PartnerkinPartnerkinRiddik ADS
B2B Directory · KYC & AML

Best KYC & AML Providers for iGaming in 2026

KYC, AML, fraud, and geolocation are the compliance stack an operator wires around the player: the onboarding check that proves who someone is, the monitoring that watches what they do, and the location check that proves where they are. These are three different purchases from three different kinds of vendor, and almost nobody buys all three from one supplier.

This page compares 18 vendors in three ranked lists: 12 identity-verification vendors, 3 fraud and AML vendors, and 3 gaming geolocation vendors, each scored under its own six-dimension weight set. There are no gambling licenses in this category, so we verified vendors against the registers that do apply, the UK DIATF list, the Pennsylvania PGCB register, and state gaming supplier rows, and every figure traces to a source in the linked review.

18vendors reviewed3segments, 3 weight setsJuly 2026last verified
The short version

Our verdict, in brief

This category is three purchases, so this page keeps three rankings. For identity verification, Sumsub leads at 8.0: the deepest certification stack in the field (DIATF at medium and high confidence, the first-ever GDIC, ETSI, SOC 2 I and II plus SOC 3), four named operators with quoted execs, and public per-check pricing at $1.35 and $1.85 that almost nobody else in the tier publishes, with two dated incidents and a real ownership-opacity finding priced into the read. Socure (7.2) carries the cleanest US conduct file and a live gaming engine, and Shufti Pro (7.1) is the value leader with published $0.75 checks and an iBETA Level 3 pass. For fraud and AML, SEON leads at 7.1 on the one thing that separates the segment, a fraud signal it owns rather than rents, and it is the only vendor here with a public price. For geolocation, GeoComply (7.7) is the register-deep incumbent US regulators standardized around, now defending that lead after losing its core patent and cutting 15% of staff, while Xpoint (7.0) is the challenger with a verified 28 states and the cleanest record, the company that beat GeoComply in court.

Three markets in one category

Which part of the compliance stack are you buying?

Identity verification, fraud and AML, and geolocation solve three different problems for three different buyers. The three lists on this page never rank against each other, and this split is why. Most operators end up running one vendor from each list.

Identity verification12 of 18
Prove who the player is, at signup

Document plus biometric onboarding, age gating, AML screening, and in some cases reusable KYC that carries a verified player across products. This is the onboarding stack an operator buys first, and it runs on documents, liveness, and watchlists rather than gambling licenses.

Best when
  • You need player onboarding, age checks, and KYC
  • You want AML sanctions and PEP screening in the same flow
  • You operate across many document types and markets
The identity verification guide
Fraud & AML3 of 18
Watch what the player does, over time

Device intelligence, behavioral signals, transaction monitoring, and AML case management that keep scoring a player after onboarding. Gaming-native fraud is rare, so the segment is thin and the buyer is usually a fraud or compliance team layering this over an onboarding tool.

Best when
  • You run your own onboarding and need monitoring on top
  • Bonus abuse and multi-accounting are the pain
  • You want AML transaction monitoring and case management
The fraud prevention guide
Gaming geolocation3 of 18
Prove where the player is, every check

Device-native location compliance with VPN, proxy, and GPS-spoof detection, mandated in US regulated states before and during play. Only three vendors serve it seriously, and the buying decision is register acceptance in your states first, price second.

Best when
  • You run a US-regulated sportsbook or iGaming book
  • A state mandates device-native location checks
  • You want anti-spoofing proven under a regulator's eye
The gaming geolocation guide

All three lists are ranked below, each under its own weight set. The border has some traffic: SEON added native IDV in January 2026, GeoComply orchestrates identity through IDComply, and several identity vendors screen AML. The reviews mark every crossover, and no vendor is ranked in two lists.

The best identity-verification vendors in 2026, ranked

12

Twelve onboarding vendors ranked by weighted Partnerkin score under the identity weight set, where verification coverage carries 22% and certifications 20%. Every card links to the full, sourced review, and the pricing-transparency split runs right through the table. The identity verification guide goes deeper on the register trail.

Sumsub
SumsubIdentity verificationPublic pricingData verified on Jul 12, 2026diamond
8.0Partnerkin scoreFounded 2015
CasinoSportsbook

Any operator shortlisting one vendor for the whole onboarding job should look here first: Sumsub reads as the gaming segment leader, with four named operators carrying quoted execs, EGBA's first IDV associate membership, and the deepest certification stack in the field (DIATF IDSP medium+high, the first-ever GDIC, ETSI, SOC 2 I/II, SOC 3), paired with public per-check pricing at $1.35 Basic and $1.85 Compliance that almost nobody else in the tier publishes. The defining catch is trust rather than capability: two dated security incidents (an integrator token exposure at Merkur in 2025 and a support-environment breach that dwelt about 18 months before a 2026 disclosure) sit alongside a genuine ownership-opacity finding, a company that filed it could not identify who controlled it for an October 2023 to May 2024 window. Buy it for the coverage and the transparency on price, and price the trust findings honestly rather than around them.

Read more
Best fitOperators that want one platform for KYC, age, AML, and Travel Rule with published entry pricing and a real free trial, plus crypto-casino and multi-market books that need broad document coverage and reusable KYC.
Coverage14
CertsDIATF
Trusted byKBCY
Socure
SocureIdentity verificationRegister-verifiedData verified on Jul 12, 2026pro
7.2Partnerkin scoreFounded 2012
SportsbookCasino

The US gaming growth engine of this segment: prediction markets and sportsbook operators drove 65% of Socure's revenue growth in 2025 by its own count, and it holds a Pennsylvania PGCB Certified registration (Socure, Inc., exp 02/22/2027) plus a multi-year DraftKings agreement running since 2021 and a PrizePicks case study. The defining strength is the cleanest conduct record among the US-lens majors, no breach, no BIPA class action, and no FCRA/FTC/CFPB enforcement found as of July 2026. The defining catch is that this is a general-purpose banking/fintech/government platform where gaming is one vertical, sold with no public pricing at all.

Read more
Best fitUS-regulated sportsbooks, DFS and skill-games, iGaming, and prediction-markets operators that want a register-Certified single decisioning platform with deep American identity data and continuous AML monitoring.
Coverage190+ countries
CertsSOC 2 and ISO badges shown
Trusted byDPCC+3
GBG
GBGIdentity verificationRegister-verifiedData verified on Jul 12, 2026pro
7.2Partnerkin scoreFounded 1989
CasinoSportsbook

GBG is the only LSE-listed, audited pure-play in the identity-verification tier, and that transparency cuts both ways: the same public filings that make it the most checkable vendor in the field also lay bare a twice-impaired Americas business, written down £122.2M in FY23 and another £73.1M in FY26 against the roughly £780M IDology plus Acuant acquisition case. What buyers get for it is a genuinely full-stack single-vendor gaming KYC platform, GBG GO, that pairs document, biometric, and AML checks with age and UK affordability screening most IDV rivals leave to a separate vendor, register-anchored PA-Certified through IDology and on the UK DIATF list. The catches are the Americas financial history, an integration and brand-churn trail from Acuant to IDology to GBG, and fully opaque enterprise-only pricing.

Read more
Best fitUK, Irish, and Americas operators that want one auditable, publicly listed vendor for identity, document, age, and affordability checks in a single flow, especially multi-brand groups that can use the GBG GO journey builder to orchestrate onboarding.
Coverage195 countries
CertsDIATF
Trusted byGBPN+4
Jumio
JumioIdentity verificationDIATFData verified on Jul 12, 2026pro
7.2Partnerkin scoreFounded 2010
CasinoSportsbook

Jumio carries the deepest named-operator roster in the identity-verification segment: Stanleybet, Novibet, WINBET, Casumo, and LottoLand, most with a quoted operator exec, plus 888 on the solutions page and a Playtech eKYC partnership, all under a dated "all in on gaming" push from January 2025. That gaming depth and a register-grade UK DIATF certificate from ACCS are the case for buying. Against them sit the heaviest legacy file in the tier, all of it pre-current-ownership, and a compliance ceiling: the US-state gaming footprint is vendor-stated, not a confirmed register entry.

Read more
Best fitSportsbooks and multi-market operators, especially those expanding into Europe and Brazil, that want a proven, name-heavy gaming IDV with deep-pocketed backing and a checkable UK certification, and are comfortable with sales-led pricing.
CertsDIATF
Trusted bySNWC+3
Shufti Pro
Shufti ProIdentity verificationRegister-verifiedData verified on Jul 12, 2026pro
7.1Partnerkin scoreFounded 2017
CasinoSportsbook

Shufti is the price leader of the identity verification segment, and it publishes the number: $0.75 per verification on the Standard pack, well under the enterprise field, with pay-as-you-go billing and no charge for resubmissions. Underneath the price sit two facts most cheaper vendors cannot show, a Pennsylvania PGCB Certified gaming registration and an iBETA Level 3 liveness result at 0% error, plus a gaming page that maps to UKGC self-exclusion and the EU registers. The catch is scale and consistency: this is a roughly 150-person private company with no audited financials, and buyers report a dated pattern of edge-case accuracy misses on damaged documents and over-rigid passport country-match rules that sits in tension with the zero-error liveness marketing.

Read more
Best fitCost-sensitive and mid-market operators, and platforms or aggregators reselling KYC, that want published pricing, strong passive liveness, and deep UK and EU self-exclusion coverage without enterprise minimums.
Coverage240+ countries
CertsiBETA PAD Level 3
Trusted byWPDF+1
Signicat
SignicatIdentity verificationDIATFData verified on Jul 12, 2026pro
6.9Partnerkin scoreFounded 2006
CasinoSportsbook

Signicat is the European digital identity company nobody else on this roster matches on national and bank eIDs: 35+ schemes through one API (BankID, MitID, itsme, iDIN, FTN, FranceConnect, SPID, Smart-ID and more), plus document and biometric IDV, AML and KYC, qualified e-signing, and Sphonic-heritage orchestration. It is one of the first certified eIDAS 2.0 QTSPs, owned by Nordic Capital since 2019, with EUR ~140M revenue and 1,300+ enterprise customers and a clean incident record. The defining catch is the US lens: it holds no state gaming registration, and its named gaming brands (Betfair, LeoVegas, Flutter, BetMGM, GG Poker) sit at logo and list level with no operator case study behind them yet.

Read more
Best fitEuropean operators, especially in the Nordics, Benelux, Baltics, and Iberia, that want national-eID and BankID or Pay-n-Play onboarding, eIDAS and EU wallet readiness, and a broad one-API identity and signing stack from a single vendor.
Coverage35+ eIDs
CertsDIATF
Trusted byBLFB+1
Prove
ProveIdentity verificationRegister-verifiedData verified on Jul 12, 2026pro
6.8Partnerkin scoreFounded 2020
SportsbookCasino

Prove carries the freshest US sportsbook roster on vendor record, FanDuel (the first tier-one sportsbook on Pre-Fill, 2023), BetMGM (2024, still quoted on the gaming page today), and Hard Rock Bet (2025), on a genuinely different method: it verifies a player through phone possession, reputation, and ownership rather than a document first. The defining strength is that phone-centric onboarding flow paired with a spotless conduct record, no breach and no FTC, FCC, or CFPB enforcement found as of July 2026, only a trademark opposition. The defining catch is that the method is anchored to US carrier data, so it is powerful for American consumers with real phone history and weak outside the US or for thin-file players, and Prove holds only the lower PA Registered class and publishes no pricing.

Read more
Best fitUS-regulated sportsbooks and iGaming operators that want to cut onboarding friction and account-opening and synthetic-identity fraud through a phone-centric Pre-Fill flow, and value a register-Registered vendor with a proven tier-1 operator roster.
CoverageUS-centric
Trusted byFBHS
Veriff
VeriffIdentity verificationDIATFData verified on Jul 12, 2026pro
6.7Partnerkin scoreFounded 2015
CasinoSportsbook

Veriff pairs some of the broadest coverage in the segment with one of the thinnest named gaming rosters. The coverage is genuine: a vendor-stated 12,500+ document types across 230+ countries, DIATF gamma (0.4) current in the UK, ISO/IEC 30107-3 PAD Levels 1 and 2 for liveness, Fraud Protect for multi-accounting, and Data Zoo database data across 40+ countries from February 2026. The gaming footprint is the catch: exactly one named gambling operator survives verification, Easygo, the Stake.com and Stake.us group, with a dated case study, and no confirmed US state gaming registration behind it. It is an independent, acquisitive vendor, the counter-example to the consolidation wave, but priced against a $4M BIPA settlement and two 2023 layoff rounds.

Read more
Best fitOperators wanting broad-coverage, independent IDV with strong PAD and liveness and a proven high-volume backlog-clearance story, especially crypto-casino, multi-market, or Brazil-expansion profiles that value a vendor that is acquiring rather than being absorbed.
Coverage230+ countries
CertsDIATF
Trusted byE
IDnow
IDnowIdentity verificationDIATFData verified on Jul 12, 2026pro
6.6Partnerkin scoreFounded 2014
CasinoSportsbook

IDnow is the European regulated-market identity specialist the rest of the roster measures against on EU compliance depth: BaFin-heritage VideoIdent since 2014, AutoIdent automated verification of documents from 193 countries, EU Qualified Trust Service Provider status (2024), UK DIATF accreditation for IDCheck.io, and the productized UK Financial Risk Check that runs six affordability data indicators where most vendors run two. Kindred is quoted on the current gaming page and Lottoland is verified in tier-one gambling press, and the 2023 revenue was about €79M and EBITDA-profitable. The defining catch is ownership in transition: Corsair Capital's majority buy-up (96% for $295M) was announced in March 2025 but is not publicly confirmed closed as of July 2026, the named gaming roster is aging, and there is no US state gaming registration.

Read more
Best fitEuropean operators, especially in Germany, the UK, and Malta, that need regulated onboarding, age and child-protection checks, real-time IBAN verification, e-signing, and above all a productized UK affordability and Financial Risk Check with deep data.
Coverage193 countries
CertsDIATF
Trusted byKLAT+1
iDenfy
iDenfyIdentity verificationPublic pricingData verified on Jul 12, 2026pro
6.6Partnerkin scoreFounded 2017
CasinoSportsbook

The reason to shortlist iDenfy is money you can see: it is the only tier-1 identity-verification vendor that publishes a fully itemized per-check schedule, a $1.35 base check, every add-on listed (liveness +$0.20, sanctions and PEPs +$0.45, proof of address +$0.90, manual review +$0.45), and a $0.55 enterprise floor, and it bills only for approved verifications so failed and abandoned attempts are free, which lets a buyer model cost before a sales call. Underneath sits a broad check surface with API, SDK, no-code, and white-label included at every tier, a genuinely clean incident record (no breach, lawsuit, fine, or layoff on record), and founder ownership with no absorbed-parent risk. The honest catches are real: no DIATF and no US gaming registration, every infosec certification asserted rather than issuer-anchored (the iBeta claim is engine-derived through FaceTec), exactly one named gambling operator on record (TOPsport), and a bootstrapped ~50-60-person scale carrying compliance-critical infrastructure.

Read more
Best fitSmall-to-mid operators and platforms that want transparent, model-able per-check pricing, pay-only-for-approved economics, fast European eID coverage, and an included KYB and AML monitoring bundle without enterprise-sales opacity.
CertsDIATF
Trusted byTRGM
Entrust
EntrustIdentity verificationDIATFData verified on Jul 12, 2026pro
6.4Partnerkin scoreFounded 2012
CasinoSportsbook

The defining fact about Entrust for a gaming buyer is an absence: not one first-party named gambling operator survives the shutdown of onfido.com (verified 2026-07-12), so this review cannot cite a single verifiable casino or sportsbook client, and the tier-1 sportsbook "Onfido client" lists still circulating online are a debunked fabrication from banned content farms that nobody should treat as proof. What the vendor does bring is a deep-pocketed engine under new ownership: the former Onfido, acquired by Entrust in April 2024, with a register-grade UK DIATF certification at high-confidence H1A, the Atlas AI document and fraud stack, and a dated April 2025 gaming operator's guide. The catches are the zero-operator gaming footprint, a $28.5M BIPA legacy from the Onfido era, and a brand and SDK transition still in motion through 2026.

Read more
Best fitEnterprise and multi-jurisdiction operators that value a register-grade UK DIATF high-confidence trail, a mature document and biometric engine with deepfake detection, no-code orchestration, and a deep-pocketed owner, and that do not need a published reference list of gambling clients.
Coverage195 countries
CertsDIATF
Trusted byJAAS
AU10TIX
AU10TIXIdentity verificationRegister-verifiedData verified on Jul 12, 2026pro
5.8Partnerkin scoreFounded 2002
CasinoSportsbook

AU10TIX is the tier's cautionary review: its deepfake and injection-attack detection is a real differentiator built for exactly the synthetic-fraud threat that defines remote onboarding in 2026, but it sits on top of a declining business and the thinnest gaming footprint of the identity-verification set. The parent ICTS International's audited FY2025 20-F (filed April 2026) shows the AU10TIX segment's revenue falling 31.5% from $46.0M to $31.5M and swinging to a $12.2M loss, with the filing citing lost customers, while the gaming record rests on a single named operator (888 Holdings). Layered on top are a 2024 credential-exposure incident and a breach disclosure rewritten a year later, so a buyer gets genuine synthetic-fraud technology from a PA-Registered, DIATF-listed vendor whose trust and stability signals are the weakest in the field.

Read more
Best fitOperators whose specific problem is deepfake and injection-attack fraud at onboarding, that want a full document, biometric, age, and AML spread in one fast automated engine, and that are comfortable with an enterprise-opaque vendor carrying a security-incident and revenue-decline history.
CoverageGlobal coverage marketed
CertsDIATF
Trusted by8TUX+3

The best fraud and AML vendors in 2026, ranked

3

Three fraud and AML vendors under the fraud weight set, where detection depth carries 24%. This segment is deliberately thin, because gaming-native fraud is rare and most operators layer a general fincrime tool over their onboarding stack. The fraud prevention guide says why.

SEON
SEONFraud & AMLPublic pricingData verified on Jul 12, 2026pro
7.1Partnerkin scoreFounded 2017
CasinoSportsbook

The segment anchor, and it earns it by owning its signal: device intelligence plus a digital-footprint network across a claimed 300+ platforms puts more of the fraud picture in SEON's own hands than any rival here, and it is the most gaming-committed fraud vendor in the roster alongside Kinectify, with a live iGaming vertical, native fraud-vector vocabulary, and operator-voice case studies. The defining strengths are that owned depth, a rare public entry price of $699/mo, and a genuinely clean incident record on the back of a fresh $80M Series C. The defining catch is partial transparency: the published price excludes the AML module and case management an operator actually needs, the operator wall is thinner than its 14 logos suggest with only about 8 clearing the logo line, and every headline detection number is vendor-stated.

Read more
Best fitiGaming operators that want a device-intelligence and digital-footprint fraud layer tuned to bonus abuse and multi-accounting, with real-time API decisioning, an AML screening bolt-on, and a published entry price rather than a fully custom enterprise quote.
PricingPublished
Trusted byES1L+3
Kinectify
KinectifyFraud & AMLData verified on Jul 12, 2026pro
5.9Partnerkin scoreFounded 2020
CasinoSportsbook

The most gaming-native AML vendor in this segment, and the one whose proof you have to read carefully. There is no non-gaming Kinectify: the whole company is a US casino and tribal AML product built on Title 31, FinCEN SAR and CTR, patron risk, and casino-system data, with SOC 2 Type 2 since 2022 and Aristocrat Leisure holding a board seat since February 2024. The defining catch is the evidence class: every 2025 client win, Chumash, FireKeepers, High Roller, and the rest, was self-distributed over the EIN Presswire paid wire with no independent tier-1 trade pickup found as of 2026-07-12, only The Venetian and Foxwoods carry named operator voices, and the team runs to roughly 13 people.

Read more
Best fitUS casinos and tribal operators that want a gaming-native AML monitoring stack, Title 31 patron-risk consolidation across properties, and the option to outsource the compliance program to the vendor rather than only license a tool.
PricingOn request
Trusted byTFCF+2
LexisNexis RiskNarrative
LexisNexis RiskNarrativeFraud & AMLData verified on Jul 12, 2026pro
5.8Partnerkin scoreFounded 2016
CasinoSportsbook

The RELX-backed orchestration play of the fraud and AML segment: RiskNarrative is a no-code decision layer over LexisNexis Risk Solutions' own data estate, the deepest data moat and best integration story among the fraud vendors here, with a live Gaming & Gambling vertical and a Responsible Gambling affordability engine aimed at UKGC compliance on the 2026 product page. The defining catch is that its gaming proof is entirely vintage: every named gaming client (Playtech, Gamesys, Argyll) dates to 2019-2020, before the 2021 acquisition and the 2023 rebrand, with no post-rebrand named gaming win on record and one of the three (Argyll) since collapsed. It fits a large operator that wants LNRS data and configurable orchestration over fresh gaming references or public pricing.

Read more
Best fitLarge UK or EU operators that want a no-code orchestration layer over many data sources with LNRS's proprietary data behind it, real-time AML monitoring, and a ready responsible-gambling affordability engine for UKGC compliance, and that value a FTSE-100-backed, filings-verifiable vendor.
PricingOn request
Trusted byPGA

The best gaming geolocation vendors in 2026, ranked

3

Three geolocation vendors under the geolocation weight set, where regulatory acceptance carries 28%. The whole segment is a three-way gap: the incumbent, the challenger that beat it in court, and the third entrant undercutting on price. The gaming geolocation guide frames the war.

GeoComply
GeoComplyGeolocationData verified on Jul 12, 2026vip
7.7Partnerkin scoreFounded 2011
SportsbookCasino

The category-defining incumbent, and a company now defending that position on every front. GeoComply is the device-native geolocation vendor US regulators standardized around, register-verified in Massachusetts (SWV-0025, exp 2/28/2028), stated across 35+ jurisdictions, and running the location checks behind DraftKings, FanDuel, Caesars, and BetMGM, with a decade-plus DraftKings relationship renewed in June 2026. The pressure is just as real: it lost its core anti-spoofing patent in November 2024, cut 15% of staff in April 2026, changed CEO in March 2025, and its legacy per-ping pricing is the exact thing cheaper challengers undercut. Pick it when regulatory certainty and the identity and licensing adjacencies matter more than per-check cost.

Read more
Best fitUS multistate sportsbook and iGaming operators that want the maximally-accepted, regulator-familiar geolocation stack and value the identity (IDComply) and licensing-workflow (OneComply) adjacencies over the lowest per-check price.
RegistersMA
Trusted byDFCB+5
Xpoint
XpointGeolocationData verified on Jul 12, 2026pro
7.0Partnerkin scoreFounded 2019
SportsbookCasino

The challenger that beat the incumbent in court and is now taking its business. Xpoint won the Federal Circuit patent case against GeoComply, which invalidated the incumbent's core anti-spoofing patent and cleared its own legal runway, and it has since put a verified 28 US jurisdictions plus Ontario behind a Massachusetts vendor license (SWV-0065, exp 02/28/2031) and signed the strongest client evidence in the segment, with PrizePicks announcing the partnership on its own newsroom and bet365 switching to Xpoint Verify off GeoComply. The defining catch is scale and disclosure: Xpoint is the youngest of the three at founded 2019, its register breadth still trails GeoComply's claimed 35-plus, and it has the thinnest public financials of the segment, with a Bettor Capital-led growth round in December 2025 whose size, valuation, and revenue are all undisclosed.

Read more
Best fitCost-conscious US operators and DFS or prediction books that want a credentialed multi-state geolocation vendor without GeoComply's per-ping bill, and operators wanting a documented second source to break single-vendor dependence, the way bet365 did.
RegistersMA
Anti-spoofVPN
Trusted byPBSP+2
Radar
RadarGeolocationData verified on Jul 12, 2026pro
6.5Partnerkin scoreFounded 2016
SportsbookCasino

The third entrant into US gaming geolocation, and the one that changed the pricing conversation: Radar Labs is a 2016 New York location-infrastructure developer that added a gaming vertical only in 2023 and undercut GeoComply's per-ping billing with a published monthly-tracked-users model, the wedge that already forced the incumbent to offer MTU and revenue-based alternatives. The defining strength is the segment's best developer story, an SDK-first product that migrated BetSaracen in three months against eighteen with the prior vendor, plus the only public pricing model of the three. The defining catch is depth: the gaming trail is the newest in the segment, and Radar claims 30+ North American licenses with only about nine nameable today.

Read more
Best fitCost-conscious operators, DFS, sweepstakes, and social books, and developer-led teams that want an SDK-native location layer with unlimited checks under monthly-tracked-user billing, or anyone migrating off per-ping to cut geolocation spend.
Registers10 states
Trusted byBBSE+2
How we score

Our methodology

We review KYC vendors as a B2B buyer would: the operator picking an onboarding platform, the fraud team layering monitoring, or the US book buying mandated geolocation. Each of the 18 vendors earns a Partnerkin score, a weighted average of six dimensions, and the weights depend on the segment, because these are three different products. The three rankings never merge. This category holds no gambling licenses, so claims were checked against the registers that do apply (the UK DIATF list, the PA PGCB register, and state gaming vendor rows), vendor-stated figures are labeled as vendor-stated, and incidents print with their dates.

18
vendors reviewed (12 identity, 3 fraud, 3 geo)
96
data points tracked
1,340
verified cells
14
data layers

How we weight identity verification

Verification coverage carries 22% because breadth in one integration is the product, and certifications 20% with register checks behind them. Integration and gaming footprint tie at 16%, because how it lands and who already runs it both decide fit. Commercials close at 12%, since most of the tier quotes on request.

22%
20%
16%
16%
14%
12%

Verification coverage

22%

What the platform can actually check in one integration: document and biometric, liveness, age, AML screening, proof of address, non-doc and database validation, KYB, and reusable KYC, with vendor-stated speed figures labeled as such.

Document & biometricLiveness & ageAML screeningNon-doc / KYBReusable KYC
Set average7.6
Leader8.4

Compliance & certifications

20%

The class of the trail behind the claims: DIATF certification level, US state gaming registers where PA distinguishes Certified from Registered, iBETA and GLI reports with numbers, and SOC 2 or ISO scoped to the product rather than the parent group.

DIATF levelPA register classiBETA / GLISOC 2 / ISO scopeRegister-verified
Set average7.4
Leader8.5

Integration & delivery

16%

How the product actually lands: API and SDK surface, public developer docs and a sandbox before a contract, orchestration and no-code journeys, and dated integration or migration evidence over a demo promise.

API & SDKsPublic docsSandbox / trialOrchestrationMigration evidence
Set average7.1
Leader7.8

Gaming footprint

16%

The evidence class of the named-client roster, not its length: an operator quote outranks a paid wire, which outranks a logo wall, and freshness matters. A live gaming vertical page is the floor, not the proof.

Operator voiceNamed case studyWire vs logoFreshnessGaming page
Set average6.6
Leader8.3

Trust & track record

14%

Conduct with outcomes: breaches with exfil and disclosure dates, BIPA and privacy settlements, enforcement, layoffs, ownership transparency, and audited financials where they exist. Incidents print with dates, not adjectives.

Breach recordBIPA / privacyEnforcementOwnershipAudited financials
Set average6.4
Leader7.3

Commercials & transparency

12%

Published per-check pricing against quote-only sales, what the published tier actually includes, and how much a buyer knows before the first call. Opacity is priced, not excused.

Published pricingWhat the tier coversPer-check rateDisclosure posture
Set average5.4
Leader8.1

How we weight fraud & aml

Detection and data depth carries 24% because owning the risk signal is what separates a fraud vendor from an orchestration layer. Gaming footprint weighs 18%, since gaming-native fraud is rare and the evidence class matters. Trust and compliance tie at 16%, and the segment is small enough that one weak dimension moves the whole card.

24%
18%
16%
16%
14%
12%

Detection & data depth

24%

How much of the risk signal the vendor owns versus orchestrates, and how gaming-tuned it is: device intelligence, digital and email and phone footprint, real-time versus batch decisioning, transaction monitoring, and model explainability.

Owned signalDevice intelligenceDigital footprintReal-time scoringGaming-tuned
Set average6.8
Leader7.8

Gaming footprint

18%

The evidence class of the named-client roster, not its length: an operator quote outranks a paid wire, which outranks a logo wall, and freshness matters. A live gaming vertical page is the floor, not the proof.

Operator voiceNamed case studyWire vs logoFreshnessGaming page
Set average6.2
Leader7.4

Trust & track record

16%

Conduct with outcomes: breaches with exfil and disclosure dates, BIPA and privacy settlements, enforcement, layoffs, ownership transparency, and audited financials where they exist. Incidents print with dates, not adjectives.

Breach recordBIPA / privacyEnforcementOwnershipAudited financials
Set average6.2
Leader6.8

Compliance & certifications

16%

The class of the trail behind the claims: DIATF certification level, US state gaming registers where PA distinguishes Certified from Registered, iBETA and GLI reports with numbers, and SOC 2 or ISO scoped to the product rather than the parent group.

DIATF levelPA register classiBETA / GLISOC 2 / ISO scopeRegister-verified
Set average6.2
Leader6.4

Integration & delivery

14%

How the product actually lands: API and SDK surface, public developer docs and a sandbox before a contract, orchestration and no-code journeys, and dated integration or migration evidence over a demo promise.

API & SDKsPublic docsSandbox / trialOrchestrationMigration evidence
Set average6.6
Leader7.3

Commercials & transparency

12%

Published per-check pricing against quote-only sales, what the published tier actually includes, and how much a buyer knows before the first call. Opacity is priced, not excused.

Published pricingWhat the tier coversPer-check rateDisclosure posture
Set average5.0
Leader6.0

How we weight gaming geolocation

Regulatory acceptance carries 28% because in this segment a register row is market access, and accuracy and anti-spoofing 22% because a spoof that gets through is a compliance failure. Integration, trust, and gaming footprint fill the middle, and commercials close at 10%, the one dimension where the ranking inverts against the incumbent.

28%
22%
14%
14%
12%
10%

Regulatory acceptance

28%

Register-verifiable state and vendor acceptance depth: MGC sports-wagering vendor rows, state gaming supplier registrations, and the count of jurisdictions with a nameable trail. A vendor's aggregate license claim is scored on what is provable, not the claim.

MGC vendor rowsState registrationsNameable countIncumbencyAggregate vs proven
Set average7.6
Leader8.5

Accuracy & anti-spoofing

22%

The VPN, proxy, GPS-spoof, emulator, and device-farm stack and how battle-proven it is in state-mandated deployments, not just how broad the feature list reads on paper.

VPN / proxyGPS spoofEmulator / farmBattle-provenContinuous re-check
Set average7.5
Leader8.6

Integration & delivery

14%

How the product actually lands: API and SDK surface, public developer docs and a sandbox before a contract, orchestration and no-code journeys, and dated integration or migration evidence over a demo promise.

API & SDKsPublic docsSandbox / trialOrchestrationMigration evidence
Set average7.3
Leader7.6

Trust & track record

14%

Conduct with outcomes: breaches with exfil and disclosure dates, BIPA and privacy settlements, enforcement, layoffs, ownership transparency, and audited financials where they exist. Incidents print with dates, not adjectives.

Breach recordBIPA / privacyEnforcementOwnershipAudited financials
Set average6.4
Leader7.2

Gaming footprint

12%

The evidence class of the named-client roster, not its length: an operator quote outranks a paid wire, which outranks a logo wall, and freshness matters. A live gaming vertical page is the floor, not the proof.

Operator voiceNamed case studyWire vs logoFreshnessGaming page
Set average7.5
Leader8.7

Commercials & transparency

10%

Published per-check pricing against quote-only sales, what the published tier actually includes, and how much a buyer knows before the first call. Opacity is priced, not excused.

Published pricingWhat the tier coversPer-check rateDisclosure posture
Set average5.0
Leader5.6

Why there is no single ranking

  • Identity, fraud, and geolocation are three different purchases, so the three lists score different dimensions and never rank against each other.
  • A vendor lives in the segment of what it primarily sells. SEON ranks as fraud even though it added native IDV in January 2026, and the review covers both.
  • No vendor appears in two lists. GeoComply orchestrates identity through IDComply but ranks only as geolocation, its center of gravity.
  • A live gaming vertical page is the entry gate, not the score. A vendor with no gaming page and no named operator does not make a list, however large it is elsewhere.

What we weigh that's specific to compliance vendors

The score says how good a vendor is. These six reads decide whether it fits your stack, and they run through every section on this page.

Registers over claims

There are no gambling licenses here, so we check the ones that apply. PA PGCB rows carry Certified versus Registered, DIATF entries carry their confidence level, and the Massachusetts MGC vendor PDF is on the public register. A claimed cert with no issuer trail prints as claimed.

Evidence class of a client

A named operator quote beats a paid press wire beats a logo wall. When a wall shows a client whose product actually runs a competitor, the review names the vendor that really serves it.

The pricing-transparency split

A handful publish real per-check prices and the rest hide them. We reward the published rate and note exactly what the published tier leaves out, because a $699 floor that excludes the AML module is a partial disclosure.

Incidents with dates

Breaches print with their exfil and disclosure dates, BIPA settlements with their amounts, and a breach story a vendor later rewrites is called out as our finding. No adjective stands in for a docket.

Owned signal versus rented data

In fraud, the score turns on how much of the risk signal a vendor owns rather than orchestrates from third parties. In identity, reusable KYC and non-doc coverage are the depth tells. We separate what a vendor built from what it resells.

The M&A overhang

This vertical got eaten by acquisitions. Onfido became Entrust, Featurespace went to Visa, Ravelin sits inside Worldpay. A brand mid-transition carries integration and roadmap risk, and we price it rather than ignore it.

Grade scale

Excellent8.0 – 10Top of the category, with few real gaps.
Good6.5 – 7.9Solid with clear trade-offs.
Mixedbelow 6.5Real weaknesses to weigh.

Grades follow the site-wide scale: 8.0 and up excellent, 6.5 to 7.9 good, below 6.5 mixed. Each overall is the weighted average of six dimensions under the segment's weights shown above.

Confidence on every field

VerifiedConfirmed against a primary source.
EstimateReasoned from disclosed data.
UnverifiedVendor-stated, not yet confirmed.

Last verified July 2026. Register checks are dated in every review, and an entry confirmed from a snapshot rather than a live register is marked partial. Vendor-stated accuracy, coverage, and market-share figures are labeled that way everywhere they appear.

What we don't do

  • Placement isn't for sale, and vendors can't pay to rank.
  • We don't rank the three segments against each other, because different weight sets would make one list dishonest.
  • We don't quote a vendor's market-share number as fact when it traces only to trade press.
  • We don't credit a client a vendor cannot support beyond a logo, and we flag a client that runs a competitor.
Dated and sourced

The stories that moved this market

Two years of acquisitions, a lost patent, a pricing revolt, and the register rows that make this category checkable. Every entry carries its date, and the linked reviews carry the sources.

2024-2026

The M&A wave ate the vertical

Onfido became Entrust, Featurespace went to Visa (closed 2024-12-19), Ravelin was folded into Worldpay (agreement 2025-02-04), IDVerse went to LexisNexis, Veriff bought Vespia (2026-02), and Incode merged with AuthenticID (2025-08). IDnow's Corsair deal was announced in March 2025 and is not yet confirmed closed. Half the names a 2023 shortlist would have carried now sit inside a bigger company.

2024-11-08

GeoComply loses its core patent to Xpoint

The Federal Circuit affirmed by Rule 36 (No. 23-1578) that US 9,413,805, the patent behind GeoComply's anti-spoofing, is invalid under Section 101 and Alice. GeoGuard still ships and stays the benchmark, but the moat is now commercial rather than legal, and the challenger that won has a clear runway.

2026-04

GeoComply cuts 15% under pricing pressure

GeoComply cut 68 staff, about 15% of a roughly 450-person workforce, in April 2026, after a March 2025 CEO change (Kip Levin in for co-founder Anna Sainsbury). Sportico reported the incumbent has been forced to present MAU and revenue-based pricing alternatives, a concession to the challenger tier's attack on per-ping billing.

Ongoing

The geolocation three-way war, with bet365 split by state

GeoComply's 35-plus jurisdictions face Xpoint's verified 28 states plus Ontario and Radar's MTU pricing undercut. The tell nobody writes up: bet365 runs Xpoint Verify in some states and names Radar verbatim in its help centers across seven others (CO, VA, AZ, IA, KY, NC, TN). One operator, different vendors per state, documented.

2026

The register anchors that make this category checkable

This vertical has no gambling licenses, but it does have registers. Socure and GBG (as IDology) are PA PGCB Certified, GBG and several peers sit on the UK OfDIA DIATF list, and GeoComply, Xpoint, and Radar all appear on the same Massachusetts MGC sports-wagering vendor PDF (SWV-0025, SWV-0065, SWV-0064). The category can be verified despite the missing license.

2025-2026

AU10TIX's audited decline and rewritten disclosure

Its parent's FY2025 20-F shows AU10TIX revenue down 31.5% to $31.5M with a $12.2M segment loss. On top of that sits the 2024 credential exposure (404 Media, 2024-06-26) and our own finding: the 2025 company statement that there was no production connection or data exposure conflicts with the 2024 reporting and AU10TIX's own 2024 admission. The 888 relationship is still on record.

Dockets and register rows are quoted at their last verified state, and the reviews update as they move. No outcome predictions.

The honest absence

Who is not here, and why

Reseller decks and search results attach big compliance names to gaming that do not actually serve it, or no longer do. We only rank a vendor with a live gaming vertical page and a named operator, so these get named and set aside instead of padding a list. This is the check no competitor publishes.

ComplyAdvantage

Gaming page dead

A serious AML name, but its gaming page has been dead since November 2021, and no named gambling operator survives. It shows up here only as a cross-edge, as a PayNearMe vendor, not as a gaming compliance product you can buy today.

Trulioo and Persona

Silent on gambling

Trulioo's own industries list omits gaming and names zero operators. Persona's acceptable-use policy is clean but its wall is OpenAI, Coursera, and Brex, with total silence on gambling. Large, capable, and not pitching this vertical, so neither makes a list built on gaming evidence.

Napier AI

Fabricated claim

Banking-only positioning, and the circulating FanDuel client claim traces to a CB Insights boilerplate entry carried nowhere legitimate. A fabricated gaming reference is a reason to exclude, not to rank.

Featurespace and Ravelin

Absorbed

Featurespace was bought by Visa (closed 2024-12-19) and its gaming URL now serves a bank-only page. Ravelin was folded into Worldpay as FraudSight, and it carries no gambling record of its own, so it lives as an attached note inside the Worldpay review rather than a standalone entry.

Incode, which merged with AuthenticID in August 2025, is on our watch list: it has gambling pages and 4.1B-plus checks a year but zero named regulated-gaming operators. It joins a list the moment it names one.

Adjacent market

Responsible-gambling analytics and regulatory intelligence

A separate layer that watches players for harm rather than fraud or identity. We don't score these as KYC vendors, but a compliance buyer should know the shape of the market, and one ownership fact matters more than the rest.

Mindway AI

90% affiliate-owned

The RG-analytics vendor most operators hear about, and the ownership is the story: Better Collective, the affiliate giant, has owned 90% of Mindway AI since January 2021. An affiliate that profits from player acquisition owns the tool that scores player harm, and that is worth saying out loud before you buy it.

Department of Trust

FCA RAISP 995375

A UK affordability and financial-risk checker authorized by the FCA as a Registered Account Information Service Provider (RAISP 995375), with Flutter, BetVictor, and Lottoland named around a May 2024 push. It has gone quiet across 2025 and 2026, so treat the momentum as dated.

Neccton

Inside OpenBet

The mentor player-protection product now sits inside OpenBet, which acquired Neccton in June 2013 and whose site now redirects. It is already covered in the OpenBet review as part of the Protect line rather than as a standalone vendor here.

Vixio

Regulatory intelligence

Not RG analytics but the neighboring regulatory-intelligence layer, tracking compliance obligations across markets. Perwyn-owned since December 2022, it is a monitoring subscription rather than a player-facing check, and it sits outside the scored roster.

Questions

Frequently asked

What operators, fraud teams, and US books ask before signing a compliance vendor.

Do I need one vendor for KYC, fraud, and geolocation, or three?+

Usually three, and this page keeps three rankings for that reason. Identity verification proves who a player is at signup, fraud and AML watch what they do over time, and geolocation proves where they are in US regulated states. The products, the buyers, and the scoring weights all differ, and almost nobody sells all three well. The borders do have traffic: SEON added native IDV in January 2026, GeoComply orchestrates identity through IDComply, and most identity vendors screen AML, but you still assemble the stack from more than one supplier.

How much does KYC and identity verification cost?+

A minority of vendors publish per-check pricing, and they are worth naming. iDenfy lists the finest schedule, a $1.35 base down to a $0.55 enterprise floor with every add-on itemized. Sumsub publishes $1.35 Basic and $1.85 Compliance. Shufti Pro lists $0.75 for its Standard tier, the category low, plus a $2,500 setup fee. In fraud, SEON publishes a $699 per month Starter, though that floor excludes the AML module. Everyone else quotes on request, so treat any other specific number you read as unverified until it comes from the vendor.

How do you verify KYC vendors if the category has no gambling licenses?+

Through the registers that do apply to it. In the UK the OfDIA runs a statutory DIATF register of certified identity providers, and the level of confidence is on the record. In the US, the Pennsylvania PGCB publishes a register that distinguishes Certified from Registered, and Socure and GBG (as IDology) hold the Certified class. State gaming vendor rows exist too, and the Massachusetts MGC sports-wagering vendor PDF lists GeoComply, Xpoint, and Radar on the same document. Where an entry is confirmed from a snapshot rather than a live register, we mark the verification partial.

Which geolocation vendor should a US sportsbook use?+

It depends on your states and your budget, and the segment is only three vendors. GeoComply is the incumbent US regulators standardized around, register-verified in Massachusetts and stated across 35-plus jurisdictions, running the checks behind DraftKings, FanDuel, Caesars, and BetMGM. Xpoint is the credible challenger with a verified 28 states plus Ontario, the cleanest record, and the company that beat GeoComply in court. Radar is the third entrant with the best developer story and the only published pricing model. bet365 documents the honest answer by running different vendors in different states, so match the vendor to where you operate rather than to the brand.

Is gaming-native fraud detection a real category?+

Barely, and the ranking shows it with three vendors. SEON is the one gaming-committed fraud vendor with a signal it owns rather than rents, a live iGaming vertical, and operator voices behind it. Kinectify is 100% gaming-native, US casino and tribal first, but seed-stage at around 13 people with paid-wire evidence. LexisNexis RiskNarrative is a heavyweight fincrime orchestration layer whose gaming proof is entirely pre-2021. Most operators run a general fraud tool over their onboarding stack rather than buying a gaming-specific one, which is exactly why the segment is thin.

Does KYC connect to payments and onboarding, or is it separate?+

It connects, and the cleanest way to think about it is one player journey across two directories. The identity and AML checks on this page feed the KYB and merchant-onboarding work in the iGaming payment providers directory, and several of our payment reviews already carry a KYC vendor integration. If you are building the money side, the ranked payment providers are one page over, and the two stacks are designed to be read together.

How does fraud prevention relate to sportsbook integrity?+

They are neighbors, not the same thing. The fraud and AML vendors here watch a player's money and identity for abuse, while sportsbook integrity watches the betting markets themselves for match-fixing and suspicious wagering. An operator often runs both, and the integrity layer lives in the sportsbook data market rather than the compliance stack. Our sportsbook software directory covers the integrity monitors alongside the platforms and feeds.

What does the M&A wave mean for a vendor I'm evaluating?+

Read the ownership date before you sign. Onfido is now Entrust, Featurespace is inside Visa, Ravelin is inside Worldpay, IDVerse went to LexisNexis, Veriff bought Vespia, and Incode merged with AuthenticID, all since 2024. IDnow's Corsair acquisition was announced in March 2025 and we have not confirmed it closed. A brand mid-transition can carry SDK deprecation, roadmap uncertainty, and support churn, so ask where the product sits today and who owns the roadmap, and weigh that against the score.