In one of the largest cybersecurity deals in payments this year, Visa acquires BioCatch in a $2.4 billion all-cash transaction. It is a bet that the future of payment fraud prevention lies not in what a transaction looks like, but in how a real human behaves behind the screen. Announced on August 3, 2026, the deal signals an aggressive escalation in the fight against AI-powered fraud as generative AI makes scams faster, cheaper, and harder to detect.
For B2B leaders in banking, fintech, and e-commerce, the message is clear: behavioral biometrics has moved from a niche security layer to core infrastructure.
Why Visa Is Paying $2.4 Billion
BioCatch is a fintech that pioneered behavioral biometrics, a technology that analyzes thousands of real-time signals to tell legitimate users apart from fraudsters. Rather than checking a password or a one-time code, it watches how a session unfolds.
The company’s platform monitors patterns such as:
- Keystroke dynamics and typing rhythm
- Touch gestures and swipe behavior on mobile devices
- Device handling, orientation, and navigation habits
- Coercion indicators that flag when a user is being manipulated in real time
That approach powers real-time fraud detection at massive scale. BioCatch currently protects 1.8 billion devices and 760 million users, and it serves more than 350 banking clients across 21 countries, including 100+ of the world’s largest banks. In total, the platform processes roughly 19 billion user sessions every month.
Crucially, this is scam detection that happens before money moves. “Account takeovers and scams cost the global economy over $1 trillion annually, and AI is enabling these attacks at unprecedented scale,” said Andrew Torre, Visa’s President of Value-Added Services. “BioCatch will help our clients stop fraud before it reaches the point of payment.”
The AI Fraud Problem Driving the Deal
The acquisition lands against a backdrop of surging, AI-driven financial crime. Deepfakes, voice cloning, and generative-AI phishing have industrialized account takeover fraud and authorized push payment scams, overwhelming the rules-based systems many institutions still rely on.
The stakes are enormous:
- $1 trillion+ in annual losses from account takeovers and scams globally.
- AI tooling now lets criminals scale attacks that once required manual effort.
- Static defenses such as passwords, OTPs, and device fingerprints are increasingly bypassed.
This is where behavioral biometrics offers a structural advantage. A fraudster armed with stolen credentials or a synthetic identity can pass traditional checks, but replicating the unconscious way a genuine account holder types, scrolls, and holds their phone is far harder. That behavioral signal is fast becoming one of the most reliable tools in fraud detection and broader financial crime prevention.
What It Means for Visa’s Strategy
The purchase folds BioCatch into Visa’s Value-Added Services division and deepens a payment security portfolio that Visa has spent heavily to build. The company has invested more than $13 billion over five years in technology protecting the payments ecosystem.
The strategic logic:
- Move fraud prevention upstream by catching threats before authorization, not after a chargeback.
- Strengthen bank and issuer relationships through a shared, cross-institution intelligence layer.
- Deepen recurring, high-margin services revenue beyond card processing fees.
BioCatch CEO Gadi Mazor, who stays on to lead the unit, emphasized that real-time customer-intent insights are essential for banks, and that sharing intelligence across institutions amplifies the value of behavioral data.
Notably, Permira’s controlling stake valued BioCatch at just $1.3 billion two years ago. That means Visa is paying nearly double the recent benchmark, a signal of how strategically vital AI-powered fraud defense has become.
The deal is expected to close by the end of Visa’s fiscal second quarter of 2027, subject to regulatory approval.
The End of AI Payment Scams?
Not quite, but it is a decisive shift in the arms race. As criminals weaponize AI, defenders are countering with behavioral intelligence that adapts in real time. For banks, fintechs, and merchants, the takeaway is that payment fraud prevention is no longer just about verifying identity at the door; it’s about continuously reading intent throughout the session.
Visa’s $2.4 billion wager suggests the next competitive edge in payments won’t be won on transaction speed or rewards. It will be won by whoever can tell, in milliseconds, whether the hands on the keyboard truly belong to the customer.