Feed

Sumsub and AmericanFortress announced a partnership to bring verified identity to crypto through FortressID.

AmericanFortress™ and Sumsub Partner to Bring Bank-Grade Verified Identity to Crypto Through FortressID™ ↗

What happened

• One Sumsub verification will be included at no additional cost with every paid custom FortressName, once the AmericanFortress Wallet and SDK launches in production.
• Sumsub's reusable identity capabilities will verify the user and produce a verified credential that AmericanFortress links to the name as the user's FortressID.
• 0G's .0gm namespace is the first partner namespace.
• Holders choose which counterparties see their FortressID, which information to share, and when.

Why it matters to Signicat

• Sumsub is extending its reusable identity offering into crypto wallets and blockchain naming, a segment where Signicat has no evidenced presence in this article.
• Free-with-name bundling is a distribution route that bypasses per-verification pricing for crypto onboarding.

5 of 5 facts verified against the source · confidence medium · claude-haiku-5-5

MarCoPay uses Sumsub's document-based identity verification, Liveness Detection and AML Screening for customer onboarding.

MarCoPay Partners with Sumsub to Strengthen Fraud Prevention for Filipino Seafarers and Support AFASA Compliance ↗

What happened

• Sumsub's AFASA Fraud Management Bundle enables rule-based transaction monitoring and dynamic risk scoring for MarCoPay.

Why it matters to Signicat

• The article is a customer announcement with vendor-stated capabilities; no independent performance data is provided.

Correction: BSP Circular 1213 separates effectivity from the June 2026 compliance transition. source ↗

2 of 4 facts verified against the source · confidence high · claude-haiku-5-5

The article cites Sumsub's 2025–2026 Identity Fraud Report for deepfake fraud growth in the UK and the Maldives.

Bypassing Facial Recognition: Fraud Methods and Defenses ↗

What happened

• The article describes presentation attacks, deepfakes, and camera injection attacks against facial recognition as an educational overview.

Why it matters to Signicat

• Content is generic threat education on biometric fraud with no product launch, customer, price or contract news; relevance to Signicat's ReadID and NFC narrative is indirect.

2 of 2 facts verified against the source · confidence high · claude-haiku-5-5

Vietnam's Public Security Minister presented the draft Law on Electronic Identification and Authentication to the National Assembly on October 26.

Vietnam Proposes Digital Identity Law to Combat Deepfakes and Online Fraud ↗

What happened

• The draft would prohibit using fake biometrics, technologically fabricated images, and other deceptive technologies to create or falsify electronic identities.
• Electronic transactions on banking, securities, telecommunications, postal, e-commerce and healthcare platforms would have to be linked to and authenticated against participants' electronic identities.

Why it matters to Signicat

• Mandatory identity linkage across banking and e-commerce in Vietnam is a market-shifting regulatory signal for identity vendors, but Vietnam is outside Signicat's core markets listed in the context.

3 of 3 facts verified against the source · confidence medium · claude-haiku-5-5

The Curaçao Gaming Authority plans to develop and manage a new licensing platform after a breach of an externally operated system.

Curaçao Gambling Regulator Sets Out Response to Licensing Data Breach ↗

What happened

• The regulator says a security researcher from Germany accessed the externally managed portal without authorization between December 2025 and September 2026.

Why it matters to Signicat

• The article is a regulatory news item about a third-party gambling licensing breach and does not describe a Sumsub product, pricing or market move relevant to Signicat's posture.

2 of 2 facts verified against the source · confidence high · claude-haiku-5-5

Sumsub announced its Liveness solution was found compliant with Level 3 of iBeta's Presentation Attack Detection testing under ISO/IEC 30107-3.

Sumsub Liveness Achieves iBeta Level 3 Compliance in Independent Biometric Testing ↗

What happened

• During the Level 3 evaluation, testers deployed 900 presentation attacks across Android and iOS platforms.
• Sumsub Liveness recorded a 0% APCER with none of the attacks obtaining a liveness classification, per the vendor's account of the iBeta test.
• Sumsub completed iBeta PAD Level 1 in 2021, Level 1 retest in February 2025, Level 2 in March 2025, and Level 3 in September 2026.

Why it matters to Signicat

• Level 3 PAD certification is a credible liveness benchmark that Sumsub can cite in Document IDV and biometrics bids in Signicat's markets.
• The result is vendor-reported; the card relies on Sumsub's announcement and linked iBeta letter, not an independent write-up of the test.

4 of 4 facts verified against the source · confidence high · claude-haiku-5-5

EPC launches SCARLET wallet acceptance rulebook for payment authentication

EPC Launches SCARLET to Standardize Digital Identity Wallet Use Across EU ↗

What happened

• The European Payments Council launched SCARLET, an initiative to develop a standardized framework for accepting EU Digital Identity Wallets in payment authentication.
• The EPC plans to consult publicly on the framework in summer 2027 and publish its first rulebook in December 2027.
• SCARLET's initial version will support wallet acceptance under PSD2 and existing strong customer authentication standards, with a later update for the forthcoming Payment Services Regulation.

Why it matters to Signicat

• Industry standard for wallet acceptance in payments is relevant to Signicat's Wallet Hub and EUDI positioning, but it is a 2027 consultation timeline, not a near-term product event.
• The article is a third-party standards announcement and does not mention Sumsub products; its link to Sumsub is only the publisher's own repost.

3 of 3 facts verified against the source · confidence medium · claude-haiku-5-5

Sumsub report: 36% cite manual review as top fraud-compliance weakness

Manual Review Still Weighs Heavily on Europe's Fraud and Compliance Teams ↗

What happened

• Sumsub published The State of European Financial Services: 2026 report based on responses from 804 financial services professionals across Europe.
• Manual review was cited by 36% of respondents as the biggest operational weakness reported by financial institutions.
• Only 9% of surveyed organizations operate an integrated fraud and compliance platform.
• Half of respondents say FIU, SAR and STR preparation is partially automated, while 23% report full automation.

Why it matters to Signicat

• The survey's emphasis on fragmented workflows and post-onboarding fraud is relevant to Signicat's risk and AML screening and orchestration positioning; the article is thought leadership with no product claim.

4 of 4 facts verified against the source · confidence high · claude-haiku-5-5

Institutions must maintain AI system inventories, assess use cases and apply lifecycle controls, and remain accountable for third-party AI.

Singapore Central Bank Issues New AI Risk Guidelines for Banks ↗

What happened

• The Monetary Authority of Singapore published its first Guidelines on Artificial Intelligence Risk Management on October 7.
• The guidelines take effect on October 7, 2027, with phased implementation extending to October 2028.
• MAS plans to consult the financial sector in 2027 on additional guidance for agentic AI systems.

Why it matters to Signicat

• The article is regulatory commentary on a Singapore regulator; it contains no Sumsub product claim, so the Sumsub link is editorial placement only.

4 of 4 facts verified against the source · confidence medium · claude-haiku-5-5

AMLA has removed provisions that could have extended anti-money laundering duties to businesses outside the scope of EU AML law.

AMLA Drops Rules That Could Have Extended AML Duties to Unregulated Firms ↗

What happened

• AMLA finalized three sets of regulatory technical standards covering customer due diligence, identifying business relationships and linked transactions, and group-wide AML/CFT arrangements.
• AMLA submitted the draft standards to the European Commission on October 1; the Commission still needs to adopt and publish them in the Official Journal.

Why it matters to Signicat

• The CDD standards cover non-face-to-face verification and electronic identification, relevant to Signicat's eID and remote onboarding offering in Benelux and other core markets.
• The article is regulatory news about AMLA; it contains no Sumsub product claim, so Sumsub's posture impact is limited to content marketing on AML compliance.

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5

Compliance Digest – September 2026

Compliance Digest – September 2026 ↗

0 of 2 facts verified against the source · confidence low · level lowered after verification · claude-haiku-5-5

AMLA has finalized three sets of draft regulatory technical standards covering customer due diligence, business relationships and occasional transactions, and group-wide AML/CFT arrangements.

AMLA Finalizes Draft EU Standards for Customer Checks and AML Controls ↗

What happened

• The final drafts have been submitted to the European Commission.
• The due diligence draft covers remote verification, electronic identification, and screening of politically exposed persons, their family members, and close associates.
• For remittances, currency exchange and certain digital asset services, firms would need to consider a one-month period when assessing transaction links.
• The proposals remain subject to European Commission review and may be amended; they are proposed to apply six months after entering into force following adoption and publication in the Official Journal.

Why it matters to Signicat

• Electronic identification and remote verification requirements in the CDD draft bear on Signicat's risk and AML screening and identity verification offerings; applicability depends on final adoption.
• The article is regulatory commentary by a competitor with no Sumsub product claim; it is not a Sumsub product or pricing move.

5 of 5 facts verified against the source · confidence high · claude-haiku-5-5

How MiCA Regulation Reshapes Crypto Licensing in the Baltics and Poland

How MiCA Regulation Reshapes Crypto Licensing in the Baltics and Poland ↗

0 of 0 facts verified against the source · confidence low · claude-haiku-5-5

Ofcom opens investigation into Aylo's Apple-signal age checks

Ofcom Investigates Effectiveness of Pornhub’s Apple Age Checks ↗

What happened

• Ofcom has opened a formal investigation into Pornhub operator Aylo to determine whether its age checks prevent children in the UK from seeing pornography.
• The inquiry concerns a process introduced for some users in May 2026 that relies on signals from Apple suggesting that those users may have already completed Apple's age checks.
• The regulator can require changes and impose fines of up to £18 million or 10% of qualifying worldwide revenue, whichever is greater.

Why it matters to Signicat

• The case shows UK regulators testing whether relying on a platform vendor's age signal meets the highly effective standard; relevant to Signicat's age and document verification positioning, but Signicat is not named.

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5

Sumsub published an 11-minute article on UAE crypto regulation and licensing rules dated 21 September 2026.

UAE Crypto Regulation: Licensing Rules and Compliance in 2026 ↗

What happened

• The article states that VARA's minimum paid-up capital for an exchange is AED 1.5 million or 25% of fixed annual overheads, whichever is higher.
• The article states that since January 2026 DFSA-licensed firms are no longer restricted to a pre-approved token list.

Why it matters to Signicat

• Regulatory explainer with no Signicat product or competitor claim; relevance limited to AML/KYC and crypto onboarding context in Signicat's risk and AML screening line.

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5

Sumsub commissioned an independent research study of 720 senior professionals across nine Asia-Pacific markets.

Willing to Own It, Unable to Prove It: Research on AI Governance in APAC ↗

What happened

• The composite AI governance score is 67.1, with Autonomy and Responsibility near 70 and AI Traceability at 61.0.
• Only 38% of respondents hold a tamper-proof audit trail, and 50% can reconstruct the decision pathway.
• Australia's automated decision-making amendments to the Privacy Act take effect on December 10, 2026.

Why it matters to Signicat

• Research centers on AI agent governance and traceability, a theme Signicat has no stated product claim against in this article; relevance to Signicat is indirect.

4 of 4 facts verified against the source · confidence medium · claude-haiku-5-5

Revolut confirms limited KYC data breach via impersonation scam

Revolut Confirms Limited Data Breach After Sophisticated Fake Government Scam ↗

What happened

• Revolut confirmed a limited customer KYC data breach after what it described as a sophisticated external impersonation scam.
• The affected records included names, birth dates, postal and email addresses, phone numbers, and copies of passports or driving licences.
• Revolut blocked the email address and notified law enforcement, data protection authorities, and financial regulators.

Why it matters to Signicat

• The incident involves KYC document copies and selfies exposed through impersonation, relevant to Signicat's document verification and fraud positioning.
• The article is a third-party news report with no Sumsub product claim; it does not bear on the Sumsub posture themes directly.

3 of 3 facts verified against the source · confidence medium · claude-haiku-5-5

Sumsub provides an MCP server and an open-source suite of agent skills for compliance workflows.

AI Agents in Compliance: How MCP and Agent Skills Work ↗

What happened

• Depending on permissions, the agent can create applicants and verification links, retrieve review history, and draft regulatory reports.

Why it matters to Signicat

• Sumsub is extending its AML/KYC platform into agent-operated configuration, overlapping Signicat's risk and AML screening and orchestration themes.
• Article is largely a how-to explainer with vendor-described capabilities; no independent evidence of adoption is given.

2 of 2 facts verified against the source · confidence medium · claude-haiku-5-5

A draft BSP circular would require payment firms to scrutinize merchants, including VASPs, more closely and prohibit arrangements that conceal merchants or beneficiaries.

Philippines Proposes Payment Registration Freeze and Tighter Crypto Checks ↗

What happened

• If adopted, the circular would take effect 15 calendar days after publication in the Official Gazette or a newspaper of general circulation.

Why it matters to Signicat

• Regulatory activity in the Philippines on VASP merchant due diligence is adjacent to Signicat's risk and AML screening line; no Signicat market is named in the article.

2 of 3 facts verified against the source · confidence high · claude-haiku-5-5

Sumsub announced the launch of its Non-Doc Nordic eID Bundle giving clients access to Swedish BankID, Danish MitID, Norwegian BankID and Finnish FTN through one integration and one shared monthly commitment.

Sumsub Launches Non-Doc Nordic eID Bundle ↗

What happened

• The launch adds Swedish BankID to Sumsub's Non-Doc Verification suite for the first time.
• Usage moves between the four markets based on actual verification volumes under the shared commitment.
• The bundle is available now to Sumsub clients operating in, or expanding into, the Nordics.

Why it matters to Signicat

• Sumsub now offers a single-integration route to all four Nordic identity routes, overlapping Signicat's eID and Wallet Hub in its Nordic core market. Based on the article's own description; not independently verified.
• The shared monthly commitment bears on the watchlist perception of quote-based pricing; the article discloses no price points.

Correction: FTN is a trust network, so Nordic eIDs are described as identity routes. source ↗

4 of 4 facts verified against the source · confidence medium · claude-haiku-5-5

France's National Gambling Authority (ANJ) issued guidance stating that operators cannot refuse to pay winnings or release balances merely because activity appears suspicious.

French Regulator Clarifies Evidence Needed to Act on Player Fraud ↗

What happened

• The ANJ guide says a player's failure to answer operator questions does not prove fraud by itself.
• The guidance was announced on August 31 and applies to gambling services requiring online player registration.

Why it matters to Signicat

• The guidance is regulatory commentary on gambling fraud evidence standards; it has limited direct overlap with Signicat's core identity product lines and sits mainly in iGaming, not Signicat's Nordic/Benelux/DACH/Iberia/UK eID brokering or signing.

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5

Compliance Digest—August 2026

Compliance Digest—August 2026 ↗

0 of 2 facts verified against the source · confidence low · level lowered after verification · claude-haiku-5-5

PVARA opened its application portal for NOCs, full VASP licenses and a regulatory sandbox.

Pakistan Opens Crypto Licensing Regime, Sets September 5 NOC Deadline ↗

What happened

• Firms that provided virtual asset services on or before March 5, 2026 must submit an NOC application by September 5.
• Unlicensed crypto operations face fines of up to PKR 50 million or imprisonment of up to 5 years.

Why it matters to Signicat

• Article is regulatory news on a crypto licensing regime with AML and KYC obligations; it is not a Signicat-relevant product claim.

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5

Sumsub publishes Japan anti-social forces AML screening guide

Japan Anti-Social Forces: AML Screening Requirements (2026) ↗

What happened

• Sumsub published an 8-minute guide titled 'Japan Anti-Social Forces: AML Screening Requirements (2026)' on 19 August 2026.
• The guide states that Japan expects businesses to sever relationships with Anti-Social Forces and avoid providing them with funds and other benefits.
• The guide states that 164,086 suspicious transaction reports from 2022 to 2024 cited organized crime group reasons, representing 7.7% of the total.

Why it matters to Signicat

• The guide covers Japan-specific ASF screening and AML duties, a regional compliance topic outside Signicat's core markets (Nordics, Benelux, DACH, Iberia, UK).
• The guide's emphasis on screening beneficial owners and connected companies overlaps Signicat's risk and AML screening line.

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5

Lithuania's MiCA transition period ended on December 31, 2025, after which crypto-asset services require a MiCA license.

Crypto Regulations in Lithuania (2026): Licensing and Compliance After the MiCA Transition ↗

What happened

• The Bank of Lithuania received 102 MiCA license applications from 55 companies in 2025.
• Minimum CASP capital is EUR 50,000 for Class 1, EUR 125,000 for Class 2 and EUR 150,000 for Class 3.
• CASPs must attach originator and beneficiary information to every crypto-asset transfer, whatever its size.
• The AML Regulation applies from July 10, 2027.

Why it matters to Signicat

• Article is regulatory guidance for crypto AML and licensing with no Sumsub product or customer claim, so it is low relevance to Signicat's offer set.
• Crypto KYB and AML screening obligations (CDD, sanctions screening, Travel Rule) overlap Signicat's risk and AML screening line for crypto clients.

5 of 5 facts verified against the source · confidence high · claude-haiku-5-5

Sumsub frames automated transaction monitoring as mandatory for Mexican institutions

Why Transaction Monitoring Automation Is Mandatory for Mexican Financial Institutions ↗

What happened

• Sumsub published an article dated August 13, 2026 on Mexico's transaction monitoring mandate.
• The article states that the automated mechanisms required by Article 18(X) must be in place by June 1, 2027.
• The article states that the July 2025 reform added an explicit automated-monitoring requirement for Actividades Vulnerables.

Why it matters to Signicat

• Relevant to Signicat's risk and AML screening line as a monitoring-automation narrative; the article names no Signicat product and makes no product claim.

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5

AI Assistant Exploits Gym Booking System in Australia

AI Assistant Exploits Gym Booking System in Australia ↗

0 of 0 facts verified against the source · confidence low · claude-haiku-5-5

Brazil's central bank will require crypto exchanges to delay certain transfers to foreign crypto platforms and self-custody wallets for up to 24 hours.

Brazil Introduces 24-Hour Hold on Large Crypto Transfers ↗

What happened

• Resolution BCB No. 584/2026 was published on August 7 and takes effect on January 1, 2027, covering transfers worth more than $10,000.
• Exchanges can release a transfer earlier if their risk assessment finds no signs of fraud, and must document the decision and inform the customer when a transfer is placed on hold.

Why it matters to Signicat

• Regulatory hold rule raises transaction-risk assessment demands on crypto exchanges, adjacent to Signicat's risk and AML screening line; no Signicat product is named.

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5

Sumsub publishes AUSTRAC Tranche 2 AML/CFT guide for VASPs

AUSTRAC Tranche 2 Reforms: AML/CFT Compliance Guide for VASPs ↗

What happened

• Sumsub published an AUSTRAC Tranche 2 AML/CFT compliance guide for VASPs dated 7 August 2026.
• The guide states that obligations for Tranche 2 entities commenced on 1 July 2026, and the travel rule for virtual asset transfers takes effect for newly regulated VASPs.
• The guide states that the final enrollment and registration deadline for newly regulated entities is 29 July 2026.

Why it matters to Signicat

• Regulatory explainer for Australian VASP AML obligations; not a Signicat-relevant product or market move in Signicat's core markets.

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5

Sumsub publishes Lithuania AML and licensing compliance guide

How to Comply With AML Regulations and Licensing Requirements in Lithuania—an EU Fintech Hub ↗

What happened

• Sumsub published a 10-minute guide on AML regulations and licensing requirements in Lithuania, dated August 5, 2026.
• The article states that the AMLR single rulebook and the sixth AML Directive apply in full from July 10, 2027.
• The Bank of Lithuania licenses and supervises financial market participants.

Why it matters to Signicat

• The guide is a compliance explainer with no product claim, so it has low direct competitive impact on Signicat.
• Remote onboarding through electronic identification is named as a permitted method, relevant to Signicat's eID and AML screening positioning in Baltic markets.

3 of 3 facts verified against the source · confidence high · claude-haiku-5-5