AINEWS
BioCatch's software learns how each person types and swipes to flag bots, and Visa's $2.
Visa is paying $2.4 billion in cash for BioCatch, a fraud-defense firm whose software recognizes how people type, swipe, and hold their phones. The card networks now see the next fraud front at the login screen, where the only way to tell a human from an AI agent is to watch how they move.
Behavioral biometrics, the category BioCatch helped invent in 2011, turns the texture of a user's interaction with a device into a fraud signal. The company's engine scores thousands of passive telemetry points during a session: keystroke cadence, mouse movement, touch pressure, AI-agent usage, and indicators of jailbroken devices. Across 1.8 billion devices and 760 million active users at more than 350 financial institutions in 21 countries, that pattern-matching has become one of the fraud team's last lines of defense before a transaction is approved.
The reason the card networks are buying that signal layer now is the same reason the threat model has changed: bots have gotten good enough to behave like people. "The networks have realized the value and necessity of assembling a broad and diverse range of signals," said Trace Fooshee, a strategic advisor in the fraud and AML practice at Datos Insights. Behavioral analytics, he said, will "feature heavily" in telling humans from AI agents at the moments when a transaction is opened, a login is attempted, or a high-risk transfer is requested.
Three AI-driven threat categories are pushing the networks into behavioral analytics: mobile payment scams, deepfake impersonation, and account takeovers that bypass multifactor authentication using session hijacking or SIM swaps. Each one used to be detectable with a static credential check or a one-time code. Each one is now being routed through automation that moves fast enough to outrun those checks, and behavioral telemetry is one of the few signals left that an automated attacker cannot easily fake in real time.
For the average bank customer, the practical effect is invisible most of the time and visible in the worst moments. A login from a recognized device, with familiar typing rhythm and normal mouse movement, will pass through a BioCatch-style check with no friction at all. A login from a session that is running a script, scraping credentials, or driving a stolen cookie through a headless browser will get additional challenges, a step-up authentication prompt, or a hard block. The category shift the Visa deal makes explicit is that this layer is moving from a specialized fraud-tool purchase to a default expectation embedded in the network's own services stack.
The BioCatch deal completes a three-vendor consolidation that has been underway for eight years. Mastercard acquired NuData Security in 2017. LexisNexis Risk Solutions bought BehavioSec in 2022. Now Visa, the largest card network by volume, is folding BioCatch into its services stack. The three leading independent behavioral-biometrics platforms are now under network or network-adjacent ownership, and the smaller independent vendor set is correspondingly thin. For a bank procurement team shopping the category in 2026, the realistic shortlist is two card networks and one data-broker-owned vendor.
The price also tells a story. Permira took a majority stake in BioCatch two years ago at a valuation near $1.3 billion. The $2.4 billion sale works out to a roughly 1.8x markup in 24 months, the kind of return that explains why private equity has been willing to build behavioral-biometrics companies through a stretch when standalone fraud-software vendors were trading at compressed multiples.
Six days before the acquisition was announced, Visa told 2,600 employees they were losing their jobs, eliminating roughly 7% of its roughly 34,100-person workforce, with cuts concentrated in technology and product organizations. The layoffs are a separate workforce action and not the mechanism of the deal, but the timing is the part the reader will notice. Visa CEO Ryan McInerney, asked about the cuts, said the company is focused on increasing efficiency to "reinvest in our highest potential opportunities," citing plans for AI to help shape how work gets done at Visa. Whether the $2.4 billion BioCatch check counts as one of those reinvestments is the question the next earnings call will answer.