Visa is buying fraud-detection firm BioCatch for $2.4 billion as AI-powered scams surge

Key points

• Visa announced it will acquire BioCatch, an Israeli fraud-detection startup, for $2.4 billion in cash.
• BioCatch uses behavioral biometrics, software that studies typing rhythm and touchscreen pressure, to tell real users from bots.
• Visa estimates AI-powered scams and account takeovers cost the global economy more than $1 trillion every year.
• The deal is expected to close by the end of Visa's fiscal second quarter of 2027, pending regulatory approval.
• BioCatch currently protects 760 million users across roughly 350 banks; Visa connects nearly 14,500 financial institutions.

Visa is paying $2.4 billion in cash for BioCatch, an Israeli startup that spots fraudsters by watching tiny details in how people use their devices. The seller is Permira, a London-based private equity firm, along with other investors. CNBC Tech first reported the terms.

What does BioCatch actually do?

BioCatch uses behavioral biometrics, a technology that quietly records signals like how hard you press a touchscreen, how fast you type and how you move your mouse. It builds a personal pattern for each user and flags anyone who behaves differently. Banks use it to catch fraudsters even when those fraudsters have the correct password.

The company shields 760 million users across around 350 banks. Visa's network, by contrast, links nearly 14,500 financial institutions and processes more than 329 billion transactions a year, worth over $17 trillion. That scale gap is the whole point of this deal.

Why is Visa spending $2.4 billion on fraud right now?

Generative AI, the same technology behind chatbots like ChatGPT, has made it far cheaper to run scams at scale. Criminals can now produce convincing fake voices and fake identities with minimal cost. Visa estimates this surge in AI-powered fraud costs the global economy more than $1 trillion annually.

BioCatch was direct about the stakes in a blog post accompanying the announcement: "As a society and industry, we are not winning this fight."

For Visa, the acquisition fits a broader push into what the company calls value-added services, a division that sells fraud prevention and analytics tools to banks and has become one of Visa's fastest-growing businesses. "BioCatch will help our clients stop fraud before it reaches the point of payment," said Andrew Torre, Visa's president of value-added services.

We covered a comparable security acquisition on 30 July 2026, when Okta bought AI security startup Permiso for around $200 million, a sign that identity-layer deals are accelerating well ahead of any regulatory framework built to handle them.

What does this mean for ordinary bank customers?

If your bank already uses Visa's network, you'll likely benefit from stronger background fraud checks without doing anything differently. The technology works silently; you don't fill in extra forms or change your password. The deal still needs regulatory sign-off and won't close until 2027, so nothing changes at your bank tomorrow.

Honestly, the thing to watch here isn't the technology itself, which is solid, but whether Visa's scale actually delivers on BioCatch's promise. Plugging 760 million protected users into a network of 14,500 institutions is a different engineering challenge than anything BioCatch has faced before.

Common questions

Is my banking information shared with Visa under this deal?

BioCatch analyses behavioural patterns rather than storing passwords or account numbers. What it captures is closer to a movement signature than personal data, though you should check your bank's own privacy policy for specifics.

Should I do anything differently to protect myself from AI scams?

Scepticism is still your best tool. Be wary of unexpected calls or messages asking you to move money, even when they sound convincing, because no fraud-detection system catches everything.