TL;DR: Automated KYC, AML screening, and document verification across 220+ countries and territories are being combined by Approvely and SumSub to give regulated gaming merchants a single path from onboarding to checkout, according to SumSub. The real issue is not verification speed alone, but whether identity controls can keep fraud, jurisdictional complexity, and payment flow aligned without creating compliance blind spots.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Sumsub and Approvely Partner to Deliver Unified Identity Verification and Payment Infrastructure Across Regulated Markets”.
By the numbers:
- Sumsub says its verification coverage spans 220+ countries and territories.
Key questions
Q: How should regulated merchants govern KYC across onboarding and checkout?
A: They should treat KYC as a lifecycle control that follows the user from first verification through transaction approval.
Q: Why do cross-border payment programmes need jurisdiction-specific identity controls?
A: Because verification requirements, screening thresholds and evidence expectations vary by market.
Q: What breaks when onboarding verification is separated from payment approval?
A: Control fragmentation breaks.
Practitioner guidance
- Define a single onboarding-to-checkout control path Map where KYC, AML screening and payment approval intersect, then remove any unsupported handoffs that allow identity state to change outside governed policy.
- Standardise jurisdiction-specific evidence requirements Document which verification evidence, escalation rules and retention periods apply in each market so auditors can see how cross-border checks are being governed.
- Link onboarding outcomes to fraud monitoring Connect verified identity records to account-linking, multiaccounting detection and transaction monitoring so onboarding approval does not become a one-time trust event.
Bottom line: Regulated payment onboarding is no longer just a verification issue. It is a lifecycle governance problem that spans identity proofing, fraud control and transaction approval.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Customer identity in regulated payments is becoming part of NHI-style governance, even when the subject is human. The same control tension appears here: systems need to know who or what is being trusted before access to a payment path is granted. When onboarding and transaction processing are coupled, identity assurance becomes an operational prerequisite rather than a separate compliance task. Practitioners should treat customer verification as a governed access decision, not just a fraud check.
A few things that frame the scale:
- 92% of organisations expose NHIs to third parties, raising concerns about supply chain security, according to Ultimate Guide to NHIs.
- 96% of organisations store secrets outside of secrets managers in vulnerable locations including code, config files, and CI/CD tools, according to Ultimate Guide to NHIs.
A question worth separating out:
Q: Who should own identity governance in high-risk payment environments?
A: Ownership should be shared across IAM, fraud, compliance, and payments teams, but one decision model must govern the user journey. If each group controls a separate checkpoint, exceptions multiply and accountability blurs. The governance question is not who runs the tool, but who defines the policy and who can approve exceptions.
👉 Read our full editorial: Approvely and Sumsub standardise KYC for regulated payment onboarding
Verification-to-checkout is becoming an identity governance pattern, not just a payments design choice. The important shift in this partnership is that identity assurance is being embedded where the transaction happens, rather than treated as a separate onboarding step. That matters because regulated merchants now need a defensible chain from identity proofing to payment approval. The practical conclusion is that IAM and payments teams have to govern identity state across the full customer journey, not only at sign-up.
A few things that frame the scale:
- Gartner predicts that by 2026, 30% of enterprises will consider identity verification solutions unreliable in isolation because of AI-driven attacks.
A question worth separating out:
Q: How do teams know if eKYC is actually improving fraud resistance?
A: Teams should measure whether suspicious enrolments, mismatched identity evidence, and post-onboarding anomalies are being detected and acted on quickly. A good eKYC programme does not only approve more users faster. It also lowers false acceptance, supports review, and creates a defensible audit trail for decisions.
👉 Read our full editorial: Approvely and Sumsub standardise KYC for regulated payment onboarding