M&A

Visa is acquiring BioCatch to catch fraud earlier

Signals Inbox·August 5, 2026·Cybersecurity

Visa is buying BioCatch for $2.4 billion, nearly twice its $1.3 billion valuation from 2024. The real shift is not just another fraud acquisition. Visa wants to detect the scam while someone is logging in, opening an account, or being manipulated, before the payment network even sees money move.

The Signal, Explained in 3 Minutes

Q1What actually happened?

Visa officially agreed to acquire BioCatch from Permira and other shareholders for $2.4 billion in cash. BioCatch helps banks spot scams, account takeovers, fake applications, and money-mule activity by analyzing how people use their devices. The deal is expected to close by the end of Visa’s fiscal second quarter of 2027.

Q2Why is Visa paying $2.4 billion?

Because BioCatch is already operating at serious scale. It works with around 350 banks in 21 countries, including 100 of the world’s largest banks. Its technology covers 760 million users and 1.8 billion devices. BioCatch also passed $185 million in annual recurring revenue in 2025, putting the acquisition price at roughly thirteen times ARR.

Q3What does BioCatch actually watch?

It looks at thousands of small signals: how someone types, moves a mouse, holds a phone, navigates a banking app, changes fields, or pauses during a transaction. One signal means little. Together, they can reveal whether the user behaves like the real account owner, a bot, a remote attacker, or someone being coached through a scam.

Q4Why does catching fraud earlier matter?

Visa usually enters the picture when money is ready to move. BioCatch operates further upstream, while someone is logging in, creating an account, or preparing a transfer. That gives banks a chance to stop the attack before it becomes a payment dispute, reimbursement claim, or stolen balance. Visa is moving from protecting transactions to protecting the full journey around them.

Q5Is $2.4 billion a big price?

Yes. Permira’s 2024 deal valued BioCatch at $1.3 billion, so Visa is paying about 85% more less than two years later. The price also lands close to Mastercard’s $2.65 billion purchase of cyber threat intelligence company Recorded Future in 2024. Both card networks are spending billions to become security platforms, not just payment rails.

Q6Has Visa already been building this stack?

Yes. Visa says it spent $13 billion on fraud technology and infrastructure over the past five years. It also bought fraud detection company Featurespace in 2024. BioCatch adds a different layer: understanding behavior before the transaction. Featurespace can analyze suspicious payment patterns, while BioCatch can help explain whether the person creating those patterns is genuine in the first place.

Q7So what is the bigger signal?

Payments companies are moving upstream because AI is making scams cheaper, faster, and easier to personalize. The valuable data is no longer only who paid whom and how much. It is also how the user reached that moment. Visa is betting that behavior itself becomes part of the security layer, and it is paying $2.4 billion to own that layer.

← Back to the signals