Fortris says its gaming platform supports compliant crypto deposits and payouts. An earlier Crypto Payments News report, based on a source’s account, alleged that Fortris processed payment flows for offshore betting businesses accepting customers in U.S. jurisdictions where the operators lacked local authorization. That account concerns the customer, jurisdiction and transaction risks that Fortris presents its compliance stack as able to control.
On its gaming page, Fortris markets direct player deposits, payouts to players and affiliates, dedicated wallets and cashier integrations. Its digital-asset compliance page describes risk scoring, Know Your Transaction screening and automated monitoring, while its payments product promises traceable business payment flows. The Foxpay case shows what supervisors may ask when those claims are tested against real customer files and live transactions.
The Foxpay chronology is two separate tracks
Lithuania’s Special Investigation Service says the Foxpay-related pre-trial investigation began on June 17, 2024. On October 16 it announced that prosecutors had taken over and combined the case with another investigation, with suspicions communicated to seven people. The suspected offences remained criminal-investigation allegations rather than convictions.
The Bank of Lithuania acted on a separate supervisory track. Its board adopted the decision to revoke UAB Foxpay’s payment-institution licence on November 22, 2024, and the regulator announced it on November 25. The final supervisory findings covered governance, internal controls, anti-money-laundering duties, safeguarding of customer funds, capital and reporting.
What the supervisor found about AML
The Bank of Lithuania said Foxpay’s money-laundering and terrorist-financing risk assessment was inadequate and that the institution had failed to identify its full risk exposure. It found failures in identifying customers and beneficial owners, understanding the purpose and intended nature of relationships, applying enhanced due diligence to high-risk customers, establishing source of funds and reviewing unusual activity. It also found that internal procedures did not ensure timely and appropriate responses to monitoring alerts.
Governance amplified those weaknesses. The regulator said the head of Foxpay’s compliance function also served as its AML officer, even though those functions were supposed to be independent. The decision turns “full compliance” from a product slogan into an evidence question: who owns customer acceptance, who can challenge revenue teams, and who can stop a gaming flow when licensing territory, player location or source of funds cannot be reconciled?
The Fortris control test starts before the first deposit
A credible gaming-control file should identify the contracting entity, every operating brand and domain, ultimate beneficial owners, key executives, affiliates, authorised gambling products and each jurisdiction in which customers may be accepted. Fortris should be able to show how that information is mapped to wallet labels, cashier credentials, payment APIs and payout beneficiaries. A generic licence document cannot answer whether a specific brand is taking a specific player in a permitted market.
Enhanced diligence matters when ownership is opaque, activity crosses borders, affiliates receive funds, or a customer’s volumes and geographies diverge from its onboarding profile. Fortris’s compliance proposition therefore requires more than screening a wallet address. It requires an operating model that joins corporate identity, gambling authorisation, player geography, payment purpose and blockchain behavior in one reviewable case. Reviews should restart when ownership, domains, licences, territories or settlement beneficiaries change.
Monitoring must produce decisions
Fortris should disclose which events trigger a review or suspension: U.S.-linked deposits into a wallet assigned to another region; new brands or domains; rapid movement to exchanges or mixers; payouts to previously unseen affiliates; sanctions or adverse-media hits; repeated withdrawal complaints; and transaction patterns inconsistent with the licensed product. The meaningful metric is not the number of alerts generated but how many were investigated, escalated, restricted or closed with documented reasons.
Those decisions should also be tested over time. A gaming customer approved on one ownership structure or territorial plan may later add white-label brands, affiliates, new assets or payment routes. Periodic review should compare the current business with the approved profile and force fresh evidence when volumes, counterparties or markets change. Senior management should receive exception reporting that identifies unresolved alerts and aged investigations rather than a simple compliance completion rate.
The Foxpay benchmark is demanding because its supervisory record connected weak identification, weak enhanced diligence and weak alert handling to a final loss of licence. Fortris has chosen to compete on gaming compliance and auditability. To sustain that claim after the offshore-betting report, it should permit independent testing of a representative set of gaming files and show that customer identity, beneficial ownership, source of funds, territorial permission and transaction monitoring converge before deposits and payouts remain enabled.