Socure's $156M Raise Signals an Enterprise Fraud Fight—But SMBs Are the Real Untapped Market

I stumbled on this Crunchbase piece from Judy Rider about Socure's latest $156 million raise, and it's a solid rundown of where enterprise identity verification is heading. Socure's now valued at $5.2 billion, they bought an agentic AI startup called Fravity to automate fraud investigations, and they're claiming $364 million in ARR with 63% year-over-year growth. If you're a seed investor looking at fintech infrastructure, those numbers demand attention.

But here's what struck me: the entire narrative is about big banks, big fintechs, and government contracts. 19 of the top 20 U.S. banks. 600 fintech companies. 160 public-sector organizations. Socure is winning the enterprise game. Meanwhile, the small and medium business market—the actual engine of the American economy—is still wrestling with fraud and verification problems that nobody's really solved at scale.

That's the gap I want to dig into, because PainSignal's data shows it clearly.

Rider notes that Socure saw an 8,000% increase in AI-driven fraud across its network last year. That's a staggering number, even if it's self-reported and probably inflated by a low base. Our data reinforces the trend, though: we track 50 distinct problems in Fraud Prevention, with an average severity of 4.2 out of 5. The pain is real and widespread. Problems like AP teams unable to detect vendor email compromise fraud because standard email authentication fails—that's a severity 4/5 issue we track as Vendor TrustGuard. And ops teams spending excessive time manually verifying incoming bank transfers—also severity 4/5, captured in TransferValidate Pro.

These aren't Fortune 500 problems. They're mid-market problems. A 50-person construction company doesn't use Socure. A regional distributor doesn't have a fraud team running RiskOS_Agents. They're doing manual reviews, trusting their gut, and losing money to scammers every week.

What Socure's doing with Fravity makes sense for the enterprise. Automating watchlist screening and know-your-business checks with AI agents is a natural extension of their core identity verification. Liminal pegs the financial crime investigation market at $71.1 billion, and banks spend at least an hour reviewing each alert—53% of them, according to Rider's piece. That's a massive time suck and a massive market. Fravity claims to cut cost per case by 80% and speed up resolution fivefold. Those are the kinds of numbers that get CFOs to sign.

But the SMB piece is completely missing from this conversation, and it's arguably more interesting for a seed investor. Look at our Financial Services category: 43 problems, 37 app ideas, many of them centered on manual underwriting and hidden credit scores. One problem we track is a small business owner rejected for an SBA 7(a) loan because of a hidden credit score like FICO SBSS—severity 4/5. Another is a small business owner who needs a legitimate business lender that underwrites based on manual review of bank statements—also severity 4/5.

These are verification problems. They're trust problems. A lender can't verify the true cash flow of a small business because the credit scoring system doesn't capture it. A vendor can't verify that an email came from their actual supplier because DMARC and SPF fail. The technology Socure built for Bank of America and Chase could theoretically solve these problems, but the go-to-market is completely different. Small businesses won't pay $100,000 a year for an enterprise platform. They need something simpler, cheaper, and embedded in the tools they already use.

That's the opportunity I'd be hunting for if I were deploying capital in fraud prevention right now. The enterprise layer is consolidating fast—Socure, Sift, Alloy, and a few others are locking up the big logos. But the long tail of SMB fraud and verification pain is still wide open. Our data shows multiple fraud-related problems with opportunity scores above 60, meaning strong market demand and relatively low competition.

Rider's article is right that AI creates both an opportunity and a problem for Socure. Ayers, the CEO, says there are two types of companies that matter: AI-native ones and those that fight the consequences of AI acceleration. He's positioning Socure as both. The $5.2 billion valuation and the Fravity acquisition suggest investors are buying that thesis.

But I'd argue there's a third type of company that matters: the one that brings enterprise-grade verification down to the SMB and mid-market segment. The one that makes fraud prevention accessible to a plumbing company in Ohio or a boutique manufacturer in Texas. Socure isn't building that. They're busy chasing the federal contract and the top 20 banks. And that's fine—that's a great business. But it leaves a huge gaping hole in the market.

Let me be clear: I'm not knocking Socure. Their growth is real, their customer list is impressive, and the Fravity acquisition is smart. Automating the manual investigation work is exactly what banks need because the alert volume is crushing them. But the seed investor in me looks at the 50 problems we track in Fraud Prevention and wonders who's going to solve the other 48 for the non-enterprise market.

Maybe it's already happening. Agency devs and indie hackers are starting to build tools for this segment, and our data shows a clear pattern: severity 4/5 problems with manual processes at the core. The playbook is there. Take a specific vertical—construction, healthcare, professional services—and build a verification layer that speaks their language. Not a platform play. Not a horizontal AI agent. A focused, vertical-specific tool that solves one painful problem really well.

Socure raised $156 million to automate fraud investigations for the world's biggest financial institutions. That's a good trade. The better trade, at least from where I'm sitting, is building the same intelligence for everyone else. The SMB market is bigger, messier, and hungrier. And Socure isn't coming for it anytime soon.

That's the signal in the noise.