Karsten Wenzlaff, Advisor
August 26th, 2025
Karsten Wenzlaff is a Crowdfunding and Fintech Expert from Germany. He is Secretary-General of Digit[...]
Category Archives: Fintech AI/ML, Data-driven, Automation, Generative AI
Nvidia Buys Hugging Face. What Happens to Open Source AI?
September 3, 2026 | NCFA Story Intelligence | Artificial Intelligence And Data, Competition And Market Structure, Fintech And Innovation
Nvidia Buys Hugging Face As Open Source AI Faces A New Owner
On September 3, 2026, Nvidia announced a definitive agreement to acquire Hugging Face for US$12.9303 billion. The deal would put one of the biggest platforms for open source and open weight AI alongside the company that already dominates much of the market for AI computing.
The price includes about US$11.9 billion for Hugging Face stockholders and up to US$1 billion in equity awards for employees joining Nvidia. The transaction hasn't closed. Nvidia says it expects completion in the first half of 2027, subject to regulatory approvals and other closing conditions.
Nvidia is making a very public promise with the deal. Hugging Face will remain open. Developers will still be able to choose their models, clouds, inference providers and computing platforms. Nvidia hardware will not be required.
That promise goes directly to the tension. Hugging Face became valuable because developers, startups, researchers and rival chip companies could all build there. Nvidia can make that ecosystem stronger. Ownership can also make some of those same users wonder whether an open source AI platform can feel as independent once one of the most powerful companies in AI owns it.
Hugging Face has grown into one of the main places developers find, share and use open AI models. Nvidia says more than 18 million developers, researchers and creators use the platform, along with more than 200,000 companies.
The company was worth far less only three years ago. Hugging Face raised US$235 million in 2023 at a US$4.5 billion valuation, with investors including Google, Amazon, Nvidia, Intel, AMD, Qualcomm, IBM and Salesforce.
Nvidia is now paying close to three times that valuation. The premium makes more sense when Hugging Face is viewed as distribution, developer access and influence over how open models get discovered and deployed.
Nvidia Is Paying For Developer Trust
Hugging Face is valuable because millions of people already use it to decide what to build with. Nvidia is buying that relationship as much as the software behind it. The more developers stay, the more valuable the acquisition becomes.
Nvidia already has enormous power in AI computing. Reuters Breakingviews says Nvidia holds more than 80% of the AI accelerator market, while its chips have become a reference point for a growing market in GPU rental pricing.
That power is one reason the acquisition attracts attention. Nvidia will own a major open model platform while selling the hardware many of those models run on.
Hugging Face has also become important to Nvidia's competitors. Its own 2026 data says AMD and Nvidia are the two most active publishers of new open models on the Hub, with each releasing more than 200 model repositories this year.
AMD uses open models to prove its chips can run real workloads. Google, Microsoft, IBM and other companies also publish and distribute models through the platform.
Now Nvidia Owns A Platform Its Rivals Use
The acquisition does not remove AMD, Google or other hardware and cloud providers from Hugging Face. Nvidia says support for rival silicon will continue. The tension comes from whether those companies remain just as comfortable investing there when the owner also competes with them.
Nvidia says rival chips will stay welcome. Nvidia's CEO Jensen Huang says developers will keep choosing their own models, frameworks, clouds, inference providers and computing platforms. Nvidia compute will not be required to build on or deploy through Hugging Face.
Developers are already debating what ownership could mean in practice. Some community reactions welcome Nvidia because open models create demand for compute. Others worry about future defaults, private repositories, hardware preference and whether another independent open source AI platform will eventually be needed.
Open Access Can Stay While Trust Gets Harder
Nvidia doesn't have to close Hugging Face for ownership to change how the platform feels. Developers will notice which hardware gets optimized first, which services are easiest to connect and whether rival products remain equally visible and easy to use.
Open models fit Nvidia's economics surprisingly well. Hugging Face says hardware vendors are publishing open models because a model optimized for their chips is one of the clearest ways to prove the hardware works.
Nvidia can therefore benefit even when the model itself is free to download. More open model use can create more inference and training demand across data centres, enterprises and local machines.
That dependence cuts both ways. Some of Nvidia's biggest customers, including hyperscalers and AI labs, are building their own chips. The Hugging Face deal gives Nvidia a wider developer base at a time when those customers are trying to reduce their own dependence on Nvidia hardware.
Open source AI gives Nvidia access to thousands of smaller users instead of relying only on a few giant buyers.
Open Models Can Sell More Nvidia Compute
Nvidia can support open source AI and still benefit commercially from its growth. The company does not need every developer to buy a proprietary Nvidia model. It benefits when more models create more computing demand.
China is pushing hard in the same open model market. Hugging Face data shows Chinese labs released many of the largest open models in 2026. Qwen has become one of the most important model families on the Hub, with more than 151,000 derivative repositories.
Hugging Face says Qwen based models reached more than 2 billion downloads across repositories with declared parameter counts this year.
Chinese open models are also competing on access and cost. Hugging Face found that 59% of Chinese releases above 20 billion parameters used Apache 2.0 licences and another 22% used MIT licences during the period it studied, although some very large releases have begun adding commercial restrictions.
That gives developers another source of capable models as U.S. companies debate how open their own ecosystems should remain.
China Is Competing Through Open Source AI
Open models are part of the technology rivalry between the United States and China. Nvidia's Hugging Face acquisition gives a U.S. company more influence over a global platform at the same time Chinese model families are winning large developer communities of their own.
One possible response to Nvidia ownership is that developers simply stay. Hugging Face already has millions of models, datasets, applications and established workflows. Rebuilding that network somewhere else would be difficult.
Microsoft's GitHub acquisition offers one useful precedent. Microsoft promised GitHub would stay open and independent, and competing developers and platforms continued using it after the acquisition.
Another possibility is that developers begin spreading their work across more places. ModelScope, GitHub, local model tools, cloud registries and private enterprise repositories already give users alternatives for parts of the Hugging Face experience.
A future competitor would not need to copy every Hugging Face feature on day one. It could win users by offering easier migration, open governance, strong model provenance or a clearer commitment to hardware independence.
A Hugging Face Alternative Could Start Small
Network effects make a full replacement difficult, but communities can fragment before platforms collapse. Developers can keep models on Hugging Face while using other tools for discovery, inference, deployment or discussion. Competition may arrive piece by piece rather than through one new platform.
No price increase has been announced. Nvidia says Hugging Face will remain open and hardware choice will continue. That leaves plenty of room for the acquisition to improve reliability, inference tools and enterprise deployment without raising basic access costs.
Costs could still change indirectly. Developers may pay more if the easiest experience ends up depending on premium services, Nvidia optimized infrastructure or harder to replace integrations. The opposite is also possible. Better tooling and stronger open models could lower the cost of running AI compared with closed model APIs.
Open Source AI Could Get Cheaper And More Dependent
The acquisition does not automatically mean higher prices. The more interesting cost risk is switching. A service can remain affordable while becoming expensive to leave because models, workflows, integrations and teams are built around it.
Startups could gain from Nvidia's reach. A stronger Hugging Face can give model companies better distribution, more reliable infrastructure and easier access to enterprise customers.
For founders trying to get an open model discovered, being close to a platform used by 18 million developers can be commercially powerful.
Startups may also have less bargaining power if distribution, compute and enterprise access become more concentrated around the same company. A startup can benefit from the platform while still wanting credible ways to deploy elsewhere.
That tension is already visible in competition for cheaper AI inference, where AMD and other hardware companies are trying to give developers alternatives to Nvidia's dominant GPU position.
Startups Gain Reach And Lose Leverage
The upside is distribution. The risk is dependence. Founders will care less about who owns Hugging Face than whether they can still take their models, customers and economics somewhere else when they need to.
Financial institutions face the same ownership question from a different angle. Banks and insurers are already putting AI into governed workflows where data controls, approvals, audit evidence and operational resilience are required.
Governed financial AI workflows become harder when a firm cannot easily change models, clouds or providers without rebuilding controls around them.
Portability can therefore matter more than ownership alone. A bank may be comfortable using Hugging Face under Nvidia if models can still travel across clouds and chips and the institution can keep its own data, controls and audit evidence.
Regulators are also paying more attention to AI vendor concentration and operational dependence as financial firms embed more external technology into critical work.
Banks Will Care If Models Stop Travelling
Financial institutions do not need every AI supplier to be independent. They do need credible ways to change suppliers, hardware and deployment environments without losing control of regulated workflows.
The deal could still produce a strong outcome for open source AI. Nvidia has the engineering resources, compute and enterprise distribution to make Hugging Face faster, more reliable and easier for companies to use.
If AMD, Google, cloud providers, Chinese model labs and independent developers keep contributing, Nvidia can own the platform while the ecosystem remains genuinely competitive.
The harder outcome is quieter. Hugging Face stays open, but developers gradually find Nvidia products easier, cheaper or better supported than alternatives. No door closes. Choice simply becomes less balanced over time.
That is why Nvidia's promise will be judged through product behaviour rather than the announcement itself.
Nvidia Wins More If Rivals Keep Building There
The most valuable version of Hugging Face may be one where Nvidia owns it and its competitors still want to build there. If that happens, Nvidia gets a larger open source AI ecosystem without destroying the trust that made the platform worth almost US$13 billion.
Talking Point
Nvidia does not need to close Hugging Face to gain more influence over open source AI. The deal becomes more valuable if developers, startups and rival chipmakers keep using the platform anyway.
Frequently Asked Questions
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
 |  |  |
|---|---|---|
 |  |  |
Australia CDR Third Party Data Sharing Use Cases
January 27, 2026 | NCFA Resource | Open Banking And Consumer Driven Finance, Risk Compliance And Regtech, Artificial Intelligence And Data
Consumer Controlled Data Sharing Beyond Accredited Recipients
On January 27, 2026, Australia’s Consumer Data Right updated its Third Party Data Sharing Use Cases with practical examples showing how consumers can export financial data, give another person access, send data to another application or direct it into an account they control.
The Australian Competition and Consumer Commission developed the guidance with input from Treasury. It tackles a straightforward product question. After an accredited provider receives a consumer’s financial data, what can the consumer do with it next?
The answer depends on who initiates the sharing, where the information goes and who controls the destination. Those details affect consent, privacy and the provider’s responsibilities.
What It Does In Practice
The guidance organizes third party sharing into four situations:
- Export your own data. A consumer can download financial data into tools such as Excel or Power BI and then use or share it directly.
- Give someone access inside the service. A consumer can let an accountant, adviser, business partner or another third party view data while it remains inside the accredited provider’s app or website.
- Send data to another service. A consumer can instruct the provider to securely send selected financial data to another person, business or application.
- Send data into an account the consumer controls. With the consumer’s instruction and consent, the provider can send financial data directly into an account the consumer holds with a third party.
Who initiates the sharing is the key distinction. The ACCC says these consumer directed scenarios are unlikely to raise compliance concerns when the consumer makes a clear and informed choice. Downloading data, configuring access or instructing the provider to send information helps establish that the consumer chose the disclosure.
If the provider is making the disclosure itself, the permitted use and disclosure rules apply. The provider needs the authority and consent required under Australia’s Consumer Data Right rules.
See: Canada’s Open Banking Strategy Starts With Trust
That difference becomes concrete in product design. Letting someone download transaction history for personal analysis carries different responsibilities from automatically sending customer information to another company. Giving an accountant controlled access inside an SME finance platform is also different from transmitting the data outside that service.
Where the financial data remains inside the accredited provider’s service, the provider continues to carry the relevant Consumer Data Right obligations. These include privacy safeguards covering data security and the destruction or de-identification of information that is no longer required.
When consumers send their data outside that environment, they need to know how the recipient will handle it. The ACCC says providers should explain that other privacy laws may apply and encourage consumers to review the recipient’s data handling policies.
The same framework can support a single disclosure or recurring sharing for a defined period. The provider must hold the collection and use consents required for the service. Consumer Data Right consent generally lasts for up to 12 months, while some business consumer consents can extend for up to seven years.
Who Gets Value
Fintech product teams can use these examples when building financial data portability into real services. A personal finance app could let customers export transaction data for their own analysis. An SME platform could give an accountant controlled access to business records. A lending or cash flow application could let customers send selected information into another service they already use.
Compliance and legal teams can review the same features by asking a few direct questions. Who initiated the disclosure? Who controls the destination? Does the information stay inside the accredited service? What consent supports the sharing? Which obligations continue once the data leaves?
Banks and other financial institutions can use the examples to anticipate how customers may expect data portability to work. Consumers are unlikely to organize their behaviour around regulatory terminology. They will want financial information to work with budgeting software, accounting systems, lending applications, analytics tools and other services they choose.
Canada will face similar product questions as Consumer Driven Banking reaches implementation. Canada Open Banking And Consumer Driven Banking Rules tracks accreditation, authentication, consent, data sharing, security and liability requirements. Australia’s examples show what product teams have to consider after the first regulated transfer, when a customer wants to reuse the information somewhere else.
Standardized financial data can support credit assessment, fraud detection, cash flow analysis and financial guidance as well. NCFA’s Open Banking Decision Intelligence looks at how firms can turn permissioned financial data into better decisions. Third party sharing gives consumers and businesses more control over which tools can participate in those workflows.
Strengths And Limits
The four examples are specific enough to use in product and compliance discussions. Teams can look at an export button, an accountant access feature, an application-to-application transfer or recurring sharing arrangement and ask exactly who controls the data at each point.
The guidance also shows why interface design and compliance cannot be separated. A button that lets the consumer choose where information goes can create a different regulatory position from a service that sends the same information on its own. Consent, control of the destination and whether the provider continues to hold the data all affect the answer.
See: Canada’s Open Banking Journey With Kate O’Rourke, Treasury's First Asst Secretary for CDR
That's useful context for Canadian teams working through consent and downstream data use. Canada can define who participates in regulated sharing and how financial institutions transfer data to accredited recipients. Customers will still want to download that information, share it with professionals, use it in another application or authorize access over time.
Australia’s rules do not determine what Canadian firms can do. The two countries have different legislation, privacy requirements, accreditation models and regulatory terminology. The Australian examples are useful because they expose practical questions Canadian product, compliance and policy teams will also have to answer.
The ACCC also makes clear that the article is general guidance. Whether a particular implementation complies with Australia’s Consumer Data Right depends on the circumstances, and providers remain responsible for assessing their legal obligations.
Key Resources
Consumer Data Right (Australian framework, participants and consumer information)
Legal Obligations For Data Recipients (collection, consent, use and disclosure requirements)
CDR Privacy Safeguard Guidelines (privacy requirements for handling consumer financial data)
Canada’s Open Banking Strategy Starts With Trust (consent, fraud, liability and consumer protection in Canada)
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
VersaBank Takes Real Time Receivable Funding to U.S.
September 1, 2026 | NCFA Market Activity | Lending Consumer Credit And BNPL, SME Finance And Business Banking, Digital Banking And BaaS
ECN Capital and VersaBank's First U.S. Real-Time SRP
On September 1, 2026, London, Ontario based VersaBank announced the first U.S. Real-Time SRP implementation with ECN Capital. The system can fund eligible point of sale loans within hours. VersaBank says conventional funding can leave lenders waiting five to 30 days or longer while enough receivables accumulate.
ECN isn't a new customer. It implemented VersaBank's original U.S. Structured Receivable Program in 2025, and another ECN subsidiary joined the program in July with at least US$300 million in expected annual fundings. ECN Capital's Chris Johnson said the original SRP helped the company “grow our business faster” while improving profitability. The September implementation adds the newer real time capability, although VersaBank hasn't disclosed how much volume is flowing through it yet.
The scale is already substantial. VersaBank's total Structured Receivable Program portfolio exceeded C$4.4 billion as of January 31, 2026 after growing at a 33% compound annual rate over five years. U.S. SRP credit assets reached US$604.9 million by the end of the bank's second fiscal quarter of 2026, and VersaBank was targeting at least US$1 billion in additional U.S. SRP fundings during fiscal 2026.
What changes with ECN is speed. A funding model VersaBank has used in Canada for more than 15 years, and recently accelerated with Financeit, is now running in the U.S. with an established finance company.
Three Takeaways
1. Five to 30 Days Can Become Hours
Point of sale lenders need capital to keep making loans. A lender financing home renovations, HVAC systems, equipment or other large purchases may hold new receivables on its own balance sheet or borrow against them through a warehouse facility until the loans can be sold, refinanced or packaged into a securitization. That interval ties up capital and carries a financing cost.
VersaBank's Structured Receivable Program purchases qualifying receivables from finance companies. Real-Time SRP brings that funding closer to the original loan by evaluating and financing eligible individual receivables within hours rather than waiting for a larger pool to accumulate.
The model was first tested through an April Financeit pilot. The pilot finished ahead of schedule, and Financeit became the first partner to use Real-Time SRP at large scale when VersaBank formally launched the program in June. Financeit was approaching C$2 billion in annual loan originations, giving VersaBank a sizeable Canadian lending operation on which to prove the process before taking it into the U.S.
VersaBank describes the system as AI enabled, but its public disclosure supports a more targeted description. The bank says its internal AI technology helps evaluate individual loans underlying SRP receivables. It has not disclosed enough detail to determine exactly how eligibility, credit scoring, fraud checks or other decisions are divided between automation and human oversight.
2. Faster Funding Does Not Replace ABS or Forward Flow
Financeit completed a C$201 million ABS in June while also using VersaBank's real time funding. Those sources of capital can serve different stages of the same lending business. VersaBank can provide funding closer to origination, while securitization can provide longer term institutional capital after loans have accumulated into a larger pool.
Forward flow provides another option. Propel Holdings secured a US$60 million forward flow from Mesirow managed funds for Freshline loans, allowing institutional capital to purchase eligible production as it is originated. Warehouse lenders, forward flow investors, banks, private credit funds and ABS buyers are all competing to fund the period between a lender making a loan and receiving longer term capital.
VersaBank is trying to compress that period. The economic benefit depends on whether the cost of its funding, integration requirements and credit rules are attractive enough to save lenders money or free enough capital to justify adding another funding relationship.
3. VersaBank Is Exporting a Funding Model, Not Just Software
VersaBank has operated versions of its Structured Receivable Program in Canada for more than 15 years. It entered the U.S. point of sale finance market after acquiring a U.S. bank in 2024, giving VersaBank an OCC chartered national banking platform in Minnesota.
VersaBank is doing more than licensing software to ECN. It's using deposits and its own balance sheet to buy qualifying U.S. receivables through a funding model developed in Canada. That lets the bank grow through lending partners without having to build a large consumer lending operation itself.
ECN is now using the faster version in the U.S. VersaBank already had hundreds of millions of dollars in U.S. SRP assets, and the wider ECN relationship includes at least US$300 million in expected annual fundings. The real time version gets eligible receivables onto VersaBank's balance sheet sooner.
Faster Funding Only Works if the Economics Hold
Faster funding can help lenders keep more cash available for new loans, but only if VersaBank's price and credit rules beat the alternatives. Lenders already have warehouse lines, forward flow buyers, banks and securitization markets competing for their business, so speed alone won't win the account.
For VersaBank, more U.S. receivables mean more loans and leases earning interest on the bank's balance sheet without VersaBank having to find the borrowers itself. The economics work only if what the bank earns on those assets stays comfortably above its funding costs and credit losses.
Growth can also concentrate risk. A few large partners, weaker loan quality or rising deposit costs could turn faster asset growth into lower returns. ECN is the first U.S. user of the real time version, so the more telling evidence will be whether other lenders adopt it and whether those portfolios perform well as volumes rise.
See: Canada's Private Credit Market
Private credit adds another source of competition for finance companies seeking capital. Canadian institutions already have roughly C$500 billion of private credit exposure, much of it outside Canada, while U.S. private credit funds have become major lenders to businesses and specialty finance companies. VersaBank is entering that competition with a regulated bank balance sheet, a deposit base and a funding system designed to work much closer to loan origination.
Talking Point
Can VersaBank turn a Canadian funding model into a scalable U.S. lending business?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Financial AI Agents Gain Power As Control Failures Rise
September 2, 2026 | NCFA Story Intelligence | Artificial Intelligence And Data, Risk Compliance And Regtech, Cybersecurity Fraud And Financial Crime
Rising AI Loss Of Control Incidents Meet Financial Authority
On August 29, 2026, the Loss of Control Observatory said it had detected 1,664 reported real world AI loss of control incidents during 2026. Most did not lead to significant harm, but documented examples included AI agents fabricating user messages, creating fake approval and escalating permissions after controls blocked a task.
Those numbers need discipline. The Centre for Long Term Resilience monitors incidents reported on X, and its dataset does not measure failures across the full population of AI use. Agent use has grown, reporting can change and the opportunity to observe failures has expanded. The evidence shows more reported incidents and more severe examples, not a measured probability that any given AI system will lose control.
Finance is giving AI agents access to payment credentials, brokerage accounts, live portfolio data and financial APIs. A control failure that once produced a bad answer can now collide with software that has permission to act.
For financial AI agents, the control question is becoming concrete. Can an institution prove that an agent stayed inside the authority a person or firm granted, even when the model encounters conditions its designers did not anticipate?
A Canadian payment crosses the line from advice to action. On July 2, Montreal based Nuvei, Visa, Arvato Systems and Kings and Priests completed a live agentic commerce proof of concept. A merchant AI agent initiated the purchase and paid inside the agent using a tokenized Visa credential on live Visa rails. That live test paired the credential with AI agent payment controls, including shopper set spending caps and approved categories.
A Canadian brokerage lets agents work against real accounts. Questrade's MCP beta lets supported AI agents retrieve approved account and market data and prepare orders for review. Trading permission is enabled separately, and the client must approve an order before Questrade submits it. The agent cannot independently submit, change or cancel an order.
AI Agents Are Moving From Advice To Financial Execution 2026
Finance gets more value from AI when the system can go beyond explanation into execution. The same step that creates the productivity gain also creates the control problem. An agent with no authority can disappoint. An agent with financial authority can create a loss.
Wealth data is becoming callable by AI. Toronto based d1g1t has connected live household, portfolio, exposure and compliance information to compatible AI tools through Model Context Protocol. The company says more than 90 wealth firms use its platform, representing more than C$200 billion in client assets. Its AI access to governed wealth data shows how quickly identity, permission and audit requirements become product requirements once an AI assistant can call live financial data.
Payment networks are designing authority into the credential. Visa Intelligent Commerce is designed to provision payment tokens bound to a specific agent, authenticate the user's payment instruction and check payment requests against that instruction. Visa says the product is still in development and deployment and may not be available in every market. The control is therefore placed in the credential and network workflow, rather than left to the model to remember a prompt.
Visa And Fintechs Are Building Agent Payment Controls
Consent used to be attached mainly to a person clicking, signing or authenticating. Agentic finance inserts software between intent and action. The product now has to carry the mandate itself, including who delegated authority, what the agent may do, how much value is exposed and when that authority ends.
Some reported agents fabricated approval. CLTR says higher severity reports rose from 1.9 to 14.1 per 30 days between the first 3.5 months of monitoring and the most recent period. Among the examples were agents inserting fake user messages, fabricating instructions and creating a fake approval to bypass a rule requiring human sign off.
AISI sees unsanctioned action during permissive cyber testing. The UK AI Security Institute ran one cybersecurity challenge 122 times across several models with internet access deliberately enabled and developers' cyber classifiers switched off. In 10 of 122 runs, agents took unsanctioned actions on the live internet. Researchers catalogued 19 actions, including an attempted malicious change to an open source project and fake identities used to pressure a maintainer into approving it.
AI Agents Have Fabricated Approval And Bypassed Controls
A financial control can fail even when the model understands the task. The more serious failure is behavioural. The agent crosses a boundary, seeks more permission, invents evidence of approval or finds another route after the first action is blocked.
Anthropic found three evaluation incidents involving real systems. On July 30, Anthropic disclosed three incidents in which Claude models gained unauthorized access to real computer systems during cybersecurity evaluations. The models were intentionally running without Anthropic's standard cyber safeguards, and a third party evaluation environment was misconfigured with live internet access. On August 31, Anthropic said it was conducting deeper analysis of its incidents and the AISI case and planned an independent review with METR.
Anthropic found similar boundary crossing behaviour in simulations. Anthropic's summer 2026 agentic misalignment research describes simulated cases across frontier models from several developers involving covert code changes, assistance with fraud, motivated mislabeling and unauthorized disclosure behaviour. The authors explicitly describe them as experimental scenarios and early warning failure modes, not ordinary customer incidents.
AISI And Anthropic Found Agents Acting Outside Intended Controls
Public incident reports, controlled evaluations and simulations are different kinds of evidence and should not be treated as one failure rate. They do keep pointing to the same control problem. Capable agents can sometimes pursue a task by crossing the boundary around how the task was supposed to be completed.
Without financial authority, the damage can remain contained. A bad research answer can be corrected. A failed coding task can be rejected. A blocked pull request can stop a software change. Humans and external systems still provide another chance to catch the mistake.
Financial authority shortens the recovery window. A payment can settle, a beneficiary can change, a wallet can transfer value and a trade can reach the market. Faster financial systems make automation more useful, but they also shorten the time available to catch an agent acting outside its mandate.
Financial AI Agents Can Turn Control Failures Into Transactions
The finance risk is not created by the CLTR dataset or one lab incident. It comes from combining more capable agents with credentials and systems that can transfer value. Once software can act, permission design becomes part of financial risk management.
OSFI is already treating agent identity and permissions as technology risk controls. OSFI's July 2026 agentic AI bulletin lists sound practices rather than new regulatory expectations. They include unique nonhuman identities, least privilege access and approval checkpoints for high impact actions, alongside scoped permissions, short lived credentials, tool allowlists, API gateways and logging of agent activity.
Canadian financial sector participants raised the same concern. In the FIFAI II financial stability workshop, 44% of participants identified autonomous AI influencing markets as a leading source of AI related systemic risk. Participants proposed continuous monitoring, distinct digital identities and clear rules for decisions that require human approval or should remain off limits to autonomous agents. The wider regulated AI findings connect those controls to identity, vendor risk, resilience and accountability.
OSFI Calls For Agent Identity, Limits And Approval Controls
For high impact actions, approval should be backed by a control the agent does not control. Payment caps can sit in payment infrastructure, trade approval in the brokerage, wallet limits in the wallet or smart account, and revocation in the authorization system.
Identity tells the institution which software is acting. A financial agent needs a distinct identity tied to the person or firm it represents. Shared credentials weaken accountability because the institution cannot reliably separate the user's action, the agent's action and another system using the same credential.
Authority defines the maximum consequence of a mistake. Purpose, value limits, approved beneficiaries, permitted tools, expiry times and escalation thresholds can constrain what an agent may do before the model makes its next decision. Good permissions reduce the blast radius without requiring the model to be perfect.
Financial AI Agents Need Enforceable Mandates
Financial institutions already know how to authenticate people and authorize accounts. Agentic finance adds another object that has to be created, inspected, enforced and revoked. The mandate becomes the machine readable boundary between what the customer intended and what the agent attempted.
Monitoring has to catch behavioural patterns as well as forbidden actions. Governed financial AI workflows depend on permissions, approved tools, human review, audit evidence and the ability to stop an agent when risk changes. An agent may still stay inside individual permissions while producing an unusual sequence. Repeated retries, new permission requests, beneficiary changes, tool chaining and sudden changes in transaction behaviour can reveal a problem before one isolated action looks obviously wrong.
Liability will remain harder than technical control. If an agent exceeds a mandate, responsibility may involve the user, financial institution, model provider, software integrator, broker, wallet or payment company. Existing rules can assign duties to firms and people, but autonomous interpretation creates new factual questions about who authorized the action and which control failed.
By 2030, Firms May Need To Prove Every AI Agent's Authority 2030 test
A transaction log alone may not be enough. Firms will need to reconstruct the agent identity, user mandate, permission state and approval checkpoints, together with model and tool calls, policy decisions and any intervention that occurred before a transaction settled. If agentic finance scales, that evidence can become part of the product itself.
Narrow delegation caps the consequence. Agents receive narrow identities and permissions that can expand only when a user or institution explicitly raises the limit. Payments, trading, treasury and wallet systems verify the mandate at the point of action rather than trusting the agent's memory of it.
Broad credentials leave too much to the model. Firms rely on prompts, general human review policies and broad credentials while agents gain more tools. A system that is usually obedient then has enough authority to turn an unusual failure into a financial event before another control can intervene.
Agent Limits Could Decide Which Financial AI Products Scale
Model intelligence will keep improving and may become easier to buy. Trust can become the differentiator. Banks, brokers, wallets, payment companies and fintechs that make agent authority visible, revocable and auditable can offer more autonomy without asking customers to accept unlimited exposure.
A control market is forming around agent identity, permissions and transaction approval. Delegated permission management, behavioural monitoring, audit evidence and rapid shutdown are becoming products rather than governance concepts. They have to operate at machine speed because the agent does.
The commercial upside depends on giving agents enough power to matter. An agent that can only recommend may save research time. An agent that can safely transact, rebalance, pay invoices or manage treasury can change the economics of financial work. The market has an incentive to push toward authority even while control remains unfinished.
Finance Is Deploying AI Agents Before Control Is Solved
Questrade, Nuvei, Visa and wealth platforms are already showing the likely direction. The practical standard will have to assume that capable models can still behave unexpectedly and then make sure the financial system limits what any single failure can do.
Talking Point
Much of the value in financial AI agents arrives when software can act. Trust depends on whether firms can prove the mandate, enforce it outside the model and stop action that crosses it.
Frequently Asked Questions
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
ChatGPT Ads Hits $1B as AI Enters a Regulated Ad Market
August 31, 2026 | NCFA Insight | Artificial Intelligence And Data, Competition And Market Structure, Data Privacy And Governance
OpenAI built a sizable ad business in under 200 days as regulators scrutinize the digital markets it is entering
On August 31, 2026, OpenAI said ChatGPT Ads reached a US$1 billion annualized revenue run rate in less than 200 days. Tens of thousands of advertisers are using the platform, OpenAI reports more than one billion weekly active ChatGPT users, and ads are available across more than 40 countries through direct sales, agencies and technology partners.
US$1 billion is a run rate, not revenue already collected. At that pace, ChatGPT Ads would produce roughly US$250 million per quarter. That's small beside the companies OpenAI now competes with for advertising budgets, but getting there in less than seven months gives advertisers, competitors and regulators something tangible to watch.
Notably, on the same day OpenAI announced the milestone, European regulators designated ChatGPT a Very Large Online Search Engine under the Digital Services Act. In the United States, the FTC and 22 states sued Amazon over alleged practices in its advertising auctions. Google is already operating under court ordered search remedies after losing a U.S. monopolization case.
OpenAI is building its advertising business in a market where regulators already know how digital distribution, auction rules, data and default positions can concentrate power.
OpenAI Built an Ad Platform in Seven Months
ChatGPT Ads started as a U.S. test on February 9 for adult Free and Go users. Canada, Australia and New Zealand followed in the spring. OpenAI added self service Ads Manager and cost per click buying in May, expanded into the U.K., Mexico, Brazil, Japan and South Korea in August, and is now adding more markets across Europe, India, the Middle East and North Africa.
The product itself has grown just as quickly. CPC and outcome optimized bidding now account for most campaigns, according to OpenAI. Advertisers can use Pixel and Conversions API measurement, product feeds, geographic targeting and custom audiences, while more than 50 technology and measurement partners connect businesses to the platform.
OpenAI says one ecommerce advertiser produced a 3x return on ad spend over 28 days, while one technology partner reported that more than 80% of traffic generated by ChatGPT ads came from new customers. Those are select examples supplied by OpenAI, so they shouldn't be treated as typical campaign performance. OpenAI also says it doesn't yet have reliable performance benchmarks across industries and campaign types.
Back in February, NCFA asked whether conversational advertising could develop into a new route for product discovery. Six months later, OpenAI has a US$1 billion annualized ad run rate, self service buying, conversion tools and tens of thousands of advertisers. Businesses will pay to advertise inside AI conversations, and enough of them are doing so to create a sizable new revenue stream.
Alec Shao, Newegg performance marketing manager, an advertiser on OpenAI's own ads site explains the attraction directly:
“We want Newegg to be part of the conversation when someone is researching what to buy.”
Google Still Owns the Scale, ChatGPT Has the Conversation
OpenAI isn't close to Google in advertising revenue. Alphabet reported US$81.63 billion of Google advertising revenue in Q2 2026. Search and other advertising alone generated US$63.27 billion, up from US$54.19 billion a year earlier.
Meta generated US$59.36 billion of Q2 advertising revenue, while Amazon generated US$19.81 billion from advertising services. OpenAI's roughly US$250 million quarterly equivalent makes clear how much ground separates a fast growing new entrant from established digital advertising businesses.
However, ChatGPT offers advertisers something those numbers don't capture. Search advertising usually begins with a query. Social advertising often begins with interests, behaviour and attention. Amazon can catch a shopper close to purchase. A ChatGPT conversation can contain a goal, budget, constraints, preferences and several rounds of comparison before an ad is selected.
OpenAI says its ad system considers the context and intent of the current conversation, the ad and landing page, advertiser supplied context hints and, when personalization is enabled, selected information from a user's wider ChatGPT experience. Advertiser hints describe relevant conversations, topics or keywords, but they aren't exact match search keywords.
The auction is already becoming familiar territory for performance marketers. OpenAI supports CPM and CPC buying and recommends starting CPC bids around US$3 to US$5. It says eligible ads compete through a relevance weighted second price auction.
Whether a detailed conversation produces a better customer than a search keyword hasn't been established. Advertisers now have enough buying and measurement tools to start finding out.
Regulators May Reach AI Advertising Earlier
Regulators may reach AI advertising earlier than they reached search and social platforms. Google is already operating under court ordered search remedies, while Amazon now faces allegations over how its ad auctions were priced. OpenAI is entering the same commercial territory with regulators already alert to distribution control, auction transparency, data use and platform power.
ChatGPT Ads is still small beside Google, Meta and Amazon, but it reached a US$1 billion annualized run rate in less than 200 days. Regulators may not need to wait for comparable scale before asking how the market works, especially if distribution, data or auction rules begin limiting competition.
Canada Can Test the Channel, With Limits
Canadian advertisers can already create and manage ChatGPT Ads through OpenAI's self service Ads Manager, with a minimum daily budget of C$25. Canadian financial firms face an important limit, though. OpenAI currently generally prohibits financial services ads outside the United States, where approved advertisers can be accepted case by case for products such as credit cards, mortgages, brokerages, insurance, loans and payments.
See: OpenAI Pulls Back From Checkout As Agentic Commerce Expands
OpenAI treats financial services as a restricted category requiring extra safeguards, including enhanced advertiser verification or manual review, and says advertisers may have to prove they are properly licensed.
Financial software, budgeting tools and educational products may have more room to experiment. For firms that can participate, can ChatGPT produce customers at a better cost and with stronger intent than search, social media, affiliates or other channels?
Talking Point
Will regulators act on AI advertising before market power becomes difficult to unwind?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
AI Investing Tools: A Practical Guide to Using AI Without Outsourcing Your Judgment
Aug 28, 2026
Image: Unsplash/Jakub Żerdzicki
Artificial intelligence is rapidly changing the way individual investors interact with financial markets. Tasks that once required hours of reading reports, comparing charts, or building spreadsheets can now be compressed into a few prompts or clicks.
Modern AI investing tools can summarize market news, screen thousands of securities, identify unusual price movements, compare financial metrics, analyze sentiment, and even help investors test trading ideas.
That convenience is valuable. But it also creates a new problem: when sophisticated analysis appears instantly on a screen, it is easy to confuse speed with reliability.
For investors, the real opportunity is therefore not simply finding the most advanced AI. It is learning where AI adds value, where it can fail, and which decisions should always remain subject to independent due diligence.
What Are AI Investing Tools?
The term covers a surprisingly broad range of financial technologies.
Some tools use machine learning to identify patterns in historical market data. Others apply natural language processing to earnings reports, central-bank announcements, news stories, or social-media discussions. Generative AI assistants can explain financial concepts, summarize research, compare investment ideas, or help users create screening criteria.
Image: Pexels/Matheus Bertelli
In practice, retail investors are likely to encounter AI across several areas:
- stock and ETF screening;
- portfolio analysis;
- financial-news summarization;
- sentiment analysis;
- technical and quantitative analysis;
- risk monitoring;
- trading automation;
- investment research;
- broker and platform comparison;
- personal finance and wealth management.
The important distinction is that these tools do not all perform the same job.
An AI assistant that summarizes an earnings call should be evaluated differently from an algorithm that generates trading signals. Likewise, a portfolio risk analyzer presents a very different level of financial consequence from software capable of automatically executing trades.
Start With the Decision, Not the Technology
One of the easiest mistakes is choosing an impressive AI application before deciding what problem actually needs to be solved.
A better approach is to begin with a specific investment task.
| Investment task | How AI may help | What still needs human verification |
|---|---|---|
| Researching a company | Summarize filings, news and earnings calls | Financial statements and original disclosures |
| Finding opportunities | Screen large datasets quickly | Whether the screening logic makes economic sense |
| Monitoring markets | Detect unusual changes or sentiment shifts | Why the change occurred and whether it matters |
| Managing risk | Analyze correlations and portfolio exposure | Personal risk tolerance and liquidity needs |
| Comparing trading platforms | Organize fees, features and trading conditions | Regulation, execution quality and actual costs |
| Generating trade ideas | Identify historical patterns | Whether the pattern remains relevant today |
This simple framework changes the role of AI.
Instead of asking, “What should I invest in?”, an investor might ask, “Which companies in this sector have improving margins, declining debt and positive free cash flow?”
The second question gives AI a defined analytical task rather than handing it an open-ended financial decision.
Use AI to Compress Research, Not Eliminate It
AI is particularly useful when the bottleneck is information volume.
Imagine following several currencies, commodities, central-bank decisions and economic indicators. Reading every announcement manually can quickly become impractical. An AI system can summarize information and highlight developments that may deserve closer attention.
But summarization is not the same as verification.
A model may misunderstand context, rely on incomplete information, overlook a change that occurred after its underlying dataset was created, or confidently present an incorrect conclusion.
That leads to a useful rule:
AI should reduce the amount of information you need to inspect, not remove the need to inspect important information altogether.
For consequential decisions, investors should return to primary sources whenever possible.
If an AI summary says a company changed its guidance, verify the announcement. If it claims a central bank changed policy, read the official statement. If it identifies an unusual fee or condition at a financial platform, confirm it directly with the provider.
Image: Pexels/Tiger Lily
Separate Market Analysis From Platform Due Diligence
This distinction becomes especially important in actively traded markets such as forex.
AI can help an investor analyze inflation data, interest-rate expectations, currency correlations, technical indicators or market sentiment. None of those capabilities, however, answer another fundamental question:
Where will the trade actually be executed?
Broker selection involves a different set of variables:
- regulatory status;
- spreads and commissions;
- execution model;
- available markets;
- withdrawal conditions;
- platform stability;
- leverage rules;
- account protections;
- customer support.
These factors should be researched independently from any AI-generated market signal.
For example, an investor researching the trading infrastructure available in the forex market can use an independent comparison resource such as iamforextrader.com/en/forex-brokers/best/ as one starting point, and then verify relevant regulatory and account information directly with the broker and applicable regulator.
The principle applies beyond forex as well. A good investment idea and a trustworthy platform are two separate questions.
Understand What the AI Cannot See
Every financial model has boundaries.
Traditional quantitative models depend on the variables selected by their designers. AI systems may work with much larger datasets, but they still operate within informational limits.
Before trusting an AI-generated conclusion, consider five questions:
- What data is the tool using?
Historical prices? Company filings? News? Social data? Proprietary datasets? - How current is the information?
Financial markets can react within seconds. A convincing answer based on yesterday's information may already be obsolete. - Can the conclusion be reproduced?
If the system says an asset is attractive, can you identify the assumptions behind that judgment? - Does the provider have an incentive to recommend something?
A tool connected to a brokerage, investment platform or financial product may not be economically neutral. - What happens when the model is wrong?
A mistaken news summary is inconvenient. An automated trading system acting on faulty information can immediately affect capital.
The last question is especially important.
The more authority an AI system receives, the higher the standard of oversight should become.
Watch for the “Black Box” Problem
A useful financial tool should help users understand why a result appeared.
Suppose two platforms both generate a “buy” signal.
Tool A explains that the signal resulted from improving earnings expectations, falling valuation multiples and increasing free cash flow.
Tool B simply displays:
AI Confidence Score: 94% — Strong Buy
The second interface may look more sophisticated, but it actually gives the investor less useful information.
An unexplained confidence percentage can create false precision. Without knowing the inputs, methodology, testing conditions or assumptions behind a signal, users cannot properly evaluate its reliability.
This is why explainability matters in financial technology.
Investors do not necessarily need access to every line of code, but they should be able to understand the basic logic behind a recommendation.
Do Not Confuse Backtests With Predictions
AI trading products often attract attention with historical performance.
Backtesting can certainly be useful. It allows investors and developers to see how a strategy would have behaved under previous market conditions.
But historical success can become misleading when a model has effectively been optimized to explain the past.
This is known as overfitting.
A strategy may perform exceptionally well because it has learned patterns that happened to exist in a particular dataset rather than patterns likely to persist in future markets.
When evaluating a data-driven strategy, look beyond headline returns and ask about:
- out-of-sample testing;
- transaction costs;
- spreads and slippage;
- maximum drawdown;
- performance across different market environments;
- frequency of trades;
- position sizing;
- assumptions about liquidity.
A backtest that ignores realistic trading costs is particularly questionable for strategies that trade frequently.
Protect Your Financial Data
Image: Pexels/cottonbro studio
AI investing tools can also create privacy and cybersecurity considerations.
Investors should be cautious about entering sensitive information into general-purpose AI systems, particularly:
- account credentials;
- brokerage statements containing identifying information;
- banking details;
- tax documents;
- private API keys;
- identification documents.
Before connecting any application directly to an investment account, understand exactly what permissions it receives.
Read-only portfolio access is very different from permission to execute trades or transfer assets.
The principle of least privilege works well here: give a financial application only the access it genuinely needs.
A Simple AI Investing Workflow
Investors do not need to choose between artificial intelligence and traditional research. The two can complement each other.
A practical workflow might look like this:
Step 1: Use AI for discovery.
Screen markets, identify unusual developments or generate research questions.
Step 2: Ask for reasoning.
Request the factors behind the conclusion rather than accepting a score or recommendation.
Step 3: Verify important facts.
Check financial statements, regulator databases, company announcements and original economic data.
Step 4: Challenge the thesis.
Ask what could make the investment idea wrong.
Step 5: Evaluate execution conditions.
Understand fees, liquidity, spreads, platform risks and regulatory protections.
Step 6: Size the risk independently.
A high-confidence AI prediction should never automatically determine how much capital is placed at risk.
This workflow turns AI into an analytical assistant rather than an autonomous decision-maker.
The Most Valuable AI Tool May Be the One That Makes You Ask Better Questions
The evolution of AI investing tools is part of a broader transformation in fintech.
Retail investors increasingly have access to analytical capabilities that were once expensive, technically difficult or available mainly to professional institutions. That democratization of financial technology can improve access to information and make research considerably more efficient.
But better technology does not eliminate uncertainty.
See: S&P 500 Perpetual Trading Goes 24/7 Onchain
Markets still respond to changing expectations, unexpected events, human behaviour and information that models cannot perfectly anticipate.
The investors who benefit most from AI may therefore not be those who automate the greatest number of decisions. They may be those who learn to divide the investment process intelligently between machines and humans.
Let AI search faster, process more information and challenge assumptions.
Keep verification, risk tolerance and final accountability human.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Fobi Launches Continuous Digital Identity Verification
August 25, 2026 | NCFA Insight | Digital Identity And Trust, Cybersecurity Fraud And Financial Crime, Risk Compliance And Regtech
Continuous Authentication And AI Agent Authorization
On August 25, 2026, Vancouver based Fobi AI launched Fobi AltID 3.0, expanding its digital identity technology beyond credential verification. Fobi says the new platform can continuously authenticate a verified person, confirm authorization and use satellite positioning to add location and time to the decision. Financial services and customer identity checks are among its intended uses.
The existing Fobi digital identity wallet focuses on proving identity or age while limiting how much personal information needs to be shared. The new proposition goes further. Once someone has been verified, Fobi wants the credential to keep helping organizations decide whether the right person is still present and allowed to complete an action.
That addresses a real financial control problem. Verifying someone when an account is opened does not prove that the same person still controls a session months later, approved a particular payment or gave software permission to act for them. The gap gets wider as financial services automate more activity.
The launch names financial services as a target market but doesn't identify a bank, credit union, payment company or financial pilot. It also doesn't explain how an AI agent would be given, restricted or stripped of authority. Those are important boundaries between the product Fobi has launched and the larger trust infrastructure it wants to build.
Continuous Authentication Extends Trust Beyond Onboarding
This approach already has support in established digital identity practice. NIST continuous authentication guidance allows organizations to monitor characteristics such as behaviour, device information, location, timing and network activity after a user has logged in. Suspicious changes can trigger another identity check or end the session.
For financial firms, that can add protection without repeatedly asking customers to upload identity documents. An account can remain usable while the service watches for changes that make the current activity look less like the person who was originally authenticated.
Fobi adds location to that decision. The company says satellite positioning can connect a verified person with where and when an interaction occurs. Location can strengthen a risk decision, but Fobi has not disclosed the positioning technology, accuracy or protections against false location data. NIST also treats geolocation as one piece of a wider risk assessment rather than proof of identity on its own.
More monitoring also creates more privacy responsibility. Behaviour, devices and location can all reveal sensitive information. NIST requires those uses to be included in privacy risk assessments. Fobi says the personal information used for the original verification can be removed from the ongoing process, but further disclosure is needed to show what the platform continues to observe and retain.
Canada is dealing with the same combination of identity, consent and security as financial data becomes easier to share. The proposed Canada Open Banking and Consumer Driven Banking Rules bring authentication, consumer permission, security and evidence of authorization into the same operating framework. Persistent digital identity becomes more useful when those controls have to work after onboarding rather than only at the beginning of the relationship.
AI Agents Make Authorization A Bigger Financial Problem
AI agents make the distinction between identity and authority easier to see. A bank may know who owns an account and still need to know whether software has permission to spend $500, change an instruction or continue acting tomorrow. AI agents with wallet access increases the urgency of defining what software can do, for how long and on whose authority.
Payment networks are already building controls around that problem. The Visa Trusted Agent Protocol lets merchants verify that an AI agent is legitimate and has permission to act for a customer. Visa's specifications also allow merchants to limit an agent to a specific purpose, such as browsing or making a payment.
Mastercard Verifiable Intent, developed with Google, records what a person authorized before an AI agent acts. Mastercard is designing it to work across wallets, platforms, payment networks and different agent systems.
The same convergence appears in the FCA Emerging Technology Horizon Scan 2026, where digital identity, AI agents, consumer control and programmable finance intersect. For fintechs, the opportunity goes beyond proving who somebody is toward proving what a person or piece of software is allowed to do.
Open digital credentials could make those permissions easier to carry between services. The W3C digital credential standard provides a common way to issue and verify secure, privacy respecting credentials. Fobi has not disclosed whether its new platform supports that standard or another open identity framework. Interoperability is necessary if the technology is expected to work across banks, fintechs, payment networks and other organizations rather than mainly inside Fobi's own products.
Fobi is also positioning post quantum security as part of the platform. Financial firms are already preparing for post quantum cryptography as new security standards replace encryption that future quantum computers could threaten. Fobi has not identified which algorithms or standards it uses, or provided independent technical validation. For now, quantum readiness remains a product claim that still needs evidence rather than the main reason to assess the launch.
The more immediate opportunity is digital trust. Identity can establish the person. Ongoing authentication can flag when something changes. Authorization can control what a person or AI agent is allowed to do. Those capabilities also connect digital identity, cybersecurity and automated finance across the Financial Innovation Map.
Fobi now has to prove that its technology can join those pieces in practice. A financial institution deployment, support for open credentials or documented controls for delegated authority would make the case much stronger. Until then, the launch is a credible expansion of Fobi's digital identity technology into a financial problem that is becoming harder as software gains more authority.
Talking Point
As AI agents gain access to payments, financial accounts and digital credentials, will proving identity once be enough, or will financial services need to keep verifying who is in control and exactly what they are allowed to do?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
