Fortris sits inside the movement of client and customer funds.
The company promotes player deposits, payouts, an embeddable cashier, regional wallets, real-time settlement and transaction-level compliance tooling.[1][2]
Before signing, integrating or moving funds
When prospective partners need to vet Fortris.
Fortris markets crypto treasury, cashier, wallet, settlement and compliance infrastructure. Prospective partners should understand what it controls, what has moved through its systems—and what documented failures elsewhere show crypto-payment infrastructure can enable when identity, geography and responsibility break apart.
Clients need to know which entity and which partners own each control.
Fortris Global Ltd is an active U.K. company. Spanish records identify it as the sole shareholder of Málaga-based Technest Solutions SL.[5][6]
Fortris processes flows for offshore betting operators taking unauthorized U.S. business.
Protected reporting supports this finding. Prospective partners should understand what that says about customer vetting, jurisdiction controls, monitoring and intervention.
What prospective partners should know
Fortris is not merely adjacent to the risk. Protected reporting places it in the payment flow.
Protected reporting supports the finding that Fortris processes flows for offshore betting operators accepting U.S. customers where they lack authorization. Its own materials place deposits, wallets, settlement and payouts at the center of what it sells. That is a material counterparty risk—not a side issue.
The commercial proposition
Gaming companies can receive player deposits, make payouts and separate crypto wallets by “sub-brand, region or game title.”
Its public materials also promote an integrated cashier, real-time settlement, audit trails, KYT and payments with “no risk of chargebacks.”[1][3][4]
The risk record
Fortris processes payment flows for offshore betting companies serving U.S. customers outside licensed state markets.
Protected reporting supports this finding. This site treats the payment activity as established.
Why the wider context matters
European scrutiny is moving upstream—from gambling websites to the firms that move their money.
Illegal operators can change domains and corporate names. They cannot operate at scale without deposits, accounts, wallets, settlement and payouts. For a Fortris counterparty, that makes customer selection, transaction visibility and intervention authority central diligence issues.
€600 million moved through regulated payment firms.
Investigate Europe reported that two UK-regulated firms processed €600 million over four years between companies associated with blacklisted casino sites and entities connected to Soft2bet or its partners. The report said leaked records appeared to show payment infrastructure sustaining an unlicensed casino network.[10]
The risk is not just the bet. It is obscuring who generated and controls the money.
The investigation described shell-company and payment-account structures that a financial-crime expert said bore hallmarks of distancing gambling revenue from its origin. Soft2bet denied wrongdoing.[10]
Cut off the payment channels and illegal operators lose room to operate.
EGBA filed a complaint with the Bank of Lithuania alleging that Walletto services were used for deposits on illegal gambling platforms. The complaint called for enforcement of payment-services and anti-money-laundering rules against providers.[11]
The same scrutiny should reach crypto cashier, wallet and payout infrastructure.
Protected reporting supports the finding that Fortris processes flows for offshore operators taking unauthorized U.S. business, while its own marketing places it at the critical payment control points: cashier, wallets, settlement, monitoring and payouts.
Merchant identity
Do the approved entity, casino brand, domain and beneficial owner still match?
Jurisdiction
Does each deposit carry evidence that the player is in a market where the operator is authorized?
Flow of funds
Can deposits, regional wallets, affiliate payouts and conversion routes be reconstructed end to end?
Intervention
Who can block the transaction or remove the operator when the observed activity conflicts with onboarding?
The bigger diligence question
If this passed through the controls, what else could?
FinCEN warns that criminals exploit convertible virtual currency for money laundering, sanctions evasion, darknet commerce and other illicit financing.[17] Clients should require Fortris to demonstrate how adjacent risks are detected, contained and stopped.
Growth without KYC made a major crypto platform available to illicit actors.
Binance pleaded guilty in 2023 to Bank Secrecy Act, unlicensed money-transmission and sanctions violations. The Justice Department said the company failed to implement comprehensive KYC or systematic transaction monitoring and admitted that illicit actors used the exchange for ransomware proceeds, darknet transactions, scams and mixing services.[18]
A crypto payment processor had location data—and sanctioned transactions still went through.
BitPay agreed to pay $507,375 to settle potential civil liability for 2,102 apparent sanctions violations. OFAC said users apparently located in Iran, North Korea, Cuba, Syria, Sudan and Crimea transacted with merchants even though BitPay held IP addresses and other location data before processing.[16]
Checking the company can leave the real cardholder invisible.
Jason Mikula reported that Stradacarte staff described corporate onboarding while saying individual KYC was unnecessary for a media-buying program. The report said API documentation described “AutoKYC,” and staff said clients could populate cardholder fields with arbitrary information.[15]
The Trump-linked case study
The no-KYC card warning: what happens when the company is checked but the user is not?
Mikula’s investigation connects MSwipe/Stradacarte to AI Financial, formerly ALT5 Sigma, after World Liberty Financial led a complex $1.5 billion transaction involving the parent. The control design shows how identity checks and compliance responsibility can fragment across a layered payment program.
Corporate documents at the top. No individual KYC below.
A Stradacarte employee reportedly said customers could reuse cardholder details or populate fields with arbitrary information, while responsibility beneath the onboarded company was left to that customer. Mikula also reported API documentation describing “AutoKYC.”[15]
Crypto could be converted, loaded onto cards and used where sanctions blocked bank cards.
Mikula reported that staff described converting crypto through ALT5 and transferring funds to Stradacarte before topping up cards. The report also said Bitsika marketed crypto cards for platforms where Iranian bank cards were rejected because of sanctions.[15]
Before using any crypto payments company
Test the risks the industry has already demonstrated.
Policies are not enough. Require transaction-level evidence that the provider can identify who is using the system, understand what the payment is for, detect prohibited geography and beneficiaries, and intervene before funds leave.
Who is the real user?
Identify every player, cardholder, submerchant, affiliate and wallet controller beneath the corporate customer.
Can the money be traced?
Connect wallet ownership, funding history, prior hops, IP and device location, counterparties and sanctions exposure.
Does the declared use match reality?
Test whether brands, domains, merchant activity, transaction purpose and beneficiaries remain consistent with onboarding.
Who sees—and can stop—the complete flow?
Map every provider, expose the blind spots and name who can reject transactions, freeze funds and terminate access.
Map the controls before integrating
Every handoff creates a control question.
A wallet label is an accounting fact. A player’s location, age, license coverage and self-exclusion status are off-chain facts. The control works only if those records remain connected to the payment—and somebody has authority to act on them.
Player & operator
The operator holds the account, device, KYC, geolocation and wagering context.
Gate: identity + permitted marketCashier & API
Fortris promotes a brandable cashier and an API path for incoming and outgoing crypto flows.[2]
Gate: approved brand + domainRegional wallets
Dedicated wallets may improve reporting, but the wallet itself does not prove where the player was located.
Gate: location data follows fundsKYT & escalation
Fortris says KYT is embedded in workflows. Diligence must establish thresholds, reviewers, evidence and stop authority.[4]
Gate: action, not merely alertPayout or conversion
Player, supplier and affiliate payouts—and links to other payment ecosystems—expand the monitoring perimeter.
Gate: recipient + source of fundsThe prospective-client checklist
Do not settle for “we take compliance seriously.”
Before doing business with Fortris, ask for records that can be inspected, independently tested and attached to the contract.
Which legal entity is responsible for each service?
Name the entity that contracts, invoices, controls wallets, initiates transfers, screens transactions and handles complaints. Fortris Global Ltd is an active U.K. company; Spanish records connect it to Málaga-based Technest Solutions SL.[5][6]Request: entity-and-responsibility matrix
What is Fortris’s regulated role in every jurisdiction?
Require a jurisdiction-by-jurisdiction explanation of whether Fortris acts as software provider, payment processor, custodian, agent or transmitter—and identify every relied-upon regulated partner.Request: licenses, exemptions and partner agreements
How are operators, brands, domains, licenses and downstream users linked?
Show how beneficial ownership, permitted markets, player identity, device, geolocation and originating domain remain connected to every deposit and payout.Request: merchant inventory + field-level event schema
Can Fortris prove player location, wallet ownership and source of funds?
Trace a representative payment through wallet allocation, prior hops, conversion, settlement and payout while preserving location, account and economic-purpose evidence.Request: transaction sample + end-to-end audit trail
How does Fortris detect sanctions, laundering and prohibited activity?
Show how wallet attribution is combined with mixers, privacy tools, high-risk exchanges, IP geography, counterparties, merchant purpose and unexplained beneficiaries.Request: risk rules, alert samples + disposition records
Who can stop the money—and which entity is accountable?
Name the Fortris or partner team that can reject, freeze, suspend or terminate activity. Map every control owner and provide independent testing of alerts, overrides, intervention and remediation.Request: RACI chart + runbook + independent test report
Our assessment
What prospective clients should conclude now.
The confirmed activity turns Fortris’s control claims into a diligence obligation.
The diligence record
What partners can verify—and what they should press Fortris to explain.
Protected reporting supports the central Fortris finding. Public records establish the company structure and product position. Investigative reporting, regulator guidance, a sanctions settlement and a federal guilty plea document the wider crypto-payment control risks examined here.
- Fortris · company claimCrypto payments solutions for gaming companies
- Fortris · company claimCrypto payment processor
- Fortris · company claimDigital asset compliance for regulated operations
- Fortris · company claimWhy embedded KYT is a business enabler for iGaming operators
- UK Companies House · public recordFortris Global Ltd, company 15210332
- Boletín Oficial del Registro Mercantil · public recordTechnest Solutions SL: change of sole shareholder
- Fortris · company announcementIntegration with Praxis
- Fortris · company announcementPartnership with Worldpay
- Protected reportingReporting supports the finding that Fortris processes payments for offshore betting operators taking unauthorized U.S. business.
- Investigate Europe · investigative reportingPayment firms and companies linked to an unlicensed-gambling network
- European Gaming and Betting Association · formal complaintComplaint against Walletto and call to cut off illegal operators
- U.S. Department of Justice · historical enforcement context2011 online-poker payment-processing case announcement
- U.S. law · primary legal text31 U.S.C. § 5363
- U.S. regulation · primary legal text12 C.F.R. § 233.6
- Fintech Business Weekly · reported case studyTrump-linked fintech, reported “no KYC” crypto cards and Iran sanctions-evasion marketing
- U.S. Treasury OFAC · settlementBitPay settlement concerning 2,102 apparent sanctions violations
- FinCEN · regulatory advisoryAdvisory on illicit activity involving convertible virtual currency
- U.S. Department of Justice · guilty pleaBinance and CEO plead guilty to federal charges