The constraint shaping this deal runs across the payments industry: AI-powered scams have changed the fraud environment faster than detection systems built to monitor it have adapted. Visa has agreed to acquire BioCatch, a cybersecurity firm, for $2.4 billion. The deal is the latest step in Visa's expansion of its value-added services division, which the company identifies as one of its fastest-growing businesses.
The mechanism behind the price is the threat category itself. AI-powered scams represent a different class of fraud problem than the categories conventional detection infrastructure was built to address. A cybersecurity firm positioned to operate against that specific threat class carries a valuation that reflects the difficulty of developing equivalent capability inside a network from scratch.
Where this acquisition sits in Visa's structure matters. Value-added services is the segment Visa has been building on top of its core payment network, adding capabilities that extend beyond transaction processing. Pulling BioCatch into that structure at $2.4 billion signals that Visa views fraud detection as something to own at the network level rather than source externally.
The specific unit driving that logic is where detection sits relative to the flow of transactions. Controls embedded in the network apply at every point of that flow. External cybersecurity tools operate alongside it. Visa's choice to acquire rather than to partner is a position on that architecture, taken at a moment when AI-powered fraud has become the payments industry's most active attack surface.