Canada — Ontario (CA-ON)

Updated 4 Jul 2026Schema world-payments-v1Baseline wpm-2026-07-04

Lead Signal

Canada's payments-regulatory architecture completed a rare simultaneous build-out over the twelve months to mid-2026, compressing licensing, safeguarding, stablecoin and open-banking reform into a single overlapping window. The Retail Payment Activities Act's substantive safeguarding-of-end-user-funds obligation took effect September 8, 2025, requiring registered payment service providers to hold a Bank of Canada-approved framework for protecting client funds, with first annual reports due March 31, 2026. Layered onto this, Canada's Stablecoin Act received Royal Assent on March 26, 2026, naming the Bank of Canada as supervisor of non-financial-institution fiat-backed stablecoin issuers and imposing 1:1 reserve/redemption and AML requirements on top of existing FINTRAC money-services-business status, with full force expected in 2027. At the same time, Bill C-15 pre-published Bank Act fraud-prevention regulations on June 26, 2026 - introducing fraud detection and prevention duties, express consent requirements for electronic funds transfer capabilities, and annual fraud-data reporting to the Financial Consumer Agency of Canada - while also amending PIPEDA to create a cross-sectoral data-mobility right, of which consumer-driven banking (open banking) is the first sectoral application. Taken together, this is not three separate reforms but one compliance season: PSPs, banks and prospective stablecoin issuers in Ontario now face simultaneous safeguarding, operational-resilience, conduct and market-access obligations converging on the same 2026 calendar.

Outlook

Several forward-dated items will shape the next reporting cycle. The comment period on Bill C-15's fraud-prevention draft regulations closes around July 26, 2026. The Stablecoin Act is expected to reach full operational force sometime in 2027 following a 12-18 month development phase. The Real-Time Rail's precise launch date remains an open monitoring question: this cycle's research anchors on Q3 2026, but a separate review has surfaced evidence pointing to an official Q4 2026 target with RTR by-law and rules entering force August 24, 2026, a discrepancy to be reconciled against a primary Payments Canada source next cycle. Open Banking's Phase 1 read-access timing remains unconfirmed heading into the second half of 2026, and Phase 2 write-access is not expected before mid-2027. On the commercial side, the Francisco Partners-Moneris transaction could reach agreement as soon as the third quarter of 2026, while the Nuvei-Payoneer acquisition is not expected to complete until mid-2027 - together pointing toward a further consolidation of Canadian payments ownership around private equity and cross-border scale players over the next 12 months.

Confidence
Confirmed
Forward deadlines
7

Other Developments

Bank divestiture from Canadian payments infrastructure has hardened into a structural pattern rather than an isolated event. RBC and BMO are in advanced talks to sell their Moneris merchant-acquiring joint venture to Francisco Partners in a deal valued up to $2 billion, following TD Bank's earlier sale of its Canadian merchant-processing business to Fiserv. Moneris itself holds roughly 38% of Canadian merchant-acquiring volume, meaning the sale would hand a private-equity buyer control of a business processing a substantial share of Canadian card transactions, against a backdrop where the Big Six banks still hold approximately 93% of Canadian banking assets. Smaller acquiring consolidation continued alongside this, with Payroc WorldAccess acquiring Ontario's SterlingCard Payment Solutions for an undisclosed sum. Enforcement activity intensified in parallel: FINTRAC fined VersaBank of London, Ontario $42,075 for compliance-policy and high-risk-client failures, and fined the Ontario real-estate brokerage Century 21 Heritage Group $148,912.50 for failing to file a suspicious transaction report, while TD Bank separately agreed to pay approximately US$3.04 billion in AML-failure penalties to US authorities. FINTRAC's FY2024-25 enforcement record - a record 23 Notices of Violation and more than $25 million in penalties - coincided with Bill C-12 (the Strong Borders Act) raising maximum AML administrative penalties from $500,000 to $20 million per violation upon Royal Assent March 26, 2026. On the innovation and infrastructure side, Payments Canada continues to target a Q3 2026 launch for the Real-Time Rail, a 24/7/365 ISO 20022 instant-payments system intended to underpin Interac e-Transfer and open-banking payment initiation, though industry observers expect slippage; SWIFT completed its own global ISO 20022 migration in November 2025. The Consumer-Driven Banking Act's Phase 1 read-access rollout remains uncommitted as of March 2026 despite an original early-2026 target, with Phase 2 write-access now targeted for mid-2027. Consumer-protection changes also advanced: the Ombudsman for Banking Services and Investments became the sole external complaints body for federally regulated banks on November 1, 2024, fraud complaints to it nearly doubled year-on-year to 1,815 cases in 2025, and a new $10 cap on non-sufficient-funds fees took effect March 12, 2026. In commercial intelligence, Canadian-headquartered Nuvei agreed to acquire cross-border payments firm Payoneer for approximately $2.75 billion in cash, and Robinhood completed its acquisition of Canadian crypto-trading platform WonderFi for roughly US$178.56 million.

Cross-Monitor Connections

Several developments this cycle sit at the boundary between payments-market structure and illicit-finance/sanctions analysis, and are flagged rather than analysed here. FINTRAC's record enforcement year, Bill C-12's steep increase in the AML penalty ceiling, and the Stablecoin Act's layering of AML/CFT obligations onto existing FINTRAC virtual-currency-dealer status together carry illicit-finance significance that belongs with the World Payments Monitor's sister financial-integrity coverage rather than this brief's market-structure lens. Similarly, TD Bank's roughly US$3.04 billion AML settlement is cited here only for its role in accelerating Canadian bank de-risking and account-closure practice - a correspondent-banking access story - while the underlying AML-failure analysis itself is out of scope for this monitor.

View as
Standing baseline position per module · click a card to expand its full sub-brief

Legal accessibility by product

overall:

Domains

14 regulatory modules · click to expand the full sub-brief
W1a

Licensing, Authorisation & Market Access

Confirmed

Ontario's payment and money-services entities operate under a federal dual-registration model with no additional provincial licensing layer of its own.

W1b

Conduct, Safeguarding & Promotions

Confirmed

Registered payment service providers holding end-user funds must maintain a Bank of Canada-approved safeguarding framework; the substantive obligation entered into force September 8, 2025 - distinct from the Retail Payment Activities Act's earlier November 1, 2024 registration-provision date - and the first PSP annual safeguarding report is due March 31, 2026.

W2

Stablecoins & Digital Money

Confirmed

Canada enacted its first purpose-built stablecoin framework, the Stablecoin Act, which received Royal Assent on March 26, 2026, naming the Bank of Canada as supervisor of fiat-backed stablecoin issuers that are not themselves financial institutions.

W3

Operational Resilience & Critical Infrastructure

Confirmed

Registered payment service providers have been required, since September 8, 2025, to maintain an operational risk-management framework addressing risks to third-party service providers and agents, with first annual reports due March 31, 2026 - an obligation that parallels DORA-style operational-resilience regimes elsewhere.

W4

Scheme & Network Compliance

Confirmed

Card-scheme governance in Canada continues to run primarily through the voluntary, FCAC-monitored Code of Conduct for the Payment Card Industry, under which Visa and Mastercard must disclose standard interchange rates, wholesale discount rates and assessment fees; the Payment Card Networks Act gives the Minister of Finance authority to regulate directly should the Code not be adopted or observed.

W5

Payment Corridor Dynamics

Confirmed

Payments Canada continues to target Q3 2026 for the launch of the Real-Time Rail, a 24/7/365 ISO 20022 instant-payments system that will underpin Interac e-Transfer and support open-banking payment initiation, though industry observers expect slippage into late 2026 or 2027.

+ 8 more domains — W6 Industry Structure & Commercial, W7 Legal & Litigation, W8 Merchant Acquiring & Risk, W9 Product Innovation & Market Development, W10 Consumer Protection & APP Fraud, W11 AML/CFT & Financial Crime, W12 Correspondent Banking, Settlement & Access, W13 Commercial Intelligence (M&A, Investment & Product).
Full per-domain detail — all 14 modules

W1aConfirmedLicensing, Authorisation & Market Access

see this theme across all jurisdictions →6 claims

Ontario payment/money-services entities operate under Canada's federal dual-registration model: FINTRAC registration as a Money Services Business (MSB) or Foreign MSB under the PCMLTFA, plus (where retail payment functions are performed) Bank of Canada registration as a Payment Service Provider under the Retail Payment Activities Act (RPAA), in force since November 2024. Ontario imposes no additional provincial MSB licence layer (unlike Quebec).

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Licensing, Authorisation & Market Access

Ontario's payment and money-services entities operate under a federal dual-registration model with no additional provincial licensing layer of its own. Money services businesses, including foreign MSBs directing services to Canadian clients, must register with FINTRAC under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act; this registration is free but does not constitute a licence or regulatory endorsement. Separately, payment service providers performing retail payment functions must register with the Bank of Canada under the Retail Payment Activities Act, a requirement that applies to foreign PSPs even where they hold no Canadian incorporation or FMSB status. Together, FINTRAC MSB/Foreign-MSB registration and Bank of Canada RPAA PSP registration form the sole federal licensing route for Ontario payments entities, with Ontario itself imposing no additional provincial MSB or PSP licence layer of the kind Quebec maintains - a structural feature of the jurisdiction's regulatory perimeter rather than a coverage gap.

Outlook

No near-term change to this dual-registration architecture is signalled; the more active development sits in the conduct/safeguarding layer built on top of it (see W1b) and in the phasing precision between the RPAA's registration and substantive-obligation dates, which remains a standing item for reconciliation.

W1aLicensing, Authorisation & Market AccessConfirmed
Ontario payment/money-services entities operate under Canada's federal dual-registration model: FINTRAC registration as a Money Services Business (MSB) or Foreign MSB under the PCMLTFA, plus (where retail payment functions are performed) Bank of Canada registration as a Payment Service Provider under the Retail Payment Activities Act (RPAA), in force since November 2024. Ontario imposes no additional provincial MSB licence layer (unlike Quebec).
all · compliance · analyst · board
Evidence 6 claims ›

W1bConfirmedConduct, Safeguarding & Promotions

see this theme across all jurisdictions →6 claims

PSPs holding end-user funds must maintain a Bank of Canada-approved safeguarding framework (in force since September 8, 2025) alongside an operational risk-management framework; the voluntary but FCAC-monitored Code of Conduct governs merchant-facing conduct; new Bank Act fraud-prevention conduct duties (Bill C-15) are being operationalised via 2026 Gazette pre-publication.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Conduct, Safeguarding & Financial Promotions

Registered payment service providers holding end-user funds must maintain a Bank of Canada-approved safeguarding framework; the substantive obligation entered into force September 8, 2025 - distinct from the Retail Payment Activities Act's earlier November 1, 2024 registration-provision date - and the first PSP annual safeguarding report is due March 31, 2026. This safeguarding layer is now being joined by a new conduct obligation at the bank level: the federal government pre-published Bank Act fraud-prevention regulations under Bill C-15 on June 26, 2026, opening a 30-day comment period. The draft regulations would require banks to maintain fraud detection and prevention policies, obtain express consent before enabling electronic funds transfer capabilities on customer accounts, and report fraud data annually to the Financial Consumer Agency of Canada. Together, the RPAA safeguarding regime and the incoming Bank Act fraud duties extend Ontario's conduct perimeter beyond registration and into ongoing operational obligations for both non-bank PSPs and banks.

Outlook

The Bill C-15 comment period is expected to close around July 26, 2026, after which finalised fraud-prevention regulations would move toward force; the first RPAA PSP safeguarding annual reports, due March 31, 2026, will be an early test of how the framework is being operationalised in practice.

W1bConduct, Safeguarding & PromotionsConfirmed
PSPs holding end-user funds must maintain a Bank of Canada-approved safeguarding framework (in force since September 8, 2025) alongside an operational risk-management framework; the voluntary but FCAC-monitored Code of Conduct governs merchant-facing conduct; new Bank Act fraud-prevention conduct duties (Bill C-15) are being operationalised via 2026 Gazette pre-publication.
all · compliance · analyst · board
Evidence 6 claims ›

W2ConfirmedStablecoins & Digital Money

see this theme across all jurisdictions →6 claims

Canada enacted its first purpose-built stablecoin framework (the Stablecoin Act, via Bill C-15) on Royal Assent March 26, 2026, designating the Bank of Canada as supervisor of non-financial-institution fiat-backed stablecoin issuers, with mandatory registration, 1:1 reserve/redemption requirements and AML obligations layered on top of existing FINTRAC MSB status. Full force expected 2027; retail CBDC plans shelved September 2024.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Stablecoins & Digital Money

Canada enacted its first purpose-built stablecoin framework, the Stablecoin Act, which received Royal Assent on March 26, 2026, naming the Bank of Canada as supervisor of fiat-backed stablecoin issuers that are not themselves financial institutions. The framework layers 1:1 reserve and redemption requirements and AML obligations on top of issuers' existing FINTRAC registration as virtual currency dealers; full operational force is expected in 2027 after a 12-18 month development phase, and stablecoins issued before the Act takes full effect continue to be regulated as investment products in the interim. This stablecoin build-out has effectively become the government's primary digital-money initiative: Canada shelved its retail Central Bank Digital Currency plans in September 2024, with the Bank of Canada instead directing its regulatory attention toward the private stablecoin framework.

Outlook

Watch for interim guidance and registration activity as issuers prepare for the 2027 full-force date, and for any signal that the shelved retail CBDC work is revisited once the stablecoin regime is bedded in.

W2Stablecoins & Digital MoneyConfirmed
Canada enacted its first purpose-built stablecoin framework (the Stablecoin Act, via Bill C-15) on Royal Assent March 26, 2026, designating the Bank of Canada as supervisor of non-financial-institution fiat-backed stablecoin issuers, with mandatory registration, 1:1 reserve/redemption requirements and AML obligations layered on top of existing FINTRAC MSB status. Full force expected 2027; retail CBDC plans shelved September 2024.
all · compliance · analyst · board
Evidence 6 claims ›

W3ConfirmedOperational Resilience & Critical Infrastructure

see this theme across all jurisdictions →5 claims

The RPAA's operational risk-management framework (in force since September 8, 2025) requires PSPs to manage risks that could reduce, deteriorate or break down retail payment activities; OSFI's 2025-26 Annual Risk Outlook flags state-actor threats; the incoming Real-Time Rail is being built with fraud controls embedded from day one.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Operational Resilience & Critical Infrastructure

Registered payment service providers have been required, since September 8, 2025, to maintain an operational risk-management framework addressing risks to third-party service providers and agents, with first annual reports due March 31, 2026 - an obligation that parallels DORA-style operational-resilience regimes elsewhere. Against this backdrop, OSFI's 2025-26 Annual Risk Outlook flags state-actor and state-sponsored-actor threats to Canadian financial infrastructure as a standing risk. The incoming Real-Time Rail is being built with fraud controls embedded from day one, including a fraud-scoring engine and Confirmation of Payee functionality, reflecting an infrastructure-design response to the same threat environment OSFI has flagged.

Outlook

The first RPAA operational-risk annual reports (due March 31, 2026) and the Real-Time Rail's eventual go-live will be the key tests of whether these resilience obligations and design features perform as intended once transaction volumes scale.

W3Operational Resilience & Critical InfrastructureConfirmed
The RPAA's operational risk-management framework (in force since September 8, 2025) requires PSPs to manage risks that could reduce, deteriorate or break down retail payment activities; OSFI's 2025-26 Annual Risk Outlook flags state-actor threats; the incoming Real-Time Rail is being built with fraud controls embedded from day one.
all · compliance · analyst · board
Evidence 5 claims ›

W4ConfirmedScheme & Network Compliance

see this theme across all jurisdictions →5 claims

Card-scheme compliance in Canada runs through the voluntary, FCAC-monitored Code of Conduct for the Payment Card Industry; Visa/Mastercard committed in 2014 to reduce interchange near 1.5%. The Competition Bureau separately pursued antitrust action against Visa/Mastercard over merchant application rules.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Scheme & Network Compliance

Card-scheme governance in Canada continues to run primarily through the voluntary, FCAC-monitored Code of Conduct for the Payment Card Industry, under which Visa and Mastercard must disclose standard interchange rates, wholesale discount rates and assessment fees; the Payment Card Networks Act gives the Minister of Finance authority to regulate directly should the Code not be adopted or observed. The Competition Bureau separately pursued antitrust litigation against Visa Canada and Mastercard International under section 76 of the Competition Act over merchant-rule restraints - no-surcharge, honour-all-cards and no-discrimination provisions - in a precedent-setting action shaping merchant steering rights within the card-scheme context.

Outlook

The interplay between the voluntary Code of Conduct and the Competition Bureau's litigation remains the key scheme-governance dynamic to track, particularly as it bears on merchant steering rights.

W4Scheme & Network ComplianceConfirmed
Card-scheme compliance in Canada runs through the voluntary, FCAC-monitored Code of Conduct for the Payment Card Industry; Visa/Mastercard committed in 2014 to reduce interchange near 1.5%. The Competition Bureau separately pursued antitrust action against Visa/Mastercard over merchant application rules.
all · compliance · analyst · board
Evidence 5 claims ›

W5ConfirmedPayment Corridor Dynamics

see this theme across all jurisdictions →5 claims

Canada is modernising its domestic rails via the Real-Time Rail (RTR), targeted for Q3 2026 (industry observers expect slippage), which will underpin Interac e-Transfer and open-banking payment initiation; SWIFT's ISO 20022 migration completed November 2025.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Payment Corridor Dynamics

Payments Canada continues to target Q3 2026 for the launch of the Real-Time Rail, a 24/7/365 ISO 20022 instant-payments system that will underpin Interac e-Transfer and support open-banking payment initiation, though industry observers expect slippage into late 2026 or 2027. This sits alongside SWIFT's completion of its own global migration to the ISO 20022 messaging standard in November 2025, an alignment that supports the RTR's own ISO 20022-native design. A separate review has surfaced evidence of a more recent Payments Canada reference to a Q4 2026 target, with RTR by-law and rules said to enter force August 24, 2026 - a discrepancy between sourcing that has not yet been reconciled against a primary Payments Canada citation.

Outlook

Reconciling the RTR's true target launch window - Q3 2026 as currently sourced versus the more recent Q4 2026/August 2026 by-law reference - is the priority item for next cycle, given how much of Canada's open-banking and instant-payments roadmap depends on the RTR's actual go-live date.

W5Payment Corridor DynamicsConfirmed
Canada is modernising its domestic rails via the Real-Time Rail (RTR), targeted for Q3 2026 (industry observers expect slippage), which will underpin Interac e-Transfer and open-banking payment initiation; SWIFT's ISO 20022 migration completed November 2025.
all · compliance · analyst · board
Evidence 5 claims ›

W6HighIndustry Structure & Commercial

see this theme across all jurisdictions →5 claims

Canadian banking and payments remain highly concentrated (Big Six ~93% of banking assets); structural change is underway as banks retreat from direct payments-infrastructure ownership (TD/Fiserv; RBC/BMO advanced-stage Moneris sale to Francisco Partners).

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Industry Structure & Commercial Dynamics

Canadian banking remains highly concentrated, with the Big Six banks holding approximately 93% of banking assets - a baseline against which any competitive shift from write-access open banking will be measured. Against that concentration, structural change is underway in payments infrastructure ownership specifically: RBC and BMO are in advanced talks to sell their Moneris merchant-acquiring joint venture to Francisco Partners in a deal valuing the business at up to $2 billion, a move that mirrors TD Bank's earlier sale of its Canadian merchant-processing business to Fiserv. The pattern signals an accelerating retreat by Canada's largest banks from direct payments-infrastructure ownership, opening acquiring market share to private-equity-backed independent processors even as the banks themselves retain their dominant share of core banking assets.

Outlook

Whether the Moneris transaction is finalised, and on what terms, will be a bellwether for whether bank divestiture from payments infrastructure continues at pace or whether the current concentration in acquiring instead moves from bank to PE ownership without materially changing market structure.

W6Industry Structure & CommercialHigh
Canadian banking and payments remain highly concentrated (Big Six ~93% of banking assets); structural change is underway as banks retreat from direct payments-infrastructure ownership (TD/Fiserv; RBC/BMO advanced-stage Moneris sale to Francisco Partners).
all · compliance · analyst · board
Evidence 5 claims ›

W7ConfirmedLegal & Litigation

see this theme across all jurisdictions →5 claims

Ontario payments-adjacent litigation and enforcement activity spans FINTRAC AMPs against Ontario-based reporting entities, the $500-million Loblaw/Weston bread price-fixing settlement's Interac-based fraud-screening flashpoint, and major cross-border AML enforcement against TD Bank.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Legal & Litigation

Ontario-linked enforcement activity intensified this cycle. FINTRAC fined VersaBank of London, Ontario $42,075 on February 23, 2026 for compliance-policy and high-risk-client failures under the PCMLTFA, and separately fined the Ontario real-estate brokerage Century 21 Heritage Group Ltd. $148,912.50 on December 10, 2025 for failing to file a suspicious transaction report - the largest of the Ontario-linked administrative monetary penalties surfaced this cycle. At a larger scale, TD Bank agreed to pay approximately US$3.04 billion in AML-failure penalties to US authorities (DOJ, OCC and FinCEN) in 2025; the settlement is cited here as a driver of accelerating Canadian bank de-risking behaviour (see W12), while analysis of the underlying AML failures themselves routes to the Financial Integrity Monitor.

Outlook

Further FINTRAC administrative monetary penalties against Ontario reporting entities are likely given the regulator's record FY2024-25 enforcement volume; watch also for any follow-on Canadian regulatory action connected to TD Bank's settlement.

W7Legal & LitigationConfirmed
Ontario payments-adjacent litigation and enforcement activity spans FINTRAC AMPs against Ontario-based reporting entities, the $500-million Loblaw/Weston bread price-fixing settlement's Interac-based fraud-screening flashpoint, and major cross-border AML enforcement against TD Bank.
all · compliance · analyst · board
Evidence 5 claims ›

W8HighMerchant Acquiring & Risk

see this theme across all jurisdictions →5 claims

Merchant acquiring is concentrated among Moneris (~38% share, subject to a possible sale to Francisco Partners), Global Payments and Chase Paymentech, operating under the Code of Conduct; consolidation continues via smaller tuck-ins (Payroc/SterlingCard, Paynt/E-xact).

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Merchant Acquiring & Risk

Merchant acquiring in Canada remains concentrated around Moneris, which holds approximately 38% of the market and is itself the subject of a possible sale by its bank owners, RBC and BMO, to Francisco Partners - a transaction the Bank of Canada is understood to view through a concentration-risk and merchant-continuity lens given Moneris's scale. Smaller-scale consolidation continued alongside the headline transaction: Payroc WorldAccess acquired Markham, Ontario-based SterlingCard Payment Solutions Inc. for an undisclosed amount, a tuck-in adding card-present processing capability to Payroc's Canadian offering.

Outlook

The Moneris ownership question is the dominant issue for this module; a completed sale to Francisco Partners would crystallise the concentration-risk questions the Bank of Canada has already flagged around Canada's acquiring market.

W8Merchant Acquiring & RiskHigh
Merchant acquiring is concentrated among Moneris (~38% share, subject to a possible sale to Francisco Partners), Global Payments and Chase Paymentech, operating under the Code of Conduct; consolidation continues via smaller tuck-ins (Payroc/SterlingCard, Paynt/E-xact).
all · compliance · analyst · board
Evidence 5 claims ›

W9HighProduct Innovation & Market Development

see this theme across all jurisdictions →5 claims

Canada's two flagship 2026 product/infrastructure initiatives are the Real-Time Rail (targeted Q3 2026) and Consumer-Driven Banking (Phase 1 read-access early 2026, at risk of delay; Phase 2 write-access mid-2027); a PIPEDA amendment introduces a broader cross-sectoral data-mobility right.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Product Innovation & Market Development

Canada's Consumer-Driven Banking Act is proceeding on a phased basis, with Phase 1 read-access originally targeted for early 2026 but, as of March 2026, still without a committed launch date from the Bank of Canada; Phase 2 write-access - the point at which competitive dynamics in banking are expected to shift most - remains targeted for mid-2027. Underpinning this rollout, Bill C-15 amends the Personal Information Protection and Electronic Documents Act to create a broader cross-sectoral data-mobility right, of which consumer-driven banking is designed to be the first sectoral application, extending data-portability infrastructure beyond banking to other parts of the economy over time.

Outlook

Phase 1's launch-date uncertainty is the key open item; a further slip beyond 2026 would push back the point at which open banking begins delivering competitive pressure on the concentrated banking sector described in W6.

W9Product Innovation & Market DevelopmentHigh
Canada's two flagship 2026 product/infrastructure initiatives are the Real-Time Rail (targeted Q3 2026) and Consumer-Driven Banking (Phase 1 read-access early 2026, at risk of delay; Phase 2 write-access mid-2027); a PIPEDA amendment introduces a broader cross-sectoral data-mobility right.
all · compliance · analyst · board
Evidence 5 claims ›

W10ConfirmedConsumer Protection & APP Fraud

see this theme across all jurisdictions →5 claims

Consumer payments-fraud protection runs through internal bank complaint processes escalating to OBSI (sole external complaints body since Nov 2024); fraud is the largest single driver of banking complaints; new Bank Act amendments impose fraud-detection duties alongside a $10 NSF fee cap effective March 12, 2026.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Consumer Protection & APP Fraud

The Ombudsman for Banking Services and Investments became the sole external complaints body for federally regulated banks on November 1, 2024; its recommendations, while capped at $350,000, remain non-binding on banks, and fraud complaints to OBSI nearly doubled year-on-year to 1,815 cases in 2025. New Financial Consumer Protection Framework Regulations capped non-sufficient-funds fees at $10, effective March 12, 2026, a change of particular relevance as pre-authorized debits increasingly coexist with instant e-transfers.

Outlook

Bill C-15's incoming Bank Act fraud-detection duties (see W1b) will interact directly with OBSI's rising fraud caseload; whether banks' new statutory fraud-prevention obligations reduce the volume or severity of complaints reaching OBSI is a metric to track into 2027.

W10Consumer Protection & APP FraudConfirmed
Consumer payments-fraud protection runs through internal bank complaint processes escalating to OBSI (sole external complaints body since Nov 2024); fraud is the largest single driver of banking complaints; new Bank Act amendments impose fraud-detection duties alongside a $10 NSF fee cap effective March 12, 2026.
all · compliance · analyst · board
Evidence 5 claims ›

W11HighAML/CFT & Financial Crime

Sentinelsee this theme across all jurisdictions →10 claims

sentinel: FINTRAC remains Canada's AML/CFT supervisor for MSBs, PSPs and reporting entities, with enforcement intensity rising in 2026 (record 23 NOVs, $25M+ penalties). Bill C-12 raised maximum AML penalties to $20 million per violation; CARF crypto tax-reporting went live January 1, 2026.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

AML/CFT & Financial Crime

This module's intelligence is sourced from the Sentinel.gi financial-integrity feed and is carried here for cross-monitor awareness rather than original World Payments Monitor analysis. Per the Sentinel feed, FINTRAC issued a record 23 Notices of Violation and more than $25 million in penalties in FY2024-25, the largest annual enforcement total in the regulator's history. The Sentinel feed also reports that Bill C-12, the Strong Borders Act, raised the maximum AML administrative penalty from $500,000 to $20 million per violation upon Royal Assent on March 26, 2026, co-occurring with a reported wave of more than 47 crypto-linked MSB registration revocations in the first quarter of 2026.

Outlook

Continued FINTRAC enforcement intensity and the higher Bill C-12 penalty ceiling are likely to keep AML compliance cost a persistent theme for Ontario payments entities; see Sentinel.gi for ongoing analysis.

W11AML/CFT & Financial CrimeHigh
sentinel: FINTRAC remains Canada's AML/CFT supervisor for MSBs, PSPs and reporting entities, with enforcement intensity rising in 2026 (record 23 NOVs, $25M+ penalties). Bill C-12 raised maximum AML penalties to $20 million per violation; CARF crypto tax-reporting went live January 1, 2026.
all · compliance · analyst · board
Evidence 10 claims ›

W12HighCorrespondent Banking, Settlement & Access

see this theme across all jurisdictions →4 claims

Correspondent-banking and payments-account access pressure in Canada is shaped by de-risking dynamics, accelerated by TD Bank's ~US$3.04bn 2025 settlement; PSPs seeking RPAA-compliant safeguarding accounts report continued difficulty obtaining direct bank-held segregated accounts.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Correspondent Banking, Settlement & Access

This module's analytical spine is the asymmetry between bank and non-bank access to settlement infrastructure. FATF has warned generally that de-risking - the wholesale termination of relationships rather than managed risk mitigation - causes financial exclusion and is inconsistent with its Recommendations, a frame applicable to Canada's accelerating account-closure practice, which has intensified following TD Bank's roughly US$3.04 billion AML settlement (see W7). Consistent with this, registered PSPs seeking to comply with the Retail Payment Activities Act's safeguarding requirements report continued difficulty obtaining direct, bank-held segregated safeguarding accounts - a friction point that compounds de-risking dynamics and leaves non-bank payments providers dependent on banks that may be retreating from higher-perceived-risk relationships generally.

Outlook

Whether the RPAA's safeguarding framework itself increases or eases non-bank PSPs' access to bank-held segregated accounts, given banks' own de-risking incentives, is the central access question to track in this module going forward.

W12Correspondent Banking, Settlement & AccessHigh
Correspondent-banking and payments-account access pressure in Canada is shaped by de-risking dynamics, accelerated by TD Bank's ~US$3.04bn 2025 settlement; PSPs seeking RPAA-compliant safeguarding accounts report continued difficulty obtaining direct bank-held segregated accounts.
all · compliance · analyst · board
Evidence 4 claims ›

W13HighCommercial Intelligence (M&A, Investment & Product)

see this theme across all jurisdictions →6 claims

The trailing-12-month CA-ON commercial intelligence window is dominated by continued bank exit from payments infrastructure and cross-border scale-up: Nuvei's pending $2.75bn acquisition of Payoneer and RBC/BMO's advanced-stage ~$2bn sale of Moneris to Francisco Partners, plus several smaller acquiring tuck-ins and a crypto-platform market entry.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Commercial Intelligence (M&A, Investment & Product)

Three discrete commercial events dominate this cycle. Nuvei agreed to acquire Payoneer Global Inc. for $7.40 per share in cash, a total equity value of approximately $2.75 billion, announced mid-June 2026 with completion anticipated mid-2027; the deal creates a Canadian-headquartered global cross-border payments platform, and Nuvei is separately pursuing a MiCA CASP licence and China/India payments authorisations. Francisco Partners is in discussions to acquire Moneris, the RBC/BMO merchant-acquiring joint venture, at a valuation of up to $2 billion; the deal value is not publicly disclosed, and the transaction remains at the rumoured/discussion stage, reported in May 2026 with a possible agreement by summer 2026. Robinhood completed its acquisition of Canadian crypto-trading platform WonderFi in an all-cash deal worth approximately CA$250 million (roughly US$178.56 million), a market-entry vehicle for the US retail-investing platform into Canadian crypto trading.

Outlook

Two live processes to track: whether Francisco Partners and Moneris's bank owners reach a definitive agreement (potentially by Q3 2026), and progress toward the Nuvei-Payoneer deal's anticipated mid-2027 completion, alongside Nuvei's parallel international licensing moves.

W13Commercial Intelligence (M&A, Investment & Product)High
The trailing-12-month CA-ON commercial intelligence window is dominated by continued bank exit from payments infrastructure and cross-border scale-up: Nuvei's pending $2.75bn acquisition of Payoneer and RBC/BMO's advanced-stage ~$2bn sale of Moneris to Francisco Partners, plus several smaller acquiring tuck-ins and a crypto-platform market entry.
all · compliance · analyst · board
Evidence 6 claims ›

Key judgments

7 judgments
JudgmentHigh
Canada's payments-regulatory architecture completed a major simultaneous build-out in the 12 months to mid-2026: RPAA substantive compliance (Sept 2025), the Stablecoin Act (March 2026), and Bill C-15's Bank Act/PIPEDA/Consumer-Driven Banking amendments together re-shape licensing, safeguarding, stablecoin and open-banking obligations at once.
Impact: CRITICAL
3 supporting claims
Evidence 3 claims ›
JudgmentHigh
Bank divestiture from Canadian payments infrastructure is now a structural pattern, not an isolated event: TD's prior exit from merchant processing is being followed by RBC/BMO's advanced-stage sale of Moneris to Francisco Partners, mirroring the broader North American shift of banks ceding acquiring to PE and global processors.
Impact: HIGH
2 supporting claims
Evidence 2 claims ›
JudgmentHigh
AML/CFT enforcement intensity in Canada rose sharply this cycle (record FINTRAC NOV count; Bill C-12's 40x AML-penalty-ceiling increase to $20M) at the same time the Stablecoin Act creates a new AML-obligated issuer class - a compounding compliance-cost signal for CA-ON payments entities.
Impact: HIGH
2 supporting claims
Evidence 2 claims ›
JudgmentAssessed
The Real-Time Rail's launch-date precision is itself now a monitoring item: this cycle's research anchors on Q3 2026, but Challenger-surfaced evidence points to an official Q4 2026 target with RTR by-law/rules in force Aug 24, 2026 - close this gap with a primary Payments Canada citation next cycle.
Impact: ELEVATED
1 supporting claim
Evidence 1 claim ›
JudgmentHigh
Nuvei's $2.75bn acquisition of Payoneer, alongside parallel MiCA/China/India authorisation moves, positions a Canadian-headquartered PSP as a global cross-border consolidation champion, signalling that Canada's payments sector is punching above its domestic-market weight commercially.
Impact: HIGH
1 supporting claim
Evidence 1 claim ›
JudgmentAssessed
De-risking dynamics - amplified by TD's ~US$3.04bn AML settlement - and reported friction for non-bank PSPs obtaining bank-held RPAA safeguarding accounts together suggest a widening access gap between bank-affiliated and non-bank payments players at the correspondent/settlement layer, consistent with FATF's general de-risking warning.
Impact: ELEVATED
3 supporting claims
Evidence 3 claims ›
JudgmentHigh
Ontario itself imposes no additional provincial MSB/PSP licensing layer beyond the federal FINTRAC/RPAA regime (unlike Quebec), meaning CA-ON's payments regulatory perimeter is functionally identical to the federal baseline - a structural feature rather than a coverage gap.
Impact: MONITORED
2 supporting claims
Evidence 2 claims ›

What changed this cycle

14 changes this cycle
domain W1aNew
Baseline established: FINTRAC MSB + BoC RPAA dual registration.
First interpret cycle for CA-ON under per_jurisdiction key_mode.
Detail ›
domain W1bNew
Baseline established: RPAA safeguarding + Code of Conduct + Bill C-15 fraud duties.
First interpret cycle for CA-ON.
Detail ›
domain W2New
Baseline established: Stablecoin Act enacted, CBDC shelved.
First interpret cycle for CA-ON.
Detail ›
domain W3New
Baseline established: RPAA operational risk framework + OSFI outlook.
First interpret cycle for CA-ON.
Detail ›
domain W4New
Baseline established: Code of Conduct + Competition Bureau litigation.
First interpret cycle for CA-ON.
Detail ›
domain W5New
Baseline established: RTR + ISO 20022 migration.
First interpret cycle for CA-ON.
Detail ›
domain W6New
Baseline established: bank concentration + Moneris/Francisco Partners talks.
First interpret cycle for CA-ON.
Detail ›
domain W7New
Baseline established: FINTRAC AMPs + bread settlement + TD AML settlement.
First interpret cycle for CA-ON.
Detail ›
domain W8New
Baseline established: Moneris concentration + acquiring tuck-ins.
First interpret cycle for CA-ON.
Detail ›
domain W9New
Baseline established: CDBA phased rollout + PIPEDA amendment.
First interpret cycle for CA-ON.
Detail ›
domain W10New
Baseline established: OBSI + NSF cap + Bill C-15 fraud duties.
First interpret cycle for CA-ON.
Detail ›
domain W11New
Baseline established: sentinel-fed FINTRAC enforcement + Bill C-12.
First interpret cycle for CA-ON.
Detail ›
domain W12New
Baseline established: de-risking + PSP safeguarding-account friction.
First interpret cycle for CA-ON.
Detail ›
jurisdiction CA-ONNew
CA-ON baseline established across all 13 WPM modules.
First interpret cycle for this JID under per_jurisdiction key_mode.
Detail ›

Risk posture

1 tracked
CA-ONTightening Compliance Burden Alongside Expanding Payments Market Access
New Stablecoin Act, raised AML penalties (Bill C-12), and Bank Act fraud-duties (Bill C-15) increase regulatory load, while RTR/open-banking and PE-backed acquiring consolidation expand market structure.
Risk level: Elevated
Confidence: High
Detail ›
World Payments jurisdiction data · Canada — Ontario (CA-ON) · schema world-payments-v1 · baseline wpm-2026-07-04. Data-driven from the published jurisdiction contract — all values shown are read directly from the pipeline output (server-rendered).

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.