Karsten Wenzlaff, Advisor
August 26th, 2025
Karsten Wenzlaff is a Crowdfunding and Fintech Expert from Germany. He is Secretary-General of Digit[...]
Category Archives: Enterprise, Scaleup
Scotiabank, TELUS Launch Canada’s AI Consortium
July 8, 2026 | NCFA Insight | Artificial Intelligence And Data, Risk Compliance And Regtech, Digital Identity And Trust, Cybersecurity And Fraud, Fintech And Innovation
Canada’s AI Consortium Builds Shared Agentic AI Controls For Regulated Enterprises
On July 7, 2026, Lightworks, Scotiabank, Sun Life and TELUS launched The AI Consortium to jointly build critical AI control infrastructure in Canada. Lightworks will operate the consortium’s infrastructure and coordinate deployment across members.
The first project is an Agentic Control Plane, described as a system for enterprise visibility and control across models, agents, users and inference pipelines (think regulated enterprises). Future projects named in the release include an AI Operations Center and AI Token Exchange.
The announcement points to the reality that Canadian regulated enterprises are beginning to pool the control systems they’ll need before agentic AI reaches banking, insurance, telecom, compliance, fraud, advice and operations at scale.
Shared Infrastructure Cuts Cost And Dependency
The consortium model solves a practical problem. AI control infrastructure is expensive to build alone. Banks, insurers and telecom firms have similar needs around agent visibility, permissioning, audit trails, inference monitoring, incident response, cyber controls, governance evidence and internal authority.
Building those controls separately inside every firm creates duplicated cost and slower learning.
Pooling engineering, research and governance resources can lower build costs, spread deployment lessons across members and create shared IP that Canadian firms can improve together.
There is also a competitive angle. Large U.S. AI firms are already building control points around cloud platforms, chips, data centres, model access, enterprise tools and distribution. The AI Infrastructure Partnership from BlackRock, Global Infrastructure Partners, Microsoft and MGX was designed to invest in data centres and supporting power infrastructure, with a stated goal of mobilizing up to $100 billion including debt financing.
Canadian firms can buy AI tools from global providers, but the risk is eroding domestic sovereignty as buying isn't the same as control.
If banks, insurers and telecom firms rely entirely on outside platforms for agent permissions, runtime monitoring, audit evidence and governance records, they risk becoming downstream users of systems they can't shape and certainly not control. Shared Canadian infrastructure gives them a way to build capability, retain control knowledge and compete before foreign platforms define how enterprise AI is governed.
Collaboration also creates governance questions. If member firms rely on common systems for agent permissions, policy enforcement, monitoring, logging and deployment standards, that shared system becomes important infrastructure. Governance, failure handling, evidence retention, security incidents, membership, commercialization and Canadian IP will all shape whether the model becomes durable.
Those questions come with any shared system that becomes strategically important.
Agentic AI Needs Runtime Governance
Traditional AI tools may summarize documents, classify records or support customer service. Agentic systems can act across tools, workflows and data environments, which alters the risk profile.
Companies need to know which agents are active, which models they use, which users can deploy them, what systems they can touch, what actions need human approval, how outputs are logged and how failures are detected.
The consortium’s Agentic Control Plane directly targets that problem by focusing on visibility and control across models, agents, users and inference pipelines.
The UK FCA’s Mills Review examines how AI may affect retail financial services, consumers, firms, markets and regulation. Reuters reported that the review raised concerns around AI driven financial advice, customer harm, fraud, cyber risk and reliance on a small number of technology providers.
Singapore is already more specific on agentic finance. The Monetary Authority of Singapore’s Safeguards for Agentic Finance at Runtime work focuses on how AI agents in financial services can operate safely, securely and reliably.
Regulated firms need more than AI principles. They need controls that define what agents can do, how human oversight is triggered, what gets recorded and how firms respond when something goes wrong.
Banking And Insurance Bring The Risk Into View
Scotiabank and Sun Life's participation make this financially relevant.
Agentic AI could eventually support customer service, claims handling, fraud monitoring, compliance workflows, credit support, treasury operations, internal software development and employee productivity. Those are implications, not confirmed consortium use cases.
AI agents in financial services may touch sensitive data, regulated advice boundaries, customer records, third party tools, payment workflows, fraud controls and internal decision processes. The more useful agents become, the more important it becomes to know who approved them, what they accessed, what they did and how exceptions are handled.
Control infrastructure needs to come before wider spread deployment.
Canada’s AI Infrastructure Question Is Bigger Than Compute
The consortium also fits a wider Canadian AI infrastructure theme.
In May 2026, the Government of Canada and TELUS advanced work on sovereign AI infrastructure. That project is separate from the consortium and should not be conflated with it.
Still, the direction is consistent. Canada is trying to build more domestic AI capability rather than rely only on external platforms.
Sovereign AI is not only compute. For regulated sectors, it also means governance systems, audit evidence, agent controls, security practices and operational knowledge that Canadian firms can shape directly.
Industry consortiums usually appear when a problem is too expensive, risky or systemically important for firms to solve alone. Financial services has seen this pattern before in shared utilities, payment systems, identity programs, fraud controls, standards bodies and market infrastructure. AI is entering similar territory because the costs and risks are common across regulated firms.
The consortium structure could create practical benefits, such as common controls, faster security learning, better incident response patterns, shared governance evidence and stronger procurement leverage with external AI providers.
What's Next
This trend aligns with agentic AI risk and governance, where the core issue isn't only what agents can do, but who controls them. It also connects to regulated AI control gaps around data, vendors, fraud and operational risk.
The financial crime angle is important too. AI, programmable finance and financial crime are converging as bad actors use automation while regulated firms try to strengthen controls.
For NCFA's Financial Innovation Map, the relevant nodes include Agentic Finance, AI Governance, Digital Identity And Trust, Regtech, Cybersecurity And Fraud, Operational Risk, permissioned agents, auditability and sovereign AI infrastructure.
Follow-up questions are whether additional regulated firms join, whether regulators reference the model, whether the AI Operations Center is launched, and how the AI Token Exchange is defined in practical terms.
Will the consortium publish standards, audit methods or governance patterns? Does it commercialize infrastructure beyond founding members? Does it create shared security practices? Does it become a Canadian regulated sector AI utility?
Talking Point
If Canadian firms build shared AI control infrastructure to reduce cost, learn faster and compete with global platforms, who governs the control system once agentic AI becomes critical to banking, insurance and telecom operations?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)
 |  |  |
|---|---|---|
 |  |  |
OSFI Fast Track And Streamlined Approvals Framework
NCFA Regulatory Process Intelligence
OSFI Fast Track Approvals
Streamlined Approvals Framework For Targeted New Entrants
OSFI Fast Track And Streamlined Approvals Framework
Often described as the OSFI fast track, OSFI's Streamlined Approvals Framework gives eligible applicants a clearer route into Canada's federal financial system. It applies to provincial credit unions seeking federal continuance and to entities with innovative or emerging banking models, including fintechs or crypto asset custodians, seeking bank or federally regulated trust and loan company status.
What this guide adds: the official pages, toolkit materials, checklists and process guidance are reorganized into one applicant workflow with interpretation, delay risks, evidence expectations and related intelligence.
Live frameworkIndicative timelinesProcess intelligence
Is the Streamlined Approvals Framework Right For You?
This is not a universal fintech route. OSFI limits the framework to two target groups and directs entities outside scope to existing approval processes.
Provincial Credit Union
PCUs need an established business model, operating history, provincial supervisory track record, capital capacity, scalable systems, member engagement plan and a viable provincial discontinuance path.
Innovative Model
Innovators need a meaningfully different banking model or product, a credible institution destination, financial strength, governance, business plan, risk capability and evidence that federal regulation is needed.
Other Routes
Payment firms, platforms, lenders and vendors may need RPAA registration, securities registration, provincial licensing or partnership models rather than federal institution status.
Approval Journey
OSFI publishes stage targets, not a guaranteed end to end timeline. Actual timing depends on applicant preparation, completeness, security checks, statutory decisions and responsiveness.
1
Initial Contact
Rolling intake. Applicant contacts OSFI when ready.
2
Pre-Application
Self-assessment, evidence build and early preparation.
3
Phase 1 Readiness
Readiness Assessment letter within 4 weeks after meeting.
4
Phase 2 Formal Review
12-month OSFI target after complete filing is acknowledged.
5
Minister Decision
Separate statutory decision. No OSFI target stated.
6
Phase 3 Readiness*
About 3 months where OCCB readiness review applies.
*Phase 3 note: Operational readiness applies where an Order to Commence and Carry on Business is required. For local cooperative credit societies continuing as federal credit unions, Letters Patent and OCCB are issued together.
Budgeting estimate: Where applicable OSFI targets apply, the published target stages add up to roughly 16 months plus applicant preparation, completeness review, security checks, Ministerial decision timing and remediation. This is an expectation management estimate, not an approval guarantee.
Regulatory Process Intelligence Explorer
Choose the applicant path, then click a step. Each step brings OSFI's requirements together with applicant preparation, timing expectations, source documents, delay risks and Analysis.
PCU Flow
Rolling intake
Screening | Is the PCU actually in scope?
Purpose
Screening is the point where a provincial credit union tests whether the streamlined framework is the correct doorway. The question is not simply whether the organization wants federal status. The question is whether the applicant is already close enough to federal readiness that a targeted, risk-based pathway makes sense.
What OSFI is trying to determine
OSFI is looking for a supervised provincial credit union with an established model, a credible reason to continue federally, an operating history that can be assessed, and a practical path for leaving the provincial framework. The applicant also needs to be prepared for conditions, restrictions or other mitigants at entry where OSFI considers them appropriate.
Analysis
This is a fit test, not a speed lane. A PCU that cannot explain the strategic necessity of federal continuance, the member value proposition and the readiness plan is likely to spend time and money before the real blocker becomes visible.
Assessment Checklist
Evidence readiness
Institution profileProvincial status, operating history, ownership and member structure.
Federal rationaleWhy FCU status is needed and what market or operating problem it solves.
Continuance pathProvincial discontinuance steps, member engagement and transition feasibility.
Readiness signalCapital, liquidity, systems and governance maturity sufficient for a federal discussion.
Step Toolkit
Related NCFA intelligence
OSFI fast-track background
Target: readiness letter within 4 weeks after meeting
Phase 1 Initial Readiness Assessment
Purpose
Phase 1 lets OSFI review enough information to understand the applicant's ownership structure, financial strength, business plan, governance, federal continuance rationale, readiness gaps and overall suitability before the formal application begins.
Ownership and financial strength
The PCU should be ready to disclose its jurisdiction and establishment date, organization chart with ownership percentages, substantial investments, significant interests, voting rights over 10%, ownership distribution, sources of capital for initial and ongoing support, financial services and non-financial activities, three years of audited financial statements, any credit rating, and any prior denials, criminal proceedings or administrative sanctions.
Business plan and federal case
The five-year business plan needs to explain why the applicant wants to continue as an FCU, what transitional relief may be requested, target markets, opportunities, competitors, strategic assumptions, lines of business, product and service integration, risk-based capital and leverage ratios, pro forma financial statements, organizational structure, board and management composition, SMSB categorization, internal capital and liquidity targets, initial exit strategy and the work already performed to prepare for federal continuance.
Timing and output
The four-week target applies after the readiness meeting, not after first contact. The output is a readiness letter that helps determine whether the applicant should proceed and what OSFI expects next.
Analysis
Phase 1 should expose the real work before the formal application. The strongest applicants will treat it as a board level readiness review across business strategy, capital, member mandate, systems, governance and provincial transition planning.
Assessment Checklist
Readiness workstreams
Federal gap analysisMaterial gaps against federal legislation and OSFI expectations, with remediation plan and timing.
Capital and liquidity transitionPlans leading up to federal continuance, including internal targets and stress logic.
Stakeholder pathMember engagement, key stakeholder engagement, membership vote timing and provincial requirements.
Central relationshipsOperational relationships or investments involving a credit union central and any planned changes.
Step Toolkit
Use this for
Pre-meeting evidence build, readiness self-assessment and early gap analysis.
Before Phase 2
Member Vote and Disclosure Notice
Purpose
PCUs have a specific member authorization branch because federal continuance affects members and requires a special resolution process. OSFI must approve the Disclosure Notice before the member vote and before Phase 2 materials are submitted.
What must come together
The PCU has to prepare a member package, draft Disclosure Notice, timing plan, CDIC consultation path and special resolution process that allow members to understand the implications of continuing as an FCU.
Analysis
This is where the PCU path stops being a regulator-only process. Stakeholder confidence, member education and transition governance matter as much as document preparation.
Assessment Checklist
Critical dependencies
Disclosure qualityThe member-facing explanation must be clear enough to support informed approval.
CDIC consultationDeposit insurance and member protection implications must be handled correctly.
Provincial discontinuanceFederal continuance cannot be planned in isolation from provincial exit requirements.
Board and member alignmentThe vote can become a strategic risk if the value proposition is not clear.
Step Toolkit
Use this for
Member vote sequencing and disclosure package planning.
Target: 12 months after complete filing acknowledged
Phase 2 Formal Application Review
Purpose
Phase 2 is the formal review of the application for Letters Patent. It turns the readiness discussion into a complete filing and gives OSFI the evidence needed to make a recommendation.
Application package
The PCU package includes the formal application, Canada Gazette and newspaper notice, fees, evidence of member authorization, financial projections, stress cases, business strategy, transition plan and responses to information requests. The 12-month target begins only after OSFI acknowledges the filing is complete.
Prudential evidence
OSFI is assessing board composition, committee structure, oversight functions, management responsibilities, risk management, related-party arrangements, regulatory compliance management, privacy, fraud controls, records, outsourcing, operational risk, business continuity, disaster recovery, capital adequacy, liquidity and the ability to operate under federal expectations.
Analysis
The main risk is treating Phase 2 as a document exercise. It is really a proof of supervisability exercise. The filing must show that the institution can operate federally, not just that it can describe federal expectations.
Assessment Checklist
High-friction areas
Integrity and securitySecurity Information Forms and the Integrity and Security Questionnaire should not wait until late in the process.
Operational resiliencePolicies are not enough. OSFI needs evidence that controls, vendors and systems can operate.
Capital and liquidityTargets, instruments, projections and assumptions need to connect to the business model.
Exit and recoveryApplicants need a credible path if the strategy fails or federal continuation becomes unsustainable.
Step Toolkit
Related NCFA intelligence
Prior NCFA OSFI coverage
Application review and decision outcome
Minister Decision and Letters Patent
Purpose
OSFI may recommend approval, but the statutory Ministerial decision remains a separate dependency. This is why OSFI's published stage targets should not be converted into a guaranteed approval date.
Applicant management issue
Applicants need to keep operating plans, member communications and investor expectations current while the statutory decision is pending. Unresolved conditions, security issues or policy considerations can affect timing and certainty.
Analysis
Process transparency helps reduce ambiguity, but it does not eliminate statutory discretion. Any external communication should separate OSFI review targets from final approval and launch readiness.
PCU exception
Commencement and OCCB
Purpose
For local cooperative credit societies continuing as FCUs, Letters Patent and the Order to Commence and Carry on Business are issued at the same time. That makes practical readiness part of the formal application build, not a later phase.
What must be ready
The applicant needs completed continuance mechanics, final transition controls, member and provincial transition work, implementation readiness and the ability to operate federally on commencement.
Analysis
PCUs should not wait for approval to build launch readiness. The pathway compresses approval and commencement, which makes early operating preparation more important.
Step Toolkit
Official source documents
FCU continuance guideUse this for
Federal credit union continuance mechanics.
Outcome
Operate | Federal Credit Union
Outcome
The applicant enters ongoing federal supervision and must operate with federal expectations for governance, capital, liquidity, risk management, operational resilience, regulatory reporting and compliance.
Analysis
Approval is the beginning of supervised scale. The commercial value of federal status depends on whether the institution can convert federal reach into durable member value and operational resilience.
Innovator Flow
Rolling intake
Screening and Innovative Model Fit
Purpose
Screening tests whether the applicant is actually a targeted new entrant with a technologically innovative or emerging banking model, and whether the proposed destination is a bank or federally regulated trust or loan company rather than a lighter regulatory path.
What OSFI is trying to determine
OSFI is looking for a model that is meaningfully different through operating model, capability, distribution framework, process design, efficiency, cost, speed, resilience, accessibility, risk management or product design. The model also needs to justify entry into the federal prudential perimeter.
Analysis
The first strategic test is not "is this fintech innovative?" It is "does federal institution status unlock a capability the firm cannot reach faster and more safely through another route?"
Assessment Checklist
Evidence readiness
Model clarityWhat is different, who it serves and why it needs regulated institution status.
Institution destinationBank, trust company or loan company path, with the proposed activities tied to that choice.
Operating proofTechnology, controls, management, funding and risk capabilities behind the model.
Alternative path testWhy partnership, RPAA, securities registration or provincial licensing is not enough.
Step Toolkit
Related NCFA intelligence
OSFI fast-track background
Target: readiness letter within 4 weeks after meeting
Phase 1 Initial Readiness Assessment
Purpose
Phase 1 gives OSFI a written submission and meeting basis to review the applicant's business model, governance, ownership structure, financial resilience and overall readiness before the formal application.
Ownership and financial strength
The innovator should be ready to provide jurisdiction and establishment date, corporate group chart with ownership percentages, 10%+ voting interests, voting or control arrangements, affiliates and activities, Canadian operations, regulatory oversight by jurisdiction, government ownership interests, access to ongoing financial support, three years of audited consolidated financial statements, credit rating if available, prior denials and any criminal proceedings or administrative sanctions.
Business plan and prudential case
The five-year business plan should explain why the proposed FRFI is needed, target markets, opportunities, competitors, success assumptions, each line of business, products and services, how lines of business interrelate, liquidity metrics including NCCF and LCR, risk-based capital and leverage ratios on a Basel III basis, five-year pro forma financial statements, reporting lines, senior management responsibilities, board composition, SMSB categorization and an initial exit strategy.
Analysis
Phase 1 is where a fintech should prove it is institution-ready. Innovation may create the reason to apply, but governance, financial strength, ownership transparency, capital planning and exit credibility determine whether the application can proceed intelligently.
Assessment Checklist
Readiness workstreams
Capital and leverageInitial leverage ratio assumptions should be discussed with OSFI; OSFI notes that the initial leverage ratio typically falls in the 8 to 12 percent range depending on the business, risk profile, owner strength and capitalization.
Financial statementsForeign entities need a comparison between the accounting standards used and IFRS.
Exit strategyThe applicant needs an early view of how it would exit the federal system if unable to execute the business plan.
GovernanceOSFI needs to understand selected or sought directors and senior officers before the formal application.
Step Toolkit
Use this for
Pre-meeting evidence build and investor/board readiness review.
Decision point
Path Decision and Streamlined Review Fit
Purpose
After Phase 1, OSFI may provide preliminary views that help determine whether the applicant should move toward a formal application under the streamlined framework or use another existing approval process.
What the decision really tests
The decision is not approval. It is a path decision. A positive signal means the applicant may have enough fit and readiness to justify the heavier formal application. A weak signal may indicate that the model, capital plan, governance, ownership structure or institution destination is not yet credible.
Analysis
This is the cheapest point to stop, restructure, change the institution destination or choose a partnership route. Treat it as a strategic checkpoint, not an administrative transition.
Assessment Checklist
Common weak points
Unclear licence destinationThe applicant cannot clearly explain whether it needs bank, trust or loan company status.
Capital weaknessThe owner or applicant cannot show credible ongoing financial support.
Model mismatchThe activity may fit better under RPAA, securities registration, provincial licensing or partnership.
Governance gapBoard and senior management planning is not mature enough for prudential supervision.
Step Toolkit
Use this for
Deciding whether to advance, pause or switch paths.
Target: 12 months after complete filing acknowledged
Phase 2 Formal Application Review
Purpose
Phase 2 is the comprehensive formal review. It converts the Phase 1 business case into a complete application record that OSFI can use to assess whether to recommend approval.
Baseline statutory assessment
Across new-entrant applications, OSFI assesses whether the applicant has enough resources to support the proposed institution, whether business record and experience are appropriate, whether character, integrity and reputation are acceptable, whether national security or international obligations issues arise, whether the business plan is sound and feasible, whether risks are understood and can be controlled before commencement, whether initial capital protects depositors and creditors, and whether directors and senior officers have the necessary experience and competence.
Formal filing and financial evidence
The formal application needs notices, filing materials, service charge, financial projections, business plan detail, assumptions, stress and contingency analysis, capital and liquidity plan, major asset and liability categories, expense and income categories and evidence that the applicant can fund the regulated institution over time.
Governance, risk and operations
The formal checklist brings the applicant into deeper prudential territory: board effectiveness, senior officer roles, risk management framework, operational risk, third party arrangements, privacy, fraud, records, business continuity, disaster recovery, regulatory compliance management and internal controls. The filing should show how the organization will operate, not only who owns it.
Timing and delay risk
The 12-month target begins only after OSFI acknowledges a complete filing. In practice, missing evidence, weak assumptions, unresolved security checks, governance gaps, vendor dependencies, unclear capital support or unconvincing risk controls can extend the elapsed process.
Analysis
Phase 2 is not a bigger version of Phase 1. It is the proof of supervisability stage. Applicants should run parallel workstreams for capital, governance, risk, security, technology, legal, compliance and operating readiness rather than waiting for OSFI requests one by one.
Assessment Checklist
Expanded requirement areas
Integrity and securityIntegrity and Security Questionnaire, Security Information Forms and background checks should begin early.
Regulatory complianceApplicants should expect to demonstrate compliance-management capability, including alignment with OSFI regulatory compliance management expectations.
Exit planningExit plans should include triggers, steps, timing, cost and practical wind-down logic.
Conditions and restrictionsThe framework contemplates risk-based entry mitigants; applicants should plan for conditional launch scenarios.
Step Toolkit
Related NCFA intelligence
OSFI fast-track background
Application review and decision outcome
Minister Decision and Letters Patent
Purpose
OSFI may recommend approval, but Ministerial decision-making is a separate statutory dependency. This stage turns the supervisory recommendation into a formal approval decision where applicable.
Applicant management issue
Applicants should keep capital plans, staffing, vendor readiness, investor communications and public expectations aligned with the reality that OSFI's stage targets do not guarantee Ministerial timing or launch date.
Analysis
This is where the public dashboard may help with transparency if the applicant consents, but transparency is not certainty. External messaging should separate application milestone, statutory approval and operational launch.
Step Toolkit
Official source documents
Applicant progress dashboardUse this for
Public milestone tracking if the applicant consents.
Target: about 3 months where applicable
Phase 3 | Operational Readiness
Purpose
Phase 3 confirms whether the applicant is ready to begin business after approval. OSFI reviews whether key people, policies, processes and systems are in place and whether any remaining gaps require conditions, restrictions or remediation.
Operational evidence
Applicants should expect to provide evidence such as board and shareholder meeting materials, paid-in capital confirmation, incorporation and organization cost information, commitments around material business plan changes, the OCCB request and evidence that launch-critical systems, people, controls and policies are operating.
Analysis
This is where paper readiness becomes operating capability. Conditions can shape product scope, geographic scope, growth pace, partnerships, funding needs and early customer strategy.
Assessment Checklist
Launch-readiness tests
PeopleBoard, senior management, oversight functions and accountable roles are in place.
SystemsTechnology, data, vendor, reporting and control environments are ready for operation.
ControlsRisk, compliance, financial crime, privacy, fraud and incident processes can operate.
ConditionsAny restrictions or mitigants are understood, resourced and built into the launch plan.
Step Toolkit
Use this for
OCCB readiness and launch-condition planning.
Outcome
Launch as a Federally Regulated Institution
Outcome
The applicant begins operating as a bank or federally regulated trust or loan company and enters ongoing prudential supervision. The launch is not the end of the regulatory burden; it is the point where the applicant's operating model must meet the promises made through the application process.
Market capability
Depending on the approved institution type and conditions, approval may enable regulated banking or trust activity, custody and fiduciary services where permitted, deposit or lending activity if approved, or regulated partnership infrastructure.
Analysis
The commercial case depends on whether the federal status unlocks a durable capability that could not be reached faster through a lighter pathway. The strongest applicants will connect licensing strategy, product strategy, compliance infrastructure and capital strategy before Phase 2.
From Regulation to Market Development
NCFA’s regulation-to-market pathway shows how OSFI’s targeted approval process can translate into federal market entry, supervised launch and practical innovation opportunities.
OSFI Framework
Targeted new entrant approvals
→
Applicant Path
PCU or innovative model
↓
Provincial Credit Union
Federal continuance path
Innovative Model
Bank, trust or loan company path
↓
Federal Credit Union
Federal operating model, member growth, broader market reach
Bank / Trust / Loan Company
Regulated banking, custody, deposits or lending where approved
↓
Supervised Launch
Ongoing prudential supervision, conditions where applicable, reporting and risk controls
↓
Digital BankingAccount, lending and member service models
Trust and CustodySafeguarding and fiduciary infrastructure
Embedded FinanceRegulated partnership distribution
Stablecoin CustodyWhere trust, custody and compliance models fit
SME FinanceBanking, lending and operating account services
Compliance InfrastructureControls, reporting and regulated operating layers
Connected to the NCFA Financial Innovation Map
Regulatory approval is only one part of market development. This guide connects to NCFA's broader Financial Innovation Map, which organizes innovation capabilities, market opportunities, companies, evidence, milestones and regulatory intelligence across Canada's fintech ecosystem.
The OSFI streamlined approvals framework is a high bar pathway for targeted new entrants. It does not create a general fintech fast track. Where an applicant qualifies, the framework may connect to market themes such as credit union modernization, regulated custody, trust infrastructure, governance technology, SME finance infrastructure, open finance and business identity.
Continue Exploring
Use these links to go deeper into adjacent regulation, market entry strategy, resources and evidence connected to federal financial system entry.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Noah And Cedar Bring Stablecoin Payments To African Trade
July 6, 2026 | NCFA Fintech Market Activity | Payments And Money Movement, Digital Assets Blockchain And Tokenization, Risk Compliance And Regtech, Fintech And Innovation
Regulated Stablecoin Payments For African Trade
On July 1, 2026, Noah and Cedar announced a partnership to support compliant stablecoin payments between Africa and global markets.
Noah brings stablecoin payment APIs, named USD and EUR virtual accounts, programmable payouts, and global settlement. Cedar brings onboarding, FX, liquidity, KYC, AML, sanctions screening, PEP checks, and African payment corridor access.
The companies say testing is complete and live transactions are underway. This isn't another stablecoin demo. It's a payment product entering real business use cases and workflows.
A company moving money between Africa and global markets needs more than token transfer. It needs verified customers, usable accounts, FX, payout options, transaction monitoring, compliance records, and reconciliation.
Africa’s Cross Border Payment Costs Create An Opening
Africa is a strong test market because the payment problem is real (Read: opportunity).
The IMF says Nigeria received about $59 billion in crypto asset inflows between July 2023 and June 2024 and accounts for roughly 60% of stablecoin inflows in Sub Saharan Africa since 2019.
The IMF also says stablecoins let users receive remittances or make cross border payments in minutes, often at lower cost than traditional channels. The cost gap is hard to ignore. The average cost of sending US$200 to Sub Saharan Africa remains around 9%, compared with a global average of about 6%, according to IMF analysis reported by Reuters.
That doesn't automatically mean stablecoins are a clean fix. The IMF also warns about digital dollarization, illicit finance risk, weaker visibility for regulators, and pressure on domestic currency policy. But adoption and user demand isn't a mystery. When payment rails are slow, expensive, or hard to access, businesses and households look for another path.
Cedar Adds FINTRAC, FinCEN And RPAA Coverage
Cedar’s role is what makes the partnership more relevant for regulated fintech markets.
Cedar says it is registered with FINTRAC in Canada, FinCEN in the United States, and is also under Canada’s Retail Payment Activities Act. Its site also describes support for payments across 190+ countries and collections from 9 African markets.
That regulatory footprint gives the announcement a Canadian angle. Cedar isn't only an Africa corridor operator. It is also building under Canadian payment supervision at a time when Canada’s RPAA regime is bringing more payment service providers into formal oversight.
Corridor Strategy
Noah’s African activity isn't limited to Cedar.
In January, Noah and NALA launched a stablecoin settlement network for emerging markets, with instant USD settlement, real time local currency payouts, 24/7 treasury, and compliant flows between digital dollars and local money.
In March, Noah and Nafolo partnered to bring stablecoin powered virtual accounts to Sub Saharan Africa, targeting cross border payment friction for remote workers, students, families, and businesses. Noah said the partnership aimed to support more than 500,000 users.
Cedar adds another piece to this venture with regulated onboarding, compliance, FX, and African trade payment access. Together, these partnerships show Noah building around corridors where stablecoins can solve a real payment job.
Canada’s Stablecoin Question Is Product Design
For Canadian fintechs, the useful lesson is not that Africa is “ahead” or that stablecoins replace regulation. The lesson is that adoption starts where the payment job is painful enough.
African trade corridors show that clearly. Businesses need to collect money, convert currency, pay suppliers, manage treasury, verify counterparties, and keep records across borders.
Stablecoin Payments Need More Than Token Transfer
A stablecoin transfer is only one component. The commercial product itself is the bundle around it with virtual accounts, FX, compliance, treasury, payouts, reconciliation, and support for local payment endpoints.
Africa is an important test case because payment pain points are sharper, so the adoption incentive is stronger.
That connects directly to Canada’s stablecoin regulatory framework and programmable stablecoin payments. The product opportunity isn't token transfer by itself. It's software that makes cross border money movement easier to operate.
Talking Point
If stablecoin payments work best when compliance, FX, virtual accounts, and payouts are bundled together, will African trade corridors become one of the clearest markets for real business adoption?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
NCFA Weekly Fintech Intelligence Jun 27-Jul 3, 2026
June 27, 2026 | NCFA Fintech Whisperer | Payments And Market Infrastructure, Digital Assets Blockchain And Tokenization, Capital Markets And Market Infrastructure, Artificial Intelligence And Data, Risk Compliance And Regtech, Wealth And Asset Management
Image: Freepik
This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors. This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis. (Missed prior week's Fintech Whisperer? (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026).
Weekly Fintech Market Intelligence Jun 27 - Jul 3, 2026
Payments And Market Infrastructure
Swift Builds Cross Border Payments Framework For Consumers And SMEs
July 2, 2026, Global
- Swift is developing a payments scheme for faster, more predictable and more transparent international payments for consumers and SMEs.
- The framework includes upfront fee and FX transparency, full-value delivery, efficient last-mile processing and end-to-end transaction visibility.
- Swift said the scheme is being built with early adopter banks and more than 40 banks globally.
Cross border payments are getting clearer operating standards for retail and SME use cases. Banks, payment firms, remittance providers, fintechs and SME platforms should watch how fee disclosure, FX transparency, delivery certainty and last-mile processing become competitive requirements.
Vietnam And Singapore Launch Real Time Cross Border QR Payments
July 2, 2026, Vietnam / Singapore
- NAPAS, Liquid Group and VietinBank launched a QR payment connection that lets users of participating Singapore payment applications pay merchants in Vietnam.
- Transactions are processed in real time through VietQRGlobal with automatic conversion between Singapore dollars and Vietnamese dong.
- VietinBank serves as the settlement bank, and the initial rollout is expected to reach about 5 million users through Liquid Group’s Singapore partner network.
The connection gives Singapore users direct access to Vietnam’s domestic QR acceptance network without requiring merchants to install separate terminals. Singapore becomes the fourth ASEAN market and sixth jurisdiction connected to NAPAS, with outbound payments from Vietnam to Singapore planned later in 2026.
Worldline ING And Visa Complete Live Agentic Payment
July 2, 2026, Europe
- Worldline, ING and Visa completed a live end-to-end agentic payment transaction in Europe.
- The transaction combined AI agent purchasing, ING authorization, Visa payment infrastructure and biometric authentication.
- The companies said the demonstration shows agent-driven commerce can operate within existing payment and authentication frameworks.
Agentic payments are moving into live financial infrastructure. Banks, payment networks, merchants, PSPs, AI providers and fraud teams should watch how consent, authentication, agent identity and liability controls evolve for AI-initiated transactions, including the broader question of whether fintechs should design for people or AI agents.
Nuvei And Visa Complete In Agent Payment
July 2, 2026, Canada / Global
- Nuvei completed a live agentic commerce proof of concept with Visa, Arvato Systems and Kings and Priests.
- The transaction allowed a merchant AI agent to initiate a purchase and complete payment inside the agent using a tokenized Visa credential and live Visa rails.
- Nuvei said its agentic payments strategy will support protocol compatibility, Know Your Agent controls, agent risk scoring, network certifications and a developer sandbox.
Agentic commerce needs payment controls that work inside the buying flow. Merchants, payment networks, fintechs, issuers, fraud teams and AI platforms should watch how tokenized credentials, spend limits, approved categories, agent identity and audit trails define the next payment interface. NCFA's Financial Innovation Map tracks agent commerce infrastructure as an emerging opportunity.
Payments Canada Secures RTR By Law And Rule Approvals
June 30, 2026, Canada
- Payments Canada said the Real-Time Rail By-law and RTR Rules have received all required approvals.
- The By-law and Rules come into force on Aug. 24, 2026 and establish the core legal framework for Canada’s real-time payment system.
- Payments Canada said the legal framework supports safety, efficiency and resilience ahead of the RTR’s planned Q4 2026 launch.
Canada’s instant payments system now has the legal foundation needed for launch preparation. Banks, payment service providers, fintechs, merchants and compliance teams should track how RTR rules, access, fraud controls, ISO 20022 messaging and 24/7 operations change payment product design and competition.
BSP Identifies Wholesale CBDC Uses From Project Agila
June 30, 2026, Philippines
- The Bangko Sentral ng Pilipinas identified financial securities settlement and large value cross border payments as potential wholesale CBDC applications.
- The Project Agila report found that distributed ledger technology could support greater automation, faster processing and lower transaction costs.
- The BSP said Project Agila will guide its CBDC Roadmap and future work on high value CBDC use cases.
Wholesale CBDC work is concentrating on settlement infrastructure rather than retail money. Central banks, banks, market infrastructure firms, custodians and payment providers should watch how tokenised settlement, securities delivery and cross border liquidity use cases shape the next phase of central bank money innovation.
Bank Of Canada Reminds PSPs Of RPAA Reporting Duties
June 29, 2026, Canada
- The Bank of Canada reminded registered payment service providers of their ongoing reporting obligations under the Retail Payment Activities Act.
- PSPs came under Bank of Canada supervision and must report material incidents, significant operational changes, new retail payment activities, registration information changes, acquisitions of control and annual reporting information.
- The Bank said PSPs that do not meet reporting requirements may be in violation of the RPAA and subject to enforcement action.
Canada's retail payments regime is shifting from registration into active supervision. PSPs, fintechs, payment processors, compliance teams and investors should track how incident reporting, safeguarding information, annual reports and PSP Connect submissions become part of the operating cost of regulated payment activity.
Canada Pre Publishes Consumer Driven Banking Regulations
June 27, 2026, Canada
- The Government of Canada pre published proposed Consumer Driven Banking Regulations to implement the Consumer Driven Banking Act and launched a 60 day public consultation.
- The proposed regulations establish requirements for participant accreditation, technical standards, common rules, assessment fees, supervision and national security.
- The framework is intended to support secure consumer permissioned data sharing and reduce reliance on screen scraping as implementation begins in stages.
Canada's open banking framework is entering the implementation phase. Banks, fintechs, payment service providers, credit unions and technology providers should prepare for accreditation, technical integration and operational requirements as consumer driven banking moves toward production. See NCFA's Open Banking in Canada opportunity brief for the market gaps, adoption signals and infrastructure questions this framework is meant to address.
Digital Assets Blockchain And Tokenization
Bridge Secures MiCA And EMI Authorisations Across The EU
July 2, 2026, European Union
- Bridge secured Crypto-Asset Service Provider authorisation under MiCA and an Electronic Money Institution licence in Luxembourg.
- The dual authorisation covers all 27 EU member states and supports stablecoin services for European businesses and users.
- Bridge said the licences enable named IBANs, euro accounts, custom EUR-backed stablecoins, payouts and stablecoin-based settlement use cases.
Stablecoin payment firms are building through combined cryptoasset and e-money permissions. Fintechs, banks, treasury teams, payment providers and stablecoin issuers should watch how MiCA, EMI licences, IBAN access and euro stablecoin services define regulated market entry in Europe.
Wealthsimple Adds In App DEX Trading
July 2, 2026, Canada
- Wealthsimple introduced DEX trading inside its app, giving eligible users access to a wider range of on-chain tokens than its curated centralized crypto list.
- When a user makes a first DEX trade, Wealthsimple creates a self-custody wallet, and trades execute through a third-party DEX aggregator.
- Wealthsimple says DEX assets are not covered by insurance, do not share the same regulatory oversight as centralized crypto assets, and are outside centralized crypto purchase and loss limits.
Regulated retail crypto platforms are adding on-chain access while changing how custody, disclosure, risk controls and investor responsibility work. Brokers, crypto platforms, wallets, regulators and compliance teams should watch how self-custody DEX trading inside mainstream apps affects token access, suitability controls, tax reporting and Canadian crypto regulation and investor safeguards.
AscendEX Ceases Operations After Missing MiCA Authorization
July 1, 2026, Global / European Union
- AscendEX ceased operating on July 1 after entering the end of Europe’s MiCA transitional period without authorization. It also cited additional financial and operational pressures.
- The exchange stopped new accounts, deposits, trading, swaps, staking, lending and promotional services. Remaining account access is limited to withdrawals and other account exit functions.
- Update: AscendEX paused automated withdrawals on July 6 and placed every request under manual review, without assuring customers when requests would be completed or how much would be returned.
- The company said a counterparty failed to complete a strategic transaction intended to provide liquidity. AscendEX is assessing its financial position and acknowledged that unresolved balances could become subject to an insolvency or similar process.
The case combines a licensing exit with a failed liquidity transaction, withdrawal uncertainty and possible insolvency. Regulators and users can assess the effectiveness of the wind down through access to account records, withdrawal processing, financial disclosure and the treatment of unreturned balances. Canada’s registered crypto platforms operate under different rules. The same questions apply to custody, liquidity, capital, governance and orderly customer exits. NCFA’s comparison of MiCA and UK crypto rules explains how demanding authorization standards can favour firms with stronger operating infrastructure.
FalconX Receives MiCA Authorization For EU Digital Asset Services
July 1, 2026, European Union
- FalconX received Markets in Crypto-Assets authorization to expand regulated institutional digital asset services across the European Union and European Economic Area.
- The authorization supports institutional trading, custody, prime brokerage and related digital asset services under the MiCA framework.
- FalconX said the approval expands its regulated operating footprint for institutional clients across Europe.
MiCA is becoming the operating gateway for institutional digital asset firms. Trading firms, custodians, prime brokers, exchanges, asset managers and compliance teams should watch how authorization under a harmonized EU framework expands regulated cross-border crypto services.
Robinhood Launches Chain, Stock Tokens And Agentic Crypto Trading
July 1, 2026, Global
- Robinhood launched the public mainnet of Robinhood Chain, a Layer 2 blockchain built with Arbitrum for financial services and tokenized real world assets.
- The company introduced stock tokens through Robinhood Wallet in more than 120 countries, with 24/7 trading and DeFi use cases such as lending and collateral, subject to jurisdiction limits.
- Robinhood also announced onchain lending through Robinhood Earn, expanded perpetual futures in Europe, Canada availability through Coinsquare, and upcoming agentic crypto trading for eligible US users.
Retail investing is extending into onchain financial infrastructure. Brokers, crypto platforms, wallets, custodians, exchanges, wealth platforms and regulators should watch how tokenized equities, Layer 2 networks, onchain lending and AI directed trading reshape product access, market supervision and investor protection.
Bank Of England And FCA Define Joint Stablecoin Supervision
June 30, 2026, United Kingdom
- The Bank of England and FCA set out how they will jointly regulate systemic stablecoin issuers under the UK stablecoin regime.
- The approach explains how supervisory responsibilities will be allocated, how FCA rules interact with Bank requirements and how transition arrangements will apply when an issuer becomes systemic.
- The document also addresses stablecoin issuers that may be recognized as systemic at launch, where an issuer is likely to operate at systemic scale from the outset.
Stablecoin regulation is starting to look like payment system supervision. Issuers, banks, custodians, payment firms, exchanges and compliance teams should watch how systemic designation, transition planning and cross-regulator supervision affect market access for regulated digital money.
FCA Sets UK Crypto Rules And Authorisation Path
June 30, 2026, United Kingdom
- The FCA set out rules for crypto firms that support buying, trading, holding, custody, stablecoins, intermediation and staking.
- The framework includes financial resilience, capital, stress testing, market integrity, insider trading, market manipulation and stablecoin standards.
- Firms can apply for authorisation between Sept. 30, 2026 and Feb. 28, 2027, before the mandatory regime takes effect on Oct. 25, 2027.
The UK crypto market is getting a clearer operating perimeter. Crypto platforms, custodians, stablecoin issuers, intermediaries and staking firms should prepare for authorisation, capital planning, market conduct controls and compliance standards that bring crypto closer to mainstream financial regulation.
Open Standard Launches Open USD Stablecoin
June 30, 2026, Global
- Open Standard announced Open USD, a stablecoin for global money movement backed by more than 140 participating businesses.
- The model offers zero cost minting and redemption, no artificial volume limits, reserve earnings for partners, and collaborative governance through Open Standard.
- Participating firms include major payment networks, banks, fintechs, technology platforms, crypto firms and commerce companies.
Stablecoin competition is shifting toward scale, governance and distribution. Banks, payment networks, wallets, merchants, fintechs and stablecoin issuers should watch whether shared economics, partner governance and broad platform participation become a stronger model for digital money adoption.
STOKR Secures CASP And Payment Institution Licences
June 30, 2026, European Union
- STOKR secured Crypto Asset Service Provider and Payment Institution licences in Luxembourg ahead of MiCAR's July 1, 2026 enforcement deadline.
- The licences allow STOKR to operate across all 27 EU member states under a single harmonised framework.
- The authorisations support crypto asset custody, transfers, payment transactions, credit transfers, standing orders and stablecoin settlement for tokenized securities.
Tokenized securities need regulated payment and custody rails, not only issuance technology. Asset managers, administrators, custodians, stablecoin providers and tokenization platforms should watch how CASP and payment licences shape the full transaction lifecycle from subscription to redemption and payout.
BNY Adds USDC To Institutional Digital Asset Custody
June 29, 2026, United States / Global
- BNY expanded its relationship with Circle by adding USDC to BNY's Digital Asset Custody platform.
- The service allows institutional clients to store, transfer, mint and burn USDC through BNY.
- BNY said the capability supports institutional stablecoin custody, settlement and treasury operations.
Institutional stablecoin adoption is becoming part of regulated banking infrastructure. Banks, custodians, asset managers, payment firms and stablecoin issuers should watch how custody, minting, redemption and settlement services expand across institutional digital asset workflows.
Geoswift And SKUx Build Programmable Stablecoin Commerce Network
June 29, 2026, Global / United States
- Geoswift and SKUx announced a partnership to develop a programmable stablecoin commerce network connecting digital assets, traditional finance and real world commerce.
- The network combines Geoswift's stablecoin settlement, liquidity and compliance infrastructure with SKUx item level controls inside point of sale systems.
- SKUx said its SKUPay technology is already embedded in an estimated 50% of major US grocery and big box point of sale systems.
Stablecoin payments are starting to connect settlement with spending controls. Merchants, payment networks, wallets, stablecoin issuers, compliance teams and fintechs should watch how programmable rules, item level controls and point of sale integration expand programmable stablecoin payments in commerce.
Artificial Intelligence And Data
MAS Develops Safeguards For AI Agents In Finance
July 3, 2026, Singapore
- The Monetary Authority of Singapore and industry partners published Safeguards for Agentic Finance at Runtime.
- The SAFR approach focuses on policy-bound execution, real-time validation, auditability and interoperability for AI agents in finance.
- Use cases include agent-assisted payments, treasury operations, wealth and advisory workflows, compliance review and client engagement.
Agentic finance needs controls at the point of action. Banks, fintechs, payment firms, wealth platforms and compliance teams should watch how agent identity, authority, escalation, audit trails and transaction limits become core requirements for AI systems that can act on behalf of users.
Bank Of England Flags Agentic AI Financial Stability Risks
June 30, 2026, United Kingdom
- Bank of England Deputy Governor Sarah Breeden said agentic AI could reshape finance across cyber risk, trading, payments and commerce.
- The speech warned that AI agents could amplify cyber vulnerabilities, market volatility and operational risks as financial systems operate more autonomously.
- Breeden said existing technology neutral regulatory frameworks may not be sufficient because current frameworks were not built for autonomous agents.
Agentic finance is becoming a supervisory design question. Banks, fintechs, payment systems, trading firms, AI vendors and regulators should watch how consent, liability, agent identity, market controls, cyber resilience and accountability standards develop as autonomous systems enter financial workflows.
Capital Markets And Market Infrastructure
UK Launches Bond Consolidated Tape
June 30, 2026, United Kingdom
- The UK bond consolidated tape began operating through ETS Connect UK, combining post-trade data from UK trading venues and over-the-counter markets into a single source.
- The FCA said the launch makes the UK the first jurisdiction outside North America to implement a bond consolidated tape.
- The regulator will monitor data quality, completeness and timeliness as market coverage expands.
Market transparency increasingly depends on shared data infrastructure. Exchanges, trading venues, fixed income dealers, market data providers, asset managers and regulators should watch how consolidated bond market data improves price discovery, execution quality and market oversight.
Hong Kong Advances DLT Review For Fixed Income Markets
June 29, 2026, Hong Kong
- The FSTB and HKMA concluded the first phase of a review on distributed ledger technology use in Hong Kong fixed income markets.
- The review found Hong Kong’s legal and regulatory environment is sufficiently flexible for tokenised bond issuance.
- The next phase will examine legal changes for electronic execution, DLT record keeping, possession and transfer of tokenised fixed income instruments.
Tokenised capital markets need legal certainty as much as technology. Issuers, investors, custodians, exchanges, fund managers and regulators should watch how bond issuance, record keeping, settlement and transfer rules adapt as fixed income markets move onto distributed ledger infrastructure.
Risk Compliance And Regtech
FCA Proposes Enforcement Changes For Crypto Market Abuse
June 30, 2026, United Kingdom
- The FCA proposed targeted changes to its enforcement policies, including extending its financial penalty framework to cryptoasset market abuse.
- The consultation also proposes higher minimum penalties for the most serious individual market abuse cases, updated hardship thresholds and greater flexibility in settlement decisions.
- Comments are open until Aug. 10, 2026.
Crypto regulation is expanding beyond market access into enforcement. Cryptoasset firms, trading venues, brokers, compliance teams and market participants should prepare for enforcement policies that increasingly align digital asset markets with established financial market conduct standards.
AMLA Warns MiCAR Transition May Raise Financial Crime Risks
June 29, 2026, European Union
- The EU Anti-Money Laundering Authority issued an advisory note on money laundering and terrorist financing risks linked to the end of the MiCAR transitional period.
- The note warns that unauthorized virtual asset service providers may exit, customer relationships may transfer or end, and activity may concentrate among authorized crypto asset service providers.
- AMLA urged supervisors and firms to monitor customer migration, transaction flows, suspicious activity and risk changes as MiCAR implementation reaches the July 1, 2026 deadline.
Crypto regulation can create financial crime pressure during market transition. CASPs, VASPs, banks, payment firms, exchanges and compliance teams should watch how licensing deadlines, customer migration and supervisory coordination affect AML controls across Europe.
Wealth And Asset Management
FCA Proposes Simpler Investment Disclosure Rules
July 2, 2026, United Kingdom
- The Financial Conduct Authority proposed a simplified investment disclosure regime to help consumers better understand the costs and charges associated with investing.
- The proposal replaces overlapping disclosure requirements with a single framework covering investment products, distribution and advice, while supporting the Consumer Composite Investments regime due to take effect in June 2027.
- The FCA's consumer research found only 6% of existing disclosure documents were written in plain English, reinforcing the need for shorter, clearer and more comparable information.
Investment regulation increasingly focuses on communication as well as compliance. Asset managers, wealth platforms, advisers, fintechs and product manufacturers should prepare for disclosure requirements that prioritize clarity, comparability and consumer understanding alongside regulatory obligations.
Policy Regulation And Governance
CFTC Proposes Reporting Rules For Event Contracts
July 1, 2026, United States
- The CFTC proposed data reporting requirements for certain event contracts listed on designated contract markets and swap execution facilities.
- The proposal would add a new Covered Event Contracts section to Part 16 of CFTC regulations.
- The proposal requests comment on reporting, surveillance, trader identifying information and burdens for markets, intermediaries and traders.
Event contract regulation is moving from listing debates into market surveillance and data reporting. Prediction markets, exchanges, brokers, compliance teams and regulators should watch how reporting rules shape the boundary between derivatives, event markets, gambling and retail speculation.
Conclusion
The strongest fintech companies don't wait for certainty. They recognize patterns early, build where demand is growing and stay ready when regulation catches up. That's the value of watching the evidence, not just the headlines. NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets, subscribe to NCFA weekly newsletter updates, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Why Fintech Can’t Wait For Quantum Computing
July 3, 2026 | NCFA Insight | Cybersecurity And Fraud, Digital Identity And Trust, Risk Compliance And Regtech, Payments And Money Movement, Digital Assets Blockchain And Tokenization, Artificial Intelligence And Data
Post-Quantum Planning Starts Before The Threat Arrives
Governments are no longer treating post-quantum cryptography as a research topic. They're now publishing migration plans.
On June 22, 2026, the White House issued an order on advanced cryptographic attacks, including the risk that adversaries collect encrypted data today so they can decrypt it later. The same day, a separate White House order advanced U.S. quantum innovation across computing, sensing, networking, applications, and industry partnerships.
That combination is the useful development marker for fintech. Governments are funding quantum capability while also pushing organizations to prepare for the security risk that follows.
The financial sector doesn't need to know the exact year a cryptographically relevant quantum computer arrives before it starts planning. Long time customer data, payment credentials, digital identity systems, API certificates, custody systems, vendor software, archived records, and cryptographic keys may remain sensitive for years.
Quantum readiness is therefore becoming an operating requirement. Not someday. Now.
Governments Are Publishing Migration Plans
The policy picture is getting clearer.
NIST finalized its first three post quantum cryptography standards in August 2024. The standards are FIPS 203 for ML-KEM, FIPS 204 for ML-DSA, and FIPS 205 for SLH-DSA. NIST says organizations should begin migrating systems to quantum resistant cryptography.
NCFA has already tracked how post quantum cryptography is entering implementation, with payments, digital identity, secure messaging, APIs, and financial data all exposed to the migration challenge.
Canada has started, too. The Canadian Centre for Cyber Security published a roadmap for migrating Government of Canada non classified IT systems to post quantum cryptography, covering stakeholders, phases, milestones, governance, and departmental planning.
Financial authorities are paying attention too. The Bank for International Settlements published a quantum readiness roadmap for the financial system, and the G7 Cyber Expert Group issued a roadmap for the financial sector's transition to post quantum cryptography.
The practical message is this. Start with awareness, find where cryptography is used, assess risk, plan migration, and work with vendors before deadlines become urgent.
Today's Encryption Protects Tomorrow's Data
The hardest quantum risk is not only future system compromise. It is long term data.
Financial institutions protect account records, payments data, identity documents, loan files, custody records, private market documents, insurance records, tax files, transaction histories, and compliance archives. Some of that data must stay confidential for years or decades.
That creates the harvest now, decrypt later problem. An attacker can collect encrypted data now and wait for stronger decryption capability later.
For fintechs, this impacts the planning window. A company doesn't need to be systemically important to hold sensitive data. A payments provider, open banking intermediary, wallet provider, identity service, lending platform, wealthtech app, regtech vendor, or crypto custodian may all depend on cryptography that was never designed for a quantum era.
You Can't Upgrade Cryptography You Haven't Found
Post quantum migration starts with discovery.
Most organizations know they use TLS, certificates, signing keys, databases, cloud services, APIs, authentication systems, payment connections, and vendor platforms. Fewer have a current inventory of which cryptographic algorithms protect each system, which assets must remain confidential long term, and which vendors control the upgrade path.
That's why cryptographic inventory keeps appearing across official guidance.
A fintech should be able to answer basic questions:
- Where are RSA, elliptic curve cryptography, key exchange, signatures, and certificates used?
- Which customer data must remain confidential for more than five, ten, or twenty years?
- Which APIs, identity tools, custody systems, payment rails, and cloud services depend on vulnerable algorithms?
- Which vendors control cryptographic updates?
- Which systems can support crypto agility without a major rebuild?
- Who owns the roadmap: security, compliance, engineering, risk, procurement, or the board?
Without that inventory, migration plans become guesswork.
Every Vendor Becomes Part Of The Migration
Fintech security is rarely managed by one company anymore.
A single product may rely on cloud hosting, identity verification, payment processors, data aggregators, card issuing platforms, custodians, wallet technology, fraud systems, CRM tools, analytics software, email providers, certificate authorities, and outsourced compliance systems.
That makes post quantum readiness a vendor risk issue.
A fintech can upgrade its own code and still remain exposed through a vendor that cannot explain its cryptographic dependencies. Banks and credit unions face the same issue in reverse. They may need to ask whether fintech partners can support post quantum requirements before onboarding, renewing, or expanding contracts.
The procurement question changes from "is this vendor secure today?" to "can this vendor survive a cryptographic transition without disrupting our product, customers, or regulatory obligations?"
Where Quantum Risk Already Exists
Quantum readiness touches more than cybersecurity teams.
In payments, cryptography protects authentication, transaction integrity, messaging, API connections, certificates, and sensitive account data.
In digital identity, it protects credentials, signatures, documents, device binding, verification records, and trust chains.
In crypto and digital assets, it touches wallets, custody, private keys, signing systems, transaction authorization, smart contract administration, and institutional key management. BTQ's quantum safe Bitcoin and stablecoin roadmap highlights one approach to preparing digital asset infrastructure for post quantum cryptography.
In open banking, it affects API security, consent records, data sharing, third party access, and customer authentication.
In capital markets, it touches trading access, fund administration, investor records, tokenized securities, transfer agency, data rooms, reporting, and long term documents.
In AI and data systems, it affects model access, training data, confidential records, synthetic data pipelines, and secure data exchange.
That breadth is why the topic belongs with executives, product leaders, compliance teams, boards, and investors, not only cryptography specialists.
Canada Has A Public Roadmap, But Fintech Needs Its Own
Canada's Cyber Centre roadmap gives public sector organizations a starting point. It also gives fintech and financial services leaders useful guidance that migration will take planning, governance, technical discovery, budgets, and coordination.
Canada doesn't yet have a full financial sector post quantum mandate comparable to a hard compliance deadline, but that statement should not create comfort.
Canadian fintechs operate in a global market. They sell into banks, credit unions, enterprises, governments, insurers, capital markets, payment networks, and regulated financial institutions. Their buyers may start asking post quantum questions before Canadian rules require formal answers.
A fintech that can show cryptographic inventory, vendor readiness, migration planning, and crypto agility may have an advantage in enterprise sales. A fintech that cannot answer basic questions may face longer diligence, higher security friction, or blocked procurement.
The Next Security Products Aren't Quantum Computers
The near term opportunity is not building quantum computers. It's helping financial organizations prepare for the cryptographic transition. Quantum Bridge's USD $8M raise shows Canadian capital already backing deployment ready quantum safe security for finance, telecom, government, and defence.
Product opportunities include:
- cryptographic inventory and discovery tools
- certificate and key lifecycle automation
- crypto agility platforms
- PQC testing environments
- vendor cryptography questionnaires and evidence systems
- identity modernization for quantum safe credentials
- custody and wallet security upgrades
- API and payment connection readiness testing
- regtech reporting for quantum readiness
- board and risk dashboards for cryptographic exposure
These opportunities are practical because they map to work financial firms already need to do. They need to know what they use, what they protect, which systems carry the highest risk, which vendors control dependencies, and how migration can happen without breaking production systems.
These are the kinds of tools that belong on NCFA's Financial Innovation Map, such as identity, payments, custody, regtech, data governance, and cyber resilience.
Preparation Starts Before The Deadline
Quantum readiness won't arrive as a single upgrade.
Organizations will need inventories, test environments, migration sequencing, vendor commitments, product changes, audit evidence, customer communications, and fallback plans. Some systems will be easy to update. Others will depend on old software, hardware limits, contracts, third party platforms, or regulatory approvals.
That's why waiting for a precise quantum break date is the wrong approach for operators. Ask yourself, your team, your leadership this simpler question, "If a regulator, bank partner, insurer, enterprise buyer, or board asked tomorrow where vulnerable cryptography sits in the business, could the company answer?"
For many fintechs, the honest answer is probably no. So that's the opening to start.
Takeaway: Post quantum cryptography isn't a distant science fiction story anymore. It's becoming part of how financial organizations prove they can protect data, manage vendors, maintain trust, and keep critical services running through the next security transition.
Talking Point
If post quantum readiness starts with knowing where cryptography lives, should fintech due diligence now include a cryptographic inventory before major bank, payments, custody, or identity partnerships?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)
| | |
|---|---|---|
| | |
Wealthsimple Launches In-App DEX Trading Beta
July 2, 2026 | NCFA Fintech Market Activity | Digital Assets Blockchain And Tokenization, Wealthtech And Investing, Digital Identity And Trust, Risk Compliance And Regtech, Fintech And Innovation
Self-Custody Meets Mainstream Investing
On July 2, 2026, Wealthsimple launched DEX trading in beta, giving eligible clients a way to trade on-chain tokens directly inside the Wealthsimple app.
The beta gives clients access to millions of tokens, starting with Ethereum-based assets. Base and Solana support are planned. The service charges a flat 0.85% trading fee and currently includes $0 network fees, which Wealthsimple Web3 Inc. covers during the early release.
This isn't the same product as Wealthsimple's centralized crypto account. When a client makes a first DEX trade, the app creates a separate self-custody wallet. The app holds DEX assets separately from centralized crypto holdings. They aren't insured, and don't have the same regulatory oversight as Wealthsimple's listed crypto offering.
Self-Custody Without A Separate Wallet App
A normal DEX user has to manage a wallet, fund it, connect it to a decentralized exchange, check token contracts, manage network fees, understand slippage, approve transactions, and protect private keys. As a result, there are a lot of steps that add complexity.
The beta removes much of that setup from the user experience. Its help guide says clients can search for DEX-labelled assets in the Discover tab, create a DEX wallet during the first trade, and buy or sell eligible DEX tokens directly in the app.
Behind the scenes, the app converts the funding asset into USDC. It then withdraws the funds to the self-custody wallet and routes the order through a third-party DEX aggregator before executing the trade.
Risk Checks Become Part Of The Product
Centralized crypto assets go through the platform's listing process, and the platform holds them on behalf of clients. DEX assets haven't gone through that centralized listing process.
Wealthsimple says a third-party vendor flags malicious tokens, and the app automatically filters them, and asset pages can display risk flags such as new asset history, top holder concentration, low holder count, low liquidity, sketchy token permissions, and artificial trading patterns.
Those flags are useful, but they aren't a safety guarantee. The help guide tells users to research tokens before trading and notes that blockchain transactions can't be reversed. If a client buys a scam or fraudulent token, the transaction can't be undone.
While the product lowers the operational barrier to on-chain markets, users still face risks that don't exist in the same way inside a curated centralized exchange custodial account.
DEX Assets Sit Outside Wealthsimple's Usual Protections
Clients hold WS DEX assets in a self-custody wallet. They aren't covered by insurance, don't have government-backed loss protection, and aren't held by Wealthsimple on the client's behalf.
The support team can't recover the wallet or reverse transactions if something goes wrong. The user authorizes trades, and the wallet sits outside Wealthsimple's centralized crypto infrastructure.
There are also product limits during early release.
- DEX assets can't currently be sent to or received from external wallets
- Users can't access the DEX wallet from another platform
- Beta supports only market orders
- Doesn't support staking
- Wealthsimple also doesn't provide a realized gains and losses report for DEX trades, so clients are responsible for tracking their own on-chain transactions for tax purposes
At the end of the day, there are limits to what the beta product is at this point. Embedded self-custody trading inside a controlled retail app, not a full open-wallet DeFi experience.
Wealthsimple Keeps Expanding Retail Market Access
Wealthsimple's IPO Access launch gave eligible retail investors a way to request shares in selected Canadian and U.S. IPOs before public trading. Wealthsimple's 2025 product event added zero fee options, real gold, and private market portfolios. Wealthsimple's Fey acquisition added AI research and trading tools to the roadmap.
DEX trading adds another access layer. Clients can use one app for listed securities, crypto, IPO access, options, gold, private market portfolios, and now on-chain token trading.
Most clients won't need millions of tokens. The acid test is whether the app can make on-chain trading simple enough to try without making the risks feel smaller than they are.
Canada's Crypto Access Model Is Splitting
One path is regulated centralized crypto access, where platforms list a smaller set of assets, hold assets through custodial arrangements, follow dealer rules, and provide clearer investor protections. Canadian crypto regulation has pushed platforms toward stronger custody, registration, and operating controls.
The other path is on-chain access, where users reach a broader token universe but also take on more responsibility for token risk, wallet access, tax tracking, execution, and irreversible transactions.
The beta sits between those paths. It keeps the user inside a mainstream Canadian app, but the assets trade through decentralized markets and sit in a self-custody wallet. That's different from both a traditional crypto exchange and a fully independent DeFi wallet.
Embedded On-Chain Trading Creates New Opportunities
Wallet usability becomes a core feature. Token risk intelligence becomes part of the trading interface. Slippage controls, routing quality, transaction monitoring, tax tooling, scam detection, and user education become operating requirements rather than extras.
Those areas connect directly to NCFA's Financial Innovation Map, including self-custody wallets, retail digital asset access, token risk analytics, on-chain finance, digital identity and trust, and compliance technology.
The opportunity isn't only trading more tokens. It's building the trust, data, user experience, and risk tools that let mainstream investors interact with on-chain markets without pretending those markets are safe by default.
Talking Point
If mainstream investing apps make self-custody DEX trading feel simple, will the next phase of retail crypto adoption depend more on token access or risk intelligence?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)
| | |
|---|---|---|
| | |
How To Use Cloud Data Lakes For Business Growth Analytics
July 2, 2026
Businesses produce large quantities of data from sales systems, customer interactions, marketing campaigns, websites and operational processes. Organising this information is necessary for identifying opportunities plus making decisions based on facts. Cloud data lakes are flexible environments where organizations store large volumes of structured and unstructured data in one place, which provides a basis for complex analytics but also business intelligence.
Traditional storage systems often require users to organize data before they store it. In contrast, cloud data lakes allow businesses to collect information from many sources and analyze it when necessary - this method helps organizations understand customer behavior, market trends, operational performance as well as potential for future expansion.
Understanding Cloud Data Lakes
A cloud data lake is a central location for storing raw data in its original form. It allows businesses to keep information that does not fit into standard databases. Data is available from websites, mobile applications, social media, sensors, financial systems and tools for managing customer relationships.
Flexibility makes cloud data lakes useful for growth analytics. Organizations are able to combine data from different departments without long preparation periods - this creates a complete view of business activities or helps teams find connections and patterns that are otherwise difficult to see.
Collecting Data From Multiple Sources
Gathering information from many business systems is a primary benefit of cloud data lakes. Marketing data, sales records, customer service interactions, inventory reports next to website analytics are stored together - this broad approach improves the quality and precision of business analysis.
Detailed understanding of performance across the entire organization is possible when businesses collect information from many sources. Analysts are able to study how marketing campaigns affect sales, how support affects customer retention or how inventory management relates to profit - these connections support strategic planning plus initiatives for growth.
Monitoring Business Performance
Growth analytics require the accurate measurement of performance. Free cloud storage supports constant monitoring - collecting information from operational but also financial systems quickly - this allows organizations to follow key performance indicators and react to changes.
Revenue growth, costs to acquire customers, operational efficiency as well as product performance are measurable through integrated tools. Finding performance issues early allows managers to fix problems before they change the final results significantly.
Improving Data Accessibility
Cloud data lakes make it simple for authorized teams to find information. Users retrieve data from a central location instead of searching through separate systems - this increases efficiency and reduces the time required for decision making.
Better accessibility also promotes cooperation between departments. Marketing teams, finance departments, operations managers but also executives use the same data. Decisions are consistent and follow the general goals of the business.
Supporting Advanced Analytics
Cloud data lakes provide the storage as well as computing power necessary for advanced analytical methods. Businesses use predictive analytics, machine learning models and statistical analysis to find patterns that help future growth - these tools allow organizations to look at future opportunities rather than only looking at past reports.
Complex analytics show trends in customer purchasing, identify segments of the market that produce profit or predict demand. By using these insights, businesses distribute resources effectively and make decisions that support expansion while avoiding unnecessary risks.
Enhancing Customer Insights
Understanding how customers behave is a vital part of business growth. Cloud data lakes allow organizations to join customer information from many channels, like websites, mobile apps next to purchasing platforms - this creates a complete profile of the customer.
Preferences, habits and engagement patterns are visible when businesses have a unified view of customer activity - these insights help organizations create specific marketing campaigns, improve the customer experience plus increase loyalty. Better understanding of customers often results in higher revenue and a better position in the market.
Managing Scalability & Cost Efficiency
Data volumes often increase quickly as businesses grow - Cloud data lakes scale to meet the needs of the organization, which allows companies to store and analyze large datasets without spending heavily on new infrastructure - this scalability supports long term growth without the need to replace systems constantly.
Many organizations start data projects with affordable solutions, like limited storage for testing. Businesses move to larger environments with more capacity as their needs for analysis grow. Some providers offer plans with unlimited cloud storage but companies should check usage policies or performance needs before choosing one.
Maintaining Data Governance
Reliable and honest information is necessary for effective growth analytics. Businesses should create data governance rules that define how they collect, store, access next to maintain information. Clear policies improve the quality of data and help the company follow regulations.
Security measures like access controls, encryption plus monitoring tools protect private information. Strong governance ensures that analysis is based on accurate data, which gives decision makers confidence in the insights they use for growth strategies.
Conclusion
Cloud data lakes are a strong foundation for business growth analytics because they centralize information, make data accessible and support complex analysis. They allow organizations to combine data from many sources, understand customers better, monitor performance but also find opportunities for expansion.
See: AI Won’t Solve SME Finance Without Better Data
Using governance practices and analytical tools helps businesses change large amounts of data into useful insights. A managed cloud data lake helps organizations make decisions based on facts, improve how they operate as well as create growth in a business environment that relies on data.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
