Karsten Wenzlaff, Advisor
August 26th, 2025
June 16, 2026 | NCFA Story Intelligence | Fraud, Cybersecurity And Trust

The phone rings. Many people no longer answer.
Not because they’re too busy. Because they’re not sure who is calling, what’s real, or whether the message is safe to trust. That small behaviour change tells a bigger story about finance, fraud, identity, and technology.
For years, financial trust relied on familiar signals: a voice, a face, a password, a bank name, a phone number, a regulator, a delay before money moved. AI clones, biometric breaches, deepfakes, cyberattacks, weak AML controls, and faster payments are now breaking those signals at the same time.
Financial trust used to have more time. Branch visits, paper signatures, settlement delays, call centre checks, account holds, and human review gave institutions more room to spot problems before money moved too far. The system was slower, but that slowness created time to verify.
Consumers learned to trust familiar signals. A bank logo felt official. A caller who knew account details sounded credible. A voice sounded personal. A password felt private. Those signals were never perfect, but they worked well enough when fraud was slower, less automated, and easier to recognize.
Online finance moved trust away from the branch. Banking, investing, lending, crypto, payments, and onboarding shifted into screens and apps. That created better access and faster service, but it also made customers depend on passwords, text codes, device checks, email links, and remote identity tools.
Fraudsters followed the customer online. Phishing, fake websites, account takeover, crypto wallet scams, approval phishing, QR abuse, and spoofed support channels made digital convenience feel less certain. Operation Avalanche showed how coordinated fraud response is becoming part of the market.
Voice used to feel personal. Then AI cloning made it copyable. Cloned voices bypassed Voice ID tests at Santander and Halifax, exposing weakness in systems that treated a voice as a reliable authentication signal.1
The scam no longer has to sound like a scam. A cloned voice can sound calm, familiar, urgent, or official. That changes the risk for banks, call centres, families, executives, seniors, and anyone asked to approve a transfer or share information after hearing a voice they think they know.
Biometrics raise the stakes because they cannot be replaced easily. A major India breach exposed fingerprints, facial scans, and sensitive records tied to police officers and applicants.2 A password can be reset. A fingerprint can’t.
Fintech products increasingly depend on biometric convenience. Face ID, Touch ID, palm payment, device based onboarding, and selfie checks reduce friction. They can also concentrate risk if biometric templates, face scans, or identity documents are stored poorly or exposed through vendors.
Deepfakes make fraud feel human. Deepfake scams have used AI generated voices, fake identities, digital banks, and crypto rails to trick victims and move funds quickly.3
AI makes deception cheaper to personalize. Fraudsters can imitate an executive, a family member, a bank employee, a support agent, or an investment promoter. The scam can be written better, timed better, targeted better, and delivered through channels that look more legitimate than old phishing emails.
Faster money gives fraud less time to fail. Real Time Rail, instant payments, request to pay, and faster settlement can improve cash flow and customer experience. They also shrink the window for fraud teams to stop a bad payment before it settles.
Fraud controls become part of the payment product. Real Time Rail analysis connects instant payments with centralized fraud capability, payment finality, and trust.4 Faster money only works if participants believe the system can manage faster mistakes.
Institutions are not only defenders. They are targets. CIRO confirmed approximately 750,000 Canadian investors were affected by a cybersecurity incident after a 9,000 hour forensic review.5 When regulated bodies are breached, trust damage extends beyond one account.
Third party systems can carry hidden risk. SaaS vendors can create concentration risk across fintech and financial services. A startup may inherit risk through a vendor, API, data processor, onboarding tool, cloud provider, or fraud vendor it does not fully control.
AML failure shows how controls can become business risk. TD’s more than $3 billion US AML penalty and leadership fallout showed how weak controls can limit strategy, growth, reputation, and trust.6
Canada is trying to organize the response. Canada’s first National Anti Fraud Strategy and Financial Crimes Agency push point toward more public and private collaboration on cyber risk, data sharing, and proceeds of crime recovery.7
Fraud didn’t break trust all at once. It weakened the signals people and institutions used to verify reality. The phone call. The voice. The face. The fingerprint. The login. The bank name. The official looking message. The settlement delay. The regulated institution. Each one still matters, but none can carry trust on its own anymore.
That’s the hard part for financial innovation. Canada is moving toward faster payments, consumer driven banking, digital identity discussions, AI adoption, crypto market controls, and more automated financial services. None of those systems succeed simply because they’re fast or digital. They succeed because people trust what they’re seeing, hearing, approving, and authorizing.
What trust signal do you question now that you wouldn’t have questioned five years ago?
Share this story → Explore related intelligence → Subscribe
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
June 16, 2025 | NCFA Resource | Risk Compliance And Regtech, Artificial Intelligence And Data, Regulation And Policy

On May 25, 2026, the International Organization of Securities Commissions (IOSCO) published its Supervisory Toolkit for Artificial Intelligence Use in Capital Markets. The report provides practical tools for regulators supervising AI systems used by market participants, exchanges, investment firms, and capital market infrastructure providers.
The toolkit arrives as AI goes beyond experimentation and into production environments across trading, surveillance, compliance, onboarding, fraud detection, customer service, research, risk management, and operational workflows. IOSCO focuses on the supervisory questions regulators need to ask rather than promoting a specific technology approach.
Stakeholder Input Opportunity: IOSCO is also seeking feedback related to the toolkit and AI supervision in capital markets. Interested regulators, market participants, technology providers, academics, and industry stakeholders can review the report and submit responses to IOSCO by this short survey by June 26, 2026.
The report organizes supervision around seven areas. These include governance and accountability, model development and testing, data quality and management, monitoring and controls, outsourcing and third party providers, market conduct risks, and operational resilience.
Rather than prescribing rules, IOSCO provides supervisory questions, review approaches, and practical considerations that regulators can use when assessing AI systems operating in capital markets. The toolkit is designed to support risk based supervision while remaining flexible as technologies evolve.
The report also recognizes that AI risks often emerge from combinations of factors rather than a single model failure. Poor quality data, weak governance, limited oversight, inadequate testing, vendor dependencies, and insufficient monitoring can interact in ways that create market, operational, or investor protection concerns.
Many financial institutions are already deploying AI in regulated environments. The challenge is no longer whether AI will be used. The challenge is whether firms can demonstrate appropriate governance, explainability, oversight, and accountability once those systems affect clients, markets, or investment decisions.
For fintech operators, the toolkit offers a useful preview of the questions regulators may increasingly ask during examinations, supervisory reviews, audits, and risk assessments. Firms that build governance and controls into deployment processes early may face fewer compliance and operational challenges as expectations mature.
This resource is useful for securities regulators, exchanges, investment dealers, fintech founders, regtech providers, compliance teams, AI governance specialists, risk managers, and market infrastructure operators.
It is especially relevant for organizations using AI in trading, surveillance, onboarding, fraud detection, compliance monitoring, client communications, investment research, portfolio management, or operational decision making.
The strength of the toolkit is its practical orientation. It extends beyond high level AI principles and focuses on supervision, controls, accountability, and operational implementation. The framework can be applied across a wide range of AI use cases and organizational structures.
It also provides a common language that regulators and industry participants can use when discussing AI oversight. That consistency becomes increasingly important as firms operate across multiple jurisdictions with different regulatory approaches.
The toolkit does not create binding rules or regulatory obligations. IOSCO's role is to provide guidance and supervisory tools that member jurisdictions can adapt to their own legal and regulatory frameworks.
IOSCO Supervisory Toolkit For AI Use In Capital Markets (primary resource)
IOSCO Media Release (official announcement)
AI Agents Enter Governed Financial Workflows (AI governance and oversight)
Customer Due Diligence Controls For Fintechs (controls, monitoring, and accountability)
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
June 10, 2026 | NCFA Insight | Regulation And Policy, Capital Markets And Market Infrastructure

On June 10, 2026, the CFTC opened public consultation on proposed prediction market rules and the related 267-page pre-publication rule document. The proposal would create a formal review process for event contracts that touch sensitive areas such as gaming, war, terrorism, assassination, or unlawful activity.
The market is now large enough to force a real line-drawing exercise. The CFTC says total trading volume across registered prediction markets exceeded $25 billion in 2025. That remains small beside the roughly $31 trillion notional value of the broader futures market the agency regulates, but it is no longer a niche category.
The proposal targets event contracts covered by Section 5c(c)(5)(C) of the Commodity Exchange Act. The CFTC wants to amend Regulation 40.11, add Appendix F to part 40, define when a contract “involves” a listed activity, define “gaming,” and apply public interest factors to each contract under review.
Currently, a registered exchange can self-certify a contract, and contracts may begin trading quickly. The proposed framework gives the CFTC a 90-day review period for contracts that may involve one of the listed activities. The agency can request that trading pause during review, but the proposal says prediction markets are not required to follow that request. Some contracts could trade during review and later be blocked or delisted if the CFTC finds them contrary to the public interest.
The public interest test is practical. The CFTC would look at price discovery, information value, market integrity, and whether the platform can supervise the contract. That puts contract design, settlement data, surveillance, and trader controls at the centre of the review.
Sports are a key test case. The proposal treats contracts based on broad, objective sports outcomes more favourably, including final scores, point differentials, win-loss results, tournament advancement, team or individual statistics, and season-long performance metrics. The CFTC says these contracts can create useful price information when they use objective settlement criteria and are supported by suitable oversight and coordination with sports integrity bodies.
The CFTC is stricter around contracts tied to player injuries, officiating decisions, youth sports, cheating incentives, and misconduct. Injury contracts can create harmful incentives and expose medical information. Officiating contracts can put pressure on a small number of identifiable decision makers. Youth sports markets raise participant protection concerns.
DraftKings highlights why this rulemaking is needed commercially. Barron’s reports that annualized consumer trading volume on DraftKings Predictions reached $1.3 billion, up 24% from April 2026. Annualized total trading volume reached $3.1 billion, up 34%. Note, the numbers are early and based on company data.
DraftKings brings sports users, mobile distribution, pricing, promotions, and live event engagement. Kalshi and Polymarket bring event contracts, exchange style trading, collateral, liquidity, and surveillance. The CFTC proposal now pulls those models into the same regulatory conversation.
The user experience may look similar on a phone, but the rulebooks are different. Sportsbooks operate under gaming law. Prediction markets argue they are federally regulated event contract markets that support price discovery and information aggregation. The CFTC proposal tests where that argument holds, especially when sports contracts that are towing the line of integrity.
NCFA recently looked at trust questions around Polymarket influencer payments, including disclosure, paid promotion, and market credibility after a market goes live. The CFTC proposal moves the issue upstream. It asks which markets should be allowed to list in the first place.
Canada should watch closely. DraftKings already operates in Ontario’s regulated iGaming market, while prediction markets continue to test the line between financial contracts, gaming products, and information markets. The U.S. approach won't cleanly transfer into Canada, but it gives Canadian regulators, exchanges, fintechs, and other stakeholders an early view of the policy questions surrounding the table..
Will sports prediction markets become regulated financial products, sportsbook extensions, or a new category that forces regulators to redraw the line between trading, gaming, and market information?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |