Visa’s $2.4 billion BioCatch deal shows where payment fraud defense is going

Visa’s acquisition of BioCatch for $2.4 billion is a clean signal that payment fraud defense is moving further toward behavioral biometrics as AI-driven scams get harder to spot. For PSPs, acquirers, and banks, the practical point is simple: card authentication is drifting away from static checks and toward systems that watch how a customer actually behaves.

1. BioCatch’s technology analyzes behavioral data points such as keystrokes, touch gestures, and device handling to distinguish legitimate users from criminals in real time. The company says its technology is currently used by more than 350 banking clients.
2. In the EU, banks have begun requesting biometric authentication through their apps when customers make card transactions. According to the source, they have found that this reduces fraud, unauthorized transactions, and even product returns. That matters because payment risk controls are being judged not only on fraud loss, but also on how much friction they add to good customers.
3. Visa’s move was driven in part by the rise of AI-enabled fraud. A BioCatch survey of 80 UK fraud and compliance professionals found that nearly three-quarters said distinguishing legitimate AI-assisted transactions from malicious activity was very challenging, while a similar proportion said real-time intelligence would significantly improve scam detection.
4. The logic behind behavioral biometrics is that they do not depend only on passwords, one-time passcodes, or transaction history. They analyze how a person interacts with a device and do it passively in the background, which can strengthen security without forcing consumers through extra authentication steps every time.
5. The source also points to agentic AI as the next pressure point. If AI agents start making purchases on behalf of consumers, financial institutions will need a way to determine whether a transaction reflects genuine customer intent when no human is directly initiating or watching it. BioCatch says its platform analyzes thousands of passive telemetry signals during a purchasing session to separate human users from bots and other suspicious activity.

Visa has now invested $13 billion over the past five years to protect the integrity of its payments network. BioCatch follows Visa’s $946 million acquisition of fraud detection firm Featurespace in 2024, and sits alongside the Visa Vulnerability Agentic Harness, an open-source AI tool released this summer to help financial institution clients identify and remediate potential vulnerabilities.