Visa Bolsters Cybersecurity with $2.4 Billion BioCatch Acquisition

Visa is acquiring cybersecurity firm BioCatch for $2.4 billion to enhance its offerings in the fight against bank fraud and AI-powered scams. The move positions Visa to detect and prevent financial crimes before payment. This significant acquisition underscores Visa's efforts to expand its security capabilities.

V has signed a definitive agreement to acquire behavioral fraud-intelligence firm BioCatch for $2.4 billion in cash, buying the company from funds advised by private equity firm Permira and other shareholders. BioCatch analyzes behavioral, device and network signals, how a user types, swipes and holds a phone, to separate genuine account holders from bad actors while a transaction is still in flight.

The target is not a startup bet. BioCatch says its platform currently protects roughly 1.8 billion devices and 760 million users, serving more than 350 banking clients across 21 countries . That installed base is the strategic point: it sits at the account-takeover and scam layer, upstream of the card rails Visa already monitors, which lets Visa extend fraud detection to the moment a session is compromised rather than the moment a payment is presented. It slots alongside the cyber, risk and identity services Visa has been assembling as value-added services, the segment it has leaned on for growth as core payment volume matures.

The timing sits against a documented surge in AI-assisted social engineering, where the fraudster is a legitimate authenticated user who has been manipulated, a pattern card-level rules are structurally poor at catching. Visa expects the transaction to close in its fiscal second quarter of 2027, so it faces regulatory review in multiple jurisdictions before anything lands in the P&L . What to watch: whether Visa discloses BioCatch revenue contribution separately in value-added services, and whether the 350-bank client base holds through integration, given that many of those institutions also work with MA.