Visa has agreed to buy fraud-intelligence provider BioCatch for $2.4 billion in cash, a deal reported by Reuters that puts behavioral biometrics deeper inside the global payments system. BioCatch analyzes signals such as keystroke timing, mouse movement, touchscreen behavior, and device handling to distinguish legitimate users from fraudsters before a transaction reaches checkout.

For small businesses that accept card payments, the acquisition is not just a back-office technology story. Fraud that starts at the account or identity layer often becomes a chargeback, processor review, or blocked payment at the merchant level. If Visa can detect more fraud before authorization, the benefits could eventually reach small merchants through fewer disputed transactions and stronger network-level protections.

BioCatch adds session-level fraud detection to Visa’s payment network

Traditional card-fraud tools evaluate a transaction after a purchase attempt is made, using signals such as amount, merchant category, location, and card history. BioCatch works earlier in the user journey by monitoring how someone interacts with a banking app, website, or payment flow. The goal is to spot account takeover, impersonation, coercion, or mule activity before a payment is initiated.

Visa has described the deal as part of an upstream fraud strategy. Instead of waiting for a suspicious transaction to trigger a decline or chargeback, the company wants more intelligence at the login, account-opening, and session-behavior level. BioCatch says its platform helps protect hundreds of millions of users and more than a billion devices, although those operating figures come from company and deal materials rather than independent public audits.

The deal expands Visa’s AI fraud stack after Featurespace

The BioCatch acquisition follows Visa‘s purchase of Featurespace, a real-time payments protection company, and reflects a broader race among payment networks to turn fraud prevention into a core infrastructure product. Mastercard made a similar move when it acquired threat-intelligence company Recorded Future.

The competitive logic is clear. AI-enabled scams are getting better at mimicking legitimate transaction behavior, while account takeover and social-engineering fraud increasingly happen before a card transaction reaches a merchant. A layered stack that combines session-level behavioral biometrics with transaction-level scoring gives payment networks more chances to stop fraud before it becomes a dispute.

Visa has said it has invested more than $13 billion in technology and infrastructure over the past five years to fight fraud. The BioCatch deal is expected to close by the end of Visa’s fiscal second quarter of 2027, subject to regulatory approval.

Small merchants may benefit, but only if the tools reach their processors

Small businesses are several steps away from where behavioral biometrics usually operates. BioCatch’s technology is typically used by banks, issuers, and financial platforms. Merchants do not directly control how an issuing bank evaluates a login session or whether a payment network uses behavioral signals before authorization.

That distance matters. If the acquired technology is reserved mainly for large banks or enterprise processors, the small-business benefit could be indirect and slow. If Visa embeds the signals more broadly across its network and makes them available through processors, small merchants using platforms such as Stripe, Square, PayPal, or bank merchant accounts could see fewer fraudulent authorizations and fewer chargebacks over time.

The strongest near-term takeaway for small businesses is not that their payment workflows will change immediately. It is that fraud prevention is moving upstream, and merchants should expect processors to adjust authentication options, chargeback rules, and risk controls as network-level tools become more sophisticated.

Chargebacks remain the immediate fraud risk for small businesses

Account takeover, stolen credentials, and social-engineering scams often become merchant problems only after the payment is reversed. A fraudulent transaction can produce a chargeback, extra fees, lost inventory, and higher processor scrutiny. For a small business with thin margins, a small number of disputes can create real operational pressure.

Large merchants often have dedicated fraud teams and custom processor arrangements. Small businesses usually rely on default processor settings. The fraud exposure small businesses face from automated and AI-enabled attacks extends beyond card payments, but card disputes remain one of the fastest ways fraud reaches the merchant. That makes network-level improvements more important, but it also means merchants should not wait for Visa’s integration to do the basic work of reducing exposure.

Small businesses should strengthen payment fraud controls now

  • Review your chargeback liability terms. Check your merchant agreement to understand when fraud liability falls on your business, especially for card-not-present transactions.
  • Turn on available fraud filters. Enable tools such as address verification, CVV checks, velocity limits, block lists, and risk scoring in your payment platform.
  • Use 3D Secure for online transactions where appropriate. Visa Secure and similar authentication tools can shift liability in some cases when authentication succeeds.
  • Protect business banking and payment accounts. Use multi-factor authentication for every account connected to merchant deposits, payment processing, refunds, or accounts payable.
  • Track chargeback rates monthly. A rising dispute rate is an early warning that fraud exposure is increasing and that processor scrutiny may follow.
  • Read processor policy updates. Changes to Visa fraud tools or chargeback procedures usually reach merchants through processor notices that are easy to overlook.

The key question is whether network-level fraud intelligence reaches small merchants

The BioCatch acquisition gives Visa another layer of AI-powered fraud intelligence at a time when scams are becoming harder to detect at checkout alone. The unresolved question is distribution: will the technology mainly strengthen products sold to large issuers, or will it flow through payment processors in a way that materially reduces fraud exposure for small merchants?

Small businesses should track the integration timeline, processor adoption, and any changes to authentication or dispute rules after the deal closes. Until then, the practical move is to treat Visa’s acquisition as a signal of where payment security is heading while continuing to tighten the controls already available inside existing payment platforms.