Canada’s proposed consumer-driven banking framework, often called open banking, is usually described as a way to give consumers more control over their financial information. It could also become an important mortgage fraud-prevention tool.
The federal government’s proposed Consumer-Driven Banking Regulations would create a consent-based framework allowing consumers and businesses to direct participating financial institutions to share prescribed financial data through secure, standardized digital connections. The proposed regulations were published for consultation in the Canada Gazetteon June 27, 2026.
The consultation period has closed, but the regulations are not yet in force. As of September 14, 2026, final regulations had not been published.
The proposal is not a mortgage-underwriting regime. It does not require a lender to approve a mortgage, change lending criteria, or replace existing provincial mortgage-broker regulation. It is a framework for the secure sharing of financial data, with consumer consent, between accredited participants.
That distinction matters. Open banking will not solve every form of mortgage fraud. It may, however, change the quality of information available to brokers and lenders when assessing income, down payment, debt, and other elements of a mortgage application.
From Consumer Choice to Fraud Prevention
The stated policy objectives behind consumer-driven banking include consumer choice, competition, innovation, privacy, security, and reduced reliance on screen scraping.
Screen scraping occurs when a consumer provides online-banking credentials to a third-party service so that it can access account information. The proposed framework is intended to replace that practice with secure application programming interfaces, commonly called APIs.
An API is a controlled digital connection between systems. Instead of asking a borrower to download and submit bank statements, a participating lender could ask the borrower to authorize direct access to relevant account information from the borrower’s financial institution.
The proposed first phase is read-only. It would not allow a third party to move money, change account details, open or close a mortgage, or alter information held by the financial institution.
For mortgage underwriting, the significance is not simply speed. It is that the lender may be able to receive data directly from its source rather than relying entirely on documents supplied by the borrower.
What Mortgage Information May Be Shared?
The proposed data scope includes mortgages and other loans. Depending on the final regulations and the products involved, a borrower could authorize the sharing of:
- identity and profile information;
- account and mortgage identifiers;
- loan terms, interest rates, fees, and authorizations;
- current and historical balances;
- completed, pending, and pre-authorized transactions; and
- product-offering information.
The proposal generally limits the mandatory historical lookback for specified balances, transactions, and product data to 24 months.
Some information would remain outside the required data scope. In particular, “derived data” is excluded. This may include proprietary lender information that has been enhanced to create additional commercial value, such as an internal credit score, risk rating, underwriting recommendation, or proprietary transaction categorization.
The boundary between shareable raw data and excluded derived data remains an important issue for the final regulations and supporting guidance.
A Potential Response to Income Fraud
Much of the current policy discussion around mortgage fraud has focused on CRA-confirmed income information.
That focus is understandable. Direct access to tax information could make it more difficult to use fake T4s, altered Notices of Assessment, inflated employment income, or questionable self-employment records.
However, tax information is usually historical. It may show what a borrower reported earning in a prior tax year, but it may not show a recent job loss, reduced hours, irregular deposits, new debt, or a significant change in financial circumstances.
Consumer-directed banking may provide more current evidence.
For example, a borrower may claim annual employment income of $120,000. Verified account data may show regular payroll deposits consistent with that claim. It may also show irregular deposits, a lower income pattern, recently discontinued employment income, or activity that requires clarification.
That does not establish fraud. There may be legitimate explanations, including a new job, bonuses, commissions, a payroll change, or deposits made into another account. But it can give the broker or lender a reason to investigate before relying on an income figure.
Down Payment and Source-of-Funds Review
Open banking may also assist with one of the most sensitive parts of many mortgage files: the down payment.
Lenders need to know whether funds come from savings, a gift, the sale of an asset, or another legitimate source. They also need to identify where a borrower may be using undisclosed borrowing, a short-term loan, private financing, or temporary transfers to create the appearance of available funds.
Direct account information may reveal:
- recent unsecured loan proceeds;
- large deposits requiring explanation;
- third-party transfers;
- circular movement of funds between accounts;
- recurring repayment obligations; and
- last-minute transactions inconsistent with the stated source of the down payment.
None of these factors proves fraud. Large deposits may reflect an inheritance, family support, a property sale, a business distribution, or another legitimate event. The point is not to turn every unusual transaction into a suspected fraud file. It is to provide more reliable information for reasonable follow-up.
Undisclosed Debt May Be Easier to Identify
Credit bureaus remain a central part of mortgage underwriting, but they do not capture every liability immediately or completely.
A recently opened loan, private debt, buy-now-pay-later obligation, short-term loan, informal repayment arrangement, or new line of credit may not yet be visible through a credit bureau.
Transaction data may identify recurring payments that warrant further review, including:
- loan and line-of-credit payments;
- private lender payments;
- payday or short-term lending activity;
- buy-now-pay-later obligations; and
- recurring transfers to creditors not disclosed in the application.
That may help lenders assess debt-service ratios using a more complete picture of the borrower’s current obligations.
What About Occupancy Fraud?
Open banking will not prove occupancy fraud, title fraud, identity theft, or property-value manipulation. Those risks require separate controls.
However, transaction history may provide useful context. It may reveal rental income, rent payments, multiple property-related expenses, or other activity that is inconsistent with the borrower’s stated circumstances.
The information should be treated carefully. It is a prompt for questions, not a conclusion. A lender or broker should not assume misconduct from a transaction pattern without understanding the facts.
Borrower Consent Remains Central
The proposed framework is not intended to allow lenders or brokers to access bank data without the borrower’s permission.
The borrower would need to provide express consent. The requesting participant would need to explain the information sought and its intended use in clear, simple, and non-misleading terms. Consent could not be bundled with unrelated purposes, would generally last no more than 12 months, and could be withdrawn.
The proposal also contemplates a consumer dashboard, records of consent, data-use limits, deletion rights in specified circumstances, security safeguards, and breach-notification requirements where there is a real risk of significant harm.
Borrowers should still be careful. Before authorizing access, they should know who is requesting the information, why it is needed, what data will be shared, how long consent lasts, and whether the organization is an accredited participant.
The framework is not yet operating. Borrowers should not assume that a request for online-banking credentials is part of Canada’s future consumer-driven banking system.
What This Means for Mortgage Brokers
Mortgage brokers and brokerages are not automatically brought into the framework just because they arrange mortgages.
A brokerage would have direct obligations only if it becomes an accredited participating entity or carries out regulated consent, authentication, or data-transfer functions as an accredited third-party service provider.
Most brokerages will likely first experience consumer-driven banking through participating lenders. Lender portals may change. Brokers may be asked to direct borrowers to a secure lender-controlled authentication process rather than collect bank statements manually. Lenders may also require clearer information about the source, consent status, and permitted use of financial data submitted with an application.
Brokers should expect to review:
- borrower consent and disclosure practices;
- privacy policies and data-handling procedures;
- technology-provider and aggregator arrangements;
- procedures where a borrower withdraws consent during an application;
- lender contracts and responsibility for inaccurate, incomplete, or misused data; and
- how consumer-driven banking records fit with existing provincial client-file and FINTRAC obligations.
Consumer-directed banking will not replace broker duties relating to suitability, disclosure, fraud prevention, privacy, or file documentation. Nor will it replace AML obligations. Mortgage brokers, lenders, and administrators that are FINTRAC reporting entities must continue to maintain their own compliance programs, records, client-identification processes, and reporting controls.
Not Every Lender Will Participate
Participation will depend on the lender’s legal category and whether it chooses, or is required, to join the framework.
Certain Schedule I banks may eventually be required to participate once named by ministerial order. Other banks, federal trust and loan companies, provincial credit unions, and caisses may be eligible to seek accreditation.
Mortgage investment corporations, private lenders, fintech lenders, and mortgage brokerages are not automatically covered merely because they lend or arrange mortgages. They may be able to seek accreditation, but would need to assess the business case, including technology, cybersecurity, insurance, recordkeeping, reporting, and supervisory requirements.
The benefits may therefore appear first for borrowers dealing with larger banks and other participating institutions. Mortgage-account data is also expected to be introduced after the initial rollout for deposit and payment accounts.
Open Banking Is a Tool, Not a Substitute for Judgment
The strongest mortgage fraud-prevention model will combine several sources of information:
| Source | What It May Help Verify |
|---|---|
| CRA information | Reported income and tax information |
| Consumer-directed banking data | Current cash flow, deposits, debt payments, and account activity |
| Credit bureau information | Reported liabilities, credit history, and repayment behaviour |
| Traditional underwriting evidence | Employment, property, down payment, and transaction-specific facts |
A fraudster may be able to manipulate one document or one source. It is much more difficult to present a false financial picture where tax information, direct bank-account data, credit information, and supporting documents must align.
The proposed consumer-driven banking framework will not eliminate mortgage fraud. It will not replace careful underwriting, identity verification, source-of-funds review, property due diligence, title controls, or professional judgment.
It could, however, make a meaningful difference by moving mortgage underwriting away from documents that can be altered and toward information obtained directly from the source.
That may be one of the most important practical benefits of open banking for Canada’s mortgage market.
