Veriff Review
6.7/10Independent Estonian identity-verification vendor founded in 2015, covering a vendor-stated 12,500+ document types across 230+ countries with DIATF gamma (0.4) certification current in the UK, one named gambling operator on record (Easygo, the Stake.com and Stake.us group, case study April 2025), a $4M Illinois BIPA settlement (2023), and no public pricing.
Our read
Document plus biometric and liveness (ISO/IEC 30107-3 PAD Levels 1 and 2), age, database, AML/sanctions/PEP, and proof of address, with Fraud Protect (DocCheck, FaceCheck, CrossLinks) and Data Zoo database data across 40+ countries from February 2026, on a vendor-stated 12,500+ document types across 230+ countries, with KYB arriving mid-2026 via Vespia and no reusable-ID product.
DIATF gamma (0.4) certified on the newest UK framework version (in force 2025-07-01), covering Right to Work with CIFAS and PEP, plus a named-standard stack (SOC 2 Type II, ISO 27001:2022, PAD Levels 1 and 2, Cyber Essentials, FIDO), with issuers not published on-page and no US state gaming registration on record.
API plus WebSDK plus mobile SDKs with orchestration workflows that plug Data Zoo and other sources into one flow, and public developer docs, where the strongest documented gaming integration is the Stake deployment, with no rich named-platform list and no public pricing or SLA.
Thin on named operators: one flagship, Easygo (Stake.com and Stake.us), with a dated case study and a CPO quote (backlog of hundreds of thousands of documents cleared, 2025-04-02), and no second named gambling operator survives verification because every other trace fails the source test, so the footprint is real but shallow.
Independent and acquisitive (bought Vespia February 2026, the consolidation-wave counter-example), priced against a $4M BIPA settlement (McGowan v. Veriff, 2023) and two 2023 layoff rounds totaling about 167 roles (roughly halving from the Q3-2022 peak) after the 2022 unicorn round, with no Gartner or Forrester Leader placement surfaced.
No public price list, sales-led and on-request, with only third-party marketplace ranges rather than a vendor-published per-check rate.
Methodology. Our own score, a weighted average of six dimensions, tilted toward verification coverage and compliance. Weighted on the identity-verification scale, where verification coverage carries the most at 0.22 and compliance and certifications 0.20, with gaming footprint and integration each at 0.16, a shape that lets Veriff's broad coverage and current DIATF cert lift the score while the one-operator gaming footprint and opaque pricing hold it down. Read the full methodology
- Broad coverage: a vendor-stated 12,500 to 13,500+ document types across 230+ countries and 48 languages, with Fraud Protect (DocCheck, FaceCheck, CrossLinks for multi-accounting) and, from February 2026, Data Zoo database data across 40+ countries.
- DIATF gamma (0.4) certified, on the newest UK framework version (in force 2025-07-01) covering Right to Work with CIFAS and PEP options, a current certification, and not a stale badge held since July 2023.
- A flagship gaming case study with an operator voice: Easygo, the Stake.com and Stake.us group and the largest crypto-casino operator, cleared a backlog of hundreds of thousands of identity documents, with CPO Dan Richardson quoted (case study 2025-04-02).
- Independent and acquisitive while the vertical consolidates: Veriff is the buyer, announcing the Vespia KYB acquisition on 2026-02-05 (terms undisclosed) to add business verification to the platform by mid-2026, rather than a target being absorbed.
- Thin named gaming roster: exactly one named gambling operator survives verification, Easygo (Stake.com and Stake.us), and no second name holds up, since every other trace fails the source test, weaker than Sumsub's four or Jumio's roster.
- Two 2023 layoff rounds totaling about 167 roles, roughly halving from the Q3-2022 peak: about 66 people in February 2023 (12 percent) and about 101 in August 2023 (roughly a fifth), a real restructuring after the 2022 unicorn round, well past a single trim.
- A $4M Illinois BIPA settlement (2023) over facial-geometry consent, McGowan v. Veriff, class period roughly November 2016 to December 2022, with per-claimant payments of $300 to $600 and no admission of wrongdoing.
- No public pricing: sales-led and on-request, with only third-party marketplace ranges rather than a vendor-published per-check rate, unlike iDenfy or Shufti Pro.
- No confirmed US state gaming registration and no named reusable-identity product: no Pennsylvania registration is on record (July 2026), and CrossLinks links sessions for fraud defense with no consumer reusable-ID wallet behind it.
Operators wanting broad-coverage, independent IDV with strong PAD and liveness and a proven high-volume backlog-clearance story, especially crypto-casino, multi-market, or Brazil-expansion profiles that value a vendor doing the acquiring while its peers get absorbed.
Buyers who need published per-check pricing, a deep named-operator reference list, or a confirmed US state gaming supplier registration, since Veriff has one named gambling client and no confirmed US register.
Markets & licensing
Veriff's regulatory story is UK-anchored and clean. It is certified against the UK DIATF gamma (0.4) framework, the version released for certification on 2025-06-26 and in force from 2025-07-01, covering Right to Work with CIFAS and PEP screening options, and it was originally DIATF-certified in July 2023 under the earlier framework version, so this is a maintained certification rather than a one-time badge. Alongside it, the gaming page names SOC 2 Type II, ISO/IEC 27001:2022, ISO/IEC 30107-3 PAD Levels 1 and 2, UK Cyber Essentials, and FIDO Certified, but the issuers are not published on the page, so those read as named-standard and vendor-stated. On the US side there is no state gaming registration on record, which puts Veriff behind the Pennsylvania-registered peers on the US lens. DIATF gamma is register-grade and current, the strongest anchor in the trail.
For a US state-licensed operator, Veriff is not register-anchored. No US state gaming registration is on record. That puts Veriff behind Socure, GBG, and Shufti Pro, which carry Pennsylvania registrations, on the US lens specifically. Veriff serves US identity traffic as part of its global coverage, and its one named gambling client runs Stake.us, but a state-register-anchored KYC vendor is not what this file can claim for it.
The UK is where Veriff's trail is strongest. It is certified against DIATF gamma (0.4), the framework version in force from July 2025, covering Right to Work with CIFAS and PEP options, and it held DIATF certification back to July 2023 under the previous version. That is a current, maintained UK certification of the kind a UK-facing operator can rely on for onboarding, and it sits ahead of vendors whose DIATF position is unconfirmed.
- UK DIATF gamma (0.4) certificationUnited Kingdom
- Certified against the current DIATF framework version (gamma 0.4), covering Right to Work with CIFAS and PEP screening options, the load-bearing regulatory anchor · gamma (0.4) in force 2025-07-01 · originally DIATF-certified July 2023
- SOC 2 Type II, ISO 27001:2022, PAD Levels 1 and 2International
- Named-standard certifications on the gaming page, with SOC 2 Type II, ISO/IEC 27001:2022, ISO/IEC 30107-3 PAD Levels 1 and 2, UK Cyber Essentials, and FIDO Certified listed · Issuers not published on-page (vendor-stated) · read 2026-07-12
- Pennsylvania PGCB (unresolved)United States
- No US state gaming registration on record · register PDF header as of 2026-02-18
Licensing tier: The trail is real but UK-shaped: DIATF gamma (0.4) is a current, register-grade certification and the strongest anchor Veriff carries, while the SOC 2, ISO, and PAD certs have no on-page issuer and the US state register is unresolved, so verification grades partial rather than verified.
Veriff is a multi-industry IDV vendor with a dedicated gaming page and one named gambling case study, so its gaming footprint is a vertical within a global book rather than a set of state registers (read 2026-07-12).
No restricted-market list applies. The relevant limit is the US lens, where Veriff holds no confirmed state gaming registration (2026-07-12).
Platform & capabilities
The feature set: what's built in. Capabilities light up when present. Anything not shown isn't offered or isn't disclosed.
Integrations & engineering
One contract and one API instead of a separate deal per studio, feed, or PSP. Here's what connects, how fast, and on what stack.
Integration is one API plus a WebSDK and mobile SDKs for iOS and Android, with orchestration workflows so that Data Zoo and other data sources plug into the same verification flow. The document, biometric, age, database, and AML checks resolve through that single integration, Fraud Protect layers DocCheck, FaceCheck, and CrossLinks on top, and KYB from the Vespia acquisition is set to passport into the same account by mid-2026. The strongest documented gaming integration is the Easygo/Stake deployment, and Veriff's gaming relationships are with operators rather than with the B2B platforms in this directory, so the directory cross-edges are thin.
No public claim for iGaming (2026-07-12). The Easygo case study describes the integration as one of the easiest workstreams on the operator's whole website, but Veriff publishes no dated integration-time figure, so the real calendar comes out of the sales process.
Products & tools
One API into document and biometric verification, liveness with ISO/IEC 30107-3 PAD Levels 1 and 2, age and database checks, and AML sanctions and PEP screening, wrapped by Fraud Protect (DocCheck, FaceCheck, and CrossLinks for multi-accounting) and, from February 2026, Data Zoo database data across 40+ countries.
Identity & Document Verification
The onboarding core: document verification, biometric selfie with liveness at ISO/IEC 30107-3 PAD Levels 1 and 2, age verification, database verification, AML sanctions and PEP screening, and proof of address, across a vendor-stated 12,500+ document types in 230+ countries and 48 languages.
- 12,500 to 13,500+ government-issued document types across 230+ countries and territories (vendor-stated, read 2026-07-12)
- Biometric selfie and liveness certified to ISO/IEC 30107-3 PAD Levels 1 and 2, a named presentation-attack standard
- Age verification, database verification, and proof of address on the same integration
- AML, sanctions, and PEP screening framed for the gaming compliance use case on the gambling page
- A vendor-stated 6-second average verification time and 1,000+ data points analyzed, on the main product page
Fraud Protect
The fraud module layered on top of verification: DocCheck flags document-manipulation signals, FaceCheck flags selfie-biometric manipulation, and CrossLinks ties an incoming session to existing ones through technical data, document information, and face embeddings, the multi-accounting and velocity-abuse defense.
- DocCheck: document-manipulation detection signals on submitted IDs
- FaceCheck: selfie-biometric manipulation detection
- CrossLinks: links sessions via technical data, document info, and face embeddings for multi-accounting defense
- Positioned on the gaming page against chip dumping, bonus abuse, and multi-accounting
- Device and network diagnostics plus video-based behavior analysis on the same page
Database Verification with Data Zoo
Announced February 18, 2026: the Data Zoo integration adds authoritative government and database data from 40+ countries through a single API, extending Veriff into non-document verification for real-time KYC and fraud checks alongside the document-first core.
- Authoritative government and database data from 40+ countries via one API (announced 2026-02-18)
- Non-document verification, closing part of the gap against data-matching vendors
- Plugs into the same orchestration flow as document and biometric checks
- Real-time KYC and fraud use cases named in the announcement
- Part of a 2026 platform expansion that also adds KYB through the Vespia acquisition
On the record
The history that matters: the milestones, the scale, the awards, and who runs it.
Kaarel Kotkas founded Veriff in Tallinn in 2015, and it grew into an independent, multi-industry identity-verification vendor serving fintech, crypto, mobility, marketplaces, and gaming. It raised a $100M Series C in January 2022 at a $1.5B valuation, co-led by Tiger Global and Alkeon, becoming a unicorn, then cut staff hard in two 2023 rounds as the market cooled, stabilizing near 500 people. Rather than being absorbed in the identity-vendor consolidation, Veriff turned buyer: it announced the acquisition of the Estonian KYB platform Vespia on 2026-02-05 (terms undisclosed) to add business verification to its platform by mid-2026, and integrated Data Zoo database data across 40+ countries in February 2026. Gaming is a named vertical with a dedicated page and one flagship case study (Easygo/Stake), real but not the core of the business.
Brands & clients on the platform
Corporate
- Vespia (2026)
Leadership
Milestones
- 2015
Kaarel Kotkas founds Veriff in Tallinn, Estonia, as an identity-verification company.
- 2022
Raises a $100M Series C at a $1.5B valuation (January), co-led by Tiger Global and Alkeon, reaching unicorn status, with headcount at 427 by Q3.
- 2023
Cuts staff in two rounds, about 66 people in February (12 percent) and about 101 in August (roughly a fifth), totaling about 167 roles, and settles the McGowan v. Veriff Illinois BIPA class action for $4M with no admission of wrongdoing (final approval hearing May).
- 2025
Publishes the Easygo (Stake) case study (April 2), its flagship named gaming reference, and certifies against the UK DIATF gamma (0.4) framework that came into force July 1.
- 2026
Announces the acquisition of the Estonian KYB platform Vespia (February 5, terms undisclosed) for business verification by mid-2026, and integrates Data Zoo database data across 40+ countries (February 18).
Where they're pushing next
- KYB business verification via Vespia, to be commercially available on the platform by mid-2026
- Non-document verification via the Data Zoo integration across 40+ countries (from February 2026)
- Crypto-casino and Brazil expansion on the back of the Stake deployment
Awards & recognition
Trust signals
The checks an operator runs before signing: incidents, enforcement, ownership, and longevity, from our research.
- Litigation or public disputes on record
Veriff vs alternatives
The same attributes, side by side, from our normalized provider set, useful for seeing where this vendor fits against its peers.
| Attribute | Veriff | Sumsub | Jumio | IDnow |
|---|---|---|---|---|
| Founded | 2015 | 2015 | 2010 | 2014 |
| Team | — | 500+ | — | 500+ |
| US market | Available | — | Available | Restricted |
| Pricing | Not published | Public | Not published | Not published |
| Country coverage | 230+ countries | Document-free verification in… | 200+ countries and territories | 193 countries |
| UK DIATF | UK DIATF gamma | Certified IDSP | Yes | UK DIATF accredited at medium… |
The take: Sumsub is the deeper-gaming, public-pricing rival, with four named operators and a per-check rate card where Veriff has one named operator and no public pricing, though Veriff matches it on raw coverage. Jumio is the all-in-on-gaming rival with the segment's deepest named-operator roster, against Veriff's single case study. IDnow is the EU-regulated peer with a productized UK affordability lens. Pick Veriff when broad coverage, a current DIATF cert, PAD-anchored liveness, and an independent, acquisitive vendor outweigh a deep named-operator list and published pricing.
Pricing & terms
Veriff quotes pricing on request. Exact figures come at the deal stage, under NDA. Here's what's public about the model and terms.
Sales-led and on-request, with no vendor-published per-check or platform rate and only third-party ranges on marketplace sites (2026-07-12)
Turnkey
White-label
Support & account management
The service layer operators inherit: availability, the channels support runs on, and language coverage.
Frequently asked
The things operators actually ask before signing.
Which gambling operators use Veriff?+
One named operator survives verification: Easygo, the group behind Stake.com and Stake.us and the largest crypto-casino operator. Its case study, dated April 2, 2025, describes Veriff clearing a backlog of hundreds of thousands of identity documents and providing near-real-time age and identity validation, with Easygo CPO Dan Richardson quoted that Veriff is much faster than the manual in-house solution and that it was one of the easiest workstreams on the whole website. The case study frames a Stake Brazil expansion, Stake's third-largest market as of 2024. No second named gambling operator holds up, because every other trace fails the source test, so Veriff's named gaming roster is thin next to Sumsub or Jumio.
Did Veriff have a privacy problem, and what happened with the layoffs?+
Two dated red-flag items. On privacy, Veriff settled an Illinois BIPA class action, McGowan v. Veriff, for $4M in 2023, over collecting facial geometry for identity verification without BIPA-compliant consent across a class period of roughly November 2016 to December 2022, with per-claimant payments of $300 to $600 and no admission of wrongdoing, after which Veriff added consent flows and a public retention schedule. On headcount, Veriff cut staff in two 2023 rounds, not one: about 66 people in February (12 percent) and about 101 in August (roughly a fifth of the workforce), totaling about 167 roles and roughly halving the company from its Q3-2022 peak of 427, which the company attributed to overly vigorous hiring into a cooling market.
Is Veriff independent, or owned by a bigger player?+
Independent, and it does the acquiring. Veriff is a Tallinn-based company founded in 2015 by CEO Kaarel Kotkas, and while much of the identity-verification field has consolidated into larger owners, Veriff announced the acquisition of the Estonian KYB platform Vespia on February 5, 2026, to add business verification to its platform by mid-2026. The financial terms of that deal were not disclosed, so the acquisition carries no confirmed price or structure on the record. That independent, acquisitive posture is one of Veriff's real advantages against absorbed competitors.
How broad is Veriff's coverage, and does it have a reusable-identity product?+
Coverage is one of Veriff's strengths: a vendor-stated 12,500 to 13,500+ government-issued document types across 230+ countries and territories in 48 languages, with document, biometric and liveness (ISO/IEC 30107-3 PAD Levels 1 and 2), age, database, and AML checks on one integration, plus Data Zoo database data across 40+ countries added in February 2026. It does not, however, have a named reusable-identity or identity-passport product. CrossLinks, part of Fraud Protect, links sessions for multi-accounting defense but is a fraud feature with no reusable-ID wallet behind it, so buyers who want a Sumsub-ID-style reusable KYC network will not find a named Veriff equivalent as of July 2026.
Is Veriff a registered US gaming vendor, and does it publish pricing?+
No confirmed US state gaming registration, and no public pricing. No US state gaming registration is on record, which puts Veriff behind Socure, GBG, and Shufti Pro on the US register lens even though it serves US identity traffic globally and its one named gambling client runs Stake.us. On pricing, Veriff is sales-led and on-request, with only third-party marketplace ranges and no vendor-published per-check rate, so budget for a fully negotiated contract.