Karsten Wenzlaff, Advisor
August 26th, 2025
Businesses still repeat identity, ownership, onboarding and compliance checks across banks, PSPs, lenders, marketplaces and software platforms. The opportunity is to let verified business identity, KYB records, authority, ownership and trust credentials move securely across institutions with consent and controls.
Portable business identity sits between digital identity, KYB, beneficial ownership, data portability and compliance automation. Market estimates vary by scope, but the direction is consistent: regulated firms need more reliable business identity data, while businesses need less repetitive onboarding across platforms.
The strongest opening is portable KYB and business identity profiles that reduce repeated onboarding while preserving control, consent, verification quality and auditability. The buyer may be a bank, PSP, marketplace, lender, regtech provider or business platform that wants lower onboarding friction without weaker compliance.
Consumer driven banking rollout, CSA data portability testing, GLEIF vLEI adoption, beneficial ownership rules, KYB automation, open finance standards and evidence that SMEs or platforms will pay for reusable business identity tools.
Evidence points to three venture paths. Each one addresses a different constraint that prevents business identity and compliance data from moving safely across financial ecosystems.
Reusable business onboarding and ownership records
Businesses repeatedly submit incorporation documents, ownership records, director information, tax data, licenses and compliance evidence to every new financial provider. Portable KYB profiles could reduce this duplication while keeping institutions in control of risk decisions.
The venture opportunity is not to eliminate due diligence. It is to make verified business information easier to reuse, refresh, audit and share under clear permission rules. Potential buyers include banks, PSPs, lenders, marketplaces, wealth platforms and compliance service providers.
Regulated firms may decide that relying on third party KYB records creates more liability than efficiency unless assurance standards mature.
Will banks, PSPs or platforms rely on portable KYB outputs, or only use them to accelerate internal review?
Verified entity, authority and credential control
Business identity wallets would let companies hold and present verified entity information, authority credentials, licenses, beneficial ownership attestations and role based permissions. The vLEI model shows how legal entity identity can become cryptographically verifiable in digital interactions.
This path may be most valuable where businesses need to prove who they are, who can act for them and what authority has been granted across payments, procurement, lending, filings and platform onboarding.
Wallet adoption may remain fragmented if issuers, registries, platforms and regulators do not converge around interoperable standards.
Which credential creates enough value to drive wallet adoption: entity identity, authority to act, beneficial ownership, tax status or licensing?
Platform trust, compliance status and risk portability
Many businesses build trust repeatedly across marketplaces, lenders, PSPs, procurement networks and software ecosystems. A trust passport network would let selected trust attributes travel with the business, including verification status, permissions, payment history, platform standing and risk signals.
This path is broader than compliance. It may support B2B marketplaces, SME finance, embedded finance, cross border trade and agent commerce. It is earlier because governance and liability questions are harder than the technology.
Platforms may refuse to share trust data if they view it as proprietary, competitively sensitive or too risky to rely on elsewhere.
Which trust attributes are portable enough to matter and safe enough for another platform to rely on?
Filter by signal type to review source records, market signals and thought leadership supporting this opportunity. Evidence is sorted newest to oldest.
Share your perspective, research, case study or video response. You can also express interest in future discussions, collaboration opportunities and innovation activities related to this topic.
Learn how NCFA identifies, validates and tracks innovation opportunities →NCFA Opportunity Intelligence tracks emerging venture opportunities using evidence, market developments and validation signals. Opportunity briefs are updated as new information, evidence and stakeholder perspectives become available. This content is provided for information purposes only and does not constitute legal, investment, financial, tax or professional advice.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
June 16, 2026 | NCFA Story Intelligence | Fraud, Cybersecurity And Trust

The phone rings. Many people no longer answer.
Not because they’re too busy. Because they’re not sure who is calling, what’s real, or whether the message is safe to trust. That small behaviour change tells a bigger story about finance, fraud, identity, and technology.
For years, financial trust relied on familiar signals: a voice, a face, a password, a bank name, a phone number, a regulator, a delay before money moved. AI clones, biometric breaches, deepfakes, cyberattacks, weak AML controls, and faster payments are now breaking those signals at the same time.
Financial trust used to have more time. Branch visits, paper signatures, settlement delays, call centre checks, account holds, and human review gave institutions more room to spot problems before money moved too far. The system was slower, but that slowness created time to verify.
Consumers learned to trust familiar signals. A bank logo felt official. A caller who knew account details sounded credible. A voice sounded personal. A password felt private. Those signals were never perfect, but they worked well enough when fraud was slower, less automated, and easier to recognize.
Online finance moved trust away from the branch. Banking, investing, lending, crypto, payments, and onboarding shifted into screens and apps. That created better access and faster service, but it also made customers depend on passwords, text codes, device checks, email links, and remote identity tools.
Fraudsters followed the customer online. Phishing, fake websites, account takeover, crypto wallet scams, approval phishing, QR abuse, and spoofed support channels made digital convenience feel less certain. Operation Avalanche showed how coordinated fraud response is becoming part of the market.
Voice used to feel personal. Then AI cloning made it copyable. Cloned voices bypassed Voice ID tests at Santander and Halifax, exposing weakness in systems that treated a voice as a reliable authentication signal.1
The scam no longer has to sound like a scam. A cloned voice can sound calm, familiar, urgent, or official. That changes the risk for banks, call centres, families, executives, seniors, and anyone asked to approve a transfer or share information after hearing a voice they think they know.
Biometrics raise the stakes because they cannot be replaced easily. A major India breach exposed fingerprints, facial scans, and sensitive records tied to police officers and applicants.2 A password can be reset. A fingerprint can’t.
Fintech products increasingly depend on biometric convenience. Face ID, Touch ID, palm payment, device based onboarding, and selfie checks reduce friction. They can also concentrate risk if biometric templates, face scans, or identity documents are stored poorly or exposed through vendors.
Deepfakes make fraud feel human. Deepfake scams have used AI generated voices, fake identities, digital banks, and crypto rails to trick victims and move funds quickly.3
AI makes deception cheaper to personalize. Fraudsters can imitate an executive, a family member, a bank employee, a support agent, or an investment promoter. The scam can be written better, timed better, targeted better, and delivered through channels that look more legitimate than old phishing emails.
Faster money gives fraud less time to fail. Real Time Rail, instant payments, request to pay, and faster settlement can improve cash flow and customer experience. They also shrink the window for fraud teams to stop a bad payment before it settles.
Fraud controls become part of the payment product. Real Time Rail analysis connects instant payments with centralized fraud capability, payment finality, and trust.4 Faster money only works if participants believe the system can manage faster mistakes.
Institutions are not only defenders. They are targets. CIRO confirmed approximately 750,000 Canadian investors were affected by a cybersecurity incident after a 9,000 hour forensic review.5 When regulated bodies are breached, trust damage extends beyond one account.
Third party systems can carry hidden risk. SaaS vendors can create concentration risk across fintech and financial services. A startup may inherit risk through a vendor, API, data processor, onboarding tool, cloud provider, or fraud vendor it does not fully control.
AML failure shows how controls can become business risk. TD’s more than $3 billion US AML penalty and leadership fallout showed how weak controls can limit strategy, growth, reputation, and trust.6
Canada is trying to organize the response. Canada’s first National Anti Fraud Strategy and Financial Crimes Agency push point toward more public and private collaboration on cyber risk, data sharing, and proceeds of crime recovery.7
Fraud didn’t break trust all at once. It weakened the signals people and institutions used to verify reality. The phone call. The voice. The face. The fingerprint. The login. The bank name. The official looking message. The settlement delay. The regulated institution. Each one still matters, but none can carry trust on its own anymore.
That’s the hard part for financial innovation. Canada is moving toward faster payments, consumer driven banking, digital identity discussions, AI adoption, crypto market controls, and more automated financial services. None of those systems succeed simply because they’re fast or digital. They succeed because people trust what they’re seeing, hearing, approving, and authorizing.
What trust signal do you question now that you wouldn’t have questioned five years ago?
Share this story → Explore related intelligence → Subscribe
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
June 16, 2025 | NCFA Resource | Risk Compliance And Regtech, Artificial Intelligence And Data, Regulation And Policy

On May 25, 2026, the International Organization of Securities Commissions (IOSCO) published its Supervisory Toolkit for Artificial Intelligence Use in Capital Markets. The report provides practical tools for regulators supervising AI systems used by market participants, exchanges, investment firms, and capital market infrastructure providers.
The toolkit arrives as AI goes beyond experimentation and into production environments across trading, surveillance, compliance, onboarding, fraud detection, customer service, research, risk management, and operational workflows. IOSCO focuses on the supervisory questions regulators need to ask rather than promoting a specific technology approach.
Stakeholder Input Opportunity: IOSCO is also seeking feedback related to the toolkit and AI supervision in capital markets. Interested regulators, market participants, technology providers, academics, and industry stakeholders can review the report and submit responses to IOSCO by this short survey by June 26, 2026.
The report organizes supervision around seven areas. These include governance and accountability, model development and testing, data quality and management, monitoring and controls, outsourcing and third party providers, market conduct risks, and operational resilience.
Rather than prescribing rules, IOSCO provides supervisory questions, review approaches, and practical considerations that regulators can use when assessing AI systems operating in capital markets. The toolkit is designed to support risk based supervision while remaining flexible as technologies evolve.
The report also recognizes that AI risks often emerge from combinations of factors rather than a single model failure. Poor quality data, weak governance, limited oversight, inadequate testing, vendor dependencies, and insufficient monitoring can interact in ways that create market, operational, or investor protection concerns.
Many financial institutions are already deploying AI in regulated environments. The challenge is no longer whether AI will be used. The challenge is whether firms can demonstrate appropriate governance, explainability, oversight, and accountability once those systems affect clients, markets, or investment decisions.
For fintech operators, the toolkit offers a useful preview of the questions regulators may increasingly ask during examinations, supervisory reviews, audits, and risk assessments. Firms that build governance and controls into deployment processes early may face fewer compliance and operational challenges as expectations mature.
This resource is useful for securities regulators, exchanges, investment dealers, fintech founders, regtech providers, compliance teams, AI governance specialists, risk managers, and market infrastructure operators.
It is especially relevant for organizations using AI in trading, surveillance, onboarding, fraud detection, compliance monitoring, client communications, investment research, portfolio management, or operational decision making.
The strength of the toolkit is its practical orientation. It extends beyond high level AI principles and focuses on supervision, controls, accountability, and operational implementation. The framework can be applied across a wide range of AI use cases and organizational structures.
It also provides a common language that regulators and industry participants can use when discussing AI oversight. That consistency becomes increasingly important as firms operate across multiple jurisdictions with different regulatory approaches.
The toolkit does not create binding rules or regulatory obligations. IOSCO's role is to provide guidance and supervisory tools that member jurisdictions can adapt to their own legal and regulatory frameworks.
IOSCO Supervisory Toolkit For AI Use In Capital Markets (primary resource)
IOSCO Media Release (official announcement)
AI Agents Enter Governed Financial Workflows (AI governance and oversight)
Customer Due Diligence Controls For Fintechs (controls, monitoring, and accountability)
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |