Cross-industry software45% entry signalMarket screen7 sourced figuresOne thing must be trueincumbent vulnerability

Fraud Prevention and Identity Verification — Transaction Fraud, Device Intelligence, KYC and Chargebacks for Banks, Fintechs and Merchants

Prepared 2026-10-18

Entry signal — what decides who wins here

One thing must be true
Structure decides One thing must be true Execution decides

Entry turns on a single condition that can be named and tested before much is spent. Clear it and this becomes an execution question; fail it and no amount of operating skill helps.

What you would have to beat

Displace an incumbent the screen found well defended — payments attached to the workflow, data that does not leave, a contract that renews itself. Share here means giving a buyer a reason to break something that currently works, which is a higher bar than being better.

How it was read
Binding constraintUNVERIFIEDincumbent vulnerability — Executional — a better operator can move it.
Measured inputsUNVERIFIEDnot applied — This is a software market. The industry’s business counts describe its BUYERS, not the market being entered, so they are left out of the signal.
How many new establishments are still tradingA
Finance and Insurance, US · opened 2020
85.2%
1 year
65.1%
3 years
53.8%
5 years
38.4%
10 years
opened 2015

Measured, not forecast: the share of US establishments opening in one year that were still active later. It counts good operators and bad ones together, which is exactly why it is the honest answer to “what are the odds”. It is for the whole sector rather than this market, and the ten-year figure comes from an older cohort because no younger one has reached ten years.

This is not a probability of success, and it is not a verdict on you. No survival probability is published per market, and inventing one would be worse than saying so. What the bar reads is how much of the outcome sits inside an operator's control: green means the hurdles are ones a better operator clears, red means the binding constraint is capital, an asset or a permission rather than execution. Someone arriving with an advantage this screen did not assume can win a market shown in red.

Companies named in this market · 31

The binding constraint — incumbent vulnerability

The asset in this category is a shared data network, not the software, and the people who own the largest networks are buying the vendors. FICO's FY2025 10-K says its fraud models are trained on transaction data from more than 10,000 institutions in the FICO Falcon Intelligence Network [A]. Riskified's FY2025 20-F reports $155.1B of ecommerce orders reviewed, about 2.5% of global ecommerce by its own calculation [A]. That is what an entrant cannot copy. A new model on day one has seen no fraud, and the buyer is paying for what the model has seen. The exits tell the same story. Visa bought Featurespace in December 2024 for $946M (Visa FY2025 10-K) [A]. Mastercard's FY2025 10-K describes Recorded Future as part of its fraud and cyber offering [A]. Entrust bought Onfido in April 2024, and onfido.com now redirects to entrust.com [B]. Permira took majority control of BioCatch at a $1.3B valuation in September 2024 [B]. Socure bought Effectiv for about $136M in late 2024 [B]. In each case the buyer already owned traffic, a payment network or a bureau. The listed pure-plays are not growing fast. NICE's Financial Crime and Compliance segment, which is mostly Actimize, earned $485.4M in 2025, up 7.0% [A]. FICO's whole Software segment earned $822.3M, up 3%, with software ARR up 4% [A]. FICO does not break out fraud revenue. Riskified earned $344.6M, up 5.2%, with a net loss of $27.6M [A]. Mitek earned $179.7M, up 4% [A]. Meanwhile the bureaus get bigger. RELX's Risk segment, which includes LexisNexis Risk Solutions, earned £3,485M in 2025 with 8% underlying growth. RELX names "digital Fraud & Identity" as one of the drivers [A]. How this differs from the neighbouring records. The regtech and compliance automation record (5223) covers AML transaction monitoring, sanctions and KYC case management, a budget the bank spends because a regulator requires it. This record covers the loss budget: card and payment fraud, account takeover, application fraud, identity proofing at onboarding, and chargebacks. The two overlap at NICE, Feedzai and Sardine, which sell both. The core banking record (5221) is the ledger these tools plug into. The embedded payments record (522390) is the rail whose risk this software scores. The wider sector is mapped on the fintech topic page. The 5221 anchor (depository credit intermediation) is the anchor buyer. The same software is sold to payments companies and processors (522320), consumer lenders (5222), e-commerce retailers and marketplaces (4541, 459), and gig and crypto platforms. Incumbent vulnerability decides it. The large data networks are owned by companies whose main business is elsewhere, and they treat fraud scoring as a feature of the network. That leaves an independent to sell either to a long tail of fintechs that have little data of their own, or to be acquired by one of those companies.

Angel-backed companies35
in the Canadian portfolio dataset
Province mixON 12, AB 9, QC 5, BC 4, PE 2, US 1, NB 1, NL 1

Sectors joined: FinTech · Fintech · Web3 · Financial Technology · Financial Services · Fintech SaaS

[UNVERIFIED] Sector-to-NAICS mapping is analyst judgment — see data/angel-sector-map.json. Counts are a per-record cross-reference and are not additive across records.

I

The incumbent

Who owns this market and who is coming for it. Fields a screen never reached say so rather than guessing.

Incumbent
FICO (Falcon) and NICE Actimize in bank transaction fraud; LexisNexis Risk Solutions (RELX), Experian and TransUnion in identity data; Visa (Featurespace) and Mastercard on the network side
Scale
NICE Financial Crime and Compliance $485.4M (2025, +7.0%) [A]; FICO Software segment $822.3M (FY2025, +3%), fraud not broken out [A]; RELX Risk £3,485M (2025, +8% underlying), Fraud & Identity not broken out [A]
Share
No published share. No filer breaks out fraud or identity revenue on its own, so no share can be computed
Challengers
Bank and fintech fraud: Feedzai, BioCatch, Sardine, Alloy (orchestration), Socure (with Effectiv); identity verification: Persona, Jumio, Veriff, Trulioo, Onfido (Entrust), Mitek; merchant fraud and chargebacks: Riskified, Signifyd, Forter, Sift
Lock-in mechanism
Strong at banks, weak at merchants. A bank's Falcon or Actimize deployment sits inline on card authorisation, with years of tuned rules and model governance that its regulator has reviewed. Replacing it is a model-risk project as well as a software swap. Merchant tools sit behind an API at checkout and are swapped regularly, which is why the guarantee vendors compete on approval rate rather than on switching cost
Price movement
Down at the identity-verification end and flat at the bank end. Document-plus-selfie checks are priced per verification and sold by a crowd of funded vendors. Bank fraud is renewed on multi-year licences, and FICO's 102% net retention shows little expansion [A]. Merchant guarantee pricing is a share of GMV, and Riskified's revenue (+5.2%) grew about half as fast as its GMV (+10%) [A]
Is the buyer consolidating?
Yes — The buyers are consolidating their vendors. Banks want one platform for fraud and AML (NICE and Feedzai both pitch this), and orchestration layers (Alloy, Socure with Effectiv, Oscilar) exist to collapse many point vendors behind one contract. The vendors themselves are being bought by networks, bureaus and private equity
F

Financials & market size — sourced

Figures that came from a filing, a results release or reputable reporting, each carrying its evidence tier.

NICE Financial Crime and Compliance segment revenue, 2025A $485.425M, +7.0% (2024: $453.491M); segment operating income $166.847M
FICO Software segment revenue, FY2025A $822.294M, +3%; Software ARR $747.3M, +4%; net retention 102%. Fraud not broken out
Riskified revenue, FY2025A $344.638M, +5.2%, on $155.1B GMV (+10%); net loss $27.565M
Mitek revenue, FY2025A $179.691M, +4%
Visa purchase price for Featurespace, December 2024A $946M
RELX Risk segment revenue, 2025 (LexisNexis Risk Solutions)A £3,485M, +8% underlying. Fraud & Identity is named as a driver but not broken out
Fraud-prevention and identity-verification software market sizeUNVERIFIED UNVERIFIED. No figure sourced and none asserted
$

Market size, derived

Built from the competitor set upward rather than quoted from a forecast. Published TAMs in these categories are frequently reverse-engineered from each other, so any published figure is checked against the vendor arithmetic rather than trusted on its own.

Revenue floor
$1.8B

Disclosed revenue from 4 of 21 named vendors. The market is at least this large.

Implied total — revenue ÷ share
—

No vendor has both a disclosed revenue and a published share.

Published forecast
—Floor only

Only a revenue floor is known — the true market is larger by whatever the undisclosed vendors earn.

Competitor set · 21 named · 4 disclose revenue

NameRevenueShareNote
FICO (Falcon)NYSE: FICOA $822M — FY2025 Software segment revenue (year ended 2025-09-30, 10-K filed 2025-11-07): $740.145M on-premises and SaaS plus $82.149M professional services, +3%. This segment holds origination, customer management and marketing software too. Fraud is not broken out. Software ARR was $747.3M (+4%), dollar-based net retention 102%. Total company revenue $1,990.869M, of which Scores $1,168.575M — The bank card-fraud reference. The 10-K names NICE Actimize, Experian, Feedzai and Featurespace among its banking-fraud competitors
NICE (Actimize)NASDAQ: NICEA $485M — Financial Crime and Compliance segment, year ended 2025-12-31 (20-F filed 2026-02-26): $485.425M, up from $453.491M (+7.0%). Segment operating income was $166.847M. The segment also includes AML and markets compliance, so fraud alone is smaller. Total NICE revenue was $2,945.4M — Sells fraud and AML on X-Sight (top tier) and Xceed (mid-market). It is also the AML incumbent on the regtech record
Featurespace (Visa)NYSE: VA not disclosed — Acquired by Visa in December 2024 for a purchase consideration of $946M, $152M of it allocated to technology (Visa FY2025 10-K, Note 2). Visa reports one segment and does not disclose Featurespace revenue — Behavioural-analytics transaction monitoring (ARIC). Now part of Visa's Risk and Security Solutions
LexisNexis Risk Solutions (RELX)A not disclosed — RELX Risk segment revenue was £3,485M in 2025, up from £3,336M (+4% reported, +8% underlying), with adjusted operating profit of £1,305M (20-F filed 2026-02-19). The segment covers insurance, business services and government. Fraud & Identity is named as a growth driver but is not broken out — Owns ThreatMetrix (device and digital identity) and a large identity database. The RELX filing lists ThreatMetrix among its subsidiaries
Experian / TransUnionC not disclosed — Credit bureaus. Neither is broken out here and neither filing was opened for this record. Experian sells fraud management to businesses (experian.com, opened); TransUnion's site blocked automated access — They sell identity and fraud data to the same buyers. They are conglomerates for this record (naics null)
MastercardNYSE: MAA not disclosed — Value-added services and solutions net revenue was $13,315M in 2025 (+23%) (10-K filed 2026-02-11). That line also includes data, loyalty, processing and cyber, so no fraud figure can be derived — Owns Recorded Future and launched Mastercard Threat Intelligence in 2025. It sells fraud scoring on its own network, so it competes with and supplies the independents
FeedzaiB not disclosed — Private; no revenue disclosed. Raised about $75M in October 2025 at a $2B valuation (Feedzai's own release). Finovate, citing Crunchbase, puts total capital raised above $352M — The best-funded independent in bank transaction fraud. Selected by the ECB for digital-euro fraud detection (company release)
BioCatchB not disclosed — Private. Permira completed its purchase of a majority position at a $1.3B valuation on 2024-09-09 (Permira announcement) — Behavioural biometrics for banks: how a user types, swipes and holds the device. Founded 2011 (company site)
Socure (with Effectiv)B not disclosed — Private. $450M Series E at a $4.5B valuation in November 2021, led by Accel with T. Rowe Price, and total equity funding of $647M (Finovate). It bought Effectiv, a risk-decisioning platform, for about $136M in October 2024 [B, news coverage] — US identity verification and fraud scoring at onboarding. The valuation is from 2021 and has not been updated in public
AlloyB not disclosed — Private. $100M Series C in 2021 led by Lightspeed at a $1.35B valuation, which took the total raised past $150M (Alloy press page). A later $52M extension was reported but not verified here — Orchestration: it routes one onboarding decision across many data vendors. That puts it in the middle of the identity stack, not at its data source
SardineC not disclosed — Private. Search results report a $70M Series C in February 2025 led by Activant Capital, taking the total to $145M. The release was not opened [C] — Device intelligence plus fraud and AML in one platform, sold to fintechs and crypto firms
PersonaC not disclosed — Private. $200M Series D in April 2025 at a $2B valuation, co-led by Founders Fund and Ribbit Capital (news coverage). The company's site blocked automated access, so the release was not opened — Configurable identity verification (document, selfie, database checks) sold well outside finance: marketplaces, AI labs, gig platforms
Onfido (Entrust)C not disclosed — Acquired by Entrust (private), completed April 2024; terms not disclosed. Entrust's release said Onfido had more than $140M of annual revenue [C, acquirer's claim, not opened]. onfido.com now redirects to entrust.com — Document and biometric verification, now folded into Entrust's identity security suite
JumioC not disclosed — Private. Aggregator totals put funding near $200M; no primary source was opened, so no figure is given — Document and liveness verification. Sunnyvale, CA; founded 2010 (company site)
VeriffB not disclosed — Private. $100M Series C in January 2022 co-led by Tiger Global and Alkeon at a $1.5B valuation, which took total funding to $200M (company release via Help Net Security) — Estonian-origin video and document identity verification
TruliooB not disclosed — Private. $394M Series D in June 2021 led by TCV at a $1.75B valuation (Open Banking Expo) — Vancouver-based global identity and business verification, and the largest Canadian company in the category
MitekNASDAQ: MITKA $180M — FY2025 (year ended 2025-09-30, 10-K filed 2025-12-11): $179.691M, +4%. Software license and hardware $74.1M (-10%), SaaS, maintenance and other $105.6M (+17%). It includes Mobile Deposit (check capture) as well as identity — The only listed pure-play in identity verification found here, and it is growing at 4%
RiskifiedNYSE: RSKDA $345M — FY2025 (year ended 2025-12-31, 20-F filed 2026-03-06): $344.638M, up from $327.516M (+5.2%), on GMV of $155.1B (+10%). Net loss $27.565M; adjusted EBITDA $26.7M. Of revenue, 41% is recognised as indemnification guarantees under ASC 460 — Chargeback-guarantee model: it approves the order and pays the chargeback if it is wrong. That makes it an underwriter as much as a software vendor. Principal executive offices are in New York
SignifydB not disclosed — Private. $205M Series E in April 2021 led by Owl Rock at a $1.34B valuation (company release; valuation per news coverage). Reported total funding is about $390M [B, news] — Guaranteed-fraud protection for online merchants, like Riskified. Headquartered in San Jose, CA (company release)
ForterB not disclosed — Private. $300M Series F in May 2021 led by Tiger Global at a $3B valuation (Herzog law-firm notice). The often-cited total of about $525M comes from an aggregator and is not used — Ecommerce fraud and payment optimisation with a chargeback guarantee
SiftC not disclosed — Private; no primary funding source opened. Any revenue figure for Sift comes from an estimator and is not used — Digital trust and safety: payment fraud, account takeover and content abuse. San Francisco; founded 2011 (company site)
S

Startups & challengers

Newer and smaller vendors going at the incumbent — funded challengers first. Named, not researched to the depth of the field above; a company with a page here links to it.

CompanyStageWhat it doesRaised
Flinks Funded challenger Canadian open-banking data and bank-account verification; built National Bank's link into the Interac Verification Service (Flinks blog) —
Incode Funded challenger Identity verification and KYC built on face biometrics; San Francisco; founded 2015 —
Prove Funded challenger Identity verification from phone-number possession and carrier data; founded 2008 —
SEON Funded challenger Fraud prevention and AML for fintech and igaming, built on data enrichment from an email address or phone number; founded 2017 —
Sumsub Funded challenger KYC, KYB and transaction monitoring for fintech and crypto; London —
Fingerprint Startup Device intelligence: identifies returning browsers and devices for fraud teams; founded 2012 —
Oscilar Startup AI risk decisioning for fintechs and banks: fraud, credit and compliance on one engine; Palo Alto —
Ravelin Startup Online-merchant fraud and payments-risk detection; UK —
Chargebacks911 Scrappy competitor Chargeback dispute management and loss recovery for merchants; Clearwater, FL —

Evidence

Evidence. Filings retrieved from EDGAR directly on 2026-10-18. Tier A, opened: FICO 10-K for FY2025 (filed 2025-11-07): segment table, Software $822.294M, ARR $747.3M, the 10,000-institution Falcon Intelligence Network, and its named list of banking-fraud competitors. NICE 20-F for 2025 (filed 2026-02-26): Note 16 segment table with Financial Crime and Compliance at $485.425M (2024 $453.491M, 2023 $403.418M). Riskified 20-F for 2025 (filed 2026-03-06): revenue, GMV of $155.1B, the ASC 606 and ASC 460 split, net loss, and New York principal offices. Mitek 10-K for FY2025 (filed 2025-12-11). Visa 10-K for FY2025 (filed 2025-11-06): the Featurespace purchase in December 2024 for $946M. Mastercard 10-K for 2025 (filed 2026-02-11): value-added services revenue and Recorded Future. RELX 20-F for 2025 (filed 2026-02-19): Risk segment revenue and the Fraud & Identity commentary. Tier B, opened: Permira's completion announcement for BioCatch at $1.3B. Feedzai's own page on the $75M raise at a $2B valuation. Finovate on Feedzai's total raised (citing Crunchbase) and on Socure's $450M Series E and $647M total. Alloy's press page on its $100M Series C. Signifyd's release on its $205M Series E. Help Net Security on Veriff's $100M Series C. Herzog's law-firm notice on Forter's $300M Series F at $3B. Open Banking Expo on Trulioo's $394M Series D. Interac's Verification Service page listing participating banks. Flinks' blog post on the National Bank integration. From search coverage only, not opened: Sardine's $70M Series C (Business Wire and news). Persona's $200M Series D (Persona's site served a Cloudflare challenge). Socure's $136M purchase of Effectiv (the law-firm notice served a challenge). Entrust's completion of the Onfido deal and its claim that Onfido had more than $140M of revenue (entrust.com robots.txt returned 403, so it was not fetched). The fact that onfido.com redirects to entrust.com was observed directly. Not sourced, stated plainly: market size is UNVERIFIED. No filer breaks out fraud or identity revenue on its own: FICO, RELX, Visa and Mastercard all bundle it. The NICE segment includes AML, so it overstates fraud. Funding totals for Jumio, Sift and Forter come only from aggregators and are not given. Every valuation here dates from a priced round and is not current. fintechfutures.com and biometricupdate.com bar Claude in robots.txt, so their articles were not used.

#

Where the industry talks

The associations, forums and events where people in this trade actually talk shop — where to listen before entering, and where the first customers are found. Each link was opened on the date shown.

AssociationInternationalA
Merchant Risk Council (MRC)
merchantriskcouncil.org

Payments and fraud association for merchants and solution providers; runs MRC conferences (Dublin 2026 listed) and a Global Payments and Fraud Report

Checked 2026-10-18
AssociationInternationalA
Association of Certified Fraud Examiners (ACFE)
acfe.com

Professional body for fraud examiners, with membership and certification

Checked 2026-10-18
EventInternationalA
Money20/20
money2020.com

The large fintech conference series; site lists USA 18-21 Oct 2026 in Las Vegas and Europe 8-10 Jun 2027 in Amsterdam

Checked 2026-10-18
AssociationInternationalA
FIDO Alliance
fidoalliance.org

Standards body for passkeys and authentication; runs the Authenticate conference

Checked 2026-10-18
AssociationCanadaA
Digital ID & Authentication Council of Canada (DIACC)
diacc.ca

Canadian digital-identity association of banks, governments and vendors; membership open

Checked 2026-10-18
GroupInternationalA
About Fraud
about-fraud.com

'A global community for fraud fighters', with events, jobs, webinars and a provider directory

Checked 2026-10-18
PublicationUSA
Frank on Fraud
frankonfraud.com

Fraud-intelligence newsletter and site for bank and fintech fraud teams

Checked 2026-10-18

Finextra (403 to automated access) and Biometric Update (robots.txt bars Claude) are leading publications in this space but could not be confirmed and are not listed. Payments Canada was opened, but it is an infrastructure operator, not a fraud community.