BioCatch launches AiRE to detect AI agents in banking sessions

For the head of fraud at a regional bank

BioCatch launched BioCatch AiRE (Agentic AI Risk Essentials), a capability that detects AI agents acting on behalf of accountholders or at the behest of bad actors before any money moves, according to a Finextra article; the article gives no date.1

The company's reason for building it, as stated by Chief Product Officer Ayelet Eliezer, is that banks must first detect whether a human or an agent controls a session and whether its intent is genuine or malicious, whatever their policy on agents.12 BioCatch delivers AiRE through existing customer integrations, and continuous session monitoring lets it detect agents and assess their behavior so banks can build policies on which agents to trust.12

AiRE signals cover behavioral anomalies, unusual interaction patterns such as synthetic inputs, the browser permission profile, agent infrastructure and agent declaration.12

Detection will also cover cloud-based agents like Muse, and banks using it will receive indicators of potentially risky agentic activity.12

In BioCatch customer sessions, close to half of all detected agentic interactions were seen at account opening, while the rest were spread across logins, account management and transactions, including electronic fund transfers, wires and faster payments.12

BioCatch's 2026 The future of digital trust survey of 1,440 global banking leaders found 80% said their institution had already encountered attacks using agentic AI and 84% believe agents could be the industry's largest exploitable vulnerability in the next year; an American Banker survey found 80% of consumers believe their bank should be able to tell a customer from the customer's agent.12

Why it matters

Agent activity is not confined to payments: by BioCatch's own session data, close to half appeared at account opening, so onboarding teams need agent policy as well as payments teams. That data comes from one vendor's customers and may not reflect the wider market, and detection alone decides nothing, so banks still have to set their own rules on which agents to allow, block or review.

From the brief

Our take. Almost half the AI agents BioCatch sees show up at account opening, not at the wire screen. The agent policy you are drafting should start where no customer exists yet: onboarding.

Action. Fraud operations: Add agent-detection checks and step-up rules to digital account opening before extending agent controls to wires and faster payments.

From our records

Sources

  1. ReportBioCatch launches AiRE to detect AI agents in banking sessions Finextra
  2. Also reported byBioCatch moves to unmask AI agents before money moves FinTech Global