August, 2026

User Verification

Verification of Payee

A new service, Verification of Payee (VoP), has been released. It works within both the User and Business Verification solutions and is designed to verify whether the provided account holder name matches the specified IBAN.

Under the EU Instant Payments Regulation, this check is becoming mandatory for euro-denominated SEPA transfers. Beyond regulatory compliance, VoP helps organizations processing payments and payouts detect incorrect or potentially fraudulent bank account details before funds are sent.

How it works:

To perform the check, provide the applicant’s IBAN and account holder name (individual or company). The service returns one of the following results:

• Match — VoP check is performed successfully and confirms that the provided data matches the account data.
• Close Match — VoP check is performed successfully and confirms that the provided data closely matches the account data.
• No Match — VoP check is performed successfully and confirms that the provided data does not match the account data.
• Not Applicable — VoP check is performed successfully, but the check is not applicable.
• Check Unavailable — VoP check cannot be performed because the external service is unavailable.
• Not Enough Data — VoP check cannot be performed because the request contains incomplete data. This result can be returned if the IBAN is missing or invalid, or if the payee name is missing.

Learn more about Verification of Payee in the documentation.

Email rate limiter

We have introduced a per-recipient rate limit for outgoing emails to protect users from being flooded with repeated messages.

What's new :

• Email sending limits — Each recipient can now receive a maximum of 200 emails per hour under a single client account.
• Automatic suppression — If a recipient exceeds this limit, any additional emails sent to them during that hour will be automatically skipped to prevent spamming.
• Reliability protection — If the system monitoring these limits experiences a temporary issue, your emails will continue to send normally without interruption.
• Improved delivery tracking — We added behind-the-scenes metrics to better monitor successfully sent and blocked emails.

Bulk editing extra fiends for Supported ID documents

We have updated how bulk editing works for extra document fields in Supported ID documents, making it much clearer and easier to manage fields across multiple countries.

You now have two dedicated tabs to control extra fields for your target countries:

• Fields to show — Select the fields you want to turn on.
• Fields to hide — Select the fields you want to turn off.

Travel Rule

New country bundles

New Travel Rule country bundles have been added:

• Thailand
• Montenegro
• Namibia
• Oman

More flexibility for Unhosted wallet verification settings

The Unhosted wallet verification setup now features more options to verify wallet ownership. A digital signature is no longer mandatory, and you can now choose whether to include digital signatures or rely solely on other methods, such as a Satoshi Test or a Self-Declaration form.

Dashboard

Markdown rendering and clickable links in Notes

All notes across the Dashboard now support Markdown formatting. Additionally, to streamline your workflow, notes generated in Case Management now include clickable case links.

Formatting hints:

• - text → Bulleted list
• 1., 2., 3. → Numbered list
• **text** → Bold
• *text* → Italic
• __text__ → Underlined
• ~~text~~ → Strikethrough

Links to sumsub.com become clickable automatically, while any other links stay as plain text.

Transaction Monitoring

Applicant Risk Level: Dedicated risk category for every applicant

We are rolling out Applicant Risk Level, a dedicated, standalone field on the applicant profile that converts complex risk data into a clean, standardized category.

What's new:

• First-class risk category — Rather than relying solely on tag clouds and total scores, applicants are automatically assigned a clear risk category (e.g., Low, Medium, High) based on customizable score thresholds and risk matrix rules.
• Dashboard & API overrides — View the assigned risk level and score breakdown directly on the Applicant page. Authorized users can manually override and lock a risk level, or update it externally via a new PATCH /resources/applicants/{applicantId}/assessment/riskLevel API endpoint.
• Workflow automation — A new riskLevel action node in Workflow Builder allows you to set or update an applicant's risk level automatically as part of your flow.

Permissions & access:

To manage this feature, two new permissions have been added:

• manageApplicantRiskScoring — Required (along with existing KYT permissions) to configure risk levels, score thresholds, and matrix tags in Settings.
• changeApplicantRiskLevel — Required to manually override an applicant's risk level on the Applicant page or via the API.

Case Management

Case notifications

Case assignees will now receive email notifications when key changes occur on their assigned cases, eliminating the need to manually refresh or monitor the case page.

What’s new:

• Assignment updates — Receive an email whenever a case is assigned or reassigned to you. When reassigned, the previous assignee is also notified.
• Status changes — Get notified immediately when a case's status changes (e.g., set to resolved or blocked).
• Blueprint updates — Receive an alert when a case's blueprint changes. If both the blueprint and assignee change in the same action, they are combined into a single notification.

Each notification includes a direct link to the case page and an unsubscribe option (managed under Profile settings → Notifications → Case notifications).

Automation

Ongoing AML and ID document monitoring for UAE LDP

You can now run ongoing AML and ID document monitoring within the UAE Local Data Processing (LDP) region, ensuring full compliance with local data storage requirements without cross-border transfers.