Invest2 publishers3 min readPublished
Baselayer stakes a $35 million Series A on issuing credentials to one-task AI agents
Baselayer's fraud consortium works because the same businesses keep applying across the 2,000 institutions on its network, and an AI agent that spins up for one task and disappears shows up once.
The Investor · Invest desk

What happened
- M13 led Baselayer's $35 million Series A, with Picus Capital, Torch Capital, Afore Capital and Matt Thompson of Socure taking part.
- Total funding now stands at about $40 million since the company's 2023 inception, according to co-founder and CEO Jonathan Awad, and Baselayer declined to disclose its valuation.
- More than 2,000 financial institutions, which Awad puts at over 20% of all such institutions in the US, use the platform to onboard, underwrite and open accounts for merchants.
- Alongside the raise, the company launched an Agentic Identity Suite, extending its identity network from businesses to the AI agents transacting on their behalf.
Compiled by The InvestorSomething wrong?How this is made
Why it matters
- constraint The pricing power in the existing business comes from seeing the same business apply again and again; an agent that exists for one task and vanishes is seen once, so the agent product cannot be sold off the same data.
- decision Merchants, banks and online platforms have to decide whether to gate agent transactions on a credential they neither issue nor control, and the suite sells only once they do.
- exposure Matt Thompson of Socure put money into the round while Socure is named among the firms expected to recognise the credential, so the investor list and the partner list overlap.
Subtract the round from the total and Baselayer signed its first 2,000 institutions on about $5 million. This Series A is roughly seven times all the money that came before it [1][3][1]. Turn Awad's market share figure around as well. If more than 2,000 institutions are more than 20% of US financial institutions, the denominator he is working from sits near 10,000 [5][2].
Those institutions buy recurrence. Awad describes the company as both an identity network and a fraud consortium, able to see when the same business applies at several institutions and to push that into its risk scoring [10]. It processes tens of millions of applications a year and sees many of the same businesses more than once [11]. The $1 billion in fraud losses the company says customers have avoided since February 2023 works out at roughly $500,000 per institution [4][7][3].
An agent built for a single task and then discarded produces none of that history [14]. "Agents spin up and they spin down," Awad said. "How can you trust this random one-task agent?" [15][16] The Know Your Agent system in development is designed to establish who deployed an agent, who it represents, and whether it has permission for the particular task [17]. The suite is a different product from the one paying the bills. The KYB platform sells a score assembled from accumulated data [9]; the agent product sells a credential the agent presents, which a merchant, bank or online platform then reads before deciding whether to let the transaction through [18].
The credential is worth only what the other side does with it. Baselayer says it is working with agent developers, payment processors, merchants and fraud-detection providers, among them FIS, Prove and Socure, to issue and recognise it [19]. Awad's case for demand is blunt: unless agents can establish they act for legitimate people or businesses, "agents will just get blocked everywhere," he said [20].
One path from here has the 2,000 institutions already running Baselayer's checks making its credential the one processors read by default, so the KYB network becomes distribution for the agent suite [5][13]. A second has a large processor or an agent platform issuing its own credential, leaving Baselayer as one issuer competing on price [19]. A third has merchants blocking agent traffic wholesale, in which case the credential waits years for a buyer.
In my view the asset an investor can underwrite today is the existing business: eight figures of revenue inside two years, across 2,000 institutions, with about 50 staff, or at least $200,000 of revenue a head [5][6][8][4]. Know Your Agent is at the design stage by the company's own description [17], and Baselayer declined to disclose its valuation [3]. I would change that view if a processor the size of FIS commits publicly to reading Baselayer credentials in production, or if the agent suite turns up as separately disclosed revenue.
What to watch
- Whether FIS, Prove or Socure commit to reading Baselayer's agent credential in production, and on what commercial terms.
- Any separately disclosed revenue for the Agentic Identity Suite, or a priced round that puts a number on the company.
- Whether a payment processor or an agent platform issues a competing credential that merchants read by default.