Visa has agreed to buy a company called BioCatch for $2.4 billion, according to the Wall Street Journal. BioCatch makes software that watches how you physically use your phone or computer to figure out whether you're really you.

Here's how it works. When you log in to your bank account, the system checks your username and password. But once you're in, most systems stop paying attention. BioCatch keeps watching. It notices things like how fast you type, how you move your mouse, and how you tap your screen. Over time, it learns your habits. If someone steals your password and logs in as you, the software can tell something is off because that person types or moves differently than you do. It's like a neighbor who doesn't check your ID but recognizes you by the way you walk.

The acquisition follows a partnership announced September 3, 2025 between Nasdaq Verafin and BioCatch to combine their technologies and curb payments fraud (Reuters). That deal paired BioCatch's behavior-tracking software with Verafin's financial crime platform, pushing the detection deeper into the payments process.

BioCatch has been working with big banks for about a decade. In April 2015, Early Warning, a group owned by five of the largest U.S. banks, teamed up with BioCatch to prevent fraud at U.S. banks (Reuters). Early Warning runs Zelle, the instant-payment service many people use to send money to friends and family. That deal put BioCatch's software alongside Zelle's own fraud controls well before instant-payment scams became the major problem they are today.

BioCatch has had other owners before. In May 2024, a private equity firm called Permira bought a majority stake in BioCatch, valuing the company at $1.3 billion (BioCatch). Visa's $2.4 billion price tag is about 85% higher than that, in under two and a half years. That gap could mean BioCatch grew its business significantly, or that Visa paid extra to lock down a technology it considers important, or both.

For Visa, the reasoning is simple. The company faces a growing type of fraud where scammers talk people into authorizing a payment themselves, or where thieves take over someone's account and send money. Because the account holder approves the transaction, the payment looks completely normal to the bank's existing fraud systems. BioCatch's software can catch something wrong before the money moves by noticing that the person at the keyboard doesn't behave like the real account owner. Owning that technology instead of renting it lets Visa build it more tightly into the fraud tools it already sells to banks.

For Visa's competitors, the deal means one fewer independent fraud-detection company available to partner with or buy. Firms that relied on BioCatch as a neutral provider may now need to reconsider whether a Visa-owned BioCatch changes how shared fraud-detection networks operate.

The broader context here is that fraud has shifted toward scams where victims are tricked into sending money themselves. When a scammer convinces you to authorize a transfer, every system downstream sees a normal transaction. Watching how you behave is one of the few ways to step in before the money leaves your account. Visa is paying $2.4 billion for that early-warning ability, and the premium over last year's valuation suggests the bidding was serious.

Whether that price was worth it depends on two things. First, can Visa plug BioCatch into its network without slowing down the moment you tap to pay? Second, can the technology keep spotting fake behavior as scammers use AI tools to imitate real human typing and clicking more convincingly? Neither question has an answer yet, and $2.4 billion is what Visa is paying to bet it knows the right one.