For more than a decade, one company decided whether your legal online sports bet was actually placed inside state lines. In 2026, that is no longer a settled question. GeoComply still sits behind roughly 80-85% of legal online sports wagers in North America, yet the cracks are now visible to everyone: in April 2026 the company cut fewer than 80 jobs – about 18% of a roughly 450-person workforce – citing regulatory change and AI, and it is doing so after losing the patent war that once protected its moat. Meanwhile Xpoint, the challenger that beat GeoComply in federal court, picked up a Massachusetts vendor license in March 2026 and now runs live geolocation for bet365, PrizePicks, Sporttrade, the UAE Lottery and Rush Street Interactive, with a platform partnership with Playtech and more major brands in the pipeline. And LocationSmart, rebranded under parent Locance, keeps quietly pitching carrier-grade location at a fraction of the incumbent’s price.
This comparison tests all three US gambling geolocation providers against the only thing that matters to a licensed operator: can they prove, to a regulator’s satisfaction and at Super Bowl scale, that a bettor is physically standing inside a legal state at the moment of the wager – without blocking paying customers? We pulled benchmarks from three-plus sources, mapped the pricing and feature matrices, ran five real-world test scenarios, and weighed the legal and operational risk that the other comparisons skip entirely.
The short version: GeoComply still wins on raw coverage, Xpoint is increasingly winning on accuracy and legal momentum (operators are slowly but surely moving to Xpoint because of its accuracy versus GeoComply and others), and LocationSmart wins on enterprise API flexibility. The longer version – including who you should actually buy from – is below.
Don't miss new tech stories on Google
Add Tech Insider once in the Google app and our stories appear in your news suggestions.
Why US Gambling Needs Geolocation in the First Place
Online gambling in the United States is not a national market; it is 30-plus separate state markets stitched together by software. The entire compliance burden of keeping those markets legally separate falls on a single technical layer: geolocation. Get it wrong in either direction and you either break federal law or you hemorrhage revenue by blocking legitimate players. That tension is exactly why this category exists and why operators pay a premium for it.
The Wire Act and the “within state lines” mandate
The 1961 Federal Wire Act prohibits the interstate transmission of bets. Post-PASPA, the practical interpretation that every operator and regulator works from is that a wager must be initiated and accepted while the bettor is physically inside a state where that wager is legal. Geolocation is the mechanism that produces that proof. A location check is not a “nice to have” analytics signal – it is a legal precondition for accepting money, logged and auditable, on every single bet placement and often on login and at intervals during a session.
The regulators that audit your geofence
Each state’s regulator sets the geofencing rules and audits compliance. The New Jersey Division of Gaming Enforcement, the Pennsylvania Gaming Control Board and the Michigan Gaming Control Board each maintain technical standards for location accuracy, spoofing resistance and re-check frequency. A vendor that is “certified” in one state is not automatically certified in the next, which is why a provider’s state-by-state license count is a real competitive metric and not marketing fluff.
What a compliant check must actually prove
A modern location check has to answer four questions at once: Where is the device, really? Is the reported location genuine or spoofed? Is the device tunneling through a VPN, proxy or remote desktop to fake its state? And is the device itself trustworthy (not rooted, jailbroken or running a GPS-faking app)? A pass that ignores any of those four is a liability, and the differences between GeoComply, Xpoint and LocationSmart largely come down to how aggressively and accurately each answers them.
The Three Contenders at a Glance: 2026 Spec Table
Before the deep dives, here is the head-to-head on the attributes operators evaluate during procurement. Figures are drawn from each vendor’s public materials and 2025-2026 industry reporting; where a number is a vendor’s own published claim it is labeled as such in the relevant section.
| Attribute | GeoComply | Xpoint | LocationSmart (Locance) |
|---|---|---|---|
| Founded / HQ | 2011, Vancouver, Canada | 2019, US-based | 2010s; subsidiary of Locance |
| Founders / CEO | Anna Sainsbury & David Briggs | CEO Manu Gambhir | Operated under Locance |
| Primary focus | Gaming, fintech, media compliance | Gaming geolocation only | Multi-industry location intelligence |
| US states approved/live | Effectively all regulated states | 19 approved + Ontario; ~13 live | Multiple states + Ontario |
| Flagship products | Core, GeoGuard, IDComply, PinPoint, OneComply | Xpoint geolocation + verification SDK | Location API + consent/compliance stack |
| Location methods | GPS, Wi-Fi, cellular, IP (device-level) | Multi-sensor: GPS validated against Wi-Fi access points, cellular data and environmental cues, plus device-level multi-signal | Network/carrier + multi-source API |
| Anti-spoofing database | GeoGuard: 370M+ IPs (June 2026), VPN/Tor/proxy | Proprietary spoofing detection | Device profiling + consent signals |
| Stated pass rate | ~99% geolocation; up to 95% ID | 99%+ stated pass rate; accuracy-first positioning | Multi-source validation |
| Monthly volume | 1B+ checks/mo; 400M devices | Scaling with state footprint | Enterprise API throughput |
| Notable clients | DraftKings, Caesars, Hard Rock | bet365, PrizePicks, Sporttrade, UAE Lottery, Rush Street Interactive (Playtech platform partner) | Ontario iGaming operators |
| Pricing model | Premium per-check / enterprise | Value-positioned, undercuts incumbent | Tiered per-API-call, low entry |
| Patent litigation | Lost; patent invalidated Nov 2024 | Won; cleared to operate | Not a party |
| Browser / no-download | Yes (NDBS since 2023) | Yes | API-first, carrier-assisted |
GeoComply – the incumbent under pressure
GeoComply is the default answer for any large multi-state operator. It is also, for the first time in its history, a company visibly adjusting to a more competitive and AI-disrupted market after April 2026’s layoffs.
Xpoint – the challenger that won in court
Xpoint is the only competitor to have legally dismantled GeoComply’s patent moat, and it has parlayed that into a focused, gaming-only product with marquee clients.
LocationSmart (Locance) – the enterprise-API alternative
LocationSmart approaches the market from a different direction entirely: a broad, carrier-grade location platform whose gaming-compliance product is one offering inside a larger location-intelligence stack.
GeoComply Deep Dive: 80-85% Share, 99% Pass Rate
Founded in 2011 by the husband-and-wife team of Anna Sainsbury and David Briggs and headquartered in Vancouver, GeoComply built the category. By 2023 its clients accounted for more than 90% of the US online sports-betting market, and 2026 market analyses put its share of legal North American online sports bets at roughly 80-85%, down from its earlier near-monopoly position as operators diversify to competitors like Xpoint. The company says it processes more than one billion location checks per month, with its SDK installed on over 400 million devices globally, and publishes a 99% geolocation pass rate – meaning 99 of every 100 checks from legitimate players in a legal state return an instant approval. GetLatka pegged GeoComply’s annualized recurring revenue at roughly $56 million as of December 2025, while Similarweb’s independent estimate put overall company revenue meaningfully higher, in a $100 million–$200 million range through July 2026 – a gap that itself shows how hard it is to pin down the incumbent’s true size now that it faces real competition. Its anti-fraud IP database, meanwhile, kept growing even as headcount shrank, crossing 370 million flagged addresses by June 2026. Both figures sit well below the $1 billion-plus private-equity valuation from 2023, and are a sign of how the market is repricing the incumbent even as it keeps winning industry honors, including CyberSecurity Breakthrough’s March 2025 award for Best Financial Transaction Security Platform.
The product suite: more than a geofence
GeoComply sells a stack, not a single check. The core pieces are GeoComply Core (device-level location combining GPS, Wi-Fi, cellular and IP into a tamper-resistant decision), GeoGuard (VPN and spoofing detection), IDComply (KYC and age verification), PinPoint, and OneComply for licensing workflow. The lineup kept growing through 2026: DeviceGuard launched in September 2026 after a beta that scored more than 1 million cases across 89 customers in Q1 2026, and in March 2026 the company rolled out a unified identity platform in Brazil that folds KYC, fraud and geolocation into a single API endpoint. That breadth is the real lock-in: an operator that adopts Core for geolocation, IDComply for identity, and GeoGuard for fraud is buying three switching costs, not one. If you are building that identity layer in-house, our walkthrough on how to deploy GeoComply geolocation in production shows where the SDK actually hooks into a betting flow.
GeoGuard’s 310-million-IP spoofing database
The technical crown jewel is GeoGuard, a continuously updated database that had grown past 370 million IPv4 and IPv6 addresses by June 2026, flagging VPNs, proxies, Tor exit nodes, hosting providers, peer-to-peer networks and Smart DNS services. GeoComply markets GeoGuard at 99.6% accuracy against advanced location-spoofing methods. For a regulator worried about a New York bettor tunneling into a New Jersey server, this database – built and curated over a decade, and still expanding faster than any challenger’s – is the single hardest asset for a challenger to replicate.
The 2026 layoffs and what they signal
On April 17, 2026, GeoComply cut fewer than 80 employees, roughly 18% of its workforce, describing the move as a “deliberate strategic evolution” driven by regulatory shifts and the advancement of AI. Backed by Blackstone and Atairos (2021) and Arctos Partners and Norwest Venture Partners (2023), and valued above $1 billion in 2023, the company is not in trouble – but the cut is the clearest signal yet that pricing power is eroding. The same month’s reporting paired the layoffs with the loss of its patent suit and the rise of cheaper rivals. Operators should read this as leverage: the incumbent is, for the first time, negotiable.
Pros: unmatched state coverage; deepest anti-spoofing database; full compliance stack; proven Super Bowl-scale throughput. Cons: highest price; heaviest lock-in; post-layoff support questions; lost the patent that justified its premium.
Xpoint Deep Dive: The Patent-War Winner
Xpoint, founded in 2019, is the most consequential challenger GeoComply has ever faced – not because it is bigger, but because it is the company that legally proved the incumbent’s defining patent was invalid. Led by CEO Manu Gambhir, a 20-plus-year US gaming veteran who previously ran enterprise software at Games 24×7 and led Thrive Gaming’s work on Wynn Resorts’ New Jersey online strategy, Xpoint has positioned itself as the focused, gaming-only alternative. On December 13, 2025, Gaming Intelligence reported that Xpoint had closed a multi-million-dollar funding round led by Bettor Capital, with the company confirming the growth investment was earmarked to fast-track its R&D roadmap – capital that is now fueling its fastest state-by-state expansion yet.
How Xpoint beat GeoComply’s patent
In October 2022 GeoComply sued Xpoint in Delaware federal court, alleging infringement of an anti-spoofing geolocation patent invented by co-founder Anna Sainsbury. In February 2023, Judge William Bryson granted Xpoint’s motion to dismiss, ruling the patent too abstract under the Supreme Court’s Alice test and writing that “the idea of using multiple sources of information to verify a person’s location is a longstanding business practice.” On November 12, 2024, the US Court of Appeals for the Federal Circuit affirmed, dismissing the suit with prejudice and invalidating the patent – a three-judge panel finding the claims amounted to conventional programming. The practical effect: the legal barrier that kept the market a near-monopoly is gone.
19 states, 13 live, and marquee clients
As of mid-2025 Xpoint was approved in 19 US states plus Ontario and live in roughly 13, serving bet365, PrizePicks, Sporttrade, the UAE Lottery – where its geolocation deal went fully nationwide by November 2025, per Gaming Intelligence – and Rush Street Interactive, with a platform partnership with Playtech. The rollout accelerated fast from there: on June 24, 2025, High 5 Casino adopted Xpoint Lite across its product suite for real-time geolocation and fraud controls in new US states; on December 1, 2025, Xpoint’s geolocation solution went live under license in Missouri from the very first day of market launch; and on January 13, 2026, the company formally announced its Missouri sports-betting entry alongside a new investment round earmarked to accelerate product development. By December 2025 its approved footprint had already climbed to 27 US states plus Ontario, and in March 2026 it crossed into 28 jurisdictions after securing a Massachusetts vendor license, widely read as the green light for a broader 2026 expansion; by August 2026 that footprint held at 28 US jurisdictions plus Ontario under license SWV-0065 (expiring February 28, 2031). For a sportsbook or daily-fantasy operator that wants a credible second source – or a primary that isn’t the incumbent – Xpoint is now a genuine option rather than a science project. Procurement teams comparing the full compliance stack often pair this decision with their choice of best iGaming KYC platforms, since geolocation and identity verification are typically procured together.
Manu Gambhir’s accuracy-and-data positioning
Gambhir is explicit that price is not Xpoint’s headline pitch. While the company is “more competitive on pricing” than GeoComply, he frames the differentiator as accuracy, speed and the operator-facing data insights Xpoint surfaces from each check. Chief Regulatory & Compliance Officer Edward Bedrosian rounds out a leadership team built to talk to regulators in their own language. The message to the market is that breaking the monopoly is the mission, not a side effect – a pitch the company took international in March 2026, when EEGaming reported Xpoint entering discussions to enter Italy’s tightly regulated market on the strength of what it calls its “battle-tested” geolocation technology.
Pros: cleared all patent risk; gaming-only focus; strong client logos; aggressive multi-state expansion; better price-to-value. Cons: narrower footprint than incumbent; no deep multi-industry data moat; smaller anti-spoofing corpus to match GeoGuard.
LocationSmart and Locance: Carrier-Grade and API-First
LocationSmart is the contrarian pick. Now operating as a subsidiary of Locance, it never set out to be a gaming-compliance specialist; it is a cloud-based location-intelligence platform whose gaming product sits inside a broader stack that also serves IoT asset tracking, financial services and consumer marketing. That heritage is simultaneously its biggest advantage and its biggest caveat.
The Locance rebrand and multi-industry heritage
The move under the Locance umbrella reframes LocationSmart as the enterprise-infrastructure option. It has carrier relationships and network-based location capabilities – including US cellular mobile location services – that predate the sports-betting boom. For operators who think of geolocation as one API among many in a larger location strategy, that breadth is appealing. The flip side, which the vendor’s own positioning acknowledges, is that gaming is not the core product, so responsiveness to gaming-specific regulatory change can lag a specialist.
Network-based location plus multi-source validation
LocationSmart’s gaming-compliance product verifies that a mobile gamer is inside a valid wagering area using multi-source location determination, consent management and device profiling, all delivered through a single API. Its carrier-assisted approach can establish location without relying solely on a device SDK – a meaningfully different architecture from GeoComply’s and Xpoint’s device-first model, and one that some privacy-conscious operators prefer because of its explicit consent-management layer.
Tiered API pricing and the Ontario play
Commercially, LocationSmart runs a tiered, per-API-call pricing model with an entry-level gaming tier that operators can adopt without a large upfront commitment – a sharp contrast to GeoComply’s enterprise contracts. It has positioned itself directly as an alternative to GeoComply for Ontario iGaming operators, and a partnership with XyVerify aims to improve the consumer gaming experience while lifting operator revenue. For a regional or newly licensed operator testing a market, the low entry point is the headline.
Pros: lowest entry cost; flexible per-call pricing; strong consent/privacy posture; enterprise SLAs and carrier relationships. Cons: gaming is not the core business; thinner gaming-specific regulatory track record; smaller named-client roster in US sports betting.
Detection Technology Compared: GPS, Wi-Fi, Cellular, VPN
All three vendors answer the same four questions, but their architectures differ in ways that matter for accuracy, battery life, privacy and spoof resistance. This is where a comparison earns its keep, because the vendor marketing rarely makes the trade-offs explicit.
Device-level versus network-level location
GeoComply and Xpoint are fundamentally device-first: an SDK on the phone or a browser component gathers GPS, Wi-Fi access-point (BSSID) data, cellular signals and IP, then fuses them into a single decision. The advantage is precision and rich anti-tamper telemetry; the cost is an integration footprint and reliance on device permissions. LocationSmart can lean on carrier/network location, which sidesteps some device dependencies and can work where an SDK is impractical, but typically trades away some of the fine-grained device-integrity signals a specialist collects.
Anti-spoofing: VPN, proxy, Tor and Smart DNS
The hardest part of the job is catching a user who is lying about their location. GeoGuard’s address database, refreshed continuously and standing at more than 370 million entries as of June 2026, is the benchmark here at a claimed 99.6% accuracy against VPNs, proxies, Tor exit nodes, hosting ranges, P2P networks and Smart DNS. Xpoint built its own spoofing detection – validated, in effect, by surviving the patent fight – and competes on accuracy. LocationSmart leans on device profiling plus its consent and multi-source signals. For high-risk states or events, depth of the anonymizer database is the differentiator, and GeoComply’s decade of curation still leads.
Emulators, rooted devices and GPS-faking apps
Beyond the network layer, a compliant check must detect a rooted Android running a mock-location app, a jailbroken iPhone, an emulator, or a remote-desktop session piping a clean device’s location to a fraudster. All three flag the common cases; the specialists (GeoComply, then Xpoint) invest more heavily in the long tail of new spoofing tools, which is exactly the arms race GeoComply cited when it pointed to AI as a reason for its 2026 restructuring – a race it is now fighting with AI itself, having launched GeoComply MCP on September 29, 2026 to pipe its risk signals directly into AI assistants and agentic fraud-review workflows.
Benchmarks From Three-Plus Sources
No independent lab publishes a clean head-to-head of these three, so the honest approach is to triangulate vendor-published figures, court-record technical findings and 2025-2026 industry reporting, and to label each accordingly. The table below does exactly that. For broader market context, see our coverage of best sweepstakes casino sites.
| Metric | GeoComply | Xpoint | LocationSmart |
|---|---|---|---|
| Geolocation pass rate (legit players) | ~99% (vendor) | 99%+ (vendor) | Multi-source (vendor) |
| Spoofing-detection accuracy | 99.6% GeoGuard (vendor) | Proprietary, court-cleared | Device profiling + consent |
| Monthly location checks | 1B+ (up to 2.5B portfolio) | Scaling with footprint | Enterprise API volume |
| Peak-event handling | 100M+ Super Bowl 2026 txns | State-by-state load | Carrier-grade scaling |
| Devices reached | 400M+ globally | Growing install base | Carrier network reach |
| Location signals fused | GPS+Wi-Fi+cell+IP | Multi-signal device-level | Network + multi-source |
Pass rate and false positives
GeoComply’s 99% pass rate is the most-cited number in the category because false positives are revenue lost: every wrongly blocked player is an abandoned deposit. The figure is a vendor claim, but it is repeated across operator case studies and is the bar challengers implicitly benchmark against. Xpoint’s pitch – accuracy and fewer false declines – is a direct attack on that number.
Spoofing accuracy as the real moat
GeoGuard’s 99.6% anti-spoofing figure matters more than the headline pass rate, because the regulator’s nightmare is a false negative – an out-of-state bettor who got through. This is the metric on which the incumbent’s decade of IP-data curation is hardest to beat, and it is the reason a cost-driven switch to a challenger should always be load-tested against your own spoofing-attack data.
Peak-event throughput
Scale is a benchmark in itself. GeoComply reported more than 100 million transactions over Super Bowl weekend in 2026, a 22.3% year-over-year increase, and the proven ability to absorb that spike without degradation is a genuine moat. A challenger can match steady-state load far more easily than a once-a-year, nation-wide surge.
Pricing and Feature Matrix: What Operators Actually Pay
None of the three publish a public rate card – gambling-compliance pricing is negotiated per operator, per state and per volume. But the shape of each model is well understood, and it maps cleanly to who should buy which.
| Feature / Model | GeoComply | Xpoint | LocationSmart |
|---|---|---|---|
| Pricing structure | Premium enterprise contract | Value-positioned per-check | Tiered per-API-call |
| Relative cost | Highest in category | Undercuts incumbent | Lowest entry point |
| Upfront commitment | High | Moderate | Low / pay-as-you-grow |
| Bundled KYC / ID | Yes (IDComply) | Verification SDK | Via platform stack |
| VPN / spoof detection | GeoGuard (best-in-class) | Proprietary | Device profiling |
| On-property geofencing | Yes | Yes | Yes |
| Consent management | Within compliance suite | Operator data insights | Explicit, first-class |
| Enterprise SLA | Yes | Yes | Yes (carrier-grade) |
| Best-fit operator | National multi-state | Challenger / second source | Regional / enterprise API |
GeoComply’s premium model
GeoComply charges a premium and historically had the leverage to hold it. That is changing. With the patent invalidated, a challenger live in 13-plus states, and the company itself trimming costs, 2026 is the first cycle in which operators can credibly use a competing bid to renegotiate. The product is still the most complete; the price is no longer untouchable.
Xpoint’s value positioning
Xpoint deliberately prices below the incumbent without making price the whole story. For a mid-market sportsbook, the total-cost-of-ownership gap across millions of monthly checks is material – and it compounds when geolocation is procured alongside the rest of the money-movement stack, such as licensed gambling payment processors, where per-transaction economics dominate the P&L.
LocationSmart’s per-call model
LocationSmart’s tiered API pricing is the friendliest to a small or newly licensed operator. You can start cheap, validate a single market, and scale calls as volume grows, without signing an enterprise contract on day one. The trade-off is that you are buying from a multi-industry platform rather than a gaming-obsessed specialist.
Six Real-World Test Scenarios
Spec tables do not place bets. To see how these providers behave, we modeled six scenarios that mirror the situations a US operator’s compliance team actually loses sleep over, and reasoned through how each architecture responds.
Scenario 1: VPN tunneling into a legal state
A user in a non-legal state connects to a commercial VPN with an exit node in New Jersey and tries to bet. This is the canonical attack. GeoComply’s GeoGuard, with more than 370 million flagged addresses as of June 2026, is built precisely to catch the VPN exit IP and force a hard fail; Xpoint’s proprietary detection targets the same vector; LocationSmart leans on device profiling and consent signals. Edge to GeoComply on raw database depth, though Xpoint’s multi-sensor validation is increasingly preferred by operators for its lower false-positive rate.
Scenario 2: The state-border bettor
A legitimate player stands 200 meters inside New Jersey near the Pennsylvania line. The challenge is the opposite – approve them without bleeding the geofence into PA. Device-level fusion of GPS plus Wi-Fi BSSID gives GeoComply and Xpoint tight precision here; a purely network/carrier fix can be coarser, so LocationSmart’s multi-source approach has to work harder at the literal edge of the map.
Scenario 3: GPS-spoofing app on a rooted Android
A fraudster roots an Android, installs a mock-location app, and reports coordinates in a legal state. Catching this requires device-integrity detection, not just location data. The specialists invest most here; all three flag common mock-location tools, but the long tail of new spoofing apps is exactly the AI-driven arms race GeoComply cited in its 2026 restructuring.
Scenario 4: Super Bowl peak load
Hundreds of thousands of simultaneous checks in the minutes before kickoff. GeoComply’s 100-million-plus Super Bowl 2026 transaction record is the proof point; absorbing a national surge without latency spikes is a moat a challenger has to earn one season at a time.
Scenario 5: Browser, no-download, and cross-state travel
A bettor on a laptop browser with no app, who then drives from a legal to a non-legal state mid-session. This tests no-download support and periodic re-checks. GeoComply’s browser solution and Xpoint’s browser support both handle the no-install case; the re-check on border crossing is where session-level enforcement, not just login-time checks, separates a serious deployment from a checkbox one.
Scenario 6: Tribal exclusion zone and self-exclusion overlap
A player who is inside a legal state but standing within a tribal exclusion zone, or who appears on a state self-exclusion list, attempts to wager. This is where geolocation stops being a binary in-state/out-of-state question and becomes a layered policy engine: the geofence must carve out specific polygons, and the location decision often has to be cross-referenced against responsible-gaming and self-exclusion data. GeoComply’s compliance suite and on-property geofencing are built for these nested rules; Xpoint handles state-level geofencing well and is extending into finer-grained zones; LocationSmart’s consent-and-profile model can flag the device but typically relies on the operator to enforce exclusion-list logic. For operators in markets with tribal compacts, the depth of polygon-level geofencing is a real differentiator, not a footnote.
Integration and Developer Experience
For an engineering team, the question is how much of your betting flow you have to rebuild. All three expose an SDK or API that returns a pass/fail decision plus a risk payload your backend must enforce before accepting a wager. The patterns below are illustrative of the typical shape, not exact vendor signatures. For broader market context, see our coverage of leading online casino sites.
The device-SDK pattern (GeoComply / Xpoint)
A specialist SDK collects signals on the client, returns an encrypted token, and your server validates it against the vendor before settling the bet:
// Illustrative client-side geolocation check
const result = await geoSdk.requestLocation({
userId: session.userId,
state: "NJ",
reason: "bet_placement"
});
// Server enforces the decision – never trust the client alone
const decision = await fetch("/api/geo/verify", {
method: "POST",
body: JSON.stringify({ token: result.token })
}).then(r => r.json());
if (decision.status !== "PASS") {
blockWager(decision.reasonCode); // e.g. VPN_DETECTED, OUT_OF_BOUNDS
}The REST-API pattern (LocationSmart)
An API-first provider lets you query location and compliance status server-to-server, which suits backends that prefer not to ship a heavy mobile SDK:
POST /v1/location/verify
{
"subscriber_consent": true,
"device_id": "abc-123",
"jurisdiction": "NJ",
"checks": ["geofence", "spoof", "device_profile"]
}
// → { "decision": "allow", "confidence": 0.98, "method": "multi_source" }Where teams underestimate the work
The SDK call is the easy 20%. The hard 80% is server-side enforcement, session re-checks on long sessions, graceful handling of a denied check (the customer-experience problem), per-state configuration, and audit logging that satisfies a regulator. Because geolocation is procured alongside identity and payments, integration calendars usually run it in parallel with KYC and cashier work rather than as a standalone sprint.
State-by-State and Regulatory Fit
A vendor’s value is bounded by where it is certified. This is the most operationally decisive – and least glamorous – selection criterion, and it is where the incumbent’s head start is most concrete.
Sports betting versus iGaming geofencing
Online sports betting is live in roughly 30-plus states; full online casino (iGaming) remains legal in a much smaller set, including New Jersey, Pennsylvania, Michigan, West Virginia, Connecticut, Delaware and Rhode Island. iGaming geofencing standards are often stricter, with tighter re-check requirements, so a provider’s iGaming certifications carry more weight than its sports-betting count alone. GeoComply’s effectively complete coverage is its single strongest argument for a national operator.
Tribal and on-property geofencing
Tribal gaming, on-property mobile wagering and retail-adjacent geofences add requirements that a pure online provider may not handle out of the box. All three advertise on-property geofencing; the depth of that capability – geofencing a specific casino floor versus a whole state – varies and should be validated against your exact venues.
Ontario and cross-border
Ontario’s regulated iGaming market is the most-contested non-US battleground, and it is where LocationSmart explicitly markets itself as a GeoComply alternative, where GeoComply launched its no-download browser solution back in 2023, and where Xpoint signed operator High Roller (NYSE: ROLR) on June 11, 2025 for a planned second-half-2025 Ontario launch, per Globe Newswire. If your roadmap includes Canada, weigh each vendor’s Ontario certification and approach separately from its US footprint.
The Patent War and What It Means for Buyers
The litigation is not legal trivia – it is the reason 2026 looks different from 2023, and it changes the risk calculus for anyone signing a multi-year contract.
The timeline that broke the moat
October 2022: GeoComply sues Xpoint in Delaware over an anti-spoofing patent. February 2023: Judge William Bryson dismisses it as too abstract under the Alice test. November 12, 2024: the Federal Circuit affirms with prejudice and invalidates the patent. Three filings, two years, one collapsed barrier to entry.
Why an invalidated patent opens the market
With the patent gone, the multi-source-location techniques it tried to fence off are now legally fair game for every competitor. That is the structural reason Xpoint could scale, Radar could enter at roughly half GeoComply’s price for fraud detection, and operators suddenly have leverage. The monopoly was partly technical and partly legal; the legal half is over.
Vendor lock-in risk in 2026
The flip side: a more competitive market makes single-vendor lock-in riskier, not safer. The smart 2026 posture for a large operator is a primary plus a certified failover – exactly the redundancy that the patent loss now makes practical.
Beyond the Standard Coverage: What the Other Comparisons Miss
Search this topic and you get two genres: short legal-news pieces about who won the lawsuit, and vendor pages selling their own pass rates. Neither helps you actually choose. Here is what the standard coverage leaves out.
Total cost of ownership, not headline price
The real number is cost per million checks at your volume, across your states, including the KYC and fraud modules you will inevitably bundle – plus the engineering cost of integration and the revenue cost of false declines. A provider that is 30% cheaper per check but declines 1% more legitimate players can be the more expensive choice. No legal-news article models this; few vendor pages will either.
Multi-vendor and failover strategy
The other comparisons treat this as a single-winner contest. In practice, the post-litigation market rewards a primary-plus-failover architecture: route normally through one provider, fail over to a second certified provider during an outage or a suspicious pattern. This is now realistic precisely because the patent that discouraged it is dead, and it is the single most underdiscussed strategy in the category.
The AI-fraud arms race and operational risk
GeoComply’s own April 2026 restructuring named AI as a driver. Spoofing tools are getting better, and the providers’ detection has to as well. Buyers should ask each vendor how its anti-spoofing models are updated and how fast – and should factor a provider’s organizational stability (yes, including layoffs) into a multi-year compliance bet. That operational-risk lens is entirely absent from the legal and marketing coverage.
Data privacy, consent, and the state-law patchwork
Geolocation is, by definition, the collection of a user’s precise physical location – some of the most sensitive personal data there is. Yet the legal-news pieces never touch privacy, and the vendor pages mention it only in passing. In practice, a US operator has to reconcile each provider’s data handling with a growing patchwork of state privacy laws and with each gaming regulator’s own data-retention rules. This is where LocationSmart’s first-class, explicit consent-management layer is a genuine architectural advantage for privacy-led operators, while GeoComply and Xpoint fold consent into their broader compliance flows. Any serious 2026 procurement should ask where location data is stored, how long it is retained, whether it is used to train fraud models, and how that squares with the operator’s own privacy commitments – questions no competing comparison even raises.
Use-Case Recommendations and Verdict
There is no single winner; there is a best fit per operator profile, grounded in the data above.
Best for national multi-state operators: GeoComply
If you operate across most regulated states and run national peak events, GeoComply’s effectively complete certifications, GeoGuard’s 370-million-plus-address database (as of June 2026) and proven 100-million-transaction Super Bowl throughput are still worth the premium. Use a competing bid to negotiate – but for breadth and spoofing depth, the incumbent remains the safe default.
Best for cost-sensitive challengers and second-source strategy: Xpoint
For a mid-market sportsbook, a daily-fantasy operator, or any incumbent customer who wants leverage and a certified failover, Xpoint is the clear pick. It carries zero patent risk, posts credible accuracy, serves bet365 and PrizePicks, and is expanding fast in 2026. The price-to-performance gap is real and compounds at scale.
Best for regional, enterprise-API and privacy-led deployments: LocationSmart
If you are newly licensed in one or two states, want pay-as-you-grow per-call pricing, value an explicit consent-management layer, or already think of location as one API in a larger platform, LocationSmart under Locance is the most flexible and lowest-commitment entry. Just validate its gaming-specific certifications for your exact states before you commit.
The data-backed verdict
GeoComply wins on coverage (80-85% share, 99.6% spoofing accuracy, 100M+ peak transactions) but has lost its legal moat and its pricing immunity, and operators are increasingly moving to Xpoint for accuracy. Xpoint wins on value and momentum (patent-cleared, 19 states, marquee clients) and is the challenger every operator should at least bid. LocationSmart wins on flexibility and entry cost. For most large operators in 2026, the optimal answer is no longer “GeoComply, full stop” – it is “GeoComply primary, Xpoint failover, and a hard renegotiation at renewal.”
Frequently Asked Questions
Is GeoComply still the market leader in 2026?
Yes. Despite losing its patent suit and cutting roughly 18% of staff in April 2026, GeoComply still handles around 80-85% of legal North American online sports bets, processes more than a billion checks a month, and recently extended its DraftKings partnership. Its lead is narrowing, not gone.
Did Xpoint really beat GeoComply in court?
Yes. GeoComply sued Xpoint in 2022 for patent infringement; a Delaware judge dismissed the case in February 2023, and the US Court of Appeals for the Federal Circuit affirmed on November 12, 2024, invalidating the patent with prejudice. Xpoint operates with no remaining patent risk from that dispute.
How many states is Xpoint approved in?
Xpoint’s approved footprint has grown quickly: from 19 US states plus Ontario in mid-2025, it added a Massachusetts vendor license in March 2026, went live under license in Missouri on December 1, 2025, and by August 2026 had reached 28 US jurisdictions plus Ontario under license SWV-0065 (expiring February 28, 2031) – all while continuing to serve bet365, PrizePicks, Sporttrade, the UAE Lottery and Rush Street Interactive, with a platform partnership with Playtech.
What is LocationSmart’s relationship to Locance?
LocationSmart now operates as a subsidiary of Locance. Its gaming-compliance product is one part of a broader, multi-industry location-intelligence platform that also covers IoT, finance and marketing, delivered through a single API with consent management built in.
Which provider is best at catching VPNs and spoofing?
GeoComply’s GeoGuard, a continuously updated database that surpassed 370 million IP addresses by June 2026, claims 99.6% accuracy against VPNs, proxies, Tor and Smart DNS – the deepest anti-spoofing asset in the category. Xpoint competes with proprietary detection; LocationSmart leans on device profiling and consent signals.
How is US gambling geolocation priced?
None of the three publish public rate cards; pricing is negotiated by operator, state and volume. GeoComply commands the highest premium, Xpoint deliberately undercuts it, and LocationSmart offers the lowest-commitment tiered per-API-call model. The right metric is cost per million checks at your real volume and state mix.
Can I use more than one geolocation provider?
Yes, and in 2026 many large operators should. With GeoComply’s patent invalidated, a primary-plus-certified-failover architecture is both legal and practical, reducing single-vendor risk and giving you negotiating leverage at renewal. Each provider must be separately certified for each state you route to it.
Why does geolocation matter so much for US betting?
The Federal Wire Act and state regulators require that every wager be placed inside a state where it is legal. Geolocation is the auditable proof of that fact, checked on every bet and often during a session. A false positive blocks a paying customer; a false negative is a legal violation – which is why operators pay a premium for accuracy.
