One year to the day after the European Union’s Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) opened its doors in Frankfurt on 1 July 2025, the market that services online gambling compliance looks nothing like it did twelve months ago. The single blockbuster that defined 2024 – Entrust absorbing Onfido for a reported $650 million – has given way to a rapid-fire sequence of mid-market roll-ups. iGaming KYC M&A in the first half of 2026 is no longer about one landmark deal; it is about a structural re-shaping of who owns the identity, age, and anti-money-laundering (AML) checks that every regulated operator is legally required to run.
The clearest signal came on 6 March 2025, when New York private-equity house Corsair Capital paid $295 million in all cash for a majority stake in Munich-based IDnow, a deal that positioned IDnow as a key EU iGaming IDV player almost overnight. That transaction, followed within weeks by Persona’s $200 million Series D at a $2 billion valuation, LexisNexis Risk Solutions swallowing deepfake specialist IDVerse, Socure buying Qlarifi, Signicat executing two acquisitions in a single year, and – outside Europe entirely – Trio Pagamentos’ February 2025 acquisition of PayBrokers consolidating Brazilian betting and lottery payments infrastructure, tells a coherent story: RegTech has entered its consolidation phase, and iGaming – a sector where a single missed sanctions hit can cost an operator its licence – sits directly in the blast radius. This analysis maps the second wave, quantifies the deal economics, and forecasts where the surviving vendors land by 2027.
Don't miss new tech stories on Google
Add Tech Insider once in the Google app and our stories appear in your news suggestions.
The Second Wave: Why 2026 Became RegTech’s Roll-Up Year
The first wave of RegTech consolidation was strategic and singular: payments and identity giants buying one flagship asset each to plug an obvious gap. Mastercard took Recorded Future for $2.65 billion in September 2024; Visa closed its acquisition of AI fraud-prevention firm Featurespace on 19 December 2024 for a reported £700 million; Entrust folded Onfido into its identity portfolio. Each was a headline. None, individually, changed the competitive map for an online sportsbook shopping for a KYC vendor.
2026 is different in kind, not just degree. Instead of one $650 million anchor, the sector has seen a cluster of $100 million-to-$300 million transactions plus a wave of undisclosed “buy-and-build” tuck-ins, executed by a mix of private-equity sponsors and strategic data aggregators. The pattern is a roll-up: acquirers are not buying a single capability, they are assembling end-to-end compliance suites – identity verification, document authentication, sanctions screening, transaction monitoring, and fraud scoring – under one contract.
What Separates a Roll-Up From a One-Off Deal
A one-off acquisition answers a product question (“we lack biometric liveness, let’s buy it”). A roll-up answers a distribution question (“we want to be the single vendor an operator signs, so we buy everyone adjacent”). The 2025–2026 deals – IDnow, IDVerse, Qlarifi, Inverid, Logalty – are overwhelmingly the second type. That distinction matters for iGaming operators, because it changes procurement from best-of-breed stitching toward single-throat-to-choke platforms.
The Numbers Behind the Trend
Analyst estimates of the global RegTech market cluster between roughly $19 billion and $24 billion for 2025 – Fortune Business Insights pegs it at $19.06 billion, Precedence Research at $19.21 billion, and Grand View Research higher at $24.3 billion – with 2026 projections landing between $22 billion and $29 billion depending on the firm. Whatever the exact figure, every model shows double-digit compound growth, and identity verification is repeatedly named as the fastest-expanding sub-segment. Capital chases growth, and growth here is regulatory-mandated.
AMLA Turns One: The Regulatory Engine Behind the Deals
No analysis of 2026 iGaming compliance M&A is complete without the institution that is quietly forcing it. The Authority for Anti-Money Laundering (AMLA) began operations on 1 July 2025 in Frankfurt’s Messeturm, chaired by former Bank of Italy official Bruna Szego, who took the role on 15 February 2025. On 1 January 2026, the European Banking Authority completed the transfer of its entire AML and counter-terrorist-financing mandate to AMLA – the moment the new authority stopped being symbolic and started being the rulebook’s owner.
AMLA is scaling fast. It had four employees when Szego arrived; roughly 120 by early 2026; a target of 240 by year-end 2026 and 432 by the end of 2027. Direct supervision of selected high-risk “obliged entities” begins on 1 January 2028. For gambling operators, the takeaway is stark: a single European AML framework is replacing 27 divergent national approaches, and the harmonisation deadline is fixed.
Szego’s Message to Industry
In a February 2026 interview with Italian financial daily Il Sole 24 Ore, Szego framed the mission as replacing “27 different national approaches” with one European standard, and listed AMLA’s 2026 priorities as prioritising the Level-2 technical standards with the biggest industry impact and building an internal risk-analysis function. On 9 June 2026, AMLA held its inaugural conference at Frankfurt’s Alte Oper under the banner “Building Trust, Enhancing Integrity.” The regulatory calendar, in other words, is now public and non-negotiable.
Why a Single Rulebook Triggers Vendor Consolidation
Fragmented regulation historically favoured fragmented vendors: a German operator needed a German-tuned KYC provider, a French one needed eIDAS-aligned document checks, and so on. A single AMLA rulebook collapses that fragmentation and rewards vendors that can serve the whole bloc from one platform. That is precisely the capability acquirers are buying. You can read the operational detail of these obligations in our guide to real-time AML transaction monitoring pipelines, which shows how the Travel Rule and continuous screening actually execute in production.
IDnow’s $295M Exit: The Deal That Defined H1 2026
If one transaction crystallises the second wave, it is Corsair Capital’s move on IDnow. Announced 6 March 2025, the all-cash deal – reported at $295 million (roughly €273 million) – handed the New York private-equity firm a majority stake and ranked among the largest German fintech exits in years, cementing IDnow’s status as a key EU iGaming IDV player. Corsair was not a stranger: it had held a minority position since 2019 and watched IDnow acquire Ariadnext and Trust Management AG to build scale across Germany and France.
IDnow matters to gambling specifically because its identity-verification and eIDAS-compliant document checks are embedded across regulated European operators. A change of control at that layer of the stack is not a back-office event – it is a supply-chain event for every sportsbook and casino that routes onboarding through IDnow.
“Since our founding a decade ago, IDnow has become a market leader in identity verification in Germany and France… with today’s announcement we aim to solidify our commitment to positioning the Company for future success,” said IDnow CEO Andreas Bodczek, adding that “Corsair’s increased investment underscores their confidence in our vision and speaks to the synergies we have achieved through our collaborative relationship.”
Private Equity’s Playbook
Corsair’s stated intent – strengthen IDnow’s geographic positions and pursue further acquisitions – is the private-equity roll-up thesis in one sentence. Expect IDnow to become an acquirer itself, buying smaller European point tools and rolling them into a pan-EU platform timed to AMLA’s supervisory ramp.
What the Sale Price Implies
A $295 million enterprise value for a decade-old, dual-market IDV leader sets a sober benchmark. It is a fraction of the $1.5 billion peak private valuations that document-verification unicorns commanded in 2021–2022, confirming that the sector’s valuations have reset to earnings-based multiples rather than growth-at-any-cost narratives.
The Data Giants Move In: LexisNexis, Visa, Mastercard
Alongside the PE roll-ups, a second class of acquirer is building compliance super-stacks: global data and payments incumbents. In February 2025, LexisNexis Risk Solutions completed its acquisition of IDVerse, a deepfake-detection specialist whose deep-neural-network engine can authenticate more than 16,000 types of identity document and perform biometric matching. IDVerse now sits inside the LexisNexis RiskNarrative platform and its Dynamic Decision Platform – instantly giving a data incumbent a native answer to AI-generated document fraud.
Visa’s completed purchase of Featurespace (into its Risk and Identity Solutions unit) and Mastercard’s $2.65 billion acquisition of Recorded Future push the same logic from the payments side. When the networks that move gambling deposits also own the fraud-and-identity intelligence layer, the boundary between “payments vendor” and “compliance vendor” dissolves.
Deepfakes Are the Real Acquisition Driver
The strategic urgency is synthetic media. According to Sumsub’s Identity Fraud Report, deepfake-driven fraud surged by four figures year over year, and AI-generated documents and face swaps are now mainstream attack tools rather than novelties. A data giant cannot credibly sell “trust” without a deepfake defence, and building one organically takes years – hence the premium on ready-made engines like IDVerse. For operators weighing which vendors actually stop these attacks, our breakdown of AI fraud detection in iGaming quantifies the multi-step attack surge in detail.
The Bundling Threat to Independents
When a Visa or a LexisNexis can bundle identity, fraud, and payments into one commercial relationship, standalone KYC vendors face a distribution disadvantage that no product feature fully offsets. That structural pressure is exactly what pushes independents toward either a sale or a defensive acquisition of their own.
The Money Chasing Identity: Persona’s $2B Round and the Funding Split
Not every 2025–2026 story is an exit. Some vendors are raising war chests to stay independent – and the capital markets are sharply bifurcated between them. On 30 April 2025, Persona announced a $200 million Series D at a $2 billion valuation, co-led by Founders Fund and Ribbit Capital, with BOND, Coatue, First Round Capital, and Index Ventures participating. Founded in 2018 by ex-Dropbox and ex-Square engineers Charles Yeh and Rick Song, Persona pitched the round explicitly around the “verified identity layer for an agentic AI world,” positioning the company as a configurable KYC/orchestration vendor increasingly courted by iGaming operators alongside its broader enterprise base.
“We’re facing an identity authenticity crisis, where the line between real and synthetic has become increasingly blurred,” said Persona co-founder and CEO Rick Song. “The question is no longer, ‘Is this a bot or not?’ but rather, ‘Who is the bot acting on behalf of, and what is their intent?'”
Socure’s Buy-Side Firepower
Socure, valued around $4.5 billion after raising roughly $650 million across its history, used its balance sheet to acquire Qlarifi on 4 November 2025 – following its earlier absorption of Effectiv. Socure is a buyer, not a target, and its moves show that well-capitalised US identity players intend to consolidate rather than be consolidated.
The Bifurcation Thesis
The capital split is the tell. AI-native platforms with agentic-identity narratives (Persona at $2 billion, Socure at $4.5 billion) raise up; document-verification incumbents built for the 2018 web (IDnow at $295 million, Veriff re-rated down from $1.5 billion to roughly $715 million in secondary markets) sell down. The market is repricing on architecture, not just revenue.
Signicat’s Buy-and-Build: Europe’s Serial Acquirer
The quietest but most instructive 2025 story is Signicat. Backed by Nordic Capital, the Norwegian digital-identity firm executed two acquisitions inside a single year: Inverid (formerly ReadID) in July 2025, and Logalty on 3 December 2025. Neither headline value was disclosed, which is itself a signal – these are tuck-ins, priced as capabilities rather than trophies.
Inverid brings NFC-based document-chip reading; Logalty adds qualified electronic signature and legal-evidence infrastructure. Stitched onto Signicat’s existing identity network, the result is a European compliance platform assembled deal by deal – the buy-and-build model that private-equity sponsors favour precisely because each tuck-in is small enough to integrate cleanly. For broader market context, see our coverage of best sweepstakes casino sites.
Why iGaming Should Watch the Tuck-Ins
Blockbuster deals get the coverage, but tuck-ins reshape the vendor menu operators actually choose from. Every acquired point tool that disappears into a platform is one fewer standalone contract an operator can sign – and one more capability locked behind a suite licence. The practical effect for a compliance team is fewer, larger vendors and higher switching costs.
Nordic Capital’s Longer Game
Sponsors like Nordic Capital are not buying for a two-year flip; they are assembling a platform to sell to a strategic acquirer – a Visa, a LexisNexis, an Experian – at the top of the AMLA-driven demand cycle. Signicat, in that reading, is being built to be sold.
Sumsub: The Unicorn That Won’t Sell – Yet
The counterweight to all this consolidation is Sumsub, the vendor most associated with iGaming KYC and one of the few independents with the scale and momentum to stay independent. On 12 January 2026, Sumsub announced it had joined the World Economic Forum’s Unicorn Community – the invite-only club for private companies valued above $1 billion – with co-founder and CEO Andrew Sever slated to attend the WEF Annual Meeting in Davos.
“AI is reshaping both fraud and defense, and our mission is to stay ahead of these threats while fighting digital exclusion and empowering people everywhere to access digital services safely and fairly,” said Sumsub co-founder and CEO Andrew Sever.
Product Velocity as a Moat
Sumsub’s defence against acquisition pressure is shipping speed: an Adaptive Deepfake Detector, a Chainlink partnership for privacy-preserving reusable KYC credentials, and AI-agent-driven compliance configuration all landed in the 2025–2026 window. For an operator, the practical question is how Sumsub’s per-check pricing and pass rates compare to the incumbents it is fighting; our hands-on Sumsub vs Onfido vs Jumio vs Veriff KYC comparison puts those numbers side by side.
The “Yet” in the Headline
Independence is a strategy, not a permanent state. A $1 billion-plus unicorn with a dominant iGaming vertical is exactly the asset a payments network or data giant would pay a premium to own. Sumsub is a buyer of talent and a partner today; at the right multiple, it is also the most logical strategic target in the sector.
GBG: The Take-Private That Didn’t Happen
Not every consolidation rumour becomes a deal. UK-listed GBG (GB Group plc) has been a perennial take-private candidate – Chicago’s GTCR floated interest back in September 2022 – yet in 2025 the company did the opposite of going private. In October 2025 GBG moved up from London’s AIM to the Main Market of the London Stock Exchange, with a dispersed institutional register and a free float above 90%.
GBG’s decision to double down on public markets rather than accept a sponsor buyout is a useful contrarian data point. It suggests at least one scaled identity vendor believes the public equity story – steady, regulation-driven demand – is worth more than a private-equity premium, especially with AMLA guaranteeing structural tailwinds.
Reading the Non-Deal
A take-private that doesn’t happen is still information. It tells rivals that scaled, profitable identity platforms have a credible standalone path, which raises the price any acquirer must pay to tempt them. That, in turn, pushes acquirers toward the cheaper mid-market targets – the IDnows and Inverids – reinforcing the roll-up pattern.
Where GBG Fits the iGaming Stack
GBG’s fraud and location-intelligence assets overlap with the geolocation layer that US gambling compliance depends on. Operators mapping the full stack should read this alongside the specialist geolocation market, which we cover in our GeoComply vs Xpoint vs LocationSmart breakdown of US gambling geo-compliance.
The Deal Scoreboard: 2024–2026 iGaming KYC M&A
The table below consolidates the verified transactions and control changes reshaping the identity, fraud, and AML layer that regulated gambling operators depend on. Values are as reported at announcement or close; several buy-and-build tuck-ins were undisclosed by design. The pattern is not confined to Europe and North America, either: in February 2025, Brazilian payments group Trio Pagamentos announced the acquisition of PayBrokers, consolidating betting and lottery payments infrastructure in one of Latin America’s largest regulated gambling markets, per Yogonet International – a reminder that the same roll-up logic driving IDnow and Persona is playing out across every licensed gambling region, not just the EU.
| Acquirer / Investor | Target | Reported Value | Date | Structure |
|---|---|---|---|---|
| Entrust | Onfido | ~$650M | Closed Apr 2024 | Strategic acquisition |
| Mastercard | Recorded Future | $2.65B | Announced Sep 2024 | Strategic (threat intel) |
| Visa | Featurespace | ~£700M | Closed 19 Dec 2024 | Strategic (fraud AI) |
| LexisNexis Risk Solutions | IDVerse | Undisclosed | Completed Feb 2025 | Strategic (deepfake IDV) |
| Corsair Capital | IDnow | $295M (€273M) | 6 Mar 2025 | PE majority, all-cash |
| Signicat (Nordic Capital) | Inverid | Undisclosed | Jul 2025 | Buy-and-build tuck-in |
| Socure | Qlarifi | Undisclosed | 4 Nov 2025 | Strategic tuck-in |
| Signicat (Nordic Capital) | Logalty | Undisclosed | 3 Dec 2025 | Buy-and-build tuck-in |
What the Scoreboard Reveals
Two patterns jump out. First, the disclosed values fell sharply after the 2024 blockbusters – $650 million and $2.65 billion gave way to $295 million and a string of undisclosed tuck-ins, confirming a valuation reset. Second, the acquirer mix shifted from pure strategics (Visa, Mastercard, Entrust) toward private-equity sponsors (Corsair, Nordic Capital) running buy-and-build platforms.
Deal Economics: What Consolidation Does to Per-Check Pricing
For an operator, the M&A wave is not an abstract market-structure story – it lands directly on the compliance line item. Consolidation cuts two ways on price. In the short term, bundling can lower blended per-check costs because a suite vendor cross-subsidises KYC with fraud and AML revenue. In the medium term, reduced competition and higher switching costs push prices back up once an operator is locked into a platform. For broader market context, see our coverage of leading online casino sites.
| Vendor | Latest 2025–26 Event | Reported Valuation | Ownership Status | iGaming Positioning |
|---|---|---|---|---|
| Persona | $200M Series D (Apr 2025) | $2.0B | Venture-backed | Configurable KYC / orchestration |
| Socure | Qlarifi acquisition (Nov 2025) | ~$4.5B | Venture-backed, buyer | US identity + fraud scoring |
| Sumsub | WEF Unicorn Community (Jan 2026) | >$1B | Independent | iGaming KYC / AML leader |
| Veriff | Secondary re-rating | ~$715M (peak $1.5B, 2022) | Venture-backed | AI document verification |
| IDnow | Corsair majority (Mar 2025) | ~$295M implied | PE-controlled | EU (DE/FR) IDV, eIDAS |
| GBG | AIM → LSE Main (Oct 2025) | Public market cap | Publicly listed | Identity + location intelligence |
The Lock-In Math
Suite pricing is opaque by design, but the direction is clear: once identity, AML, and fraud sit on one contract, an operator that wants to swap its KYC provider must unpick the whole stack. That switching cost is the real product a roll-up is selling to its private-equity owners – recurring revenue with a moat.
How Operators Should Model It
The defensive move is to price switching cost into every vendor contract now – insist on data-portability clauses, standardised webhooks, and exit SLAs before signing a bundled suite. Operators that negotiate portability while competition is still high will pay far less than those that wait until their vendor has been rolled up.
The Compliance Super-Stack: KYC + AML + Geo + Fraud in One Contract
The strategic end-state of the roll-up is the “compliance super-stack”: a single vendor supplying identity verification, sanctions and PEP screening, transaction monitoring, geolocation, and fraud scoring through one integration. Industry watchers expect well-funded leaders – names like Sumsub, SEON, and Sardine – to absorb point tools while operators drift from best-of-breed stitching toward single-vendor platforms, leaving specialists such as GeoComply and Feedzai to defend narrower niches.
For engineering teams, consolidation changes the integration surface. Instead of orchestrating five APIs with five failure modes, a compliance engineer configures one policy engine that routes checks internally. An illustrative unified-vendor policy might look like this:
{
"compliance_stack": {
"vendor": "consolidated_suite_v2",
"onboarding": {
"identity_verification": { "provider": "internal", "liveness": "passive", "deepfake_guard": true },
"document_auth": { "chip_read": "nfc", "doc_library": 16000 },
"sanctions_pep": { "lists": ["OFAC", "EU", "UN"], "refresh": "continuous" }
},
"ongoing": {
"aml_monitoring": { "travel_rule": true, "threshold_eur": 1000 },
"geolocation": { "vendor": "geo_niche_fallback", "enforce": "us_states" },
"fraud_scoring": { "model": "agentic", "multi_account": true }
},
"routing": "single_contract_failover"
}
}The upside is fewer moving parts; the downside is a single point of commercial dependency. That trade-off is the central procurement decision of 2026.
Where the Niches Survive
Not everything consolidates. US-specific geolocation and highly specialised transaction-monitoring engines retain independent value because their regulatory context (state-by-state gambling geo rules, for example) is too idiosyncratic for a generalist suite to fully absorb. Expect a barbell market: a few super-stacks plus a handful of defensible specialists.
Beyond the Standard Coverage: What the RegTech “Top 10” Lists Miss
Search “RegTech KYC 2026” and the results are dominated by evergreen listicles – Fenergo’s compliance explainers, Zigram’s “Top RegTech Companies,” fintech.global’s “Top 10 KYC Solutions,” and vendor comparison grids. They are useful directories, but they share three consistent blind spots that matter enormously to a gambling operator.
Gap 1: They Rank Vendors, Not Ownership
The listicles treat IDnow, Onfido, and Featurespace as independent options, ignoring that all three are now controlled by larger parents (Corsair, Entrust, Visa). A “top 10” that lists a vendor without flagging its acquirer is selling a stale menu. Ownership determines roadmap, pricing power, and integration risk – the facts an operator actually needs.
Gap 2: No Deal Economics or Per-Check Impact
Directory content almost never connects M&A to the compliance budget. None of the top-ranking pages model how consolidation shifts per-check pricing, switching costs, or contract lock-in – the line items a CFO signs off. Nor do they address the sector-specific exposure of adjacent models like US sweepstakes operator tech stacks, where vendor disclosure has become a live legal issue.
Gap 3: The Regulator Is Missing
Generic RegTech coverage rarely ties vendor consolidation to a specific regulatory catalyst. The AMLA timeline – 1 July 2025 launch, 1 January 2026 EBA mandate transfer, 1 January 2028 direct supervision – is the forcing function behind the deal flow, yet the listicles omit it entirely. Reading the M&A without the regulator is reading half the story.
Historical Context: From 2021 Peak to 2026 Reset
To understand why $295 million now looks like a strong outcome, rewind to the zero-interest-rate peak. In 2021–2022, identity-verification unicorns raised at nosebleed multiples: Veriff hit a $1.5 billion valuation on a 2022 Tiger Global-led round; multiple KYC firms crossed unicorn status on growth narratives alone. When rates rose and growth-at-any-cost financing evaporated, those valuations became unsupportable.
The 2023–2024 correction pushed secondary marks down – Veriff to roughly $715 million – and turned yesterday’s independents into today’s acquisition targets. The 2025–2026 wave is the cleanup phase: assets that cannot raise at 2021 prices are sold to sponsors and strategics that value them on earnings. It is a textbook venture-cycle unwind, playing out in a sector whose demand happens to be legally guaranteed.
The Regulatory Demand Floor
What makes RegTech unusual is that consolidation is happening into rising demand, not a dying market. KYC and AML are not discretionary spend; they are licence conditions. The UK Gambling Commission alone fined 13 operators in the second half of 2025, including a £10 million penalty – a reminder that under-investing in compliance is more expensive than the vendors are.
Five Predictions for iGaming KYC Consolidation Through 2027
Synthesising the deal flow, the AMLA calendar, and the capital bifurcation, here is where the sector heads next.
- A strategic acquires Sumsub or Signicat by H2 2027. A payments network or data giant will pay a premium for a scaled, iGaming-heavy identity platform ahead of AMLA’s 2028 supervision start. Sumsub is the marquee target; Signicat is the buy-and-build sponsors have been assembling to sell.
- IDnow becomes an acquirer. Under Corsair, expect at least one European tuck-in within 12–18 months as the sponsor executes the roll-up it telegraphed at acquisition.
- The compliance super-stack becomes the default RFP. By 2027, most tier-one operators will issue RFPs for bundled KYC + AML + fraud + geo rather than best-of-breed, accelerating the disappearance of standalone point tools.
- Deepfake defence becomes a table-stakes acquisition target. Following LexisNexis-IDVerse, at least one more major will buy a synthetic-media detection specialist outright rather than build, as AI-generated documents move from edge case to baseline threat.
- Valuations stay earnings-anchored, not growth-anchored. No identity vendor re-rates back to 2021 multiples; the $295 million IDnow benchmark, not the $1.5 billion Veriff peak, sets the tone for 2026–2027 pricing.
What It All Means for Operators and Players
For operators, the strategic imperative is portability. The vendor you integrate in 2026 may be owned by someone else in 2027, with a different roadmap and pricing model. Negotiating data-portability and exit terms now – while competition is still high – is the single highest-leverage move a compliance team can make. Consolidation is not inherently bad for buyers; a well-integrated super-stack can genuinely reduce operational complexity. But it concentrates dependency, and dependency without an exit clause is a future price increase.
For players, the effect is mostly invisible but real: faster onboarding as AI-native verification replaces manual review, tighter AML monitoring as AMLA’s single rulebook takes hold, and – for better and worse – more data flowing through fewer, larger vendors. The identity check that used to take a document upload and a 24-hour wait now resolves in seconds; the trade-off is that a handful of consolidated platforms now sit at the centre of the regulated gambling economy.
Frequently Asked Questions
What is driving RegTech consolidation in iGaming KYC in 2026?
Three forces: a regulatory forcing function (the EU’s AMLA, operational since 1 July 2025, harmonising 27 national AML regimes into one rulebook by 2028), a post-2021 valuation reset that turned former unicorns into affordable targets, and the deepfake threat, which makes AI-native verification a must-buy capability for data and payments incumbents.
How big was the IDnow deal and who bought it?
New York private-equity firm Corsair Capital acquired a majority stake in Munich-based IDnow in an all-cash deal reported at $295 million (roughly €273 million), announced 6 March 2025. Corsair had held a minority position since 2019.
Is Sumsub being acquired?
Not as of mid-2026. Sumsub joined the World Economic Forum’s Unicorn Community in January 2026 as an independent company valued above $1 billion. However, its scale and iGaming focus make it the most logical strategic target in the sector, and an acquisition by a payments network or data giant by 2027 is a credible scenario.
What is AMLA and why does it matter for gambling operators?
AMLA is the EU’s new Authority for Anti-Money Laundering and Countering the Financing of Terrorism, based in Frankfurt and chaired by Bruna Szego. It began operations on 1 July 2025, absorbed the EBA’s AML mandate on 1 January 2026, and begins directly supervising selected high-risk entities on 1 January 2028. It replaces 27 national approaches with a single European rulebook that gambling operators must comply with.
Did LexisNexis really buy a deepfake detector?
Yes. LexisNexis Risk Solutions completed its acquisition of IDVerse in February 2025. IDVerse’s deep-neural-network technology can authenticate more than 16,000 types of identity document and detect deepfakes, and it now sits inside the LexisNexis RiskNarrative and Dynamic Decision platforms.
How much did Persona raise and at what valuation?
Persona announced a $200 million Series D on 30 April 2025 at a $2 billion valuation, co-led by Founders Fund and Ribbit Capital. The round was pitched around building the “verified identity layer for an agentic AI world,” reinforcing Persona’s positioning as a configurable KYC/orchestration vendor serving iGaming among its broader customer base.
Will consolidation raise or lower KYC costs for operators?
Both, at different times. Bundling can lower blended per-check costs in the short term via cross-subsidy, but reduced competition and high switching costs tend to push prices back up once an operator is locked into a suite. The defensive move is to negotiate data-portability and exit terms up front.
Which independent vendors are most likely to survive as acquirers rather than targets?
Well-capitalised US players such as Socure (valued around $4.5 billion, and already buying) and orchestration-layer platforms like Persona ($2 billion) have the balance sheets to consolidate rather than be consolidated. Publicly listed GBG, having moved to the LSE Main Market in October 2025, has also signalled it intends to stay independent.
