Canada

CA schema world-payments-v1 trajectory: not yet assessed

Last updated 2026-10-21 · 14 modules · 56 sourced findings · 129 sources in the cumulative register

14Modulesbaseline.modules[]

56Findingsmodules[].findings[]

23Tier-1 sourcesrun_metadata.t1_source_count

Confidence mix (sums to 14 rendered modules; click to filter)

No modules moved this cycle.

Member jurisdictions

This page covers Canada federal law once. Each member’s page covers its own law, regulators and enforcement (5 of 7 members covered here).

Jurisdiction brief

Latest update · 18 October 2026

Lead Signal

Canadian payments-sector commercial activity this cycle is modest in scale and skewed toward distressed or non-strategic transactions rather than signalling a broader consolidation wave. Toronto-based KORT Payments sold its cannabis-focused payment-processing unit, Merrco, to PayFacto, a divestiture that narrows KORT's own product footprint rather than expanding a competitor's. Separately, Chimoney, a Toronto cross-border payments platform, was acquired by Nigeria's CapitalSage Holdings after Chimoney had already announced it was shutting down, making this an acquisition of a failing business rather than a strategic scale play. Both events are reported from a single trade-newsletter source and have not been independently corroborated.

Other Developments

The KORT/Merrco/PayFacto divestiture completed October 13, 2026 with the transaction value not publicly disclosed. The deal removes a cannabis-vertical payments business from KORT's portfolio and consolidates it under PayFacto, a specialist in that space; no regulatory filing or primary corroboration of the transaction has been located this cycle.

The Chimoney acquisition by CapitalSage Holdings closed the same week, also October 13, 2026, also with undisclosed terms. Chimoney's prior public announcement that it was shutting down frames this as a distressed-asset transaction rather than a growth acquisition, and CapitalSage's own domicile was not confirmed in the reporting available.

Cross-Monitor Connections

Neither transaction carries a reported financial-integrity or AML/CFT dimension in the source material reviewed this cycle, and no overlap with sanctions, beneficial-ownership, or crypto-asset findings has been identified for either deal.

Outlook

With both events sourced from a single trade publication and neither independently corroborated, the near-term task is verification rather than trend-reading: whether this pair of transactions is an isolated pocket of distressed-asset activity or an early signal of broader consolidation pressure in the Canadian payments-processing space is not yet determinable from the evidence available this cycle.

6 earlier updates not shown here.

Standing brief · as of 8 July 2026

Written before the update above. Where they differ, the update is the more recent position.

Lead Signal

Canada's payments-regulatory perimeter underwent a consequential build-out this cycle. Registration provisions under the Retail Payment Activities Act have applied since November 1, 2024, and the accompanying risk-management and funds-safeguarding requirements have been in force since September 8, 2025. The Canada Stablecoin Act received Royal Assent on March 26, 2026 as Division 45 of Bill C-15, establishing a federal fiat-backed stablecoin regime that designates the Bank of Canada as registry and prudential supervisor and requires 1:1 reserve backing with at-par redemption, though the Act has not yet come into force. The Consumer-Driven Banking Act also received Royal Assent in March 2026, creating a Bank of Canada-administered open-banking and data-sharing supervisory regime with phased participation beginning with large banks. Together, these instruments consolidate the Bank of Canada as the central supervisory node across non-bank payment activity, open banking, and stablecoin issuance, raising boundary questions with OSFI's prudential mandate. The RPAA regime applies specifically to non-bank payment service providers, whereas the Consumer-Driven Banking Act's accreditation regime is designed to bring both bank and non-bank participants into scope as open-banking participation phases in.

Other Developments

Beyond the headline enactments, several supporting developments sharpen the picture of where enforcement and access will bite. The Bank of Canada's administrative-penalty authority under the RPAA reaches up to $10 million CAD per contravention, alongside a standalone power to revoke a payment service provider's registration outright. No exemptions apply under the current RPAA registration framework, meaning covered payment functions must register regardless of size or business model. Retail Payment Activities Regulations section 15(2)(c) now requires registered PSPs to document how insolvency administrators are expected to handle safeguarded end-user funds, while the Bank of Canada has clarified it does not itself administer insolvency claims. This insolvency-documentation clarification is tracked as a dated procedural item rather than a standing structural change. The Consumer-Driven Banking Act allows the Minister of Finance to designate provincial authorities to exercise oversight functions, and establishes a federal-provincial-territorial advisory committee to manage that division of labour. Access to the open-banking regime is structured as an accreditation process for participating entities rather than a conventional licence. The Stablecoin Act supersedes the Canadian Securities Administrators' interim Value-Referenced Crypto Asset framework under Staff Notices 21-332 and 21-333, which had resulted in only one globally recognized stablecoin available in Canada. Under the Act, stablecoin issuers must hold reserves in treasury instruments on a 1:1 basis and honour redemption at par value, the safeguarding architecture the Bank of Canada will supervise. The Stablecoin Act likewise contemplates no blanket exemptions from its issuer-registration requirement once the regime becomes operative. Critics have flagged that designating the Bank of Canada as reserve-and-redemption supervisor for stablecoin issuers mirrors OSFI's role for bank deposits, blurring the prudential boundary between the two authorities. Proposed amendments to the RPAA's payment-function definition would extend registration scope to cover transmission or maintenance of encrypted or tokenized payment instruments and private keys, bringing custodied wallet providers and digital-asset custodians into the same registration track as conventional payment service providers. Both the licensing perimeter and correspondent-banking access are flagged as escalating, while the stablecoin and open-banking regimes are characterised as newly established.

Cross-Monitor Connections

The Stablecoin Act's reserve-and-redemption architecture and the proposed RPAA expansion into digital-asset custody carry illicit-finance-channel implications that this monitor routes to the Financial Integrity Monitor rather than analysing directly. That cross-routing is presently constrained on the WPM side, since the Sentinel.gi feed that normally supplies this monitor's AML/CFT module was unavailable this cycle, so any illicit-finance read on the stablecoin and custody build-out is carried here as an absent field rather than original analysis. This gap should be cross-checked against FIM's parallel Canada output once the feed resumes. This cycle's coverage also carries explicit gaps: merchant-acquiring and high-risk-MCC onboarding developments were not surfaced for Canada, nor were financial-promotion enforcement actions specific to Canadian payment service providers.

Outlook

Two forward markers frame the coming period. Bank of Canada supervision of fiat-backed stablecoin issuers under the Stablecoin Act is expected to become operative via a future order-in-council, with the regime projected to be stable after 2027. Implementing regulations for the Stablecoin Act are expected via the Canada Gazette over the next twelve to eighteen months. Proposed amendments expanding the RPAA's payment-function definition to bring digital-asset custody providers within registration scope are similarly expected around 2027, though the date carries a year-scale uncertainty band. The pending scope expansion signals that Canada is moving to bring crypto-custody activity within mainstream payment-service registration rather than establishing a separate crypto-specific licensing track. Expansion of Real-Time Rail eligibility to RPAA-registered non-bank payment service providers is advancing through the Department of Finance, though no fixed date has been set; access to a Bank of Canada settlement account and Payments Canada membership continues to depend on completing RPAA registration first. Canada's overall regulatory trajectory across licensing, stablecoins, open banking and settlement access is now assessed as tightening.

Standing brief, as of 27 June 2026.

Regulatory Status

Canada is mid-transition across its entire payments stack simultaneously, with regulatory risk assessed as moderate and the direction tightening on AML and conduct while liberalising on access and innovation. Non-bank PSP supervision under the RPAA is live: the Bank of Canada supervises registered PSPs, with operational risk-management and end-user fund safeguarding obligations in force as of September 8, 2025, governed by the final Safeguarding of Funds guideline published December 12, 2024. Roughly 1,500 PSPs were supervised as of September 2025. The federal Stablecoin Act (Bill C-15) received Royal Assent on March 26, 2026, creating Bank of Canada oversight for fiat-backed stablecoin issuers (1:1 HQLA reserve, at-par redemption), coming into force on a day to be fixed by order pending regulations; the same Bill enacted a re-based Consumer-Driven Banking Act shifting open-banking oversight from the FCAC to the Bank of Canada. The Real-Time Rail is in testing toward a phased launch. On AML, the Budget 2025 Implementation Act sharply raises AMP caps, mandates universal enrolment and introduces compliance orders and agreements (Sentinel-fed), atop record FINTRAC enforcement in 2025 concentrated in crypto/MSB. Scheme economics shifted with the 0.95% interchange cut (October 2024) and a C$188m price-fixing settlement. A persistent consumer-protection gap remains: no statutory APP-fraud reimbursement regime, with e-Transfer outside zero liability. Lynx is designated a systemically important payment system under the PCSA, and settlement-account access criteria (prudential regulation, BBB- assessment, CDSX collateral) are being widened to RPAA-subject PSPs for the RTR.

trust tier: ai_unverified

Latest update · 28 September 2026

Regulatory Status

Canada's payments-regulatory environment this cycle is dominated by the re-enactment of the Consumer-Driven Banking Act via Division 9 of Part 5 of Bill C-15, which repealed the original June 2024 Act and replaced it with a comprehensive new version, shifting open-banking oversight from the Financial Consumer Agency of Canada to the Bank of Canada. Proposed implementing Regulations were published for consultation from June 27 to August 26, 2026, covering accreditation - with a streamlined stream for RPAA-registered entities - security, consent, liability, and data-sharing.

The open-banking rollout is phased: Phase 1 (read access) is targeted for 2026, and Phase 2 (write access and payment initiation) is targeted for mid-2027, contingent on Real-Time Rail availability. Both the Act and Regulations remain partly not yet in force pending finalisation.

Outlook

Watch for final Regulations following the consultation's August 26, 2026 close, confirmation of the Phase 1 launch within 2026, and clarity on Real-Time Rail's status as the gating dependency for Phase 2 payment-initiation capability targeted mid-2027.

3 earlier updates not shown here.

Standing brief · as of 8 July 2026

Written before the update above. Where they differ, the update is the more recent position.

Regulatory Status

Together, these instruments consolidate the Bank of Canada as the central supervisory node across non-bank payment activity, open banking, and stablecoin issuance, raising boundary questions with OSFI's prudential mandate. In licensing (W1a), RPAA registration and safeguarding requirements are now fully in force. In conduct and open banking (W1b), the Consumer-Driven Banking Act establishes a new Bank of Canada-administered supervisory regime. In stablecoins (W2), the Canada Stablecoin Act creates a Bank of Canada-supervised federal fiat-backed stablecoin regime, though it is not yet in force. In correspondent banking and settlement (W12), Real-Time Rail eligibility for RPAA-registered non-bank PSPs is advancing but remains gated behind BoC registration. Both the licensing perimeter and correspondent-banking access are flagged as escalating, while the stablecoin and open-banking regimes are characterised as newly established. Canada's overall regulatory trajectory across licensing, stablecoins, open banking and settlement access is now assessed as tightening. This cycle's coverage also carries explicit gaps: merchant-acquiring and high-risk-MCC onboarding developments were not surfaced for Canada, nor were financial-promotion enforcement actions specific to Canadian payment service providers.

Outlook

Proposed amendments expanding the RPAA's payment-function definition to bring digital-asset custody providers within registration scope are similarly expected around 2027, though the date carries a year-scale uncertainty band. The pending scope expansion signals that Canada is moving to bring crypto-custody activity within mainstream payment-service registration rather than establishing a separate crypto-specific licensing track. Expansion of Real-Time Rail eligibility to RPAA-registered non-bank payment service providers is advancing through the Department of Finance, though no fixed date has been set; access to a Bank of Canada settlement account and Payments Canada membership continues to depend on completing RPAA registration first.

14 of 14 modules

Signal

Density

Selections OR within a group, AND across groups. Press / to search.

#

Retail Payment Activities Act (RPAA) core supervisory obligations are in force under Bank of Canada supervision; the Bank published its first enforcement decisions (Notices of Violation) in August 2026, all concerning operating without registration under section 23, and updated its PSP registration criteria and reporting-obligations guidance in June 2026.

Horizon · 2027 (±year)Proposed RPAA amendments expanding payment-function definition to digital-asset custodyproposed · T3

Standing sub-brief · as of 8 July 2026248 words · last cycle 2026-10-04

Licensing, Authorisation & Market Access

Licensing and market-access settings for Canadian payment service providers tightened further this cycle. Registration provisions under the Retail Payment Activities Act have applied since November 1, 2024, and the accompanying risk-management and funds-safeguarding requirements have been in force since September 8, 2025. The Bank of Canada's administrative-penalty authority under the RPAA reaches up to $10 million CAD per contravention, alongside a standalone power to revoke a payment service provider's registration outright. No exemptions apply under the current RPAA registration framework, meaning covered payment functions must register regardless of size or business model. The RPAA regime applies specifically to non-bank payment service providers. The safeguarding requirement operates through a segregation mechanism under the RPAR-mandated funds-safeguarding framework, keeping end-user funds apart from a payment service provider's own assets. Proposed amendments to the RPAA's payment-function definition would extend registration scope to cover transmission or maintenance of encrypted or tokenized payment instruments and private keys, bringing custodied wallet providers and digital-asset custodians into the same registration track as conventional payment service providers.

Periodic update · new data 2026-10-04

Licensing, Authorisation & Market Access

The Bank of Canada published its first Retail Payment Activities Act enforcement decisions in August 2026, all Notices of Violation concerning payment service providers found to be operating without registration under section 23 of the Act. This is a significant milestone in the maturation of the RPAA regime: since its registration requirements took effect, Bank of Canada supervisory activity had been understood largely as registry-building; these decisions mark the first publicly reported move into active enforcement against unregistered operation. The finding rests on a law-firm bulletin; the Bank of Canada's own enforcement-decisions page was not independently opened this cycle, so the exact number and identity of the sanctioned providers, and the specific penalty amounts, if any, have not been independently confirmed.

This enforcement step follows closely on the heels of two supervisory actions earlier in the same window. On 29 June 2026, the Bank of Canada updated its "Criteria for registering payment service providers" policy, a primary Tier-1 source directly confirming a substantive supervisory refresh of registration standards. The same day, the Bank issued a reminder to payment service providers regarding their reporting obligations under the RPAA, also independently confirmed at primary-source level. Read together, the sequence, updated registration criteria, a reporting-obligations reminder, and then the first enforcement decisions two months later, describes a coherent supervisory escalation: tightening the rules, reminding the regulated population of its duties, and then acting against those who remain outside the registration perimeter.

For payment service providers operating in or into Canada, this sequence signals that the RPAA registration requirement is no longer a nominal formality but an actively policed boundary. Providers relying on informal or unregistered operating models, including cross-border providers routing Canadian retail payment activity without Canadian registration, face a materially higher likelihood of enforcement action than was evident before August 2026.

Outlook

Further enforcement decisions are likely as the Bank of Canada's supervisory capacity under the RPAA matures, particularly against providers who have not registered despite the June 2026 reminder. Independent confirmation of the August 2026 enforcement decisions' specific content, including any monetary penalties, would be a natural next step to verify the precise severity of this enforcement wave, which currently rests on secondary legal commentary rather than the Bank of Canada's own published decisions.

4 earlier distinct update(s)

Periodic update · new data 2026-09-13

Licensing, Authorisation & Market Access

Canada's Retail Payment Activities Act has now moved fully into force. The registration provisions and the Bank of Canada's associated administration and enforcement powers took effect on 1 November 2024, establishing the core licensing gate for payment service providers operating in the retail payments space. Risk-management and funds-safeguarding framework requirements followed on 8 September 2025, adding a substantive prudential layer on top of the initial registration gate; this safeguarding obligation is structured around a segregation mechanism, requiring covered PSPs to keep end-user funds separate from operating funds. The Bank of Canada operationalised transparency around the regime by launching a public registry of registered PSPs in October 2025, updated on a rolling basis, giving counterparties and the market a current, authoritative reference point for which entities hold valid registration. The statute itself remains live and under active amendment: the RPAA was last amended on 26 March 2026, the same date the Consumer-Driven Banking Act reached Royal Assent, indicating that Canada's payments-licensing framework and its open-banking framework are being maintained on a coordinated legislative track rather than developing independently.

The bank-PSP versus non-bank PI/EMI distinction is explicit in how these obligations bind: the registration and enforcement-power provisions apply across both bank and non-bank payment service providers, while the funds-safeguarding framework's segregation mechanism is specifically oriented toward non-bank payment-institution and e-money-institution type entities, reflecting that banks are already subject to separate prudential capital and deposit-protection regimes that make a bespoke safeguarding rule for them unnecessary. This differentiated application means non-bank PSPs face a materially more prescriptive compliance build than deposit-taking institutions under this particular strand of the RPAA.

Outlook

With registration, enforcement powers, safeguarding requirements and the public registry all now operative, the RPAA regime has reached a settled implementation state. The item to watch is how the regime interacts with the newly Royal-Assented Consumer-Driven Banking Act as both frameworks mature under Bank of Canada oversight; the same 26 March 2026 amendment date for the RPAA statute suggests Finance Canada is treating the two frameworks as parts of one coordinated payments-modernisation programme rather than as separate initiatives.

Periodic update · new data 2026-09-08

Licensing, Authorisation & Market Access

Canada's Retail Payment Activities Act market-access architecture has moved from established to operative this cycle. The Bank of Canada began publishing its payment service provider registry, comprising registered, refused, and pending-applicant lists, on September 8, 2025, and has maintained it on a rolling-update basis since. This registry is the foundational piece of RPAA market-access infrastructure and is now a genuinely functioning public resource rather than a promised future feature.

In June 2026, the Bank of Canada published updated 'Criteria for Registering Payment Service Providers' supervisory-policy guidance, clarifying the four-part scope test that determines whether a given payment activity falls within RPAA registration requirements. This kind of scope clarification typically emerges in response to real classification questions surfacing during the first operative year of a new registration regime, and it is a live signal for market entrants assessing whether their specific business model requires registration.

One friction point remains open: national-security screening of a subset of PSP registration applicants is ongoing, coordinated with the Bank of Canada's registration process but administered by the Department of Finance Canada, and a number of applications remain unfinalized as a result. This is a standing, dated feature of the registration pipeline rather than a new policy development, but it is a real constraint on registration timelines for affected applicants, and the distinction between nonbank PI/EMI applicants (who go through this registration and screening pathway) and bank-supervised payment activity (which sits under separate prudential oversight) remains the key structural line running through this module.

Outlook

The pace at which the national-security screening backlog clears will be the clearest near-term signal of how smoothly the RPAA registration pipeline is operating in its second full year. Further scope-test refinements, following the pattern of the June 2026 guidance update, are plausible as additional edge-case business models seek registration clarity.

Periodic update · new data 2026-08-26

Licensing, Authorisation & Market Access

Canada's Retail Payment Activities Act (RPAA) regime continued to mature this cycle through three distinct developments affecting non-bank payment service providers' market-access obligations. First, PSPs were required to have established risk-management and funds-safeguarding frameworks as of September 8, 2025, an obligation calibrated specifically to the non-bank payment-institution and e-money-institution population, distinguishing it from the prudential safeguarding baseline that already applies to bank-operated payment services under existing banking regulation. Second, registered PSPs faced their first annual report obligation under RPAR section 18, due by March 31, 2026 and covering the 2025 calendar year, formalizing a recurring compliance deadline that did not previously exist in this form. Third, the Bank of Canada launched a public registry of payment service providers in October 2025, updated on a rolling basis, giving the market a live reference for which entities hold active RPAA registration.

Taken together, these developments show the RPAA's market-access architecture moving from a registration event into an ongoing supervisory relationship: registration is now paired with annual reporting, public registry visibility, and, per the parallel W1b conduct development this cycle, public enforcement-transparency exposure. For a non-bank PSP evaluating Canadian market access, RPAA registration is a beginning rather than an endpoint. Bank-operated payment services sit outside the immediate reach of the safeguarding-framework obligation and the PSP registry, meaning the market-access calculus differs materially depending on whether an entity's payment activities are conducted through a bank charter or through a stand-alone RPAA-registered PSP structure.

Outlook

The next annual RPAA reporting cycle, and the extent to which the Bank of Canada uses the public PSP registry and the safeguarding-framework requirement as levers for supervisory follow-up, are the items most likely to reveal how actively the market-access regime is enforced in practice.

Periodic update · new data 2026-08-11

Licensing, Authorisation & Market Access

Canada's Retail Payment Activities Act supervisory regime completed its transition from stand-up to fully operational status this cycle. The Bank of Canada's public registry of payment service providers has been live since October 2025, updated on a rolling basis, giving the market a continuously current view of which non-bank payment institutions and e-money issuers hold active RPAA registration (wpm-2026-W32-001). The first annual PSP regulatory report under Retail Payment Activities Regulations section 18 was due by 31 March 2026, marking the first full turn of the RPAA's ongoing reporting cycle rather than a one-off registration event (wpm-2026-W32-002). This is a High-confidence, primary-sourced finding drawn directly from the Bank of Canada's own supervisory FAQ.

The Bank of Canada has also clarified the enforcement toolkit backing this regime, which ranges from warning letters through to administrative monetary penalties of up to $10 million, including outright registration revocation (wpm-2026-W32-003). The toolkit's existence, rather than its use, is this cycle's finding — no enforcement action under it was identified — but its clarification is itself material, since it converts the RPAA framework from a registration-only regime into one with a credible, escalating sanctions ladder behind it.

The bank-versus-non-bank distinction is the analytical spine of this module. The RPAA framework applies uniformly across both populations, but it is the non-bank payment institutions and e-money issuers — entities without pre-existing prudential oversight — for which the registry, annual-reporting, and enforcement architecture represents the more significant supervisory change; federally regulated banks were already subject to overlapping prudential supervision before the RPAA existed. The Retail Payment Activities Act itself remains current, with the statute text current to 26 May 2026 and last amended 26 March 2026, confirming its continued status as Canada's primary payments-licensing instrument (wpm-2026-W32-008).

Outlook

Watch for the Bank of Canada's first substantive use of its clarified enforcement toolkit now that the first annual PSP reporting deadline has passed, since a first enforcement action would be the strongest confirmatory signal yet that RPAA supervision has moved from framework to practice.

Sources and findings (5)

T1https://www.bankofcanada.ca/regulatory-oversight/retail-payments/
T1https://www.bankofcanada.ca/regulatory-oversight/retail-payments/supervisory-framework/
T1https://laws-lois.justice.gc.ca/eng/acts/R-7.36/page-1.htmlretrieved 2026-06-27
T1https://fintrac-canafe.canada.ca/msb-esm/reg-engretrieved 2026-06-27
T1https://www.bankofcanada.ca/core-functions/retail-payments-supervision/psp-registry/retrieved 2026-06-27

#

The Bank of Canada announced on June 12, 2026 that it will begin publishing Notices of Violation (NOVs) against PSPs, introducing a new public-enforcement-transparency mechanism into the RPAA conduct regime.

Standing sub-brief · as of 8 July 2026160 words · last cycle 2026-08-31

Conduct, Safeguarding & Financial Promotions

The Consumer-Driven Banking Act also received Royal Assent in March 2026, creating a Bank of Canada-administered open-banking and data-sharing supervisory regime with phased participation beginning with large banks. The Consumer-Driven Banking Act allows the Minister of Finance to designate provincial authorities to exercise oversight functions, and establishes a federal-provincial-territorial advisory committee to manage that division of labour. Access to the open-banking regime is structured as an accreditation process for participating entities rather than a conventional licence. Retail Payment Activities Regulations section 15(2)(c) now requires registered PSPs to document how insolvency administrators are expected to handle safeguarded end-user funds, while the Bank of Canada has clarified it does not itself administer insolvency claims. This insolvency-documentation clarification is tracked as a dated procedural item rather than a standing structural change.

Periodic update · new data 2026-09-08

Conduct, Safeguarding & Financial Promotions

Safeguarding of end-user funds is now a live, in-force obligation for registered payment service providers in Canada, not merely a stated policy intention. Since September 8, 2025, registered PSPs have been required to maintain operational risk-management and end-user-funds safeguarding frameworks, and to submit an annual report to the Bank of Canada documenting compliance. The Bank of Canada has finalized a supervisory guideline setting out the expected treatment of end-user funds, structured around segregation of client funds from a provider's own proprietary holdings, giving the safeguarding obligation concrete operational shape rather than leaving it as a general principle.

This is squarely a nonbank PI/EMI-category obligation: registered PSPs, as nonbank payment entities, face this segregation-and-reporting regime directly, distinguishing their conduct obligations from bank-supervised payment activity, which is governed under separate prudential frameworks rather than the RPAA's safeguarding provisions. The annual-report requirement to the Bank of Canada gives the regulator an ongoing compliance-monitoring mechanism beyond the initial registration decision, meaning safeguarding compliance is subject to continuing supervisory review rather than a one-time gate at registration.

Outlook

The first cycle of annual safeguarding reports from registered PSPs, now that the September 2025 requirement has been in force for a full year, will be the next concrete test of how the segregation guideline is being applied in practice across the registered population.

1 earlier distinct update(s)

Periodic update · new data 2026-08-26

Conduct, Safeguarding & Financial Promotions

The defining conduct-regime development this cycle is the Bank of Canada's June 12, 2026 announcement that it will begin publishing Notices of Violation (NOVs) against payment service providers once the representation period following a finding expires. Published notices will include the nature of the violation and any administrative monetary penalty amount, and will remain publicly accessible for five years. This is the first public-enforcement-transparency mechanism introduced into the RPAA conduct regime, and it applies across both bank and non-bank PSPs alike — unlike the safeguarding-framework obligation covered under W1a, which is calibrated specifically to the non-bank population.

The mechanism's design — publication only after the representation period expires, and a five-year public retention window — gives affected PSPs a defined procedural opportunity to respond before a violation becomes public, while ensuring a durable reputational record once published. For compliance and conduct functions inside PSPs, this materially raises the stakes of any RPAA conduct finding: previously private regulatory correspondence about a violation now carries a foreseeable path to public disclosure.

This conduct-transparency shift should be read alongside the safeguarding-framework requirement in force since September 2025 as two halves of the same underlying trend: the RPAA regime is moving from a private, registration-based supervisory relationship toward one with public accountability mechanisms attached to both prudential and conduct dimensions.

Outlook

The first published Notices of Violation, once they begin appearing under this June 2026 commitment, will be the first concrete test of how the mechanism operates in practice, including how the Bank of Canada characterizes violation severity and how frequently NOVs are published relative to the underlying RPAA-registered PSP population.

Sources and findings (4)

#

Canada enacted its first purpose-built stablecoin law, the Stablecoin Act (via Bill C-15), on 26 March 2026, designating the Bank of Canada as prudential supervisor of fiat-backed stablecoin issuers; the regime is enacted but not yet in force pending Governor-in-Council order and implementing regulations, expected around 2027.

Horizon · 2027 (±year)Stablecoin Act coming into forcein_force_pending · T1

Standing sub-brief · as of 8 July 2026265 words · last cycle 2026-08-05

Stablecoins & Digital Money

The Canada Stablecoin Act received Royal Assent on March 26, 2026 as Division 45 of Bill C-15, establishing a federal fiat-backed stablecoin regime that designates the Bank of Canada as registry and prudential supervisor and requires 1:1 reserve backing with at-par redemption, though the Act has not yet come into force. The Stablecoin Act supersedes the Canadian Securities Administrators' interim Value-Referenced Crypto Asset framework under Staff Notices 21-332 and 21-333, which had resulted in only one globally recognized stablecoin available in Canada. Under the Act, stablecoin issuers must hold reserves in treasury instruments on a 1:1 basis and honour redemption at par value, the safeguarding architecture the Bank of Canada will supervise. The Stablecoin Act likewise contemplates no blanket exemptions from its issuer-registration requirement once the regime becomes operative. Critics have flagged that designating the Bank of Canada as reserve-and-redemption supervisor for stablecoin issuers mirrors OSFI's role for bank deposits, blurring the prudential boundary between the two authorities.

Periodic update · new data 2026-08-11

Stablecoins & Digital Money

Canada's Stablecoin Act, part of Bill C-15, received Royal Assent on 26 March 2026, establishing Bank of Canada registration, 1:1 reserve backing, at-par redemption, disclosure, and AML/ATF obligations for fiat-backed stablecoin issuers (wpm-2026-W32-004). This is an Assessed-confidence finding: no Tier-1 or Tier-2 Bank of Canada primary source for the Act's text was retrieved this cycle, so the finding is capped at Assessed despite corroboration across secondary legal-commentary sources on the Royal Assent date and substantive terms.

The Bank of Canada is designated as the primary supervisor of stablecoin issuers under the Act, a mandate that sits alongside its existing RPAA administration role and gives the central bank a second, parallel payments-supervisory function (wpm-2026-W32-005). Critically, the Act is enacted but not yet in force: implementing regulations and the Governor-in-Council order needed to operationalise it are expected only around 2027. This creates a defined multi-year gap between legislative enactment and supervisory enforceability, during which fiat-backed stablecoin issuance in Canada continues to be governed only by the lighter-touch interim guidance previously applicable to virtual-currency-related activities.

The clearest commercial signal of market readiness for this eventual regime is the launch of CADD, Canada's first CAD-backed stablecoin issued by a regulated financial institution, timed to coincide with the Stablecoin Act's enactment (wpm-2026-W32-007). The issuing institution is not named in the underlying source, and the launch is reported at Assessed confidence from a single Tier-3 practice-guide citation, with the underlying commercial event coded as completed but with amount_disclosed set to false.

Outlook

Watch for the Governor-in-Council order and implementing regulations that would bring the Stablecoin Act into force, expected around 2027, and for whether the Bank of Canada issues any interim supervisory guidance for fiat-backed stablecoin issuers ahead of that date. Confirmation of the CADD issuer's identity would sharpen the market-structure read on Canada's earliest bank-issued stablecoin product.

Sources and findings (4)

T1https://www.canada.ca/en/department-finance/programs/financial-sector-policy/canadas-stablecoin-framework.htmlretrieved 2026-06-27
T2https://www.blg.com/en/insights/2025/11/in-search-of-stability-canada-introduces-new-stablecoin-actretrieved 2026-06-27
T2https://www.fasken.com/en/knowledge/2026/04/fintrac-provides-information-on-recent-changes-to-canadas-aml-regimeretrieved 2026-06-27
T1https://www.canada.ca/en/department-finance/programs/financial-sector-policy/canadas-stablecoin-framework.htmlretrieved 2026-06-27

#

Operational resilience for non-bank PSPs runs through the RPAA's operational-risk-management and incident-response obligations (in force September 8, 2025), supervised by the Bank of Canada. Systemic payment infrastructure (Lynx) is designated under the Payment Clearing and Settlement Act and held to CPMI-IOSCO Principles for Financial Market Infrastructures. There is no DORA-equivalent single op-res statute; resilience is split across RPAA (PSPs), PCSA/FMI oversight, and OSFI for banks.

Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. Open this jurisdiction's page on Dataprotection.gi →

Standing sub-brief · as of 27 June 2026155 words · last cycle 2026-08-31

Operational Resilience & Critical Infrastructure

Canada lacks a single DORA-equivalent operational-resilience statute; resilience is split across multiple regimes. Lynx, Canada's high-value payment system, is designated as a systemically important payment system under the Payment Clearing and Settlement Act (PCSA), held to the CPMI-IOSCO Principles for Financial Market Infrastructures, with legal protection for payment finality and placement under the Bank's resolution regime. The broader resilience picture is fragmented across the RPAA (covering non-bank PSPs, whose operational-risk and incident-response obligations came into force September 8, 2025), PCSA/FMI oversight (Lynx, CDSX, CDCS), and OSFI (banks). This split is the analytical spine of the module: there is no unified op-res statute carrying obligations across bank and non-bank actors alike.

Periodic update · new data 2026-09-08

Operational Resilience & Critical Infrastructure

Operational-risk management and incident response are now formalized obligations for RPAA-registered payment service providers under the Bank of Canada's supervisory framework. Registered PSPs must manage operational risks and respond to incidents as an ongoing supervisory expectation, not a one-time registration condition. The Bank of Canada's retail-payments supervisory framework formalizes this as risk-based supervision, explicitly framed around reducing end-user risk while supporting a safe, innovative, and competitive payment system, signalling a proportionate rather than uniformly prescriptive supervisory posture across the registered nonbank population.

The bank-versus-nonbank distinction is structurally relevant here: registered PSPs are, by definition, nonbank PI/EMI-category entities operating under the RPAA's dedicated operational-resilience expectations, a supervisory track distinct from the resilience requirements banks face under separate prudential frameworks. As the registered-PSP population grows following the registry's rolling updates, the operational-resilience framework's risk-based calibration will determine how uniformly incident-response expectations are applied across providers of varying scale.

Outlook

How the Bank of Canada's risk-based supervisory framework is applied in practice, particularly whether smaller registered PSPs face materially lighter operational-resilience expectations than larger ones, is the open question to watch as the framework matures beyond its first year of full operation.

Sources and findings (3)

#

Card-scheme economics are governed by negotiated interchange-reduction agreements with Visa and Mastercard (effective October 19, 2024), a revised federal Code of Conduct for the Payment Card Industry (effective October 30, 2024), and Interac's domestic debit rules including a surcharge cap. Canada has historically had among the world's highest interchange; small-business credit interchange now targets an in-store weighted average of 0.95%.

Standing sub-brief · as of 27 June 2026183 words · last cycle 2026-06-27

Scheme & Network Compliance

Canada historically had among the world's highest interchange, and the negotiated reductions reframe domestic card-scheme economics. Visa and Mastercard cut domestic consumer credit interchange for qualifying small businesses to an in-store annual weighted-average of 0.95% (with online consumer-credit interchange cut 10bps), effective October 19, 2024, alongside a revised Code of Conduct for the Payment Card Industry effective October 30, 2024. The reductions are expected to save eligible small businesses around C$1bn over five years; small-business thresholds apply (Visa under $300k, Mastercard under $175k in sales), and the Code shortened complaint response to 20 business days. On the debit side, Interac imposes a point-of-sale surcharge cap of $0.25 per transaction (effective January 26, 2024), prohibits surcharging on remote Interac Mobile Debit, and increased its Debit Switch Fee to $0.02099 effective November 1, 2025 — the latter sourced from a Tier-3 vendor document and carried as a dated entry.

no periodic updates on record for this sub-brief

Sources and findings (3)

#

Canada's core rails are Lynx (high-value RTGS, replaced LVTS in 2021), the ACSS (retail batch), and Interac e-Transfer (account-to-account, 1.4 billion transactions in 2024). Canada has been a G7 outlier without an instant rail; the Real-Time Rail (RTR), built by Payments Canada with CGI/IBM/Interac, is targeted for 2026 with possible slip to late 2026/early 2027. Cross-border wholesale flows use SWIFT (ISO 20022 migration). Wealthsimple became the first Canadian fintech to join SWIFT.

Horizon · 2026-Q4 (±half_year)Real-Time Rail (RTR) go-livein_force_pending · T1

Standing sub-brief · as of 27 June 2026213 words · last cycle 2026-06-27

Payment Corridor Dynamics

Canada has been a G7 outlier without an instant rail, and the Real-Time Rail (RTR) is the structural change. Payments Canada is delivering the RTR, a 24/7/365 instant clearing-and-settlement system using ISO 20022, built with CGI, IBM and Interac; testing began after the technical application build completed in Q3 2025, following a public consultation on the RTR legal framework held May 20 to July 2, 2025. The RTR is a prerequisite for Phase 2 (write access / payment initiation) of consumer-driven banking. Launch timing carries genuine uncertainty: Budget-2025 framing cited a Q3 2026 target with possible slip, while more recent reporting flags a phased Q4 2026 launch with universal participation in 2027 — the stale Q3 2026 figure should not be presented as current. Separately, on cross-border corridors, Wealthsimple became the first Canadian fintech and second non-bank fintech globally to join the SWIFT global financial messaging network, completing technical integration ahead of a client launch to improve international wire transfers, signalling widening non-bank access to cross-border correspondent messaging.

no periodic updates on record for this sub-brief

Sources and findings (4)

T1https://www.payments.ca/systems-services/payment-systems/real-time-rail-payment-systemretrieved 2026-06-27
T1https://www.payments.ca/canadas-real-time-rail-program-resumes-renewed-momentumretrieved 2026-06-27
T3https://www.openbankingtracker.com/glossary/rtr-canadaretrieved 2026-06-27
T3https://finovate.com/finovate-global-canada-mortgagetech-real-time-payments-and-top-investment-trends/retrieved 2026-06-27

#

CSA/CIRO continue to consolidate crypto-adjacent platform registration under securities law; interim pre-registration-undertaking accommodations for crypto trading platforms have ended, and CIRO published a Digital Asset Custody Framework (3 February 2026) strengthening operational custody standards for registered digital-asset platforms.

Standing sub-brief · as of 27 June 2026161 words · last cycle 2026-10-04

Industry Structure & Commercial

Market structure frames why the access reforms matter. Canada's Big Six banks hold around 93% of banking assets, creating structural friction that the RTR and open banking aim to ease. As of September 2025, roughly 1,500 PSPs were supervised by the Bank of Canada under the RPAA, and Interac amended its rules to allow RPAA/FINTRAC-registered fintechs to join e-Transfer. The combination of high concentration, low switching intent and a growing non-bank PSP population (~1,500) frames open-banking Phase 2 write access as the principal lever for competitive shift. This figure is sourced at Tier-3 but widely cited; the bank/non-bank asymmetry it captures is the central analytical point.

Periodic update · new data 2026-10-04

Industry Structure & Commercial Dynamics

CIRO published a Digital Asset Custody Framework dated 3 February 2026, strengthening operational custody standards for registered digital-asset trading platforms. This continues a broader structural pattern in Canada of consolidating oversight of crypto-adjacent trading platforms under securities-regulator and CIRO authority, rather than developing a standalone payments-specific digital-asset regime. For market participants, this means that firms providing custody services for crypto-assets alongside registered trading-platform activity are increasingly subject to CIRO-set operational standards as a condition of continued registration, rather than a lighter-touch or self-determined custody model.

This finding rests on a single T4 secondary source; CIRO's own publication of the framework was not independently opened this cycle, so the specific operational requirements, such as segregation standards, third-party custodian criteria, or audit obligations, have not been independently verified. The direction of travel, toward tighter custody standards for registered platforms, is nonetheless consistent with the broader 2026 pattern of increasing regulatory scrutiny of Canadian crypto-asset market infrastructure visible across adjacent registration and enforcement developments this year.

Structurally, this framework sits alongside, rather than displaces, the securities-registration pathway that already governs crypto-asset trading platforms dealing in securities or derivatives. The custody framework appears to be a refinement of operational conditions attached to existing registration, rather than a new standalone licensing track, though this characterisation should be treated as provisional pending primary-source confirmation.

Outlook

Independent confirmation of the Digital Asset Custody Framework's specific requirements from CIRO's own publication would materially improve confidence in the precise scope of this development. If the pattern of tightening custody and registration standards for Canadian digital-asset platforms continues, further operational-standard refinements affecting registered platforms' commercial structuring, including custodian relationships and client-asset segregation practices, should be expected as scheduled.

1 earlier distinct update(s)

Periodic update · new data 2026-09-13

Industry Structure & Commercial Dynamics

The Consumer-Driven Banking Act received Royal Assent on 26 March 2026 as part of Bill C-15, the Budget 2025 Implementation Act, No. 1. This enactment repealed and replaced the original 2024 CDBA text and, notably, shifted oversight of Canada's open-banking framework from the Financial Consumer Agency of Canada to the Bank of Canada, consolidating payments and open-banking supervision under a single institution. Finance Canada moved the framework toward operational reality on 27 June 2026, publishing proposed Consumer-Driven Banking Regulations in the Canada Gazette, Part I, with a public-comment period that closed 26 August 2026. This gazetting-to-comment-close sequence indicates the regulations are approaching finalisation rather than remaining at an early conceptual stage.

Participation in the resulting framework is structured asymmetrically by institution size: the Big Six Canadian banks, RBC, TD, BMO, Scotiabank, CIBC, and National Bank, must participate in the open-banking framework once it launches, while smaller banks and credit unions retain the option to opt in rather than facing a mandatory-participation requirement. This is currently a Probable-confidence, single-source finding and should be treated with appropriate caution pending further corroboration, but it is consistent with the general international pattern of phasing mandatory open-banking participation toward the largest incumbent institutions first. The bank-PSP versus non-bank distinction is again structurally relevant here: the CDBA's mandatory participants are exclusively bank-type institutions, meaning the framework's initial commercial-dynamics effect will be concentrated on how the Big Six restructure their data-sharing posture, before any broader non-bank PSP integration follows in later phases.

Outlook

The Consumer-Driven Banking Regulations' path to finalisation following the close of the comment period is the key structural item to watch, since the final regulatory text will determine the precise commercial obligations facing the Big Six as mandatory participants. The framework's staged rollout, with Phase 1 read-access targeted for the fourth quarter of 2026 and Phase 2 write-access and payment-initiation targeted for the second quarter of 2027, means the industry-structure effects of this enactment will unfold over more than a year rather than arriving all at once.

Sources and findings (4)

T3https://www.openbankingtracker.com/glossary/rtr-canadaretrieved 2026-06-27
T3https://thelogic.co/news/explainer/real-time-rail-instant-payment-canada/retrieved 2026-06-27
T3https://www.electronicpaymentsinternational.com/features/canada-finally-to-get-real-time-payments-open-banking/retrieved 2026-06-27
T3https://finovate.com/finovate-global-canada-mortgagetech-real-time-payments-and-top-investment-trends/retrieved 2026-06-27

#

The defining payments litigation is the Canadian credit-card interchange price-fixing class actions against Visa, Mastercard and issuing banks, settled for C$188 million covering merchants who accepted Visa/Mastercard credit cards March 23, 2001 – September 2, 2021, with Visa/Mastercard also agreeing to modify no-surcharge rules. FINTRAC enforcement has sharply escalated, with record AMPs in 2025 against crypto/MSB platforms (Cryptomus C$176.96M; KuCoin C$19.55M).

Standing sub-brief · as of 27 June 2026210 words · last cycle 2026-06-27

Legal & Litigation

Two litigation/enforcement threads define the module. First, a C$188 million class-action settlement resolved credit-card interchange price-fixing claims covering merchants who accepted Visa and Mastercard credit cards between March 23, 2001 and September 2, 2021, with Visa and Mastercard agreeing to modify their no-surcharge rules — underpinning the legal basis for merchant surcharging rights in Canada and connecting to the W4 interchange and Code-of-Conduct regime. Multi-province class actions ran in BC, AB, SK, QC and ON. Second, FINTRAC escalated enforcement with record AMPs: C$19,552,000 against Peken Global (KuCoin) in July 2025, a C$176,960,190 penalty against Xeltox Enterprises (Cryptomus) in October 2025 (the largest ever, for 2,593 instances across six violation categories), and C$536,853.35 against MP Technology Services, a MoonPay subsidiary, in December 2025. These are historical (Jul-Dec 2025) enforcement actions carried as standing-position context with a temporal caveat, not current-week developments; a Cryptomus Federal Court appeal (Nov 2025) is not captured in the underlying research, and the original illicit-finance analysis is routed to FIM.

no periodic updates on record for this sub-brief

Sources and findings (3)

T3https://ca.topclassactions.com/lawsuit-settlements/credit-cards/visa-mastercard-interchange-fees-188m-class-action-settlement/retrieved 2026-06-27
T3https://www.branchmacmaster.com/class_actions/redit-card-interchange-fee-price-fixing/retrieved 2026-06-27
T2https://www.mondaq.com/canada/money-laundering/1739410/a-line-in-the-sand-fintracs-shift-to-aggressive-aml-enforcementretrieved 2026-06-27

#

Acquiring is governed commercially by the revised Code of Conduct for the Payment Card Industry (processor switching, complaint timelines) and scheme rules. Merchant surcharging is permitted up to a cap following the class-action settlement. Direct local acquiring is expanding (Nuvei went live as a direct acquirer in Canada in June 2025). Private-ABM acquirers were newly brought into the FINTRAC/PCMLTFA reporting-entity regime effective October 1, 2025.

Standing sub-brief · as of 27 June 2026161 words · last cycle 2026-06-27

Merchant Acquiring & Risk

The acquiring perimeter is expanding on both regulatory and commercial fronts. Effective October 1, 2025, entities providing acquirer services for private ABMs must register as MSBs, implement a compliance program, verify client identities, maintain records and report prescribed transactions, addressing Cullen Commission (2022) cash-laundering risks. This brings a previously under-supervised acquiring sub-segment — private ATMs — into the PCMLTFA reporting-entity perimeter, with the revised Code of Conduct (October 30, 2024) governing processor switching and complaint timelines for acquirers. Commercially, Nuvei went live as a direct payment acquirer in Canada on June 30, 2025, allowing Canadian businesses to process domestic transactions locally without third-party processors, improving approval rates and interchange-cost predictability — a dated entry of clear commercial significance.

no periodic updates on record for this sub-brief

Sources and findings (3)

T1https://www.canada.ca/en/department-finance/news/2024/10/government-reduces-credit-card-fees-by-27-per-cent-for-small-business-owners.htmlretrieved 2026-06-27
T2https://www.mccarthy.ca/en/insights/blogs/techlex/reminder-new-fintrac-requirements-effective-october-1-2025retrieved 2026-06-27
T3https://www.pymnts.com/news/acquiring/2025/nuvei-expands-acquiring-capabilities-to-home-country-of-canada/retrieved 2026-06-27

#

Canada's Consumer-Driven Banking Act (open banking) was re-enacted in comprehensive form via Bill C-15 (Royal Assent March 26, 2026), moving oversight from FCAC to the Bank of Canada, with proposed implementing Regulations published for consultation June 27-August 26, 2026. Phase 1 (read access) targeted for 2026; Phase 2 (write access/payments) targeted mid-2027 contingent on the Real-Time Rail.

Horizon · 2027-mid (±year)Consumer-Driven Banking Phase 2 (write access / payment initiation)adopted · T2

Standing sub-brief · as of 27 June 2026188 words · last cycle 2026-09-28

Product Innovation & Market Development

Open-banking governance has been re-based and centralised. Bill C-15 received Royal Assent on March 26, 2026, repealing the original 2024 Consumer-Driven Banking Act and replacing it with a comprehensive new framework; oversight shifts from the FCAC to the Bank of Canada, which supervises participants, maintains the public registry and evaluates accreditation. Phase 2 write access (payment initiation) is targeted for mid-2027, contingent on the RTR being live. Centralising governance in the Bank of Canada leverages its RPAA role, and Phase 2 write access is the principal competitive lever — but its dependence on the RTR being live and in widespread use is explicit. The RTR is being built with day-one fraud controls (a fraud scoring engine, Confirmation of Payee, and integrated fraud reporting), and RTR access requires RPAA registration, so the open-banking, instant-rail and non-bank-registration layers are tightly coupled across bank and non-bank participants.

Periodic update · new data 2026-09-28

Product Innovation & Market Development

Canada's open-banking (consumer-driven banking) framework advanced materially this cycle. Division 9 of Part 5 of Bill C-15 repealed the original Consumer-Driven Banking Act, which had been enacted in June 2024, replacing it with a comprehensive new Consumer-Driven Banking Act. Oversight of the framework shifts from the Financial Consumer Agency of Canada to the Bank of Canada, consolidating open-banking supervision with the Bank's broader payments-oversight remit already established under the Retail Payment Activities Act.

Proposed Consumer-Driven Banking Regulations were published in the Canada Gazette Part I on June 27, 2026, opening a 60-day consultation that closed August 26, 2026. The proposed Regulations cover accreditation - including a streamlined stream for entities already registered under the RPAA - alongside security, consent, liability, and data-sharing requirements. Both the Act and the proposed Regulations remain, in significant part, not yet in force pending the consultation's conclusion and subsequent regulatory finalisation.

The framework's rollout is explicitly phased. Phase 1, covering read access to consumer banking data, is targeted for 2026. Phase 2, covering write access and payment initiation - the phase with the most direct payments-market relevance - is targeted for mid-2027, contingent on the Real-Time Rail instant-payments infrastructure being available. This dependency is structurally significant: Phase 2's payment-initiation capability cannot proceed on schedule if the Real-Time Rail's own launch slips, and that infrastructure's current status was not sourced this cycle.

The accreditation stream's explicit cross-reference to RPAA-registered entities is a notable design choice: it creates a direct on-ramp from Canada's existing payment-service-provider licensing regime into the emerging open-banking accreditation framework, potentially lowering entry friction for non-bank payment firms already registered under the RPAA relative to entirely new entrants.

Outlook

The immediate milestone is publication of final Consumer-Driven Banking Regulations following the close of the August 26, 2026 consultation, alongside confirmation of the Phase 1 read-access launch within 2026. The more consequential medium-term milestone is Phase 2 write-access/payment-initiation capability, targeted mid-2027 but contingent on Real-Time Rail availability - a dependency whose current status remains an open gap and a key variable for whether Canada's open-banking framework will extend to payment initiation on the stated timeline.

2 earlier distinct update(s)

Periodic update · new data 2026-09-13

Product Innovation & Market Development

A federal Real-Time Rail instant-payments infrastructure, managed by Payments Canada, is planned alongside the open-banking rollout, and its purpose is to enable 24/7 ISO 20022 settlement across the Canadian payments system. This infrastructure was confirmed in the 2025 Federal Budget, giving it a Confirmed-adjacent policy commitment even though this cycle's supporting evidence carries a Probable confidence rating drawn from a single T3 industry-observer source rather than a primary Bank of Canada or Payments Canada publication. The pairing of the Real-Time Rail build-out with the open-banking rollout is a deliberate product-innovation design choice rather than a coincidence of timing: an instant-settlement rail materially increases the practical utility of an open-banking payment-initiation capability, since write-access and payment-initiation functionality under the Consumer-Driven Banking framework's Phase 2 will be most valuable to consumers and merchants if the underlying settlement layer can clear in real time rather than on traditional multi-day cycles.

This is properly read as a market-development story rather than a discrete commercial event: no specific vendor deal, funding round, or product launch tied to the Real-Time Rail was identified this cycle, and the Payments Canada-managed infrastructure remains at the planned-and-confirmed-in-budget stage rather than a live, operating rail. The ISO 20022 messaging standard underpinning the planned rail is itself a structural choice that aligns Canada with the broader international direction of travel for payment-messaging modernisation, though no claim in this cycle's evidence quantifies a specific go-live date for the rail itself.

Outlook

The Real-Time Rail's development timeline relative to the open-banking framework's own Phase 1 (2026-Q4) and Phase 2 (2027-Q2) milestones is the central item to watch in this domain. Given the confirmed intent to pair instant settlement with payment-initiation capability, any further primary-source confirmation of the rail's own go-live timeline would materially sharpen the product-innovation picture for this jurisdiction.

Periodic update · new data 2026-08-26

Product Innovation & Market Development

The federal government confirmed its intent this cycle to advance open banking legislation completing the Consumer-Driven Banking Act (CDBA), a development with two structurally significant components. First, the legislation would shift open-banking oversight from the Financial Consumer Agency of Canada (FCAC) to the Bank of Canada. Second, the additional legislation needed to complete the CDBA framework is targeted for mid-2027, and is explicitly tied to Payments Canada's Real-Time Rail (RTR) project reaching completion in 2026 — meaning the open-banking product-innovation timeline is contingent on, rather than independent of, the underlying real-time payments infrastructure buildout.

This linkage is analytically significant for product-innovation assessment: a fintech or bank evaluating open-banking product development in Canada should treat the CDBA's mid-2027 legislative target as conditioned on RTR's 2026 completion holding to schedule, rather than as a standalone legislative date. Any slippage in RTR delivery would be a leading indicator for slippage in the open-banking oversight-transition timeline as well.

Outlook

The Real-Time Rail's 2026 completion milestone is the key near-term indicator to watch, given its explicit linkage to the CDBA legislative timeline. Product-development teams building toward open banking in Canada should treat the mid-2027 legislative target as provisional pending confirmed RTR delivery.

Sources and findings (4)

T1https://www.canada.ca/en/department-finance/programs/financial-sector-policy/open-banking-implementation/budget-2025-canadas-framework-for-consumer-driven-banking.htmlretrieved 2026-06-27
T2https://www.dlapiper.com/en-pl/insights/publications/2026/04/the-new-consumer-driven-banking-act-explainedretrieved 2026-06-27
T3https://www.redcompasslabs.com/insights/canada-instant-payments-era-real-time-rails/retrieved 2026-06-27
T3https://www.openbankingtracker.com/glossary/rtr-canadaretrieved 2026-06-27

#

Canada has NO nationwide statutory APP-fraud reimbursement regime equivalent to the UK PSR mandatory reimbursement; e-Transfer is explicitly not covered by 'zero liability'. Credit-card liability is capped at $50 under Bank Act s.627.33. The voluntary EFT Code of Practice is the enforceable floor for deposit-account fraud, with Interac promoting a discretionary Zero Liability Policy. OBSI became the sole external complaints body for all banks on November 1, 2024. Budget 2025/Bill C-15 proposes Bank Act anti-fraud duties; Quebec's Bill 72 adds deposit-account liability limits.

Horizon · 2026-H2 (±year)Proposed Bank Act anti-fraud duties (Budget 2025)proposed · T2

Standing sub-brief · as of 27 June 2026192 words · last cycle 2026-06-27

Consumer Protection & APP Fraud

A material consumer-protection gap persists relative to the UK model. Canada has no nationwide statutory APP-fraud reimbursement regime equivalent to the UK PSR mandatory reimbursement; Interac e-Transfer is explicitly not covered by zero liability; credit-card liability is capped at $50 under Bank Act s.627.33; the voluntary EFT Code of Practice is the enforceable floor; and OBSI has been the sole external complaints body for all banks since November 1, 2024. The cited contrast is the UK regime offering up to GBP85,000 reimbursement in force since October 7, 2024. Canadians lost over C$638m to fraud in 2024. On the policy front, Budget 2025/Bill C-15 proposes Bank Act anti-fraud duties (FRFI anti-fraud policies, express consent for certain features, anonymized fraud-data reporting to FCAC), and Quebec Bill 72 adds deposit-account liability limits as a sub-national divergence.

no periodic updates on record for this sub-brief

Sources and findings (4)

T2https://hillnotes.ca/2025/10/21/online-banking-fraud-protecting-consumers-from-unauthorized-transactions/retrieved 2026-06-27
T3https://www.nbc.ca/personal/advice/security/how-protect-interac-etransfer-scams.htmlretrieved 2026-06-27
T3https://legalclarity.org/canadian-rights-for-unauthorized-debit-and-e-transfer-fraud/retrieved 2026-06-27
T2https://www.mccarthy.ca/en/insights/blogs/techlex/budget-2025-maintains-momentum-in-financial-services-industry-reformretrieved 2026-06-27

#

sentinel: Canada's AML/CFT regime is anchored in the PCMLTFA, supervised by FINTRAC as both financial intelligence unit and AML/ATF supervisor, applying a FATF-aligned risk-based approach. Budget 2025/Bill C-12 and the Budget 2025 Implementation Act (Royal Assent March 26, 2026) sharply toughen the regime: greatly increased AMP caps, mandatory compliance agreements, compliance orders, universal FINTRAC enrolment, and FINTRAC joining the Financial Institutions Supervisory Committee. Enforcement escalated markedly in 2025, concentrated in the crypto/MSB sector.

Standing sub-brief · as of 27 June 2026190 words · last cycle 2026-08-05

AML/CFT & Financial Crime (Sentinel-fed)

This module is sourced from the Sentinel feed; the intelligence below is attributed to Sentinel and the substantive illicit-finance analysis is conducted in FIM, not here. Per Sentinel, the Budget 2025 Implementation Act (Royal Assent March 26, 2026) sharply increases AMP caps (up to $40,000 minor, $4,000,000 serious, with higher very-serious tiers), elevates certain compliance-program violations to very serious, requires compliance programs to be reasonably designed, risk-based and effective, mandates universal section-5 enrolment with a publicly accessible roll, introduces compliance orders, and requires compliance agreements wherever an AMP is imposed. FINTRAC has also joined the Financial Institutions Supervisory Committee, signalling tighter supervisory coordination. The payments-relevant read is that AML compliance cost and enforcement exposure rise materially for reporting entities — especially non-bank MSBs and VASPs, and prospectively stablecoin issuers deemed to deal in virtual currencies. The 2025 enforcement escalation was concentrated in the crypto/MSB sector.

Periodic update · new data 2026-08-11

AML/CFT & Financial Crime

This module's sole finding this cycle is sourced from the Sentinel.gi feed rather than from original research: FINTRAC's administrative-monetary-penalty ceiling rose materially under Bill C-12, from $1,000 to $40,000 for minor violations and up to $4,000,000 for serious violations (wpm-2026-W32-006). Consistent with this monitor's scope guardrail, the illicit-finance and money-laundering-typology analysis behind this penalty-regime change is not re-analysed here; readers seeking that analysis should consult the Sentinel feed and the dedicated financial-integrity monitor's coverage of Canada's AML architecture directly.

From a payments-supervision perspective, the significance of this development is narrower but still material: every RPAA-registered payment service provider, alongside every other PCMLTFA reporting entity, now faces a substantially heavier AML compliance-cost overlay layered on top of its existing Retail Payment Activities Act supervisory obligations. This is a compounding rather than a replacing change — RPAA-registered PSPs must continue to meet their payments-specific reporting and enforcement obligations under the Bank of Canada's supervision while simultaneously absorbing the higher FINTRAC penalty exposure.

Outlook

Watch for confirmation, via a primary FINTRAC or Canada Gazette source, of the exact AMP figures under Bill C-12, and for any indication of how the compounded AML and payments-supervision compliance burden is affecting RPAA-registered PSPs' operating costs specifically.

Sources and findings (6)

T2https://www.mondaq.com/canada/money-laundering/1739410/a-line-in-the-sand-fintracs-shift-to-aggressive-aml-enforcementretrieved 2026-06-27
T?FIM (sentinel.gi) per-JID baseline profile — Canada — Canada's AML/CTF/CPF regime rests on the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), enforced by FINTRAC as FIU/supervisor. June 2024 PCMLTFA amendments expanded FINTRAC's information-sharing powers. A federal public beneficial-ownership registry (Bill C-42, CBCA amendment) operates alongside fragmented provincial corporate registries. A 2015 Supreme Court ruling exempts legal counsel and Quebec notaries from AML obligations, a persistent structural gap FATF has repeatedly flagged.
T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: absent-field-provenance
T2FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-002) — Enforcement: FINTRAC — 35 crypto-asset and money-services businesses
T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: regulatory-failure
T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: legal-gap

#

Final settlement for Lynx, ACSS and the forthcoming RTR occurs through settlement accounts on the books of the Bank of Canada, providing settlement finality in central bank money. To hold a settlement account, applicants must be (or be eligible to become) a Payments Canada member, be subject to comprehensive risk-based Canadian prudential regulation (OSFI or equivalent provincial), meet an investment-grade (BBB-) credit assessment, pledge eligible collateral via CDSX, and confirm financial-crime risk controls. Membership eligibility is being expanded to RPAA-registered PSPs.

Standing sub-brief · as of 8 July 202699 words · last cycle 2026-08-31

Correspondent Banking, Settlement & Access

Correspondent-style settlement access in Canada continues to hinge on a bank-versus-non-bank asymmetry that this cycle's developments only partly narrow. Expansion of Real-Time Rail eligibility to RPAA-registered non-bank payment service providers is advancing through the Department of Finance, though no fixed date has been set; access to a Bank of Canada settlement account and Payments Canada membership continues to depend on completing RPAA registration first.

Periodic update · new data 2026-08-26

Correspondent Banking, Settlement & Access

Payments Canada by-law amendments are progressing to expand direct membership eligibility to RPAA-registered payment service providers — a structural change to Canada's correspondent-banking and settlement-access architecture that sits at the center of this module's analytical spine: the long-standing asymmetry between bank access to core settlement infrastructure and non-bank PSP dependence on bank intermediation. If finalized, the amendments would allow RPAA-registered non-bank PSPs a more direct relationship with Payments Canada's settlement infrastructure than the traditional model, under which non-bank PSPs have accessed the payments system only through a sponsoring bank relationship.

This development should be read alongside the continued progress of Payments Canada's Real-Time Rail (RTR) project toward its 2026 completion target, since expanded direct membership eligibility and a new real-time settlement rail are structurally complementary. The bank-versus-non-bank access asymmetry that has historically defined Canadian correspondent banking and settlement access is therefore potentially narrowing, though the by-law amendments remain in progress rather than finalized this cycle.

Outlook

Finalization of the Payments Canada by-law amendments, and their interaction with RTR's 2026 completion timeline, are the two developments most likely to determine whether Canada's correspondent-banking and settlement-access asymmetry narrows materially in the near term.

Sources and findings (4)

#

Trailing-12-month deal flow is led by Nuvei's agreed US$2.75 billion acquisition of Payoneer (announced June 2026) following Advent International's 2024 US$6.3 billion take-private of Nuvei. Other notable events: Fiserv's completed acquisition of Payfare, Repay's agreement to acquire KUBRA (~US$372M), Wealthsimple's C$536M equity raise and SWIFT membership, and CAD-stablecoin raises (Tetra Digital US$10M; Transactix CADX US$50M). Canadian fintech investment normalised to ~$2.4B across 113 deals in 2025.

Standing sub-brief · as of 27 June 2026271 words · last cycle 2026-10-18

Commercial Intelligence (M&A, Investment & Product)

Commercial consolidation is active and Canadian-led across the trailing window. The lead event: Canadian fintech Nuvei agreed to acquire Israeli cross-border payments company Payoneer for US$2.75 billion in cash ($7.40/share), creating a combined company with roughly US$3bn annual revenue and around US$500bn annual payment volume, announced approximately mid-June 2026 — the largest Canadian payments M&A event in the window, with Nuvei (PE-backed by Advent/CDPQ/Novacap after its 2024 US$6.3bn take-private) consolidating cross-border scale. Repay Holdings agreed to acquire KUBRA for approximately US$372 million, part of recent Canadian payments M&A that also includes Fiserv completing its acquisition of Payfare and Nomba acquiring a licensed Canadian PSP/MSB in Q2 2025. On the investment side, Wealthsimple completed a C$536 million equity raise, one of the two largest Canadian fintech investments in 2025 (alongside the US$898m PE buyout of Converge Technology Solutions), underpinning its SWIFT-membership cross-border expansion. Domestic CAD-stablecoin activity includes Tetra Digital Group's US$10 million raise (backed by Shopify, Wealthsimple and National Bank Financial) and Transactix's planned US$50 million CAD-backed stablecoin CADX with associated payment rails — all values publicly disclosed in source, with the Payfare/Nomba deal values not publicly disclosed. Canadian fintech investment normalised to roughly C$2.4bn across 113 deals in 2025 (versus C$9.9bn across 161 deals in 2024, inflated by the Nuvei buyout and Plusgrade).

Periodic update · new data 2026-10-18

Commercial Intelligence & Fintech

Canada's payments-sector commercial activity this cycle consists of two discrete, reported events, both completed October 13, 2026 and both sourced from a single trade newsletter without independent corroboration. KORT Payments, a Toronto-based payments company, divested its cannabis-vertical payment-processing business, Merrco, selling it to PayFacto. The transaction value was not publicly disclosed. This is a portfolio-narrowing move for KORT rather than an exit from the payments sector altogether, and it consolidates a specialist cannabis-payments capability under an acquirer already positioned in that space.

Separately, Chimoney, a Toronto-headquartered cross-border payments platform, was acquired by CapitalSage Holdings, a Nigeria-linked entity, after Chimoney had already publicly announced it was shutting down. The acquisition therefore reads as a distressed-asset transaction rather than a strategic growth acquisition: CapitalSage is acquiring assets, technology, or customer relationships from a company that had already signalled it could not continue operating independently, rather than paying a premium for a going concern. Deal terms for this transaction were likewise not publicly disclosed.

Taken together, the two events point toward a Canadian payments-and-fintech commercial environment where this cycle's activity is modest in scale and skewed toward distressed or non-core divestitures rather than toward strategic consolidation by well-capitalised acquirers. Neither transaction involved a Canadian bank or major payments-scheme participant as acquirer; both acquirers (PayFacto, a specialist payments processor, and CapitalSage Holdings, a cross-border entity) are smaller or non-domestic players picking up specific capabilities or distressed assets rather than market-share-driven targets. This is consistent with a reading that broader Canadian fintech investment, while continuing at a measured pace, is concentrating capital toward scale-ready companies rather than toward early-stage or struggling platforms, leaving the latter category to exit via distressed sale or portfolio divestiture rather than growth financing.

The absence of independent corroboration for both events is a material caveat. A single trade-newsletter report is the sole source for the existence, parties, and completion dates of both transactions; no regulatory filing, company press release, or second independent media source was located this cycle to confirm either deal's terms or even its occurrence beyond the newsletter account.

Outlook

Whether this pair of modest, distressed-skewed transactions represents an isolated pocket of activity or the leading edge of a broader shakeout among smaller Canadian payments and fintech platforms is not determinable from this cycle's evidence alone. Independent corroboration of both the KORT/Merrco/PayFacto and Chimoney/CapitalSage transactions, including confirmation of deal terms and the acquirers' own strategic rationale, would materially improve confidence in either reading.

1 earlier distinct update(s)

Periodic update · new data 2026-08-11

Commercial Intelligence & Fintech

A regulated Canadian financial institution launched CADD, Canada's first CAD-backed stablecoin issued by a regulated financial institution, with the launch timed to coincide with the Stablecoin Act's enactment on 26 March 2026 (wpm-2026-W32-007). The event is coded as a completed product release; amount_disclosed is false, so no transaction or capitalisation figures accompanied the announcement, and the issuing institution itself is not named in the underlying source. This is reported at Assessed confidence from a single Tier-3 practice-guide citation.

Outlook

Watch for confirmation of the CADD issuer's identity and for any follow-on product announcements from other regulated Canadian financial institutions now that the Stablecoin Act has been enacted.

Sources and findings (5)

T3https://www.calcalistech.com/ctechnews/article/6d298gwz0retrieved 2026-06-27
T3https://www.siliconrepublic.com/business/nuvei-payoneer-reuters-payments-acquisitionsretrieved 2026-06-27
T3https://www.privsource.com/acquisitions/payments-fintech/canadaretrieved 2026-06-27
T3https://finovate.com/finovate-global-canada-mortgagetech-real-time-payments-and-top-investment-trends/retrieved 2026-06-27
T2https://www.torys.com/our-latest-thinking/torys-quarterly/q4-2025/stablecoins-in-canadaretrieved 2026-06-27

No modules match.

Filters combine as OR inside a group and AND across groups.

Editorial metadata

Provenance only. Nothing below gates publication or affects the render.

Editorial metadata for Canada
Field	Value
`trust.lawyer_review.status`	never_reviewed
`trust.lawyer_review.reviewer`	no reviewer on record
`trust.content_source`	ai_generated

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light; derived_scores = {}.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band.

Orphan deltas: 2 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 14 module(s), 56 finding(s), 129 source(s) in the cumulative register.

Think something on this page is wrong? Report an error.

Canada

Member jurisdictions

Jurisdiction brief

Latest update · 18 October 2026

Lead Signal

Other Developments

Cross-Monitor Connections

Outlook

Standing brief · as of 8 July 2026

Lead Signal

Other Developments

Cross-Monitor Connections

Outlook

Regulatory Status

Outlook

Latest update · 28 September 2026

Regulatory Status

Outlook

Standing brief · as of 8 July 2026

Regulatory Status

Outlook

W1aLicensing, Authorisation & Market AccessConfirmedconfirmed 2026-06-27▾#

Licensing, Authorisation & Market Access

Outlook

Licensing, Authorisation & Market Access

Outlook

Licensing, Authorisation & Market Access

Outlook

Licensing, Authorisation & Market Access

Outlook

Licensing, Authorisation & Market Access

Outlook

Licensing, Authorisation & Market Access

Outlook

W1bConduct, Safeguarding & PromotionsConfirmedconfirmed 2026-06-27▾#

Conduct, Safeguarding & Financial Promotions

Outlook

Conduct, Safeguarding & Financial Promotions

Outlook

Conduct, Safeguarding & Financial Promotions

Outlook

W2Stablecoins & Digital MoneyConfirmedconfirmed 2026-06-27▾#

Stablecoins & Digital Money

Outlook

Stablecoins & Digital Money

Outlook

W3Operational Resilience & Critical InfraConfirmedconfirmed 2026-06-27▾#

Operational Resilience & Critical Infrastructure

Outlook

Operational Resilience & Critical Infrastructure

Outlook

W4Scheme & Network ComplianceConfirmedconfirmed 2026-06-27▾#

Scheme & Network Compliance

Outlook

W5Payment Corridor DynamicsConfirmedconfirmed 2026-06-27▾#

Payment Corridor Dynamics

Outlook

W6Industry Structure & Commerciallimited signalProbableconfirmed 2026-06-27▾#

Industry Structure & Commercial

Outlook

Industry Structure & Commercial Dynamics

Outlook

Industry Structure & Commercial Dynamics

Outlook

W7Legal & LitigationProbableconfirmed 2026-06-27▾#

Legal & Litigation

Outlook

W8Merchant Acquiring & RiskProbableconfirmed 2026-06-27▾#

Merchant Acquiring & Risk

Outlook

W9Product Innovation & Market DevelopmentConfirmedconfirmed 2026-06-27▾#

Product Innovation & Market Development

Outlook

Product Innovation & Market Development

Outlook

Product Innovation & Market Development

Outlook

Product Innovation & Market Development

Outlook

W10Consumer Protection & APP FraudProbableconfirmed 2026-06-27▾#

#

#

#

#

#

#

#

#

#

#

#

#

#

#