KYP

Signals from many sources are joined into one risk picture per monitored business, and Volumetric Monitoring reads a merchant portfolio's payment behavior for emerging transaction risk. Aggregation and monitoring underneath would still be useful with threshold alerts alone, so the models sharpen the output rather than make it.

Risk alerts go to an analyst to act on, so the platform informs rather than concludes, but that division is implied by the design, not stated. Confidence on a score, an escalation threshold and the expected action when a merchant deteriorates are not described.

How often an alert reflects a real change in counterparty risk, and how often a genuine deterioration is missed, are the figures that matter, and neither appears. Precision and false positive rates for scoring and matching are likewise unpublished.

Neogames' group money laundering reporting officer, Fiona Hughes, is quoted on stronger risk monitoring, and Pariplay, Aspire and BtoBet are among the customers named. One figure, manual work cut by up to 60 percent, is tied to no named customer.

Many institutions monitor overlapping merchant populations through the same partners, so a profile built for one customer is a natural asset for the next. Sharing of assessments across customers, and protection of the fact that an institution is investigating a given business, are not addressed.

Most subjects are businesses, but adverse media and corporate structure data concern named directors, owners and associates. A privacy and cookies policy is linked, while data protection terms and retention for platform data are not published, so nothing says how long an adverse finding persists.

ISO 27001 certification is named on the homepage, without the certificate or its scope. Selling third party risk assurance makes the firm itself a third party in every customer's supply chain, which raises the bar for that evidence.

Open banking provider scoring and merchant monitoring for acquirers are built for named roles, with anti money laundering pressure cited as the driver. Even so, no regulator, statute or card scheme rule is named, and which obligation an acquirer discharges through the platform is not said.

Assessing businesses swaps protected class exposure for an accuracy problem of similar weight: a poor score can get a merchant offboarded, and adverse media matching misfires on common names and unfamiliar naming conventions. Match confidence is unpublished, and combining many signals lets one bad match color the whole picture.

Full audit reports document what was checked, which supports a defensible decision and lets a wrong one be traced and reversed, though no guarantee, indemnity or accuracy commitment stands behind them. The monitored business is assessed without its knowledge, partly from adverse media it cannot see, and no notification or dispute route is described even where the outcome is losing the ability to take payments.

Mastercard's RiskRecon is named as the source of cyber risk insight, and payment behavior, credit data and adverse media are among the data categories listed. Other providers behind those categories, any model provider and a subprocessor list are not published.

Infrastructure partners carry much of the reach: Integrated Finance in embedded finance, Tell.Money in open banking and PayModum in payments, with data connected through APIs. Connection depth is left open, with no acquirer processing platform, case management system or institution side core named.

Hosting provider, region and residency commitment are unpublished for a London firm whose partners operate across Europe.

Merchants watched, assessment frequency or alert volume could each drive the cost, and the site publishes no price, package or basis of charge to say which. An acquirer with a large portfolio and a firm watching a handful of partners would face very different bills.

Acquirers and payment service providers are the stated targets, with merchant website compliance monitored through WebCompli. Yet the named customers lean toward gaming and lottery operators and suppliers, and no bank or acquirer is named.