Visa is buying fraud-detection firm BioCatch for $2.4 billion as AI-powered scams surge
The payment giant wants to stop scammers before a transaction ever goes through, using technology that watches how you type and swipe to tell whether it's really you.
Key points
- Visa announced it will acquire BioCatch, an Israeli fraud-detection startup, for $2.4 billion in cash.
- BioCatch uses behavioral biometrics, software that studies typing rhythm and screen-touch pressure, to identify scammers and bots.
- Visa estimates AI-powered scams and account takeovers cost the global economy more than $1 trillion every year.
- The deal is expected to close by the end of Visa's fiscal second quarter of 2027, pending regulatory approval.
- BioCatch currently protects 760 million users across roughly 350 banks; Visa connects nearly 14,500 financial institutions.
Visa is paying $2.4 billion in cash for BioCatch, an Israeli startup that spots fraudsters by watching tiny details in how people use their devices. The seller is Permira, a London-based private equity firm, along with other investors. CNBC Tech first reported the terms.
What does BioCatch actually do?
BioCatch uses behavioral biometrics, a technology that quietly records signals like how hard you press a touchscreen, how fast you type, and how you move your mouse. It then builds a personal pattern for each user and flags anyone who behaves differently. Banks use it to catch fraudsters even when those fraudsters have the correct password.
The company says it currently shields 760 million users across around 350 banks. Visa's network, by contrast, links nearly 14,500 financial institutions and processes more than 329 billion transactions a year, worth over $17 trillion.
That scale gap is the whole point of this deal.
Why is Visa spending $2.4 billion on fraud right now?
Generative AI, the same technology behind chatbots like ChatGPT, has made it far cheaper and faster to run scams at scale. Criminals can now produce convincing fake voices, fake messages and fake identities with minimal cost. Visa estimates this surge in AI-powered fraud costs the global economy more than $1 trillion annually.
BioCatch put it bluntly in a statement accompanying the announcement: "As a society and industry, we are not winning this fight."
For Visa, the acquisition fits a broader push into what the company calls value-added services, a division that sells fraud prevention, cybersecurity and analytics tools to banks. It is one of Visa's fastest-growing businesses.
"BioCatch will help our clients stop fraud before it reaches the point of payment," said Andrew Torre, Visa's president of value-added services.
What does this mean for ordinary bank customers?
If your bank already uses Visa's network, you may eventually benefit from stronger background fraud checks without doing anything differently. The technology works silently; you do not fill in extra forms or change your password.
That said, the deal still needs regulatory sign-off and is not expected to close until 2027. Nothing changes at your bank tomorrow.
Common questions
Is my banking information shared with Visa under this deal?
BioCatch analyses behavioural patterns rather than storing passwords or account numbers. What it captures is closer to a movement signature than personal data, though you should check your bank's own privacy policy for specifics on how it uses the technology.
Should I do anything differently to protect myself from AI scams?
The best protection right now is scepticism toward unexpected calls, texts or emails asking you to move money, even when they sound convincing. No fraud-detection system catches everything, and scammers increasingly impersonate bank staff using AI-generated voices.
