Karsten Wenzlaff, Advisor
August 26th, 2025
July 22, 2026 | NCFA Story Intelligence | Capital Markets And Market Infrastructure, Risk Compliance And Regtech, Regulation And Policy

On July 16, 2026, two prediction market integrity fights surfaced on opposite sides of the Atlantic. France ordered internet providers to block Polymarket, citing illegal gambling, potential losses and wagers that could be manipulated. In Washington, an insider trading report placed a White House teleprompter operator at the centre of the same debate.
Kalshi identified unusual activity through customer onboarding and market surveillance, froze the account before more than $90,000 in reported profits could be withdrawn and referred the trades to the U.S. Commodity Futures Trading Commission. The CFTC wouldn’t confirm or deny an investigation.
The alleged advantage was access to prepared remarks before the public heard them. Five months earlier, trader Caden Booth found a different kind of edge. He tracked travel activity, located a Super Bowl rehearsal and waited on a public sidewalk with a stopwatch. He then wagered more than $50,000 that the national anthem would finish in less than 117 seconds. It lasted 104 seconds.
Both traders acted before the crowd knew the answer. One used public observation. The other allegedly relied on privileged access. France responded to the wider integrity problem by closing access to a platform. Kalshi responded to one account by freezing funds and referring the activity.
Prediction markets need people who find information first. The market breaks down when a winning trade no longer reflects better work and instead reflects a breached duty, an illegal tip or control over the result. Their regulatory future depends on whether platforms can separate those advantages before more governments decide that some contracts are too difficult or harmful to allow.
Prediction markets reward information that other traders miss. Public records, travel data, local observation, specialist knowledge and faster interpretation can all improve a price. Removing that advantage would remove the reason informed traders participate.
The same successful trade can also expose an unfair market. Employees, government officials, contractors, advisers and event participants may know an answer because someone trusted them with information other traders cannot obtain.
The trade begins with public clues. Booth tracks when rehearsals are likely to occur, follows publicly visible travel activity and listens from a public sidewalk. His advantage comes from assembling information before the crowd.
The result still looks suspicious to people who only see the profit. A concentrated wager, unusual confidence and a successful outcome can resemble insider trading after the event. Profitability shows that the trader was right. It doesn’t show how the trader learned enough to act.
Kalshi’s investigation connects access, duty and trading. The exchange concludes that the editor likely had advance knowledge through employment or another formal affiliation and a reasonable basis exists to believe the information was misappropriated in breach of a prior duty.
The CFTC places event contracts inside federal market abuse enforcement. Its enforcement advisory says the facts could support a misappropriation case under the Commodity Exchange Act and Regulation 180.1. Related NCFA intelligence: Kalshi Fines MrBeast Editor In Insider Trading Case.
Kalshi prohibits trading where a person has direct or indirect influence. The candidate acknowledged that the trades were improper. Kalshi imposed a $2,246.36 financial penalty and a five year suspension.
The regulator now asks whether some contracts carry too much control risk. The CFTC’s prediction market rulemaking asks how contracts should be treated when one person or a small group controls the event and whether information advantages create useful prices, unfairness or manipulation.
Public records make suspicious timing visible. The blockchain preserves wallet activity, transfers and trades. Bloomberg’s flagged Polymarket trades show how analysts can find concentrated activity around sensitive events.
Onchain visibility does not reveal the source of knowledge. A wallet can show what happened without identifying the trader or proving why the trader acted. Related NCFA intelligence: When Prediction Markets Start Pricing Geopolitics.
Kalshi connects known customers to exchange enforcement. Customer onboarding, employment information, market surveillance, whistleblower reports, account interviews, freezes and referrals help the exchange determine whether unusual trading reflects access or control.
Polymarket states the boundary for its global market. Its market integrity policy prohibits trades based on stolen confidential information, illegal tips or authority sufficient to influence an outcome. It pairs public blockchain records with specialist monitoring and wallet referrals.
American enforcement starts after a contract reaches the market. The CFTC can investigate fraud, manipulation, confidential information and trading by people who influence an event. Those powers do not settle whether every political, military, weather or entertainment contract should have been listed.
Other regulators act before the trade can occur. Licensing requirements, product limits and access blocks place the regulatory decision at the market entrance. This reduces local exposure but also removes the prices, liquidity and information the platform claims to provide.
The tools make execution faster and more capable. The integration includes algorithmic order types, a block trading interface and planned data normalization across prediction venues. It shows professional infrastructure entering the category without proving broad institutional adoption.
Integrity controls have to keep pace with execution. Faster trading and larger positions improve liquidity and price formation when the advantage is legitimate. They also allow confidential information or event control to be used more efficiently when the controls fail.
A winning trade becomes an integrity problem because of how the advantage was obtained or used, not simply because the trader was right.
Prediction markets cannot treat knowledge itself as misconduct. The price improves when traders find public information faster, connect overlooked facts or understand a subject better than the crowd.
Confidential access changes that relationship. A trader who receives material information through employment, government service, a contract or another trusted position may owe duties that a public observer does not. A person who can control the event creates an additional conflict because the trade can reward conduct that changes the result.
Surveillance sits between those categories and proof. It can identify a new wallet, concentrated position, extraordinary success or trade placed minutes before an announcement. Investigators still need identity, access, communications, duties and control to determine what happened.
Contract design is the earliest control. A market on a prepared speech creates predictable access for writers, production staff and teleprompter operators. A market on a company announcement creates access for employees, advisers and vendors. A contract controlled by one person may be unsuitable without participant restrictions or other safeguards.
Market abuse rules begin after a contract exists. They do not decide whether a military, political, weather or entertainment event should be traded, whether the product is a derivative or a bet, which regulator owns the risk or whether a global platform can enforce one standard across several legal systems.
The commercial opening extends beyond the exchanges. Identity checks, conflict screening, relationship data, wallet attribution, alert scoring, case management and contract risk reviews are becoming part of the product. The harder opportunity is deciding which contracts can be supervised before liquidity arrives. NCFA Innovation Opportunity: Regulated Event Contract Infrastructure.
Canada’s regulated route is narrower, but limiting the available contracts does not remove information risk. A Canadian platform still needs to know who can access or influence the event, which information is public and what evidence supports an account restriction or referral.
Interactive Brokers Canada received the first Canadian approval, followed by Wealthsimple. Related NCFA intelligence: Prediction Markets Tighten As Wealthsimple Enters.
Before Canadian dealers add more contracts and distribution channels, they need controls that identify access, influence and unusual trading without penalizing legitimate public research.
Canada can define the information boundary during product design, connect customer and employment records to surveillance and publish clear escalation rules. Traders should know when better public work is welcome and when access, influence or a breached duty makes the trade improper.
Can prediction markets separate public intelligence from confidential access and event control well enough to keep controversial contracts open?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
July 20, 2026 | NCFA Market Activity | Cybersecurity And Fraud, Artificial Intelligence And Data, Risk Compliance And Regtech

On July 20, 2026, Neo emerged from stealth with US$100 million in combined seed and Series A financing from Andreessen Horowitz, Bessemer Venture Partners, Craft Ventures and Merlin Ventures.
The Boston cybersecurity company was founded in 2025 by Nick Warner, Shlomi Salem and Eran Shirazi. Note that it's unrelated to Calgary based Neo Financial. Warner previously served as SentinelOne president and COO, Salem led detection engineering and threat research at SentinelOne, and Shirazi previously co-founded EasySend after leading vulnerability research in Israel’s Unit 8200.
Neo is building what it calls an agentic software control layer. The platform gives security teams an inventory of AI agents, AI enabled applications, plugins, extensions, MCP servers and traditional software that has gained agentic capabilities. It then maps permissions, attributes actions and applies policy before software reaches sensitive data or systems.
The company plans to use the financing to expand engineering and go to market operations. Neo hasn't disclosed revenue, customer counts, named customers, valuation or the allocation between its seed and Series A rounds.
Enterprise security was built around human users, known applications and recognizable data flows. AI agents can act differently. They may inherit a user’s permissions, call several tools, reach files and credentials, communicate with other agents and continue operating without a conventional interface.
That means risky activity may not even resemble a conventional intrusion. An agent can use valid credentials and approved applications while still exporting too much data, reading a secret, pushing code or initiating an action that exceeds the authority its operator intended to grant. NCFA’s analysis of AI agents gaining identity and wallet access shows how quickly this issue reaches financial APIs and real infrastructure.
Neo’s platform combines four functions. It finds AI software, checks what it can access, shows who or what is behind each action, and lets security teams allow, block or pause that action for approval.
Threat's aren't limited to deliberately malicious agents. ShadowLeak demonstrated how hidden instructions could manipulate an AI agent and expose private information without a user clicking a malicious link.
Its Neoverse knowledge base maps the capabilities, risks and behaviour of agentic software before it enters an enterprise environment. Neo says enforcement occurs natively at the endpoint, where the software can intercept tool calls, API access, credential reads and data transfers before the action is completed.
Neo combines software inventory, posture intelligence, attribution and endpoint enforcement across agentic and traditional applications.
Check Point is developing a wider AI security control plane covering employee AI use, AI applications and agentic systems.
SailPoint is extending identity governance to AI agents and other non-human identities.
Existing endpoint security providers already control devices, files and processes, but may not yet map the permissions and chained actions occurring inside agentic software.
Cloud and application security companies can govern models, APIs and data access, creating a competitive question around whether customers will buy a separate agentic control layer or expect existing security platforms to absorb the function.
Banks and other regulated organizations will need more than a list of approved AI tools. They need to know which person authorized an agent, what credentials it inherited, which systems it can call, what information it can export and when human approval is mandatory.
Neo’s opportunity is to show who or what can access each system and enforce clear limits on what they can do. Its challenge is that endpoint, identity, cloud and network security companies are all pursuing parts of the same problem. Large institutions may prefer one more specialized control layer, or they may demand that existing suppliers add agent governance to products already deployed across the organization.
Financial institutions are adopting AI while remaining accountable for privacy, cybersecurity, third party risk, operational resilience and auditability. An agent that can access customer information, initiate a payment, change code or communicate externally will need authority limits that security, risk and compliance teams can understand.
Neo has the capital and founding team to compete early, but the category is still forming. Enterprise adoption, integration depth and the quality of its policy enforcement will matter more than the size of the launch financing.
Will enterprises buy a dedicated control layer for agentic software, or will endpoint, identity and cloud security providers absorb the function before the category becomes independent?
Nick Warner, Shlomi Salem and Eran Shirazi founded Neo in 2025 to build security controls for enterprise software gaining autonomous and agentic capabilities.
Neo SecurityEnterprise cybersecurity company focused on agentic software
FormationExperienced operators assemble before the public launch
Early Institutional BackingSeed and Series A allocation not publicly disclosed
Enterprise SecurityAI driven software environments
SecOps TeamsLarge organizations adopting AI enabled software
Operator ExperienceFounders previously built and scaled enterprise security companies
Neo begins with founders who have built cybersecurity products and commercial organizations before. That lowers some execution risk, but it does not yet establish enterprise adoption.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
July 20, 2026 | NCFA Market Activity | Lending Consumer Credit And BNPL, Embedded Finance, Banking And Credit

On July 20, 2026, OnePay launched personal loans ranging from US$1,000 to US$50,000 through a new partnership with Upgrade. Eligible customers can check rates, review an offer, accept the terms and manage repayment without leaving the OnePay app.
OnePay is the consumer finance platform backed by Walmart and Ribbit Capital. Its app already offers banking, high yield savings, a digital wallet, credit cards, investing, crypto, credit building and point of sale lending. Customers who bank through OnePay may receive funds as soon as the same day. Annual percentage rates range from 7.74% to 35.99%, depending on eligibility.
Upgrade provides and services the loans, while Cross River Bank issues them. OnePay controls the app experience and customer distribution. That division of work gives OnePay a lending product without requiring it to build the full underwriting, funding and servicing operation internally.
Personal loans extend that relationship beyond everyday payments and retail financing. The new product is designed for debt consolidation, major purchases and unexpected expenses rather than financing a single transaction at Walmart checkout.
Point of sale lending helps complete a purchase. A personal loan gives OnePay a role in a customer’s wider balance sheet and monthly cash flow. A borrower may use the proceeds to refinance higher cost debt, fund a large expense or cover an emergency.
OnePay says the application can use information customers have already supplied, reducing repeated data entry. That may improve conversion, but it also makes data permissions and decision responsibilities more important. Customers need to understand which company holds their information, which institution makes the loan and who controls servicing or collection decisions.
The expansion follows OnePay’s work with Synchrony on a Walmart credit card program and Klarna on OnePay Later. Together, those products give the app several ways to serve consumers across everyday spending, retail financing, credit building and larger borrowing.
Upgrade brings the credit machinery behind the product. The company has delivered more than US$50 billion in credit to over 8 million customers since 2017 across personal loans, cards, buy now pay later, home improvement and auto financing.
For Upgrade, the OnePay agreement adds distribution through an app connected to millions of consumers and Walmart’s retail ecosystem. Instead of acquiring every borrower through its own brand, Upgrade can supply lending inside another company’s customer relationship.
This is the same operating structure seen across embedded finance. The distributor owns the interface and customer traffic, while a regulated bank and specialist technology provider supply the financial product behind it.
That structure can lower customer acquisition costs and shorten product development. It also creates dependencies. OnePay relies on Upgrade’s underwriting and servicing performance. Upgrade relies on OnePay to present the product responsibly and bring suitable borrowers into the funnel. Cross River Bank carries the regulated lending role.
OnePay combines Walmart linked distribution with banking, payments, rewards and credit inside one app.
Upgrade supplies underwriting, loan technology and servicing rather than requiring OnePay to build those capabilities.
SoFi offers personal loans inside a broader consumer finance relationship that includes banking and investing.
Robinhood is also extending beyond its original product into a wider lifestyle finance relationship spanning investing, credit, banking and rewards, although OnePay brings Walmart linked retail distribution rather than a brokerage led customer base. See NCFA’s analysis of Robinhood’s lifestyle finance strategy.
LendingClub competes in unsecured personal credit with a bank funded model and direct consumer acquisition.
Major banks already hold deposits and customer data, but may offer slower applications or less integrated digital experiences.
Personal loans could deepen OnePay’s role in customers’ financial lives, especially when borrowing, banking, payments and rewards sit inside the same app. Will the app's convenience produce durable trust rather than simply more credit volume is the question.
Pricing near the top of the 35.99% APR range carries the clearest risk. Approval may be fast, but repayment can become difficult when the loan is used for an emergency or to consolidate existing debt.
OnePay will also carry much of the reputational impact even when lending decisions and servicing sit with partners. Unclear terms, poor servicing or aggressive collections could affect how customers view the wider platform.
Canadian banks, retailers and fintechs face the same trade-off. Embedded lending through consented financial data could help companies add credit faster, but the business controlling the interface still needs to make pricing, data use, lender identity and repayment responsibility clear.
Can OnePay turn Walmart scale distribution into a primary consumer finance relationship, or will it remain a storefront for credit products supplied by banks and specialist lenders?
Angus McDonald and Chris Bayley founded Cover Genius after encountering fragmented insurance distribution while operating an online travel business. RentalCover became the first use case for combining digital distribution, policy administration and claims support.
RentalCoverRental vehicle protection distributed through digital booking platforms
LaunchA focused first product built around a clear travel use case
Founder LedEarly development preceded the company’s later institutional funding rounds
Travel And MobilityRental car bookings across multiple countries
Travel PlatformsOnline travel agencies and rental car booking businesses
Integrated ProtectionInsurance offered inside the booking flow rather than through a separate purchase
The first product mattered because it gave Cover Genius a practical route into a difficult market. The company learned the operating work before expanding the platform.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |