Ravelin

Active competitor

Bespoke client-specific ML for enterprise merchants + PSPs. Acquired by Worldpay (Feb 2025). Partnered with Digital Element NetAcuity for IP intelligence (June 2025) — but no compliance-grade geolocation.

ravelin.commaxim.mosinVerified 1mo ago

Compare

USUKEUGlobalE-commercePSPsPaymentsTravel#new-verticals#fraud#ml-bespoke#worldpay-acquired#digital-element-partner#ip-only-geo#compete

Detection scorecard

How Ravelin handles every spoofing technique we test for. Click any cell for findings.

Full matrix →

• Detected
• Partial
• Missed
• Not tested

Competitor	VPN	Proxy	Remote access	Fake GPS app	GPS spoofer	Emulator	Device farm	Jailbreak / Root	Resigned / tampered app	Sideload (PlayCover)	Browser extension	MITM / replay	Tor

Strongest findings

Failed and partial test outcomes ranked for sales impact — what to lean on in a call.

No findings yet

Once tests land in updates/ with an outcome, they'll surface here.

All findings

Test results and intel tagged to Ravelin.

Operator

Threat

No findings on file for this competitor yet.

Battle card

Talking points for a live sales call.

Ravelin is a fraud + payment solutions platform serving enterprise merchants + PSPs. Differentiator is bespoke client-specific supervised ML — each customer's model is trained on their own transaction data, rather than a shared consortium model. **The two important 2025 events:** (1) Worldpay acquired Ravelin (Feb 2025), integrating Ravelin's fraud tools into Worldpay's global payment portfolio. (2) Ravelin announced a Digital Element partnership (June 18, 2025) — NetAcuity IP intelligence enriches Ravelin's per-client ML models as features. Possibly Nodify (proxy/VPN detection) too, though not confirmed publicly. **The Worldpay acquisition is the most significant distribution event** in the new-verticals set. Worldpay processes payments for hundreds of thousands of merchants globally — Ravelin (and Digital Element by extension) will be available as a bundled offering inside Worldpay's merchant stack. Anticipate Ravelin in Worldpay merchant deals.

Watch out for

• Worldpay distribution (post-acquisition Feb 2025) — bundled into a global PSP's merchant stack.
• Bespoke per-client ML — reduces false positives + improves detection for vertical-specific behaviours vs shared consortium models.
• Digital Element NetAcuity (and possibly Nodify) IP intelligence as enrichment features — June 2025 partnership.
• Payments orchestration layer post-Worldpay — extends reach into payment processing, not just fraud.
• Real-time decisioning.

How we win

• No GPS, Wi-Fi, or Bluetooth sensor data — geolocation is entirely IP-derived via Digital Element.
• Per-client ML doesn't resolve the underlying IP accuracy gap — a client-trained model trained on IP features is still only as accurate as the IP data it ingests.
• If the partnership uses NetAcuity only (not Nodify), proxy detection is shallower than the Nodify benchmark suggests.
• Digital Element Nodify VPN detection: 98.3% (vs GeoGuard 99.1%, 0% FPR, Kingsmead Security Sept 2025).
• Independent VPN tests focused on streaming — not fraud-specific residential proxies most relevant to merchant use cases.
• No jurisdiction enforcement — score/feature only.
• No compliance-grade location, no compliance audit log.

Capability claims

What they say they do, grouped by category. Cross-check against the detection scorecard above — claims and tests don't always match.

Geolocation

How accurately and reliably the product determines a user's real location.

• GPS / OS locationUses native device GPS or OS-level location services.
  ○ Noverifiedstale

  No sensor-side location data.

• Wi-Fi triangulation
  ○ Noverifiedstale
• IP geolocation
  ● Yesverifiedstale

  Via Digital Element NetAcuity — 20+ databases, 99.9999% IP coverage, 97% city-level. Updated weekly.

• IP-change detectionContinuously monitors IP and re-runs geolocation on Wi-Fi ↔ cellular or VPN swap (GeoComply MyIP equivalent).
  ◐ Partialverifiedstale

  Via NetAcuity IP-stability signal.

• Boundary / state-lineHandles users moving across regulated boundaries during an active session.
  ○ Noverifiedstale
• Near-border accuracyMulti-point aggregation + buffer-zone handling near regulated borders; measured as pass rate at 250m.
  ○ Noverifiedstale
• Pre-login pre-check
  ◐ Partialverifiedstale

  Real-time fraud decisioning engine returns approve/decline/review.

• Multi-jurisdictionSingle integration handling operators in multiple regulated states (GeoComply Multipass / Dynamic Boundaries equivalent).
  ○ Noverifiedstale
• Desktop plugin (PLC-class)Native desktop client / plugin required by PA, NJ, MS and most US iGaming regulators.
  ○ Noverifiedstale
• On-property BLE geofenceBluetooth Low Energy precision geofencing for tribal / on-property venues (PinPoint-class).
  ○ Noverifiedstale

Anti-spoofing detection

Detection coverage for the spoof vectors tested by the Competitive Intelligence team. Cell values reflect SDK-level detection of the listed vector at the most recently tested operator.

• VPN exit nodesDetects commercial VPN exit nodes (NordVPN, ExpressVPN, Surfshark, etc.).
  ◐ Partialverifiedstale

  Via Digital Element Nodify (possibly): 98.3% VPN detection rate, false positive rate not published.

• Proxy / residentialDetects datacenter and residential proxies — the harder class of IP obfuscation.
  ◐ Partialverifiedstale

  Via Digital Element Nodify (possibly): classification (masked/public/private), residential vs commercial, provider features.

• Tor exits
  ● Yesverifiedstale

  Via Nodify (if part of partnership): Tor entrance / exit / relay node classification.

• Remote desktop (RDP)Detects AnyDesk, TeamViewer, FaceTime, Assistant, HopToDesk, iPhone screen mirroring, RustDesk and similar remote-control sessions.
  · Unknownrumorstale
• Fake-location appsDetects iAnyGo / Fake GPS / mock-location apps on iOS and Android.
  ○ Noverifiedstale
• Hardware GPS spooferDetects HackRF / BladeRF and GPS-simulator-device signal injection.
  ○ Noverifiedstale
• Emulator / VMDetects Xcode iOS Simulator, BlueStacks, Genymotion and similar virtual environments.
  · Unknownrumorstale
• Device farm / VMOSDetects VMOS / virtualized Android device-farm environments used for multi-accounting.
  · Unknownrumorstale
• Jailbreak / rootDetects jailbroken iOS, rooted Android (incl. Magisk hidden root), and Frida / runtime-hook tampering.
  · Unknownrumorstale
• Resigned / tampered appDetects iOS apps that have been re-signed / Android apps that have been repackaged with injected code.
  · Unknownrumorstale
• Sideload (PlayCover)Detects ARM-macOS iOS sideloading via PlayCover and equivalent hardware-abstraction loaders.
  · Unknownrumorstale
• Browser extension spoofDetects Chrome / browser extensions that spoof location (Location Guard, Hola, etc.).
  · Unknownrumorstale
• Session terminationTerminates session when location services are disabled mid-game or device leaves the jurisdiction.
  · Unknownrumorstale
• MITM / replay attackResists network-level interception, request tampering, and replay attacks against the SDK ↔ backend channel.
  · Unknownrumorstale

Identity & KYC

Document verification, biometric liveness, sanctions screening.

• Document scan / OCR
  ○ Noverifiedstale
• Biometric liveness
  ○ Noverifiedstale
• Sanctions / PEP
  ○ Noverifiedstale
• AML / responsible gaming
  ○ Noverifiedstale
• Reusable identity
  · Unknowninferredstale

Platform coverage

Which surfaces the SDK / product runs on.

• iOS native
  · Unknowninferredstale
• Android native
  · Unknowninferredstale
• Web / browser
  ● Yesverifiedstale
• React Native
  · Unknowninferredstale
• Flutter
  · Unknowninferredstale
• Unity
  · Unknowninferredstale
• .NET / desktop
  · Unknowninferredstale
• Server-side API
  ● Yesverifiedstale

  RESTful API for real-time scoring.

Compliance & certification

Regulatory coverage and certifications.

• US state-licensed (iGaming/sportsbook)
  ○ Noverifiedstale
• US tribal / on-property
  · Unknowninferredstale
• Canadian provincial
  · Unknowninferredstale
• European (MGA/UKGC)
  ● Yesverifiedstale
• LatAm (Brazil SPA)
  · Unknowninferredstale
• SOC 2 Type II
  · Unknowninferredstale
• ISO 27001
  · Unknowninferredstale
• GLI-certified
  · Unknowninferredstale

Fraud & device intelligence

Device fingerprinting, IP intelligence, behavioral signals, account-takeover detection.

• Device fingerprint
  ● Yesverifiedstale
• IP intelligence DBMaintained DB of VPN / TOR / proxy / hijacked-residential IPs with documented refresh cadence (GeoGuard equivalent).
  ● Yesverifiedstale

  Via Digital Element NetAcuity / Nodify.

• Behavioral signals
  ● Yesverifiedstale

  Behavioural ML on client transaction data.

• Velocity / impossible travel
  ● Yesverifiedstale
• Bot detection
  ◐ Partialinferredstale
• Account takeover
  ● Yesverifiedstale
• Chargeback mgmt
  ● Yesverifiedstale

Ops & integration

How easy the product is to integrate, observe, and operate.

• Self-serve onboarding
  · Unknowninferredstale
• Case management UI
  · Unknowninferredstale
• Webhook delivery
  · Unknowninferredstale
• Real-time API
  ● Yesverifiedstale
• Analytics dashboard
  ● Yesverifiedstale
• Audit log export
  ◐ Partialinferredstale
• Encrypted responseDetection flag names hidden from the end user (GeoComply uses encrypted XML; most challengers expose JSON flag names).
  · Unknowninferredstale
• SDK hardeningSDK is signed, obfuscated, and license-bound — not findable / patchable to inject coordinates client-side.
  · Unknowninferredstale

Commercial

Pricing model and go-to-market shape.

• Usage-based pricing
  ● Yesinferredstale
• Flat license / enterprise
  · Unknowninferredstale
• Free tier / trial
  · Unknowninferredstale
• Publicly listed pricing
  ○ Noverifiedstale
• Bundled with platformGeo is bundled inside a broader platform deal (OpenBet, GeoLocs/Mkodo, Playtech).
  ● Yesverifiedstale

  Bundled into Worldpay payments stack post-acquisition.

Resources

Briefings, source docs, and external links.

🌐Website (1)

• Ravelin marketing siteravelin.com

📰News (2)

• Worldpay to acquire Ravelin (Feb 4, 2025)ravelin.com
• Ravelin x Digital Element NetAcuity partnership (June 18, 2025)ravelin.com

Talking points

1. Worldpay distribution is the threat. Ravelin (+ Digital Element) is now available as a bundled offering inside one of the world's largest PSPs. GeoComply should anticipate Ravelin appearing in Worldpay merchant deals — and the counter-pitch is "GeoComply isn't a Worldpay alternative, GeoComply is the location layer Worldpay's fraud stack doesn't have."
2. Per-client ML doesn't fix IP. Bespoke models trained on IP features are still only as accurate as the IP data ingested. The structural argument is unchanged: IP-only geolocation cannot serve compliance-grade jurisdiction enforcement.
3. Nodify vs GeoGuard: Nodify VPN detection 98.3%, FPR not published. GeoGuard VPN detection 99.1%, FPR 0% (Kingsmead Security Sept 2025). On the streaming-focused independent test the gap is small but the FPR is the headline — 0% FPR is what regulated operators need.

Where they overlap with GeoComply

• E-commerce / payments: shared evaluation funnel via Worldpay distribution.
• Travel / hospitality: payment fraud is the shared touchpoint; GeoComply's regulatory angle is separate.