On 5 February 2026, Estonia’s Veriff – the AI document-verification vendor that half the sportsbook industry already runs at onboarding – did something the pure-play identity firms had spent two years avoiding. It stopped being a target and became a buyer. Veriff acquired fellow Estonian firm Vespia, a Know Your Business (KYB) specialist covering 300-plus jurisdictions, in an undisclosed all-share-and-cash deal. It was the eleventh transaction to redraw the iGaming KYC map since early 2024 – and the first to prove that the survivors of the roll-up are now arming themselves rather than waiting to be sold.
This is the story of iGaming KYC M&A in its second, quieter phase. The headline deals of 2024–2025 were about private equity and data conglomerates swallowing pure-play verification vendors. The 2026 story is different: the vendors that dodged acquisition are racing to bolt on KYB, behavioural credit data, and anti-money-laundering (AML) screening so they can sell operators a single “trust platform” instead of a single check. For any casino, sportsbook, or sweepstakes operator writing a compliance contract this year, the supply chain underneath that contract has quietly consolidated – and the pricing and conflict-of-interest implications are only beginning to surface.
Don't miss new tech stories on Google
Add Tech Insider once in the Google app and our stories appear in your news suggestions.
Veriff Buys Vespia: The Moment the Prey Became the Predator
Veriff spent 2022–2025 as a rumoured acquisition candidate. Its valuation had re-rated hard from a 2022 peak near $1.5 billion to a secondary-market figure closer to $715 million, and every analyst deal-list slotted it among the “likely to be bought” cohort alongside Sumsub and GBG. The Vespia deal flips that narrative. Rather than sell into a data conglomerate, Veriff chose to become a platform assembler – the exact strategy Experian, Socure, and Signicat had been executing against it.
What Vespia actually adds
Vespia’s engine automates business verification across more than 300 jurisdictions, pulling company registries, main-beneficial-owner (UBO) data, and sanctions context into a single API call. For iGaming, KYB is the unglamorous but load-bearing piece: affiliate networks, payment-service providers, white-label licensees, and B2B game studios all need corporate onboarding, not just player selfies. Veriff had none of it natively before February.
The founders say the quiet part out loud
Veriff founder and CEO Kaarel Kotkas framed the buy in platform terms: “We want to do it 10 times better than it has been done before – real-time, end-to-end KYB from a single platform built to the same standard our customers expect from Veriff.” Vespia co-founder and CEO Julia Ront was blunter about the endgame: “We proved that business verification can be fast and global. Being part of Veriff, we can now scale that work within a larger, unified trust platform.” That phrase – unified trust platform – is the thesis of the entire 2026 consolidation wave.
The Four Buyer Archetypes Now Splitting iGaming Identity
The lazy way to read this market is “big companies are buying small companies.” The useful way is to notice that four distinct buyer archetypes are now competing to own the identity layer, each with a different motive and a different risk profile for operators.
Data conglomerates, security firms, PE sponsors – and now the pure-plays
Credit bureaus and data graphs (Experian, LexisNexis Risk Solutions) buy verification to feed their decisioning engines. Security and PKI vendors (Entrust) buy front-end capture to round out enterprise trust suites. Private-equity sponsors (Corsair Capital, Nordic Capital) buy cash-generative RegTech assets on earnings multiples and bolt on tuck-ins. And now a fourth archetype has emerged: the surviving pure-play – Veriff, Socure, Signicat – using its own balance sheet to consolidate the market from inside.
Why the fourth archetype matters most
When a data broker buys a KYC vendor, the vendor’s roadmap bends toward the broker’s data business. When a pure-play buys a specialist, the roadmap stays inside identity – which is why operators tend to prefer it, and why it changes the competitive maths for everyone else. The table below maps the archetypes to their motives and to the specific risk each one pushes downstream to a licensed operator.
| Buyer archetype | Example acquirers | What they want | Risk pushed to operators |
|---|---|---|---|
| Data conglomerate / credit bureau | Experian, LexisNexis Risk Solutions | Feed decisioning + data-graph products | Your KYC data enrich a broker that also sells to rivals |
| Security / PKI vendor | Entrust | Round out enterprise “trust” suite | iGaming becomes a small slice of a broader roadmap |
| Private-equity sponsor | Corsair Capital, Nordic Capital | Cash flow + buy-and-build multiple arbitrage | Cost discipline and re-priced renewals at exit |
| Surviving pure-play | Veriff, Socure, Signicat | Own the full trust stack, resist being bought | Vendor lock-in as best-of-breed choice disappears |
Inside the Trust-Platform Playbook: KYB Is the New Battleground
For a decade, the identity industry sold KYC – verify the human. In 2026, the growth frontier is KYB – verify the company – and it is where the acquisitions are clustering. Veriff bought Vespia for it. Signicat has been buying toward it. Experian’s whole thesis depends on it.
Why iGaming specifically needs KYB now
Regulated gambling is a B2B2C supply chain. An operator onboards not just players but affiliates, aggregators, payment processors, and – in the US sweepstakes and prediction-market pivot – a growing list of corporate counterparties migrating onto new rails. If you want the full picture of that structural shift, our analysis of how sweepstakes operators are re-platforming onto CFTC rails shows why corporate onboarding has jumped up the compliance agenda. Every new counterparty is a KYB event, and regulators increasingly expect UBO screening on all of them.
The single-API dream
The platform pitch is that one integration returns a person verdict, a business verdict, an AML verdict, and a fraud verdict in one response. In practice the payload an operator’s risk engine now consumes looks like this:
{
"session_id": "trust_9f3a41c",
"person": { "kyc": "approved", "liveness": 0.99, "doc": "passport_verified" },
"business": { "kyb": "approved", "ubo_screened": true, "jurisdiction": "MT" },
"aml": { "sanctions": "clear", "pep": "none", "adverse_media": "clear" },
"fraud": { "device_risk": "low", "synthetic_score": 0.04, "geo": "allowed" },
"decision": "PASS"
}One contract, one response, one throat to choke. That convenience is real – and it is exactly what makes the concentration risk further down this article worth pricing in.
Socure’s BNPL Gambit: Behavioural Credit Data Enters the Stack
The US market’s most aggressive pure-play consolidator is Socure, valued at roughly $4.5 billion. In December 2025 it acquired Qlarifi, described as the first real-time Buy Now, Pay Later (BNPL) consumer-credit database, folding live repayment-behaviour signals into its Identity Graph and RiskOS decisioning engine.
Why repayment data is an iGaming signal
Loan-stacking, overextension, and cross-provider identity reuse are the same behavioural tells that flag problem gambling and bonus abuse. Socure CEO and founder Johnny Ayers pitched the deal around legacy failure: “BNPL has outgrown the legacy systems that were never designed to support their innovative lending products.” The subtext for gambling operators is that continuous behavioural data – not a one-time document check – is becoming the differentiator between vendors.
From one-time check to continuous trust
Socure’s move fits the broader industry shift from point-in-time verification to continuous “trust” attestation. That same shift is remaking fraud tooling across the sector; our deep dive on AI-powered iGaming fraud detection tracks how one-time KYC is being replaced by behavioural biometrics and continuous monitoring. Acquisitions like Qlarifi are how a verification vendor buys its way into that continuous-signal future rather than building it slowly.
Signicat’s Serial Tuck-Ins: Europe’s Buy-and-Build Machine
No European vendor has industrialised the trust-platform strategy like Norway’s Signicat, backed by Nordic Capital. Where Veriff and Socure make one large statement buy, Signicat runs a continuous tuck-in program – a string of acquisitions over roughly six years, with the Inverid deal inside the 2025 window.
The Inverid acquisition
In July 2025, Signicat acquired Dutch firm Inverid, a pioneer of NFC-chip-reading identity verification (the technology that reads the secure chip in a passport or national ID). The deal closes a specific gap: NFC for high-assurance onboarding in the European Digital Identity (EUDI) Wallet era.
The eIDAS 2.0 land grab
Signicat’s buying is not opportunistic; it is positioning for the EU Digital Identity Wallet mandate, participating in multiple large-scale pilots. For iGaming operators serving European markets, that means the vendor arriving to sell you KYC in 2026 is also the vendor lobbying to define how wallet-based age and identity attestation will work – a level of platform reach the standalone-tool era never had.
Experian and the Credit-Bureau Land Grab
If the pure-plays are the new story, the credit bureaus are the persistent one. Experian has been quietly assembling a lifecycle-KYC business through two acquisitions with direct iGaming relevance.
NeuroID then KYC360
In August 2024, Experian bought behavioural-analytics pioneer NeuroID, adding passive behavioural signals – how a user types, pauses, and navigates – to its Ascend platform. Then on 27 October 2025, it announced the acquisition of UK RegTech KYC360 (the former RiskScreen), bolting on perpetual KYC, sanctions screening, and transaction monitoring. For broader market context, see our coverage of best sweepstakes casino sites.
The executives on record
Malin Holmberg, CEO of Experian UK & Ireland, framed KYC360 as scale: “The addition of KYC360 significantly boosts our capabilities, allowing us to deliver even greater value to our clients and accelerate our growth.” KYC360 founder and CEO Stephen Platt called it “a tremendous opportunity to drive innovation in the fight against financial crime, helping to protect even more clients and their customers.” The pattern is unmistakable: front-end capture plus behavioural signals plus lifecycle screening, assembled under a bureau that already holds the population’s credit files. Operators comparing document-verification vendors should note how many of the names on a head-to-head iGaming KYC vendor comparison now sit inside a larger data conglomerate.
The Deal Ledger: 11 Transactions That Redrew iGaming KYC (2024–2026)
Any single deal looks incremental. Stacked together, the eleven transactions below show a market being re-carved in under 24 months. Note the trajectory: the early deals are strategics and data giants buying capability; the most recent – Veriff/Vespia – is a pure-play buying its own future.
| Acquirer / investor | Target | Reported value | Date | What it added |
|---|---|---|---|---|
| Entrust | Onfido | ~$650M | Closed Apr 2024 | Front-end document + biometric IDV |
| Mastercard | Recorded Future | $2.65B | Announced Sep 2024 | Threat intelligence |
| Experian | NeuroID | Undisclosed | Aug 2024 | Behavioural analytics |
| Visa | Featurespace | ~£700M | Closed Dec 2024 | Real-time fraud AI |
| LexisNexis Risk Solutions | IDVerse | Undisclosed | Early 2025 | Deepfake / document forensics |
| Corsair Capital | IDnow | $295M (€273M) | 6 Mar 2025 | EU (DE/FR) IDV, eIDAS reach |
| Signicat (Nordic Capital) | Inverid | Undisclosed | Jul 2025 | NFC chip-read verification |
| Experian | KYC360 | Undisclosed | 27 Oct 2025 | Perpetual KYC + screening |
| Socure | Qlarifi | Undisclosed | Dec 2025 | Real-time BNPL credit data |
| Veriff | Vespia | Undisclosed | 5 Feb 2026 | KYB across 300+ jurisdictions |
The Last Independents: Sumsub’s Unicorn Standoff
Amid the buying, one name keeps refusing to be a line item on somebody else’s ledger. On 12 January 2026, Sumsub joined the World Economic Forum’s Unicorn Community, confirming a valuation above $1 billion as an independent company.
The iGaming crown
Sumsub did not just cross the unicorn line; it topped the 2026 Gambling IQ “Defenders of Trust” ranking for iGaming fraud prevention, placing above Onfido, Jumio, and Veriff in the specific vertical that matters here. That combination – independent, well-capitalised, and category-leading in gambling – makes Sumsub simultaneously the hardest to buy and the most valuable to own.
Holdout or target?
The market reads Sumsub two ways. Bulls see a business with no need to sell, funding an organic roadmap and picking off enterprise logos. Deal-watchers see the single most attractive strategic target left standing, and expect a data conglomerate or payment network to test the founders’ resolve before the wave ends. Operators wiring Sumsub in today – as in our walkthrough of integrating the Sumsub KYC API into an iGaming platform – are betting the independence holds long enough to matter.
Market Math: A $16.9B Prize and a Tightening Top Five
Consolidation this intense only happens when the prize is growing. Identity verification is not a dying category being cannibalised; it is a rising one being concentrated. Industry market-sizing estimates put the numbers roughly as follows.
| Metric | 2025 | 2026 | Note |
|---|---|---|---|
| Global identity-verification market | ~$15.12B | ~$16.89B | Sustained double-digit growth |
| US identity-verification market | ~$4.34B | ~$4.83B | Projected ~$8.16B by 2030 (13.5% CAGR) |
| Top-5 vendor revenue share | 35–42% | Rising | Concentration climbing deal by deal |
| BFSI share of demand | ~32.7% | ~32.8% | Largest single vertical; iGaming adjacent |
| iGaming identity-fraud rate | ~1.53% (Q1) | Elevated | Multi-step fraud rose from 10% to 28% of attempts |
Consolidation into rising demand
The unusual feature here is that concentration is happening while demand is legally guaranteed and growing. Regulators keep adding mandatory checks; every new jurisdiction is a new revenue floor. That is why sponsors will pay earnings multiples for assets that could not raise at 2021 venture prices – the demand curve underneath is not going away.
What Consolidation Does to Your Per-Check Bill
The question every compliance director should be asking is not “who bought whom” but “what happens to my invoice.” Consolidation moves pricing in two opposite directions at once, and which one wins depends on how you buy.
The bundling discount versus the renewal squeeze
Buy the whole stack – KYC plus KYB plus AML plus fraud – from one platform and you will likely see a bundled per-check rate below the sum of best-of-breed vendors. Refuse the bundle, or come up for renewal after a private-equity sponsor takes control, and you should expect the opposite: re-priced contracts engineered to expand margins ahead of an exit. IDnow’s Corsair ownership and Signicat’s Nordic Capital backing are precisely the structures that produce renewal-time pricing pressure.
Total cost of ownership beats sticker price
Per-check pricing still ranges widely – from roughly a dollar-plus for a document-and-selfie flow to several dollars for enriched checks with behavioural and business data layered on. But the real number is total cost of ownership: revenue lost to false rejections at onboarding, and losses from fraud that slips through. A cheaper check that rejects 3% more legitimate high-value players is not cheaper. Operators balancing this against payment economics should weigh it alongside their broader licensed-gambling card-processing costs, since verification friction and payment conversion are two sides of the same funnel. For broader market context, see our coverage of leading online casino sites.
The Concentration Risk Nobody Prices In: Your Vendor Now Serves Your Rival
Here is the analysis the SERP does not run. When your KYC vendor is independent, your verification data mostly stays in your silo. When that vendor is absorbed into a credit bureau or payment network, the data enrichment, the fraud-graph learning, and sometimes the raw signals feed a company that also sells to – or competes with – your rivals.
Three risks that arrive with the acquirer
- Conflict of interest. A data conglomerate that owns your identity vendor and sells decisioning to your competitor sits on both sides of your player-acquisition funnel.
- Single point of failure. A unified trust platform means one outage, one breach, or one mispriced renewal hits KYC, KYB, AML, and fraud simultaneously – the very diversification best-of-breed buying used to provide.
- Roadmap capture. Once a vendor’s owner is a bureau, gambling-specific features compete for engineering time against the parent’s much larger markets.
The geolocation parallel
Operators saw a version of this in the location-intelligence layer, where consolidation and layoffs reshaped the vendor field; our breakdown of the US gambling geolocation stack shows how quickly a “pick the best tool” market becomes a “pick your surviving vendor” market. Identity is now on the same path, one deal at a time.
Beyond the Standard Coverage: What the RegTech “Best KYC” Lists Miss
Search “iGaming KYC vendors” or “iGaming M&A 2026” and you get two genres, both of which miss the operator’s actual problem. The first is operator-M&A coverage – deal-structure guides and earnings roundups aimed at people buying casinos, not the RegTech supply chain underneath them. The second is the “best KYC provider” listicle, which ranks Sumsub, Jumio, Onfido, and Veriff as if they were still independent, standalone tools.
The three gaps
Neither genre answers the questions that decide a 2026 compliance contract. Ownership is stale in the listicles: ranking Onfido without noting it is an Entrust business, or Veriff without its new KYB arm, misprices the choice. Procurement impact goes uncovered: nobody models what a private-equity renewal or a bundling mandate does to your per-check bill. Concentration risk is invisible: the conflict of your KYC vendor being owned by a broker that serves your rival never appears in a “top 10” grid.
Why the vendor-M&A lens is the operator’s lens
The point of tracking these deals is not gossip. It is that the org chart behind your verification API is now a procurement variable as real as accuracy or price. Two vendors with identical benchmarks can carry wildly different lock-in, data-sharing, and renewal risk depending on who signs their paycheque – and that is precisely the axis the standard coverage ignores.
From 2021 Peak to 2026 Reset: How the Cycle Turned
To understand 2026, rewind to 2021. Cheap capital pushed identity-verification valuations to nosebleed levels – Veriff near $1.5 billion, a raft of Series C and D rounds priced for hypergrowth. Then rates rose, growth-equity dried up, and the assets that could not re-raise at 2021 marks had two choices: cut to profitability or sell.
The unwind, sector by sector
What followed in 2024–2026 is a textbook venture-cycle unwind – but with a twist. In most sectors, a funding winter means failures. In RegTech, it meant a clean handoff: over-funded specialists sold to sponsors and strategics that value them on earnings, into a demand curve that regulation keeps pushing up. The reset repriced the equity without destroying the business.
Why iGaming sat at the centre
Gambling was disproportionately affected because it is the sector where verification is least optional. Licensing regimes from the UK to Malta to New Jersey mandate identity, age, and source-of-funds checks, so iGaming-heavy vendors had the stickiest revenue – and therefore the most attractive cash flows for an acquirer. The industry’s fraud pressure, tracked in detail across our first-half 2026 roll-up coverage, only sharpened the strategic case for owning these assets.
Five Predictions for iGaming KYC Consolidation Through 2027
The deals to date point to a fairly legible path. Five forecasts, each tied to a mechanism already visible in the 2024–2026 record.
Near-term moves
- Sumsub or Signicat draws a strategic bid by H2 2027. The two most valuable independents cannot both stay unbought as the field concentrates; a payment network or bureau will test the price.
- KYB becomes table stakes. After Veriff/Vespia, every serious platform will need a business-verification arm by end-2026 – expect two or more further KYB tuck-ins.
- Bundled “trust platform” pricing displaces per-check menus. Operators will increasingly be quoted a single blended rate for KYC+KYB+AML+fraud rather than line items.
Structural shifts
- At least one deal draws regulatory or antitrust scrutiny. As top-five share climbs past 45%, a bureau-plus-verification combination will attract a competition review.
- Continuous verification replaces one-time KYC in tier-one operators. Behavioural and reusable-credential models – the logic behind Socure/Qlarifi – become the default for large licensees, not an add-on.
What It All Means for Operators and Players
For operators, the practical takeaway is that vendor selection in 2026 is a two-layer decision. Layer one is the classic checklist: accuracy, pass rates, jurisdiction coverage, price. Layer two – new, and now decisive – is ownership: who controls the vendor, what their exit incentive is, and whether their parent competes with you or shares your data. A best-in-class tool inside the wrong corporate structure can cost more in lock-in and conflict than it saves in accuracy.
For players, quieter but real
Players will mostly notice consolidation as smoother, faster onboarding – one platform, fewer redundant checks, better fraud catch rates. The trade-off is concentration of their most sensitive data into fewer, larger entities, raising the stakes of any single breach. The convenience is genuine; so is the systemic exposure. As the trust-platform era hardens through 2027, the winners will be the operators who treat their verification vendor’s cap table as a compliance risk in its own right – not just a line on a rate card.
Frequently Asked Questions
What was the biggest iGaming KYC acquisition in 2026 so far?
By strategic significance, Veriff’s acquisition of KYB specialist Vespia on 5 February 2026 is the defining 2026 deal, because it marks a surviving pure-play turning acquirer. By value, the largest recent identity deal remains Entrust’s ~$650M purchase of Onfido, which closed in April 2024.
Why are identity-verification vendors buying KYB companies?
KYB (Know Your Business) verifies corporate counterparties – affiliates, processors, aggregators – rather than individual players. iGaming’s B2B2C supply chain requires it, and regulators increasingly expect UBO screening on all corporate relationships. Bolting KYB onto KYC lets a vendor sell one “trust platform” contract instead of a single check.
Is Sumsub being acquired?
Not as of mid-2026. Sumsub joined the WEF Unicorn Community in January 2026 at a valuation above $1 billion and remains independent, topping the 2026 Gambling IQ “Defenders of Trust” ranking for iGaming. It is, however, widely viewed as the most attractive remaining strategic target.
How does vendor consolidation affect KYC pricing for operators?
Two directions at once. Buying the full bundle from one platform can lower the blended per-check rate, but refusing the bundle – or renewing after a private-equity takeover – often means re-priced contracts engineered for margin expansion. Total cost of ownership, including false rejections and fraud losses, matters more than the sticker price.
Who acquired IDnow and for how much?
Private-equity firm Corsair Capital took majority control of Munich-based IDnow on 6 March 2025 in an all-cash deal reported at $295 million (about €273 million). IDnow specialises in EU identity verification with strong eIDAS and German/French market coverage.
What did Experian buy in the KYC space?
Experian acquired behavioural-analytics firm NeuroID in August 2024 and UK RegTech KYC360 (formerly RiskScreen) on 27 October 2025. Together they give Experian passive behavioural signals plus perpetual KYC, sanctions screening, and transaction monitoring layered onto its data graph.
What is a “trust platform” and why does it matter for gambling?
A trust platform is a single vendor that returns identity (KYC), business (KYB), anti-money-laundering, and fraud verdicts from one integration. For operators it means fewer contracts and smoother onboarding, but also greater vendor lock-in and a single point of failure across all four compliance functions.
What is the biggest hidden risk of KYC vendor consolidation?
Concentration and conflict of interest. When your verification vendor is owned by a credit bureau or payment network that also serves your competitors, your KYC data can enrich a rival’s decisioning, and one breach or outage can hit every compliance function at once. Vendor ownership is now a procurement risk in its own right.
