Visa has agreed to buy BioCatch, the Israeli behavioural biometrics firm, for $2.4 billion in cash from Permira-advised funds and other shareholders, the network announced on August 3, 2026. The more revealing number sits in the pattern, not the price: with this deal, the two big card networks have now committed roughly $5 billion between them to fraud intelligence that operates before a payment ever happens — Mastercard paid $2.65 billion for Recorded Future in a deal announced in September 2024, and Visa is now paying $2.4 billion for BioCatch. Both networks are effectively conceding that the next fraud battle is fought in the banking session, not on the card rails they own.
The valuation arc tells its own story about where the money is flowing. Permira took a controlling stake in BioCatch in 2024 at a $1.3 billion valuation, according to Calcalist, meaning the $2.4 billion cash exit marks a step-up of roughly 85% in about two years. For Visa, this is also the second behavioural fraud-detection acquisition in 20 months: it completed its purchase of Featurespace, the UK real-time payments-fraud AI firm, on December 19, 2024.
BioCatch analyses more than 3,000 anonymised data points per interaction — keystroke cadence, touch gestures, device handling, even signals of coercion — to distinguish a legitimate customer from a fraudster or a scam victim acting under pressure. Per Visa’s announcement, the company protects 760 million users across 1.8 billion devices, serves more than 350 banking clients in 21 countries, including over 100 of the world’s largest banks, and processes around 19 billion user sessions every month. BioCatch will sit inside Visa’s Value-Added Services group, with the deal expected to close by the end of Visa’s fiscal second quarter of 2027, subject to regulatory approvals.
Mastercard has not commented publicly on the deal, but its own acquisition trail — behavioural biometrics vendor NuData Security in 2017, then Recorded Future — shows both networks converging on the same thesis from opposite ends. Regulators are supplying the demand side: the UK’s Payment Systems Regulator now forces banks to reimburse authorised push payment scam victims, and the EU’s PSD3 goes further by uncapping APP fraud liability, which turns every undetected scam into a direct balance-sheet cost for BioCatch’s bank clients. The vendor side is consolidating in parallel, as the Fourthline and Veridas merger showed when European identity-verification firms began pairing up while fintech deal counts fell.
“Account takeovers and scams cost the global economy over $1 trillion annually and AI is enabling these attacks at unprecedented scale,” said Andrew Torre, President of Value-Added Services at Visa, in the deal announcement. “BioCatch will help our clients stop fraud before it reaches the point of payment.” Gadi Mazor, CEO at BioCatch, added that “real-time insights into customer intent continue to grow increasingly essential for institutions to establish trust within digital banking sessions.”
The context is a structural shift in where fraud lives. Card-present fraud is largely a solved problem; the growth categories are account takeover and social-engineering scams in which the victim authorises the payment, so the transaction itself looks clean to network-level scoring. That is precisely the blind spot BioCatch was built for, and it explains why Visa is buying session-level telemetry rather than another transaction-scoring engine. Having tracked the networks’ services businesses since the Featurespace deal, I read this as Visa paying up for the one dataset it cannot generate itself: what the customer does inside the bank’s own app.
What happens next is bundling. Expect BioCatch’s session intelligence to be packaged into Visa’s Value-Added Services pricing alongside Featurespace’s transaction scoring, squeezing standalone behavioural vendors that lack a network’s distribution. The networks already co-operate where standards demand it — Visa, Mastercard and Amex all joined the x402 body for agentic payments — but in fraud intelligence they are building competing walled gardens, and the remaining independent scam-detection firms just became either acquisition targets or roadkill. The open question for bank buyers is whether a Visa-owned BioCatch stays network-neutral; the answer will shape who wins the next round of renewals.
Rick Steves
Rick Steves has seen business and economics through many lenses. He joined the financial services industry in 2009, and has been a financial journalist since 2011. He holds a degree in Business Administration and has experience producing real-time news, from both buy-side and sell-side, as well as for retail traders, brokers and service providers. Steves' work has appeared in a variety of online publications including FX Street, NewsBTC, FinanceFeeds, and The Industry Spread. Rick has great interest in the dynamics of the trading industry. The never-ending clash between technology, economics, regulation, and more importantly, the people.
