Visa to Acquire BioCatch for $2.4bn in Cybersecurity Push

Visa plans to acquire fraud intelligence provider BioCatch for $2.4 billion in cash, expanding the payment company’s cybersecurity and risk capabilities.

The proposed acquisition from Permira and other investors reflects growing demand for tools that can identify fraud through behavioural signals rather than relying only on credentials and transaction rules, Public reporting indicates that .

Behaviour can reveal compromised accounts

Behavioural intelligence examines how a user interacts with a device or service, including navigation, typing patterns and session activity. These signals can help distinguish a genuine customer from an attacker using stolen credentials or social engineering.

For banks and payment providers, stronger behavioural data can improve detection of account takeover and authorised push payment scams. It must, however, be deployed with clear privacy controls, model validation and processes for customers who are incorrectly flagged.

The transaction also shows how fraud prevention is becoming central to payment-platform strategy. As criminals use AI and automation, providers are investing in real-time intelligence capable of adapting more quickly than static rules.

Integration will determine the value of the deal

Visa and its bank clients will need to decide how behavioural signals are combined with existing network, device and transaction data. Too many disconnected scores can slow an investigation, while an integrated view may allow a payment to be challenged before funds leave the account.

Governance must define who can access behavioural profiles and how long the data is retained. Customers also need a route to resolve false positives. Acquisition of a sophisticated platform can expand capability, but effectiveness depends on implementation, model oversight and the ability of fraud teams to act on alerts in real time.

Measures that should demonstrate value

• Reduction in account-takeover and social-engineering losses.
• Speed from behavioural alert to payment intervention.
• False-positive rates across different customer groups.
• Number of confirmed attacks linked through shared device intelligence.

Next focus: Regulatory review and integration planning will determine how quickly the combined business can use BioCatch data across Visa’s network while protecting customer information.