Top 20 RegTech Companies at SFF 2026, Led by iDenfy

How we chose them

Every company below is either on the official exhibitor listing, with the booth shown, or on the 2026 sponsor page. We picked for relevance to firms that onboard customers to stablecoins, tokenised assets, exchanges and wallets, and for breadth: identity, AML data, transaction monitoring, fraud and on-chain analytics. Order after the first place is by category, not a score.

#	Company	What it does	Where
1	iDenfy	KYC, KYB, AML screening, fraud	5J25-B (Lithuania)
2	Sumsub	Identity verification and AML	3J13
3	Trulioo	Global identity and business verification	3F39
4	AU10TIX	ID document and identity fraud checks	3L13
5	Innovatrics	Biometrics and face matching	3E39
6	Ondato	KYC and KYB	5J25-D (Lithuania)
7	Entrust	Identity security	4J19
8	Alchera	Face recognition and liveness	6F02
9	ComplyAdvantage	AML screening and monitoring	4F31
10	LexisNexis Risk Solutions	Risk and identity data	3H19
11	Polixis	Sanctions and PEP data	5A25-C
12	ZIGRAM	AML data and screening	4F34
13	Flagright	Transaction monitoring	3L25
14	Regtank	AML and KYC for digital assets	5B25-5E25-G
15	Know Your Customer Limited	Business onboarding (KYB)	6H09
16	SEON	Fraud prevention	4E19, sponsor
17	TrustDecision	Fraud and credit risk	6C21
18	Elliptic	Blockchain analytics	Sponsor
19	TRM Labs	Blockchain intelligence	Sponsor
20	Cleanverse	Compliance for regulated digital assets	2A49, sponsor

1. iDenfy — the key company to meet

iDenfy is a Lithuanian identity verification company, founded in 2017 in Kaunas, that provides KYC, KYB, AML screening and fraud prevention through one platform. It exhibits at SFF 2026 at booth 5J25-B in the Lithuanian pavilion, Hall 5, and the festival listing tags it RegTech.

Why it leads this list: most compliance teams buy identity checks from one vendor, sanctions screening from a second and fraud tools from a third, then stitch the results together. iDenfy's documentation covers all of it under one account:

• ID verification with document checks and liveness, which test that a real person, not a photo or recording, is in front of the camera.
• Business verification (KYB) for onboarding companies and their owners.
• AML screening against sanctions, PEP and adverse-media lists, with ongoing monitoring after onboarding.
• Fraud and risk tools: risk profiles, custom rules, blocklists and proxy detection.
• Face authentication to re-verify a known user before a high-risk action, such as a large crypto withdrawal.
• Proof of address, bank verification through open banking, and questionnaires for source-of-funds declarations.

Two details matter for crypto teams. First, iDenfy publishes a crypto compliance flow: verify at registration, screen and monitor after approval, and re-verify with a face check before large withdrawals. It frames this against MiCA, AML rules and the FATF Travel Rule. Second, its pricing lets customers pay only for approved verifications, so failed or abandoned attempts, common when fraudsters probe a sign-up form, are not billed. In 2026 it announced integrations with cloud host Hetzner, Lithuania's RATO Bank and a private-aviation crypto payment gateway, 5 Star Jets.

Ask at the booth: coverage for the countries your users come from, how liveness handles injected video, whether ongoing AML monitoring is included in your plan, and how results reach your system (webhooks are standard). Full profile: iDenfy explained.

Identity verification and biometrics (2-8)

2. Sumsub (3J13). A UK-headquartered verification platform widely used by crypto exchanges, covering KYC, KYB and transaction monitoring. It also appears on the attending organisations list.

3. Trulioo (3F39). A Canadian identity and business verification provider known for checks against data sources across many countries, not only documents.

4. AU10TIX (3L13). An Israeli company specialising in automated document verification and identity fraud detection, tagged for payments and cybersecurity as well as RegTech.

5. Innovatrics (3E39). A Slovak biometrics company whose face and fingerprint algorithms sit inside many onboarding products.

6. Ondato (5J25-D). A second Lithuanian KYC and KYB provider, two booths from iDenfy in the same pavilion. Useful for comparing two European vendors in one stop.

7. Entrust (4J19). An identity security company tagged for AI, banking technology and cybersecurity. Its speakers include a vice-president for identity security on the agenda.

8. Alchera (6F02). A Korean face recognition and liveness company, part of the Korean presence in Hall 6.

AML screening, data and monitoring (9-15)

9. ComplyAdvantage (4F31). AML risk data and screening for sanctions, PEPs and adverse media, plus transaction monitoring.

10. LexisNexis Risk Solutions (3H19). Large risk and identity data sets used by banks for due diligence and screening.

11. Polixis (5A25-C). A Swiss provider of sanctions and PEP data and screening, in the Swiss pavilion area.

12. ZIGRAM (4F34). An Indian AML data and screening company.

13. Flagright (3L25). Real-time transaction monitoring and case management, useful for teams that have KYC but not yet ongoing monitoring.

14. Regtank (5B25-5E25-G). A Singapore RegTech tagged for digital assets, offering AML and KYC tools aimed at crypto and fintech firms.

15. Know Your Customer Limited (6H09). A Hong Kong company focused on business onboarding: company registry checks and ownership structures.

Fraud prevention (16-17)

16. SEON (4E19). A Hungarian fraud prevention company using device, email and phone signals. It is also on the sponsor page.

17. TrustDecision (6C21). Fraud and credit risk tools for digital lenders and payment firms in Asia.

On-chain analytics and digital-asset compliance (18-20)

18. Elliptic and 19. TRM Labs are on the 2026 sponsor page. Both trace crypto transactions to flag funds linked to sanctions, hacks, scams or mixers, which KYC alone cannot see. Binance's deputy chief compliance officer is also on the agenda, in a session moderated by TRM's Ari Redbord.

20. Cleanverse (2A49). A Singapore company tagged Blockchain & Web3 and RegTech, and a sponsor. It runs the session "Have We Come to the End of Anonymous Ownership for Regulated Digital Assets?", which is the policy question behind every KYC requirement for tokenised assets.

How these fit a crypto compliance stack

A regulated crypto or tokenised-asset business needs four layers: identity (KYC and KYB), screening (sanctions, PEPs, adverse media), monitoring of transactions on and off chain, and fraud controls. One vendor rarely covers all four; iDenfy covers the first two and parts of the fourth, and on-chain analytics comes from firms such as Elliptic or TRM.

• Onboarding: document, liveness and KYB checks. iDenfy, Sumsub, Trulioo, Ondato.
• Screening: at onboarding and continuously. iDenfy, ComplyAdvantage, LexisNexis, Polixis.
• Monitoring: fiat transactions with Flagright or ComplyAdvantage; wallets with Elliptic or TRM.
• Fraud: device and behaviour signals with SEON or TrustDecision; re-authentication with a face check before large withdrawals.

On Stellar, the onboarding layer usually sits with an anchor, the regulated business that swaps tokens for bank money. Anchors collect customer data through SEP-12, which standardises the interface and leaves the checks to the anchor's chosen provider. See Stellar anchors explained, and for the rules driving all of this, MiCA vs the GENIUS Act.

Before you sign with any of them

• Ask for the certification reports (ISO 27001, SOC 2), not just the logos.
• Test with your own users' documents and countries; coverage claims vary by document type.
• Check where data is stored and processed, against your regulator's outsourcing and data rules.
• Price the whole flow: KYC, screening, monitoring and re-checks, not only the first verification.