BioCatch
Behavioral biometrics platform that reads how a person moves and types to catch account takeover and social-engineering scams that credential checks miss, now mid-acquisition by Visa.
Visit Website ↗ + Add to CompareOverview
BioCatch analyzes how people physically and cognitively interact with a device — mouse movement, touch pressure, typing cadence, scroll behavior, and session navigation patterns — to distinguish a genuine account holder from a fraudster, a bot, or a real customer who is being actively coerced by a scammer. That last case is the company’s real differentiator: credential checks, device fingerprinting, and one-time passcodes all pass when the correct person is logged in and typing the numbers a scammer told them to type. Behavioral signals such as hesitation patterns, unusual navigation, or another person subtly guiding the session can flag authorized push payment (APP) scams that identity-based controls are structurally unable to see.
Founded in 2011 and headquartered in Tel Aviv, Israel, BioCatch built its business almost entirely around banks and other financial institutions, which use it across onboarding, login, and transaction monitoring to catch account takeover, mule-account activity, and social-engineering-driven payment fraud. The company says it passed $100 million in annual recurring revenue and turned profitable in 2023, then grew ARR roughly 43 percent year-over-year in the first half of 2024. In May 2024, Permira acquired a majority position in BioCatch in a secondary transaction valuing the company at $1.3 billion, buying out existing investors Bain Capital Tech Opportunities and Maverick Ventures while Sapphire Ventures and Macquarie Capital increased their stakes.
In August 2026, Visa announced a definitive agreement to acquire BioCatch outright from Permira and other shareholders for $2.4 billion in cash, with the deal expected to close by Visa’s fiscal Q2 2027 pending regulatory approval. Visa has said BioCatch will operate within its Value-Added Services division and continue serving banks directly, which suggests continuity of the product rather than a fold-in and shutdown — but the ownership picture is actively in transition as of this writing, and CISOs evaluating the vendor should track how the integration affects roadmap and independence post-close.
Innovation Matrix Assessment
The company reports continued product expansion into AI-driven scam and mule-account detection alongside 43 percent YoY ARR growth in H1 2024, a solid pace for a 13-year-old category leader rather than an early-stage startup.
Analyzes over 3,000 behavioral data points across the full account lifecycle -- onboarding, authentication, and transaction -- giving it broader operational reach than point tools focused only on login-time authentication.
Two major ownership transactions in under three years -- a $1.3B Permira majority-stake deal in 2024 and a pending $2.4B outright acquisition by Visa announced in August 2026 -- are independently reported financial events showing strong strategic demand for the technology.
BioCatch is a 13-year-old, revenue-scaled incumbent in behavioral biometrics rather than an emerging challenger; per this site's convention, established players at this scale are scored lower on disruption regardless of the quality of the underlying technology.
Reported ARR above $100M, profitability since 2023, and adoption across many banks are meaningful indirect proof points, but no independently published third-party red-team or detection-accuracy evaluation of the platform was found in this research.
Authorized push payment scams and AI-assisted social engineering are a fast-growing fraud category that credential- and device-based controls cannot address, keeping behavioral intent analysis directly relevant to bank fraud and security teams.
Why CISOs Should Care
For banks and fintechs, BioCatch catches fraud scenarios -- like a customer being coerced into a scam on a live phone call -- that pass every credential and device check because the legitimate user is the one typing.
What Makes It Different
Most identity and fraud tools verify who is present; BioCatch also tries to infer whether that person is acting freely, which is what lets it flag live social-engineering scams rather than only bot- or credential-based attacks.
The Matrix Verdict
68/100 — INCREMENTAL INNOVATOR
A mature, well-capitalized category leader with real revenue scale and back-to-back acquisition interest from Permira and now Visa; strong on relevance and momentum, appropriately moderate on disruption given its incumbent status, and worth watching through the Visa integration for roadmap continuity.
Editorial Note: Claims vs. Verified Findings
ARR ("$100M+"), profitability, and the 43 percent YoY growth figure are vendor-reported and not independently audited, though the $1.3B Permira and $2.4B Visa transaction values are independently reported by multiple financial and trade press outlets. No independently verified customer list or third-party efficacy testing was found.
Sources
Alternatives to BioCatch
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
CyberArk
The market-leading privileged access management vendor, extending from vaulted human credentials into machine identity and secrets management.