National Bank of Canada deploys Sardine AI risk platform, leads $25M extension round

National Bank of Canada has signed a multi-year deal to roll out Sardine's agentic AI risk platform across its retail, commercial, and wealth divisions, and is simultaneously leading a $25 million Series C extension that takes the San Francisco fraud-prevention company's total funding to $170 million. The dual move, announced on 20 May 2026, follows a live evaluation in which Sardine improved fraud detection rates and cut false positives at Canada's sixth-largest bank, a result significant enough to convert a pilot into both an enterprise contract and a deeper equity bet.

For National Bank of Canada, which reported $606 billion in assets as at 31 January 2026 and serves roughly 2.7 million clients, the rollout means device intelligence and real-time risk scoring will now sit underneath authentication and transaction flows for personal banking, commercial accounts, and wealth management. The $25 million extension is being led by NAventures, the bank's corporate venture arm, which had already held a position in Sardine from earlier rounds.

Why is a Tier 1 Canadian bank betting on agentic AI for fraud?

The short answer: the legacy rules-based fraud stack is buckling under AI-generated attacks, and false-positive friction has become a measurable revenue problem. Sardine's pitch, that "agentic" software can investigate alerts, score transactions, and triage cases the way a human analyst would, has now been validated under production conditions at a systemically important Canadian bank.

That matters because Canadian Tier 1s have historically been conservative buyers of third-party risk technology, preferring in-house builds or large incumbent vendors. National Bank's decision to go with a five-year-old startup, after what NAventures partner Joshuah Lebacq described as an extensive evaluation, signals a meaningful shift in vendor risk appetite among Canada's six systemically important banks.

The bank's evaluation focused on two metrics that finance teams care about: catch rate and false-positive ratio. A false positive in fraud means a legitimate customer is blocked, frozen, or forced through step-up authentication they did not need, with documented impact on conversion, deposit retention, and net promoter scores. Sardine's reported improvement on that ratio is the operational reason the contract was signed.

How big is Sardine and who else uses it?

The extension round pushes Sardine's total raised to $170 million, on top of the $70 million Series C closed in February 2026 led by Activant Capital. The company's fraud consortium now spans more than 6 billion profiled devices, 800 million consumers, and 3 million businesses, a data network that grows in value with each new bank that plugs in.

Existing customers include FIS, Intuit, Edward Jones, Checkout.com, GoDaddy, and ZoomInfo. The National Bank of Canada win is Sardine's most visible bank-side deployment to date and the first publicly announced rollout at a Canadian D-SIB.

What does the rollout actually cover?

Three lines of business: personal and commercial banking, wealth management, and capital markets-adjacent flows. Device intelligence sits at session start, scoring whether the device, behaviour, and network signal match the claimed customer. Real-time risk scoring runs at transaction level, flagging high-risk movements before settlement. Both feed into Sardine's agent layer, which automates the case-handling work that has traditionally been the bottleneck in fraud and AML operations.

For the bank's wealth segment, the move is notable. Wealth platforms are increasingly targeted by account-takeover and social-engineering attacks aimed at larger balances, and most wealth managers still run lighter fraud controls than retail banking. Standardising on a single risk platform across retail, commercial, and wealth removes a fragmentation problem that fraudsters routinely exploit.

Why this matters to FinanceX readers

This deal is a leading indicator for North American banking risk operations. When a Tier 1 Canadian bank chooses an agentic AI vendor over an incumbent and writes a venture cheque alongside, it puts pressure on every other D-SIB and large regional to revisit its fraud stack.

Expect procurement cycles to accelerate, vendor consolidation around agentic platforms, and a measurable shift in how false-positive rates are reported to bank boards. For investors, Sardine's $170 million stack and consortium scale put it on a clear path to a late-stage growth round or strategic exit in the regtech category.