Sells banks behavioral-biometric and device intelligence that runs inside their digital banking sessions to flag account takeover, scams, money-mule accounts and account-opening fraud, licensed directly and through digital-banking and onboarding platforms; being acquired by Visa.
What is BioCatch, and which banks use it?
BioCatch, founded in 2011 and based in Tel Aviv, sells behavioral-biometric fraud detection that reads how customers type, swipe and hold devices during digital banking sessions. Permira-advised funds hold a majority stake; Visa agreed in August 2026 to buy it for $2.4 billion, with closing pending. Among our 100 banks, Wells Fargo (signed 2025), Bank of America and Citigroup are named users. Pricing is not published; BioCatch sells through sales-led contracts and partner platforms.
Category
Founded
2011
Headquarters
Tel Aviv, Israel (with a US office in New York)
Ownership
Private; majority-owned since 2024 by funds advised by Permira (via its Growth Opportunities fund), in a secondary deal valuing BioCatch at $1.3 billion. On August 3, 2026 Visa (NYSE: V) signed a definitive agreement to acquire BioCatch for $2.4 billion in cash, pending regulatory approvals and expected to close by the end of Visa's fiscal second quarter of 2027.[6][7][1]
Deployment
SaaS; collected through BioCatch's Align SDK in the bank's web and mobile apps, and available through Q2, Alkami and Alloy integrations
Pricing
Sales-led enterprise licensing per institution, plus distribution through digital-banking and onboarding platform partners (Q2, Alkami, Alloy); no figures disclosed. · not published
Banks among the 100
3
Related
- On August 3, 2026 Visa signed a definitive agreement to acquire BioCatch from funds advised by Permira and other shareholders for $2.4 billion in cash; the deal needs regulatory approvals and is expected to close by the end of Visa's fiscal second quarter of 2027, with BioCatch joining Visa's Value-Added Services organization.
- Permira first took a minority stake in early 2023 and agreed on May 2, 2024 to buy a majority position, primarily from Bain Capital Tech Opportunities and Maverick Ventures, in a secondary transaction at a $1.3 billion enterprise valuation; BioCatch said the deal closed in Q3 2024.
- BioCatch says it exceeded $185 million in annual recurring revenue at the end of 2025, added 90 customers that year including Wells Fargo, and counts three of the four largest US banks by assets as users (vendor-reported, January 2026).
- Visa's release describes BioCatch as serving more than 350 banking clients in 21 countries, protecting 760 million users on 1.8 billion devices (company figures, August 2026); an American Banker report notes these counts have not been independently verified.
- BioCatch Trust, its real-time inter-bank intelligence-sharing network, runs in Australia (since November 2024) and Argentina (since May 2025); BioCatch told American Banker in August 2026 that the network does not yet operate in the US.
- Recent launches include Scams360 (July 2025), Connect 2.0 with the Align SDK and BioCatch Link (November 2025) and DeviceIQ device intelligence (March 2026); partnerships with Alloy (May 2025) and Nasdaq Verafin (September 2025) extend distribution to mid-market banks.
- Pricing is not published; BioCatch's site has no pricing page, and it sells through direct contracts and through platform partners such as Q2, Alkami and Alloy.
What does BioCatch sell to banks?
| Product | What it does | Status |
|---|---|---|
| BioCatch Connect 2.0[17] | The core session-scoring platform for account takeover, account-opening fraud, scams and mule accounts; version 2.0 (November 2025) unified signal collection in the Align SDK and improved malware detection. | Generally available |
| BioCatch Link[17] | Formerly Scout; maps connections between users, devices and payments to surface clusters of mule accounts and coordinated fraud for joint fraud and AML casework. | Generally available |
| Scams360[16][8] | Behavior-based scam detection launched July 17, 2025, aimed at identifying authorized push payment fraud, including romance, investment, business-email-compromise and purchase scams, in real time. | Generally available |
| DeviceIQ[18] | Device identification and intelligence launched March 11, 2026: persistent device recognition across web and mobile, pre-login detection of jailbroken or tampered devices, and network context on devices previously used for mule, scam or takeover activity. | Generally available |
| Account-opening protection (via Alloy)[14] | BioCatch's end-to-end account-opening fraud solution, integrated into Alloy's identity and fraud platform in May 2025 so Alloy clients can add it without custom integration. | Generally available |
| BioCatch Trust[12][15][4] | Real-time inter-bank network that scores the receiving account of a transfer and warns the sending bank; live in Australia (launched November 2024 with ANZ, CBA, NAB, Suncorp Bank and Westpac) and Argentina (May 2025), not yet in the US as of August 2026. | Limited availability |
How much does BioCatch cost?
How it is charged: Sales-led enterprise licensing per institution, plus distribution through digital-banking and onboarding platform partners (Q2, Alkami, Alloy); no figures disclosed..
BioCatch does not publish a price list.
Pricing is not published; BioCatch's site has no pricing page and lists no plans or prices, and its partner integrations (Q2, Alkami, Alloy) do not disclose BioCatch pricing either.
Which banks use BioCatch?
| Bank | What | Status |
|---|---|---|
| Wells Fargo | BioCatch behavioral and device fraud-detection software; named by BioCatch as a new customer in 2025, and by American Banker as one of three of the four largest US banks running BioCatch software.[8][4] | In production |
| Bank of America | Behavioral biometrics to tell genuine customers from fraudsters and bots in digital banking sessions (named as a user by American Banker, March 2026).[5] | In production |
| Citigroup | Behavioral biometrics to tell genuine customers from fraudsters and bots in digital banking sessions (named as a user by American Banker, March 2026); Citi also invested in BioCatch in 2020.[5][10] | In production |
Among the 100 largest US banks on this site, from sources that name the bank: the bank, BioCatch or the press. Status is the furthest stage a source confirms.
What is BioCatch Connect?
BioCatch's fraud and financial-crime platform, upgraded to Connect 2.0 in November 2025: the Align SDK collects more than 3,000 behavioral, device, network, transactional and application signals per session, and BioCatch Link (formerly Scout) maps connections between users, devices and payments to find mule networks.[17]
What has BioCatch done, and when?
- Aug 3, 2026
- Mar 11, 2026
Launches DeviceIQ[18]
BioCatch launched DeviceIQ, a device identification and intelligence product that checks device health before login and shares device risk across its network.
- Jan 28, 2026
Reports $185 million ARR and Wells Fargo as a customer[8]
BioCatch said it exceeded $185 million ARR, added 90 customers in 2025 including Wells Fargo, and onboarded more than 70 community banks and credit unions through the Alkami platform (vendor-reported).
- Nov 19, 2025
Releases Connect 2.0[17]
Connect 2.0 added the Align SDK, which unifies more than 3,000 signals, and BioCatch Link (formerly Scout) for mapping mule networks.
- Jul 17, 2025
Launches Scams360[16]
BioCatch released Scams360, a behavior-based tool for detecting authorized push payment and other social-engineering scams in real time.
- May 26, 2025
BioCatch Trust expands to Argentina[15]
Banco Galicia, Naranja X and Santander formed BioCatch Trust Argentina, the network's first market in the western hemisphere.
- May 13, 2025
Partnership with Alloy[14]
BioCatch's account-opening solution was integrated into Alloy's platform, available to the more than 700 financial institutions and fintechs that work with Alloy.
- Dec 4, 2024
Integration with Q2's digital banking platform[13]
BioCatch announced an integration with Q2's Digital Banking Platform through the Q2 Partner Accelerator Program.
- Nov 20, 2024
Launches BioCatch Trust network in Australia[12]
ANZ, Commonwealth Bank, NAB, Suncorp Bank and Westpac joined BioCatch Trust Australia, a pilot inter-bank network that scores the receiving account of a payment in real time.
- May 2, 2024
Permira agrees to take majority stake at $1.3 billion[6][7]
A Permira-advised fund agreed to buy a majority position, mainly from Bain Capital Tech Opportunities and Maverick Ventures, at a $1.3 billion enterprise valuation; BioCatch said it had passed $100 million ARR in 2023. BioCatch reported the closing in its Q3 2024 update.
- Oct 19, 2021
Gadi Mazor becomes CEO[11]
BioCatch promoted COO Gadi Mazor to chief executive; Howard Edelstein stayed on as board chairman.
- Sep 30, 2020
Barclays, Citi, HSBC and NAB invest $20 million[10]
Four banks invested $20 million, extending the Series C to $168 million, and joined American Express Ventures on a new BioCatch Client Innovation Board.
- Apr 15, 2020
$145 million Series C led by Bain Capital[9]
Bain Capital Tech Opportunities led a $145 million Series C, joined by Industry Ventures and existing shareholders including American Express Ventures, Maverick Ventures and OurCrowd.
- Jan 1, 2011
What do banks use BioCatch for?
| Use | What it does | Status | Use case |
|---|---|---|---|
| Account takeover detection in digital banking[17][5] | Continuous scoring of login and in-session behavior, device and network signals to flag sessions run by fraudsters, bots or remote-access tools. | In production | Fraud detection |
| Scam detection (authorized push payments)[16][8] | Scams360 uses behavioral signals to spot genuine customers being manipulated into sending money, covering romance, investment, business-email-compromise, purchase and other social-engineering scams. | In production | Fraud detection |
| Mule account detection[17][6] | Behavior-based mule detection and BioCatch Link map links between accounts, devices and payments so fraud and AML teams can act on laundering networks. | In production | AML / KYC |
| Account-opening fraud[14] | Behavioral checks during online applications to flag synthetic or stolen identities, offered directly and inside Alloy's onboarding platform. | In production | Fraud detection |
| Device and malware risk[18][17] | DeviceIQ detects jailbroken or tampered devices before login, and Connect's malware model flags sessions showing malware-driven behavior. | In production | Cybersecurity |
| Telling AI agents from customers[5] | BioCatch's CEO told American Banker in March 2026 that it is developing ways to detect AI agents in a banking session and judge whether they act with the customer's authority. | Pilot | Generative & agentic AI |
What has BioCatch disclosed in numbers?
| Metric | Value | As of |
|---|---|---|
| Acquisition price agreed by Visa | $2.4 billion in cash (pending)[1] | Aug 3, 2026 |
| Valuation at Permira's majority purchase | $1.3 billion total enterprise valuation[6] | May 2, 2024 |
| Annual recurring revenue (vendor-reported) | More than $185 million, with more than $20 million of new ARR in Q4 2025[8] | Dec 31, 2025 |
| Banking clients and reach (company-reported) | More than 350 banking clients in 21 countries; 760 million users on 1.8 billion devices[1] | Aug 3, 2026 |
| Financial institutions and sessions (vendor-reported) | More than 370 financial institutions; 19 billion user sessions a month[20] | Jun 30, 2026 |
| Fraud prevented (vendor estimate) | More than $4 billion in 2025[8] | Dec 31, 2025 |
| Series C funding | $145 million led by Bain Capital Tech Opportunities, extended to $168 million with $20 million from Barclays, Citi, HSBC and NAB[9][10] | Sep 30, 2020 |
“Real-time insights into customer intent continue to grow increasingly essential for institutions to establish trust within digital banking sessions.”[1]
Gadi Mazor · CEO, BioCatch · Aug 3, 2026
“BioCatch will help our clients stop fraud before it reaches the point of payment.”[1]
Andrew Torre · President of value-added services, Visa · Aug 3, 2026
“This recognition from QKS Group validates our core conviction: behavioral intelligence is the foundation of modern fraud prevention.”[19]
Ayelet Eliezer · Chief Product Officer, BioCatch · Jun 30, 2026
Who runs BioCatch?
Which rules apply to a bank using BioCatch?
| Authority | Why it matters here | Documents |
|---|---|---|
| Federal Reserve | BioCatch's session-risk scores come from machine-learning models a bank does not build itself; under the April 2026 interagency model risk guidance (SR 26-2) a bank using them for fraud decisions is expected to inventory, validate and monitor these vendor models. | SR 26-2 |
| OCC | Embedding BioCatch's SDK in digital banking apps and sending it session data is a third-party relationship under OCC Bulletin 2023-17, and the pending change of ownership to Visa is the kind of event that guidance expects banks to reassess; OCC Bulletin 2026-13 sets the model-risk expectations for its scores. | OCC Bulletin 2023-17 OCC Bulletin 2026-13 |
| FinCEN | FinCEN's 2024 deepfake alert flags synthetic identities and impersonation used to open accounts and take over existing ones, the threats BioCatch's account-opening and scam products are bought against; mule-account findings may feed a bank's suspicious activity reporting. | FIN-2024-Alert004 (Deepfake Media) |
| CFPB | Where a BioCatch account-opening score contributes to declining a credit card or loan application, the bank still owes ECOA/Regulation B and FCRA adverse-action notices with the principal reasons for that decision. | ECOA / Regulation B adverse action (15 U.S.C. 1691(d); 12 CFR 1002.9) FCRA adverse action and credit-score disclosures (15 U.S.C. 1681m, 1681g(f)) |
| EU AI Act | For banks deploying BioCatch in the EU, AI used solely to detect financial fraud is carved out of the Act's high-risk credit-scoring category, unlike the credit models a bank may run alongside it. | Regulation (EU) 2024/1689 |
Linked authorities have a page in the AI Regulation Tracker; the others are named for completeness.
What should a bank note before buying BioCatch?
Analysis by BankingNewsAI from the sources cited on this page. Observations, not advice or a recommendation.
01
Pricing is not published
BioCatch lists no plans or prices; it sells through sales-led contracts and through platform partners such as Q2, Alkami and Alloy.
02
Ownership is changing
Visa's $2.4 billion acquisition was agreed in August 2026 but had not closed as of September 2026; after closing, a bank's fraud vendor will be part of a card network it also negotiates with, which American Banker flagged for bank buyers.
03
Scale and results are company-reported
Customer counts, ARR, sessions analyzed and the estimated $4 billion in fraud prevented come from BioCatch and Visa releases; American Banker noted the counts have not been independently verified.
04
Customer counts vary by release
BioCatch reported 237 customers (Q3 2024), 340 (end of 2025), more than 350 (Visa, August 2026) and more than 370 financial institutions (end of H1 2026); the definitions and dates differ.
05
The inter-bank network is not in the US yet
BioCatch Trust runs in Australia and Argentina; BioCatch told American Banker in August 2026 that it does not yet operate in the US.
What are the alternatives to BioCatch?
Feedzai
RiskOps platform for bank fraud, scam and AML prevention: transaction scoring, behavioral biometrics and network intelligence.
Featurespace
Real-time behavioral fraud and AML scoring for banks and processors (The Featurespace Platform, formerly ARIC Risk Hub); a Visa unit.
Sardine
Fraud and AML platform: device and behavioral signals, transaction monitoring, sanctions screening and AI agents for alert review.
Socure
Identity verification, fraud scoring and watchlist screening for account opening and login, run on its RiskOS decisioning platform.
Alloy
Identity and fraud prevention platform: onboarding KYC/KYB, fraud and login risk scoring, AML monitoring and data orchestration.
Pindrop
Phone-channel fraud scoring, passive caller authentication and voice deepfake detection for bank contact centers.
How much does BioCatch cost?
BioCatch does not publish pricing. Its website has no pricing page, and it sells through sales-led enterprise contracts with banks and through partner platforms, including Q2's digital banking platform, Alkami and Alloy's onboarding platform, none of which disclose BioCatch prices. A bank should expect a quote scoped to its products (account takeover, scams, account opening, mule detection) and volumes.
Which banks use BioCatch?
Among the 100 largest US banks, BioCatch named Wells Fargo as a new customer in 2025, and American Banker reported in March 2026 that Bank of America and Citi use its technology. BioCatch says three of the four largest US banks by assets use it. Outside the US, ANZ, Commonwealth Bank, NAB, Suncorp Bank and Westpac joined its Trust network in Australia.
Who owns BioCatch?
BioCatch is privately held, with funds advised by Permira holding a majority stake bought in 2024 at a $1.3 billion valuation. On August 3, 2026 Visa agreed to acquire BioCatch for $2.4 billion in cash. The deal is pending regulatory approvals and is expected to close by the end of Visa's fiscal second quarter of 2027.
Is BioCatch a bank or regulated financial institution?
No. BioCatch is a software vendor that sells fraud-detection technology to banks and other financial institutions. The banks that use it remain the supervised entities and must manage BioCatch as a third-party relationship and validate its models under their regulators' guidance.
What does BioCatch actually measure?
BioCatch says its SDK collects more than 3,000 anonymized data points during a digital banking session, including keystroke and mouse activity, touch-screen behavior, device handling, jailbroken devices and AI agent usage. Its machine-learning models use these signals to judge whether the user is the genuine customer, a fraudster, a bot, or a customer being coached by a scammer.
What happens to BioCatch customers after the Visa deal?
BioCatch's CEO wrote that after the acquisition the company will keep operating as before, as part of Visa's Value-Added Services organization, with its leadership team intact and the same service to existing financial institutions. The deal had not closed as of September 2026.
BioCatch vs Featurespace: what is the difference?
Both are fraud vendors tied to Visa: Visa completed its purchase of Featurespace in December 2024 and agreed to buy BioCatch in August 2026. BioCatch focuses on behavioral and device signals inside digital banking sessions (logins, scams, mule accounts, account opening), while Featurespace's ARIC platform scores payment and transaction events.
- Visa to Acquire BioCatch
- Visa to acquire BioCatch
- Joining Visa: What it means for our goals and our mission
- What Visa's $2.4B BioCatch deal means for your bank
- Agentic AI shopping bots are coming. Banks need to be ready
- Permira to Acquire Majority Position in BioCatch at $1.3bn Valuation
- BioCatch continues rapid expansion through Q3, grows ARR by 40% year-over-year
- BioCatch finishes 2025 with best quarter in company history
- BioCatch Secures $145 Million Investment from Bain Capital
- Global Banks Invest $20 Million in BioCatch With AmEx Ventures
- Behavioral Biometrics Market Leader BioCatch Appoints Gadi Mazor as CEO
- BioCatch unveils world’s first behavior-based financial crime intelligence-sharing network
- BioCatch announces integration with Q2’s digital banking platform
- BioCatch announces partnership with Alloy
- Argentinian banks and fintechs launch real-time fraud and scams intelligence-sharing network
- BioCatch delivers Scams360 to help banks advance detection of emerging scam types
- BioCatch Connect 2.0 delivers advanced fraud- and financial crime-fighting capabilities to world’s banks
- BioCatch unveils DeviceIQ: Redefines how banks evaluate device risk in the AI era
- BioCatch takes top spot in SPARK Matrix™ for behavioral biometrics and device intelligence
- U.S. financial institutions report 130% spike in attempted impersonation scams
- The Leaders in Behavioral Biometrics | The BioCatch Story (undated page, retrieved 2026-09-24)
- Company | Meet the Team (undated page, retrieved 2026-09-24)
When a bank signs with BioCatch, you'll read it here first.
when a bank picks an AI vendor, or a vendor ships for banks, it is in the next morning's brief · six sourced stories · 7 am ET · free
plus every tracker, bank and agent page update, the morning after · leave any morning