For most of the last decade, the phrase “US gambling geolocation” had exactly one answer: GeoComply. The Vancouver-headquartered company built a near-monopoly on the invisible layer that decides whether your sports bet is legal – the software that confirms you are physically inside New Jersey, Pennsylvania or Ohio before a deposit clears. In 2026 that answer is finally contested. GeoComply still sits behind roughly 95% of legal North American online sports wagers, but the cracks are now visible to everyone: the company lost the patent that protected its anti-spoofing method, then cut roughly 18% of its workforce in April 2026, all while Xpoint scaled on fresh capital and LocationSmart re-emerged under a new parent, Locance, undercutting the incumbent on price.
This comparison is written for the person who actually has to sign the contract: the compliance lead, the head of payments, or the platform engineer at a licensed sportsbook, iGaming operator or sweepstakes platform who needs to pick a geolocation vendor in 2026 and defend that choice to a regulator. We pulled benchmarks from three independent sources, reconstructed the patent litigation that reset the market’s pricing power, ran five real-world spoofing scenarios past each stack, and built a pricing and total-cost-of-ownership model. Where the standard comparison blogs stop at “GeoComply is the leader, Xpoint is cheaper,” we keep going – into false-positive rates, the layoffs, the Locance rebrand, and the new entrant (Radar) that the invalidated patent made possible.
Don't miss new tech stories on Google
Add Tech Insider once in the Google app and our stories appear in your news suggestions.
The 2026 Geolocation Landscape: Why the Incumbent’s Moat Cracked
US gambling geolocation exists because of a single legal reality: the Wire Act and state-by-state licensing mean a bet is only legal if the bettor is physically inside a regulated jurisdiction at the moment of the wager. Every licensed operator in more than 30 US jurisdictions is required by its regulator to verify player location in real time, block prohibited states, and detect attempts to fake a location. That mandate is non-negotiable, which is why the geolocation vendor is one of the highest-leverage compliance decisions an operator makes.
For years, GeoComply’s leverage came from two moats. The first was regulatory: it was the vendor regulators already knew, the default written into countless compliance playbooks. The second was legal – a patent covering the idea of combining multiple location signals to detect spoofing. In November 2024 the second moat collapsed when the US Court of Appeals for the Federal Circuit affirmed a district court ruling invalidating that patent. The multi-signal techniques GeoComply tried to fence off became legally fair game for every competitor. That single ruling is the structural reason 2026 looks nothing like 2022.
What geolocation compliance actually enforces
A compliance-grade geolocation check does three things at once. It confirms the device is inside the licensed state (geofencing, often down to a few hundred meters near borders). It detects location fraud – VPNs, proxies, GPS spoofing apps, rooted devices, remote-desktop tools, and “proxy betting” rings. And it produces an auditable record the regulator can inspect. A consumer-grade “where is this IP” lookup fails all three; a wrong answer means either a blocked legitimate customer (lost revenue) or an illegal out-of-state bet (a licensing threat).
The three names every US operator evaluates
The shortlist in 2026 is GeoComply (the incumbent with ~95% share), Xpoint (the plugin-free challenger that won the patent case and raised new capital in December 2025), and LocationSmart, the carrier-data specialist now operating under parent company Locance. A fourth name, Radar, has entered at roughly half GeoComply’s price for fraud detection – a direct consequence of the patent falling. We focus on the three principals but flag where Radar and Locance’s broader platform change the math.
GeoComply in 2026: Still 95% of the Market, Newly Vulnerable
GeoComply remains the gravitational center of US gambling geolocation. Founded in 2011 and majority-owned by Blackstone since 2021 (with Arctos also on the cap table), the company processes on the order of 1.2 billion geolocation checks every month and supports very nearly 100% of the legal US online sports-betting market. During Super Bowl LIX in February 2025 it recorded more than 100 million geolocation transactions in a single weekend – a scale no competitor can yet claim. Its client roster reads like the industry itself: DraftKings, FanDuel, BetMGM, Caesars and Fanatics. Its actual financial size is harder to pin down than its market share: business-data tracker GetLatka estimated GeoComply’s 2025 revenue at roughly $56 million as of December 2025, while Owler’s company profile still had it parked in a far broader $100–$500 million annual-revenue band as of March 2025 – a spread wide enough that any buyer doing vendor-financial-health diligence should treat both figures as rough triangulation, not fact.
That scale is real, and it is why GeoComply is still the safe default for a national multi-state operator. But 2026 exposed the cost structure underneath it. When your moat is regulatory familiarity plus an invalidated patent, and challengers can now legally copy your core method, pricing power erodes – and so does headcount.
The product stack: Core, GeoGuard, IDComply and PinPoint
GeoComply’s compliance layer is GeoComply Core, delivered on desktop web through a browser plugin (the PLI) and on mobile through native SDKs. Its fraud-and-VPN engine is GeoGuard, which maintains a continuously updated database of more than 310 million IP addresses flagged for VPN, proxy, Tor and Smart DNS use. IDComply handles KYC orchestration and PinPoint targets illegal-market intelligence. This breadth – compliance, anti-fraud and identity under one roof – is a genuine advantage for operators who want a single vendor. Teams standing up a new deposit gate often pair that stack with a server-side rules layer; our walkthrough on how real-money sportsbook operators wire GeoComply into a production deposit gate shows exactly where the geolocation verdict slots into the transaction flow. GeoComply is also pushing that stack beyond the US: in March 2026 it unveiled an integrated identity platform built specifically for Brazil’s newly regulated betting market, folding KYC and geolocation into a single onboarding layer for operators entering the country – a sign the company is chasing growth abroad even as competition narrows its lead at home.
The April 2026 layoffs and what they signal
On 15 April 2026 GeoComply laid off roughly 80 employees – about 18% of a workforce of more than 450 (Sportico pegged the cut nearer 15%). The reductions hit engineering, data science, risk-and-fraud analysis and customer support. Management cited a shifting regulatory and technology landscape, the rise of AI, and – tellingly – “increased competition,” naming the pressure from Xpoint and Radar and the lost patent suit as context. For a compliance buyer, layoffs are a due-diligence signal, not a disqualifier: they raise fair questions about support responsiveness and roadmap velocity that you should put directly to your account team.
Xpoint in 2026: The Plugin-Free Challenger That Won in Court
Xpoint launched in 2021 with a deceptively simple pitch: the same compliance posture as GeoComply, but without the desktop browser plugin. That single design decision is the company’s entire wedge. The plugin is the most-complained-about friction point in US online gambling – every desktop bettor has to download and run it – and industry estimates put the resulting drop-off at 3–8% of first-deposit conversion. Xpoint’s bet is that a plugin-free flow using native mobile and browser SDKs converts more good users while catching the same fraud.
In 2025–2026 that bet started paying off. Xpoint’s detection stack combines GPS, Wi-Fi, IP, VPN and behavioral signals – the exact multi-signal approach GeoComply’s patent tried to monopolize – which is why the court ruling matters so much to Xpoint specifically.
No browser plugin: the UX and fraud trade-off
CEO Manu Gambhir frames the incumbent problem bluntly: “iGaming companies in the U.S. face three key challenges regarding geolocation. The first is a dependency on a single geolocation provider,” he told GGB, adding that “geolocation became expensive early on due to a reliance on a single provider.” On fraud he is equally direct: “Fraudsters often attempt to spoof their locations to match fake accounts. Geolocation technology can help detect these mismatches, preventing fraudulent activity.” The skeptic’s question – does dropping the plugin weaken spoof detection? – is legitimate, and it is exactly the kind of claim that belongs in a penetration test rather than a brochure. We put it through our scenario battery below.
Bettor Capital funding and the client wins
On 19 December 2025 Xpoint closed a new growth round led by existing investor Bettor Capital, which the company said on LinkedIn would “fast-track our product roadmap”; by January 2026, industry outlet Betting Startups was describing the raise as a multi-million-dollar growth investment. Founder David Van Egmond said “robust regulatory and compliance technology is absolutely essential and Xpoint has proven to consistently deliver substantial value to a growing roster of real-money online gaming operators.” By 2025 Xpoint was approved in 19 US states plus Ontario and live in roughly 13, adding a Massachusetts vendor license in March 2026. Its marquee deployments include bet365’s North American operations, PrizePicks and Sporttrade, and as of December 2025 the company said its platform was trusted across North America, Brazil and the UAE Lottery, alongside its existing work with Play971. Gambhir’s stated use of the new capital: “to ship a wave of new capabilities that help operators defeat location spoofing, streamline compliance and convert more good users.”
LocationSmart Under Locance: Carrier-Grade at a Fraction of the Price
The quietest but most structurally interesting change of 2026 is that LocationSmart now operates as a subsidiary of Locance. LocationSmart was never a gambling-first company – it is a location-intelligence platform with carrier relationships and network-based location capabilities (including US cellular mobile location services) that predate the sports-betting boom entirely. Under the Locance brand, gaming compliance is one product inside a broader stack that also serves IoT asset tracking, financial services and consumer marketing, all delivered through a single API with consent management built in.
That heritage produces a fundamentally different value proposition. Where GeoComply and Xpoint are device-and-network detection engines, LocationSmart leans on carrier-grade mobile-network triangulation – asking the mobile operator’s network where the SIM is, rather than trusting the handset’s GPS. For a mobile-heavy operator, that is a different (and complementary) trust model.
The Locance rebrand explained
Practically, the rebrand signals a positioning shift from “a geolocation vendor” to “a consent-first location platform that happens to serve gaming.” For a newly licensed operator in one or two states, Locance’s pitch is the lowest-commitment entry point of the three: pay-as-you-grow per-call pricing, lower entry minimums, and no requirement to buy a full compliance suite. As of May 2026, SourceForge listed LocationSmart’s published pricing starting at $995 per month, layered with transactional usage fees and an optional per-device pricing tier – the first time any of the three vendors has put a concrete, publicly listed starting price on the table rather than pure deal-by-deal quoting. It is the option that treats location as one API in a larger system rather than a bespoke gambling integration.
Consent management as a differentiator
Locance’s built-in consent layer is more than a checkbox. New US data-privacy laws – California’s CPRA, Washington’s My Health My Data Act, Oregon’s H.B. 2008 and a recent Maryland law – increasingly treat precise location as “sensitive” data, triggering stricter consent and handling rules. A vendor whose platform captures and manages that consent natively reduces the operator’s own privacy-compliance surface. In a comparison usually fought on accuracy and price, the consent-management angle is a real 2026 differentiator that the incumbent-versus-challenger framing tends to ignore.
Head-to-Head Specifications: The 13-Row Comparison
The table below distills the three vendors across the attributes that actually drive a 2026 purchasing decision. Pricing figures are reported industry ranges, not published MSRP – geolocation is quoted deal-by-deal, and no vendor lists a rate card publicly.
| Attribute | GeoComply | Xpoint | LocationSmart (Locance) |
|---|---|---|---|
| Founded | 2011 | 2021 | Pre-2010 (carrier heritage); Locance parent 2025 |
| Ownership / backing | Blackstone (2021), Arctos | Bettor Capital-led round, Dec 2025 | Subsidiary of Locance |
| Primary detection method | Multi-signal device + network | Multi-signal device + network | Carrier-grade mobile triangulation |
| Desktop browser plugin required | Yes (PLI) | No | No |
| Detection layers | GPS, Wi-Fi, IP, VPN, behavioral, plugin | GPS, Wi-Fi, IP, VPN, behavioral | Network location + IP + consent |
| VPN/proxy database | 310M+ IPs (GeoGuard) | Proprietary VPN/proxy engine | Network-origin based |
| Published accuracy benchmark | 99.1% VPN detection, 0% false positive (Sept 2025) | Not independently published | Carrier-grade, not independently published |
| US state coverage | ~100% of legal market | 19 states + Ontario approved, ~13 live | Multi-state via carrier network |
| Notable clients | DraftKings, FanDuel, BetMGM, Caesars, Fanatics | bet365 (NA), PrizePicks, Sporttrade | Single/dual-state and mobile-heavy operators |
| Monthly volume | ~1.2 billion checks | Scaling | Multi-industry platform volume |
| Pricing model (reported) | Per-check + monthly minimum, premium tier | Lower per-check + lower minimums | Pay-as-you-grow per-call, lowest minimums |
| Consent-management layer | Available in suite | SDK-level | Built into single API |
| Best-fit operator | National multi-state | Growth-stage, 1–19 states, UX-sensitive | New 1–2 state entrant, mobile-first |
Detection Accuracy Benchmarks: VPN, Proxy and Spoof Catch Rates
Accuracy is where marketing meets measurement. Only one of the three vendors has a recent, independently tested public benchmark, and it is worth stating precisely because most comparison articles quote vendor brochures without a source.
GeoGuard’s 99.1% detection at a 0% false-positive rate
In September 2025 GeoComply announced that its GeoGuard engine achieved a 99.1% VPN detection rate with a 0% false-positive rate, in testing conducted by the independent firm Kingsmead Security Ltd and published via Business Wire. GeoComply’s own GeoGuard materials additionally claim 99.6% accuracy against VPNs, proxies, Tor and Smart DNS across use cases, rising to 99.8% for streaming and 99.9% for other fraud scenarios. The 0% false-positive figure is the number compliance teams should care about most: a false positive is a legitimate, in-state bettor wrongly blocked – pure lost revenue and a support ticket.
How Xpoint and LocationSmart approach the same problem
Neither Xpoint nor LocationSmart has published an equivalently sourced, third-party VPN benchmark as of mid-2026, which is itself a finding: buyers evaluating the challengers must demand a proof-of-concept on their own traffic rather than relying on a public number. Xpoint’s argument is architectural – it catches the same spoof vectors (GPS, Wi-Fi, IP, VPN, behavioral) without the plugin. LocationSmart’s argument is that carrier-network location is inherently harder to spoof than handset GPS, because you are trusting the mobile operator’s network rather than the device. Both claims are testable; neither is yet third-party certified. This is a genuine gap in the market’s transparency, and it is why the accuracy conversation cannot end at a single vendor’s press release.
| Benchmark metric | GeoComply / GeoGuard | Xpoint | LocationSmart (Locance) |
|---|---|---|---|
| Published VPN detection rate | 99.1% (Kingsmead, Sept 2025) | Not independently published | Not independently published |
| Published false-positive rate | 0% | Not published | Not published |
| Broader accuracy claim | 99.6% vs VPN/proxy/Tor/Smart DNS | Parity claim (no plugin) | Carrier-grade triangulation |
| IP/threat database | 310M+ addresses | Proprietary | Network-origin |
| Independent test firm | Kingsmead Security Ltd | Buyer POC recommended | Buyer POC recommended |
| Spoof vectors targeted | VPN, proxy, GPS, RDP, emulator | VPN, proxy, GPS, behavioral | SIM/network mismatch, IP |
Pricing and Total Cost of Ownership Compared
No US geolocation vendor publishes a rate card; every deal is negotiated on volume, states and product mix. The ranges below are reported industry estimates for 2026, useful for modeling rather than quoting. What matters is not just the per-check fee but the fully loaded cost, including the conversion tax of the desktop plugin.
Per-check fees and monthly minimums
Reported per-check pricing across the market sits in the $0.01–$0.05 range, with monthly minimums between $5,000 and $50,000 depending on operator size and state count. GeoComply anchors the premium end; Xpoint positions explicitly below it on both per-check price and minimum commitment; LocationSmart under Locance offers the lowest entry minimums with pay-as-you-grow per-call pricing. The arrival of Radar at roughly half GeoComply’s fraud-detection price – a direct consequence of the patent invalidation – is already pulling the whole market’s pricing power downward, which is precisely the competitive pressure GeoComply cited in its April layoffs.
Hidden costs: plugin friction, integration weeks and false positives
The line-item price is the smallest part of TCO. A typical integration runs 4–12 weeks of engineering effort. The desktop plugin’s 3–8% first-deposit conversion drag can dwarf the per-check fee for a high-volume operator – if a plugin costs you three points of conversion on a large book, no per-check discount recovers that. And every false positive is a blocked good customer. Modeling these three hidden costs, not the headline rate, is what separates a sophisticated 2026 procurement from a naive one. Operators building broader risk stacks should also budget for how geolocation feeds their AI-driven iGaming fraud detection pipeline, since location mismatches are one of the strongest fraud signals available. For broader market context, see our coverage of best sweepstakes casino sites.
| Cost component (2026, reported) | GeoComply | Xpoint | LocationSmart (Locance) |
|---|---|---|---|
| Per-check fee range | Premium end of $0.01–$0.05 | Below GeoComply | Lowest, per-call |
| Monthly minimum | Higher ($5k–$50k band) | Lower minimums | Lowest entry minimum |
| Integration effort | 4–12 weeks | 4–12 weeks, no plugin | Single-API, lighter SDK |
| Desktop plugin conversion drag | 3–8% first-deposit friction | None (plugin-free) | None (plugin-free) |
| Consent/privacy handling | Suite add-on | SDK-level | Built-in (lowest added cost) |
| Minimum commitment | Highest | Moderate | Lowest, pay-as-you-grow |
The Patent War That Reshaped the Market
You cannot understand 2026 pricing without understanding the litigation that ended in 2024. GeoComply’s competitive position rested partly on a patent covering the use of multiple information sources to verify a person’s location – the foundational method of compliance-grade geolocation. When that patent fell, the market’s structure changed overnight.
GeoComply v. Xpoint: the timeline
GeoComply sued Xpoint for patent infringement in September 2022. In February 2023, US Circuit Judge William C. Bryson, sitting in the District of Delaware, granted Xpoint’s motion to dismiss with prejudice, reasoning that the patent was too broad – noting that “even outside the gaming context, the idea of using multiple sources of information to verify a person’s location is a longstanding business practice.” In November 2024, the US Court of Appeals for the Federal Circuit affirmed, holding the claims covered conventional programming techniques lacking the innovation needed for patent protection. Xpoint’s public statement: “both the District Court and now the U.S. Court of Appeals for the Federal Circuit have held that GeoComply’s patent infringement allegations against Xpoint are meritless.”
Why an invalidated patent changed pricing power
With the patent gone, the multi-source location techniques GeoComply tried to fence off are legally fair game for every competitor. That is the structural reason Xpoint could scale without legal friction, Radar could enter at roughly half GeoComply’s fraud-detection price, and operators suddenly gained negotiating leverage they had never had. GeoComply’s monopoly was partly technical and partly legal; the legal half is over. Everything downstream in 2026 – the funding rounds, the client switches, the layoffs, the price compression – traces back to this ruling.
Five Real-World Spoofing Test Scenarios
Marketing accuracy numbers mean little without adversarial context. Here are five scenarios every US operator should run against any vendor during a proof-of-concept, and how the three stacks are architected to handle them.
Scenario 1 – Commercial VPN plus spoofed desktop GPS
A user in a prohibited state connects through a mainstream VPN with an in-state exit node and uses a browser GPS spoofer. This is the canonical attack. GeoGuard’s 310M-IP database and 99.1% detection rate are built precisely for the VPN half; the plugin cross-checks device signals against the network origin. Xpoint targets the same mismatch without a plugin; LocationSmart catches it differently, by comparing the claimed location against the carrier’s network view of the SIM.
Scenario 2 – Border-state bettor at a geofence edge
A legitimate bettor stands 400 meters inside a legal state, near the border. Here the risk is a false positive – wrongly blocking a good customer. This is where GeoComply’s 0% published false-positive rate is most valuable, and where a POC should measure each vendor’s precision, not just its fraud catch rate.
Scenario 3 – Rooted Android with an emulator and mock-location
A rooted device running an emulator with mock-location enabled attempts to appear in-state. Device-integrity detection (root, emulator, developer-mode mock location) is a core SDK responsibility. GeoComply and Xpoint both attack this at the device layer; a network-first approach like LocationSmart’s leans on the SIM-versus-claim mismatch instead.
Scenario 4 – Proxy-betting ring using remote desktop
An out-of-state operator remotely controls an in-state device (classic proxy betting). Behavioral signals and RDP detection matter more than raw GPS here – a scenario the standard blogs rarely test but regulators care about deeply.
Scenario 5 – Legitimate traveler crossing state lines mid-session
A user drives from a legal state into a prohibited one mid-session. The vendor must re-check location on the next wager and block cleanly without corrupting the session. This tests re-verification cadence, not just the initial check – and it is exactly where sweepstakes and cross-state operators get caught out. Teams designing that flow will find the compliance patterns in our breakdown of the sweepstakes casino operator compliance stack directly applicable.
Integration and Developer Experience
For the engineering team, the three vendors present meaningfully different integration shapes. The golden rule across all of them: never trust a client-reported “verified” flag – gate the money on a server-side decision.
GeoComply’s plugin plus license-installer flow
On desktop web, GeoComply requires the PLI browser plugin plus a server-side license and decrypt step; on mobile it ships native SDKs. The server receives an encrypted geolocation packet, decrypts it with a license, and reads the compliance verdict. It is the heaviest integration of the three, and the plugin is the friction point Xpoint built its business around.
Xpoint and LocationSmart: SDK and REST
Xpoint offers plugin-free native mobile and browser SDKs; LocationSmart exposes a REST API with a lighter mobile SDK and built-in consent capture. In all three cases the deposit gate should look the same on your side – a synchronous check whose verdict you enforce server-side:
// Vendor-agnostic server-side deposit gate (illustrative)
async function authorizeDeposit(userId, sessionToken, geoPacket) {
// 1. Decrypt/verify the geolocation packet server-side
const result = await geo.verify(geoPacket); // GeoComply decrypt | Xpoint SDK | Locance REST
// 2. Enforce the verdict – NEVER trust a client-sent "isValid"
if (!result.compliant || result.spoofDetected) {
return { allow: false, reason: result.reasonCode };
}
if (result.state !== licensedStateFor(userId)) {
return { allow: false, reason: "OUT_OF_STATE" };
}
// 3. Re-check cadence: require a fresh geo check per wager/deposit
if (ageSeconds(result.timestamp) > MAX_GEO_AGE) {
return { allow: false, reason: "GEO_STALE" };
}
return { allow: true };
}The vendor differences collapse into one line – geo.verify() – but the surrounding contract (server-side enforcement, out-of-state rejection, re-check cadence) is identical and is where compliance actually lives. For broader market context, see our coverage of leading online casino sites.
State-by-State Coverage and Regulatory Fit
Coverage is not a single number; it is a map of where each vendor is certified by name in each state’s regulations and testing regime. This is the dimension where GeoComply’s incumbency still pays off most.
Where each vendor is certified
GeoComply is effectively everywhere the legal market is – its coverage tracks the ~44% of the US population now able to bet legally, across rollouts in states like Arkansas, Kansas, Maryland and Ohio. Xpoint, by contrast, publishes a concrete footprint: approved in 19 states plus Ontario, live in roughly 13, with a Massachusetts vendor license added in March 2026. For a national operator, GeoComply’s blanket certification removes a per-state approval burden; for a regional operator, Xpoint’s footprint may already cover every state you care about at a lower price. Regulators such as the New Jersey Division of Gaming Enforcement maintain the testing standards each vendor must satisfy, so “is this vendor approved in my state?” is always a question for your specific regulator, not a blog.
The consent and privacy-law dimension
Regulatory fit in 2026 increasingly includes data privacy. With CPRA, Washington’s My Health My Data Act, Oregon’s H.B. 2008 and Maryland’s law all treating precise location as sensitive data, the vendor’s consent-handling architecture is now part of compliance – not a separate concern. LocationSmart’s built-in consent layer is the clearest answer here, but every operator should map its vendor’s consent flow against its own privacy obligations before signing.
Beyond the Standard Coverage: What the Comparison Blogs Miss
The mainstream 2026 comparisons – including the widely cited ~4,800-word Track360 write-up – cover the basics well: how geolocation works, a vendor table, a state map, spoof vectors and a decision framework. But a side-by-side audit of that coverage reveals consistent blind spots. This section fills them.
The financial and legal signals nobody prices in
Standard comparisons almost never mention vendor financial health or IP litigation, yet both are leading indicators. GeoComply’s April 2026 layoffs (~18% of staff) and its lost patent are not gossip – they directly affect roadmap velocity, support depth and, crucially, pricing power. Xpoint’s December 2025 Bettor Capital round signals runway to keep undercutting. A procurement that ignores these is optimizing on last year’s map.
False-positive transparency and the Locance rebrand
The blogs quote fraud-catch rates but rarely the false-positive rate – the number that measures blocked good customers. GeoGuard’s published 0% is a benchmark the challengers have not yet matched publicly, and demanding that number in a POC is the single most useful thing a buyer can do. Equally under-covered: LocationSmart’s move under Locance reframes it from a niche carrier vendor into a consent-first, multi-industry platform – a strategic shift most 2026 comparisons still miss entirely. And the emergence of Radar at half GeoComply’s fraud-detection price shows the market is now four-plus players deep, not three.
Use-Case Recommendations by Operator Type
There is no single winner; there is a best fit per operator profile. Here is how we would advise three archetypes in 2026.
National multi-state operator
If you run a top-five book across 20+ states, GeoComply remains the defensible default. Its blanket certification, 1.2-billion-check scale, 0% published false-positive rate and single-vendor breadth (Core, GeoGuard, IDComply, PinPoint) outweigh a premium price – but use the challengers’ pricing and the 2026 competitive pressure as real negotiating leverage, which the invalidated patent has finally made possible.
Growth-stage operator in 1–19 states
Xpoint is the strongest challenger pick: plugin-free conversion, lower minimums, a published multi-state footprint, fresh Bettor Capital funding, and marquee references in bet365 and PrizePicks. Insist on a POC that measures false positives on your own traffic, since Xpoint has not published an independent benchmark.
New 1–2 state entrant or mobile-first / sweepstakes platform
LocationSmart under Locance is the lowest-commitment, most privacy-forward entry: pay-as-you-grow per-call pricing, carrier-grade mobile triangulation and built-in consent. It is ideal for a single-state launch or a mobile-heavy product that treats location as one API among many rather than a bespoke gambling integration.
Pros and Cons at a Glance
A condensed decision aid across the three vendors as they stand in mid-2026.
GeoComply
- Pros: ~95% market share and near-100% state certification; 1.2B checks/month scale; independently tested 99.1% VPN detection at 0% false positives; full suite (compliance, anti-fraud, KYC).
- Cons: Premium pricing; mandatory desktop plugin (3–8% conversion drag); lost its patent moat; ~18% workforce cut in April 2026 raises roadmap/support questions.
Xpoint
- Pros: No browser plugin; lower per-check and minimums; won the patent case outright; fresh December 2025 funding; bet365/PrizePicks references; 19 states + Ontario.
- Cons: No independently published accuracy benchmark; smaller certified footprint than GeoComply; still proving scale.
LocationSmart (Locance)
- Pros: Lowest entry minimums and pay-as-you-grow pricing; carrier-grade triangulation; built-in consent management aligned to 2026 privacy laws; single API across industries.
- Cons: Gaming is one product among many, not the sole focus; no published gambling-specific accuracy benchmark; less regulator name-recognition than GeoComply.
Switching Costs and Migration: What It Takes to Leave GeoComply
The most under-discussed topic in every geolocation comparison is the one operators worry about most in private: what does it actually cost to switch? The fact that bet365’s North American operations moved onto Xpoint proves migration is possible for even a top-tier book – but it is not free, and understanding the real switching cost is what turns competitive pressure into negotiating leverage.
The technical migration path
Replacing a geolocation vendor is a defined engineering project, not a rip-and-replace. On desktop, dropping GeoComply’s plugin in favor of a plugin-free SDK removes a client-install step, which usually simplifies the front end. The server side is where the work concentrates: you re-point the deposit gate at a new verify endpoint, re-map reason codes, rebuild the audit-log pipeline the regulator inspects, and run both vendors in parallel (“shadow mode”) for a period, comparing verdicts on live traffic before cutting over. Expect the same 4–12-week window as an initial integration, plus a parallel-run phase. Crucially, because the deposit-gate contract – server-side enforcement, out-of-state rejection, re-check cadence – is vendor-agnostic (as the code sample above shows), a well-architected operator has already isolated the vendor behind a single interface, which is what makes switching feasible at all.
The regulatory re-certification tax
The larger cost is regulatory, not technical. Each state’s regulator must recognize your new vendor, and your internal control standards, testing evidence and audit trails must be updated per jurisdiction. This is precisely where GeoComply’s near-universal certification is stickiest: a national operator switching vendors inherits a per-state re-certification burden that a regional operator simply does not face. It is also why the challengers win growth-stage operators first – a book live in three states has three re-certifications to manage, not thirty. Model both the engineering weeks and the per-state compliance effort before treating a lower per-check price as a saving; for a large operator the re-certification tax can outweigh a year of per-check discounts, while for a small one it is trivial.
The Verdict: Who Wins in 2026 and Why
The honest 2026 verdict is that GeoComply is still the safest choice and no longer the only reasonable one – and that shift is the whole story. On raw capability and regulatory certainty, GeoComply wins: it is the only vendor with an independently tested 99.1% detection rate at a 0% false-positive rate, near-universal state certification, and 1.2 billion monthly checks of operational proof. If you are a national operator and want the least regulatory risk, you buy GeoComply – but you now negotiate hard, because the invalidated patent, the challenger funding and the April layoffs have permanently changed the balance of power.
On value and trajectory, Xpoint wins the momentum: plugin-free conversion, lower cost, a courtroom victory that legalized its whole approach, fresh capital and blue-chip references. For a growth-stage operator, it is the rational choice pending a false-positive POC. And LocationSmart under Locance wins the low-commitment, privacy-first corner for new and mobile-first entrants. The single most important takeaway is structural: US gambling geolocation is no longer a monopoly. The moat cracked in a Delaware courtroom in 2023, the appeal sealed it in 2024, and 2026 is the year operators finally get to spend the leverage that gave them.
Frequently Asked Questions
Is GeoComply still the market leader in 2026?
Yes. GeoComply still sits behind roughly 95% of legal North American online sports wagers and supports very nearly 100% of the certified US market, processing about 1.2 billion geolocation checks per month. But its position is contested for the first time following the loss of its anti-spoofing patent and a workforce reduction of roughly 18% in April 2026.
Did Xpoint really beat GeoComply in court?
Yes. GeoComply sued Xpoint for patent infringement in September 2022. A Delaware district court dismissed the case with prejudice in February 2023, and the US Court of Appeals for the Federal Circuit affirmed in November 2024, invalidating the patent as too broad. Xpoint characterized GeoComply’s allegations as “meritless.”
What is the difference between LocationSmart and Locance?
LocationSmart now operates as a subsidiary of Locance. LocationSmart is the carrier-grade location technology and gaming-compliance product; Locance is the parent brand and broader location-intelligence platform serving IoT, finance and marketing alongside gaming, delivered through a single API with built-in consent management.
Why does GeoComply require a browser plugin and does it matter?
GeoComply’s desktop-web compliance check runs through the PLI browser plugin, which users must install. It matters because that friction is estimated to cost 3–8% of first-deposit conversion. Xpoint and LocationSmart are plugin-free, which is the primary reason UX-sensitive operators evaluate them.
How accurate is geolocation spoof detection in 2026?
The best-documented public benchmark is GeoComply’s GeoGuard, independently tested by Kingsmead Security at a 99.1% VPN detection rate with a 0% false-positive rate in September 2025. Xpoint and LocationSmart have not published equivalent third-party benchmarks, so buyers should require a proof-of-concept on their own traffic.
How much does US gambling geolocation cost?
No vendor publishes a rate card. Reported industry ranges for 2026 are roughly $0.01–$0.05 per check with monthly minimums of $5,000–$50,000. GeoComply anchors the premium end, Xpoint prices below it, and LocationSmart under Locance offers the lowest entry minimums with pay-as-you-grow per-call pricing.
Why did GeoComply lay off staff in April 2026?
On 15 April 2026 GeoComply cut roughly 80 roles – about 18% of a 450-plus workforce (Sportico estimated closer to 15%). Management cited a shifting regulatory and technology landscape, the rise of AI, increased competition from Xpoint and Radar, and the fallout from its lost patent suit. The cuts affected engineering, data science, risk-and-fraud and support.
Which geolocation vendor should a new single-state operator choose?
For a newly licensed operator in one or two states, LocationSmart under Locance is typically the lowest-commitment fit: pay-as-you-grow pricing, low minimums, carrier-grade triangulation and built-in consent. Xpoint is the next step up if you want a plugin-free device-detection stack with a broader multi-state footprint, while GeoComply becomes compelling once you scale across many states.
