Digital Element
Active competitorIP geolocation + intelligence (NetAcuity flagship since 1999). Nodify product for proxy/VPN insights. Partnered with Ravelin for ML enrichment (June 2025).
Detection scorecard
How Digital Element handles every spoofing technique we test for. Click any cell for findings.
| Competitor | VPN | Proxy | Remote access | Fake GPS app | GPS spoofer | Emulator | Device farm | Jailbreak / Root | Resigned / tampered app | Sideload (PlayCover) | Browser extension | MITM / replay | Tor |
|---|
Strongest findings
Failed and partial test outcomes ranked for sales impact — what to lean on in a call.
No findings yet
Once tests land in updates/ with an outcome, they'll surface here.
All findings
Test results and intel tagged to Digital Element.
Battle card
Talking points for a live sales call.
Digital Element is an IP-geolocation + IP-intelligence platform — NetAcuity is their flagship product (since 1999). Nodify is their newer VPN/proxy-detection product. **In June 2025 they partnered with Ravelin** to provide NetAcuity (and possibly Nodify) as enrichment features into Ravelin's per-client ML models. In Kingsmead Security's Sept 2025 independent benchmark, Nodify scored 98.3% VPN detection rate (FPR not published); GeoGuard scored 99.1% with a 0% FPR. The tests focused on streaming — not fraud-specific residential proxies most relevant to merchant use cases — so the comparison understates the GeoGuard advantage in the fraud + regulated-iGaming setting.
Watch out for
- Comprehensive IP coverage: 20+ databases, 99.9999% of seen IPs worldwide, 97% city-level, IPv4 + IPv6.
- 59+ targeting parameters beyond location (connection type/speed, mobile carrier, proxy type, ISP, Wi-Fi intelligence, demographics).
- Updated weekly. Queryable at 35,000 IPs per second.
- Nodify: classification (masked/public/private), residential vs commercial distinction, provider features (multihop, Tor access, no-logging, streaming-unblocking).
- Ravelin partnership distribution into Worldpay merchants.
- IP Forensics (Oct 2025): historical IP intelligence lookback for cybercrime investigations + post-transaction fraud + chargebacks.
How we win
- IP-only — no GPS, Wi-Fi, Bluetooth, or sensor data. Cannot serve compliance-grade jurisdiction enforcement on its own.
- Nodify VPN detection 98.3% vs GeoGuard 99.1% (Kingsmead Sept 2025). FPR not published vs GeoGuard 0%.
- Tests focused on streaming, not fraud-specific residential proxies most relevant to merchant + regulated-iGaming use cases.
- NetAcuity VPN/proxy detection is described as 'basic proxy type flag — surface-level' (Digital Element themselves say Nodify is the deeper product).
- IP database size not disclosed (vs GeoGuard 370M IPs). Independent accuracy not widely verified beyond the Kingsmead test.
Capability claims
What they say they do, grouped by category. Cross-check against the detection scorecard above — claims and tests don't always match.
Geolocation
How accurately and reliably the product determines a user's real location.
- GPS / OS locationUses native device GPS or OS-level location services.○ Noverifiedstale
- Wi-Fi triangulation◐ Partialverifiedstale
Wi-Fi intelligence claimed as a NetAcuity parameter — provenance unclear.
- IP geolocation● Yesverifiedstale
NetAcuity — flagship product, 20+ databases, weekly updates.
- IP-change detectionContinuously monitors IP and re-runs geolocation on Wi-Fi ↔ cellular or VPN swap (GeoComply MyIP equivalent).● Yesverifiedstale
IP stability as a targeting parameter.
- Boundary / state-lineHandles users moving across regulated boundaries during an active session.○ Noverifiedstale
- Near-border accuracyMulti-point aggregation + buffer-zone handling near regulated borders; measured as pass rate at 250m.○ Noverifiedstale
- Pre-login pre-check◐ Partialverifiedstale
IP intelligence is data enrichment — not pass/fail decisioning.
- Multi-jurisdictionSingle integration handling operators in multiple regulated states (GeoComply Multipass / Dynamic Boundaries equivalent).○ Noverifiedstale
- Desktop plugin (PLC-class)Native desktop client / plugin required by PA, NJ, MS and most US iGaming regulators.· Unknowninferredstale
- On-property BLE geofenceBluetooth Low Energy precision geofencing for tribal / on-property venues (PinPoint-class).· Unknowninferredstale
Anti-spoofing detection
Detection coverage for the spoof vectors tested by the Competitive Intelligence team. Cell values reflect SDK-level detection of the listed vector at the most recently tested operator.
- VPN exit nodesDetects commercial VPN exit nodes (NordVPN, ExpressVPN, Surfshark, etc.).● Yesverifiedstale
Nodify: 98.3% VPN detection rate (Kingsmead, Aug 2025). FPR not published. Streaming-focused test.
- Proxy / residentialDetects datacenter and residential proxies — the harder class of IP obfuscation.● Yesverifiedstale
Nodify: classification (masked/public/private), residential vs commercial, provider features (multihop, Tor, no-logging).
- Tor exits● Yesverifiedstale
Nodify: Tor entrance / exit / relay node classification.
- Remote desktop (RDP)Detects AnyDesk, TeamViewer, FaceTime, Assistant, HopToDesk, iPhone screen mirroring, RustDesk and similar remote-control sessions.○ Noverifiedstale
- Fake-location appsDetects iAnyGo / Fake GPS / mock-location apps on iOS and Android.○ Noverifiedstale
- Hardware GPS spooferDetects HackRF / BladeRF and GPS-simulator-device signal injection.○ Noverifiedstale
- Emulator / VMDetects Xcode iOS Simulator, BlueStacks, Genymotion and similar virtual environments.○ Noverifiedstale
- Device farm / VMOSDetects VMOS / virtualized Android device-farm environments used for multi-accounting.○ Noverifiedstale
- Jailbreak / rootDetects jailbroken iOS, rooted Android (incl. Magisk hidden root), and Frida / runtime-hook tampering.○ Noverifiedstale
- Resigned / tampered appDetects iOS apps that have been re-signed / Android apps that have been repackaged with injected code.· Unknowninferredstale
- Sideload (PlayCover)Detects ARM-macOS iOS sideloading via PlayCover and equivalent hardware-abstraction loaders.· Unknowninferredstale
- Browser extension spoofDetects Chrome / browser extensions that spoof location (Location Guard, Hola, etc.).· Unknowninferredstale
- Session terminationTerminates session when location services are disabled mid-game or device leaves the jurisdiction.○ Noverifiedstale
- MITM / replay attackResists network-level interception, request tampering, and replay attacks against the SDK ↔ backend channel.○ Noverifiedstale
Identity & KYC
Document verification, biometric liveness, sanctions screening.
- Document scan / OCR○ Noverifiedstale
- Biometric liveness○ Noverifiedstale
- Sanctions / PEP○ Noverifiedstale
- AML / responsible gaming○ Noverifiedstale
- Reusable identity· Unknowninferredstale
Platform coverage
Which surfaces the SDK / product runs on.
- iOS native· Unknowninferredstale
- Android native· Unknowninferredstale
- Web / browser● Yesverifiedstale
- React Native· Unknowninferredstale
- Flutter· Unknowninferredstale
- Unity· Unknowninferredstale
- .NET / desktop· Unknowninferredstale
- Server-side API● Yesverifiedstale
API-based, flat-file download, or high-performance cloud service. 35,000 IPs/sec.
Compliance & certification
Regulatory coverage and certifications.
- US state-licensed (iGaming/sportsbook)· Unknowninferredstale
- US tribal / on-property· Unknowninferredstale
- Canadian provincial· Unknowninferredstale
- European (MGA/UKGC)● Yesverifiedstale
- LatAm (Brazil SPA)· Unknowninferredstale
- SOC 2 Type II· Unknowninferredstale
- ISO 27001· Unknowninferredstale
- GLI-certified· Unknowninferredstale
Fraud & device intelligence
Device fingerprinting, IP intelligence, behavioral signals, account-takeover detection.
- Device fingerprint○ Noverifiedstale
- IP intelligence DBMaintained DB of VPN / TOR / proxy / hijacked-residential IPs with documented refresh cadence (GeoGuard equivalent).● Yesverifiedstale
Core capability. 60-70M data points collected annually via Intelligent Trace Agents.
- Behavioral signals○ Noverifiedstale
- Velocity / impossible travel· Unknowninferredstale
- Bot detection· Unknowninferredstale
- Account takeover· Unknowninferredstale
- Chargeback mgmt● Yesverifiedstale
IP Forensics (Oct 2025) — historical IP lookback for post-transaction chargeback investigations.
Ops & integration
How easy the product is to integrate, observe, and operate.
- Self-serve onboarding· Unknowninferredstale
- Case management UI· Unknowninferredstale
- Webhook delivery· Unknowninferredstale
- Real-time API● Yesverifiedstale
- Analytics dashboard◐ Partialinferredstale
- Audit log export○ Noverifiedstale
- Encrypted responseDetection flag names hidden from the end user (GeoComply uses encrypted XML; most challengers expose JSON flag names).· Unknowninferredstale
- SDK hardeningSDK is signed, obfuscated, and license-bound — not findable / patchable to inject coordinates client-side.· Unknowninferredstale
Commercial
Pricing model and go-to-market shape.
- Usage-based pricing● Yesverifiedstale
Per-query pricing.
- Flat license / enterprise● Yesverifiedstale
Flat-file download option.
- Free tier / trial· Unknowninferredstale
- Publicly listed pricing· Unknowninferredstale
- Bundled with platformGeo is bundled inside a broader platform deal (OpenBet, GeoLocs/Mkodo, Playtech).● Yesverifiedstale
Bundled into Ravelin (June 2025) + other fraud platforms.
Resources
Briefings, source docs, and external links.
Talking points
- Nodify is good; GeoGuard is better and audited differently. 98.3% vs 99.1% VPN detection; FPR not published vs 0%. Streaming-focused test; fraud-residential-proxy performance unknown.
- NetAcuity is data enrichment, not compliance enforcement. Other fraud platforms (Ravelin, ThreatMetrix) layer NetAcuity as a feature — Digital Element doesn't make pass/fail decisions itself.
- Watch the Ravelin distribution. Via Worldpay, Digital Element's IP intelligence reaches hundreds of thousands of merchants. The competitive surface area is increasing without Digital Element having to sell directly.
Where they overlap with GeoComply
- Streaming + e-commerce VPN detection: closest direct overlap.
- Indirect via Ravelin / ThreatMetrix: Digital Element shows up as the IP layer inside other platforms; competitive pressure is via the host platform, not Digital Element directly.