Oct 3, 2026 | Last Updated: Oct 20, 2026 | NCFA Fintech Whisperer | Artificial Intelligence And Data, Digital Banking And BaaS, Capital Markets Infrastructure And Funding, Wealthtech Investing And Trading, Cross Border Payments And FX, Payments Infrastructure And Money Movement, Cybersecurity Fraud And Financial Crime, Regulation And Policy, Risk Compliance And Regtech, Embedded Finance, Lending Consumer Credit And BNPL, Treasury Liquidity And Cash Management, Digital Assets Blockchain And Tokenization, Digital Identity And Trust

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-March 13, 2026, March 14-March 20, 2026, March 21-March 27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-June 19, 2026, June 20-June 26, 2026, June 27-July 3, 2026, July 4-July 10, 2026, July 11-July 17, 2026, July 18-July 24, 2026, July 25-July 31, 2026, August 1-August 7, 2026, August 8-August 14, 2026, August 15-August 21, 2026, August 22-August 28, 2026, August 29-September 4, 2026, September 5-September 11, 2026, September 12-September 18, 2026, September 19-September 25, 2026, September 26-October 2, 2026).

Weekly Fintech Market Intelligence Oct 3 - Oct 9, 2026

Artificial Intelligence And Data

OSFI Makes Frontier AI a Supervisory Risk Focus for Canadian Finance

• Canada's Office of the Superintendent of Financial Institutions says frontier AI can amplify cyber, technology, third party and reputational risks across federally regulated financial institutions.
• OSFI says institutions should strengthen governance, controls and testing as AI capabilities advance, while boards and senior management remain accountable for the results.
• The regulator is increasing its ability to assess frontier AI, technology concentration and critical third party dependencies and says these issues will remain part of its supervisory work.

Canadian banks and insurers now have a clearer view of what OSFI expects them to manage as frontier AI moves into financial operations. Firms will need evidence that they can test advanced models, understand critical dependencies and assign responsibility when AI affects important services.

Digital Banking And BaaS

Modern Treasury Applies for National Trust Bank Charter

• Modern Treasury submitted an application to the Office of the Comptroller of the Currency to establish Modern Treasury National Trust Bank.
• If approved, the limited purpose national trust bank would provide federally supervised digital asset custody and related fiat services alongside Modern Treasury's payments and settlement capabilities.
• Modern Treasury says its platform has powered more than US$600 billion in payments. The proposed bank would operate separately from the company's software and payment services.

Modern Treasury is trying to move from orchestrating regulated money movement to owning a federally supervised custody capability. That extends the strategy behind its earlier integrated payment infrastructure and would give the company more direct control over custody, settlement and the service boundary between fintech infrastructure and bank partners.

Rain Applies to Establish National Trust Bank

• Rain filed an application with the Office of the Comptroller of the Currency to establish Rain National Trust Bank, a proposed national trust bank based in New York.
• If approved, the bank would provide fiduciary custody for digital assets and U.S. dollars, manage reserves for permitted stablecoin issuers and issue or redeem U.S. dollar backed stablecoins for institutional clients.
• The proposed bank would not accept deposits, offer consumer accounts or make commercial loans. Rain says its infrastructure already supports stablecoin cards, wallets and money movement products used by millions of end users.

Rain is seeking to put custody, reserve management and stablecoin issuance inside a federally supervised institution rather than relying on separate providers for each function. Approval would give its fintech and enterprise customers a more direct regulated path from stablecoin infrastructure to banking controls.

hashbank Adds External Crypto Transfers Inside Licensed Banking

• hashbank added the ability to receive digital assets from external wallets, convert them to fiat and send assets to external blockchain addresses from the same banking application.
• The service supports more than 150 digital assets and applies authentication, address verification, anti money laundering procedures and blockchain analytics to transfers.
• The bank holds a full banking licence from the National Bank of Georgia, began live operations in 2024 and reports approximately 60,000 customers across 73 countries.

A licensed bank is putting external wallet activity inside the same operating environment as fiat accounts. That makes blockchain screening, address verification and conversion part of the banking control stack and gives customers a regulated route between bank balances and self custody without routing every transfer through a separate crypto platform.

Singapore Gulf Bank Adds Banking Infrastructure for Rain

• Singapore Gulf Bank will provide Rain with operational, client money and virtual accounts, primarily in U.S. dollars.
• The account infrastructure supports daily cash flows, client fund segregation and reconciliation as Rain's transaction volumes increase.
• Rain was the first cryptocurrency exchange licensed by the Central Bank of Bahrain. Both Rain and Singapore Gulf Bank operate under CBB regulation.

Client money accounts and reconciliation are core operating controls for a regulated exchange, not peripheral banking services. Bringing those functions into a CBB regulated bank relationship gives Rain a more direct operating path for safeguarding customer funds and managing liquidity as its regional business grows.

Capital Markets Infrastructure And Funding

Airtel Money Begins Conditional London Trading

• Airtel Money began conditional dealings on the London Stock Exchange on October 9 following an offering priced at £1.96 per share, implying an equity valuation of approximately US$7 billion.
• The offer involved 270 million existing shares and approximately US$703 million of proceeds to selling holders; it was not a US$703 million primary capital raise by Airtel Money.
• Unconditional dealings and admission to the FCA Official List are expected October 14. Airtel Africa remains a long-term strategic shareholder of the mobile financial services business.

A mobile money operator with a major African distribution footprint is entering public markets as a separately traded financial platform. Investors can value payments, digital wallets and related services independently from the parent’s telecom business. The deal also tests public-market appetite for financial inclusion businesses with extensive networks and operating exposure across African jurisdictions.

Securitize Launches Tokenized U.S. Stocks for U.S. and Global Investors

• Securitize launched tokenized access to 12 U.S. stocks, including Apple, Microsoft, Nvidia, Alphabet, Tesla, Meta and Amazon, through its registered broker dealer platform.
• Each token is backed one for one by an underlying share and represents a security entitlement under U.S. commercial law, preserving applicable economic rights including dividends and voting rights where the underlying share carries them.
• The product launched on Solana with USDC settlement and is expected to connect with Tokenized Securities Venues including OKXICE as the new U.S. tokenized stock market structure develops.

Tokenized U.S. equities have moved from venue design into a live regulated product available to eligible investors. Securitize is combining conventional share backing and investor rights with blockchain settlement, giving the market a practical test of whether tokenized stocks can expand without separating investors from the legal rights attached to the underlying shares.

DailyPay Adds US$200 Million in Securitized Funding for Earned Wage Access

• DailyPay completed a US$200 million asset-backed securitization of earned wage access receivables, its second such transaction following a US$200 million issuance in June 2025.
• The transaction brings DailyPay's total receivables-backed debt financing to approximately US$1.4 billion, including its US$960 million secured credit facility. The offering comprised four classes of notes rated from AA (sf) to BB (sf) by Morningstar DBRS.
• Citi acted as lead bookrunner and structuring agent, joined by Bank of America and Barclays as joint bookrunners. Canadian bank Scotiabank was among the co-managers. DailyPay reports serving more than 2,000 employers and six million employees.

Earned wage access providers must finance payments to employees before the employer's scheduled payroll date. DailyPay's second securitization expands that capacity and gives institutional investors another way to fund short duration payroll receivables. For fintech lenders and funding partners, the important question is whether access to asset-backed financing can reduce capital costs enough to support growth while keeping funding available through weaker credit markets.

Startale Opens Japan Bond Paying Interest and Principal in JPYSC

• Startale Japan opened subscriptions for a digital corporate bond that will pay both interest and principal redemption in JPYSC, a yen denominated trust type stablecoin issued by SBI Shinsei Trust Bank.
• Startale says it is Japan's first digital corporate bond to use a yen denominated trust type stablecoin for both interest and principal payments. The offering totals ¥99.9 million and carries a fixed annual rate of 5.00%.
• JPYSC qualifies as a Type 3 Electronic Payment Instrument under Japan's Payment Services Act, while SBI Shinsei Trust Bank issues the stablecoin and manages the trust assets backing it.

The bond puts a regulated yen stablecoin into the full payment lifecycle of a conventional financing instrument. If the model works operationally, issuers can test stablecoin settlement against familiar corporate debt obligations rather than limiting use to transfers, trading or standalone token experiments.

UK Appoints RBC and Five Banks to Digital Gilt Pilot

• HM Treasury selected Barclays, HSBC, Lloyds, Morgan Stanley, NatWest and RBC Capital Markets as joint lead managers for the Digital Gilt Instrument pilot.
• The managers will support underwriting, investor engagement and distribution of the proposed digitally native, short-dated sovereign bond.
• The pilot is expected by the first quarter of 2027 and is designed to use a platform inside the UK Digital Securities Sandbox, with settlement recorded onchain. No completed bond issuance was announced on October 6.

RBC’s participation gives Canadian capital markets expertise a direct role in a sovereign issuance experiment, not just a vendor demonstration. For dealers, custodians and infrastructure providers, the practical questions are how digital securities enter established distribution channels and who controls the asset record, settlement and post-issuance servicing.

Sygnum Opens Fidelity Tokenized Liquidity Access in Singapore

• Sygnum opened Fidelity International's tokenized U.S. dollar liquidity solution to accredited and institutional investors in Singapore through Sygnum Pte. Ltd.
• Sygnum's Singapore entity is licensed by the Monetary Authority of Singapore, while its Desygnate infrastructure supports the tokenized product's onchain fund registry, settlement and subscription functions.
• The Fidelity product first launched with Sygnum in Switzerland in May 2026, making the Singapore rollout an expansion of regulated investor access rather than a new issuance.

An institutional tokenized liquidity product that already operated in Switzerland now has a licensed access route in Singapore. The expansion tests whether tokenized cash management products can move across regulated entities and jurisdictions without rebuilding the underlying issuance and administration infrastructure each time.

CFTC Allows Conditional Conversion to Perpetual Index Futures

• The CFTC’s Division of Market Oversight issued no-action relief permitting designated contract markets to convert certain existing perpetual-style broad-based security index futures into contracts without an expiration date.
• Conditions include seeking feedback from position holders, giving advance notice and an opportunity to exit, providing risk disclosures, preserving other material contract terms and filing rule amendments.
• The relief expires October 20, 2026. It does not provide open-ended permission to list any new perpetual futures product.

Exchange operators have a narrowly defined window to alter an existing contract structure, but only with procedural safeguards for participants. The relief provides a near-term test of how regulators handle continuous futures exposure and legacy open positions. Firms should focus on the eligibility conditions and deadline rather than extrapolate a general approval of perpetual derivatives.

OKXICE Files Notice for Tokenized U.S. Stock Venue

• OKXICE filed the public notice required to operate a Tokenized Securities Venue under the SEC's temporary conditional exemption for tokenized National Market System stocks.
• The venue plans permissioned automated market maker liquidity pools on XLayer, with tokenized stocks paired against USDC, USDG or USDT and access restricted to approved wallets that pass identity, sanctions and wallet screening.
• The notice lists more than 60 U.S. stocks for planned trading and requires third party tokenized shares to be backed one for one by underlying securities held through a registered broker dealer.

The SEC's five year pathway for tokenized U.S. stock trading now has a concrete venue design behind it. OKXICE combines permissioned wallets, stablecoin settlement, automated liquidity and broker held share backing, turning an exemption into an operating model that other tokenized securities venues can be measured against.

Digital Identity And Trust

Japan FSA Urges Stronger Cyber and Digital Identity Controls

• Japan's Financial Services Agency issued an October 9 notice to financial institutions following unauthorized access incidents involving customer-facing systems, including breaches exposing identity document images and other personal information.
• Institutions were asked to review cybersecurity controls, third party risk management and incident response arrangements, and correct deficiencies promptly. The notice also calls for stronger verification of identity document and facial images during remote customer onboarding.
• From April 1, 2027, regulatory changes will generally discontinue identity verification based on submitted document images in favour of reading IC-chip information. The FSA urged institutions to strengthen their procedures ahead of that deadline rather than wait for implementation.

Remote onboarding is becoming a larger fraud control and technology migration issue for Japanese financial institutions. Banks and fintechs need to test how document authentication, chip reading, customer identity verification and fraud monitoring work together. Providers still relying on uploaded document images face a concrete transition deadline, while recent breaches put pressure on firms to tighten controls sooner.

Wealthtech Investing And Trading

Thailand SEC Finalizes Crypto ETF Rules for Bitcoin and Ethereum

• Thailand's Securities and Exchange Commission issued 11 notifications establishing a regulatory framework for cryptocurrency exchange traded funds. The rules take effect on October 16, 2026.
• Initially, eligible funds may invest in Bitcoin and Ethereum. Crypto ETFs must operate as passive investment vehicles, maintain average annual net exposure of at least 80% to the underlying cryptocurrency and trade exclusively on the Stock Exchange of Thailand.
• The framework requires SEC regulated digital asset custody, investor risk acknowledgements and restrictions on margin lending. It also permits qualified digital asset businesses to serve as fund supervisors and allows domestic mutual funds and private funds to invest in Thai crypto ETFs within existing limits.

Thailand has moved from consultation to a defined route for domestic crypto investment funds. Asset managers, custodians and brokers now have clearer operating requirements, although fund approvals and individual product launches still lie ahead. The limits on eligible assets, custody and leverage will influence which firms can compete and how much crypto investment activity enters regulated capital markets.

FCA Consults on Redemption Terms for Illiquid Retail Funds

• The Financial Conduct Authority opened consultation CP26/35 on aligning redemption terms with the time needed to sell illiquid assets in authorized retail investment funds.
• The proposals focus on non-UCITS retail schemes with at least 50% of assets in inherently illiquid investments, including relevant exposures held through pensions and other wrappers.
• The consultation closes December 11, 2026. The FCA has not yet imposed final redemption changes on the affected funds.

Liquidity promises and asset liquidity have to match. Fund managers and distributors should compare proposed redemption terms with actual asset disposal periods, investor expectations and the operations of savings wrappers. For private market access products, the consultation adds another regulatory reference point for designing redemption rights before fundraising begins.

ASIC Sandbox Authorizes Pocket Adviser AI Investment Advice

• The Australian Securities and Investments Commission lists Pocket Adviser Pty Ltd as an active user of its enhanced regulatory sandbox, with an exemption effective October 8, 2026.
• The exemption covers personal and general advice to retail clients on specified bank deposit facilities and securities listed on prescribed Australian financial markets.
• Pocket Adviser intends to offer an AI-powered mobile and web service creating personalized ETF investment plans for people aged 18 to 30. The exemption expires October 7, 2028; the register does not establish that the product has commercially launched.

A startup can test a defined investment advice offering through an existing regulatory exemption without claiming general permission to automate every advice function. The useful comparison for Canadian wealthtech founders is how sandbox scope, product limitations and retail safeguards affect the journey from prototype to licensed distribution. Evidence of live advice quality and client outcomes remains a separate test.

La Caisse Takes a Bigger Role in FNZ's Turnaround

• The Financial Times reported that La Caisse, FNZ's largest investor, became more directly involved in the global wealth technology company's turnaround after another management change.
• FNZ appointed Stephen Welch Executive Group Chair and interim CEO in September. Its board currently includes three La Caisse representatives, alongside directors representing Motive Partners and Generation Investment Management.
• FNZ has raised US$2.6 billion from existing shareholders since August 2024. The company reports US$2.5 trillion of assets on platform and more than 30 million end customers.

This is no longer only a financing story. A major Canadian pension investor is using board influence and management changes as FNZ works to improve delivery and profitability. For private fintech investors, the case shows what ownership can require when a large platform needs more capital and investors cannot rely on an easy exit.

Cross Border Payments And FX

Payward and Singapore Gulf Bank Connect 24/7 Settlement

• Payward integrated SGB Net, Singapore Gulf Bank's real time multicurrency clearing network, for selected institutional clients in Asia and the Gulf region.
• The connection lets participating clients settle transactions instantly 24 hours a day, seven days a week, starting with U.S. dollars. Additional currencies and clients are planned.
• Singapore Gulf Bank will also use Kraken Prime as an additional source of digital asset liquidity.

Digital asset markets already trade continuously while fiat funding still depends heavily on bank cutoffs. Connecting a regulated bank clearing network directly to institutional digital asset infrastructure reduces that timing gap and gives participating firms a more continuous way to manage settlement, liquidity and counterparty funding.

Payments Infrastructure And Money Movement

Mastercard Sets European Offline Card Payment Deadlines

• Mastercard will require newly issued cards across Europe to support offline payments from February 2027 and new or replacement terminals to support the capability from May 2027.
• Offline chip-and-PIN transactions can receive local approval during connectivity failures, within a bank-set limit of up to €200 per transaction, and are submitted for clearing after connections return.
• The capability already operates in Denmark, Sweden, Estonia and Latvia. The new requirements extend acceptance and issuance obligations across Mastercard’s European network.

Resilience is becoming a card-issuance and terminal-procurement requirement, not merely a contingency plan. Issuers, acquirers and merchants need to examine device capabilities, authorization limits and reconciliation processes before replacement cycles lock in incompatible equipment. Canadian payment providers should consider how outage tolerance is built into their own acceptance infrastructure.

BDO Unibank Moves Swift and PESONet Processing Onto Finastra

• BDO Unibank deployed Finastra Global PAYplus for high value and mass payments, including Swift and inbound PESONet processing.
• The bank is bringing payment processing into a common hub with greater automation, configurable rules, ISO 20022 support and resilience controls.
• Finastra says BDO is the largest commercial bank in the Philippines using Global PAYplus and can connect additional payment networks through the same platform.

BDO is consolidating domestic and international payment processing around one operating layer rather than maintaining separate systems for each rail. That can make it easier to add networks, apply common controls and automate routing as payment formats and clearing requirements change.

Cybersecurity Fraud And Financial Crime

CrowdStrike Finds Agentic AI Used Against South Korean Financial Firms

• CrowdStrike found infrastructure linked to a campaign against South Korean financial organizations that resulted in data theft from late September into early October.
• The attacker used ARTEX, an open source agentic penetration testing tool, alongside several large language models to research vulnerabilities and conduct intrusion activity.
• CrowdStrike says the campaign demonstrates how a financially motivated attacker can use AI tools to conduct multiple intrusions in a short period and expects adversaries to keep experimenting with this approach.

Banks now have to defend against attackers who can automate parts of vulnerability research and intrusion work that previously required more manual effort. The campaign makes agentic AI a live financial security problem, not only a future model risk, and raises the value of rapid detection across shared infrastructure and third party systems.

Regulation And Policy

EU Council Agrees New Supervision Model for Capital Markets

• The Council of the European Union agreed key elements of its negotiating position on the Market Integration and Supervision Package, covering trading venues, securities depositories, central counterparties and crypto service providers.
• Its position would transfer oversight of significant cross-border market operators to ESMA, while reserving direct supervision of crypto service providers for the most significant cross-border firms.
• The package also proposes a voluntary pan-European market operator licence and a depositary passport for funds. The Council position is not enacted legislation and must proceed through the EU legislative process.

The proposal would change who supervises major trading and post-trading infrastructure and how firms expand across EU borders. Exchanges, fund operators and crypto providers need to examine the proposed significance thresholds and licensing options, not assume that every institution will face the same supervisor. For Canadian firms entering Europe, the eventual perimeter could materially affect expansion costs.

ESMA Tells EU Crypto Firms to Stop Services for Non MiCA Stablecoins

• The European Securities and Markets Authority says crypto firms authorized under MiCA should stop providing EU clients services involving stablecoins that do not comply with MiCA.
• The position covers trading platforms, exchanges, execution, order handling, advice, transfers, custody, administration and portfolio management.
• National regulators should require firms to prevent clients from acquiring or increasing exposure to non compliant stablecoins and remediate remaining existing exposures as soon as possible and no later than three months after the opinion.

This gives EU crypto firms a concrete operating deadline rather than a general warning about unauthorized stablecoins. Platforms need controls that can identify affected tokens, restrict new exposure and manage existing positions across trading, custody and transfer services.

CSA Bans Investment Fund Chargeback Compensation

• The Canadian Securities Administrators published final amendments to National Instrument 31-103 that prohibit chargeback arrangements in the distribution of publicly offered investment fund securities.
• Under these arrangements, a dealer or dealing representative can be required to repay upfront compensation when an investor redeems securities before a specified period ends.
• The regulator identified a conflict between an adviser’s financial incentive to retain a client’s investment and the client’s freedom to redeem. The amendments change the permissible compensation structure, rather than banning upfront commissions generally.

Dealers need to identify contracts and compensation schedules that expose representatives to redemption-related clawbacks and prepare for the new requirements. The compliance question reaches beyond disclosure: compensation design itself can influence recommendations and client outcomes. Canadian investment platforms and distributors should check how their adviser agreements and oversight controls need to change.

CFTC Opens Rulemaking Inquiry on Retail Crypto Transactions

• The Commodity Futures Trading Commission issued an advance notice of proposed rulemaking on leveraged, margined and financed retail crypto asset transactions under the Commodity Exchange Act.
• The agency is seeking input on a potential crypto-specific category of designated contract market registration and the conduct and customer protection requirements that should accompany it.
• Comments are due 60 days after publication in the Federal Register. The notice requests information for possible future rules; it does not itself authorize a new category of crypto exchange.

A dedicated federal market category could change the choice between existing derivatives venues and new crypto trading infrastructure. Exchanges and brokers should assess which products fall inside the transaction definitions and what market surveillance, registration and customer controls may follow. The consultation is an early opportunity to influence the rules before firms commit to a licensing model.

FinCEN Withdraws Two Proposed Digital Asset Compliance Rules

• The U.S. Financial Crimes Enforcement Network (FinCEN) formally withdrew two proposed digital asset regulations concerning transactions involving convertible virtual currencies, unhosted wallets and cryptocurrency mixing.
• The first proposal would have imposed additional recordkeeping, identity verification and reporting requirements on certain cryptocurrency transactions involving unhosted wallets. The second proposed a special anti-money laundering measure targeting cryptocurrency mixing as a class of transactions of primary money laundering concern.
• FinCEN confirmed both withdrawals on October 5, 2026, following consideration of public comments. Neither proposal had become a final rule, so the withdrawals do not repeal existing anti-money laundering obligations.

Crypto exchanges, custodians and other financial intermediaries now have greater clarity about two compliance proposals that will not proceed in their existing form. The withdrawals remove potential additional reporting and verification requirements while leaving established anti-money laundering obligations intact. For firms serving U.S. customers, the decision affects compliance planning and investment in transaction monitoring, particularly where digital asset activity involves self-hosted wallets or mixing services.

Risk Compliance And Regtech

American Express Faces US$350 Million AML Penalty

• The Office of the Comptroller of the Currency assessed a US$350 million civil penalty and a cease-and-desist order against American Express National Bank for Bank Secrecy Act and anti-money laundering program deficiencies.
• The OCC cited inadequate staffing and expertise, weak risk assessments, testing and training, and customer due diligence that failed to reflect the bank’s substantial credit and charge card activities.
• Breakdowns in suspicious activity monitoring and reporting affected approximately US$13 billion in suspected trade-based money laundering activity over the past decade. The Federal Reserve issued coordinated orders against related American Express entities.

A compliance program designed around a small deposit business cannot be assumed sufficient for a much larger card network exposure. Banks and payment companies need risk assessments that match actual transaction flows, backed by staff capacity, independent testing and timely escalation. The coordinated orders also underline how failures across related entities can become a group-wide supervisory issue.

MAS Sets Financial Sector AI Risk Guidelines

• The Monetary Authority of Singapore published artificial intelligence risk management guidelines applying to financial institutions across banking, securities, payment services and insurance.
• The guidelines address AI governance, risk identification, oversight and controls proportionate to each institution’s exposure, including the scale and nature of its AI applications.
• The guidelines take effect on October 7, 2027. This is a published supervisory standard, not evidence that every AI use case requires separate regulatory approval.

Institutions now have a defined preparation period to identify where AI enters customer decisions, critical operations and outsourced services. Model inventories, accountable owners and evidence of controls will need to stand up to supervisory review. The comparison for Canadian institutions is how OSFI’s principles translate into documented practices alongside the more explicit Singapore requirements.

S&P Global Launches Risk Assessments for Digital Asset Lending Vaults

• S&P Global Ratings launched its Vault Risk Assessment, a forward looking analytical framework for digital asset lending vaults that evaluates the relative risk of impairment to an investor's position.
• The framework assesses portfolio credit quality, liquidity mismatch, curator, blockchain, protocol, vault security and governance risk. S&P says the assessment is not a credit rating and does not comment on yield.
• S&P says deposits in digital asset lending vaults reached approximately US$10 billion in September 2026, up from US$1.5 billion in September 2024.

Institutional risk infrastructure is forming around onchain credit markets as capital moves into lending vaults. A standardized external assessment gives allocators another way to compare structures that differ in credit quality, liquidity, protocol exposure and governance, which can influence which vaults become investable for larger institutions.

Embedded Finance

SAP Pay Adds Circle USDC and EURC to Cloud ERP Payments

• Tereina and Circle are integrating USDC and EURC into Tereina's payment infrastructure, starting with eligible SAP Cloud ERP customers using SAP Pay.
• SAP Pay sits directly inside SAP Cloud ERP and can support traditional payment methods alongside digital currency rails without moving payment execution into a separate application.
• USDC is intended for eligible U.S. dollar payment workflows and EURC for euro workflows, giving businesses another settlement option inside existing ERP processes.

Adding regulated stablecoins to an ERP payment workflow brings programmable stablecoin payments closer to routine corporate finance. Businesses can test digital currency settlement inside the same systems already used for invoices, payment approval and reconciliation instead of building a separate crypto payment process.

Lending Consumer Credit And BNPL

Plaid Expands LendScore Into AI Credit Decision Infrastructure

• Plaid expanded its LendScore family with an upgraded core model, specialized scores for auto, short term and home lending, and LendScore Arc, a transformer based credit risk model that learns from transaction sequences.
• Plaid reports 42% greater predictive lift than traditional credit data alone for its core model, alongside 39% lower delinquency at the same approval rate and 6.3% more approvals at the same level of risk.
• The scores use consumer permissioned financial data and Plaid network insights and are delivered through Plaid Check, its consumer reporting agency, for use in approvals, pricing, credit limits and other lending decisions.

Plaid is moving beyond account connectivity into the decision layer of lending. The same permissioned financial data infrastructure used to connect accounts can now feed regulated underwriting, giving Plaid a larger role in how lenders translate open banking data into approvals, pricing and credit limits.

Experian Creates Cashflow Data Bureau for Open Banking Underwriting

• Experian announced Experian Cashflow Data Bureau Inc., a new consumer reporting agency operating under the Fair Credit Reporting Act.
• The bureau brings together consumer consent and connectivity, standardized cash flow reporting, transaction categorization, attributes and scoring, analytics and decisioning around permissioned bank account data.
• Experian says the new bureau is designed to make cash flow information easier for lenders to incorporate alongside traditional credit data rather than replace existing credit histories.

Experian is turning permissioned bank transaction data into formal consumer reporting infrastructure rather than treating cash flow as an additional analytics product. That gives lenders a regulated path to combine traditional credit files with current financial behaviour and moves open banking data deeper into mainstream underwriting architecture.

Treasury Liquidity And Cash Management

OCBC and Ant Open 24/7 Tokenized Deposit Treasury Corridor

• OCBC introduced a tokenized deposit solution for Ant International that supports continuous intra-group treasury management and liquidity transfers between Singapore and Malaysia.
• The service is available through Ant International’s WhaleRTP platform and initially enables SGD- and USD-denominated tokenized deposit transfers around the clock.
• The arrangement builds on OCBC’s existing bank tokenization work. It is a treasury service for Ant entities, not a general retail stablecoin payment launch.

Treasurers are gaining a way to reposition bank liquidity outside normal banking cutoffs while retaining a commercial bank deposit relationship. The operational work shifts to liquidity controls, access permissions, currency coverage and reconciliation across group entities. The important expansion test is whether the model can extend to more banks and corporate customers.

Ant International and HSBC Expand Tokenized Deposits Into UAE Treasury

• Ant International and HSBC completed pilot transactions using HSBC's Tokenised Deposit Service for real time UAE dirham transfers inside the UAE and U.S. dollar transfers initiated from the UAE to markets including Hong Kong and Singapore.
• The transactions originated through Ant International's WhaleRTP blockchain based treasury platform and executed in real time through HSBC's tokenized deposit infrastructure.
• Ant International is HSBC's first Middle East client to use the service. HSBC says its Tokenised Deposit Service is live in six markets, while WhaleRTP is supported by more than 20 banks and handles more than 17 currencies.

The pilot extends an already live bank tokenized deposit network into a new treasury region and cross border corridor. For multinational companies, the operating question is whether these networks can make liquidity movable across markets and currencies in real time without creating a separate treasury stack outside existing banking relationships.

Digital Assets Blockchain And Tokenization

Bank of Russia Admits First Nine Registered Crypto Operators

• The Bank of Russia registered five digital depositories and four organizations conducting digital currency exchange activities under transitional provisions of legislation effective September 1, 2026.
• Digital depositories may record and transfer digital currencies and digital rights. Registered exchange operators may buy and sell digital currencies on their own account outside organized trading.
• The admitted firms must observe transaction and recordkeeping rules now and meet the full legislative requirements by September 1, 2027.

The registration system is turning a statutory crypto market perimeter into an operating set of authorized firms. Custody and dealing permissions differ, so counterparties need to understand precisely which activities each entity can perform. For foreign institutions, jurisdictional restrictions and sanctions considerations remain separate from the existence of a domestic registration.

Weekly Close

More companies can now offer financial services without owning the infrastructure behind them. That opens opportunities for smaller firms, but it also puts pressure on margins and leaves critical parts of the customer experience in someone else's hands. Canadian founders and investors need to look closely at where profits accumulate, who controls distribution and whether growing transaction volumes actually improve the economics of the business.

Follow the next developments in NCFA’s newsletter, browse fintech coverage and industry research, or review innovation opportunities.

---

The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit www.ncfacanada.org