Any operator shortlisting one vendor for the whole onboarding job should look here first: Sumsub reads as the gaming segment leader, with four named operators carrying quoted execs, EGBA's first IDV associate membership, and the deepest certification stack in the field (DIATF IDSP medium+high, the first-ever GDIC, ETSI, SOC 2 I/II, SOC 3), paired with public per-check pricing at $1.35 Basic and $1.85 Compliance that almost nobody else in the tier publishes. The catch is disclosure rather than capability: the 2022 Series B backer has never been named, the wider ownership chain is undisclosed, no valuation has been announced, and revenue is unaudited, so the trust grade rests on analyst recognition more than on corporate paper. Buy it for the coverage and the pricing transparency, and run a rule-tuning pilot on your own document mix before committing volume.
Best KYC & AML Providers for iGaming in 2026
KYC, AML, fraud, and geolocation are the compliance stack an operator wires around the player: the onboarding check that proves who someone is, the monitoring that watches what they do, and the location check that proves where they are. These are three different purchases from three different kinds of vendor, and almost nobody buys all three from one supplier.
This page compares 18 vendors in three ranked lists: 12 identity-verification vendors, 3 fraud and AML vendors, and 3 gaming geolocation vendors, each scored under its own six-dimension weight set. No gambling license covers this category. What applies instead is a different set of registers, the UK DIATF list, the Pennsylvania PGCB register, and state gaming supplier rows. Every figure is dated in the linked review.
Our verdict
This category is three purchases, so this page keeps three rankings. For identity verification, Sumsub leads: the deepest certification stack in the field (DIATF at medium and high confidence, the first-ever GDIC, ETSI, SOC 2 I and II plus SOC 3), four named operators with quoted execs, and public per-check pricing at $1.35 and $1.85 that almost nobody else in the tier publishes, with an undisclosed ownership chain the one catch. Socure carries a clean US regulatory sheet and a live gaming engine, and Shufti Pro is the value leader with published $0.75 checks and an iBETA Level 3 pass. For fraud and AML, SEON leads on the one thing that separates the segment, a fraud signal it owns rather than rents, and it is the only vendor here with a public price. For geolocation, GeoComply is the register-deep incumbent US regulators standardized around, now defending that lead after losing its core patent and cutting 15% of staff, while Xpoint is the challenger with 28 states on the registers and a clean legal record, the vendor that prevailed in the patent case.
Which part of the compliance stack are you buying?
Decide which problem you're solving first, because the three lists never rank against each other. Most operators end up running one vendor from each.
This is the onboarding stack an operator buys first: a document and biometric check at signup, an age gate, AML screening, and at some vendors reusable KYC that a verified player carries into the next product. No gambling license sits behind any of it, so the proof a buyer weighs is certification and register rows.
- You need player onboarding, age checks, and KYC
- You want AML sanctions and PEP screening in the same flow
- You operate across many document types and markets
Device intelligence, behavioral signals, transaction monitoring, and AML case management that keep scoring a player after onboarding. Gaming-native fraud is rare, so the segment is thin and the buyer is usually a fraud or compliance team layering this over an onboarding tool.
- You run your own onboarding and need monitoring on top
- Bonus abuse and multi-accounting are the pain
- You want AML transaction monitoring and case management
Device-native location compliance with VPN, proxy, and GPS-spoof detection, mandated in US regulated states before and during play. Only three vendors serve it seriously, and the buying decision is register acceptance in your states first, price second.
- You run a US-regulated sportsbook or online casino
- A state mandates device-native location checks
- You want anti-spoofing proven under a regulator's eye
All three lists are ranked below, each under its own weight set. The segments do overlap: SEON added native IDV in January 2026, GeoComply orchestrates identity through IDComply, and several identity vendors screen AML. The reviews mark every crossover, and no vendor is ranked in two lists.
The best identity-verification vendors in 2026
12Twelve onboarding vendors ranked by weighted Partnerkin score under the identity weight set, where verification coverage carries 22% and certifications 20%. The pricing-transparency split runs right through the table. The identity verification guide goes deeper on the register trail.

The US gaming growth engine of this segment: prediction markets and sportsbook operators drove 65% of Socure's revenue growth in 2025, and it holds a Pennsylvania PGCB Certified registration (Socure, Inc., exp 02/22/2027) plus a multi-year DraftKings agreement running since 2021 and a PrizePicks case study. The sheet is clean: no data breach, no privacy litigation, and no regulator action exists (Jul 2026). The defining catch is that this is a general-purpose banking/fintech/government platform where gaming is one vertical, sold with no public pricing at all.

GBG is the only LSE-listed, audited pure-play in the identity-verification tier, and that transparency cuts both ways: the same public filings that make it the most transparent vendor in the field also record two Americas goodwill impairments, £122.2M in FY23 and £73.1M in FY26, against the roughly £780M IDology plus Acuant acquisition case. What buyers get for it is a genuinely full-stack single-vendor gaming KYC platform, GBG GO, that pairs document, biometric, and AML checks with age and UK affordability screening most IDV rivals leave to a separate vendor, PA-Certified through IDology and on the UK DIATF list. The catches are the Americas financial history, an integration and brand-churn trail from Acuant to IDology to GBG, and fully opaque enterprise-only pricing.
Jumio carries the deepest named-operator roster in the identity-verification segment: Stanleybet, Novibet, WINBET, Casumo, and LottoLand, most with a quoted operator exec, plus 888 and a Playtech eKYC partnership, all under a dated "all in on gaming" push from January 2025. That gaming depth and an ACCS-issued UK DIATF certificate are the case for buying. Against them sit a discontinuous corporate history (a 2016 Chapter 11 asset sale, a 2021 change of control, a full 2026 CEO transition) and one hard ceiling: nothing in the American gaming footprint is registered anywhere.

Shufti is the price leader of the identity verification segment, and it publishes the number: $0.75 per verification on the Standard pack, well under the enterprise field, with pay-as-you-go billing and no charge for resubmissions. Underneath the price sit two facts most cheaper vendors cannot show, a Pennsylvania PGCB Certified gaming registration and an iBETA Level 3 liveness result at 0% error, plus a gaming page that maps to UKGC self-exclusion and the EU registers. The catch is scale and scope: this is a roughly 150-person private company with no audited financials, and the 0% iBETA result covers liveness alone, so document edge cases and strict passport country-match rules still need tuning against your own reject population.

Signicat is the European digital identity company nobody else on this roster matches on national and bank eIDs: 35+ schemes through one API (BankID, MitID, itsme, iDIN, FTN, FranceConnect, SPID, Smart-ID and more), plus document and biometric IDV, AML and KYC, qualified e-signing, and Sphonic-heritage orchestration. It is one of the first certified eIDAS 2.0 QTSPs, owned by Nordic Capital since 2019, with EUR ~140M revenue and 1,300+ enterprise customers and a clean incident record. The defining catch is the US lens: it holds no state gaming registration, and its named gaming brands (Betfair, LeoVegas, Flutter, BetMGM, GG Poker) sit at logo and list level with no operator case study behind them yet.
Prove carries the freshest US sportsbook roster in the segment, FanDuel (the first tier-one sportsbook on Pre-Fill, 2023), BetMGM (2024), and Hard Rock Bet (2025), on a different method: it verifies a player through phone possession, reputation, and ownership rather than a document first. The defining strength is that phone-centric onboarding flow paired with a clean regulatory sheet. The defining catch is that the method is anchored to US carrier data, so it is powerful for American consumers with real phone history and weak outside the US or for thin-file players, and Prove holds only the lower PA Registered class and publishes no pricing.
Veriff pairs some of the broadest coverage in the segment with one of the thinnest named gaming rosters. The coverage is genuine: 12,500+ document types across 230+ countries, DIATF gamma (0.4) current in the UK, ISO/IEC 30107-3 PAD Levels 1 and 2 for liveness, Fraud Protect for multi-accounting, and Data Zoo database data across 40+ countries from February 2026. The gaming footprint is the catch: exactly one named gambling operator, Easygo, the Stake.com and Stake.us group, with a dated case study, and no US state gaming registration behind it. It is an independent, acquisitive vendor, the counter-example to the consolidation wave, with the 2023 restructuring (two rounds, about 167 roles) the corporate event to know.

IDnow is the European regulated-market identity specialist the rest of the roster measures against on EU compliance depth: BaFin-heritage VideoIdent since 2014, AutoIdent automated verification of documents from 193 countries, EU Qualified Trust Service Provider status (2024), UK DIATF accreditation for IDCheck.io, and the productized UK Financial Risk Check that runs six affordability data indicators where most vendors run two. Kindred's executive speaks to it today, Lottoland deployed the age check in 2019, and the 2023 revenue was about €79M and EBITDA-profitable. The defining catch is ownership in transition: Corsair Capital's majority buy-up (96% for $295M) was announced in March 2025 with completion pending as of July 2026, the named gaming roster is aging, and there is no US state gaming registration.
The reason to shortlist iDenfy is money you can see: it is the only tier-1 identity-verification vendor that publishes a fully itemized per-check schedule, a $1.35 base check, every add-on listed (liveness +$0.20, sanctions and PEPs +$0.45, proof of address +$0.90, manual review +$0.45), and a $0.55 enterprise floor, and it bills only for approved verifications so failed and abandoned attempts are free, which lets a buyer model cost before a sales call. Underneath sits a broad check surface with API, SDK, no-code, and white-label included at every tier, a clean incident record (no breach, lawsuit, fine, or layoff), and founder ownership with no absorbed-parent risk. The honest catches are real: no DIATF and no US gaming registration, every infosec certification carried with no issuer behind it (the iBeta one belongs to FaceTec), exactly one named gambling operator (TOPsport), and a bootstrapped ~50-60-person scale carrying compliance-critical infrastructure.

The defining fact about Entrust for a gaming buyer is an absence: not one first-party named gambling operator carried over from the onfido.com era (Jul 2026), so this review cannot name a single casino or sportsbook client. What the vendor does bring is a deep-pocketed engine under new ownership: the former Onfido, acquired by Entrust in April 2024, with a UK DIATF certification at high-confidence H1A, the Atlas AI document and fraud stack, and a dated April 2025 gaming operator's guide. The catches are the zero-operator gaming footprint, fully hidden pricing, and a brand and SDK transition still in motion through 2026.
AU10TIX is the tier's sharpest trade-off: its deepfake and injection-attack detection is a real differentiator built for exactly the synthetic-fraud threat that defines remote onboarding in 2026, but it sits on top of a declining business and the thinnest gaming footprint of the identity-verification set. The parent ICTS International's audited FY2025 20-F (filed April 2026) shows the AU10TIX segment's revenue falling 31.5% from $46.0M to $31.5M and swinging to a $12.2M loss, with the filing citing lost customers, while the gaming record rests on a single named operator (888 Holdings). A buyer gets proven synthetic-fraud technology from a PA-Registered, DIATF-listed vendor whose financial trajectory and gaming roster are the weakest in the field.
The best fraud and AML vendors in 2026
3Three fraud and AML vendors under the fraud weight set, where detection depth carries 24%. This segment is deliberately thin, because gaming-native fraud is rare and most operators layer a general fincrime tool over their onboarding stack. The fraud prevention guide says why.
The segment anchor, and it earns it by owning its signal: device intelligence plus a digital-footprint network across 300+ platforms puts more of the fraud picture in SEON's own hands than any rival here, and it is the most gaming-committed fraud vendor in the roster alongside Kinectify, with a live iGaming vertical, native fraud-vector vocabulary, and operator-voice case studies. The defining strengths are that owned depth, a rare public entry price of $699/mo, and a clean incident record on the back of a fresh $80M Series C. The defining catch is partial transparency: the published price excludes the AML module and case management an operator actually needs, and the operator wall splits in two, with 8 of its 14 names carrying a case study, quote, or dated release behind them.
The most gaming-native AML vendor in this segment, and the one whose roster you have to read name by name. There is no non-gaming Kinectify: the whole company is a US casino and tribal AML product built on Title 31, FinCEN SAR and CTR, patron risk, and casino-system data, with SOC 2 Type 2 since 2022 and Aristocrat Leisure holding a board seat since February 2024. The defining catch is the depth of the roster: only The Venetian and Foxwoods come with a named operator speaking, the other 2025 wins were announced without an operator voice, and the team runs to roughly 13 people.

The RELX-backed orchestration play of the fraud and AML segment: RiskNarrative is a no-code decision layer over LexisNexis Risk Solutions' own data estate, the deepest data moat and best integration story among the fraud vendors here, with a live Gaming & Gambling vertical and a Responsible Gambling affordability engine aimed at UKGC compliance in the 2026 product set. The defining catch is that its gaming reference base is entirely vintage: every named gaming client (Playtech, Gamesys, Argyll) dates to 2019-2020, before the 2021 acquisition and the 2023 rebrand, with no named gaming win since the rebrand and one of the three (Argyll) since collapsed. It fits a large operator that wants LNRS data and configurable orchestration over fresh gaming references or public pricing.
The best gaming geolocation vendors in 2026
3Three geolocation vendors under the geolocation weight set, where regulatory acceptance carries 28%. The whole segment is a three-way gap: the incumbent, the challenger that prevailed in the patent case, and the third entrant undercutting on price. The gaming geolocation guide frames the contest.
The category-defining incumbent, and a company now defending that position on every front. GeoComply is the device-native geolocation vendor US regulators standardized around, on the Massachusetts register (SWV-0025, exp 2/28/2028), stated across 35+ jurisdictions, and running the location checks behind DraftKings, FanDuel, Caesars, and BetMGM, with a decade-plus DraftKings relationship renewed in June 2026. The pressure is just as real: it lost its core anti-spoofing patent in November 2024, cut 15% of staff in April 2026, changed CEO in March 2025, and its legacy per-ping pricing is the exact thing cheaper challengers undercut. Pick it when regulatory certainty and the identity and licensing adjacencies matter more than per-check cost.
The challenger that prevailed in the patent case and is now winning the incumbent's business. Xpoint won the Federal Circuit patent case against GeoComply, which invalidated the incumbent's core anti-spoofing patent and cleared its own legal runway, and it has since put 28 US jurisdictions plus Ontario behind a Massachusetts vendor license (SWV-0065, exp 02/28/2031) and signed the firmest named clients in the segment, with PrizePicks announcing the partnership itself and bet365 switching to Xpoint Verify off GeoComply. The defining catch is scale and disclosure: Xpoint is the youngest of the three at founded 2019, its register breadth still trails GeoComply's 35-plus, and it has the thinnest public financials of the segment, with a Bettor Capital-led growth round in December 2025 whose size, valuation, and revenue are all undisclosed.
The third entrant into US gaming geolocation, and the one that changed the pricing conversation: Radar Labs is a 2016 New York location-infrastructure developer that added a gaming vertical only in 2023 and undercut GeoComply's per-ping billing with a published monthly-tracked-users model, the wedge behind the incumbent's own move to MTU and revenue-based alternatives. The defining strength is the segment's best developer story, an SDK-first product that migrated BetSaracen in three months against eighteen with the prior vendor, plus the only public pricing model of the three. The defining catch is depth: the gaming trail is the newest in the segment, Radar's 30+ North American licenses come with only about nine nameable today.
Our methodology
Each of the 18 vendors earns a Partnerkin score, a weighted average of six dimensions under its own segment's weights, because these are three different products bought by different people. Compliance registers stand in for the license this category cannot hold, and every register row prints with its class and expiry.
- 18
- vendors reviewed (12 identity, 3 fraud, 3 geo)
- 84
- data points tracked
- 1,141
- data cells
- 14
- data layers
How we weight identity verification
Verification coverage carries 22% because breadth in one integration is the product, and certifications 20%, with public register rows behind them. Integration and gaming footprint tie at 16%, because how it lands and who already runs it both decide fit. Commercials close at 12%, since most of the tier quotes on request.
Verification coverage
What the platform can actually check in one integration: document and biometric, liveness, age, AML screening, proof of address, non-doc and database validation, KYB, and reusable KYC, with speed figures as the vendor gives them.
Compliance & certifications
The class of the trail behind the claims: DIATF certification level, US state gaming registers where PA distinguishes Certified from Registered, iBETA and GLI reports with numbers, and SOC 2 or ISO scoped to the product rather than the parent group.
Integration & delivery
How the product actually lands: API and SDK surface, public developer docs and a sandbox before a contract, orchestration and no-code journeys, and dated integration and migration stories over a demo promise.
Gaming footprint
The depth of the named-client roster rather than its length: an operator quote outranks a bare announcement, which outranks a logo wall, and freshness matters. A live gaming vertical page is the floor.
Trust & track record
Corporate substance: tenure and founder continuity, ownership transparency, audited financials where they exist, restructurings as dated events, and the disclosure depth behind the certifications.
Commercials & transparency
Published per-check pricing against quote-only sales, what the published tier actually includes, and how much a buyer knows before the first call. Opacity is priced, not excused.
How we weight fraud & AML
Detection and data depth carries 24% because owning the risk signal is what separates a fraud vendor from an orchestration layer. Gaming footprint weighs 18%, since gaming-native fraud is rare and who names the vendor matters. Trust and compliance tie at 16%, and the segment is small enough that one weak dimension moves the whole card.
Detection & data depth
How much of the risk signal the vendor owns versus orchestrates, and how gaming-tuned it is: device intelligence, digital footprint across email and phone, real-time versus batch decisioning, transaction monitoring, and model explainability.
Gaming footprint
The depth of the named-client roster rather than its length: an operator quote outranks a bare announcement, which outranks a logo wall, and freshness matters. A live gaming vertical page is the floor.
Trust & track record
Corporate substance: tenure and founder continuity, ownership transparency, audited financials where they exist, restructurings as dated events, and the disclosure depth behind the certifications.
Compliance & certifications
The class of the trail behind the claims: DIATF certification level, US state gaming registers where PA distinguishes Certified from Registered, iBETA and GLI reports with numbers, and SOC 2 or ISO scoped to the product rather than the parent group.
Integration & delivery
How the product actually lands: API and SDK surface, public developer docs and a sandbox before a contract, orchestration and no-code journeys, and dated integration and migration stories over a demo promise.
Commercials & transparency
Published per-check pricing against quote-only sales, what the published tier actually includes, and how much a buyer knows before the first call. Opacity is priced, not excused.
How we weight gaming geolocation
Regulatory acceptance carries 28% because in this segment a register row is market access, and accuracy and anti-spoofing 22% because a spoof that gets through is a compliance failure. Integration, trust, and gaming footprint fill the middle, and commercials close at 10%, the one dimension where the ranking inverts against the incumbent.
Regulatory acceptance
How deep the acceptance runs on state and vendor registers: MGC sports-wagering vendor rows, state gaming supplier registrations, and how many jurisdictions a vendor can actually name. An aggregate license count carries weight only as far as the named jurisdictions behind it.
Accuracy & anti-spoofing
The VPN, proxy, GPS-spoof, emulator, and device-farm stack, and how battle-proven it is in state-mandated deployments rather than how broad the feature list reads on paper.
Integration & delivery
How the product actually lands: API and SDK surface, public developer docs and a sandbox before a contract, orchestration and no-code journeys, and dated integration and migration stories over a demo promise.
Trust & track record
Corporate substance: tenure and founder continuity, ownership transparency, audited financials where they exist, restructurings as dated events, and the disclosure depth behind the certifications.
Gaming footprint
The depth of the named-client roster rather than its length: an operator quote outranks a bare announcement, which outranks a logo wall, and freshness matters. A live gaming vertical page is the floor.
Commercials & transparency
Published per-check pricing against quote-only sales, what the published tier actually includes, and how much a buyer knows before the first call. Opacity is priced, not excused.
Why there is no single ranking
- Identity, fraud, and geolocation are three different purchases, so the three lists score different dimensions and never rank against each other.
- A vendor lives in the segment of what it primarily sells. SEON ranks as fraud even though it added native IDV in January 2026, and the review covers both.
- No vendor appears in two lists. GeoComply orchestrates identity through IDComply but ranks only as geolocation, its center of gravity.
- A live gaming vertical page is the entry gate, not the score. A vendor with no gaming page and no named operator does not make a list, however large it is elsewhere.
What we weigh that's specific to compliance vendors
The score says how good a vendor is. These six reads decide whether it fits your stack, and they run through every section on this page.
There are no gambling licenses here, so the registers that do apply carry the weight. PA PGCB rows label a vendor Certified or Registered, DIATF entries state their confidence level, and the Massachusetts MGC vendor PDF sits on the public register. A certification with no published issuer counts for less than a register row.
A quote from a named operator is worth more than the logo wall it sits above. When a logo's actual use case is narrower than the wall implies, the review pins the use case to the name.
A handful publish real per-check prices and the rest quote on request. We reward the published rate and note exactly what the published tier leaves out, because a $699 floor that excludes the AML module is a partial disclosure.
Certifications published with issuers and report numbers count for more than ones asserted without them, and audited financials, where they exist, anchor the trust read more than any adjective.
In fraud, the score turns on how much of the risk signal a vendor owns rather than orchestrates from third parties. In identity, reusable KYC and non-doc coverage are the depth tells. We separate what a vendor built from what it resells.
This vertical got eaten by acquisitions. Onfido became Entrust, Featurespace went to Visa, Ravelin sits inside Worldpay. A brand mid-transition carries integration and roadmap risk, and we price it.
Grade scale
Grades follow the site-wide scale: 8.0 and up excellent, 6.5 to 7.9 good, below 6.5 mixed. Each overall is the weighted average of six dimensions under the segment's weights shown above.
How to read the numbers
Updated August 2026. Every figure carries its date in the linked review.
The stories that moved this market
A shortlist drawn in 2023 would need rewriting today, mostly because of who bought whom. Every entry carries its date.
The M&A wave ate the vertical
Onfido became Entrust, Featurespace went to Visa (closed 2024-12-19), Ravelin was folded into Worldpay (agreement 2025-02-04), IDVerse went to LexisNexis, Veriff bought Vespia (2026-02), and Incode merged with AuthenticID (2025-08). IDnow's Corsair deal, announced in March 2025, is pending completion. Half the names a 2023 shortlist would have carried now sit inside a bigger company.
The Federal Circuit invalidates GeoComply's core patent
The Federal Circuit affirmed by Rule 36 (No. 23-1578) that US 9,413,805, the patent behind GeoComply's anti-spoofing, is invalid under Section 101 and Alice. GeoGuard still ships and stays the benchmark, but the moat is now commercial rather than legal, and Xpoint, the prevailing party, has a clear runway.
GeoComply's reset: a new CEO and a 15% cut
GeoComply cut 68 jobs in April 2026, about 15% of a roughly 450-person workforce, after a March 2025 CEO change (Kip Levin in for co-founder Anna Sainsbury). The incumbent now offers MAU and revenue-based pricing alongside its legacy per-ping billing.
Geolocation is a three-way race and bet365 splits by state
GeoComply covers 35-plus jurisdictions, Xpoint 28 states plus Ontario, and Radar competes on MTU pricing that undercuts both. bet365 runs Xpoint Verify in some states and names Radar in its help centers across seven others (CO, VA, AZ, IA, KY, NC, TN). One operator, different vendors per state.
This category has registers instead of licenses
Socure and GBG (as IDology) are PA PGCB Certified, GBG and several peers sit on the UK OfDIA DIATF list, and GeoComply, Xpoint, and Radar all appear on the same Massachusetts MGC sports-wagering vendor PDF (SWV-0025, SWV-0065, SWV-0064). No gambling regulator licenses a KYC vendor, but plenty of them publish who is cleared to serve their operators.
Register rows are quoted where they last stood, and the reviews update as they move.
Who is not here, and why
Reseller decks and search results keep attaching big compliance names to gaming they don't actually serve, or no longer do. We only rank a vendor with a live gaming vertical page and a named operator, so these get named and set aside instead of padding a list.
ComplyAdvantage
Gaming page deadA serious AML name, but its gaming page has been retired since November 2021 and no gambling operator is named. It shows up here only as a cross-edge, as a PayNearMe vendor, not as a gaming compliance product you can buy today.
Trulioo and Persona
Silent on gamblingTrulioo's own industries list omits gaming and names zero operators. Persona's acceptable-use policy is clean but its wall is OpenAI, Coursera, and Brex, with total silence on gambling. Large, capable, and not pitching this vertical, so neither makes a list built on named gaming adoption.
Napier AI
No gaming footprintBanking-only positioning, and no gambling operator is named anywhere, so there is nothing gaming-specific here to rank.
Featurespace and Ravelin
AbsorbedFeaturespace was bought by Visa (closed 2024-12-19) and its gaming URL now serves a bank-only page. Ravelin was folded into Worldpay as FraudSight, and it carries no gambling record of its own, so it lives as an attached note inside the Worldpay review rather than a standalone entry.
Incode, which merged with AuthenticID in August 2025, is on our watch list: it has gambling pages and 4.1B-plus checks a year but zero named regulated-gaming operators. It joins a list the moment it names one.
Responsible-gambling analytics and regulatory intelligence
These tools watch players for harm rather than fraud or identity, a separate layer we don't score as KYC vendors. Most of this market now sits under a larger owner, so who holds the vendor is part of what a compliance buyer is choosing.
Mindway AI
90% affiliate-ownedThe RG-analytics vendor most operators hear about. Better Collective, the affiliate group, has owned 90% of Mindway AI since January 2021, and that is worth knowing when the product's job is scoring player harm.
Department of Trust
FCA RAISP 995375A UK affordability and financial-risk checker authorized by the FCA as a Registered Account Information Service Provider (RAISP 995375), with Flutter, BetVictor, and Lottoland named around a May 2024 push. It has gone quiet across 2025 and 2026, so treat the momentum as dated.
Neccton
Inside OpenBetThe mentor player-protection product now sits inside OpenBet, which acquired Neccton in June 2023, and the old Neccton site now redirects. It is already covered in the OpenBet review as part of the Protect line rather than as a standalone vendor here.
Vixio
Regulatory intelligenceNot RG analytics but the neighboring regulatory-intelligence layer, tracking compliance obligations across markets. Perwyn-owned since December 2022, it is a monitoring subscription rather than a player-facing check, and it sits outside the scored roster.
Frequently asked
What operators, fraud teams, and US books ask before signing a compliance vendor.
Do I need one vendor for KYC, fraud, and geolocation, or three?+
Usually three, and this page keeps three rankings for that reason. Identity verification proves who a player is at signup, fraud and AML watch what they do over time, and geolocation proves where they are in US regulated states. The products, the buyers, and the scoring weights all differ, and almost nobody sells all three well. The borders do have traffic: SEON added native IDV in January 2026, GeoComply orchestrates identity through IDComply, and most identity vendors screen AML, but you still assemble the stack from more than one supplier.
How much does KYC and identity verification cost?+
A minority of vendors publish per-check pricing, and they are worth naming. iDenfy breaks its schedule down the furthest, a $1.35 base down to a $0.55 enterprise floor with every add-on itemized. Sumsub publishes $1.35 Basic and $1.85 Compliance. Shufti Pro lists $0.75 for its Standard tier, the category low, plus a $2,500 setup fee. In fraud, SEON publishes a $699 per month Starter, though that floor excludes the AML module. Everyone else quotes on request, so any other specific number you read is somebody's guess until it shows up on a price list.
What registers apply to KYC vendors if the category has no gambling licenses?+
Identity registers, not gambling ones. In the UK the OfDIA runs a statutory DIATF register of certified identity providers, and it prints the level of confidence. In the US, the Pennsylvania PGCB publishes a register that distinguishes Certified from Registered, and Socure and GBG (as IDology) hold the Certified class. State gaming vendor rows exist too, and the Massachusetts MGC sports-wagering vendor PDF lists GeoComply, Xpoint, and Radar on the same document.
Which geolocation vendor should a US sportsbook use?+
It depends on your states and your budget, and the segment is only three vendors. GeoComply is the incumbent US regulators standardized around, on the Massachusetts register, licensed across 35-plus jurisdictions, and running the checks behind DraftKings, FanDuel, Caesars, and BetMGM. Xpoint is the credible challenger, live in 28 states plus Ontario, with a clean legal record and the win in the patent case. Radar is the third entrant with the best developer story and the only published pricing model. bet365 settles the question by running different vendors in different states, so match the vendor to where you operate rather than to the brand.
Is gaming-native fraud detection a real category?+
Barely, and the ranking shows it with three vendors. SEON is the one gaming-committed fraud vendor with a signal it owns rather than rents, a live iGaming vertical, and operator voices behind it. Kinectify is 100% gaming-native, US casino and tribal first, but seed-stage at around 13 people with two operator-voiced references. LexisNexis RiskNarrative is a heavyweight fincrime orchestration layer whose named gaming references are entirely pre-2021. Most operators run a general fraud tool over their onboarding stack rather than buying a gaming-specific one, which is exactly why the segment is thin.
Does KYC connect to payments and onboarding, or is it separate?+
It connects, and the cleanest way to think about it is one player journey across two directories. The identity and AML checks on this page feed the KYB and merchant-onboarding work in the iGaming payment providers directory, and several of our payment reviews already carry a KYC vendor integration. If you are building the money side, the ranked payment providers are one page over.
How does fraud prevention relate to sportsbook integrity?+
They are neighbors, not the same thing. The fraud and AML vendors here watch a player's money and identity for abuse, while sportsbook integrity watches the betting markets themselves for match-fixing and suspicious wagering. An operator often runs both, and the integrity layer lives in the sportsbook data market rather than the compliance stack. Our sportsbook software directory covers the integrity monitors alongside the platforms and feeds.
What does the M&A wave mean for a vendor I'm evaluating?+
Read the ownership date before you sign. Onfido is now Entrust, Featurespace is inside Visa, Ravelin is inside Worldpay, IDVerse went to LexisNexis, Veriff bought Vespia, and Incode merged with AuthenticID, all since 2024. IDnow's Corsair acquisition, announced in March 2025, is pending completion as of July 2026. A brand mid-transition can carry SDK deprecation, roadmap uncertainty, and support churn, so ask where the product sits today and who owns the roadmap, and weigh that against the score.