August 19, 2026 | NCFA Resource | Cybersecurity And Fraud, Risk Compliance And Regtech, Capital Markets And Market Infrastructure
12 Controls For Cyber Risk, Vendors, Access And Recovery
In August 2026, the Financial Industry Regulatory Authority published Cybersecurity Effective Practices, a 12-part framework for FINRA member firms reviewing cybersecurity programs, controls and operating procedures. A firm can use the resource as a structured checklist for who owns cybersecurity, which systems and vendors create risk, who can access sensitive data, how threats are detected, and whether the business can recover when systems fail. FINRA designed the practices to scale with firm size, business model, technology complexity and risk profile.
What It Does In Practice
FINRA organizes the resource around 12 areas:
governance
risk management
third party risk management
asset management
access control and identity management
data protection
security awareness and training
vulnerability and patch management
security monitoring
threat intelligence and information sharing
incident response and reporting
resilience and recovery
The framework starts with accountability and risk ownership. FINRA recommends a designated cybersecurity lead, regular reporting to senior decision makers, documented policies and periodic reviews, while also making cyber risk part of decisions about new technology, systems and operating changes. From there, firms are expected to identify the information, systems and business functions they depend on, assess threats such as ransomware, insider activity and vendor exposure, test important systems for weaknesses and revisit those risks when technology or operations change.
Third party risk receives detailed treatment. FINRA treats vendors with access to customer information or critical systems as part of the firm’s security perimeter. Firms should know which vendors have access, understand important fourth party relationships and identify which providers support critical operations. Contracts can address audit rights, data handling, breach notification and visibility into subcontractors, while ongoing oversight should include access monitoring and a documented process for removing access and handling customer information when a relationship ends.
That concern extends beyond US broker dealers. Weak access control governance can expose sensitive information when a partner or service provider retains permissions that are unnecessary or poorly monitored. FINRA’s guidance connects vendor governance with the practical question of who can access systems and data, for how long, and under what controls.
Asset management and access control fit naturally together. FINRA recommends keeping a current inventory of hardware, software, cloud services and data flows, assigning owners to important assets and identifying systems that no longer receive security updates. Once firms know what they have, they can control who gets access through unique credentials, role based permissions, multifactor authentication, periodic entitlement reviews, segregation of duties and least privilege. Access should also be changed or removed promptly when employees change roles or leave.
Data protection, training and patching cover another part of the operating picture. Firms are encouraged to classify sensitive data, encrypt it at rest and in transit where feasible, control retention and protect backups, including with immutable or air gapped storage. FINRA also recommends ongoing employee training, role specific instruction for staff with sensitive access and phishing simulations backed by records of participation. Vulnerability management should include regular scanning, risk based patch priorities and verification that remediation work was completed rather than assumed.
Who Gets Value
The primary users are FINRA member broker dealers, including compliance teams, cybersecurity leaders, technology teams, operations executives and senior management. Smaller firms can use the 12 areas to identify where basic controls are missing without trying to copy the cybersecurity program of a much larger institution, while larger firms can use the same structure to review whether responsibilities, documentation and technical controls are working together.
Technology providers, managed security firms, consultants and RegTech companies serving broker dealers can also use the resource to understand what clients may expect around access, logging, vendor controls, data handling, patching, incident response and recovery. Boards and senior executives can use it as a governance checklist because FINRA makes cybersecurity ownership, management reporting, resource decisions and documented risk acceptance part of the program rather than leaving cyber risk entirely with the technology team.
Strengths And Limits
The main strength is that FINRA connects governance directly to operating controls. A firm can follow the framework from senior accountability through asset inventories, identity controls, encryption, training, monitoring and recovery testing, which makes the document more useful than a high level cyber policy statement.
Third party risk is also handled with more depth than a basic checklist. Firms are expected to understand vendor dependencies, monitor privileged access, address fourth parties and plan how systems and data will be handled when a provider relationship ends. Security monitoring extends that discipline to unusual access, suspicious data transfers, system changes and privileged accounts, with logs retained long enough to support operations, investigations, forensic work and applicable recordkeeping requirements.
The framework also includes threat intelligence, incident response and recovery. FINRA recommends using relevant threat feeds, updating defenses as attack methods change and participating in trusted information sharing networks. Incident response focuses on how a firm detects, escalates and contains an event, while recovery planning deals with how critical systems and data return to service afterward. Tested backups, tabletop exercises, offline procedures and defined Recovery Point Objectives and Recovery Time Objectives all help firms decide how much data loss and downtime different systems can tolerate.
The main limitation is jurisdiction. FINRA developed the resource for US member firms and connects several practices to US requirements, including SEC Regulations S-P and S-ID, FINRA Rules 3110 and 4370, and Exchange Act recordkeeping rules. The document also doesn't create new legal or regulatory requirements or reinterpret existing ones. For Canadian financial technology and service firms, its best use is as a practical comparison and control review, not as a statement of Canadian regulatory obligations.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)
August 19, 2026 | NCFA Story Intelligence | Competition And Market Structure, Capital Markets And Market Infrastructure, Open Banking Open Finance And Data Sharing
Can Canada Turn Access Into Productive Participation?
Capital, Payments, Data And Retail Markets Are Converging Into A 2030 Growth Test
On March 9, 2026, the U.S. Securities and Exchange Commission held its 45th Annual Small Business Forum. The agenda moved from early-stage entrepreneurs to growth companies and smaller public companies. Market participants could propose recommendations and vote on which should be prioritized for the SEC and Congress.
The U.S. has not solved small-business capital formation. That is partly why the process is useful. Questions around finders, investor eligibility, offering rules, fund structures, secondary liquidity and smaller public-company economics keep returning as markets change.
Canada is now opening several parts of its financial economy at the same time. Capital programs, SME financing, payments access, consumer-driven banking and retail private-market initiatives are moving from policy design toward operating tests. The question is no longer whether access exists on paper. It is whether more businesses, investors and challengers can use it economically.
The U.S. Keeps Reopening The Participation Question
The Forum looks across the financing lifecycle
The SEC brings founders, investors, advisers and intermediaries into one recurring process. Its 2026 Forum program again moved from early-stage financing to growth capital and smaller public markets.
The same frictions keep returning in new forms
Finders, investor eligibility, offering limits, fund structures, secondary liquidity and small-public-company economics remain active issues because one reform can solve one bottleneck while exposing another.
The Market Is Never Finished 45 years of feedback
The transferable lesson is not a U.S. securities rule. It is the habit of bringing market participants back into the process and testing whether a framework is producing the market it was intended to create.
Canada already has detailed market evidence
CVCA tracks venture and private equity. NACO tracks angel investing. Regulators and departments publish market studies, consultations and program data. Canada does not lack information about every part of the financing system.
Canada is also actively intervening
The federal government is preparing another C$1 billion venture and growth capital program. The Competition Bureau is studying SME financing. Payments, data access and retail private markets are also being redesigned.
The Canadian Opportunity Is To Connect Policy With Market Function
Canada already has consultations, programs and market data. The harder test is whether each reform produces enough real participation to change who can compete, invest and scale.
Canada Is Opening More Than Capital Markets
Institutional venture capital is getting a larger engine
The Venture and Growth Capital Catalyst Initiative is designed to attract more private and institutional capital into Canadian venture funds, strengthen fund managers and support high-growth companies from pre-seed through growth.
SME financing is being tested against a broader business population
The Competition Bureau's SME financing competition, including lender entry, expansion and switching barriers.
More Capital Does Not Answer Who Can Participate
Growth VCCI can deepen capital for companies that fit venture mandates. It does not automatically finance every viable manufacturer, service company or local employer whose growth profile, asset base or financing need sits outside institutional venture economics.
Financial data is moving toward regulated access
The proposed Canada's open banking rules bring accreditation, liability, data scope, security and technical standards into one operating framework.
Core payment infrastructure is opening to a wider membership base
PSPs and more credit unions can join Payments Canada, while the Real-Time Rail rules and access are moving toward the planned Q4 2026 launch. Wider eligibility gives PSPs and credit unions a clearer route into core payment infrastructure.
The Door Opens, Then Economics Decide Who Walks Through
Formal access changes who is allowed to participate. Competition changes only when entrants can absorb compliance, technology, integration and operating costs and still build products customers want.
Fintechs can gain more control over the customer experience
Directer access to data, payments and settlement can reduce dependence on incumbent-controlled infrastructure and give challengers more control over pricing, product design and service delivery.
Smaller financial institutions can compete through shared capabilities
Credit unions and regional firms may not need to build every payments, AI, compliance, data or digital-asset capability internally if specialized providers can deliver those functions at workable scale.
Participation Can Change The Cost Of Competing
The payoff is not a longer list of fintech entrants. It is more providers controlling enough of their infrastructure and economics to put sustained pressure on incumbents.
Learn more about Canada's infrastructure opening
NCFA reconstructed this progression in How Canada Started Opening Its Financial Infrastructure. PSP supervision, wider Payments Canada membership, Real-Time Rail and consumer-driven banking all moved the conversation from legal eligibility toward execution.
Retail Investors Are Entering Private Markets Through Two Doors
Managed access gives households professional selection
Ontario's long-term asset fund work could give retail investors diversified exposure to venture capital, private equity, private debt, infrastructure and other long-duration assets through professionally managed funds.
Direct access gives households the company decision
Equity crowdfunding lets an investor choose an individual company. It can connect businesses with customers, employees and supporters, but it also concentrates risk and usually offers little liquidity.
Private-Market Access Is Splitting Into Two Models
Managed access can broaden exposure to private-market returns. Direct access can broaden the number of people deciding which companies receive their money. Both can widen participation, but they create different markets.
Canada is building the managed channel for wider retail use
Managed structures can bring diversification, diligence, portfolio construction and product-level controls around valuation and liquidity. They can also preserve professional gatekeeping over where retail capital is deployed.
Canada's direct channel remains comparatively constrained
NI 45-110 allows a Canadian issuer to raise up to C$1.5 million in 12 months. Ordinary investors are generally limited to C$2,500 per offering, or C$10,000 when a registered dealer determines suitability.
Risk Appetite Is Also A Wealth Participation Question
If more company value is created while businesses remain private, wider retail access affects more than issuer financing. It influences which households can accept productive risk and participate earlier in private-market returns.
Canadian direct demand can reach the existing ceiling
Blossom, Edison Motors and Gander have used community capital alongside accredited, offering memorandum or other financing. Their raises show direct retail capital can complement professional capital rather than replace it.
International peers provide more room for direct participation
Australia permits eligible issuers to raise A$5 million in 12 months and caps retail investment at A$10,000 per company annually. U.S. Regulation Crowdfunding allows eligible issuers to raise up to US$5 million.
Legal Access Can Still Produce A Thin Market
Canada's smaller market does not prove regulation caused weak activity. Issuer quality, investor demand, distribution, awareness, liquidity and platform execution also matter. It does show why market-opening rules should eventually be judged by whether enough issuers, investors and intermediaries can participate economically.
Learn more about managed and direct retail access
Managed access can provide diversification, professional diligence and portfolio controls, but fees, manager selection, valuation and redemption limits remain important. Retail money may also flow mainly to established funds, private credit, infrastructure or foreign assets.
Direct access gives investors more control over company selection and can help businesses mobilize customer or community capital. It also exposes investors to concentrated company risk, limited liquidity and less extensive disclosure than public markets.
Platform economics matter.FrontFundr reported C$83.2 million across its wider platform in 2025, while only C$4.79 million came through NI 45-110. A multi-channel dealer has more ways to spread compliance, diligence, technology and distribution costs than a portal relying on small retail raises alone.
By 2030, Participation Should Show Up In The Market
One future produces more viable participants
New payment participants build useful services. Open-banking firms turn permissioned data into products customers adopt. Smaller institutions buy modern capabilities instead of rebuilding them. More businesses find financing that fits their stage and economics.
The other future opens rules without changing market power very much
Accreditation, integration, compliance, distribution and technology remain expensive enough that the largest institutions and professional managers capture most new activity. Formal access widens while competitive intensity changes only at the margin.
By 2030, The Difference Will Be Visible In Who Built Scale
The evidence will be practical. Entrants that survive. Products customers use. Capital reaching different kinds of companies. Investors using managed and direct routes. Smaller institutions offering capabilities once reserved for much larger competitors.
Better participation can improve the inputs to productivity
More financing choices, faster settlement, stronger data access and better financial tools can give businesses more capacity to invest, automate, hire, commercialize and serve customers.
Stronger companies can create the next round of participation
Businesses that build revenue, productivity and international reach create more investable opportunities. Successful founders, employees and investors can recycle capital, experience and networks into the next generation.
Productive Participation Could Become Self-Reinforcing
More viable participants can increase competition. Better competition can improve products, distribution and capital allocation. Better tools and financing can support more investment. Stronger companies can create more opportunities for households and institutions to participate again.
What to watch between now and 2030
Capital markets should show who receives financing, which managers scale, how deal sizes change and whether a wider range of viable companies find appropriate capital.
Payments and data should show who connects, what new products emerge, whether customers switch and whether smaller providers remain sustainable after absorbing compliance and technology costs.
Retail investing should show how managed private-market products develop alongside direct private-company investment, what fees and liquidity look like and how investor outcomes compare.
Smaller financial institutions should show whether shared infrastructure lets credit unions and regional firms offer capabilities that previously required much larger technology budgets.
The U.S. process expects the friction to change
Market participants return because new rules, market conditions and business models keep changing the problem. A recommendation can be implemented and still leave a new bottleneck elsewhere.
Canada will need the same feedback discipline across more than capital
As payments, data, private markets and financing become more open, policymakers will need to know who entered, who could not, which businesses became sustainable and where access failed to generate enough economic activity.
The Next Policy Question Comes After Access
Canada has spent years opening doors. The next phase is finding out which openings create viable markets. That means judging regulation and public programs by the participation, competition and productive activity they generate while preserving the protections that made wider access possible.
Participation is not a complete explanation for Canada's productivity problem. Management capability, commercialization, industrial structure, R&D, domestic demand, risk appetite and global scale all matter.
But Canada is now creating new access points across capital, payments, data and investing at the same time. That gives Canada a rare four-year window to see whether productive participation becomes a real growth mechanism rather than a policy slogan.
Talking Point
Canada may already possess much of the capital, technology, talent and institutional capacity needed for stronger growth. The opportunity between now and 2030 is to make more of those assets economically usable by more businesses, investors and financial challengers. If today's reforms create viable participation rather than permission alone, Canada could end the decade with more competition, more investable companies and more ways for households and institutions to share in productive growth.
Related NCFA Intelligence
Opportunity Intelligence Open Finance SME Capital AccessConnects permissioned business data with working capital, real-time credit, invoice finance and treasury products.
Regulatory Intelligence Real-Time Rail Intelligence GuideExplains PSP access, settlement, ISO 20022, fraud controls and launch readiness for Canada's new payment rail.
Regulatory Intelligence Canada Open Banking GuideTracks implementation responsibilities, participation rules and the remaining decisions in consumer-driven banking.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
Canada enters the second half of 2026 with two pieces of payment infrastructure arriving at once. The Real-Time Rail is scheduled to go live in the fourth quarter, and the regulations underpinning consumer-driven banking were published in the Canada Gazette in June. Both have been discussed for the better part of a decade. Neither has yet changed how a Canadian consumer actually pays for something online.
That gap between framework and behaviour matters more than either announcement. The most recent full picture of Canadian payment behaviour comes from Payments Canada's Canadian Payment Methods and Trends report, published in October 2025 and covering 2024, which counted 22.5 billion retail payment transactions worth $12.2 trillion. The market grew three per cent in both volume and value year over year. Over five years, volume rose nine per cent and value 22 per cent.
Some of the sharpest movement in that behaviour is happening in sectors where account-to-account transfer is already the preferred rail, regulated online gambling among them. Swiper online casino Canada, a casino and sportsbook brand launched into the Canadian market in 2025 and available across the country outside Ontario, is a useful illustration: it runs thousands of casino, live dealer and sports betting titles from providers such as NetEnt, Microgaming and Evolution, and lists Interac e-Transfer alongside Visa and Mastercard for deposits and withdrawals, with limits from $25 to $10,000 and e-Transfer identified as the fastest payout route for Canadian players. It is referenced here as a working example of how e-Transfer is being used commercially, which is the shift the rest of this article examines.
The card baseline has not moved much
Cards remain the substrate. Credit cards accounted for 33 per cent of total payment volume in 2024 and debit for 30 per cent, so the two together carried 63 per cent of everything. Electronic funds transfer took 14 per cent and cash 11 per cent.
Credit card volume reached 7.5 billion transactions, a six per cent increase, against 112 million cards in circulation, up five per cent. Digital payments made up 86 per cent of total volume and contactless 58 per cent of transactions.
Those proportions have held steady long enough that outright displacement of cards looks like the wrong thing to watch for. The narrower question tells you more. Which transaction types move first, and what makes them move, is already visible in a handful of categories.
What Interac e-Transfer became
The clearest answer so far is e-Transfer. It stopped being a person-to-person convenience some time ago. Interac's own figures for its 2025 fiscal year record 1.6 billion e-Transfer transactions, with a single-month record of 149 million in October 2025. Business Request Money passed 160 million transactions, an 81 per cent year-over-year increase, which is the number that matters most for commercial adoption.
Interac Debit ran to seven billion transactions in the same period, including 1.8 billion mobile transactions and an all-time monthly high of 638 million in August 2025.
Payments Canada data puts the longer arc in context. Online transfers grew 175 per cent in volume and 219 per cent in value across five years, though the growth rate itself has been declining, which points to a service approaching maturity rather than one still finding its market.
The Real-Time Rail lands in Q4
Payments Canada confirmed that the RTR By-law and RTR Rules received all necessary approvals and come into force on 24 August 2026, with the system itself scheduled to launch in the fourth quarter. The by-law has been published in the Canada Gazette, Part II.
The RTR carries ISO 20022 messaging and settles irrevocably, around the clock. The practical consequence is that data can travel with the payment, which is what makes richer reconciliation and request-to-pay flows possible. Irrevocability also shifts the risk model. Cards provide a chargeback mechanism and the RTR does not, so fraud controls have to sit in front of the payment rather than behind it, and that changes what a payment service provider has to build before it can offer the rail to anyone.
Membership has broadened ahead of launch, with Wise, KOHO, Float, Paramount Commerce and Brim Financial joining as payment service provider members.
Consumer-driven banking has a framework and no date
The Consumer-Driven Banking Regulations were published in the Canada Gazette, Part I on 27 June 2026. Responsibility for implementation and oversight is delegated to the Bank of Canada, which is a change from the earlier position placing the Financial Consumer Agency of Canada in that role.
Scope covers deposit accounts, payment products, investment accounts and lending accounts, across consumer profile data, account data and product data. Derived data, meaning enhanced information carrying additional commercial value, is excluded. Participation runs in three tiers: large banks above a retail volume threshold are mandated, other federally regulated entities may opt in, and payment service providers, fintechs and provincially regulated institutions may participate through accreditation.
Phase one is limited to read access. Write access, meaning payment initiation and account switching, is anticipated later.
The published regulations do not state an implementation date, which matters for anyone planning against this. Commentary through 2026 has variously placed phase one in early 2026 and pushed it later, and the Bank of Canada has not committed publicly to a launch. It is also worth being clear that read access without write access produces better data rather than a new payment method. The payment capability arrives with phase two, and phase two depends on the RTR being live and broadly reachable.
Where account-to-account demand is already concentrated
Ahead of any of that, demand for account-to-account payment is not evenly spread. It concentrates in categories where card acceptance is restricted, where chargeback exposure is high, or where payout speed is itself a competitive feature.
Regulated online gambling is the clearest Canadian example of all three at once. In its third year of operation, iGaming Ontario reported total wagers of $82.7 billion and gaming revenue of $3.2 billion for the year to 31 March 2025, increases of 31 and 32 per cent respectively, with casino products accounting for $69.6 billion of the wagering. Operators in the segment lean heavily on e-Transfer in both directions, using it for both deposits and withdrawals and typically presenting it as the fastest payout option for Canadian players.
That pattern is worth watching because it is where the RTR's value proposition will be tested first. Sectors already paying an operational premium for speed are the ones with a reason to move early, and their volumes are large enough to matter.
What changes for merchants
For most Canadian merchants the honest near-term answer is: not much, yet. The RTR launches in phases, banks are required to receive but not initially to send, and customer-facing services are optional in the early stages. Until sending capability is widespread, most consumers will never encounter it.
The medium-term shift is in cost structure rather than user experience. Account-to-account payment removes interchange. It also removes the economics that fund card rewards programs, and Canadian attachment to those programs is not trivial, with 112 million cards in circulation representing a substantial installed base of habit. Displacement is likelier to begin in bill payment, high-value purchases and payouts than in everyday retail.
The infrastructure question in Canada has largely been answered. What remains is distribution, and that is a slower problem.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
```html August 18, 2026 | NCFA Insight | Artificial Intelligence And Data, Payments Infrastructure And Money Movement, Digital Assets
Wallet Delegation, Spending Limits And Machine Payments
On August 18, 2026, Amazon Web Services made AgentCore Payments generally available, taking the capability from its May preview into production. AI agents can now encounter paid APIs, services accessed through Model Context Protocol (MCP), or other digital resources during a workflow and initiate payment through infrastructure that connects spending controls with external wallets.
AWS can enforce how much an agent is allowed to spend and for how long, manage access to wallet providers and coordinate the payment from inside the same infrastructure used to run the agent. Coinbase or Stripe's Privy provides the wallet, while external providers and blockchain networks handle signing, verification and settlement.
AWS isn't taking custody of customer money. It is taking a position earlier in the transaction, where software determines whether it has permission to buy something and which payment connection to use. That puts payment authority closer to the AI execution layer.
GA Adds More Ways For Agents To Pay During A Task
AgentCore Payments already supported Coinbase and Privy wallets, spending controls and x402 payments during preview. General availability adds the Machine Payments Protocol (MPP), easier Coinbase wallet setup, improved discovery of paid x402 services and an x402 pricing option called upto.
The upto model is designed for services whose final cost isn't known before use. An agent can approve a maximum amount, while the provider charges for what was actually consumed. AWS points to model inference, compute and other usage-based APIs where a flat price per request may not reflect the real cost.
That fits how autonomous software may buy digital services. Instead of establishing a subscription with every provider in advance, an agent can encounter a paid resource during a task, check whether the price fits its delegated budget, pay for it and continue.
MPP adds another payment protocol. Developed by Stripe and Tempo, it lets software exchange payment requirements during an online transaction and can support different payment models, including microtransactions and recurring payments.
x402 takes a somewhat different approach. It lets an online service respond to an agent's request by saying payment is required before the resource is released. The agent can then authorize the payment through its connected wallet and retry the request.
Stripe says MPP can support stablecoins as well as conventional payment methods, but AgentCore Payments currently documents an embedded crypto wallet as its supported payment instrument.
AWS Controls The Spending Rules, Not The Money
The architecture adds useful boundaries around the word autonomous. A user or business first provides the wallet and grants authority. AWS then applies rules around how the agent can use that authority during a payment session. NCFA's Financial Innovation Map tracks this convergence of AI agents, financial permissions and programmable infrastructure.
Those controls can include an expiry and a maximum amount the agent is permitted to spend. Before a transaction proceeds, AgentCore checks whether the request fits within that budget. A payment that exceeds the limit is rejected at the infrastructure level rather than left to the agent's judgement.
AWS also keeps the wallet-provider credentials away from the agent itself. Coinbase or Privy provides the wallet infrastructure, while AWS uses controlled access to request operations such as signing a transaction.
The result is delegated spending rather than independent control of money. The person or business sets the authority, AWS enforces part of the operating boundary and the connected wallet provider controls the financial instrument.
AWS also records payment activity through its monitoring tools, giving developers logs and transaction information they can use to review what agents attempted and what payments succeeded. That adds an audit layer around activity that would otherwise be difficult to supervise once agents begin buying resources during longer workflows.
This is where AWS gains a potentially valuable position. It doesn't need to become a bank or payment processor to influence whether an agent-side transaction can proceed.
Coinbase And Privy Supply The Wallet Layer
Coinbase is one supported provider, not an exclusive requirement. Its developer infrastructure provides embedded wallets and supports x402 payments, while Coinbase's Bazaar service helps agents discover online services that accept the protocol.
Coinbase documents payments in the USDC stablecoin on Base and Solana for its AgentCore implementation. That makes digital assets a substantive part of the current product architecture rather than a side effect of Coinbase's involvement. It also connects directly to NCFA's Programmable Stablecoin Payments opportunity brief, which examines programmable money movement and payment infrastructure.
Privy provides another embedded-wallet option. The company is now part of Stripe, but its role in AgentCore is still wallet infrastructure rather than ordinary card processing through Stripe's full payments stack.
AgentCore Payments doesn't require every payment protocol to use cryptocurrency, and MPP itself can support other payment methods. But AWS's currently documented AgentCore payment instrument is still a crypto wallet.
Payment companies therefore remain important underneath the agent platform. They provide the wallet, credentials and financial infrastructure needed to execute transactions, while AWS controls more of the environment where an agent decides when to call them.
This isn't the only infrastructure model emerging. Circle's USDC infrastructure for AI agents combines policy-controlled wallets, service discovery and programmable payments under predefined guardrails.
Travala Shows How Delegated Agent Payments Work
Travala provides a useful production example because its implementation shows where the customer's authority remains. Its current Travel MCP lets an AI agent search and book hotels, with payment settled in the USDC stablecoin on Base from a Coinbase wallet connected through AgentCore.
The customer still has to authorize the spending relationship. Travala says the permission is revocable and time-limited, the company never receives the private key and the customer must explicitly confirm the hotel purchase before payment is made.
Once that permission is in place, the agent can complete the payment within the delegated limits and continue the booking workflow. That is more precise than saying an AI agent independently controls money.
AWS also names Anchor Browser, SpreadX's Incarna, Elsa AI and Heurist AI among customers or integrations using AgentCore Payments. AWS does not provide transaction volumes for those implementations, so there isn't yet enough evidence to describe agent-led payments as broadly adopted at scale.
The Travala example is still important. It shows a live consumer transaction where conversational software can search, obtain approval and complete payment without sending the customer into a separate checkout flow.
Payment Distribution Could Move Into The AI Stack
Traditional electronic payments divide responsibility among merchants, gateways, processors, acquirers, networks, issuers and customer interfaces. Agent commerce adds another decision point before many of those functions because software has to decide whether a paid service is useful, whether the price is acceptable and whether the purchase falls within the user's authority.
AWS now controls part of that decision environment. It doesn't set the merchant's price, supply the customer's money or settle the transaction. It can, however, determine whether the agent's payment request fits its permitted spending session and coordinate access to the wallet needed to proceed.
That creates a new distribution question for payment companies. A wallet provider may still own the financial relationship underneath the transaction, while the cloud or AI platform controls the environment where an agent discovers a service and decides which payment connection to use.
AgentCore Payments still has important limits. AWS isn't providing general merchant acquiring, and its documentation doesn't establish native chargebacks, universal merchant controls or a standalone fraud-screening service inside AgentCore Payments. Those functions may remain with the merchant, application, wallet provider or other payment infrastructure.
Control of the agent execution environment can still become valuable payment real estate even when the platform never holds the money. If agents increasingly choose services and initiate purchases on behalf of users, the infrastructure governing those decisions becomes another point where payment providers compete for access.
AgentCore Payments Is Not Yet Available In Canada
AgentCore Payments is currently available in 12 AWS regions across the United States, Europe, Singapore and Australia. AWS does not currently offer the capability from its Canadian region, even though several other AgentCore services are available there.
That creates a practical constraint for Canadian developers that want to keep this part of the stack in an AWS Canadian region. They can deploy AgentCore Payments elsewhere, but there is no Canadian region for the capability today.
The longer-term issue for Canadian fintechs and financial institutions is less about one AWS region and more about where financial authority is being placed. Agent payments combine AI governance, delegated spending, wallets and payment infrastructure inside one operating workflow.
Firms will need to decide which controls remain inside their own applications and which can be delegated to cloud, wallet and protocol providers. That becomes more important as agents gain permission to buy services during a task rather than simply recommend what a person should buy.
Talking Point
If AI and cloud platforms control the environment where agents receive spending authority and decide whether a transaction can proceed, while payment companies provide wallets and settlement underneath them, which layer will ultimately control distribution in agent-led commerce?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
August 18, 2026 | NCFA Feature | Regulation And Policy, Digital Assets, Capital Markets And Market Infrastructure
New Offering Rules, Crypto Resales And Investment Contract Exit
On August 18, 2026, the U.S. Securities and Exchange Commission proposed Regulation Crypto Assets (download 402 page PDF Proposed Regulation Crypto Assets document), a tailored securities framework for certain investment contracts involving crypto assets. The 402-page proposal would create a startup exemption of up to US$5 million over four years, a larger fundraising exemption with US$20 million and US$75 million tiers, crypto-specific disclosures, new SEC forms, secondary-market provisions, state-law preemption and a process for determining when an investment contract has ended.
The scope is narrower than the name might suggest. Regulation Crypto Assets would apply to what the SEC calls a covered investment contract. A crypto asset must be subject to the investment contract, the crypto asset itself must not be a security and no other asset can be subject to that contract.
That builds on the SEC's March 2026 crypto interpretation. The March action addressed when transactions involving a non-security crypto asset can create an investment contract and when that relationship can end. Regulation Crypto Assets would add an operating framework around that lifecycle.
The proposal is significant because it goes beyond creating two new fundraising limits. The SEC is designing rules for how certain crypto investment contracts could be offered, disclosed, distributed and resold, and how the underlying crypto asset could eventually separate from the investment contract.
What Regulation Crypto Assets Does And Does Not Cover
The proposed Regulation Crypto Assets isn't a comprehensive U.S. crypto rulebook. It doesn't create the general regulatory regime for payment stablecoins, programmable payments, crypto custody, crypto lending, mining or conventional securities that happen to be tokenized. Those activities may fall under other federal or state laws, other regulators or separate SEC work.
Payment stablecoins are a good example. Regulation Crypto Assets says permitted payment stablecoins could be accepted as consideration in a covered offering and would count toward its offering limit. It does not establish the rules for issuing payment stablecoins.
That work is proceeding separately under the federal GENIUS Act. On August 17, one day before the SEC proposal, the U.S. Treasury issued a proposed payment stablecoin rule covering implementation of the separate federal framework for their issuance, offering and sale.
Other crypto activities can intersect with Regulation Crypto Assets without becoming generally regulated by it. The proposed Startup Exemption contemplates certain distributions connected with development and use of a crypto network, including circumstances involving airdrops, staking, governance, gas fees and testing. The legal question remains whether the particular transaction involves a covered investment contract.
The proposal also doesn't create a new legal category for tokenized stocks or bonds. Tokenized conventional securities remain securities. Regulation Crypto Assets instead addresses a narrower case where the crypto asset itself isn't a security but is subject to an investment contract.
It's important for founders, investors, lawyers and trading platforms to know that a crypto asset, an investment contract involving that asset and a tokenized security, can look technologically similar while carrying very different securities-law consequences.
The US$5M Startup Route Removes Several Reg CF Frictions
The proposed Startup Exemption could be used for no more than four years after an issuer's initial Form NOR filing. The issuer and its affiliates could conduct covered transactions up to an aggregate US$5 million during that period and couldn't simply restart the four-year clock for the same or a substantially similar crypto asset.
The issuer definition is unusually flexible. The proposal would allow an entity, an individual or a group of individuals or entities to qualify, subject to the other conditions. That accommodates crypto projects that may begin with a development team before they resemble a conventional corporate securities issuer.
The fundraising mechanics are also important. The proposed startup route would permit general solicitation, impose no individual investment limit on retail purchasers and require neither financial statements nor use of a registered intermediary. Covered investment contracts sold through the exemption would not be restricted securities under federal law and would not carry a separate rule-based holding period.
Disclosure doesn't disappear. Before conducting covered transactions, the issuer would file Form NOR on EDGAR and make the disclosures required by Rule 103 publicly available free of charge.
Those disclosures are designed around the investment contract and crypto network. They include offering terms, management and conflicts, the crypto asset, development plans, network or application security, source code where applicable, token economics and allocations, governance, the related crypto ecosystem and material risks. The information must remain publicly available, with material changes addressed under the proposal's update requirements.
Bad-actor disqualifications would apply as well, and issuers would remain subject to federal antifraud and antimanipulation rules. This is a different compliance model, not an absence of securities regulation.
The most revealing comparison is Regulation Crowdfunding. Reg CF also permits up to US$5 million, but over a 12-month period. It requires a registered broker-dealer or funding portal, financial disclosure and investment limits for non-accredited investors, while securities generally face a one-year resale restriction.
The SEC makes that comparison itself. Its economic analysis estimates average Reg CF intermediary fees at approximately 6.6%, with a 6% median, and identifies the absence of mandatory financial statements and an intermediary as potential cost savings under the crypto Startup Exemption.
There is little evidence that current Reg CF rules have produced a large crypto financing market. SEC data identify 42 crypto-related Reg CF offerings by 41 issuers between 2016 and 2024. Reported proceeds totalled approximately US$13.6 million, with an average of US$545,300 among offerings for which proceeds were reported. The SEC cautions that the proceeds total is incomplete and likely represents a lower bound.
The proposal is therefore testing more than a higher ceiling. It asks whether removing particular intermediary, financial reporting, investor and resale frictions would make a public capital route more workable for qualifying crypto projects.
Tier 1 Fundraising Exemption US$20M With Ongoing Reporting
Larger projects could instead use the proposed Fundraising Exemption. Tier 1 would permit up to US$20 million in 12 months. The issuer would have to file Form 1-CRYPTO and couldn't sell covered investment contracts until the SEC qualified the offering statement.
The offering circular would combine the crypto-specific Rule 103 disclosures with financial information about the issuer. Tier 1 financial statements generally wouldn't require an audit, but the issuer would still enter an ongoing reporting regime using annual Form 1-KC, semiannual Form 1-SC and Form 1-UC for specified current events.
Retail investors would also face a restriction that doesn't apply under the Startup Exemption. A non-accredited investor generally couldn't purchase more than 10% of the greater of annual income or net worth. For a non-natural person, the test would use revenue or net assets.
Tier 2 Fundraising Exemption US$75M With Audited Financials
Tier 2 would permit up to US$75 million in 12 months. Like Tier 1, it would require Form 1-CRYPTO, SEC qualification before sales, ongoing reporting and the 10% non-accredited investor limit. The key additional financial requirement is that Tier 2 statements would have to be audited by an independent accountant under the proposed standards.
The larger Fundraising Exemption also comes with a strong U.S. nexus. The issuer would have to be an entity organized under U.S. law, a majority of its executive officers or directors would need to be U.S. citizens or residents, more than half of its assets would need to be in the United States and its business would have to be administered principally there.
Canada appears explicitly in the SEC's request for comment. Question 86 asks whether Canadian issuers, or other foreign issuers, should be permitted to rely on the Fundraising Exemption.
That is more than a passing jurisdictional detail. Regulation A already allows qualifying Canadian issuers, while the proposed Regulation Crypto Assets fundraising route currently does not. Whether the SEC changes that provision could affect how useful the US$20 million and US$75 million routes become for Canadian crypto companies.
Resale And State Rules Could Expand Crypto Distribution
The proposal's treatment of secondary transfers may prove almost as important as its fundraising limits. The SEC says existing exemptions can impede the network effects of crypto assets when they restrict who can participate or how quickly securities can be resold.
Both proposed exemptions would therefore allow issuers to sell covered investment contracts that are not restricted securities under federal law. Investors wouldn't face the federal holding periods associated with restricted securities, although contractual restrictions and other applicable laws could still affect a transfer.
That differs from common Regulation D offerings and from Reg CF's first-year resale limits. The SEC's rationale is specific to crypto networks. Wider ownership and use can contribute to how a network operates and how the crypto asset derives value, so distribution restrictions can affect more than investor liquidity.
Rule 500 would address another obstacle by proposing federal preemption of certain state registration and qualification requirements. It would treat purchasers in qualifying Regulation Crypto Assets transactions as qualified purchasers for that purpose and extend the treatment to specified secondary-market transactions.
The preemption isn't unlimited. Secondary-market treatment would depend on the issuer remaining current with the disclosure, filing or reporting requirements attached to the applicable exemption. States would also retain antifraud authority, powers over unlawful broker or dealer conduct, notice filing requirements and applicable fees.
For trading platforms and intermediaries, the proposal introduces an additional status question. They may need to distinguish between the underlying non-security crypto asset, an outstanding covered investment contract involving it and an asset for which that investment-contract relationship has ended.
The Safe Harbor Creates An Investment Contract Exit
Rule 400 addresses one of the most distinctive features of the proposal. The SEC's existing securities rules generally deal with financial instruments whose fundamental legal character doesn't change over time. A crypto asset can present a different problem because an investment contract surrounding it may end while the crypto asset continues to exist and circulate.
The proposed safe harbor would apply when the issuer has completed or permanently ceased all essential managerial efforts that it represented or promised under the covered investment contract. The issuer also couldn't be making, or intending to make, new promises to perform those essential managerial efforts.
An issuer seeking to use the safe harbor would file Form TR. The filing would include a certification and an analysis supporting the conclusion that the required managerial efforts have ended.
Meeting those conditions would mean the crypto asset is deemed no longer subject to that investment contract for the relevant definitions of a security under the Securities Act and Exchange Act. That doesn't mean Form TR can convert a security into a non-security simply because an issuer files it. The substantive conditions still have to be satisfied, and the SEC can challenge an issuer's analysis.
Nor does the proposal replace Howey or the March interpretation. The safe harbor creates one defined route for dealing with the end of an investment contract. The SEC acknowledges that a covered investment contract could also cease to exist outside the safe harbor under the applicable securities-law analysis.
That lifecycle helps explain why the proposal is more consequential than a new exemption schedule.
The SEC is contemplating a regulatory sequence in which a project can finance development through an investment contract, distribute the associated crypto asset widely and potentially reach a point where the investment contract itself no longer exists.
Canada Could Face A Wider Crypto And Funding Gap
Canada has dealt with token offerings for years. Canadian securities regulators issued guidance on cryptocurrency offerings in 2017 and followed with more detailed token offering guidance in 2018. The CSA has made clear that coins or tokens can involve investment contracts and distributions of securities depending on their economic substance and how they are offered.
There have also been Canadian security-token initiatives and exempt-market token offerings. The difference isn't that Canada has avoided token issuance. Canada has generally applied its existing securities laws, prospectus exemptions and registration framework rather than creating a dedicated crypto lifecycle regime comparable to Regulation Crypto Assets. That difference also fits Canada's wider capital formation gap.
Capital formation makes that difference more important. Canada's NI 45-110 startup crowdfunding exemption currently permits an eligible issuer to raise up to C$1.5 million over 12 months. An investor generally can invest up to C$2,500 in an offering, or C$10,000 when a registered dealer determines that the investment is suitable, and the offering must take place through a funding portal.
The Canadian market is also much smaller. FrontFundr reports that it processed C$4.79 million from 4,320 investors under NI 45-110 in 2025 and accounted for 93% of activity under the exemption. Because that 93% figure comes from FrontFundr rather than an official national regulatory dataset, it should be treated as a platform estimate rather than an official Canadian market total.
There is stronger evidence that the C$1.5 million ceiling is becoming binding for some issuers. Edison Motors raised C$1.491 million under NI 45-110 in 2025, roughly 99% of the limit. Blossom Social raised C$1.450 million, approximately 97%.
The more direct U.S. comparison is Regulation Crowdfunding. Reg CF already allows eligible companies to raise up to US$5 million in 12 months, but requires an SEC-registered intermediary, limits investments by non-accredited investors and generally restricts resale for one year. The proposed US$5 million crypto Startup Exemption would use the same headline ceiling with a different compliance model.
The larger crypto Fundraising Exemption is more directly comparable with Regulation A. Existing Reg A already uses US$20 million Tier 1 and US$75 million Tier 2 limits, with additional audit, investor-protection and ongoing-reporting requirements at Tier 2.
Canada is a different comparison. NI 45-110 isn't a crypto-specific equivalent to Regulation Crypto Assets, but it is Canada's nationally harmonized startup crowdfunding route. It remains capped at C$1.5 million over 12 months, with a funding-portal requirement and investor limits of C$2,500 per offering or C$10,000 with suitability advice from a registered dealer.
NCFA has been advocating for a C$5 million or higher issuer cap for years, arguing that the C$1.5 million ceiling can limit the usefulness of the exemption for growing companies. That concern is now easier to test against actual market activity, with some Canadian crowdfunding campaigns reaching close to the current ceiling.
The relevant policy question is therefore wider than whether Canada has an identical crypto exemption. The U.S. already offers Reg CF and Regulation A for different stages of capital raising and is now proposing a separate crypto-specific framework built around fundraising, token distribution, resale and the eventual end of an investment contract.
That matters because Canada's capital formation system already has funding gaps, while some Canadian crowdfunding campaigns are reaching the NI 45-110 ceiling. Regulation Crypto Assets could add another financing and regulatory option to the U.S. market without a directly comparable Canadian crypto-specific route.
The proposed US$75 million Tier 2 also raises a separate competitiveness issue. The SEC is asking whether Canadian issuers should eventually be eligible for the Fundraising Exemption. If they are included, qualifying Canadian crypto companies could gain access to a much larger U.S. pathway. If they remain excluded, access to U.S. capital could become another factor projects consider when deciding where to organize and raise funds.
None of this means Canadian regulators should copy the SEC. It does strengthen the case for examining Canada's startup financing limits, token-offering rules and capital-market pathways together rather than as separate policy files.
For Canada, the challenge is whether existing rules can protect investors while giving legitimate companies enough financing capacity and regulatory flexibility to build here. If the U.S. adds specialized crypto fundraising routes on top of Reg CF and Regulation A, that competitive comparison becomes more difficult to ignore.
Talking Point
If the U.S. adds a dedicated crypto capital-formation and investment-contract lifecycle regime on top of Reg CF and Regulation A, while Canada still relies on existing exemptions and a C$1.5 million startup crowdfunding cap, how long can Canada treat crypto regulation and capital-formation reform as separate policy questions?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
August 18, 2026 | NCFA Insight | Capital Markets And Market Infrastructure, SME Finance And Business Banking, Competition And Market Structure
Canadian Capital Embraces Private Credit Abroad While Domestic Business Lending Remains Bank Led
On August 2026, the Bank of Canada mapped Canada's private credit market and exposed an unusual divide. Private credit remains a relatively small source of financing for Canadian businesses, yet Canadian pension funds, insurers, investment funds and banks have built approximately C$500 billion of exposure to the asset class, much of it outside Canada.
Non-bank loans have accounted for about 15% of external funding for Canadian non-financial businesses for roughly a decade. Banks and public debt markets still provide about three-quarters of external business financing. By contrast, private credit has become a much larger alternative to traditional lending in parts of the United States.
The interesting question for Canada isn't whether private credit exists. It clearly does. It is why Canadian institutional capital has embraced the asset class globally while Canadian businesses continue to use it relatively little at home.
Canadian Capital Is Already Deep Into Private Credit
The C$500 billion estimate shows that Canadian exposure to private credit is already material even though the domestic borrowing market remains comparatively small.
Canada's large pension funds held an estimated C$215 billion in private credit at the end of 2025, equal to roughly 9% of their invested assets
The three largest Canadian life insurers held just over C$200 billion in the first quarter of 2026, or about 22% of their invested assets
Canadian investment funds held another C$54 billion in 2025, up more than 60% since 2020
Canadian banks also had at least C$40 billion of loans outstanding to asset managers operating private-credit funds, most of them in the United States
Those aren't small exposures. Canadian institutions clearly know how to price and allocate private credit, yet much of that capital is being deployed outside Canada. The implication is harder to ignore at a time when Canadian businesses need more financing options to invest, scale and compete. If domestic firms remain heavily dependent on banks while Canadian institutional capital finds private-credit opportunities elsewhere, Canada may be leaving a financing gap at home precisely when productive domestic investment matters most.
That doesn't mean pension funds or insurers should redirect capital for patriotic reasons. Their mandates require them to pursue risk-adjusted returns. But it does raise a structural question about why Canada's financial system is better at exporting private-credit capital than building comparable opportunities for Canadian businesses.
The geographic split is what deserves more attention. Canadian capital is participating in a global private-credit market that domestic businesses have not adopted to the same degree. That makes this partly a capital-allocation story. Canadian institutions appear willing to accept private-credit risk, but much of the opportunity they are finding is elsewhere.
Canada's Business Credit Market Still Favours Incumbents
The Bank's 15% figure fits a wider pattern in Canadian business financing.
Statistics Canada's 2023 SME financing data showed that chartered banks supplied 68.5% of SME debt financing. Credit unions accounted for another 20.6%, government-backed lenders 9.4%, and online alternative lenders only 2.2%.
That doesn't mean Canadian businesses lack alternatives. It means alternative credit has yet to displace the established banking structure at meaningful scale.
Several explanations are possible. Canada's concentrated banking system gives incumbent lenders large customer bases, deposits, underwriting data and distribution. Many SMEs also maintain long-standing banking relationships, reducing the incentive to switch unless conventional credit becomes unavailable or too restrictive.
Private credit may also be more attractive in markets where borrowers are larger, transactions are more complex, or bank lending leaves wider financing gaps. The Bank notes that in the United States, private credit has become a primary financing source in some segments.
But the Canadian data raises the possibility that domestic private credit may still be underdeveloped relative to the amount of institutional capital and underwriting expertise available here.
That possibility becomes more relevant as fintech platforms improve access to business cash-flow, accounting, invoice and payment data. Better information doesn't eliminate credit risk, but it can make smaller and more customized financing economically viable.
The C$500B Exposure Creates Both Opportunity And Risk
The Bank of Canada's focus is financial stability, and the exposure numbers explain why.
Private credit can diversify portfolios and produce attractive returns, but transparency remains limited. Leverage can be difficult to measure, valuations are less observable than in public markets, and the connections between private-credit funds, banks and institutional investors are still being mapped.
The Bank sees Canadian pension funds and life insurers as relatively well positioned to manage these risks because they generally have long investment horizons and limited reliance on short-term funding. The three largest insurers also hold predominantly investment-grade private credit, with less than 1% classified as higher risk.
Canadian banks' direct exposure appears comparatively contained. At least C$40 billion of lending to private-credit managers represents only about 1% of overall Canadian bank lending, and these loans are typically secured by investors' committed capital.
The vulnerability is therefore less about one large domestic private-credit bubble and more about interconnected exposure to global markets.
A severe deterioration in U.S. or other foreign private-credit portfolios could affect Canadian institutions, asset values and potentially the availability of credit at home. The Bank's 2026 Financial Stability Report reinforces the concern. Rapid global growth, limited transparency and tighter links across the financial system make private credit harder to assess under stress.
Canada May Have More Private Credit Capacity Than Domestic Supply
For NCFA, the most interesting gap is between institutional capability and domestic deployment. Canadian pension funds and insurers already allocate hundreds of billions of dollars to private lending, while Canadian banks finance private-credit managers. Yet Canada's domestic business-financing structure remains heavily concentrated around banks and other established lenders.
Canadian fintech lenders are building alternatives around business data. JUDI.AI uses transaction and cash-flow data to support SME underwriting, while Clearco uses ecommerce performance data to fund qualified brands. These aren't the same as institutional middle-market private credit, but they show how non-bank financing can reach businesses through different underwriting and distribution models.
That doesn't mean Canada should recreate the U.S. private-credit market. More private credit can also bring more leverage, weaker transparency and new channels for financial stress. The better question is whether Canada can develop more domestic non-bank business financing while preserving underwriting discipline, transparency and financial stability.
The opportunity is therefore less about importing the U.S. model and more about closing the gap between Canadian capital and Canadian business demand.
If institutions here are already comfortable allocating substantial capital to private credit abroad, Canada should be asking what market structure, origination capacity and financing infrastructure are still missing at home.
Talking Point
If Canadian institutions are already comfortable allocating hundreds of billions of dollars to private credit abroad, what is preventing more of that lending capacity from developing for Canadian businesses at home?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
August 18, 2026 | NCFA Market Activity | SME Finance And Business Banking, Banking And Credit, Capital Markets And Market Infrastructure
US$100M Macquarie Facility Tests Clearco’s Rebuilt Ecommerce Funding Model
On August 18, 2026, Toronto-based Clearco secured a US$100 million Macquarie asset-backed facility that it expects will support approximately US$900 million in funding to ecommerce brands over the next two years. Macquarie's New York Fixed Income and Currencies team provided the financing.
The facility expands Clearco's capacity to provide qualified brands with up to US$10 million and estimated terms of four to 12 months. Clearco says the funding can support inventory, marketing, major purchase orders and expansion across direct-to-consumer, wholesale, retail, marketplaces and social commerce.
The US$900 million target is a scaling opportunity now, meaning Clearco has to convert institutional funding capacity into sustained customer financing while controlling credit performance and capital costs.
US$100M Facility Sets A US$900M Funding Test
The two headline numbers measure different things. The US$100 million is the size of the Macquarie asset-backed facility. The US$900 million is Clearco's expected customer funding over two years.
That expected funding volume is nine times the facility's headline size. The announcement doesn't disclose the borrowing base, advance rate, asset eligibility, covenants, loss-sharing structure or how much Clearco capital will support customer advances. It also doesn't specify how much of the US$900 million depends on repayment and redeployment of facility capital versus other funding sources.
Those missing terms are important because Clearco's own financing cost and asset performance affect how economically it can fund merchants. More capacity helps only if customer advances generate enough return after financing costs, operating expenses and credit losses.
Clearco has been in a similar position before. Its 2023 recapitalization included a Pollen Street Capital asset-backed facility with up to US$100 million of capacity. Clearco expected that structure to support approximately US$850 million of originations over two years.
That comparison is especially relevant because the earlier reset followed a period when Clearco reduced international operations, tightened underwriting and faced rising capital costs. The new facility arrives after the company has narrowed its operating focus and rebuilt its funding products.
The stated two-year funding target is now US$50 million higher than the 2023 target. It's also not clear whether the Macquarie facility carries a lower funding cost or materially different risk structure than the Pollen Street arrangement.
Clearco Competes On Funding Flexibility And Capital Access
Clearco's current ecommerce financing model gives merchants two choices over funding structure and two ways to deploy the capital. Fixed and Rolling Funding Capacity determine whether a business receives defined one-time capacity or access that replenishes as principal is repaid. Cash Advance deposits funds into the business account, while Invoice Funding supports supplier payments.
That structure gives Clearco several ways to fund inventory, advertising and supplier obligations without requiring a separate product for each use case. Rolling Funding also reduces the need for repeat applications because available capacity replenishes as payments are made.
The competitive market has also developed. Wayflyer provides performance-based ecommerce financing and currently advertises funding up to US$20 million, while Shopify Capital offers embedded merchant financing directly through the Shopify platform.
Those models compete from different business approaches. Wayflyer is another specialist financing provider using merchant performance data. Shopify can originate funding inside the commerce platform where merchants already operate. Clearco's current proposition combines ecommerce specialization, multiple capital structures and external institutional funding capacity.
Clearco reports more than US$3.3 billion provided to over 11,000 businesses historically. That record establishes substantial lifetime deployment, but it doesn't answer how much financing the current version of Clearco is originating or how the rebuilt portfolio is performing.
Originations And Credit Performance Will Test The Rebuild
Clearco's US$900 million expectation implies average customer funding of approximately US$37.5 million per month over two years if volume were evenly distributed. Ecommerce funding won't arrive evenly, but the average provides a useful scale for evaluating future disclosures.
The strongest evidence will be originations, repeat use, facility utilization, repayment performance and credit losses. Pricing and funding costs would show whether additional volume also improves Clearco's economics.
The new facility could also let Clearco serve larger ecommerce operators. The announced maximum of US$10 million places it above the smaller working-capital advances often associated with revenue-based financing and gives the company more capacity for inventory commitments, major purchase orders and multi-channel expansion.
If Clearco approaches the funding target while maintaining credit quality, the company will have stronger evidence that its post-restructuring model can support another period of scale. If utilization or credit performance weakens, the headline facility size will matter much less.
Talking Point
Can Clearco convert its new institutional funding capacity into approximately US$900 million of ecommerce financing while maintaining the credit performance and capital economics needed to make that scale durable?
NCFA Company Intelligence Snapshot
Clearco
Non-dilutive revenue-based funding for U.S. DTC ecommerce brands
Founded 2015 as Clearbanc by Andrew D'Souza and Michele Romanow
Legal Entity Clear Finance Technology Corporation
Headquarters Toronto, Canada
Leadership Andrew Curtis, Chief Executive Officer
Business Model Non-dilutive revenue-based funding for ecommerce businesses
Core Products Fixed Funding Capacity, Rolling Funding Capacity, Cash Advance and Invoice Funding
Current Market U.S.-incorporated DTC ecommerce businesses with a U.S. business bank account
Current Eligibility 6+ months of consistent revenue and more than US$100,000 in monthly revenue
Historic Funding More than US$3.3B to 11,000+ businesses
Funding Capacity Up to US$10M for qualified brands with estimated terms of 4 to 12 months
Current Trigger US$100M Macquarie asset-backed facility announced Aug 18, 2026
Forward Funding Target Approximately US$900M to ecommerce brands over two years
Milestones
Select a milestone to follow
Clearco's
development
1 Launch 2015
2 Venture Scale 2018–2019
3 Clearco Rebrand Apr 2021
4 Recapitalization Oct 2023
5 Product Rebuild 2024–2025
6 Macquarie Facility Aug 2026
Milestone
1
Clearbanc Launches Its Ecommerce Funding Model (2015)
Andrew D'Souza and Michele Romanow founded Clearbanc in Toronto in 2015. The company developed a data-driven alternative to conventional equity funding for digital businesses.
Company
Clearbanc Toronto company founded by Andrew D'Souza and Michele Romanow
Stage
Launch Early non-dilutive financing model for online businesses
Capital
Revenue Based Funding is tied to business performance rather than founder equity
Markets
Digital Commerce Online businesses become the initial operating focus
Customers
Founders Growth-oriented online businesses seeking capital without selling ownership
Competition
Equity And Business Credit Clearbanc offers another funding route between venture equity and conventional borrowing
Additional Company Data
Clearbanc was founded in Toronto in 2015
Business operating data becomes central to funding decisions
The ecommerce specialization developed into the company's core funding market
NCFA Perspective
Clearco's original operating idea remains visible in the company today. Business data supports funding decisions while founders retain their equity. The products and capital structure change substantially over the following decade.
Milestone
2
Institutional Venture Capital Supports Expansion (2018–2019)
Clearbanc raised institutional venture capital as it expanded the ecommerce funding model and increased the amount of capital available to digital businesses.
Company
Clearbanc Ecommerce financing becomes the company's defining business
Stage
Venture Scale Institutional investors support platform expansion
Capital
Series A And B Equity capital supports company growth while separate funding capacity supports merchant advances
Markets
Ecommerce Digital merchant financing becomes a repeatable operating category
Customers
Online Businesses Funding is directed toward measurable growth spending and working capital
Competition
Alternative Growth Capital Clearbanc competes with equity, bank credit and other working-capital providers
Funding decisions rely increasingly on merchant and ecommerce performance data
Customer activity builds a larger underwriting dataset
NCFA Perspective
The venture-backed expansion proves there is substantial demand for ecommerce growth capital. It also makes Clearbanc increasingly dependent on disciplined underwriting and reliable access to capital for customer advances.
Milestone
3
Clearbanc Becomes Clearco At Nearly US$2B Valuation (Apr 2021)
Clearbanc rebranded as Clearco in April 2021 and announced US$100 million of Series C equity financing plus US$250 million of debt. The transaction valued the company at nearly US$2 billion.
Company
Clearco Clearbanc adopts the Clearco name
Stage
Rapid Expansion Product and international ambitions expand
Capital
US$350M US$100M Series C equity plus US$250M of debt announced
Markets
International Clearco pursues a wider geographic and product strategy
Customers
Ecommerce Founders The company expands its founder proposition beyond a single financing product
Competition
Growth Capital Platform Clearco attempts to compete across funding and additional founder services
Additional Company Data
Oak HC/FT led the US$100M Series C equity round
The April 2021 financing included US$250M of debt
The announced valuation was nearly US$2B
The rebrand accompanied a wider company and product strategy
NCFA Perspective
The 2021 financing marks Clearco's high-growth period. Equity, debt capacity, valuation and operating ambition all increase at the same time. The later contraction shows why a specialty finance company cannot be judged by valuation or lifetime deployments alone.
Milestone
4
Clearco Recapitalizes Around A New Funding Structure (Oct 2023)
Clearco completed a recapitalization in October 2023 that included a US$60 million Series D and a Pollen Street Capital asset-backed facility providing up to US$100 million of financing capacity.
Company
Clearco The company operates under CEO Andrew Curtis following a difficult period of contraction
Stage
Recapitalization Capital structure and operating model are reset
Capital
US$60M + US$100M Series D equity plus asset-backed financing capacity
Markets
Ecommerce Focus The company concentrates on its core ecommerce financing business
Specialty Finance Capital cost and underwriting performance become central competitive variables
Additional Company Data
Inovia Capital and Founders Circle Capital led the US$60M Series D
Pollen Street supplied up to US$100M in asset-backed financing capacity
Clearco expected the facility to support US$850M of originations over two years
The transaction was explicitly described as a recapitalization
NCFA Perspective
The 2023 transaction is more important than another venture round because it resets how Clearco finances the business. Dedicated asset-backed capital reconnects customer growth with funding capacity. The operating test becomes whether Clearco can grow without recreating the cost structure that contributed to its earlier contraction.
Milestone
5
Clearco Rebuilds Its Ecommerce Funding Suite (2024–2025)
Clearco expanded its funding products during 2024 and 2025. Rolling Funding launched in 2025 and replenishes available capacity as customers make payments. The company later combined Fixed Funding Capacity, Rolling Funding Capacity, Cash Advance and Invoice Funding into a broader ecommerce funding suite.
Company
Clearco The company operates with a narrower ecommerce focus and rebuilt product set
Stage
Product Rebuild Capital products expand after the recapitalization
Capital
Fixed And Rolling Customers can use one-time capacity or replenishing funding capacity
Markets
U.S. Ecommerce Current products focus on U.S. ecommerce brands
Customers
Established DTC Brands Current qualification focuses on businesses with meaningful recurring revenue
Competition
Flexible Working Capital Funding structure, pricing, capacity, speed and lien requirements become key points of comparison
Additional Company Data
Rolling Funding launched in 2025 and automatically replenishes available capacity as payments are made
Cash Advance sends capital directly to the customer's bank account
Invoice Funding supports supplier and vendor payments
Clearco currently offers both Fixed Funding Capacity and Rolling Funding Capacity
NCFA Perspective
The product rebuild concentrates Clearco on serving more funding needs for the same ecommerce customer. That makes repeat use, credit performance and capital efficiency more important than returning to the wide geographic expansion strategy of 2021.
Milestone
6
Macquarie Adds US$100M Of Asset-Backed Capacity (Aug 2026)
Clearco announced a US$100 million asset-backed financing facility from Macquarie Group on August 18, 2026. Clearco expects the facility to support approximately US$900 million in funding to ecommerce brands over the next two years.
Company
Clearco Toronto-headquartered ecommerce funding company led by Andrew Curtis
Stage
Funding Expansion Institutional capital increases customer funding capacity
U.S. Ecommerce Funding supports brands operating across DTC, wholesale, retail, marketplaces and social commerce
Customers
Up To US$10M Qualified brands can access funding with estimated terms of four to 12 months
Competition
Institutional Funding Economics Capital cost and asset performance influence Clearco's ability to price and expand funding
Additional Company Data
Macquarie's New York Fixed Income and Currencies team provided the financing
The new facility provides US$100M of asset-backed financing capacity
Clearco expects it to support approximately US$900M of ecommerce funding over two years
Clearco currently reports more than US$3.3B provided to 11,000+ businesses historically
The US$900M figure is a forward company expectation, not capital already deployed or Clearco revenue
NCFA Perspective
The Macquarie facility gives Clearco another institutional funding base after several years spent rebuilding the business. The next test is measurable. Clearco has to convert that capacity into sustained ecommerce financing while maintaining underwriting discipline and asset performance. The US$900 million target defines the scale of the opportunity, but it does not establish that the volume will be reached.
Clearco Macquarie Funding FAQs
How much financing did Macquarie provide to Clearco?
Macquarie Group provided Clearco with a US$100 million asset-backed financing facility announced on August 18, 2026.
How much ecommerce funding does Clearco expect the facility to support?
Clearco expects the facility to support approximately US$900 million in funding to ecommerce brands over the next two years. That is a company expectation for customer funding, not US$900 million of capital supplied by Macquarie.
How much funding can an ecommerce business get from Clearco?
Clearco says qualified brands can access up to US$10 million, with estimated terms of four to 12 months.
What can Clearco funding be used for?
Clearco says businesses can use its funding for inventory, marketing, large purchase orders and growth across direct-to-consumer, wholesale, retail, marketplaces and social commerce.
Is Clearco's Macquarie facility the same as its 2023 Pollen Street financing?
No. Clearco's 2023 recapitalization included a separate asset-backed facility from Pollen Street Capital with up to US$100 million of capacity. The August 2026 Macquarie transaction is a new US$100 million facility.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. 
