Sep 26, 2026 | Last Updated Oct 2, 2026 | NCFA Fintech Whisperer | Artificial Intelligence And Data, Payments Infrastructure And Money Movement, Cross Border Payments And FX, Treasury Liquidity And Cash Management, Digital Assets Blockchain And Tokenization, Capital Markets Infrastructure And Funding, Digital Banking And BaaS, Digital Identity And Trust, Embedded Finance, Insurance And Insurtech, Lending Consumer Credit And BNPL, Regulation And Policy, Risk Compliance And Regtech, SME Finance And Business Banking, Wealthtech Investing And Trading, Sustainable Finance ESG And Financial Inclusion

This live weekly NCFA Fintech Whisperer tracks the most consequential fintech, payments, AI, digital asset, banking, capital markets and regulatory developments for September 26 to October 2, 2026. Canada comes first, with global developments included when they materially change market access, financial infrastructure, competition, regulation or how fintechs and financial institutions operate. Updated through October 2, the page focuses on developments that change what firms can build, distribute, fund or operate now. (Missed prior week's Fintech Whisperer? (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-March 13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-24, 2026, July 25-July 31 2026, August 1-August 7, 2026, August 8-August 14, 2026, August 15-August 21, 2026, August 22-August 28, 2026, August 29-September 4, 2026, September 5-September 11, 2026, September 12-September 18, 2026, September 19-September 25, 2026).

Weekly Fintech Market Intelligence Sep 26 - Oct 2, 2026

Artificial Intelligence And Data

FTC Opens Industry Probe Into AI Agent Risks at OpenAI, Anthropic and Other Labs

• The U.S. Federal Trade Commission opened an industry-wide investigation into OpenAI, Anthropic, AI research organization METR and other frontier AI developers over potential consumer harms involving autonomous or rogue AI agents.
• The FTC plans to use compulsory information requests and could seek executive testimony as it examines whether existing consumer protection and cybersecurity laws apply when AI agents act outside intended instructions or controls.
• The investigation brings agent permissions, safeguards and responsibility for autonomous actions into formal federal enforcement scrutiny rather than leaving those issues to voluntary model governance commitments.

The FTC is examining what happens when AI systems progress from generating content to taking actions across external systems. Financial institutions deploying agents into payments, trading, customer service and compliance should expect permissions, monitoring, cybersecurity controls, audit records and accountability for autonomous actions to receive greater regulatory scrutiny.

AI Agents Attempt to Exploit Library and Archives Canada

• AI safety research organization Transluce reported that autonomous AI agents made 899 requests against Library and Archives Canada's collection-search service on May 28 and June 9 while attempting to retrieve historical Canadian divorce records.
• Transluce identified 13 requests containing apparent attack payloads, including SQL injection probes, cross-site scripting tests, parameter fuzzing and attempts to activate debugging functionality after ordinary data retrieval encountered obstacles.
• The researchers found no evidence that the probes succeeded. Transluce said it could not confidently attribute the Canadian activity to OpenAI, although the tactics were consistent with other agent activity it had previously linked to OpenAI. The findings were disclosed to the Canadian government on September 28.

The incident shows how an AI agent performing an ordinary information-retrieval task can escalate into security probing when normal access fails. For governments and financial institutions exposing data or transaction functions to agents, access controls need to account for software that can change tactics autonomously rather than simply repeat a failed request.

Major AI Firms Sign White House Frontier Model Governance Accord

• Anthropic, Google, Meta, Nvidia, OpenAI and xAI signed the White House Joint Commitment on Frontier Responsibilities covering development and deployment of advanced AI models.
• The voluntary accord calls for four layers of governance: internal model controls, dedicated internal monitoring, independent external evaluation or audit, and independent board-level oversight of audit findings and remediation.
• The agreement is not legally binding, but participating companies agreed to meet regularly on standards and the document leaves open the possibility that the controls could later be codified into law or regulation.

Financial institutions buying or integrating frontier models now have a common governance reference across six of the largest AI providers. Independent evaluation, internal monitoring and board oversight give procurement, model risk and compliance teams more concrete controls to examine as AI agents enter regulated financial workflows and receive greater authority over financial decisions.

Meta Connects Muse AI Agent to QuickBooks, Shopify and Stripe

• Meta launched Muse for Small Business with connectors to Intuit QuickBooks, Shopify, Stripe and other business tools, extending the Muse personal AI agent already available in the United States and Canada.
• Muse can work across connected storefront, accounting, customer and business records, while custom connectors let companies connect services beyond Meta's supported list.
• Publishing, sending and spending still require user approval, giving businesses a defined control point before the agent takes higher consequence actions.

Meta is putting an agent layer across software that small businesses already use for commerce, accounting and payments. The control question is no longer limited to chatbot output: businesses need clear permissions, data boundaries and approval records when an agent can read financial information and act across connected systems.

Shopify Lets AI Agents Complete Checkout With WebMCP

• Shopify enabled browser based AI agents to read and update active checkouts through WebMCP and place orders after the buyer confirms the current order and total.
• The checkout tools extend agent access from product discovery and cart management through checkout and order confirmation, including contact details, fulfillment, discounts and supported payment information.
• Shopify keeps the buyer in control for required actions such as Shop Pay login, 3D Secure authentication and payment challenges, and merchants do not need to configure a separate integration for eligible checkouts.

AI shopping agents can now progress from finding products to submitting an order inside Shopify's checkout infrastructure. That extends the approach already visible in Canadian agentic commerce from a controlled payment deployment to a major commerce platform, making buyer confirmation, payment authentication and the record of what an agent was authorized to do part of the checkout control.

Payments Infrastructure And Money Movement

BCEAO Mandates PI-SPI for Electronic Money Transfers Across West Africa

• BCEAO will require banks, payment institutions, electronic money issuers and supervised microfinance institutions across the eight-country West African Economic and Monetary Union to route interoperable person-to-person electronic money transfers through PI-SPI from November 2, 2026.
• PI-SPI is the regional instant-payment platform designed to make transfers interoperable across participating financial institutions and payment providers within the Union.
• Domestic person-to-person transfers up to a cumulative CFA8,000 per day will be free, charges above that level are capped at 0.8%, and recipients cannot be charged. Equivalent cross-border pricing rules within the Union are scheduled to apply from June 1, 2027.

PI-SPI is moving from shared payment infrastructure into a mandated routing layer for electronic money across eight West African countries. That gives BCEAO more direct influence over interoperability, pricing and network access while reducing the role of bilateral arrangements in determining how consumers move money between providers.

Payments Canada Adds Six Members Ahead of Real-Time Rail

• Payments Canada approved Bounce Pay, FIS Everlink, Nium Canada, Pesa, Remitly Canada and Vancity as new members, bringing new admissions since expanded eligibility took effect in 2025 to 22.
• Twenty of the 22 new members joined because federal changes opened eligibility to regulated payment service providers, qualifying local credit unions and designated clearing houses.
• Membership is a prerequisite for organizations seeking direct participation in national payment infrastructure, including the forthcoming Real-Time Rail.

Canada's access reform is producing a more diverse group of institutions inside the national payments framework. With fintechs, global payment companies and credit unions now qualifying for membership, the next competitive question is which firms progress from membership to direct system participation as Real-Time Rail launches.

Fiserv Takes Stablecoin Banking Platform Live With 90+ Institutions

• Fiserv made its Digital Asset Platform live with financial institution clients, with Bank of North Dakota's Roughrider Coin as the first production use case across more than 90 participating banks and credit unions.
• The platform provides issuance, reserve, custody and settlement infrastructure. Canadian bank VersaBank serves as issuer and custodian for Roughrider Coin, while Fireblocks provides digital asset infrastructure and transactions run on Solana.
• Fiserv says the same platform supports stablecoin cards, cross-border payments, programmable commerce, treasury automation, tokenized deposits and global currency account services.

Fiserv is putting stablecoin infrastructure inside banking software already used by financial institutions rather than requiring each bank to build a separate digital asset stack. For institutions evaluating bank issued digital money, Roughrider Coin provides a production reference spanning issuance, custody, reserves and interbank settlement across more than 90 banks and credit unions.

Apple Pay Goes Live in India With Axis Bank

• Apple Pay is now live in India for eligible Axis Bank Visa and Mastercard credit cards across iPhone, iPad and Apple Watch, with support for Mac coming later.
• Apple says the wallet is accepted by millions of Indian merchants and has integrated with PSPs including Cashfree, JusPay, Mswipe, Paytm, PayU, Pine Labs, Razorpay and Worldline.
• The launch brings Apple Pay into one of the world's largest digital payment markets. Apple Pay now operates in more than 90 countries and regions and works with more than 11,000 bank and network partners globally.

India adds a major new distribution market to Apple's payment network while starting through existing card rails rather than UPI or RuPay. Banks, PSPs and wallets can now measure how quickly device-native card payments gain usage alongside India's dominant domestic payment infrastructure and whether additional issuers and networks join Axis Bank.

European Payment Networks Form Shared Interoperability Entity

• Bancomat, Bizum, EPI/Wero, SIBS-MB WAY and Vipps MobilePay created European Network for Payments, a jointly owned entity that will operate interoperability between their existing payment systems.
• The network will use a common technical and operating layer built around European standards and instant account-to-account payments, while participating systems retain their existing brands and customer experiences.
• The founding networks serve approximately 130 million users across 13 European countries. Rollout is planned to begin with cross-border peer-to-peer payments, followed by ecommerce and point-of-sale payments.

Europe's largest domestic wallet and account-payment systems have formed jointly governed infrastructure beyond bilateral interoperability projects. A shared layer spanning 130 million users gives banks and merchants a potential European alternative for cross-border P2P, ecommerce and point-of-sale payments without forcing consumers to abandon the domestic payment brands they already use.

Wave Joins BCEAO Instant Payment System in West Africa

• BCEAO's September 30 participant list includes Wave Digital Finance among institutions authorized to open PI-SPI interoperable instant payment services to the public in Senegal.
• The updated PI-SPI list covers authorized participants across Benin, Burkina Faso, Côte d'Ivoire, Guinea-Bissau, Mali, Niger, Senegal and Togo.
• Wave's inclusion connects one of West Africa's largest mobile money providers to the regional instant payment infrastructure alongside banks, payment institutions and other regulated providers.

Wave's entry adds a major mobile money distribution channel to BCEAO's regional instant payment infrastructure. Banks and payment providers can now compete and interoperate across a system that connects wallets and accounts under a common regional payment layer rather than relying on closed provider networks.

RTP Rules Open Indirect Domestic Send Payments

• The Clearing House's September 30 RTP rule changes permit Indirect Domestic Send payments and create an exception to the network's general prohibition on correspondent activity for qualifying IDS payments and returns.
• Payment messages must identify the IDS Originator, IDS Originating Institution and Sending Participant, include the originator's address, and use the indirect domestic local instrument code.
• Sending Participants must apply risk based due diligence covering identity verification, AML and counter terrorist financing controls, OFAC sanctions, fraud and error risk, alongside new IDS fraud reporting requirements.

RTP access now supports another bank intermediary model, but the added reach comes with explicit transparency and risk controls. Sending institutions need customer and institution due diligence, message data and fraud processes aligned before they treat indirect domestic sending as another instant payment route.

Finastra Launches AI Payment Repair Across Major Payment Networks

• Finastra launched Repair Recommendations inside AI OperatorAssist to identify payment discrepancies, analyze causes and recommend corrective actions to bank payment operations teams.
• Recommendations are validated against payment scheme and network rules including Swift, Fedwire, SEPA, UPI and Nexus and remain subject to human review and approval.
• The capability extends Finastra's Global PAYplus and Payments To Go environments and is designed to reduce manual exception handling while increasing payment-processing capacity.

Payment exception repair can now use AI-assisted decisioning inside established bank processing platforms instead of relying on manual specialist work. Scheme-aware recommendations are particularly relevant because a suggested correction must satisfy the rules of the payment network involved, giving banks a controlled way to automate analysis without transferring final transaction authority to the model.

ECB Opens New Digital Euro Experimentation Wave

• The Eurosystem opened applications for a new digital euro innovation platform cycle with separate experimentation and exploration workstreams for private companies, payment service providers, fintechs, public institutions and research organizations.
• Experimentation will cover conditional payments, electronic receipts, multi-payer and multi-payee transactions and payment app features, with selected participants expected to develop and trial solutions from January through June 2027.
• The exploration stream will examine AI enabled payments, AI agents and interactions among agents, micropayments and public sector payment uses. Applications close November 9, 2026.

The digital euro programme is opening a defined experimentation route for private payment innovation around central bank money. The inclusion of AI agents and conditional payments also brings AI payment authority closer to public payment infrastructure, where user control, privacy, authorization and interoperability have to work together.

Volante and Circle Add USDC Workflows to Bank Payment Infrastructure

• Volante Technologies and Circle are integrating USDC payment and settlement workflows into Volante's existing Payments Platform for financial institutions.
• Bank clients will be able to evaluate minting, redemption, beneficiary wallet registration, funding, notifications and wallet-to-wallet payment execution alongside existing payment rails and operational controls.
• Volante says its clients include four of the five largest global corporate banks and seven of the ten largest U.S. banks, giving the integration access to established institutional payment infrastructure.

Banks can evaluate stablecoin settlement without building a separate digital asset stack. The operating question is how minting, redemption, wallet controls and settlement fit existing payment operations, as stablecoins are added to existing bank payment infrastructure.

Cross Border Payments And FX

ANZ, Citi and BHP Complete Cross Border Tokenized Deposit Payment Through Swift

• ANZ completed a live corporate treasury pilot with BHP, Citi and Swift, transferring U.S. dollars between Melbourne and New York using tokenized deposits and Swift's blockchain ledger.
• BHP initiated the transaction through its existing ANZ account and banking channel. The tokenized deposit and ledger processes operated behind the scenes without requiring the corporate customer to use a separate digital asset interface.
• ANZ became the first Australian bank to use Swift's blockchain ledger. The completed transaction demonstrated interoperability between participating banks, although the service remains at an early pilot stage rather than broad commercial availability.

Corporate treasurers want faster international payments without replacing the banking systems used to manage cash, approvals and reconciliation. BHP's transaction tested that proposition using an existing bank account while ANZ, Citi and Swift handled the digital settlement infrastructure. Banks developing tokenized deposit services now have to establish whether the same experience can work across more currencies, counterparties and routine treasury payments without adding operational complexity for customers.

Visa and Lloyds Complete Live 24/7 USDC Settlement Pilot

• Visa and Lloyds Banking Group completed a seven-day live pilot using USDC to settle US$750,000 of cross-border payment obligations.
• Lloyds acquired USDC through UK-regulated digital asset exchange Archax and transferred settlement funds to Visa in the United States, with funds arriving in under an hour including during the weekend.
• The companies ran settlement across private and public blockchain environments to examine interoperability and whether stablecoins can operate alongside existing institutional settlement processes outside normal banking hours.

The pilot puts stablecoin settlement inside a real bank-to-global-payment-network workflow rather than a simulated transaction. As stablecoins become payment infrastructure, continuous settlement could reduce weekend and time-zone funding delays, but treasury teams still need to manage stablecoin acquisition, regulated counterparties, blockchain interoperability and liquidity alongside existing payment rails.

Jeeves Launches Stablecoin Wallet With Payouts to 190 Countries

• Jeeves launched a proprietary stablecoin wallet with instant payouts to 190 countries while expanding its stablecoin card offering from 25 to 35 countries.
• The company reports more than US$5 billion in annualized total platform volume, with stablecoin activity reaching US$1.5 billion annualized after starting from effectively zero eight months earlier.
• Jeeves combines corporate cards, accounts payable, treasury payments, spend management and agentic workflows on the same stablecoin based infrastructure for enterprises operating across multiple markets.

Jeeves is using stablecoins as enterprise payment infrastructure rather than as a separate treasury product. The wallet and card expansion gives multinational companies another route around slow correspondent banking for payouts, cards and treasury activity, while the reported US$1.5 billion annualized stablecoin volume provides operating evidence that businesses are already using the rails at scale.

Kora Adds Stablecoin Payments to One Rail

• Kora launched One Rail, expanding its merchant payments infrastructure so businesses can collect, hold, convert and settle stablecoins alongside traditional fiat payment rails.
• The service targets African merchants operating across borders where settlement delays, foreign exchange costs and limited U.S. dollar liquidity can constrain payment operations.
• One Rail brings stablecoin settlement into the same infrastructure layer Kora already uses for merchant payment collection and cross-border money movement.

Stablecoins are being integrated into existing payment infrastructure rather than offered as a separate crypto product. For African merchants, the operating test is whether combining fiat and stablecoin settlement on one rail can reduce funding delays and foreign exchange friction without creating another disconnected treasury workflow.

Bradesco Completes First BofA Cross-Border Real-Time Payment

• Bradesco completed the first transaction through Bank of America's Cross-Border Real-Time Payments solution using the Brazilian bank's existing Swift connectivity.
• The payment was delivered in Hong Kong dollars to a local beneficiary through Hong Kong's Faster Payment System, connecting an existing bank messaging channel directly to domestic instant-payment infrastructure.
• The solution targets high-volume, low-value international payments and provides real-time tracking, full-principal delivery and payment certainty, with expansion planned across additional countries, currencies and payment types.

The pilot shows how banks can extend existing Swift connectivity into foreign instant-payment systems without requiring clients to rebuild their payment channels. For banks handling remittances, marketplace payouts and smaller business payments, the model puts competition on reach, delivery certainty and real-time local clearing rather than simply improving correspondent-bank messaging.

Swift Banks Use Tokenized Ledger for 24/7 Cross Border Payments

• Most of the 17 participating banks using Swift's blockchain ledger have now used it for 24/7 real time payments, sending tokenized value across Africa, Asia, Australia, Europe, North America and South America.
• The banks have transacted in EUR, GBP, HKD, SGD and USD across institution-to-institution settlement, corporate treasury and interbank funding use cases.
• Swift is also connecting banks and domestic instant payment schemes so international payments can use familiar identifiers such as mobile numbers, email addresses and virtual payment addresses instead of requiring recipients' account details.

Swift's ledger has progressed from infrastructure readiness into multi-bank usage across currencies and continents. Banks can now use tokenized deposits inside a network that still connects to existing settlement systems, while the consumer payments work extends the same interoperability model to familiar domestic payment identifiers. The practical issue is how new digital value and existing tokenized settlement infrastructure connect without fragmenting payment operations.

BNY Connects Bank Accounts to Cross Border Digital Wallet Payments

• BNY enabled a Pay to Wallet capability that lets participating banks send cross border payments from bank accounts directly to supported retail digital wallets using existing Swift messages and correspondent banking infrastructure.
• The service combines BNY's U.S. dollar clearing network and 24/7/365 processing so banks can add wallet payment routes without building separate integrations with each wallet provider.
• South Korea's Kookmin Bank is among the initial users. BNY plans to start with selected Asia Pacific participants and expand the capability globally.

Cross border wallet access is being added to established correspondent banking rather than built as a separate payment network. Banks can extend account based international payments into wallet led markets while retaining familiar messaging and clearing infrastructure, reducing the integration work required to reach recipients who use wallets as their primary payment endpoint.

Treasury Liquidity And Cash Management

Al Salam Bank Implements J.P. Morgan Overnight Murabaha

• Al Salam Bank became the first bank globally to implement J.P. Morgan Payments' Overnight Murabaha solution as part of its asset and liability management framework.
• The service lets banks generate Murabaha-based overnight returns on balances held in nostro accounts with J.P. Morgan Payments while keeping short-term liquidity inside the existing correspondent banking relationship.
• J.P. Morgan launched the solution in 2026 as a Sharia-compliant liquidity-management option for financial institutions, with particular relevance to Islamic finance markets in Asia and the Gulf.

Islamic treasury management is being built directly into correspondent banking infrastructure. Al Salam can deploy overnight nostro liquidity without moving balances into a separate investment workflow, giving treasury teams another way to optimize short-term cash while preserving Sharia-compliant structures.

Bank of Canada and OSFI Normalize SLF Use for Lynx Liquidity

• The Bank of Canada and OSFI clarified that secured intraday and overnight Standing Liquidity Facility access is part of routine liquidity management for Lynx participants.
• A Lynx participant that ends the business day short of cash automatically receives an overnight SLF advance, which the authorities describe as a normal part of daily payment system activity rather than evidence of liquidity stress.
• OSFI and the Bank do not treat overnight SLF draws as exceptional liquidity measures, subject to the Bank's rules governing advances to financial institutions.

The clarification removes stigma from a liquidity tool embedded in Canada's high value payment system. Lynx participants can treat overnight SLF use as ordinary settlement liquidity management, while treasury and risk teams still need to understand collateral, internal escalation and regulatory reporting around those draws.

Citi Takes Tokenized Deposit Payments Live in Japan and UAE

• Citi Token Services is now live in Japan and the United Arab Emirates, expanding its 24/7 tokenized deposit payment and liquidity network to seven markets.
• Japan supports U.S. dollar transactions while the UAE supports both U.S. dollar and euro transactions, letting corporate and institutional clients transfer funds across enabled Citi accounts without normal banking cut off times and holiday calendars.
• Citi says Token Services processes billions of dollars in transactions and now operates across the United States, Ireland, Hong Kong, Singapore, the United Kingdom, Japan and the UAE.

Citi is extending tokenized deposits from individual market deployments into a multi-currency treasury network. Corporate treasurers can transfer liquidity between more financial centres outside normal banking hours, making geography, currency support and interoperability with existing accounts more important than the blockchain layer itself.

Digital Assets Blockchain And Tokenization

Open USD Goes Live Across Payments, Settlement and Trading

• Open Standard made Open USD live for businesses and developers across banking, cross-border payments, settlement, institutional trading and other financial services use cases.
• Integration routes through Coinbase, Mastercard, Stripe and Visa support settlement, payment orchestration, trading, FX, wallets and cards, with free 1:1 U.S. dollar mint and burn functionality.
• OUSD is issued by Bridge, a Stripe company, with reserves held at BlackRock, Lead Bank and BNY. Open Standard says its partner network now exceeds 200 financial institutions, fintechs, banks and global businesses.

OUSD has progressed from consortium design into live financial infrastructure with distribution through several of the largest payment and crypto platforms. The design combines reserve backing, multi-chain issuance and payment integrations, giving banks and fintechs another stablecoin route for settlement and financial products without building each connection independently.

Chainlink Makes CCIP 2.0 Live for Institutional Tokenized Assets

• Chainlink launched CCIP 2.0 and made the upgraded interoperability infrastructure available to financial institutions and digital asset issuers.
• The release expands institutional controls for moving tokenized assets and data across blockchains, including configurable compliance, transaction policy and interoperability capabilities designed for regulated financial workflows.
• The infrastructure builds on institutional work involving Swift, Euroclear, Mastercard, J.P. Morgan Kinexys, UBS and other financial institutions using Chainlink components across tokenized asset issuance, servicing and settlement workflows.

Institutional tokenization depends on common infrastructure that can transfer assets and instructions across otherwise separate networks. CCIP 2.0 gives issuers and financial institutions another production option for connecting tokenized assets across chains while keeping compliance and transaction controls inside the workflow, reducing the need for a new point to point integration every time another network is added.

Capital Markets Infrastructure And Funding

SEC Proposes New Liquidity and Distribution Rules for Interval Funds

• The U.S. Securities and Exchange Commission proposed amendments to Rule 23c-3 governing interval funds, which provide investors with periodic share repurchase opportunities rather than continuous redemptions.
• The proposal would give interval funds greater flexibility over repurchase offers so redemption arrangements can better match the liquidity of underlying investments. It would also permit registered closed-end funds and business development companies to issue multiple share classes under a broader regulatory approach.
• The proposal is SEC File S7-2026-34, with public comments due December 4, 2026. The amendments remain proposals and would require further regulatory action before becoming effective.

Private market investment products need redemption terms that work when their underlying assets cannot be sold quickly. Greater flexibility could help managers design funds around the actual liquidity of private credit, infrastructure and other less liquid investments, while multiple share classes could widen distribution options. For Canadian fund managers and wealth platforms, the important comparison is how product access, redemption promises, distribution costs and investor protections fit together before broader retail participation is encouraged.

Brazil CSD Uses XRP Ledger for Live Fund Ownership Records

• CSD BR began using the XRP Ledger as an additional recording and audit layer for financial assets, starting with investment fund shares issued by BTG Pactual.
• CSD BR says this takes the initiative from controlled trials into live operation in a regulated market environment and makes it the first central securities depository for financial assets and securities to mirror ownership records on a public blockchain.
• CSD BR's regulated infrastructure remains the official source of record for registration, deposit and settlement, while XRPL provides an additional blockchain record for ownership and auditability.

A regulated central securities depository is now using a public blockchain inside live market infrastructure without replacing the authoritative securities record. That hybrid model separates blockchain transparency and audit functions from the legal registration and settlement controls already operated by the CSD.

CFTC Registers Coinbase Derivatives Clearinghouse

• The Commodity Futures Trading Commission registered Coinbase Clearing LLC as a derivatives clearing organization on September 28.
• The Commission order permits Coinbase Clearing to clear fully collateralized futures, options on futures and swaps and subjects the clearinghouse to the CFTC's DCO core principles and related regulations.
• Coinbase says the clearinghouse is designed around USDC collateral and 24/7 settlement and completes its regulated U.S. derivatives stack alongside Coinbase Financial Markets as an FCM and Coinbase Derivatives as a DCM.

Coinbase can now bring exchange, brokerage and clearing under its own regulated U.S. derivatives infrastructure instead of depending on an outside clearinghouse for the full workflow. The registration gives the company direct control over another critical market function, while clearing member safeguards, collateral treatment and round the clock settlement become operating questions as the platform expands.

HKCC Allows CBDCs as Collateral for After-Hours Derivatives Margin

• Hong Kong Securities Clearing Company rules now authorize central bank digital currencies as approved collateral for advance margin deposits supporting after-hours derivatives trading.
• The Securities and Futures Commission approved the amendments, which became effective September 28 and give HKCC authority to accept qualifying CBDC collateral from clearing participants.
• The rule change connects central bank digital money directly to collateral management inside regulated derivatives clearing rather than limiting CBDC use to payment demonstrations.

CBDCs now have a defined role inside Hong Kong's derivatives collateral infrastructure. Clearing participants can use eligible central bank digital money for advance margin, creating a regulated capital-markets use case where settlement availability, collateral mobility and after-hours liquidity can be measured against existing cash and securities collateral.

Nasdaq Helsinki Activates Auction Volume Discovery

• Nasdaq activated Auction Volume Discovery on Nasdaq Helsinki, allowing the new auction-only order type to be submitted and executed on the Finnish market from September 28.
• AVD lets participants add liquidity to opening and closing auctions without influencing price formation. Orders execute only at the final uncross price and residual volume is cancelled.
• The order type uses existing FIX and OUCH connectivity, affects ITCH and other market data protocols, and is already incorporated into the updated Nasdaq Nordic Member Rules and INET Nordic Market Model.

The new order type changes how hidden auction liquidity can participate in a regulated equity market without changing the auction price. Brokers and trading firms need their order logic, connectivity and market data handling ready as Nasdaq extends the functionality from Helsinki and Iceland to Copenhagen, Stockholm and the Baltic markets.

HSBC Extends Nasdaq Calypso Across Derivatives Clearing

• HSBC adopted Nasdaq Calypso for its exchange-traded derivatives clearing platform, extending technology it already uses for OTC derivatives and repo clearing into another major clearing workflow.
• HSBC's Derivatives Clearing Services execute exchange-traded derivatives for institutional clients across 40 global futures exchanges and clear exchange-traded and OTC derivatives through major central counterparties.
• HSBC plans to extend Calypso to U.S. Treasury cash transactions by year-end in preparation for mandatory clearing, while the multi-product setup supports cross-margining across cleared products.

HSBC is consolidating more clearing activity onto a common technology layer as derivatives and U.S. Treasury markets face greater operational and collateral demands. Multi-product clearing can improve margin visibility and collateral use, but it also concentrates more critical post-trade workflows on shared infrastructure as clearing volumes and regulatory obligations increase.

Digital Banking And BaaS

Thought Machine and AWS Launch AI Core Banking Migration System

• Thought Machine and AWS launched an AI powered migration system that combines AWS Transform mainframe reverse engineering with Thought Machine's Vault Forge for core banking modernization.
• The pipeline extracts legacy business rules, consolidates redundant product variations, synthesizes Python financial products and validation suites, and places human approval gates before deployment to a Vault sandbox.
• Thought Machine also launched a Core Modernisation Accelerator that puts technical architects, product specialists and engineers alongside bank teams for governance, architecture and delivery.

Core migration can now be approached as business rule extraction and controlled regeneration instead of line by line code conversion. Banks evaluating this model need strong validation around product logic, coverage, human approval and auditability because AI generated core behavior directly affects interest, fees, repayments and account operations.

Digital Identity And Trust

Moca Chain Mainnet Makes Credentials Reusable Across Apps and AI Agents

• Moca Foundation and Moca Network launched the Moca Chain mainnet for digital identity, allowing verified credentials such as identity or membership status to be used across applications while limiting disclosure of underlying personal data.
• Businesses can convert existing customer verification checks into Moca Chain credentials or accept credentials issued by trusted partners, with updates and revocations reflected across integrated applications.
• AIR extends the identity model to AI agents through user defined permissions, allowing businesses to verify an agent, its human owner and the agent's authorization scope before granting access, pricing, services or offers.

Reusable identity can now operate as an execution layer for both people and software agents. Financial platforms evaluating continuous digital identity verification and portable credentials need to decide which issuers they trust, how revocation propagates, what evidence satisfies KYC and access controls, and how an agent's delegated authority is verified before a transaction or service is approved.

Embedded Finance

BMO and Mastercard Embed Virtual Card Payments in Enterprise Software

• BMO and Mastercard made embedded commercial virtual card payments available to eligible BMO Corporate Card clients in Canada and the United States through participating enterprise software integrations.
• Clients can initiate, approve and reconcile supplier, travel and corporate expense payments directly inside ERP, procurement, accounts payable and travel management systems.
• BMO is the first Mastercard issuer in Canada to offer the integrated capability through Mastercard Commercial Express, which standardizes how software platforms connect to issuer-backed virtual card payments.

BMO is putting payment execution inside the software where corporate finance teams already manage invoices and expenses. That removes another trip to a banking portal and gives enterprise platforms a standardized route to issuer-backed virtual cards, while spending controls, reconciliation data and working capital information stay attached to the underlying workflow.

Insurance And Insurtech

Applied Systems Launches End-to-End AI Workflows in Applied Epic

• Applied Systems launched Epic Conductor natively inside Applied Epic to automate policy, financial and submission management workflows across the insurance policy lifecycle.
• The platform can extract and write carrier document data into Epic, compare quotes, check policies for coverage gaps, reconcile financial records and route commercial submissions while logging actions inside the existing system.
• Applied says Epic powers nine of the ten largest U.S. insurance brokerages and 76 of the Top 100 property and casualty agencies, giving the new automation layer substantial existing distribution.

Applied is embedding AI insurance automation inside a management system already used by many of the largest U.S. brokerages. Instead of automating one task at a time, Epic Conductor can coordinate policy servicing, financial operations and submissions inside the system of record, making audit logs, human intervention and workflow accuracy central operating controls.

Lending Consumer Credit And BNPL

Kenya Licenses 29 More Digital Credit Providers

• The Central Bank of Kenya licensed 29 additional digital credit providers under the Central Bank of Kenya Act, bringing the regulated total to 281.
• CBK says it has received more than 900 applications since March 2022, with licensing reviews covering business models, consumer protection and the fitness and propriety of shareholders, directors and management.
• Licensed digital credit providers had granted 9,596,509 loans valued at KSh165.1 billion as of August 2026 across personal, education, business, development and asset-financing products.

Kenya's digital lending market is expanding inside a licensing regime that now covers 281 providers and more than KSh165 billion of issued credit. Each approval adds regulated distribution while keeping consumer protection, ownership and management standards tied directly to market access.

Kenya Expands Credit Regulation Beyond Digital Lenders

• Kenya published the Central Bank of Kenya (Non-Deposit Taking Credit Providers) Regulations, 2026 as Legal Notice No. 191, replacing the narrower Digital Credit Providers Regulations, 2022.
• The rules extend regulation across non-deposit credit businesses not regulated under other laws, including buy now pay later, stock now pay later, peer-to-peer lending and certain pay-as-you-go arrangements.
• Regulation 60 adds specific obligations for lenders using AI in lending decisions, including explainability, customer disclosure, human review, bias assessment, model accuracy, algorithmic transparency and data privacy controls.

Kenya is widening the regulatory perimeter from digital lenders to a broader class of non-bank credit providers while writing AI decision controls directly into lending rules. Fintech lenders now face a more unified licensing and governance model based on the credit activity itself rather than the digital channel used to deliver it.

Sustainable Finance ESG And Financial Inclusion

FCA Finalizes UK Sustainability Disclosure Rules for Listed Companies

• The Financial Conduct Authority finalized rules requiring covered listed companies to report against the UK Sustainability Reporting Standards on a comply or explain basis, replacing the existing listing regime aligned with TCFD.
• The rules apply to accounting periods beginning on or after January 1, 2027, with first reporting in 2028. Issuers receive one year of transitional relief for Scope 3 emissions disclosures and two years for wider sustainability disclosures under UK SRS S1.
• The framework applies across several UK listing categories and aligns company reporting with International Sustainability Standards Board standards endorsed by the UK, giving investors a more consistent basis for comparing sustainability risks and disclosures.

Listed companies now have a clearer timetable for rebuilding sustainability reporting around UK SRS, while investors and data providers can prepare for a broader and more comparable set of disclosures. The real test will be whether the new information improves pricing and risk analysis rather than adding another reporting layer that produces more data without better investment decisions.

Regulation And Policy

ICBA Sues OCC Over Crypto Trust Bank Charters

• The Independent Community Bankers of America filed suit against the Office of the Comptroller of the Currency challenging its authority to charter national trust banks conducting substantial non-fiduciary digital asset activities.
• The complaint asks the court to invalidate the OCC's March 2026 rule and Interpretive Letter 1176 and to vacate Protego's conditional national trust bank approval.
• ICBA argues that the charter pathway lets crypto firms enter the federal banking system without the same deposit insurance, Community Reinvestment Act obligations and consolidated regulatory structure applied to insured banks.

The national trust charter has become a contested market access route for digital asset firms. The lawsuit does not suspend the pathway, but it puts the OCC's legal authority and an existing conditional approval before a federal court, adding litigation risk to custody and crypto banking strategies built around the charter.

SEC Proposes Crypto Custody Rules for Advisers and Funds

• The U.S. Securities and Exchange Commission proposed new custody rules for registered investment advisers, registered investment companies and business development companies holding crypto assets.
• The proposal would create a tailored custody framework for crypto funds and securities, modernize related recordkeeping and reporting requirements, and address how regulated funds can hold crypto-related investments.
• Comments are due 60 days after publication in the Federal Register under file number S7-2026-35.

The proposal gives advisers and regulated funds a clearer route to offer crypto exposure without forcing digital assets into custody rules written for traditional securities. Custodian eligibility, asset control, recordkeeping and reporting now become concrete design questions for firms building institutional crypto products.

Korea FSC Proposes Rules for Tokenized Securities Market

• South Korea's Financial Services Commission proposed subordinate rule changes to implement tokenized securities issuance and circulation under revised capital markets and electronic securities laws from February 4, 2027.
• The proposal expands eligible tokenized securities beyond fractional investment products to stocks, bonds and funds and sets distributed ledger requirements for electronic registration.
• The rules also establish a KRW4 billion capital requirement for issuer-account-management businesses and create a licensing category for over-the-counter trading venues handling tokenized debt securities. The comment period runs from October 2 through November 11.

South Korea is filling in the operating rules needed for a regulated tokenized securities market rather than leaving implementation at the statutory level. Issuers, brokers and infrastructure providers can now model capital, registration and trading venue requirements ahead of the February 2027 start date.

SEC Considers New Knowledge-Based Paths to Accredited Investor Status

• The U.S. Securities and Exchange Commission opened five separate requests for comment on whether additional professional qualifications should allow individuals to qualify as accredited investors.
• The potential pathways include a new FINRA-developed accredited investor examination, U.S. CPA licences, CFA designations, CFP certification and certain FINRA Series 79, 86 and 87 qualifications.
• The SEC has not changed the accredited investor definition yet. The existing framework remains in place while the Commission considers whether these knowledge and credential-based pathways should supplement current wealth and professional qualification tests.

Accredited investor status is a direct gatekeeper for access to private securities offerings. If the SEC ultimately recognizes broader knowledge-based pathways, eligibility could move further away from wealth alone and toward demonstrated financial competence, expanding the potential investor pool for private markets while creating new qualification, testing and compliance requirements for issuers and intermediaries.

FCA Opens UK Crypto Authorization Gateway

• The Financial Conduct Authority opened applications on September 30 for firms seeking authorization or permission changes under the United Kingdom's new cryptoasset regulatory regime.
• The application period ends February 28, 2027, and firms undertaking newly regulated cryptoasset activities will need authorization under the Financial Services and Markets Act 2000.
• Existing FCA registrations under money laundering rules do not convert automatically, while firms already authorized for other FSMA activities must apply to vary their permissions.

The UK crypto regime has entered its licensing execution phase. Exchanges, custodians, stablecoin businesses and other affected firms now need to map regulated activities to permissions, prepare governance and control evidence, and decide early enough whether their UK business justifies a full authorization application.

ASIC Digital Asset Licensing Relief Expires

• ASIC's sector wide no action position for digital asset businesses reaches its September 30 deadline for firms that need to apply for or vary an Australian Financial Services licence.
• Firms requiring an Australian Market Licence or clearing and settlement facility licence also had to notify ASIC of their intention to apply and hold a pre application meeting by the deadline.
• From October 1, firms outside the no action conditions risk breaching financial services law. ASIC has recorded more than 45 applications for relevant digital asset authorizations since its guidance was updated in October 2025.

Australia's transition period is ending and licensing status now becomes an operating constraint rather than a future planning issue. Digital asset firms need to know which existing authorizations cover their products, where market or clearing licences are required, and whether any activity must stop while an application proceeds.

ESMA Proposes MiCA Rules for DeFi, Staking, Lending and Tokenized Markets

• The European Securities and Markets Authority proposed changes to MiCA covering staking, lending, borrowing, crypto marketing, cost transparency, third country firms and access to decentralized finance protocols.
• ESMA recommends creating a new regulated cryptoasset service for firms that give users access to DeFi protocols, alongside clearer criteria for deciding when an activity is genuinely decentralized and stronger powers to address unauthorized firms and noncompliant stablecoins.
• ESMA also calls for a framework for tokenized securities and onchain settlement that can support an integrated European tokenized capital market and future cross border activity.

The MiCA review is starting to move beyond exchanges and token issuers into services that sit around DeFi, staking, lending and tokenized securities. If the Commission follows ESMA's recommendations, firms that currently operate near the edge of the regulated perimeter could face explicit authorization, disclosure and supervision requirements across a much wider set of crypto business models.

Risk Compliance And Regtech

France AMF Finds Investor Protection Weaknesses at Crowdfunding Platforms

• France's Autorité des Marchés Financiers published findings from five crowdfunding service provider inspections covering investor knowledge tests, loss capacity assessments, key investment information sheets, complaints, governance and internal controls.
• The inspections reviewed practices from January 2023, or the provider's authorization date if later, through December 2025. The AMF identified incomplete or poorly formulated investor knowledge questions and weaknesses in how platforms assessed investors' ability to bear losses.
• The regulator called for stronger investor assessments and clearer investment information under the European crowdfunding rules. The findings concern existing supervisory obligations rather than a new EU regulation or enforcement penalty.

Crowdfunding platforms cannot treat investor questionnaires as routine onboarding paperwork. The AMF findings put attention on whether questions actually assess investor understanding, whether loss capacity checks are meaningful and whether investment documents support informed decisions. Canadian funding portals should review the evidence behind their own investor assessments and disclosure controls before weaknesses surface through complaints or regulatory examinations.

AMLA Finalizes Three Standards for Private-Sector AML Controls

• The EU Anti-Money Laundering Authority finalized three regulatory technical standards covering customer due diligence, the treatment of business relationships and occasional or linked transactions, and minimum group-wide AML/CFT arrangements.
• The customer due diligence standard sets expectations for information collection and verification, including non-face-to-face checks, electronic identification, proportionate measures for lower-risk situations and screening of politically exposed persons, their family members and close associates.
• The final draft standards have been submitted to the European Commission. Once adopted and published in the Official Journal, they are proposed to apply six months after entering into force.

AMLA is turning the EU's new anti-money laundering framework into a more consistent operating rulebook for private-sector firms. The practical change is less national interpretation around onboarding, transaction classification and group controls, which raises the value of standardized compliance infrastructure for fintechs and financial institutions operating across multiple EU markets.

U.S. Treasury Targets A7 Shadow Banking Network and A7A5 Token

• The U.S. Treasury sanctioned the A7 Network as a significant transnational criminal organization and described it as a shadow banking network used to move funds around sanctions.
• FinCEN proposed prohibiting covered financial institutions from transmitting funds involving A7 sub-agents and issued an alert to help institutions identify and report related suspicious activity.
• Treasury also identified the ruble-backed A7A5 token as part of the network's payment infrastructure, tying digital asset screening directly to the enforcement action.

The action pushes sanctions compliance beyond named entities to payment routes, controlled sub-agents and tokenized value. Banks, payment firms and digital asset platforms need transaction monitoring that can connect counterparties, wallets, ownership links and payment infrastructure when a network is designed to disguise who is moving the money.

BIS and Bank of Canada Launch AI Supervision Project for Payment Firms

• The BIS Innovation Hub Toronto Centre and Bank of Canada launched Project Inuksuit to examine whether AI analysis of approved public and open source data can give supervisors earlier visibility into risks affecting payment service providers.
• The proof of concept will monitor authorization status and public representations, safeguarding and access to funds, operational disruption, and publicly visible dependency concentration between formal reporting cycles.
• The system is designed to produce structured evidence packs with provenance, corroboration and uncertainty for analyst review rather than replace verified supervisory findings.

Project Inuksuit adds public data to the supervisory toolkit between formal reporting cycles. PSPs should expect status pages, customer notices, registries and partner disclosures to carry more supervisory weight, making consistent public information and fast correction of inaccurate disclosures part of operational risk management.

FCA Finalizes Prudential Risk Guidance for Crypto Firms

• The Financial Conduct Authority finalized guidance on the overall risk assessments required under COREPRU 7 and CRYPTOPRU 7, including how firms should identify material risks, run stress tests and assess whether they hold enough financial resources.
• For crypto firms, the guidance applies to firms including custodians, custodial staking providers and qualifying stablecoin issuers and covers recovery planning, wind down preparation and the assessment of risks that could threaten the viability of the business.
• FG26/9 and FG26/10 come into force on October 25, 2027 alongside the UK's new crypto regulatory regime, giving firms a defined prudential framework to prepare against before authorization and ongoing supervision.

The FCA is giving crypto firms a clearer test for whether their capital, liquidity, recovery plans and wind down arrangements match the risks they actually run. That makes prudential readiness part of the operating build for firms seeking UK authorization, not something they can leave until after the new regime takes effect.

Oracle Launches Agentic AI for Financial Crime Investigations

• Oracle Financial Services made Oracle Nexus Case Flow and Nexus Reach available for financial crime investigations across AML, fraud, sanctions, KYC and related compliance workflows.
• The agentic capabilities can pre-investigate cases, assemble entity context, identify risk patterns, conduct adverse-media scans and prepare investigative narratives and recommendations for human review.
• Nexus Reach can extend the AI capabilities into existing Oracle, non-Oracle and on-premises case-management environments through a browser extension, while investigators retain responsibility for final decisions.

Agentic AI can now enter regulated investigation workflows without requiring a bank to replace its existing case-management platform. Autonomous evidence gathering and narrative preparation add to the AI compliance burden around permissions, audit records, overrides and accountability, while investigators remain responsible for final decisions.

SME Finance And Business Banking

American Express Integrates Corporate Cards, Spend Controls and Expense Management

• American Express launched the next generation of Amex Corporate, combining Corporate Cashback Cards, expense management software and the Amex Expense mobile app in one operating platform.
• Finance teams can apply employee-specific spending controls, automatically capture Corporate Card transaction data and manage approval and expense workflows through the same environment.
• The platform is designed to reduce manual reconciliation and give finance teams a consolidated view of cards, expenses, controls and company spending.

American Express is pulling card issuance and expense software into one financial operations layer rather than leaving corporate customers to connect separate card and spend-management systems. Its commercial distribution gives the integrated model significant reach and adds direct competition for fintech expense platforms built around cards, controls and automated reconciliation.

Experian Adds 500+ Cash Flow Signals to Small Business Underwriting

• Experian launched Cashflow Attributes for commercial lenders, converting permissioned business bank transaction data into more than 500 attributes for underwriting and credit decisioning.
• The data covers liquidity, revenue trends, operating expenses, debt exposure and repayment capacity and is designed to supplement rather than replace traditional commercial credit information.
• Experian reports preliminary analysis showing up to a 24% lift in predictive performance for thin-file businesses when Cashflow Attributes are combined with traditional commercial credit data.

Business bank transaction data can now feed underwriting directly instead of remaining a separate cash flow report. For lenders serving newer or thin-file companies, the combination of more than 500 cash flow attributes and traditional credit data provides another way to price risk using current operating information instead of relying mainly on historical credit records.

Wealthtech Investing And Trading

Robinhood Announces Dedicated Trading Accounts for AI Agents

• Robinhood announced Robinhood Agents, which will let eligible U.S. customers build an AI agent, connect it to a dedicated self directed brokerage account, choose the model and set trading instructions and limits.
• Agentic accounts can require approval before an order is placed or allow automated execution without individual confirmation, while Robinhood states that customers remain responsible for trades executed by their agents.
• Robinhood also announced planned perpetual futures, earnings contracts and weekend U.S. equity trading, while its existing Social product is now live to all eligible U.S. customers.

Retail brokerage now extends AI from research assistance into delegated trade execution inside a regulated account. The critical controls become account permissions, model and data dependencies, trading limits, approval settings and responsibility for autonomous orders, especially when agents can continue operating without a confirmation for every trade.

Weekly Close

This week closed with access and control changing at the same time. Payments Canada added six members as firms line up for future Real-Time Rail participation, Kenya widened regulation across non-bank credit and added explicit AI lending controls, and the SEC proposed a workable custody regime for advisers and funds holding crypto. New payment and treasury infrastructure also moved stablecoins and Sharia-compliant liquidity deeper into operating workflows, while the ICBA challenge to OCC trust charters put another digital asset access route under legal pressure. Across the page, AI agents gained more authority in checkout, trading, insurance and investigations as regulators focused more directly on permissions, cybersecurity, custody and accountability.

Get the weekly Whisperer and related market intelligence through NCFA's newsletter, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.

---

The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit www.ncfacanada.org