Is Sumsub profitable as of 2024?

Yes based on a UK-filed FY2024 statement showing revenue of £67.2M (about $85M), £11.8M gross profit and £1.8M net income, according to a 2026-07-06 ZoomInfo filing extract, though third-party ARR estimates vary widely.

Did Sumsub have a data breach?

Yes. Sumsub disclosed a breach in January 2026 in which an attacker had access starting July 2024, an 18-month undetected dwell time, exposing names and contact data, per reporting dated 2026-02-05.

Sumsub is privately held. Per the company's own April 2026 statement, ultimate beneficial owners are the three Sever brothers (Andrew, Peter, Jacob), with UK shares held via Raritex Trade Ltd.

Sumsub was invited to the World Economic Forum's invite-only Unicorn Community in January 2026, implying a valuation over $1 billion, though no formal funding round or valuation figure has been publicly disclosed.

Who is Sumsub's biggest competitor?

Veriff (~$1.5B valuation) and Persona (~$2B valuation, 2025) are Sumsub's closest peers; a 2026-06-15 independent test found Sumsub accepted 80% of fake documents versus Veriff's 30%, exposing an accuracy gap.

Could AI replace Sumsub's verification service?

Core document OCR and Tier-1 fraud screening are increasingly automatable by general AI models, and pre-KYC filtering startups aim to reduce billable checks, but Sumsub's 15+ regulatory certifications and 4,000+ client base as of 2026 create switching costs that slow replacement.

Payments companies · United Kingdom

Sumsub

sumsub.com ↗

Sumsub verifies identities and runs KYC/AML checks for banks, exchanges, and platforms worldwide.

Losing its protection

Assessed 21 July 2026 · Evidence as of 21 July 2026

The structural protection is eroding.

On the recordSince 21 July 2026 · Checkable from 2026-2027 · Every call on the record Checkpoint: 2026-2027 client renewal cycle following disclosure of the 18-month undetected breach

The call

Sumsub is a profitable, certified market leader now carrying a breach, accuracy gap, and ownership questions into a make-or-break renewal cycle.

Sumsub checks people's identities for banks, crypto exchanges, and other companies that need to verify who their customers are. It has built real competitive advantages through certifications, audit trails, and customer lock-in that would be expensive for others to replicate. However, an 18-month breach discovered in January 2026 that went undetected, combined with independent testing showing its fake-document detection is much worse than rivals like Veriff (accepting 80 percent of fakes versus Veriff's 30 percent), has damaged trust in a business where trust is everything. The company's future hinges on whether major customers like cryptocurrency exchanges leave for competitors Persona or Veriff during their next contract renewal, and whether Sumsub can actually improve its accuracy to match what customers now expect.

Why

AI pressure: AI-generated deepfake and synthetic document fraud kits. Independent tests show Sumsub accepts fake AI-forged documents 80% of the time versus 30% for Veriff, a real detection gap. Could AI do the core job? Only partly.

Bigger players: Stripe Identity. Stripe has payments distribution and could bundle identity checks into checkout, but hasn't visibly taken Sumsub's core clients yet. Could a giant copy it? Probably.

What protects it. 15+ regulatory certifications and deep workflow integration make ripping Sumsub out of a compliance stack costly and slow.

What would change this call

A named top-20 Sumsub client (e.g. Bitpanda, HTX) publicly drops Sumsub after the disclosed breach. Would show the breach is directly costing Sumsub enterprise business.
New independent 2026 benchmark tests comparing Sumsub and Veriff on synthetic-document or deepfake detection. Would show whether Sumsub closed the accuracy gap or still lags.
UK or EU regulator opens a formal inquiry or fine tied to the 18-month undetected breach. Would show regulatory trust, Sumsub's core moat, is eroding.

Key numbers

Est. ARR near $99.9M (2025-08-26)
80% fake-doc acceptance rate vs Veriff's 30% (2026-01)
4,000+ clients, up from ~2,000 (2026)

Named risks

18-month undetected data breach disclosed January 2026 exposing names and contact data. Severity: high
Independent testing shows 80% fake-document acceptance rate versus Veriff's 30%. Severity: high
Unresolved public allegations about founders' Russian origins and past Belarus-linked contract. Severity: medium
Crowded five-way peer competition (Persona, Veriff, Jumio, Onfido, Stripe Identity) with no clear market leader. Severity: medium
Recurring third-party integration security incidents, e.g. March 2025 Merkur AG API token exposure. Severity: medium

Rivals, as read in July 2026

Rival	Direction	Evidence
Veriff	losing to	Independent test found Sumsub accepted 80% of fake documents vs Veriff's 30%, 2026-06-15
Persona	contesting	Persona valued near $2B in 2025, peer-level rival in same identity verification oligopoly
Stripe Identity	gaining on	Distribution-advantaged entrant via Stripe payments ecosystem, not yet visibly taking core-vertical share
Onfido (Entrust)	contesting	Onfido acquired by Entrust in April 2024, remains a peer competitor in ID verification

Questions people ask

Is Sumsub profitable as of 2024?: Yes based on a UK-filed FY2024 statement showing revenue of £67.2M (about $85M), £11.8M gross profit and £1.8M net income, according to a 2026-07-06 ZoomInfo filing extract, though third-party ARR estimates vary widely.
Did Sumsub have a data breach?: Yes. Sumsub disclosed a breach in January 2026 in which an attacker had access starting July 2024, an 18-month undetected dwell time, exposing names and contact data, per reporting dated 2026-02-05.
Who owns Sumsub?: Sumsub is privately held. Per the company's own April 2026 statement, ultimate beneficial owners are the three Sever brothers (Andrew, Peter, Jacob), with UK shares held via Raritex Trade Ltd.
Is Sumsub a unicorn?: Sumsub was invited to the World Economic Forum's invite-only Unicorn Community in January 2026, implying a valuation over $1 billion, though no formal funding round or valuation figure has been publicly disclosed.
Who is Sumsub's biggest competitor?: Veriff (~$1.5B valuation) and Persona (~$2B valuation, 2025) are Sumsub's closest peers; a 2026-06-15 independent test found Sumsub accepted 80% of fake documents versus Veriff's 30%, exposing an accuracy gap.
Could AI replace Sumsub's verification service?: Core document OCR and Tier-1 fraud screening are increasingly automatable by general AI models, and pre-KYC filtering startups aim to reduce billable checks, but Sumsub's 15+ regulatory certifications and 4,000+ client base as of 2026 create switching costs that slow replacement.

Timeline

2026-06-18Sumsub launches MCP integration, first verification platform on ChatGPT Apps platform
2026-04-21Sumsub issues statement rebutting allegations about founders' Russian origins
2026-03-25Sumsub issues statement on website impersonation and phishing in the U.S.
2026-01-12Sumsub joins WEF Unicorn Community, implying valuation over $1 billion
2026-01Sumsub discloses breach with 18-month undetected attacker access since July 2024
2025-11-25Sumsub publishes Identity Fraud Report 2025-2026 forecasting agentic-AI scam surge
2025-09-29Sumsub named Leader in Forrester Wave Q3 2025 for identity verification
2025-03-14Security incident involving Merkur AG API token exposure disclosed
2024-03Sumsub launches enhanced Fraud Prevention module
2022-12Sumsub raises Series B, about $30M from undisclosed corporate VC fund

Revision history

21 July 2026

First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.

In the same band

Ant Group PayPal Holdings Fiserv