January 2026

SDK

Email field editing control

You can now control whether the email field can be edited in the WebSDK.

• If the email is already prefilled (for example, provided via API), the applicant will see the email but will not be able to edit it.
• If the email field is empty, the applicant can enter their email as usual.

User Verification

Norway Non-Doc Identity Verification

Sumsub has introduced the Norway Non-Doc Identity Verification. It works by having the user share their National identification number (NIN), and authenticate themselves in their bank application.

New API methods for questionnaires

We have introduced two new API methods that allow you to get a list of all questionnaires on your client key, as well as information about which levels they are used in:

• Get list of questionnaires
• Get levels with questionnaires

Vertical video orientation

The operator video feed is now switched from horizontal (webcam default, 3:2) to a vertical orientation (phone, 3:4). It means that the applicant now sees an operator with better visibility and no extra surroundings.

Business Verification

New source for corporate checks in Brazil

We have integrated a new KYB data source for Brazil. This source gives us access to online government data with the following key features:

• Online data from the Brazilian federal tax‐registry authority.
• Search by name and pre-fill are supported.
• Information about directors and shareholders is available (without shareholder stake details).

Travel Rule

UTXO transaction handling

We have introduced UTXO transaction handling to improve how on-chain data is extracted and interpreted for UTXO-based Travel Rule transactions. This feature allows configuration of on-chain data extraction for the following networks:

• Bitcoin (BTC)
• Litecoin (LTC)
• Bitcoin Cash (BCH)

For more information on UTXO transactions, refer to this article.

Workflow Builder

Tags update

You can now add and remove tags directly within an action node in the Workflow Builder.

User Verification

Greater shifts for Pending applicant status

There is now much more freedom in actions when working with applicants in the Pending status:

• Approve/Reject availability. From now on, you can change the applicant's status while it is Pending. Once this action is confirmed, the status will change to Requires action, and you can modify the applicant thereafter.
• Smarter status update after level change. If a new level has any required steps, such as missing docs, the status will automatically switch to Documents requested.

Salesforce integration

Sumsub has recently been integrated with Salesforce, which means that your applicants, both individuals and companies, can now pass verification with us. The verification link will be sent via Salesforce messaging, and the results will be reflected in the Salesforce dashboard.

KYC transactions → Verification sessions

KYC transactions have been renamed to Verification sessions for better clarity and positioning of the feature. The solution helps calculate onboarding and verification user risk through Applicant Scoring, enabling risk-based decisions at any stage.

The API type kyc for Verification sessions remains unchanged.

Dashboard

New widgets on Overview page

Great new widgets are now available on the Overview page, allowing you to customize the page layout:

• Database checks: status and source names
• Identity check
• Identity Data Verification (TIN)
• Non-Doc Address Verification
• Non-Doc check
• Bank Account Verification
• Risk check
• Verification checks: status and key data for non-id/non-KYB checks
• Email
• Phone
• PoA check
• Device check
• IP check
• Questionnaire: list of questionnaires with their statuses
• Locations: all known locations plotted on a map

Updated flow for manual applicant creation

Manual applicant creation (for both individuals and companies) is now handled in a simple, clean modal window that allows you to do everything in one place:

1. Fill in key fields, select a verification level, and jump straight to the applicant page.
2. Instantly generate a link and send it to the applicant.

Applicant page updates

We have rolled out several small adjustments to the Applicant page:

• Improved Blocklist indication. Instead of coloring the blocklisted applicant’s name red, we now display a dedicated Blocklisted tag.
• Fix of document duplication for POI 2, 3, 4. Documents already handled by the new POI module will no longer appear in the old UI block.
• Correct score in the Overview tab. The total score in the Overview tab now matches the value shown in the header.
• Enhanced required field Indicators for identity documents. Red highlighting and error messages now appear only after manual edits, reducing noise and confusion during the initial document upload.

Self-service

New Products page

A new page has been added to the Dashboard, accompanied by the following cool features:

• Smarter navigation. The page is easily accessible from the main navigation bar instead of the top-right menu.
• For You one-time tag. The tag aims to improve the visibility of recommendations.
• Cleaner UI. Generic onboarding materials have been removed from the page to focus on the self activation process.
• Convenient structure with new sections
• Access instantly. The list of features available for instant activation via the Self Purchase flow.
• Explore more. Services that currently require manual activation.
• Future-proof setup. Any new features available for Self Purchase will automatically appear in the Access instantly section.

Fraud prevention

Fraud Networks filters

We have delivered a bunch of new filters for Fraud Networks. What’s new:

• Patterns
• Size
• Source Key
• Country
• Platform
• Level
• Document Type
• Review Status
• Risk Labels
• Applicant Risk Score
• Tags

IP Address Intelligence adjustments

A new version of our IP Address Analysis technology has been rolled out, with an expected 17% improvement in geolocation accuracy based on our internal analytics, compared to the previous version.

In addition, we now have access to new datapoints:

• Geolocation Confidence (radius in km)
• Residential Proxies Detection — a strong risk signal that associates with potential abuse.

API

Restriction on creating empty Applicant actions via API

We’re adding validation for Payment Method Actions pre-creation via API to enforce a more predictable action lifecycle, reduce unnecessary data, and improve overall system consistency and performance.

When creating a Payment Method Action via API, the request will fail if any of the following fields are missing or empty:

• paymentSource
• kytTxnReference
• trSdkData
• input

User Verification

Validation of Selfie steps in Lite mode

We have implemented validation for selfie step types for clients using Lite mode.

Lite mode supports only advanced liveness check and web camera photo selfie types. From now on, it works as follows:

1. When a client tries to switch to Lite mode with unsupported selfie steps, we show an informative pop-up.
2. The client is prompted to select a compatible selfie type.
3. If the client proceeds with switching the mode, the system automatically replaces unsupported selfie types with advanced liveness check by default.
4. A warning about the pricing impact of switching the mode is also displayed.

Forbidden document names updates

We have extended the existing PoA validation rules to allow blocking documents by document name, in addition to website and organization name checks.

Document name matching is performed using substring matching:

• Bad Dock Name -> Bad Dock Name from USA — matched and rejected.
• Very Bad Dock Name -> Bad Dock Name from USA — matched and rejected.
• Bad Dock Name -> Bad Dock – not matched and not rejected.
• Bad Dack -> Bad Dock – not matched and not rejected.

Data deletion for Georgian regulations

New Georgian regulations require deletion of the applicant data. To comply with these regulations, Sumsub has introduced a new mode in Applicant Deletion settings in Auto-delete options — Delete only applicant’s doc photos.

It allows deleting only applicants’ document photos, while retaining textual data, so that ongoing monitoring services can continue to operate if required by the client.

Denmark Non-Doc Identity Verification

We have relaunched our Denmark Non-Doc ID Verification service that now covers over 96% of Danish residents, including both Danish nationals and long-term residents with a valid CPR number and an active MitID account.

Users simply share their MitID User ID and CPR number, then authenticate directly in the MitID app using their personal security method.

Browser restrictions for VideoIdent

We have enabled a feature restricting join calls from browsers, which tends to be problematic for conducting VI. In case the browser is not supported, the operator will see it in the call panel.

Custom CSV Export on new SS keys

From now on, all new SS keys will be created with permissions that grant access to Custom CSV Export, assigned to client roles. The permission that allows exporting sensitive data will be available only to the main owner, but they will be able to grant it to other members on the key.

Auth0 integration

Sumsub has introduced Auth0 – a new authentication and authorization platform. It provides flows like:

• Log in with Google
• Google Authenticator–style MFA
• and more enterprise-grade authentication features

It is especially useful for companies that want to verify users (KYC) before granting access to their application via Auth0.

Know Your Agent (KYA) bound to human identity

Sumsub has made its positioning about KYA implementation clear for better understanding and transparency. In Sumsub, KYA is about:

• Binding an AI Agent-based automation to a real human identity behind the screen.
• Managing fraud risks, grounded in verified identity.
• Predicting the trend and having a platform that can already manage it.

The platform is the same:

• Device Intelligence helps detect AI Agents.
• Transaction Monitoring allows managing risks and real-time actions.
• Liveness and Payment Method Check represent specific challenges to reduce the risk of potential threats.

AML Screening

ComplyAdvantage Mesh: Bring Your Own Credentials (BYOK)

Clients can now use their own credentials (BYOK) for the ComplyAdvantage Mesh integration. The integration supports both standard AML screening and Ongoing Monitoring.