Visa buys BioCatch to fight AI-supercharged financial crime

The phrase that captures this deal best is one Visa's own executive used, "stop fraud before it reaches the point of payment," because it explains why a payments network is spending 2.4 billion dollars in cash on a company that does not process a single transaction. Visa has agreed to acquire BioCatch, an Israeli behavioral-intelligence firm, from a group of shareholders led by the private equity house Permira, and the logic is not to expand what Visa moves but to protect it. As fraud increasingly happens upstream, inside the banking session before money ever changes hands, Visa is buying its way into the layer where the crime begins rather than the layer where it ends. What BioCatch does is the interesting part, because it is a different kind of security from the passwords and codes most people know. Founded in 2011, the company specializes in behavioral biometrics, identifying people not by what they know or possess but by how they behave. Its AI models continuously collect more than 3,000 anonymized signals as someone uses their online banking, the rhythm of their keystrokes, the way they move a mouse, the pressure and gestures on a touchscreen, how they hold a phone. From that behavioral fingerprint the system can tell a legitimate customer from a fraudster in real time, and, more subtly, detect when a real customer is acting under coercion, the tell-tale hesitation of someone being talked through a scam. It is built to catch account takeovers, scams, money-mule activity and application fraud in the milliseconds before a transaction completes. The scale is already enormous, with BioCatch analyzing 19 billion banking sessions a month, protecting more than 760 million users across 1.8 billion devices, and serving over 350 financial institutions in 21 countries. The strategic driver is a threat escalating fast, and it has a name, generative AI. Visa estimates scams and account takeovers already cost the global economy more than a trillion dollars a year, and cheap, convincing AI is making it worse by letting criminals generate flawless phishing, clone voices and run fraud at unprecedented scale. BioCatch was strikingly candid, admitting that as a society and industry we are not winning this fight. Behavioral intelligence is valuable precisely because it is hard to fake. A criminal can steal a password, but mimicking how a specific human types and swipes is far harder. The deal also feeds Visa's fast-growing value-added services division, which sells fraud and cybersecurity software to banks and has become a key engine of growth beyond moving payments. The regional significance runs wider than the American and Israeli headquarters. BioCatch protects banking customers across markets including the Gulf, where the forces are especially intense. The UAE, Saudi Arabia and the wider region are among the fastest-digitizing financial markets on earth, pushing toward cashless economies and mobile-first banking, which creates exactly the expanded attack surface fraudsters exploit. A Visa-owned BioCatch becomes a more powerful, deeply integrated tool for the Gulf institutions already on Visa's network, strengthening the defenses under the region's payments boom. The honest caveats are real. The deal is not expected to close until the end of Visa's fiscal second quarter of 2027, subject to regulatory approvals. Behavioral biometrics also raises privacy questions around the continuous, invisible monitoring of how people use their devices, even anonymized. And fraud is an arms race where every improvement in defense invites a more sophisticated attack, with AI arming both sides. But the logic is sound. By moving upstream into the banking session, Visa is betting that in an age of AI-supercharged fraud, the most valuable place to sit is where the criminal first reveals themselves.