Incline Village, Nev., identity infrastructure deal, announced September 10.

Socure, the identity verification and fraud vendor that already counts most of the top U.S. banks as customers, has added Binance.US to its client list for onboarding, document and selfie identity verification, watchlist screening and fraud decisioning. The company says it now works with four of the five largest U.S. crypto exchanges, though it doesn’t name which one is missing.

The product itself isn’t a departure for either side. Binance.US will run Socure’s RiskOS platform, which pulls together identity, device, behavioral, phone and email signals into one decisioning layer so the exchange can apply more or less scrutiny depending on the risk profile of a given signup. That’s the same basic playbook Socure has sold to banks for years, repackaged for an exchange that needs to onboard customers quickly without becoming the easiest on-ramp for money laundering.

What’s more interesting than the deal itself is the concentration it points to. When four of the five biggest U.S. crypto exchanges are running fraud and identity decisioning through the same vendor, that’s not really a story about Binance.US choosing a good product, it’s a story about how consolidated the infrastructure underneath “crypto compliance” has become in a fairly short window.

A few years ago, exchanges were mostly building this in-house or cobbling together several point solutions. Now the identity verification layer for most of the industry’s trading volume runs through one company’s risk models, which is either reassuring (one vendor with more fraud signal than anyone else) or a single point of failure, depending on how charitable you’re feeling about concentration risk in financial infrastructure.

Socure’s own numbers back up how central it’s become to this market: over 3,000 customers, the top five U.S. banks, more than 600 fintechs, and now the crypto exchange layer too. That breadth is exactly why banks and regulators increasingly treat Socure less like a vendor and more like infrastructure, which raises the stakes if its models ever get something wrong at scale.

A single bad calibration, a training data gap, an attack pattern its models haven’t seen before, would ripple across a meaningful share of U.S. crypto onboarding and traditional banking at the same time, given how much of both markets sits behind the same decisioning engine.

None of this makes the Binance.US deal itself a big story on its own; it’s a fairly routine vendor selection dressed up with a stat about market share. But market share stats like “four of five” are worth taking seriously precisely because concentration in identity infrastructure doesn’t get less risky just because the vendor doing the concentrating has a good track record so far.

Fintechbits analysis

Why Socure’s Identity Verification Reach Is Now a Chokepoint

Socure’s identity verification stack now touches most of the plumbing an account has to pass through before it can move money, whether that account sits at a bank or a crypto exchange. RiskOS pulls together identity documents, device fingerprints, behavioral signals, phone and email data into a single decisioning layer, and Binance.US is adopting the same version of that stack multiple large banks already run.

More detail on Socure’s identity verification platform is available on its company site, and Fintechbits tracks similar infrastructure deals in its technology innovations coverage. Fintechbits covered a related infrastructure consolidation story today in credit union technology, where Glory and Velera are betting on shared hardware rather than shared identity vendors.

The fifth-largest exchange, whichever one that is, is the one to watch. If it ends up on Socure too, this stops being a strong plurality and starts looking like a de facto industry standard.