July 4, 2026 | NCFA Fintech Whisperer | Artificial Intelligence And Data, Lending Consumer Credit And BNPL, Digital Assets Blockchain And Tokenization, Cybersecurity Fraud And Financial Crime, SME Finance And Business Banking, Capital Markets And Market Infrastructure, Policy Regulation And Governance, Risk Compliance And Regtech, Data Privacy And Governance

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-June 5, 2026, June 6-12, 2026, June 13-19, 2026, June 20-26, 2026, June 27-July 3, 2026).

Weekly Fintech Market Intelligence Jul 4 - 10, 2026

Data Privacy And Governance

EDPB Proposes GDPR Guidance For Generative AI Web Scraping

• The European Data Protection Board adopted draft Guidelines 03/2026 for public consultation, with feedback accepted until October 30, 2026.
• The guidelines cover private organizations that collect personal data from external internet sources to train or fine tune generative AI systems.
• The draft addresses legal basis, purpose limitation, transparency, accuracy and data minimization, alongside source exclusions, collection criteria, filtering and anonymization or pseudonymization.

AI training data now carries an auditable collection burden across source choice, legal basis, sensitive data and model output controls. Canadian fintechs using European personal data should map what is scraped, why it is needed, who controls the processing and how records can be filtered or removed before consultation language becomes supervisory practice.

Policy Regulation And Governance

MAS Proposes Faster Approvals For New Retail Fund Types

• MAS proposed changes to the Code on Collective Investment Schemes to support a wider range of retail fund products through a more streamlined authorisation process.
• A proposed Alternative Funds Appendix would create a dedicated framework for innovative fund types with product specific safeguards and enhanced disclosure requirements.
• MAS said it aims to establish regulatory guardrails for most new fund types within about three months, after which similar funds could be authorised in about three weeks if they meet the same requirements.

Fund innovation depends on regulatory speed as well as product design. Asset managers, exchanges, fintechs, wealth platforms and regulators should watch how dedicated approval pathways and product specific guardrails influence the pace of retail investment innovation without reducing investor protection.

Payments And Money Movement

Swift Readies Blockchain Ledger For 17 Bank Payment Pilot

• Swift said its blockchain ledger is ready for initial use after nine months of development with international financial institutions.
• Seventeen banks across six continents are preparing to pilot live cross border transactions using tokenised deposits with 24/7 payment availability.
• The shared ledger connects bank issued tokenised deposits while final settlement continues through existing systems, preserving established compliance, credit and risk controls.

Swift is testing whether tokenized deposits can extend today's banking infrastructure into always available cross border payments without replacing existing settlement systems. The pilot results will provide an early benchmark for bank led tokenized payment networks.

Capital Markets And Market Infrastructure

CFTC Stops CME 24/7 Crude Futures Launch For Review

• The CFTC will stay CME’s self certified contract that would have allowed 24/7 crude oil futures trading.
• The agency said CME sought self certification while the CFTC was already seeking public comment on whether standard futures contracts should extend to 24/7 trading.
• The CFTC will review the product filings under its approval authority before deciding whether the contracts comply with commodity law and CFTC rules.

Always on market design is moving beyond crypto. Exchanges, brokers, clearing firms, liquidity providers, risk teams and regulators should watch how 24/7 trading changes oversight, operations, margin, surveillance and market resilience.

SME Finance And Business Banking

Equifax Acquires Mexico Credit Bureau Círculo De Crédito

• Equifax signed a definitive agreement to acquire Círculo de Crédito for a $750 million enterprise value.
• Círculo de Crédito serves more than 1,700 customers and has 2 billion tradelines covering 80 million validated identities.
• Equifax said the acquisition expands its credit bureau, alternative data, identity, fraud prevention and financial inclusion capabilities in Mexico.

Credit infrastructure is consolidating around data depth, identity coverage and alternative underwriting. Lenders, fintechs, credit bureaus, SME finance platforms and regulators should watch how alternative data, fraud controls and AI assisted decisioning affect credit access for thin file borrowers and small businesses.

Cybersecurity Fraud And Financial Crime

Hong Kong Requires Brokers And Crypto Platforms To Replace OTP Login

• The Securities and Futures Commission requires internet brokers and licensed virtual asset trading platform operators to use phishing resistant authentication for client login and device binding.
• Firms must stop using one time passwords for these functions and may use passkeys or cryptographically bound devices instead.
• Large internet brokers are expected to comply immediately, while all covered firms must implement the controls by July 8, 2027.

Hong Kong is replacing a widely used authentication method across online securities and regulated virtual asset trading. Brokers and platforms also need stronger monitoring, client notifications and incident response procedures, while senior management may be held accountable for losses caused by inadequate controls.

UK Open Banking Fraud Data Links Risk To Journey Design

• Open Banking Limited published its first twice-yearly Payments Fraud Monitor using data from six banking groups and eleven brands representing more than 60% of UK open banking payment volume.
• Approximately one in 6,000 open banking payments was fraudulent during 2025, compared with one in 2,500 payments across the wider industry.
• Open banking recorded a higher fraud rate by value at 0.035%, compared with 0.026% across the industry. Its average fraudulent transaction was £785, versus £266 for the wider benchmark.
• The fraud rate by volume increased to 0.024% in the first quarter of 2026, or approximately one payment in 4,200. Authorized Push Payment fraud represented more than two-thirds of reported cases.
• Variable Recurring Payments recorded a 0.007% fraud rate, compared with 0.026% for single immediate payments. App-authenticated journeys also produced lower fraud rates than browser-authenticated journeys, although app fraud was growing faster.

The findings connect payment design directly to fraud exposure, customer friction and trust. Lower fraud by transaction count is encouraging, but higher losses by value and rising first-quarter fraud show why scale requires stronger authentication, transaction risk data and coordinated controls. These operating results add important context to the UK’s payment milestone and Canada’s trust framework.

EU Builds Secure AI Cyber Testing For Critical Sectors

• The European Commission introduced an action plan combining advanced AI model evaluation, cybersecurity resilience and European AI capacity.
• The Commission and ENISA will develop a blueprint for secure access to advanced AI systems and a testing platform for critical sectors, including finance.
• The plan adds an EU Grand Challenge for AI cybersecurity and connects implementation across the AI Act, DORA, NIS2, the Cyber Resilience Act and the Cyber Solidarity Act.

Financial institutions and technology providers will gain a structured environment for testing AI security tools against European requirements. Firms serving the European market should prepare to demonstrate model safety, operational resilience and secure deployment before advanced systems enter critical financial operations.

ESRB Warns Frontier AI Models Could Strain Cyber Resilience

• The European Systemic Risk Board warned that frontier AI models could increase systemic cyber risks across the EU financial system.
• Frontier AI models may increase the speed, scale and sophistication of cyber attacks against financial institutions and infrastructure.
• The ESRB welcomed an ECB Banking Supervision letter to significant euro area banks setting expectations for AI related cyber threats.

AI cyber risk is now a financial stability issue. Banks, fintechs, payment firms, infrastructure operators, software vendors and supervisors should watch how AI vulnerability discovery, third party concentration, open source dependencies and cyber resilience planning become part of financial sector oversight.

Digital Assets Blockchain And Tokenization

Circle Receives OCC Approval For National Trust Bank

• Circle received final approval from the Office of the Comptroller of the Currency to establish First National Digital Currency Bank, which will operate as Circle National Trust.
• The national trust bank will operate under direct OCC oversight and offer fiduciary digital asset custody services for Circle and its affiliates when it opens.
• The approved charter also supports future management of the USDC Reserve and possible custody services for a limited number of banks and other regulated financial institutions.

Circle's trust charter places a major stablecoin issuer inside the U.S. federal banking framework. The pace of implementation, custody adoption and any future expansion into reserve management will show whether trust banks become the preferred operating model for regulated stablecoin infrastructure.

Latvijas Banka Approves Crypto And Payment Licences For Nodu

• Latvijas Banka’s Supervision Committee decided to issue Nodu Digital a crypto asset service licence and a payment institution licence.
• The crypto asset licence permits exchanges between crypto assets and funds and transfers of crypto assets for clients, while the payment licence permits payments and transfers to payment accounts.
• Nodu is the tenth company licensed by Latvijas Banka under MiCA and can provide its authorized crypto asset services across the European Union through cross border notification.

The paired licences let one regulated provider connect crypto conversion, asset transfers, conventional payments and payment accounts. Firms pursuing similar models across Europe will need to determine when MiCA authorization must be combined with payment permissions as their products cross from digital assets into fiat payment execution.

Coinbase Secures UK Investment Services Authorisation

• Coinbase obtained UK investment services authorisation, expanding its UK platform beyond crypto.
• The authorisation allows UK users to trade derivatives and equities alongside crypto through one platform and login.
• Coinbase said institutional and advanced traders will gain access to derivatives, including crypto, equity and commodity perpetual futures.

Crypto platforms are moving toward regulated multi-asset investment access. Exchanges, brokers, dealers, crypto platforms, regulators and investors should watch how derivatives, equities and crypto converge inside licensed investment platforms.

Ripple Receives Full EU MiCA CASP Licence

• Ripple received full Markets in Crypto-Assets Crypto Asset Service Provider authorization from Luxembourg’s CSSF.
• The licence allows Ripple to offer regulated digital asset services across all 30 European Economic Area markets.
• Ripple said the approval supports its custody, payments and stablecoin activity in Europe under the MiCA framework.

MiCA is becoming a market access gate for global digital asset firms. Banks, payment companies, custodians, stablecoin issuers, exchanges and compliance teams should watch how full EU authorizations shape cross-border crypto services, institutional distribution and regulated stablecoin infrastructure.

Artificial Intelligence And Data

Eltropy Opens Agentic AI Platform To Fintech Developers

• Eltropy opened applications for an early access program that lets fintech companies build and distribute AI agents to more than 750 credit unions and community banks using its platform.
• Accepted firms receive access to Eltropy’s agent operating system, lab environments, compliance and security documentation, development support and a route to distribution after certification.
• The program is the first phase of a governed marketplace where institutions can use agents built by Eltropy, fintech partners or their own teams under common privacy, governance, escalation and audit controls.

Eltropy is turning agentic banking into a platform market rather than a closed vendor product. The commercial question is whether shared controls, integrations and distribution can make specialized financial agents easier for smaller institutions to adopt.

Scotiabank Sun Life TELUS And Lightworks Launch AI Consortium

• Lightworks, Scotiabank, Sun Life and TELUS launched the AI Consortium to build and govern shared AI control infrastructure in Canada.
• The first program is the Agentic Control Plane, which gives enterprises visibility and control across models, agents, users and inference pipelines.
• The release says the Agentic Control Plane is already running in production in regulated environments and processes more than two trillion tokens per month across member organizations.

Regulated AI adoption needs control infrastructure, not only models. Banks, insurers, telecoms, fintechs and compliance teams should watch how agent oversight, inference monitoring, shared IP and enterprise control planes become part of Canadian AI governance.

FCA Publishes Mills Review On AI In Retail Finance

• The FCA published the Mills Review on the long-term impact of AI on retail financial services through 2030 and beyond.
• The review examines consumer behaviour, competition, fraud, financial inclusion, market structure and regulatory readiness.
• The FCA said AI adoption may create risks around fraud, identity abuse, algorithmic bias, opaque decisions, consumer agency, concentration and resilience.

AI in retail finance is becoming a competition, consumer protection and fraud issue at the same time. Banks, fintechs, wealth platforms, insurers, lenders and compliance teams should prepare for AI agents, personalization, delegation, identity controls and new forms of consumer harm.

Lending Consumer Credit And BNPL

Klarna Applies For U.S. Banking Licence

• Klarna submitted applications to the Utah Department of Financial Institutions and the FDIC to establish Klarna Bank USA.
• The proposed entity would be a Utah-chartered industrial bank and wholly owned subsidiary of Klarna Inc., subject to approval.
• Klarna said a banking licence would bring payments, savings, credit and merchant services closer to its own operating model.

Large fintechs are testing direct charter strategies again. Lenders, BNPL firms, embedded finance platforms, banks, investors and regulators should watch whether major payment and credit firms choose bank partnerships, owned charters or hybrid models for the next stage of regulated growth.

Risk Compliance And Regtech

FCA Expands Digital Enforcement And Supervisory Automation

• An international FCA action against illegal financial promotions resulted in three arrests, six criminal proceedings and 650 social media takedown requests.
• The regulator secured 17 criminal convictions and fined firms about £14.4 million for transaction reporting failures and control weaknesses during the year.
• AI automation reduced the average handling time for simpler supervisory cases from as much as four hours to about six minutes.

Regulators are increasing both the reach and speed of financial misconduct enforcement. Firms now face faster detection, coordinated action across jurisdictions and far less time to correct weak promotion, reporting and compliance controls.

Conclusion

This week’s intelligence points to a more mature phase of financial innovation. Stablecoins are entering regulated banking structures, tokenized deposits are nearing live payment use, regulators are setting terms for continuous markets, and AI governance is becoming a practical operating requirement. In Canada, the Real Time Rail rules, PSP access model and planned Q4 launch show how domestic payment modernization is entering the same execution stage. Advantage will favour institutions that can combine trust, regulatory readiness and delivery at scale.

NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets, subscribe to NCFA weekly newsletter updates, view the latest fintech insights, industry research, or launch into emerging financial innovation opportunities.

The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

FINRA Cybersecurity Practices For Member Firms

Can Canada Turn Access Into Productive Participation?

How Canadians Pay Online in 2026: Interac, Digital Wallets and Open Banking

AWS AgentCore Payments Brings Spending Controls To AI Agents

SEC Regulation Crypto Assets and US$75M Fundraising Rules

Canada Has C$500B in Private Credit Exposure, But Little at Home

A study of modern engagement techniques in online casino platforms

Clearco Secures US$100M Macquarie Ecommerce Facility

Why Traders Watch Nasdaq 100 Moves

Brdg And Mortgage Automator Modernize Construction Lending