Visa agreed Monday to acquire BioCatch an Israeli Cyber Firm for $2.4 billion in cash, expanding beyond payment processing into technology designed to detect scams, account takeovers and fraudulent activity before a transaction reaches the card network.

BioCatch analyzes how customers interact with banking websites and mobile applications, including typing rhythm, touch gestures, mouse movements, device handling and navigation patterns. Its systems use those behavioral signals to distinguish legitimate users from criminals operating stolen accounts or manipulating victims into transferring money.

The acquisition shifts Visa further upstream in the financial system.

Traditional payment security often focuses on identifying suspicious transactions once a customer attempts to move money. BioCatch monitors the full digital-banking session, allowing banks to identify abnormal behavior before a payment is authorized.

That distinction has become increasingly important as criminals change tactics.

Banks have spent heavily preventing unauthorized card purchases, but many modern scams involve customers initiating transactions themselves after being deceived by fake bank representatives, investment schemes, romance scams or fraudulent technical-support calls.

Because the account holder approves the payment, traditional fraud filters may see a legitimate device, password and authentication code.

Behavioral analysis can provide additional warning signs. A customer may suddenly hesitate while entering information, copy and paste account numbers unusually, navigate screens differently or appear to be receiving instructions from someone else.

BioCatch combines those signals with device intelligence and historical behavior to determine whether an account session presents elevated risk.

Visa said account takeovers and scams cost the global economy more than $1 trillion annually, while artificial intelligence is allowing criminals to operate at greater speed and scale.

Fraudsters can now use AI to create convincing phishing messages, imitate voices, generate fake identification documents and automate attacks across thousands of accounts. Financial institutions are responding by deploying their own AI systems to identify suspicious activity in real time.

BioCatch currently works with more than 350 financial institutions in 21 countries. Its technology protects approximately 760 million users and analyzes activity across 1.8 billion devices.

The company generated more than $185 million in annual recurring revenue by the end of 2025, according to transaction disclosures.

That makes the $2.4 billion purchase more than a defensive technology acquisition. Visa is buying a recurring software business that can be sold to banks independently of individual card transactions.

Visa’s core network earns fees when money moves across its system. Its value-added services division sells fraud prevention, consulting, data, cybersecurity and authentication products to financial institutions and merchants.

Those services are becoming increasingly important as regulators pressure banks to reimburse customers harmed by scams and as financial institutions seek additional protection against losses.

Visa President of Value-Added Services Andrew Torre said BioCatch will help clients stop fraud before it reaches the point of payment.

The deal also responds to competition from Mastercard.

Mastercard acquired cyber-intelligence company Recorded Future for $2.65 billion in 2024, while both payment networks continue purchasing companies that expand their roles beyond processing credit and debit cards.

Visa completed its acquisition of Featurespace, another AI-based payment-fraud company, in December 2024. Featurespace focuses heavily on transaction monitoring, while BioCatch adds behavioral intelligence from the customer’s broader digital session.

Combined, the technologies could allow Visa to evaluate what happens before, during and after a payment attempt.

The strategy gives Visa more ways to earn revenue even when transactions do not travel across its own card rails.

Digital wallets, instant bank transfers, stablecoins and account-to-account payment systems are creating alternatives to traditional card payments. Fraud and identity protection remain necessary regardless of which method customers use.

Owning more security infrastructure can therefore protect Visa from changes in how money moves.

The acquisition also gives BioCatch access to Visa’s relationships with banks, merchants and financial-service providers around the world.

BioCatch said its leadership team and reporting structure will remain in place after the transaction closes. The company is expected to become part of Visa’s value-added services business.

Permira acquired a majority stake in BioCatch in 2024 at a valuation of approximately $1.3 billion. Monday’s agreement nearly doubles that valuation in a little more than two years, reflecting the growing demand for fraud-prevention technology.

The purchase remains subject to regulatory approval and other customary closing conditions. Visa expects to complete the acquisition by the end of its fiscal second quarter of 2027.

Integration will present challenges.

Behavioral monitoring can raise privacy concerns because it requires analyzing detailed information about how individuals use their devices. Banks and technology providers must clearly explain how that data is collected, stored and used.

False alarms also carry costs. A system that incorrectly blocks legitimate customers can delay payments, increase support calls and damage trust.

BioCatch’s value will depend on identifying enough fraudulent sessions to prevent meaningful losses without making ordinary banking more difficult.

For consumers, the technology may remain largely invisible. A banking application could quietly evaluate typing speed, device movement and navigation behavior without requiring an additional password or security question.

That invisible layer is precisely what Visa is buying.

The company is no longer limiting its security role to deciding whether a payment should be approved. It wants to identify when the person initiating that payment may be a criminal—or a legitimate customer being manipulated—before the money ever reaches the network.

JBizNews Desk | San Francisco

© JBizNews.com All Rights Reserved. Reproduction or distribution without written permission is prohibited.