OSFI's 2026-27 Annual Risk Outlook Ranks Mortgage Risk First, Warns 1.3 Million Mortgages Face Renewal Payment Shock, and Keeps Its 4.5x Loan-to-Income Limit Framework

Canada's Office of the Superintendent of Financial Institutions (OSFI) has published its Annual Risk Outlook for fiscal year 2026-2027, which covers April 1, 2026 to April 1, 2027. The page's metadata lists an issue date of April 10, 2026 and the text gives April 14, 2026, so this article describes it as published in April 2026. OSFI regulates federally regulated banks, insurers and pension plans. The outlook sets out the risks it expects to focus on and what it plans to do about them. It does not give numeric ratings; the ranking of risks is the only ordering it provides.

The ranking

OSFI lists four groups of risks in order of importance. First is real estate secured lending, which covers mortgages and other loans backed by property. Second is risk from non-bank financial institutions. Third is funding and liquidity. Fourth is a group of other risks that includes wholesale credit, commercial real estate, artificial intelligence, cyber, third-party and integrity and security risks. The introduction refers to three key risks while the top-risks section lists four, with other risks as the fourth, so readers should not be surprised by the difference.

Mortgages and the renewal wave

The outlook puts a number on the pressure facing households. About 3.1 million mortgages, 52% of the total, will renew by the end of 2027. Of these, 1.3 million mortgages, 22% of the total, are fixed-rate loans or variable-rate loans with fixed payments that are renewing for the first time since they were taken out in 2021 and 2022. OSFI says these borrowers will face material payment increases. Variable-rate loans with fixed payments made up 36% of mortgage flows as of December 2025, close to the 41% high in March 2022.

OSFI also notes that condominium markets in Toronto and Vancouver are strained, with sales at levels not seen since the 1990s. It expects more residential mortgage arrears or defaults over the next two years, but does not expect losses on real estate secured lending to materially affect capital at most lenders. In other words, it expects more borrower stress, not a threat to the stability of most banks.

The loan-to-income limits

In 2025 OSFI introduced institution-specific portfolio limits on uninsured mortgage originations with a loan-to-income ratio above 4.5 times. In January 2026 it announced that the framework would continue. The outlook states that the loan-to-income limit framework has met its prudential objectives.

Non-bank lenders and trade-related credit risk

The second-ranked risk concerns non-bank financial institutions, which include hedge funds and private capital firms. OSFI says they can transmit stress through leverage, margin calls and interconnected exposures. Canadian institutions lend to these firms and the exposures have grown considerably. Banks also use them for credit protection through synthetic risk transfers, which may weaken in stress.

On trade, the page notes weak business sentiment and unsettled Canada-U.S. tariff negotiations, and says commercial real estate remains vulnerable, particularly high-rise condominium construction and development. It does not give specific loss estimates.

Funding, liquidity, cyber and AI

OSFI says institutions have enjoyed a stable funding environment over the past year, but geopolitical shocks, dependence on foreign-currency funding and a loss of confidence could tighten liquidity quickly. Revised liquidity adequacy requirements for certain retail deposit categories were due to take effect on May 1, 2026. On technology, malicious cyber activity is a significant threat and AI-enabled tools increase its speed and scale; software vulnerabilities are expected to remain the most persistent, high-impact technology risk, and AI adoption creates more vulnerability points. Operational resilience expectations take effect on September 1, 2026.

What it says about insurers

For insurers, the outlook lists several concerns. OSFI will monitor resilience to catastrophe risk for all insurers. Market volatility and growth in private-market assets raise concerns because those assets can be more opaque and potentially illiquid. Lapses and surrenders at life insurers have become more volatile, although losses remain modest relative to capital. Property and casualty insurers face claims inflation, notably in auto, and a softening commercial lines market that pressures underwriting. OSFI also points to cyber insurance underwriting, the use of AI in underwriting and mortgage insurers' exposure to the housing market. The climate-related work described in the outlook, including the 2026 Climate Risk Return and a catastrophic physical risk review, applies to banks, so it should not be read as a new insurer climate review.

What OSFI plans to do

Planned actions include supervisory reviews of lenders with significant real estate secured lending exposures and a new Credit Risk Management Guideline; reviews of non-bank exposures, synthetic risk transfers and hedge fund leverage, plus a loan-level wholesale data call; reviews of contingency funding and recovery plans and a draft internal liquidity adequacy assessment guideline; intelligence-led cyber resilience testing and a fourth third-party data call; continued monitoring of AI; and quarterly monitoring of wholesale credit risk.

What it means

For borrowers facing a renewal, the practical point is that payments may rise and it is worth talking to the lender early. For lenders and insurers, the outlook is a guide to supervisory attention. It is a forward-looking assessment, not a forecast of losses, and it can change. Readers who need the exact wording should consult OSFI's page. This article is general information and not financial advice.