If your license in Curacao asks you to screen every single $100 deposit for sanctions in…

Had a call last week with a Curacao operator who pushed their screening down to $50 and we crunched the numbers over three weeks. Sumsub’s batch came back at 0.49 % fraud, Jumio sat at 0.62 %, but when we layered on Veriff at 18 % false positives the real cost wasn’t the check itself—it was the downstream ticket volume inside the compliance stack that ate the savings.

whoever decided that 6 seconds was the golden standard obviously never tried to onboard a nigeria freelancer at 3am on a wednesday when the api from jakarta decided to take a coffee break and sumsub came back with a ‘temporary glitch’ for 42 minutes straight we launched a pile of micro-jurisdictions back when the main man in curacao used to sell you an approval for a crate of johnnie walker and a decent chinese visa, zero sanctions screening unless you pissed off some us senator and even then it was worth the risk because the mid cost 27 bucks to open and deposits rolled in like beer at happy hour—those were the days, lads but now the new lot never dealt with that headache: their shiny curacao comes wrapped in a ‘full aml realtime’ clause and suddenly they’re crying over fifty-seven cents because the vendor timed out at six seconds while the chargeback guy next door is burning through weekends replying to ‘this was my wife’s card’ emails that should’ve been blocked before they hit the ledger sam you’re not wrong about the veriff nightmare—we had an affiliate network feeding us leads from south america last year and half of their ‘high rollers’ turned out to be housewives with stolen cards, their rolling reserve ballooned and the principal just passed the buck back to us with a ‘better monitoring’ speech so now we run triage between jumio’s 0.62 % fraud yield and the fact that veriff’s batch false-positive rate would shame a chinese call-center classic’s point about downstream ticket volume eats the numbers alive: we pushed our aml down to $45 and saved two grand a week on id checks only to blow it in the compliance stack because the sanctions vendor marked twice as many users ‘possible hit’ as expected, the kycs now queue for seven hours and the delay triggers chargebacks that cost ten times the original ‘saving’ so the real debate isn’t whether fifty-seven cents beats sixty-three, it’s whether your revenue can afford the paralysis when your aml api hiccups or your batch scanner starts flagging grandmas in gdansk at 18 % a pop in short: if your license ties your hands behind your back every hundred bucks, maybe the question isn’t the vendor—it’s why you signed up for the straightjacket in the first place

Jumped straight into that Curacao nightmare a year back—handed over the reins to a mate running a small Lome brokerage license on the side just to keep the lights on. Paid him in MTNs, no questions asked, sanctions check? Pfft, we had a guy in Lagos scanning names off a wall calendar and nodding yes or no. Deposits poured in at $27 MID, 90 % of them straight from crypto bourses you never heard of. Chargebacks? You laugh—maybe two a month and those were the gambler’s own fault. Fast forward to now—the new “compliant” Curacao crowd came knocking, flashing spreadsheets with real-time sanctions hits tied to every $100 bundle. My guy there rolls his eyes: “lads, I’ve got three terminals running sumsub every six seconds and the ledger still pings ‘possible hit’ on account 1234 because the api confused ‘Sanctions’ with ‘Sanctionsville’ in Delaware.” Chargeback team now stuck between sixty-cent vendor fees and thirty-grand chargebacks because Veriff’s batch spat out eighteen grandmas from Gdansk—turns out someone sold their Stripe card details on Telegram for twenty quid. The sixty-three cent mark? Chump change when your sanctions engine times out for four hours and your chargeback manager is Skyping her cousin in Poland at 3am explaining why a seventy-year-old widow’s €500 Visa gift card was declined.

So the Curacao boys finally woke up to a problem of their own making—twenty-seven-dollar MID jackpots from crypto bourses, zero sanctions screen, and half the floor in Lagos nodding at names on a calendar. Congratulations, gentlemen, you’ve just swapped one headache for a migraine that clocks in at fifty-seven cents and six seconds only to freeze your ledger when Sanctionsville, Delaware gets tagged as a sanctioned alias. Sam’s right: eighteen percent Veriff batch false positives isn’t noise—it’s a compliance black hole sucking in every grandma in Gdansk and half the affiliates in São Paulo pretending to be “high rollers.” But Classic, your downstream ticket math still hides the real cost—lost FTDs when the sanctions API hiccups for forty-two minutes because Jakarta forgot to renew a TLS cert, and chargebacks at ten times the ID check price. ROILab, you’re spot on: the killer isn’t the sixty-cent vendor—it’s the Curacao clause that forces sixty-cent decisions every hundred bucks while your rolling reserve balloons with thirty-grand chargebacks because Veriff’s batch couldn’t tell a Nigerian freelancer from a seventy-year-old widow’s Visa gift card. Question for the room: who else got burned when the shiny new “realtime” license made them pay in both time and money while the old boys laughed from the sidelines with their twenty-seven-dollar MID and zero sanctions? Got receipts?

Bangkok to Lagos route last month—the sanctions scan hiccupped for exactly 38 minutes and our chargebacks spiked 4.2 % overnight because Veriff’s batch couldn’t tell a Lagos freelancer from a Bangkok expat’s stolen Revolut card. Sumsub’s real-time API tagged Sanctionsville, Delaware once every 6.7 million checks—so I rerouted the ticket stream to Jumio at $0.63 and lost 11 % of FTDs while we waited for the re-screen; every missed signup cost the NGR enough to fund a small brokerage for a week.

Man alive, Sam’s right about the Veriff hell—18 % batch false positives at $0.57 still sounds like a joke compared to the downstream ticket avalanche that comes after, but the real kicker is the Curacao real-time sanctions clause turning every $100 into a compliance ticking bomb. We onboard in São Tomé under that same clause and last month alone our sanctions queue backed up for 53 minutes because the Jakarta API confused ‘Sanctions’ with ‘Sanctionsville, Delaware’ just like ROILab said—meanwhile our chargeback guy is drowning in grandmas from Gdańsk with ‘this was my daughter’s card’ emails while the affiliates scream about FTDs. What’s the point of shaving two cents off the vendor fee when the license turns every hiccup into a rolling reserve black hole?

classic’s numbers are pretty, but when your sanctions queue runs longer than a lisbon ferry crossing because jakarta’s tls cert died at 3am and veriff’s batch just kept spewing gdansk grandmas onto the compliance floor, sixty-three cents feels like a parking ticket compared to the thirty-grand chargeback that lands the same morning ah well, we'll see

Can’t let that Jakarta TLS meltdown piece slide—did you actually reroute every ticket to Jumio and still land a 11 % FTD loss while you waited for the re-screen? Because we did the opposite: left the stream on Sumsub even with its six-second lag, fed the API straight into our sanctions triage queue, and watched the Jakarta outage become a rounding error while the Veriff batch false positives stayed stubbornly north of 17 % regardless. Your chargeback spike hit 4.2 %—ours never broke 0.8 % that week because the only grandmas we saw were real customers holding liveness checks. Six-second latency is a vendor spec; a 38-minute outage is a licence clause written by someone who last upgraded a firewall in 2011. So ask yourself: is the licence doing you any favours, or just charging you fifty-seven cents every time it chokes on Delaware place names?

That 2023 Curacao clause didn’t just drop a compliance rock on the floor—it rolled straight through the payments stack like a bowling ball with the pins still standing. The banality of evil here is the false-positive feeding frenzy: in practice, every ID provider’s batch mode becomes a compliance sieve when the license demands real-time sanctions for every $100 deposit. I’ve watched Sumsub’s API flag a Bangkok crypto exchange’s legit payout queue because “Sanctionsville, Delaware” matched a partial match in a bank name; the ticket then spent 23 minutes in manual review while our chargeback ratio on that corridor doubled—zero correlation to actual risk, pure string-matching noise. The license treats your ledger like a courtroom exhibit, yet no vendor can write a regex that distinguishes between a sanctioned street and a bank branch in Delaware. That’s the hidden tax nobody runs in the unit economics: the compliance queue grows faster than the GGR you’re trying to protect, and fifty-seven cents looks cheap until the Jakarta firewall goes AWOL and your rolling reserve doubles overnight because the sanctions triage queue froze for twenty-two minutes.

So is it really about the sixty cents or is it about the Curacao clause turning every API lag into a rolling reserve nightmare that swallows your NGR whole? Jakarta firewalls, Sanctionsville typos in bank names, Veriff’s grandmas—somebody’s backend can’t keep up with somebody else’s spreadsheet magic, and suddenly your thirty-grand chargeback gets logged under "miscellaneous"? At this point, isn’t the license just an invisible compliance tax that hits faster than our chargeback guys can type? How many more Jakarta-style outages before we start calling the real-time clause what it is—a gift to the vendors who laugh last when our GGR drowns in fifty-seven-cent decisions?

You ever notice how Jakarta outages become "vendor API problems" while the rolling reserve doubling overnight suddenly becomes "our cost of doing business in Curacao"? I ran the numbers for a corridor that moved 1,200 $100 deposits an hour—those fifty-seven-cent tickets piled up to eight grand a day in triage wages alone, plus the chargeback spike that arrived ten days later because grandmas in Gdańsk don’t wait around for a sanctions queue that moved slower than their tea. You can leave Sumsub’s six-second lag running and still out-earn the false positives if you’re not paying fifty-seven cents every time your API hiccups on "Sanctionsville, Delaware." But believe it when they pay out: half the operators running Jakarta firewalls upgraded them last in 2019.

Can’t fault the white-label we’ve got for the past two years—Sumsub’s lag? yeah, 4-6 seconds flat, not some Jakarta-style nap time 🙌 but even then, every $100 deposit pinging the sanctions API feels like watching a printer jam while the house bets pile in 😅 tbf, we’ve never had a “rolling reserve overnight” scream because the firewall threw a chair. The real tax isn’t the cents, it’s the person whose coffee gets cold while they babysit the same Bangkok exchange payout instructions for the third straight Friday afternoon.