Canada’s biggest banks and major telecoms launch shared anti fraud exchange to disrupt recovery and account takeover schemes

Canada’s major banks and the country’s largest telecom providers announced the launch of a shared platform today intended to make it harder for fraud rings to reuse the same tactics across carriers and financial institutions. The initiative, called the Cross Sector Anti Fraud Exchange or CSAFE, went live on October 14, 2026.

What was announced and who is participating

The platform was developed and will be operated by EnStream, a Toronto based joint venture owned by Canadian wireless carriers. Founding participants named in the launch include BMO, CIBC, Desjardins, National Bank, RBC, Scotiabank, and the carrier groups Bell, Rogers and TELUS. The group says the platform was piloted with CIBC and Rogers before rolling out more broadly.

CSAFE is designed to aggregate and standardize confirmed fraud intelligence contributed by each participant. That data is enriched and shared through a governed, secure environment so member organisations can act on cross sector patterns they would not otherwise see when operating in isolation.

Why banks and telcos say a cross sector approach is necessary

Fraud actors frequently exploit the gap between telecom and financial data. Carriers can see device identifiers, SIM changes and phone routing that indicate account takeover attempts or SIM swap operations. Banks can see account openings, unusual payments and chargeback activity. Criminals use a mix of social engineering, SIM swapping and compromised identity credentials to move money quickly and then withdraw funds through other services.

CSAFE’s stated purpose is to connect those vantage points. By sharing confirmed incidents, participants aim to identify repeat fraud earlier, reduce the time fraudsters have to monetize stolen funds and reduce the number of victims who are re targeted in so called recovery schemes where criminals pose as investigators or regulators and ask victims to pay to recover previously lost money.

How the exchange will operate and governance safeguards

The founding announcement says each organisation remains responsible for its own decisions; the platform provides intelligence not automated takedowns. Data shared on CSAFE will be limited to confirmed fraud signals, and each contribution will be subject to a governance framework the partners established. That framework covers how data is ingested, how it is enriched and how members may use the intelligence to block, flag or investigate suspicious activity.

EnStream says the platform is built to scale, and that additional financial, technology and service providers will be invited to join over time to broaden the collective’s visibility. The founding group emphasised that participation is voluntary and that institutions will continue to operate under their existing regulatory and privacy obligations.

What this means for victims and for privacy

Victims could see practical benefits if the exchange succeeds. Faster cross sector sharing of confirmed fraud could shorten the window in which criminals move money, helping banks and carriers to detect and freeze activity sooner. That may reduce the number of people who are contacted later in recovery scams and the overall volume of repeat victimisation.

At the same time, the project raises understandable privacy and oversight questions. The launch materials emphasise that only confirmed fraud intelligence is shared, and that each participant must use the data consistent with applicable laws and internal rules. The initial set of participants includes several big banks and all three major carriers, which gives the platform broad coverage, but also concentrates sensitive signals within a single operating environment.

The founding announcement states the platform operates within a defined governance framework. The specifics of that framework were not published in full in the launch notice, and experts said transparency on data minimisation, retention, redress and independent oversight will be important for public trust as the exchange grows.

Context and why today’s launch matters

Fraud in Canada has continued to evolve, with recovery schemes, impersonation of regulators and SIM swap attacks among the most damaging trends. Regulators and law enforcement have repeatedly highlighted the challenge posed by cross border perpetrators and by fraud that moves across sectors. Industry led data sharing has been proposed as one of the pragmatic ways to interrupt criminal flows without relying on international enforcement alone.

By bringing banks and telecoms together in a single, governed platform, CSAFE aims to reduce the operational blind spots fraudsters exploit. If effective, the exchange could become a template for multi sector cooperation in other countries where similar scams rely on the same cross sector gaps.

What to watch next

Key indicators to watch are how quickly new members join, whether the platform prevents repeat victimisation in pilot measurements, and how regulators and privacy watchdogs assess the governance and controls. Observers will also look for published metrics on incidents detected, time to action and any independent audits of data use and protection.

For Canadians, the immediate message from the coalition is simple: coordinated sharing between banks and carriers can catch repeat scams earlier. For policy makers and consumer advocates, the launch raises a second, parallel question: whether the operational gains come with sufficient safeguards to protect personal data and to ensure accountability as the exchange scales.