulators investigate whether the firms violated Spanish gambling law.
- Reuters reports Spanish authorities said both platforms operated without the administrative gambling licences required under national rules.
- The action includes disciplinary proceedings and ISP level access blocks expected to remain in place during the investigation period.
Prediction markets are moving deeper into conflict with gambling, derivatives, and securities frameworks. Exchanges, fintechs, tokenization firms, and prediction market operators should expect more pressure around licensing, market surveillance, consumer protection, and jurisdictional authority as these platforms expand globally.
U.S. Trade Chief Says Tariffs May Stay Under USMCA
May 26, 2026, United States
- Reuters reports U.S. Trade Representative Jamieson Greer said tariffs on some USMCA trading partners may remain even after the agreement comes under review.
- Greer said the United States has “significant issues” with Canada, while also saying there is room to work with both Canada and Mexico.
- The remarks add pressure to the 2026 USMCA review process as Canada faces renewed uncertainty around cross border trade, investment, manufacturing, and supply chains.
USMCA risk is now back inside Canada’s competitiveness file. Fintech lenders, payment firms, investors, marketplaces, and platforms serving SMEs should watch how tariff uncertainty affects customer margins, capital demand, foreign exchange exposure, supplier payments, and cross border expansion.
UK Targets Russian Crypto Networks In New Sanctions Package
May 26, 2026, United Kingdom
- The UK government announces new sanctions targeting Russian illicit finance and sanctions evasion networks.
- The package includes crypto and financial infrastructure used to move funds through backdoor routes around sanctions.
- The action adds pressure on exchanges, PSPs, compliance providers, banks, and blockchain analytics firms monitoring cross border sanctions exposure.
Crypto sanctions enforcement now reaches deeper into financial infrastructure networks, not just individual wallets or isolated actors. Exchanges, custodians, PSPs, banks, compliance teams, and blockchain monitoring firms should expect more scrutiny around transaction tracing, counterparty checks, and sanctions controls tied to digital asset flows.
ESMA Consults On CSDR Messaging Protocol Updates
May 26, 2026, Europe
- ESMA opens consultation on amendments to its guidelines for standardised procedures and messaging protocols under CSDR.
- The consultation targets post trading operations for investment firms, credit institutions, central securities depositories, CSD participants, and professional clients.
- Comments are due by July 7, 2026.
Post trading rules are becoming more important as Europe modernizes settlement operations, CSD messaging, and market infrastructure controls. CSDs, brokers, banks, custodians, tokenization platforms, and compliance teams should track how messaging standards affect settlement efficiency, operational risk, and future market infrastructure integration.
Capital Markets And Market Infrastructure
Paxos Receives SEC Clearing Agency Registration
May 28, 2026, United States
- Paxos says Paxos Securities Settlement Company received SEC clearing agency registration under Section 17A of the Securities Exchange Act.
- The registration allows PSSC to provide clearing and settlement services as a central securities depository in the United States.
- Paxos says PSSC is the only blockchain native firm approved as a registered clearing agency for this role.
Blockchain based settlement is moving into formal U.S. market infrastructure permissions. Brokers, custodians, tokenization platforms, exchanges, and asset managers should track how SEC registered clearing models affect securities settlement, custody design, and tokenized market structure.
Cash App Investing Selects Apex For Clearing Infrastructure
May 28, 2026, United States
- Cash App Investing names Apex Ascend as its strategic clearing platform for millions of retail investors.
- Apex will support custody, clearing, trading infrastructure, and future product expansion through AscendOS.
- Cash App serves more than 59 million monthly transacting actives, making the clearing transition a mainstream fintech infrastructure event.
Retail investing scale increasingly depends on back end clearing and custody infrastructure. Fintech platforms, brokers, clearing firms, embedded finance providers, and regulators should track how large consumer apps choose clearing partners that can support faster launches, broader products, and stronger operational controls.
Conclusion
This week was less about crypto adoption and more about who gets trusted access to the pipes. The Fed tested a narrow settlement account, Paxos received SEC clearing agency registration, Mastercard secured a BitLicense, SoFi launched a bank issued stablecoin, and Project Agorá moved wholesale tokenized settlement into deeper testing. The fresh lesson is that access is becoming tiered. Firms won’t all get the same rails, licences, or settlement rights.
NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets, subscribe to NCFA weekly newsletter updates, view a rundown of current fintech news and insights, or dive into the latest fintech industry research.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Quantum Bridge Raises USD $8M For Quantum Security
May 27, 2026 | NCFA Market Activity | Funding, Risk Compliance And Regtech, Banking And Credit Infrastructure
Quantum Bridge Raises Capital For Quantum Safe Networks
On May 20, 2026, Toronto based Quantum Bridge Technologies announced a USD $8M Series A round to expand its quantum safe cybersecurity business for financial institutions, telecom networks, governments, and defence organizations. The University of Toronto spinout says the financing brings its total funding to USD $16M.
Quantum Risk Enters Budget Cycles
Quantum Bridge’s DSKE technology helps organizations create, distribute, and manage symmetric keys across existing networks. The company says customers can add the system across current vendors, security layers, and network environments without replacing core infrastructure.
The timing makes sense given that NIST released its first three post quantum encryption standards in August 2024 and urged system administrators to start moving to the new standards. In Canada, the Cyber Centre’s post quantum migration roadmap gives federal departments a planning model for transitioning non classified IT systems to post quantum cryptography.
Canada Needs Deployment Ready Quantum Firms
Canada has strong, award winning quantum researchers. Buyers need tools they can audit and apply to real networks at scale. Quantum Bridge is actively pitching that to the market directly, and not asking customers to wait for a future quantum event. It's selling a migration solution for institutions that already manage long lived data, critical communications, and regulated infrastructure.
That connects directly to fintech. Payments, digital identity, custody, banking APIs, cloud security, and customer data protection all rely on cryptography. Infrastructure teams are in need of cryptographic agility before regulatory pressure and vendor bottlenecks make upgrades harder.
Funding Follows Infrastructure Demand
The Series A gives Quantum Bridge more room to sell into high trust markets where procurement takes time and credibility counts. The investor group also tells a useful story. The round brings together venture capital, telecom exposure, enterprise technology, and cross border capital. That mix fits a company selling security infrastructure into finance, telecom, government, and defence.
See: BTQ Updates Quantum Security Commercial Roadmap
Mattia Montagna, Co Founder and CEO, Quantum Bridge Technologies:
“National security can’t wait for perfect conditions. We build quantum-safe systems that work inside real networks today — systems designed to keep protecting sovereign communications as the threat landscape evolves. This funding means we can meet more organizations where they are, and get them protected faster.”
Talking Point
Quantum Bridge’s financing shows where Canadian quantum policy needs to support execution. Canada should help qualified domestic firms prove their systems inside critical sectors before global buyers define the market without us.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
