Counterparty checks

Don’t get burned by who you pay.

Before money goes to a new vendor, customer or partner, Pyxmark tells you in seconds whether they’re on a sanctions list, whether they’re the company they claim to be, and whether their domain appeared last month. Then it gives you a dated report, so you have proof that you checked.

ForSmall finance, ops and compliance teams without a KYB budget, and the AI agents that now pay on their behalf
PriceSingle checks are free. Ongoing monitoring will be a paid plan.
StartJoin the waitlist. Early access works on the web, by API, and inside ChatGPT, Claude or Cursor.

Join the waitlist See a sample report

What’s at stake

$3.05 billion

lost to business email compromise in 2025, as reported to the FBI. That was the second-largest loss category.FBI IC3 2025 Internet Crime Report

45%

of organizations were targeted by vendor-impostor fraud in 2024, up from 34% the year before.AFP 2025 Payments Fraud and Control Survey

$377,700

per violation, or twice the transaction value if higher: the maximum US civil penalty for dealing with a sanctioned party. You don’t have to know you did it to be fined.31 CFR 501, App. A

The moments it matters

Most problems start with one payment, one signature or one shipment that nobody looked at closely.

A new supplier sends an invoice and their bank details.

Without a check: the “supplier” is a lookalike set up to catch your payment. The domain is three weeks old with no email security records, and the money is gone before anyone notices.

With Pyxmark: domain age, missing SPF and DMARC records, and the absence of a matching company record all show up in the report before you pay.

You’re onboarding a customer, signing a partner or shipping overseas.

Without a check: they, or the company behind them, are on a US, UN, EU or UK sanctions list. US sanctions liability is strict, so not knowing doesn’t make you safe.

With Pyxmark: one search screens the name against every major list. Potential matches come back with the official entry linked, so you can confirm or clear them.

Your AI agent is about to pay someone.

Without a check: agents now complete real purchases on people’s behalf (Visa, July 2026). An agent will happily pay whoever looks right on the page.

With Pyxmark: give the agent a tool it calls before it pays. The agent gets a plain verdict and your logs keep the record.

A bank, auditor or buyer asks how you vet counterparties.

Without a check: “we Googled them” is all you can say. In sanctions cases, regulators weigh whether a screening process existed.

With Pyxmark: every check is a timestamped report that cites its sources, so you can file it, export it and show it.

Why not the alternatives?

Option	Enterprise KYB platforms	Searching by hand	Doing nothing	Pyxmark
Getting started	Demo call and a contract	Free, but slow	—	Free, self-serve
Time per check	Fast once set up	Many tabs, one list at a time	—	Seconds, every list at once
Inside your AI assistant	Rarely	No	—	Yes, over MCP
Record that you checked	Yes	Screenshots, if anyone remembers	None	Dated report with sources
Built for	Banks and large fintechs	—	—	Teams that check now and then, and agents

What you get back

Real output, shortened. It’s the same report on the web, over the API or in a chat.

PYXMARK · COUNTERPARTY REPORT

Subject: Rosneft
Generated: 2026-10-12 07:38 UTC
Result: 1 item to review

Findings
Check	Finding	Source
Sanctions	Potential match: “ROSNEFT”, entity alias. Programs UKRAINE-EO13662 and RUSSIA-EO14024. Also listed by the UK. Related EU entry: JSC Rosneftflot.	OFAC SDN #17022 UK RUS3064 EU 181059
Match score	1.000 (threshold 0.880)	Jaro-Winkler, normalised
SEC record	No SEC registrant found for “Rosneft”.	SEC EDGAR
Domain	Not supplied.	—

Join the waitlist

Early access is opening in small batches. Tell us what you’d check and we’ll start you with that. Single checks stay free, and monitoring pricing will be announced before anything is charged.

Free: single sanctions check, company profile, domain check, the full report.
Paid, later: watchlists with email alerts, bulk checks, history and export, higher limits and API.

How it works and what it covers

Sanctions lists are downloaded from each publisher and re-synced daily. The latest sync was 2026-10-12 06:49 UTC. The counts below are live from our status page.

Source	Publisher	Records	Last synced
SDN list	US Treasury, OFAC	39,598	2026-10-12 06:51 UTC
Consolidated (non-SDN) lists	US Treasury, OFAC	1,591	2026-10-12 06:51 UTC
Security Council Consolidated List	United Nations	3,776	2026-10-12 06:55 UTC
Financial Sanctions, consolidated	European Union	30,759	2026-10-12 06:49 UTC
UK Sanctions List	UK FCDO	58,490	2026-10-12 06:49 UTC
EDGAR companies and filings	US SEC	8,028	2026-10-12 06:48 UTC
Domain registration and email records	Registries, via RDAP and DNS	live	at query time
SAM.gov federal exclusions	US GSA	—	not yet connected

Method

Names are normalised: case, accents, punctuation and legal suffixes such as Inc and LLC are removed. They're then compared with every name and alias on each list using Jaro-Winkler similarity. Anything scoring 0.88 or higher is reported along with its score. SEC filings add identity, financials and flagged 8-K events. Domain data comes from RDAP and DNS.

Limits

A potential match is a lead to verify, not a finding of fact.
Name screening can’t see hidden ownership. A front company that isn’t listed itself won’t match.
The SEC only covers companies that file with it, and most private firms don’t. State registries are linked, not searched.
Lists sync daily, so a designation made today may not show until the next sync.
Not legal advice, and not a substitute for a compliance program.

Use it where you work

Pyxmark runs as an MCP server, so you can ask your assistant “is this supplier legit?” and get the report back in the chat. Early-access keys are sent to people on the waitlist.

https://mcp.pyxmark.com/mcp

Claude: Settings → Connectors → Add custom connector. Cursor: add it under mcpServers. A ChatGPT app is planned.