Maskbreak vs Kount (Equifax)
Kount’s fraud detection is now sold as Equifax’s Kount 360: payment scoring, account protection and chargeback tools on one platform, backed by a large merchant network. Maskbreak answers one narrower question at signup, login or the checkout form: is this visitor hiding behind a VPN, a proxy, a bot or a fake browser? If you need order scoring and dispute tooling, Kount is the better fit. If you need that visit-level verdict with the reasons spelled out, on a Free plan and without a sales call, start with Maskbreak.
Kount is a payments-and-identity platform. Maskbreak is a visit check.
Picture a stolen card being tried at your checkout. Kount’s Payments Fraud product judges the payment. It takes the device ID, IP address and location of each card-not-present transaction, scores them against what Equifax calls “a global network of billions of data points” and returns an Omniscore, which Equifax’s 2026 product sheet calls a “Transaction Safety Rating” from 0.1 to 99.9. Your policies then accept, block or challenge the order. If a chargeback lands weeks later, Kount’s dispute tools help you head it off or contest it.
Maskbreak looks at the visit that carried the card. When the browser submits your form, your server makes one call to POST /v1/evaluate and gets back allow, review or block, a 0–100 risk score and the reasons: VPN, proxy, Tor, cloud server, automation, emulator or a fake browser. It never sees the card, the amount or the basket, so it cannot score an order and does nothing about chargebacks.
So the real question is where your losses start. If they start at the payment, Kount is built for that and Maskbreak is not. If they start earlier, at fake sign-ups, credential stuffing, promo abuse or scripted card tests hitting a form, Kount now covers that ground too. Account Protection scores sign-ups, logins and account changes, and on 23 September 2026 Equifax launched Signal Score for Device and Signal Score for Email, two APIs aimed at VPNs, emulators, script-driven account farming and location spoofing at sign-up and checkout. On that ground the difference is packaging and price: one explained verdict per visit, with a Free plan and published prices from €29 a month, against quote-only pricing through Equifax’s sales team.
Maskbreak vs Kount, side by side
| Feature | Maskbreak | Kount (Equifax) |
|---|---|---|
| What gets scored | The visit: signup, login or checkout form | Transactions; sign-up, login and account-change events; since 23 September 2026 also device sessions and email addresses (Signal Scores) |
| What comes back | decision (allow, review, block), a 0–100 risk_score and reason codes |
Omniscore 0.1–99.9 run through your accept, block or challenge policies; the device API returns three 0–100 scores, flags and reason codes |
| Response Latency | Measured on /status; each answer reports its own evaluated_in_ms |
No published figure (Equifax says “within milliseconds”) |
| VPN, proxy and Tor | VPN, proxy and Tor as separate reasons on a live visit, plus cloud server and Apple’s iCloud Private Relay (network.privacy_relay); the VPN or proxy service named when known |
isProxy covers proxy servers and commercial VPNs together (with proxy piercing); separate flags for Tor relays, hosting facilities and iCloud Private Relay |
| Residential proxies | Checked on a live visit, reported as proxy_detected |
Equifax’s Signal Score page says it pierces them; like Maskbreak, no separate residential-proxy field |
| Antidetect (fake) browsers | antidetect_browser reason, block by default |
Not named in public docs; a device-integrity flag covers emulation and virtual environments, and Equifax markets detection of “manipulated devices” |
| Bots, headless browsers, AI agents | automation_detected, emulator_detected; the AI model is not identified |
Human vs machine (“automated script, emulation framework, or headless bot”); no AI-agent signal in public docs |
| Multi-accounting | multi_account_device when you send an accountId; linking stays inside your own account |
Marketed for the Signal Scores (“spot multi-accounting schemes or promo abuse”); cross-merchant linking in the Omniscore |
| Email and phone signals | Disposable-domain check only (disposable_email) |
Signal Score for Email (domain risk, history, identity footprint), email and phone trust checks |
| Friction for real users | None added: passive browser check, no CAPTCHA | Passive collection; email or SMS step-up on Challenge; optional document and biometric checks |
| SDKs | Browser script (web only); server SDKs for Node, Python, PHP; plain HTTP from any language | Web SDK, native iOS and Android, React Native, Flutter; Xamarin through the web SDK |
| Order and payment scoring | No: never sees order data | Omniscore, policies you create, edit and test, case management for manual review |
| Chargeback tools | None | Ethoca and Verifi alerts, Verifi Order Insight, Visa CE 3.0 and RDR, representment |
| Chargeback guarantee | No | No: sold as the “Chargeback Guarantee Alternative” |
| Cross-merchant identity network | No: device linking stays inside your own account | Yes: 20,000+ brands, per Equifax’s 2026 sheet |
| Identity proofing (documents, biometrics) | No | Yes, since September 2025, with deepfake detection through Incode |
| Free plan | 10,000 visitor checks a month, no card | None documented |
| Published pricing | Free: 10,000 visitor checks a month; paid plans from €29/month | Quote only; Shopify app “Free to install. Additional charges may apply.” |
What is Kount? Kount’s fraud detection in 2026
Kount began as an independent fraud detection company in Boise, Idaho, and stayed one until Equifax agreed to buy it for $640 million in January 2021 and closed the deal on 11 February 2021, when its network counted “more than 9,000 leading brands and payment providers”. In March 2023 Equifax relaunched the product as Kount 360, one platform on the Equifax Cloud. In February 2026 the brand itself moved to Equifax: kount.com and kount.com/pricing now redirect to equifax.com (we checked on 24 September 2026). The product did not move. The app still runs at app.kount.com, and the API, developer docs and support site keep their kount.com addresses.
Inside Kount 360, these are the parts that matter for this comparison:
- An Omniscore from 0.1 to 99.9 on each card-not-present transaction, built from supervised and unsupervised machine learning with cross-merchant linking
- Policies you create, edit and test, plus case management for manual review (2026 product sheet)
- New-account, login and account-change events, the last added in October 2025 against takeover; Kount also lists “stop card testing at the zero dollar authorization stage”
- Allow, Block or Challenge, with an SMS or email one-time code on Challenge (integration guide)
- Launched 23 September 2026 as standalone APIs for sign-up and checkout; the device API runs on Kount’s Device Data Collector with keys from Kount 360
- The email API returns domain risk, trustworthiness, when the address was first seen and how often, and an identity footprint (reference)
- Ethoca and Verifi alerts, Verifi Order Insight, Visa Compelling Evidence 3.0 and Rapid Dispute Resolution behind one API (Equifax); Recovery picks winnable disputes and builds the evidence
- Inside Kount 360 the module is called Chargeback Management. Midigator users (bought by Equifax in 2022) and legacy DCM customers are being moved there
- Identity and document verification, facial biometrics and deepfake detection through a partnership with Incode, plus step-up authentication, launched on 2 September 2025
- Authorized Payment Protection against authorized push payment scams, for banks, fintechs and payment platforms
- AML Compliance Solutions (watchlists, transaction monitoring, batch screening) inside the same platform
If you already run Kount, 2026 brings migration work whatever you decide. The legacy Kount Command product is being sunset, with no public end date, and Shopify, WooCommerce, BigCommerce and Adobe Commerce integrations have to be pointed at Kount 360. In May 2026 Kount 360 also moved to a new sign-in and a new token endpoint on login.equifax.com, with a recommended limit of 20 token requests a minute, and existing API integrations must switch by 15 February 2027. That is a natural moment to check which parts of the platform you actually use.
- It scores the payment itself, with a policy engine and a manual-review queue around the score
- A cross-merchant network: the 2026 sheet claims 20,000+ brands, 70+ payment processors and card networks and 60 billion interactions a year (Equifax’s figures)
- Chargeback prevention and recovery in the same platform as the scoring
- Coverage from sign-up to dispute: Account Protection, Identity Proofing and now the Signal Scores
- Signals Maskbreak does not have: email history and identity footprint, phone trust
- Native mobile SDKs next to the web SDK, and a self-serve Kount app on Shopify
- No published pricing, and no free tier or trial documented; the new Signal Scores are sold through sales too
- Public docs do not name fake (antidetect) browsers such as Multilogin, GoLogin or AdsPower; the device-integrity flag and the “manipulated devices” claim are the nearest thing
- In the device API, one
isProxyflag covers both proxy servers and commercial VPNs, so a VPN user and a proxy look the same in that field - No published response-time figure, and we found no public status page
- Existing customers carry migration work: Command being sunset, Midigator and DCM users moving, a new token endpoint by February 2027
Kount pricing in 2026
Free plan: 10,000 visitor checks a month, every signal included, no card. Paid plans from €29 a month (Starter, 50,000 checks) to €299 a month (Scale, 1,000,000); Enterprise from €990 a month. Prices exclude VAT.
No published pricing and no documented free tier or trial; the product pages offer “Request a Demo”. The Kount app on Shopify says “Free to install. Additional charges may apply.”
Search for Kount pricing and you land at Equifax: kount.com/pricing redirects to Equifax’s identity and fraud page, which lists no prices. The pages for Payments Fraud, Chargeback Prevention, Chargeback Recovery and Authorized Payment Protection offer “Request a Demo” or “Speak with a Representative”, and the new Signal Score page and the Identity Proofing page say “Connect with our sales team”. Kount’s own support material describes usage-based invoices, with fees and usage on separate lines, but no rates are public.
The one self-serve route is Shopify. The Kount app there, listed by “Kount, an Equifax Company”, says “Free to install. Additional charges may apply.” and gives no figures; signup runs through a Shopify payment approval. Equifax pitched a self-serve Shopify route for small merchants as Kount Essentials in May 2023; today’s listing is simply called “Kount”, and the Essentials name no longer appears on it. For contrast, two e-commerce competitors do publish numbers (checked September 2026): ClearSale’s Growth plans with a chargeback guarantee start at $250 a month, and Wyllo (formerly NoFraud) lists guarantee plans on Shopify from 1% of revenue with a $250 monthly minimum, for merchants under $50K a month.
On a Kount demo call, ask how screening is billed (per transaction screened or per approved order), whether Account Protection, the Signal Scores, the chargeback tools and Identity Proofing are priced apart from Payments Fraud, whether there is a monthly minimum, and, if you already run Kount, what the move off Command and onto the new token endpoint means for your integration.
Maskbreak’s prices are on /pricing: a Free plan with 10,000 visitor checks a month, then Starter at €29, Growth at €99 and Scale at €299 a month (excluding VAT), with your usage visible at GET /v1/usage. For approved public-interest organisations, the cap comes off.
Kount competitors and alternatives
The first thing to settle is who carries the chargeback. Kount’s answer is you: it pitches itself as the “Chargeback Guarantee Alternative” and says it stops chargebacks “at 1/3 the cost” of a guarantee (Kount’s claim). Some of its best-known competitors will carry that risk for you; the others are compared with Kount on decisioning and signals. Everything below was checked in September 2026.
- Signifyd (private, San Jose). Offers “a configurable financial guarantee against chargebacks, ranging from fraud-only protection to a total chargeback liability shift”, and charges a percentage of the order total when it approves an order, nothing on declines; the rate is quoted per merchant. Signifyd alternatives
- Riskified (NYSE: RSKD). Prices its Chargeback Guarantee as a risk-adjusted percentage of the order value it approves, set per merchant; products without a guarantee are “typically charged a fixed fee per transaction” (FY2025 annual report). Its product list also includes Account Secure and Dispute Resolve.
- ClearSale (part of Experian since 1 April 2025). Tiers run from AI-only screening to full human review, and the published Growth plans include a chargeback guarantee on approved orders from $250 a month, paid per approved order.
- Forter (private, New York). The guarantee is optional: Forter offers covered and uncovered agreements and lets customers switch between them over time. No published pricing. Maskbreak vs Forter
- Accertify (owned by Accel-KKR since May 2024, bought from American Express). The closest in shape to Kount: risk decisioning, chargeback management, account protection, abuse prevention and a payment gateway (Accertify). As with Kount, we found no chargeback guarantee on its pages, and its 2026 platform guide argues against liability-shift models.
- Sift. Commonly compared with Kount on scoring rather than liability; what it documents and how it sells are on Maskbreak vs Sift.
- SEON. Looks up the online and social accounts registered to an email address or phone number. Kount documents email and phone trust checks, but not social-account lookups. Maskbreak vs SEON
- Maskbreak. Not a like-for-like replacement and no chargeback guarantee: a verdict on the live visit (VPN, proxy, Tor, bots, fake browsers) that you can run in front of any of these, with a Free plan of 10,000 visitor checks a month.
Kount vs Signifyd, in one line: Signifyd can cover the chargebacks on orders it approves, on its terms, and bills a share of approved order value; with Kount you keep the decision and the chargeback, and buy the tools to fight it. ClearSale vs Kount is the same split, with human reviewers and a published starting price on ClearSale’s side. Accertify vs Kount is the closest match of all: two decisioning and dispute platforms, and we found a chargeback guarantee on neither one’s pages. For a longer list with when to pick each one, see our Kount alternatives guide.
Signal Score for Device vs a Maskbreak visit check
Kount has long collected device and network data through its Device Data Collector. Signal Score for Device sells that session check as a standalone API, which makes it the part of Kount closest to a Maskbreak visit check. Its product page promises to “pierce advanced VPNs, residential proxies, and network anonymizers” and to “separate human traffic from automated bots” at sign-up and checkout. This is what each API documents.
isProxy(“proxy server, commercial VPN, or explicit internet relay point”),isHostingFacility,isTorRelayandisAppleRelayfor iCloud Private RelayinteractionSourceHUMAN or MACHINE, anddeviceIntegrityREAL or FAKE for emulation and virtual environmentsriskScore,cnpFraudScoreandlegitimacyScoreon 0–100, with reason codes (reference guide)- Keys from Kount 360; pricing through Equifax’s sales team
decision:allow,revieworblockunder a default policy; rules you set on the console can change it, andengine_decisionthen keeps the default answerreasonssuch asvpn_detected,proxy_detected,tor_exit_node,antidetect_browser,automation_detectednetwork.service: the VPN or proxy operator’s name, when known, andnetwork.privacy_relayfor Apple’s iCloud Private Relay- A
deviceblock withantidetect,automation,emulatorand avisitor_id, when the browser check completed; on every plan, the Free plan included
The practical difference shows up in an everyday case: a real customer on a consumer VPN. Kount’s isProxy covers commercial VPNs and proxy servers alike. Maskbreak keeps them apart, so a VPN on its own is flagged for review while a proxy blocks, except Apple’s iCloud Private Relay, which is reviewed too:
Example response, selected fields: a shopper on a consumer VPN, nothing else flagged.
{
"decision": "review",
"risk_score": 35,
"reasons": ["vpn_detected"],
"network": {
"vpn": true,
"proxy": false,
"datacenter": false,
"tor": false,
"residential": true,
"service": "<operator name when known>"
}
}
Where Kount is ahead on the session: its scores draw on a cross-merchant network, and native mobile SDKs cover app traffic. Both give iCloud Private Relay a flag of its own: Kount’s isAppleRelay, and Maskbreak’s network.privacy_relay, which asks for review rather than a block. Where Maskbreak differs: the answer leads with a decision your handler can act on, fake browsers are a named reason (antidetect_browser), which Kount’s public docs do not name, and you can run it on your own traffic today without a contract. Neither documents which AI model is behind an automated visit.
Before the order exists: what a visit check sees
A card-testing run is the clearest case. A script opens your checkout from a rented cloud server and tries one stolen card after another at small amounts. Kount lists “stop card testing at the zero dollar authorization stage” among Account Protection’s jobs, and Signal Score for Device is aimed at the checkout session too. Maskbreak answers at the form submit, before your code creates the order. This is what the checkout submit from such a script can return.
Example response, selected fields: a headless browser submitting checkout from a cloud server.
{
"decision": "block",
"risk_score": 70,
"reasons": ["datacenter_asn", "automation_detected"],
"network": {
"vpn": false,
"proxy": false,
"datacenter": true,
"tor": false,
"residential": false,
"service": null
},
"device": {
"automation": true,
"antidetect": false,
"emulator": false,
"tampering_score": 0
}
}
Your handler reads decision and never creates the order, so the card never reaches your payment processor: nothing gets scored, authorised or disputed. The cloud-server address alone would have been allow, with datacenter_asn still listed; the automation signal is what makes this a block. Proxy, Tor, automation, emulator and fake-browser signals block by default. On the console’s Rules tab you can set allow, review or block for most signals (VPN, proxy, Tor, cloud server, automation, fake browser and more). A rule changes the decision only for the signal it names, so this visit stays blocked unless you relax automation itself; when a rule does change the answer, engine_decision keeps the default.
Start in watch mode: log each decision and let everything through until the Events log looks right, then enforce (rollout guide). Our e-commerce chargeback playbook walks a stolen-card ring through the same checkpoints; it is a worked model, not a customer report. What Maskbreak does not bring: order scoring, chargeback tools, a cross-customer identity network, a manual review team, KYC, or email and phone reputation beyond the disposable-domain check. If you need those, keep a payment platform on the order and put the visit check in front of it.
When to use Kount, when to use Maskbreak
- Your losses are card-not-present payment fraud and chargebacks, and you want scoring, alerts and representment in one platform
- You want a cross-merchant network behind every score
- You need native mobile SDKs, email and phone intelligence, or document and biometric identity checks from the same vendor
- You are a bank or payment platform dealing with authorized push payment scams
- You sell on Shopify and a self-serve install, with charges on top, suits you
- The abuse starts before any payment: fake sign-ups, account takeover, bonus and promo abuse, scripted card tests at your form
- You want every verdict explained: a
decisionplus reason codes you can route on, and per-signal rules you set yourself - Fake browsers are part of the problem and you want them named in the answer, not folded into one score
- You want VPN users flagged for review, not refused, while proxies and Tor block
- You want to watch your real traffic before any sales call: Free plan, no card, 10,000 visitor checks a month
- You are not an online store: the same call works for SaaS, fintech and gaming sign-ups
Try Maskbreak on your own traffic, free
Free plan: 10,000 visitor checks a month, every signal included, no card. Start in watch mode, read the reasons in your Events log, then decide.
Frequently Asked Questions
Does Kount detect VPNs and proxies?
Yes. Kount’s Device Data Collector has long gathered network data, and Signal Score for Device, launched on 23 September 2026, documents an isProxy flag for proxy servers and commercial VPNs together (with proxy piercing), plus separate flags for Tor relays, hosting facilities and iCloud Private Relay. Equifax says it can “pierce advanced VPNs, residential proxies, and network anonymizers”. On a live visit, Maskbreak reports VPN and proxy as separate reasons, so a VPN on its own is flagged for review while a proxy blocks by default (Apple’s iCloud Private Relay, which it flags on its own, is reviewed instead), and it names the VPN or proxy service when known.
What is Kount Signal Score for Device?
A standalone device-risk API that Equifax launched on 23 September 2026 for sign-up and checkout. It runs on Kount’s Device Data Collector with keys from Kount 360 and returns three 0–100 scores (riskScore, cnpFraudScore, legitimacyScore), reason codes, network flags, interactionSource (HUMAN or MACHINE) and deviceIntegrity (REAL or FAKE). Pricing goes through Equifax’s sales team. Of everything Kount sells, it is the closest to a Maskbreak visit check.
Does Kount detect antidetect browsers?
Kount’s public docs do not name antidetect (fake) browsers such as Multilogin, GoLogin or AdsPower. The nearest things are the deviceIntegrity flag, which marks emulation and virtual environments as FAKE, and Equifax’s claim that it detects “manipulated devices”, so ask Equifax how its device check treats them. Maskbreak returns antidetect_browser as a named reason and blocks it by default.
How much does Kount cost?
Kount 360 is quote only. Equifax publishes no prices, free tier or trial; its product pages lead to “Request a Demo” or the sales team, and Kount’s support material describes usage-based invoices without public rates. The Kount app on Shopify says “Free to install. Additional charges may apply.” and names no figure. Maskbreak publishes its prices: the Free plan includes 10,000 visitor checks a month with every signal included and no card, and paid plans run from €29 to €299 a month, excluding VAT.
ClearSale vs Kount: what is the difference?
Who carries the chargeback, and whether people review your orders. ClearSale, part of Experian since April 2025, offers tiers from AI-only screening to full human review, and its published Growth plans include a chargeback guarantee on approved orders from $250 a month. Kount scores each transaction with its Omniscore, your own policies accept, block or challenge it, and the chargeback stays with you, with alert and dispute tools to fight it. Kount’s pricing is quote only.
Can Maskbreak replace Kount?
Only for the part that happens before the payment. Both check the session: Kount’s Signal Score for Device flags proxies and commercial VPNs, Tor, hosting and machine traffic, and Maskbreak returns allow, review or block with reasons such as VPN, proxy, automation or a fake browser. Maskbreak has no order scoring, chargeback tools, cross-customer identity network, manual review team or KYC. If you rely on those, keep Kount and put Maskbreak in front of the forms where the abuse starts.