Visa pays $2.4B cash for BioCatch's behavioral fraud tech, adding keystroke and device analysis to complement transaction monitoring. Deal faces regulatory review, expected close by Q2 2027.
Visa agreed to pay $2.4 billion in cash for BioCatch, a fraud-intelligence company that determines whether a banking customer is genuine by examining behavioral signals such as typing patterns and device handling.
Generative AI has made it easier to fake documents, voices, and faces. Static identity checks confirm a document looks real or a password is correct. They still fail against fraudsters using stolen credentials or legitimate customers manipulated in a scam.
BioCatch adds a different layer: behavior. Visa is buying the ability to assess not only the credentials but whether the person entering them behaves like the expected user.
Visa announced the definitive agreement on Aug. 3. The transaction requires regulatory approval and is expected to close by the end of Visa's fiscal second quarter of 2027.
BioCatch examines more than 3,000 anonymized signals during digital banking sessions. These include keystroke dynamics and touch gestures. The system also checks for signs of a compromised device. Its models combine behavioral signals with application and device data to identify account-opening fraud, account takeovers, money-mule activity, and social-engineering scams. The technology can also detect when a genuine customer may be acting under pressure.
BioCatch says it analyzes 19 billion sessions each month and protects 760 million users. It serves more than 350 financial institutions in 21 countries, including over 100 of the world's largest banks.
The acquisition does not mean document verification or passwords are useless. It means they are no longer sufficient alone. AI helps criminals create synthetic identities and produce convincing messages. In social-engineering attacks, the legitimate account holder may authorize the payment. Static checks pass because the password is correct.
Andrew Torre, president of Visa's value-added services business, said AI was allowing account takeovers and scams to operate at "unprecedented scale." Visa's goal is to identify the threat before the payment stage, rather than relying only on controls applied when the transaction is submitted.
That moves Visa further upstream. Its network already sees payment, merchant, issuer, and authorization data surrounding a card transaction. BioCatch adds intelligence from the customer's behavior before the money moves.
Visa could develop additional behavioral-analysis tools internally. What it cannot quickly reproduce is BioCatch's installed customer network, historical behavioral data, and the feedback effects created by analyzing billions of banking sessions. Each participating institution contributes signals that improve the system's ability to recognize emerging fraud patterns. BioCatch CEO Gadi Mazor said real-time intelligence sharing among customers had increased the power of its behavioral models.
The deal also fills a strategic gap against Mastercard. Mastercard completed its $2.65 billion purchase of cyber-threat intelligence company Recorded Future in 2024, while Visa acquired payment-fraud specialist Featurespace that year. Evercore analyst Adam Frisch said investors had increasingly viewed Recorded Future as a leading fraud-protection asset for the AI era. BioCatch gives Visa a clearer behavioral-intelligence answer. Mastercard carries an Alpha Score of 71.
Visa has invested more than $13 billion in technology and infrastructure over five years. BioCatch turns part of that spending into a product Visa can sell alongside authorization, tokenization, risk scoring, and fraud monitoring.
Payment service providers and brokers commonly assemble fraud controls from multiple vendors: identity verification from one supplier, device intelligence from another, transaction monitoring from a third, and behavioral analysis from a fourth. Visa can now own and potentially bundle more of that stack. A PSP already routing card transactions through Visa could be offered behavioral intelligence alongside its existing payment and risk products. That may reduce integration work.
Datos Insights' 2026 review of digital-onboarding fraud tools profiled 12 competing suppliers across document verification, behavioral biometrics, device intelligence, and synthetic-identity scoring. BioCatch was already competing for overlapping financial-institution spending.
Independent vendors are not automatically displaced. Brokers and PSPs often operate across Visa, Mastercard, bank transfers, wallets, and digital assets, making network-neutral controls valuable. Many also require specialist anti-money-laundering and sanctions monitoring that BioCatch does not replace.
The deal still needs regulatory approval. BioCatch operates across identity, biometrics, device intelligence, and financial crime. These areas face strict privacy and AI rules across multiple jurisdictions.
Bank of America is moving in a similar direction. It agreed on July 30 to acquire UK cybersecurity consultancy MDSec. The transaction is expected to close in the fourth quarter of 2026 after regulatory approvals. Bank of America, with an Alpha Score of 68, is bringing security capabilities closer to its core operations.
Visa is making the larger version of that bet. It is not buying another check at the moment of payment. It is buying the behavioral layer that decides whether the person reaching the payment screen looks genuine in the first place.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.