Visa has signed a definitive agreement to acquire behavioral-biometrics pioneer BioCatch for $2.4 billion in cash from funds advised by Permira and other shareholders, giving the payments giant one of the most-deployed fraud-fighting stacks in banking. The deal, announced August 3, is expected to close by the end of Visa's fiscal second quarter of 2027, subject to regulatory approval.
Why Behavior Beats Passwords
BioCatch analyzes more than 3,000 anonymized signals per session — keystrokes, mouse movement, touch gestures, device handling and network telemetry — to tell genuine users from fraudsters in real time. Its BioCatch Connect platform is deployed at more than 350 banks in 21 countries, scoring 19 billion sessions a month across 760 million users and 1.8 billion devices.
Visa's Cyber Playbook
The acquisition slots into Visa's push to prevent fraud "upstream," before it reaches the point of payment. Andrew Torre, president of value-added services, called account takeovers and scams a trillion-dollar-a-year problem now supercharged by generative AI. Over the last five years Visa says it has invested more than $13 billion in technology and infrastructure to protect its network, most recently open-sourcing the Visa Vulnerability Agentic Harness for automated remediation.
A Big Week For Cyber M&A
The Visa-BioCatch tie-up caps a summer of financial-services cybersecurity deals. Bank of America is separately buying UK offensive-security consultancy MDSec, and Okta closed its $200M Permiso acquisition weeks earlier. Meanwhile, agentic-AI security tools debuted at Black Hat 2026, signaling the industry's shift toward autonomous defense.
Reporting based on coverage from Visa's newsroom, Bloomberg and CNBC.