Market scan guide · Financial crime and fraud
How to run an AML and fraud software market scan
Financial crime software is bought under regulatory pressure and judged by its false positives. The scan has to separate KYC and identity, sanctions and PEP screening, transaction monitoring and fraud detection, which are sold together and built differently, and hold every vendor to the governance a regulator will inspect.
The financial crime and fraud landscape in numbers

The registry lists 166 financial crime and fraud vendors with 444 products, headquartered in 27 countries. 119 name at least one financial institution as a customer. 46 of the products mention an AI capability in their own text (10%).
Financial crime and fraud vendors by headquarters country: the figures as a table
| Item | Value |
|---|---|
| United States | 58 |
| Australia | 34 |
| United Kingdom | 21 |
| Singapore | 9 |
| India | 5 |
| Germany | 4 |
| New Zealand | 4 |
| Canada | 3 |
| Finland | 3 |
| Netherlands | 3 |
Capabilities most often mentioned by financial crime and fraud products: the figures as a table
| Item | Value |
|---|---|
| Fraud detection 0 confirmed | 101 |
| Case management 0 confirmed | 75 |
| Screening 0 confirmed | 50 |
| Kyc 0 confirmed | 41 |
| Machine learning models 0 confirmed | 38 |
| Transaction monitoring 0 confirmed | 38 |
| Biometrics 0 confirmed | 26 |
| Authentication 0 confirmed | 21 |
| Scams 0 confirmed | 21 |
| Risk rating 0 confirmed | 20 |
| Device 0 confirmed | 17 |
| Kyb 0 confirmed | 14 |
Financial crime and fraud vendors founded, by year: the figures as a table
| Year | Count |
|---|---|
| 2017 | 5 |
| 2018 | 7 |
| 2019 | 3 |
| 2020 | 5 |
| 2021 | 3 |
| 2022 | 1 |
| 2023 | 2 |
| 2024 | 0 |
| 2025 | 0 |
| 2026 | 0 |
The largest by named customers
| Vendor | HQ country | Named customers |
|---|---|---|
| OneSpan | United States | 20 |
| Aerospike | United States | 16 |
| BPC Banking Technologies | Switzerland | 16 |
| Annature | Australia | 15 |
| Azentio | Singapore | 14 |
| Pirani | United States | 14 |
| Fortiro | Australia | 12 |
| Resistant AI | Czech Republic | 12 |
The newest entrants
| Vendor | HQ country | Founded |
|---|---|---|
| Bretton AI | United States | 2023 |
| Salient | United States | 2023 |
| Australian Payments Plus | Australia | 2022 |
| Darwinium | Australia | 2021 |
| Fortiro | Australia | 2021 |
| Outseer | United States | 2021 |
The full list, with every vendor's flagship product and named customers: AML, KYC and fraud detection software.
How to evaluate financial crime and fraud vendors
- Separate the four jobsIdentity and KYC, screening, transaction monitoring, fraud. Score each vendor on the jobs you are buying, not on the suite.
- Ask for alert rates on comparable dataFalse positive rates on a bank of your size and products, with the tuning that got there, are the number that decides the operating cost.
- Read model governance closelyHow rules and models are explained, validated, monitored and changed, and who can change them. The regulator asks this first.
- Test the case managerThe investigator's workflow, the evidence trail and the regulator's report (the suspicious matter report in your country) from one alert to the filing.
- Check data residency and screening listsWhere customer data is processed, which lists are screened and how often they refresh.
The method for the scan as a whole, longlist to shortlist, is on the market scan page; the report template gives the headings.
The requirements that separate them
Must-haves in most scans of this category: the register's gates. Each needs evidence named beside it.
- Sanctions and PEP screening with named list sources and refresh times
- Transaction monitoring rules and models the institution can explain to its regulator
- Case management that produces the regulator's report
- Measured false positive rates with the tuning method
- Model validation and monitoring evidence
- Data processed in the institution's country or with disclosures stated
The rules procurement teams ask vendors about
By country, the rules specific to financial crime and fraud procurements. Vederca certifies nobody against these: they say what evidence to ask for.
Australia
- AML/CTF Act (AUSTRAC): Reporting entities keep customer identification, monitoring and AUSTRAC reporting in step with the Act and Rules.
United Kingdom
- MLR 2017 and NCA reporting: Customer due diligence, monitoring and suspicious activity reporting meet the Regulations and JMLSG guidance.
Canada
- PCMLTFA (FINTRAC): Reporting entities verify identity, keep records and report to FINTRAC under the Act and Regulations.
United States
- BSA/AML (FinCEN): Customer identification, monitoring and FinCEN reporting meet the BSA and the CDD Rule.
Go further
- AML, KYC and fraud detection softwareEvery financial crime and fraud vendor, the largest by named customers, the newest, the table and the questions.
- Financial crime and fraud in financial services this weekThe weekly brief: the news in this category, with its sources.
- Fintech Market Scan 2026The whole landscape in numbers.
- Have Vederca run the scanYour requirements to up to 15 financial crime and fraud vendors, every response evaluated, a report recommending a shortlist. One fixed fee.