🇨🇦

Canada (CA)

Updated 27 Jun 2026Schema world-payments-v1Baseline wpm-2026-07-07

Lead Signal

Canada's payments-regulatory perimeter underwent a consequential build-out this cycle. Registration provisions under the Retail Payment Activities Act have applied since November 1, 2024, and the accompanying risk-management and funds-safeguarding requirements have been in force since September 8, 2025. The Canada Stablecoin Act received Royal Assent on March 26, 2026 as Division 45 of Bill C-15, establishing a federal fiat-backed stablecoin regime that designates the Bank of Canada as registry and prudential supervisor and requires 1:1 reserve backing with at-par redemption, though the Act has not yet come into force. The Consumer-Driven Banking Act also received Royal Assent in March 2026, creating a Bank of Canada-administered open-banking and data-sharing supervisory regime with phased participation beginning with large banks. Together, these instruments consolidate the Bank of Canada as the central supervisory node across non-bank payment activity, open banking, and stablecoin issuance, raising boundary questions with OSFI's prudential mandate. The RPAA regime applies specifically to non-bank payment service providers, whereas the Consumer-Driven Banking Act's accreditation regime is designed to bring both bank and non-bank participants into scope as open-banking participation phases in.

Outlook

Two forward markers frame the coming period. Bank of Canada supervision of fiat-backed stablecoin issuers under the Stablecoin Act is expected to become operative via a future order-in-council, with the regime projected to be stable after 2027. Implementing regulations for the Stablecoin Act are expected via the Canada Gazette over the next twelve to eighteen months. Proposed amendments expanding the RPAA's payment-function definition to bring digital-asset custody providers within registration scope are similarly expected around 2027, though the date carries a year-scale uncertainty band. The pending scope expansion signals that Canada is moving to bring crypto-custody activity within mainstream payment-service registration rather than establishing a separate crypto-specific licensing track. Expansion of Real-Time Rail eligibility to RPAA-registered non-bank payment service providers is advancing through the Department of Finance, though no fixed date has been set; access to a Bank of Canada settlement account and Payments Canada membership continues to depend on completing RPAA registration first. Canada's overall regulatory trajectory across licensing, stablecoins, open banking and settlement access is now assessed as tightening.

Confidence
Confirmed

Other Developments

Beyond the headline enactments, several supporting developments sharpen the picture of where enforcement and access will bite. The Bank of Canada's administrative-penalty authority under the RPAA reaches up to $10 million CAD per contravention, alongside a standalone power to revoke a payment service provider's registration outright. No exemptions apply under the current RPAA registration framework, meaning covered payment functions must register regardless of size or business model. Retail Payment Activities Regulations section 15(2)(c) now requires registered PSPs to document how insolvency administrators are expected to handle safeguarded end-user funds, while the Bank of Canada has clarified it does not itself administer insolvency claims. This insolvency-documentation clarification is tracked as a dated procedural item rather than a standing structural change. The Consumer-Driven Banking Act allows the Minister of Finance to designate provincial authorities to exercise oversight functions, and establishes a federal-provincial-territorial advisory committee to manage that division of labour. Access to the open-banking regime is structured as an accreditation process for participating entities rather than a conventional licence. The Stablecoin Act supersedes the Canadian Securities Administrators' interim Value-Referenced Crypto Asset framework under Staff Notices 21-332 and 21-333, which had resulted in only one globally recognized stablecoin available in Canada. Under the Act, stablecoin issuers must hold reserves in treasury instruments on a 1:1 basis and honour redemption at par value, the safeguarding architecture the Bank of Canada will supervise. The Stablecoin Act likewise contemplates no blanket exemptions from its issuer-registration requirement once the regime becomes operative. Critics have flagged that designating the Bank of Canada as reserve-and-redemption supervisor for stablecoin issuers mirrors OSFI's role for bank deposits, blurring the prudential boundary between the two authorities. Proposed amendments to the RPAA's payment-function definition would extend registration scope to cover transmission or maintenance of encrypted or tokenized payment instruments and private keys, bringing custodied wallet providers and digital-asset custodians into the same registration track as conventional payment service providers. Both the licensing perimeter and correspondent-banking access are flagged as escalating, while the stablecoin and open-banking regimes are characterised as newly established.

Cross-Monitor Connections

The Stablecoin Act's reserve-and-redemption architecture and the proposed RPAA expansion into digital-asset custody carry illicit-finance-channel implications that this monitor routes to the Financial Integrity Monitor rather than analysing directly. That cross-routing is presently constrained on the WPM side, since the Sentinel.gi feed that normally supplies this monitor's AML/CFT module was unavailable this cycle, so any illicit-finance read on the stablecoin and custody build-out is carried here as an absent field rather than original analysis. This gap should be cross-checked against FIM's parallel Canada output once the feed resumes. This cycle's coverage also carries explicit gaps: merchant-acquiring and high-risk-MCC onboarding developments were not surfaced for Canada, nor were financial-promotion enforcement actions specific to Canadian payment service providers.

View as
Standing baseline position per module · click a card to expand its full sub-brief

Domains

14 regulatory modules · click to expand the full sub-brief
W1a

Licensing, Authorisation & Market Access

Confirmed

Licensing and market-access settings for Canadian payment service providers tightened further this cycle.

W2

Stablecoins & Digital Money

Confirmed

The Canada Stablecoin Act received Royal Assent on March 26, 2026 as Division 45 of Bill C-15, establishing a federal fiat-backed stablecoin regime that designates the Bank of Canada as registry and prudential supervisor and requires 1:1 reserve backing with at-par redemption, though the Act has not yet come into force.

W5

Payment Corridor Dynamics

Confirmed

Canada has been a G7 outlier without an instant rail, and the Real-Time Rail (RTR) is the structural change.

W13

Commercial Intelligence (M&A, Investment & Product)

Assessed

Commercial consolidation is active and Canadian-led across the trailing window.

W1b

Conduct, Safeguarding & Promotions

Confirmed

The Consumer-Driven Banking Act also received Royal Assent in March 2026, creating a Bank of Canada-administered open-banking and data-sharing supervisory regime with phased participation beginning with large banks.

W3

Operational Resilience & Critical Infra

Confirmed

Canada lacks a single DORA-equivalent operational-resilience statute; resilience is split across multiple regimes.

+ 8 more domains — W4 Scheme & Network Compliance, W6 Industry Structure & Commercial, W7 Legal & Litigation, W8 Merchant Acquiring & Risk, W9 Product Innovation & Market Development, W10 Consumer Protection & APP Fraud, W11 AML/CFT & Financial Crime (Sentinel.gi-fed), W12 Correspondent Banking, Settlement & Access.
Full per-domain detail — all 14 modules

W1aConfirmedLicensing, Authorisation & Market Access

see this theme across all jurisdictions →5 claims

Canada has a dual federal/non-bank track. Non-bank PSPs are not licensed but must register with the Bank of Canada under the Retail Payment Activities Act (RPAA); a separate FINTRAC registration applies to money services businesses (MSBs) under the PCMLTFA. There is no single EMI/PI licence; banks are regulated separately under the Bank Act/OSFI. RPAA risk-management and safeguarding obligations came into force on September 8, 2025, and the BoC publishes a public PSP registry.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Licensing, Authorisation & Market Access

Licensing and market-access settings for Canadian payment service providers tightened further this cycle. Registration provisions under the Retail Payment Activities Act have applied since November 1, 2024, and the accompanying risk-management and funds-safeguarding requirements have been in force since September 8, 2025. The Bank of Canada's administrative-penalty authority under the RPAA reaches up to $10 million CAD per contravention, alongside a standalone power to revoke a payment service provider's registration outright. No exemptions apply under the current RPAA registration framework, meaning covered payment functions must register regardless of size or business model. The RPAA regime applies specifically to non-bank payment service providers. The safeguarding requirement operates through a segregation mechanism under the RPAR-mandated funds-safeguarding framework, keeping end-user funds apart from a payment service provider's own assets. Proposed amendments to the RPAA's payment-function definition would extend registration scope to cover transmission or maintenance of encrypted or tokenized payment instruments and private keys, bringing custodied wallet providers and digital-asset custodians into the same registration track as conventional payment service providers.

Outlook

Proposed amendments expanding the RPAA's payment-function definition to bring digital-asset custody providers within registration scope are similarly expected around 2027, though the date carries a year-scale uncertainty band. The pending scope expansion signals that Canada is moving to bring crypto-custody activity within mainstream payment-service registration rather than establishing a separate crypto-specific licensing track. No fixed timeline has been confirmed for either milestone, and this monitor will track both through the Canada Gazette publication process.

W1aLicensing, Authorisation & Market AccessConfirmed
Canada has a dual federal/non-bank track. Non-bank PSPs are not licensed but must register with the Bank of Canada under the Retail Payment Activities Act (RPAA); a separate FINTRAC registration applies to money services businesses (MSBs) under the PCMLTFA. There is no single EMI/PI licence; banks are regulated separately under the Bank Act/OSFI. RPAA risk-management and safeguarding obligations came into force on September 8, 2025, and the BoC publishes a public PSP registry.
all · compliance · analyst · board
Evidence 5 claims ›

W2ConfirmedStablecoins & Digital Money

see this theme across all jurisdictions →4 claims

Canada is transitioning from an interim provincial securities approach (CSA treating stablecoins as 'value-referenced crypto assets', securities/derivatives, under Staff Notices 21-332/21-333) to a purpose-built federal prudential regime. The Stablecoin Act, in Bill C-15 (Budget 2025 Implementation Act, Royal Assent March 26, 2026), creates Bank of Canada oversight for fiat-backed stablecoin issuers but comes into force on a day to be fixed by order, pending regulations. Federal/provincial jurisdictional interface remains unresolved.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Stablecoins & Digital Money

The Canada Stablecoin Act received Royal Assent on March 26, 2026 as Division 45 of Bill C-15, establishing a federal fiat-backed stablecoin regime that designates the Bank of Canada as registry and prudential supervisor and requires 1:1 reserve backing with at-par redemption, though the Act has not yet come into force. The Stablecoin Act supersedes the Canadian Securities Administrators' interim Value-Referenced Crypto Asset framework under Staff Notices 21-332 and 21-333, which had resulted in only one globally recognized stablecoin available in Canada. Under the Act, stablecoin issuers must hold reserves in treasury instruments on a 1:1 basis and honour redemption at par value, the safeguarding architecture the Bank of Canada will supervise. The Stablecoin Act likewise contemplates no blanket exemptions from its issuer-registration requirement once the regime becomes operative. Critics have flagged that designating the Bank of Canada as reserve-and-redemption supervisor for stablecoin issuers mirrors OSFI's role for bank deposits, blurring the prudential boundary between the two authorities.

Outlook

Bank of Canada supervision of fiat-backed stablecoin issuers under the Stablecoin Act is expected to become operative via a future order-in-council, with the regime projected to be stable after 2027. Implementing regulations for the Stablecoin Act are expected via the Canada Gazette over the next twelve to eighteen months. Proposed amendments expanding the RPAA's payment-function definition to bring digital-asset custody providers within registration scope are similarly expected around 2027, though the date carries a year-scale uncertainty band. The pending scope expansion signals that Canada is moving to bring crypto-custody activity within mainstream payment-service registration rather than establishing a separate crypto-specific licensing track.

W2Stablecoins & Digital MoneyConfirmed
Canada is transitioning from an interim provincial securities approach (CSA treating stablecoins as 'value-referenced crypto assets', securities/derivatives, under Staff Notices 21-332/21-333) to a purpose-built federal prudential regime. The Stablecoin Act, in Bill C-15 (Budget 2025 Implementation Act, Royal Assent March 26, 2026), creates Bank of Canada oversight for fiat-backed stablecoin issuers but comes into force on a day to be fixed by order, pending regulations. Federal/provincial jurisdictional interface remains unresolved.
all · compliance · analyst · board
Evidence 4 claims ›

W5ConfirmedPayment Corridor Dynamics

see this theme across all jurisdictions →4 claims

Canada's core rails are Lynx (high-value RTGS, replaced LVTS in 2021), the ACSS (retail batch), and Interac e-Transfer (account-to-account, 1.4 billion transactions in 2024). Canada has been a G7 outlier without an instant rail; the Real-Time Rail (RTR), built by Payments Canada with CGI/IBM/Interac, is targeted for 2026 with possible slip to late 2026/early 2027. Cross-border wholesale flows use SWIFT (ISO 20022 migration). Wealthsimple became the first Canadian fintech to join SWIFT.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Payment Corridor Dynamics

Canada has been a G7 outlier without an instant rail, and the Real-Time Rail (RTR) is the structural change. Payments Canada is delivering the RTR, a 24/7/365 instant clearing-and-settlement system using ISO 20022, built with CGI, IBM and Interac; testing began after the technical application build completed in Q3 2025, following a public consultation on the RTR legal framework held May 20 to July 2, 2025. The RTR is a prerequisite for Phase 2 (write access / payment initiation) of consumer-driven banking. Launch timing carries genuine uncertainty: Budget-2025 framing cited a Q3 2026 target with possible slip, while more recent reporting flags a phased Q4 2026 launch with universal participation in 2027 — the stale Q3 2026 figure should not be presented as current. Separately, on cross-border corridors, Wealthsimple became the first Canadian fintech and second non-bank fintech globally to join the SWIFT global financial messaging network, completing technical integration ahead of a client launch to improve international wire transfers, signalling widening non-bank access to cross-border correspondent messaging.

Outlook

The RTR go-live (reportedly phased Q4 2026) is the gating event for the entire competitive sequence in Canadian payments. Any further slippage cascades into open-banking and settlement-access timelines. Reconcile the launch-date framing to the most recent reporting on the next refresh.

W5Payment Corridor DynamicsConfirmed
Canada's core rails are Lynx (high-value RTGS, replaced LVTS in 2021), the ACSS (retail batch), and Interac e-Transfer (account-to-account, 1.4 billion transactions in 2024). Canada has been a G7 outlier without an instant rail; the Real-Time Rail (RTR), built by Payments Canada with CGI/IBM/Interac, is targeted for 2026 with possible slip to late 2026/early 2027. Cross-border wholesale flows use SWIFT (ISO 20022 migration). Wealthsimple became the first Canadian fintech to join SWIFT.
all · compliance · analyst · board
Evidence 4 claims ›

W13AssessedCommercial Intelligence (M&A, Investment & Product)

see this theme across all jurisdictions →5 claims

Trailing-12-month deal flow is led by Nuvei's agreed US$2.75 billion acquisition of Payoneer (announced June 2026) following Advent International's 2024 US$6.3 billion take-private of Nuvei. Other notable events: Fiserv's completed acquisition of Payfare, Repay's agreement to acquire KUBRA (~US$372M), Wealthsimple's C$536M equity raise and SWIFT membership, and CAD-stablecoin raises (Tetra Digital US$10M; Transactix CADX US$50M). Canadian fintech investment normalised to ~$2.4B across 113 deals in 2025.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Commercial Intelligence (M&A, Investment & Product)

Commercial consolidation is active and Canadian-led across the trailing window. The lead event: Canadian fintech Nuvei agreed to acquire Israeli cross-border payments company Payoneer for US$2.75 billion in cash ($7.40/share), creating a combined company with roughly US$3bn annual revenue and around US$500bn annual payment volume, announced approximately mid-June 2026 — the largest Canadian payments M&A event in the window, with Nuvei (PE-backed by Advent/CDPQ/Novacap after its 2024 US$6.3bn take-private) consolidating cross-border scale. Repay Holdings agreed to acquire KUBRA for approximately US$372 million, part of recent Canadian payments M&A that also includes Fiserv completing its acquisition of Payfare and Nomba acquiring a licensed Canadian PSP/MSB in Q2 2025. On the investment side, Wealthsimple completed a C$536 million equity raise, one of the two largest Canadian fintech investments in 2025 (alongside the US$898m PE buyout of Converge Technology Solutions), underpinning its SWIFT-membership cross-border expansion. Domestic CAD-stablecoin activity includes Tetra Digital Group's US$10 million raise (backed by Shopify, Wealthsimple and National Bank Financial) and Transactix's planned US$50 million CAD-backed stablecoin CADX with associated payment rails — all values publicly disclosed in source, with the Payfare/Nomba deal values not publicly disclosed. Canadian fintech investment normalised to roughly C$2.4bn across 113 deals in 2025 (versus C$9.9bn across 161 deals in 2024, inflated by the Nuvei buyout and Plusgrade).

Outlook

The consolidation trajectory is active. Watch for regulatory and antitrust processing of the Nuvei/Payoneer deal, continued mid-market roll-up, and CAD-stablecoin funding momentum building ahead of the Stablecoin Act coming into force. These are discrete commercial events distinct from the structural market analysis in W6 and the regulatory product-access themes in W9.

W13Commercial Intelligence (M&A, Investment & Product)Assessed
Trailing-12-month deal flow is led by Nuvei's agreed US$2.75 billion acquisition of Payoneer (announced June 2026) following Advent International's 2024 US$6.3 billion take-private of Nuvei. Other notable events: Fiserv's completed acquisition of Payfare, Repay's agreement to acquire KUBRA (~US$372M), Wealthsimple's C$536M equity raise and SWIFT membership, and CAD-stablecoin raises (Tetra Digital US$10M; Transactix CADX US$50M). Canadian fintech investment normalised to ~$2.4B across 113 deals in 2025.
all · compliance · analyst · board
Evidence 5 claims ›

W1bConfirmedConduct, Safeguarding & Promotions

see this theme across all jurisdictions →4 claims

Under the RPAA, PSPs must safeguard end-user funds and manage operational risk; the Bank of Canada published a final Safeguarding of Funds supervisory guideline (December 12, 2024). The BoC's mandate is supervisory rather than direct consumer protection. MSBs separately carry a PCMLTFA conduct/compliance-program regime (compliance officer, policies, training, KYC).

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Conduct, Safeguarding & Financial Promotions

The Consumer-Driven Banking Act also received Royal Assent in March 2026, creating a Bank of Canada-administered open-banking and data-sharing supervisory regime with phased participation beginning with large banks. The Consumer-Driven Banking Act allows the Minister of Finance to designate provincial authorities to exercise oversight functions, and establishes a federal-provincial-territorial advisory committee to manage that division of labour. Access to the open-banking regime is structured as an accreditation process for participating entities rather than a conventional licence. Retail Payment Activities Regulations section 15(2)(c) now requires registered PSPs to document how insolvency administrators are expected to handle safeguarded end-user funds, while the Bank of Canada has clarified it does not itself administer insolvency claims. This insolvency-documentation clarification is tracked as a dated procedural item rather than a standing structural change.

Outlook

No Canada-specific financial-promotion enforcement actions were surfaced this cycle, and the open-banking regime's phased rollout to large banks will be the primary conduct-side marker to watch.

W1bConduct, Safeguarding & PromotionsConfirmed
Under the RPAA, PSPs must safeguard end-user funds and manage operational risk; the Bank of Canada published a final Safeguarding of Funds supervisory guideline (December 12, 2024). The BoC's mandate is supervisory rather than direct consumer protection. MSBs separately carry a PCMLTFA conduct/compliance-program regime (compliance officer, policies, training, KYC).
all · compliance · analyst · board
Evidence 4 claims ›

W3ConfirmedOperational Resilience & Critical Infra

see this theme across all jurisdictions →3 claims

Operational resilience for non-bank PSPs runs through the RPAA's operational-risk-management and incident-response obligations (in force September 8, 2025), supervised by the Bank of Canada. Systemic payment infrastructure (Lynx) is designated under the Payment Clearing and Settlement Act and held to CPMI-IOSCO Principles for Financial Market Infrastructures. There is no DORA-equivalent single op-res statute; resilience is split across RPAA (PSPs), PCSA/FMI oversight, and OSFI for banks.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Operational Resilience & Critical Infrastructure

Canada lacks a single DORA-equivalent operational-resilience statute; resilience is split across multiple regimes. Lynx, Canada's high-value payment system, is designated as a systemically important payment system under the Payment Clearing and Settlement Act (PCSA), held to the CPMI-IOSCO Principles for Financial Market Infrastructures, with legal protection for payment finality and placement under the Bank's resolution regime. The broader resilience picture is fragmented across the RPAA (covering non-bank PSPs, whose operational-risk and incident-response obligations came into force September 8, 2025), PCSA/FMI oversight (Lynx, CDSX, CDCS), and OSFI (banks). This split is the analytical spine of the module: there is no unified op-res statute carrying obligations across bank and non-bank actors alike.

Outlook

The module is stable. The principal watch item is whether the proliferation of new regimes — RPAA, the new CDBA, the Stablecoin Act — drives any consolidation or harmonisation of operational-resilience expectations, or whether fragmentation persists as the default.

W3Operational Resilience & Critical InfraConfirmed
Operational resilience for non-bank PSPs runs through the RPAA's operational-risk-management and incident-response obligations (in force September 8, 2025), supervised by the Bank of Canada. Systemic payment infrastructure (Lynx) is designated under the Payment Clearing and Settlement Act and held to CPMI-IOSCO Principles for Financial Market Infrastructures. There is no DORA-equivalent single op-res statute; resilience is split across RPAA (PSPs), PCSA/FMI oversight, and OSFI for banks.
all · compliance · analyst · board
Evidence 3 claims ›

W4ConfirmedScheme & Network Compliance

see this theme across all jurisdictions →3 claims

Card-scheme economics are governed by negotiated interchange-reduction agreements with Visa and Mastercard (effective October 19, 2024), a revised federal Code of Conduct for the Payment Card Industry (effective October 30, 2024), and Interac's domestic debit rules including a surcharge cap. Canada has historically had among the world's highest interchange; small-business credit interchange now targets an in-store weighted average of 0.95%.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Scheme & Network Compliance

Canada historically had among the world's highest interchange, and the negotiated reductions reframe domestic card-scheme economics. Visa and Mastercard cut domestic consumer credit interchange for qualifying small businesses to an in-store annual weighted-average of 0.95% (with online consumer-credit interchange cut 10bps), effective October 19, 2024, alongside a revised Code of Conduct for the Payment Card Industry effective October 30, 2024. The reductions are expected to save eligible small businesses around C$1bn over five years; small-business thresholds apply (Visa under $300k, Mastercard under $175k in sales), and the Code shortened complaint response to 20 business days. On the debit side, Interac imposes a point-of-sale surcharge cap of $0.25 per transaction (effective January 26, 2024), prohibits surcharging on remote Interac Mobile Debit, and increased its Debit Switch Fee to $0.02099 effective November 1, 2025 — the latter sourced from a Tier-3 vendor document and carried as a dated entry.

Outlook

The scheme-rule changes are established. Watch for downstream effects of the interchange cuts on scheme behaviour beyond cards, and for any further Interac fee adjustments tied to the broader rail modernisation.

W4Scheme & Network ComplianceConfirmed
Card-scheme economics are governed by negotiated interchange-reduction agreements with Visa and Mastercard (effective October 19, 2024), a revised federal Code of Conduct for the Payment Card Industry (effective October 30, 2024), and Interac's domestic debit rules including a surcharge cap. Canada has historically had among the world's highest interchange; small-business credit interchange now targets an in-store weighted average of 0.95%.
all · compliance · analyst · board
Evidence 3 claims ›

W6AssessedIndustry Structure & Commercial

see this theme across all jurisdictions →4 claims

Canada's banking market is highly concentrated — the Big Six hold around 93% of banking assets — creating structural friction the RTR and open banking aim to ease. Interac is a for-profit network owned by Canada's big banks and other financial-services firms. Payments Canada (non-profit) owns the core rails; membership is being expanded to RPAA-registered PSPs. The fintech/PSP layer is growing, with around 1,500 PSPs supervised by the Bank of Canada under the RPAA as of September 2025.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Industry Structure & Commercial

Market structure frames why the access reforms matter. Canada's Big Six banks hold around 93% of banking assets, creating structural friction that the RTR and open banking aim to ease. As of September 2025, roughly 1,500 PSPs were supervised by the Bank of Canada under the RPAA, and Interac amended its rules to allow RPAA/FINTRAC-registered fintechs to join e-Transfer. The combination of high concentration, low switching intent and a growing non-bank PSP population (~1,500) frames open-banking Phase 2 write access as the principal lever for competitive shift. This figure is sourced at Tier-3 but widely cited; the bank/non-bank asymmetry it captures is the central analytical point.

Outlook

The module is stable but the underlying dynamic is loaded: whether the RTR and Phase 2 write access actually shift competitive share away from the concentrated incumbent base, or whether the non-bank layer grows in number without materially eroding the Big Six asset position, will define the next several cycles.

W6Industry Structure & CommercialAssessed
Canada's banking market is highly concentrated — the Big Six hold around 93% of banking assets — creating structural friction the RTR and open banking aim to ease. Interac is a for-profit network owned by Canada's big banks and other financial-services firms. Payments Canada (non-profit) owns the core rails; membership is being expanded to RPAA-registered PSPs. The fintech/PSP layer is growing, with around 1,500 PSPs supervised by the Bank of Canada under the RPAA as of September 2025.
all · compliance · analyst · board
Evidence 4 claims ›

W7HighLegal & Litigation

see this theme across all jurisdictions →3 claims

The defining payments litigation is the Canadian credit-card interchange price-fixing class actions against Visa, Mastercard and issuing banks, settled for C$188 million covering merchants who accepted Visa/Mastercard credit cards March 23, 2001 – September 2, 2021, with Visa/Mastercard also agreeing to modify no-surcharge rules. FINTRAC enforcement has sharply escalated, with record AMPs in 2025 against crypto/MSB platforms (Cryptomus C$176.96M; KuCoin C$19.55M).

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Legal & Litigation

Two litigation/enforcement threads define the module. First, a C$188 million class-action settlement resolved credit-card interchange price-fixing claims covering merchants who accepted Visa and Mastercard credit cards between March 23, 2001 and September 2, 2021, with Visa and Mastercard agreeing to modify their no-surcharge rules — underpinning the legal basis for merchant surcharging rights in Canada and connecting to the W4 interchange and Code-of-Conduct regime. Multi-province class actions ran in BC, AB, SK, QC and ON. Second, FINTRAC escalated enforcement with record AMPs: C$19,552,000 against Peken Global (KuCoin) in July 2025, a C$176,960,190 penalty against Xeltox Enterprises (Cryptomus) in October 2025 (the largest ever, for 2,593 instances across six violation categories), and C$536,853.35 against MP Technology Services, a MoonPay subsidiary, in December 2025. These are historical (Jul-Dec 2025) enforcement actions carried as standing-position context with a temporal caveat, not current-week developments; a Cryptomus Federal Court appeal (Nov 2025) is not captured in the underlying research, and the original illicit-finance analysis is routed to FIM.

Outlook

The interchange settlement is stable standing context. On enforcement, the appeal status of the Cryptomus AMP and the broader trajectory of crypto/MSB enforcement should be tracked on the next refresh, with temporal framing maintained so historical actions are not read as current developments.

W7Legal & LitigationHigh
The defining payments litigation is the Canadian credit-card interchange price-fixing class actions against Visa, Mastercard and issuing banks, settled for C$188 million covering merchants who accepted Visa/Mastercard credit cards March 23, 2001 – September 2, 2021, with Visa/Mastercard also agreeing to modify no-surcharge rules. FINTRAC enforcement has sharply escalated, with record AMPs in 2025 against crypto/MSB platforms (Cryptomus C$176.96M; KuCoin C$19.55M).
all · compliance · analyst · board
Evidence 3 claims ›

W8HighMerchant Acquiring & Risk

see this theme across all jurisdictions →3 claims

Acquiring is governed commercially by the revised Code of Conduct for the Payment Card Industry (processor switching, complaint timelines) and scheme rules. Merchant surcharging is permitted up to a cap following the class-action settlement. Direct local acquiring is expanding (Nuvei went live as a direct acquirer in Canada in June 2025). Private-ABM acquirers were newly brought into the FINTRAC/PCMLTFA reporting-entity regime effective October 1, 2025.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Merchant Acquiring & Risk

The acquiring perimeter is expanding on both regulatory and commercial fronts. Effective October 1, 2025, entities providing acquirer services for private ABMs must register as MSBs, implement a compliance program, verify client identities, maintain records and report prescribed transactions, addressing Cullen Commission (2022) cash-laundering risks. This brings a previously under-supervised acquiring sub-segment — private ATMs — into the PCMLTFA reporting-entity perimeter, with the revised Code of Conduct (October 30, 2024) governing processor switching and complaint timelines for acquirers. Commercially, Nuvei went live as a direct payment acquirer in Canada on June 30, 2025, allowing Canadian businesses to process domestic transactions locally without third-party processors, improving approval rates and interchange-cost predictability — a dated entry of clear commercial significance.

Outlook

This is a methodology-flagged under-indexed area: the private-ABM PCMLTFA expansion is evidenced but thinly sourced (Tier-2 law-firm only), and acquirer stress, chargeback dynamics and high-risk MCC exposure in Canada are under-covered. Prioritise deeper sourcing on the next refresh.

W8Merchant Acquiring & RiskHigh
Acquiring is governed commercially by the revised Code of Conduct for the Payment Card Industry (processor switching, complaint timelines) and scheme rules. Merchant surcharging is permitted up to a cap following the class-action settlement. Direct local acquiring is expanding (Nuvei went live as a direct acquirer in Canada in June 2025). Private-ABM acquirers were newly brought into the FINTRAC/PCMLTFA reporting-entity regime effective October 1, 2025.
all · compliance · analyst · board
Evidence 3 claims ›

W9ConfirmedProduct Innovation & Market Development

see this theme across all jurisdictions →4 claims

Two flagship build-outs define the innovation agenda: the Real-Time Rail (instant payments with built-in centralized fraud controls, Confirmation of Payee) and the consumer-driven banking (open banking) framework. The new Consumer-Driven Banking Act (replacing the 2024 CDBA via Bill C-15, Royal Assent March 26, 2026) shifts oversight from FCAC to the Bank of Canada, with Phase 1 read-only access and Phase 2 write access (payment initiation) targeted for mid-2027 contingent on the RTR being live.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Product Innovation & Market Development

Open-banking governance has been re-based and centralised. Bill C-15 received Royal Assent on March 26, 2026, repealing the original 2024 Consumer-Driven Banking Act and replacing it with a comprehensive new framework; oversight shifts from the FCAC to the Bank of Canada, which supervises participants, maintains the public registry and evaluates accreditation. Phase 2 write access (payment initiation) is targeted for mid-2027, contingent on the RTR being live. Centralising governance in the Bank of Canada leverages its RPAA role, and Phase 2 write access is the principal competitive lever — but its dependence on the RTR being live and in widespread use is explicit. The RTR is being built with day-one fraud controls (a fraud scoring engine, Confirmation of Payee, and integrated fraud reporting), and RTR access requires RPAA registration, so the open-banking, instant-rail and non-bank-registration layers are tightly coupled across bank and non-bank participants.

Outlook

The framework is enacted but Phase 2 is adopted-pending. The mid-2027 write-access target hinges entirely on RTR delivery; any slippage in the rail flows directly into this timeline. This is the central horizon item (wpm-reg-2) for the module.

W9Product Innovation & Market DevelopmentConfirmed
Two flagship build-outs define the innovation agenda: the Real-Time Rail (instant payments with built-in centralized fraud controls, Confirmation of Payee) and the consumer-driven banking (open banking) framework. The new Consumer-Driven Banking Act (replacing the 2024 CDBA via Bill C-15, Royal Assent March 26, 2026) shifts oversight from FCAC to the Bank of Canada, with Phase 1 read-only access and Phase 2 write access (payment initiation) targeted for mid-2027 contingent on the RTR being live.
all · compliance · analyst · board
Evidence 4 claims ›

W10HighConsumer Protection & APP Fraud

see this theme across all jurisdictions →4 claims

Canada has NO nationwide statutory APP-fraud reimbursement regime equivalent to the UK PSR mandatory reimbursement; e-Transfer is explicitly not covered by 'zero liability'. Credit-card liability is capped at $50 under Bank Act s.627.33. The voluntary EFT Code of Practice is the enforceable floor for deposit-account fraud, with Interac promoting a discretionary Zero Liability Policy. OBSI became the sole external complaints body for all banks on November 1, 2024. Budget 2025/Bill C-15 proposes Bank Act anti-fraud duties; Quebec's Bill 72 adds deposit-account liability limits.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Consumer Protection & APP Fraud

A material consumer-protection gap persists relative to the UK model. Canada has no nationwide statutory APP-fraud reimbursement regime equivalent to the UK PSR mandatory reimbursement; Interac e-Transfer is explicitly not covered by zero liability; credit-card liability is capped at $50 under Bank Act s.627.33; the voluntary EFT Code of Practice is the enforceable floor; and OBSI has been the sole external complaints body for all banks since November 1, 2024. The cited contrast is the UK regime offering up to GBP85,000 reimbursement in force since October 7, 2024. Canadians lost over C$638m to fraud in 2024. On the policy front, Budget 2025/Bill C-15 proposes Bank Act anti-fraud duties (FRFI anti-fraud policies, express consent for certain features, anonymized fraud-data reporting to FCAC), and Quebec Bill 72 adds deposit-account liability limits as a sub-national divergence.

Outlook

The proposed Bank Act anti-fraud duties (horizon wpm-reg-4) remain at the proposal stage and would partially narrow the gap, but no statutory APP-fraud reimbursement equivalent is on the immediate horizon. Sub-national divergence — Quebec Bill 72 and the federal/provincial interface — is under-indexed and should be mapped more fully on the next refresh.

W10Consumer Protection & APP FraudHigh
Canada has NO nationwide statutory APP-fraud reimbursement regime equivalent to the UK PSR mandatory reimbursement; e-Transfer is explicitly not covered by 'zero liability'. Credit-card liability is capped at $50 under Bank Act s.627.33. The voluntary EFT Code of Practice is the enforceable floor for deposit-account fraud, with Interac promoting a discretionary Zero Liability Policy. OBSI became the sole external complaints body for all banks on November 1, 2024. Budget 2025/Bill C-15 proposes Bank Act anti-fraud duties; Quebec's Bill 72 adds deposit-account liability limits.
all · compliance · analyst · board
Evidence 4 claims ›

W11HighAML/CFT & Financial Crime (Sentinel.gi-fed)

Sentinelsee this theme across all jurisdictions →6 claims

sentinel: Canada's AML/CFT regime is anchored in the PCMLTFA, supervised by FINTRAC as both financial intelligence unit and AML/ATF supervisor, applying a FATF-aligned risk-based approach. Budget 2025/Bill C-12 and the Budget 2025 Implementation Act (Royal Assent March 26, 2026) sharply toughen the regime: greatly increased AMP caps, mandatory compliance agreements, compliance orders, universal FINTRAC enrolment, and FINTRAC joining the Financial Institutions Supervisory Committee. Enforcement escalated markedly in 2025, concentrated in the crypto/MSB sector.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

AML/CFT & Financial Crime (Sentinel-fed)

This module is sourced from the Sentinel feed; the intelligence below is attributed to Sentinel and the substantive illicit-finance analysis is conducted in FIM, not here. Per Sentinel, the Budget 2025 Implementation Act (Royal Assent March 26, 2026) sharply increases AMP caps (up to $40,000 minor, $4,000,000 serious, with higher very-serious tiers), elevates certain compliance-program violations to very serious, requires compliance programs to be reasonably designed, risk-based and effective, mandates universal section-5 enrolment with a publicly accessible roll, introduces compliance orders, and requires compliance agreements wherever an AMP is imposed. FINTRAC has also joined the Financial Institutions Supervisory Committee, signalling tighter supervisory coordination. The payments-relevant read is that AML compliance cost and enforcement exposure rise materially for reporting entities — especially non-bank MSBs and VASPs, and prospectively stablecoin issuers deemed to deal in virtual currencies. The 2025 enforcement escalation was concentrated in the crypto/MSB sector.

Outlook

The original illicit-finance analysis stays in FIM and is routed via cross-monitor flags. Within WPM, the watch item is the downstream compliance-cost impact on the non-bank PSP and stablecoin-issuer perimeter as universal enrolment and the raised AMP caps bite.

W11AML/CFT & Financial Crime (Sentinel.gi-fed)High
sentinel: Canada's AML/CFT regime is anchored in the PCMLTFA, supervised by FINTRAC as both financial intelligence unit and AML/ATF supervisor, applying a FATF-aligned risk-based approach. Budget 2025/Bill C-12 and the Budget 2025 Implementation Act (Royal Assent March 26, 2026) sharply toughen the regime: greatly increased AMP caps, mandatory compliance agreements, compliance orders, universal FINTRAC enrolment, and FINTRAC joining the Financial Institutions Supervisory Committee. Enforcement escalated markedly in 2025, concentrated in the crypto/MSB sector.
all · compliance · analyst · board
Evidence 6 claims ›

W12ConfirmedCorrespondent Banking, Settlement & Access

see this theme across all jurisdictions →4 claims

Final settlement for Lynx, ACSS and the forthcoming RTR occurs through settlement accounts on the books of the Bank of Canada, providing settlement finality in central bank money. To hold a settlement account, applicants must be (or be eligible to become) a Payments Canada member, be subject to comprehensive risk-based Canadian prudential regulation (OSFI or equivalent provincial), meet an investment-grade (BBB-) credit assessment, pledge eligible collateral via CDSX, and confirm financial-crime risk controls. Membership eligibility is being expanded to RPAA-registered PSPs.

No periodic updates yet · baseline brief is current.

Read the full sub-brief

Correspondent Banking, Settlement & Access

Correspondent-style settlement access in Canada continues to hinge on a bank-versus-non-bank asymmetry that this cycle's developments only partly narrow. Expansion of Real-Time Rail eligibility to RPAA-registered non-bank payment service providers is advancing through the Department of Finance, though no fixed date has been set; access to a Bank of Canada settlement account and Payments Canada membership continues to depend on completing RPAA registration first.

Outlook

No confirmed forward date exists for the RTR eligibility expansion, so non-bank settlement access will remain contingent on the pace of RPAA registration uptake rather than a published milestone.

W12Correspondent Banking, Settlement & AccessConfirmed
Final settlement for Lynx, ACSS and the forthcoming RTR occurs through settlement accounts on the books of the Bank of Canada, providing settlement finality in central bank money. To hold a settlement account, applicants must be (or be eligible to become) a Payments Canada member, be subject to comprehensive risk-based Canadian prudential regulation (OSFI or equivalent provincial), meet an investment-grade (BBB-) credit assessment, pledge eligible collateral via CDSX, and confirm financial-crime risk controls. Membership eligibility is being expanded to RPAA-registered PSPs.
all · compliance · analyst · board
Evidence 4 claims ›

Standing watch

3 tracked developments
WT7
WT3
WT1

Key judgments

3 judgments
W1aHigh
Canada's 2026 payments-regulatory build-out (RPAA safeguarding regime, Stablecoin Act, Consumer-Driven Banking Act) consolidates the Bank of Canada as the central supervisory node across traditional PSP, open-banking, and stablecoin activity, raising boundary questions with OSFI's prudential mandate.
Impact: HIGH
4 supporting claims
Evidence 4 claims ›
W1aAssessed
The pending RPAA scope expansion to cover custodied wallet/digital-asset-custody providers signals Canada moving toward bringing crypto-custody activity within mainstream PSP registration rather than a separate crypto-specific licensing track.
Impact: ELEVATED
1 supporting claim
Evidence 1 claim ›
W12High
Real-Time Rail access remains gated behind RPAA registration, meaning non-bank PSP settlement-account access in Canada continues to depend on completing the Bank of Canada's supervisory registration process first.
Impact: ELEVATED
1 supporting claim
Evidence 1 claim ›

What changed this cycle

5 changes this cycle
domain W1aChanged
RPAA safeguarding regime fully in force; proposed scope expansion to digital-asset custody.
New findings this cycle materially update W1a standing position.
Detail ›
domain W2New
Canada Stablecoin Act enacted, establishing a new federal stablecoin regime.
First-time enactment of a comprehensive stablecoin framework this cycle.
Detail ›
domain W1bNew
Consumer-Driven Banking Act establishes a new open-banking supervisory regime.
New legal instrument enacted this cycle.
Detail ›
domain W12Changed
RTR eligibility expansion to RPAA-registered PSPs advancing.
Incremental regulatory development this cycle.
Detail ›
jurisdiction CAChanged
Regulatory direction assessed as tightening given cumulative 2026 build-out.
Multiple concurrent legal instruments enacted or advancing this cycle.
Detail ›

Risk posture

1 tracked
CAEscalating
Comprehensive 2026 build-out: RPAA safeguarding regime fully in force, Stablecoin Act enacted, Consumer-Driven Banking Act creates an open-banking regime, and RTR access expansion is advancing for non-bank PSPs.
Confidence: Confirmed
Detail ›
World Payments jurisdiction data · Canada (CA) · schema world-payments-v1 · baseline wpm-2026-07-07. Data-driven from the published jurisdiction contract — all values shown are read directly from the pipeline output (server-rendered).

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.