BioCatch: behavioural fraud intelligence, device risk and recipient-account networks

These scenarios use different evidence. An unfamiliar person opening an account may expose low familiarity with identity data; an account takeover can instead appear as a departure from established behaviour. A scam can involve the genuine user throughout. BioCatch’s Scams360 description addresses that third situation by examining interaction patterns and transaction context for signs of coercion or deception, rather than relying only on whether the correct person authenticated.[4]

BioCatch Trust adds a network view of the recipient account. Participating institutions share intelligence that can inform the sending bank before a transfer leaves the customer’s account. A suspicious recipient can trigger that bank to suspend and investigate the payment. BioCatch describes national deployments and privacy controls including pseudonymised identifiers and restricted access; the service’s usefulness depends on the network and accounts contributing intelligence.[8]

BioCatch’s Microsoft Marketplace entry is a private-offer listing and identifies Azure-based delivery. The retrieved public overview does not show a monetary subscription tariff, and the plans tab does not expose a public amount. Commercial pricing therefore needs the applicable offer, including the solution scope and delivery arrangements. The listing establishes a procurement route; it does not by itself establish an included module bundle, transaction allowance or service-level commitment.[9]

The publicly accessible Product Descriptions page has an explicit historical boundary: it applies to contracts closed by 30 June 2025. It describes earlier service bundles and components, including client SDKs, server APIs and investigation tools. Those descriptions can explain an older customer’s agreement, but they do not establish the standard entitlements of a new Connect 2.0 order. Renewal, fees and purchased components need to follow the customer’s actual agreement.[10]

The 19 November 2025 Connect 2.0 release describes consolidating application, behavioural, device, network and transaction collection into Align, with scoring interfaces and hooks into orchestration platforms. BioCatch announced immediate availability to new and existing customers. This establishes a released platform architecture, while an institution’s implementation still has to connect its channels, identify the decision points and route the returned intelligence into its operating systems. The release does not provide a universal project duration.[11]

Rule simulation forms a separate stage before a policy affects production. BioCatch’s June 2024 release describes testing a rule against transaction flows and assessing its effect on alert volumes and fraud detection. It specifically recognises that a misconfigured rule can increase false positives and disrupt workflows. That makes simulation relevant to the institution’s own intervention policy, beyond verifying that the SDK sends data and the API returns a score.[12]

DeviceIQ extends the evidence available before an account holder logs in. BioCatch describes checks for compromised operating systems, device cloaking, missing sensor information and injected code, alongside persistent recognition through device upgrades. Its cross-institution device intelligence is described as pseudonymised. These signals supplement account and session analysis; the product’s advertised detection and false-positive claims do not establish performance for a particular bank’s devices, population or threat mix.[6]

BioCatch’s customer portal provides release information, technical materials, case creation and case history. Customers can request access through the support page. The published portal terms make its material confidential and restrict it to internal use, with individual credentials that must not be shared. These portal rules govern documentation access; they are separate from a customer’s subscription, support entitlement and incident-response agreement.[13][14]

The company describes a service team comprising solution engineers, threat analysts, engagement managers and global advisors working with banking teams. This supplies a route for integration questions and evolving fraud patterns alongside the ticket portal. Its public account of that service model does not publish a universal response clock or guaranteed time to resolve an incident.[19]

Under the public Data Processing Addendum, the subscribing institution acts as controller and BioCatch as processor for customer end-user data. The subscriber is responsible for the lawful basis, notices and authority to supply that data. The addendum also addresses return or deletion at the customer’s choice when applicable, with exceptions for legal obligations, authorised retention and dispute-related requirements. This is a contractual processing framework, not a statement that a behavioural signal can be collected for every purpose or retained indefinitely.[15]

BioCatch markets behavioural and device capabilities as additions to strong customer authentication. Its description covers device persistence and how a customer enters a one-time passcode or other information. That is a description of supporting signals within an authentication flow; it does not itself certify an institution’s overall compliance or transfer responsibility for payment approval. The firm’s fraud score and investigative evidence enter the institution’s own authentication and decision process.[17]

Trust makes the decision boundary concrete: it sends recipient-account risk information to the sending institution, which can suspend and investigate an eligible transfer. The network supplies intelligence while the bank controls the payment action. Network participation and pseudonymisation are therefore material aspects of the service, alongside the risk assessment itself.[8]

The privacy notice identifies BioCatch Ltd. and its affiliates. It covers the company’s website, business contacts and related interactions, while end-user data processing through the service is addressed through the customer contract and Data Processing Addendum. The notice should therefore be read according to the relationship involved: a visitor requesting information and a banking customer whose session is analysed are different processing contexts.[16]

On 3 August 2026, Visa announced a definitive agreement to acquire BioCatch from Permira-advised funds and other shareholders for US$2.4 billion in cash. The announcement makes completion subject to customary closing conditions and regulatory approvals, and gives an expected close by the end of Visa’s second fiscal quarter of 2027. This is an announced acquisition agreement, not a completed-ownership statement. BioCatch’s accompanying management note describes its intended position within Visa’s Value-Added Services organisation after acquisition.[18][19]

Operator

BioCatch Ltd. and affiliates

Service scope

Behavioural and device intelligence for account-opening fraud, account takeover, scams, mule accounts and recipient-account risk.

Customer types

Retail banks; Digital banks; Financial institutions; Fraud operations teams; Financial-crime investigators

Delivery

SaaS; API

Pricing publication

Quote only

Platforms

Connect; Account Opening Protection; Account Takeover Protection; Mule Account Detection; Scams360; DeviceIQ; DeviceIQai; BioCatch Trust

Integrations

Align SDK; getScore; Push API; Insights Query Engine for Snowflake; Rule Manager; Fuse; Link; Microsoft Azure

Pricing scope

Private-offer procurement; the inspected public listing does not publish a monetary tariff.

Implementation

Instrument digital channels with Align, connect score delivery and orchestration, configure policy and simulate rules before production.

Support

Customer portal, documentation and case management, with solution engineers and fraud specialists; service levels follow the agreement.

Permissions and regulatory scope

Fraud intelligence and authentication-support software. Institutions retain their data-controller obligations and payment decision authority.

Provider metadata checked 21 Oct 2026Source 1Source 2Source 3Source 4Source 5Source 6Source 7Source 8Source 9Source 11Source 12Source 13Source 19Source 15Source 16

The Argentina launch provides a named example of the network model. On 26 May 2025, Banco Galicia, Naranja X and Santander announced participation in BioCatch Trust Argentina. The announcement describes recipient-account information becoming available before eligible payments are processed and includes statements from the participating banks. It identifies Australia’s November 2024 launch as the earlier national network. The evidence establishes those named launches; it does not demonstrate universal inter-bank coverage or a measured reduction in each participant’s losses.[20]

Mule investigation adds a longer account-history view to an individual payment alert. BioCatch’s examples include a dormant account becoming active, repeated logins without transactions, changes in devices or account control, and unusual payment frequency. Link visualises the relationships behind those events so an investigator can examine a cluster. The product was formerly called Scout; that earlier name refers to the same investigative capability, rather than a separate current provider.[5]