Fraud Prevention, Identity Verification & Trust
Fraud prevention and identity verification grew up in financial services — KYC compliance, transaction risk scoring, chargeback management — sold to fraud and compliance teams rather than CISOs. Cybersecurity's identity segment (03a) grew up in enterprise IT. The two are converging into a single trust problem, because the modern attack is the same on both sides: a stolen or synthetic identity, a hijacked session, an AI-generated impersonation. The convergence produced the adjacency's landmark print: Visa–BioCatch ($2.4B, announced August 2026, ~13x ARR) — a payments network buying behavioral biometrics — following Mastercard–Recorded Future (~$2.65B, 2024), a payments network buying threat intelligence (11).
The market and its players
The category splits into three lanes. Identity verification / KYC: Socure ($743M raised; auto-approving up to 98% of verifications on its identity graph; 134% net dollar retention reported for Q1 2026), Persona, Jumio, Onfido (acquired by Entrust), Incode, and Veriff (Socure coverage). Fraud detection / transaction risk: Sift, Forter, Signifyd, Riskified (public), Sardine ($70M Series C, February 2025 — fraud, sanctions and risk scoring in one platform), Featurespace (acquired by Visa, 2024), and DataVisor. Behavioral & device intelligence: BioCatch (now Visa), Callsign, Darwinium, and device-fingerprinting incumbents (Fingerprint, iovation/TransUnion).
| Lane | Representative players | Buyer inside the customer |
|---|---|---|
| IDV / KYC | Socure, Persona, Jumio, Incode | Compliance / onboarding |
| Transaction fraud | Forter, Sift, Riskified, Sardine | Fraud / payments teams |
| Behavioral / device | BioCatch (Visa), Callsign, Fingerprint | Fraud + security jointly |
| Workforce IDV | Deel–Clarity print (11) | HR + security jointly |
The convergence mechanics
The attacker unified the markets before the vendors did. Account takeover uses phished enterprise credentials and drains consumer bank accounts with the same session-hijacking tradecraft (04a documents the SMB side); AI-generated deepfakes defeat both the KYC selfie check and the CFO's voice on a wire-approval call (15d). Consequently the same capabilities — behavioral biometrics, device intelligence, liveness detection, identity-graph analytics — sell into both markets, and vendors increasingly cross: workforce identity verification (hiring fraud, the Deel–Clarity acquisition, North Korean fake-IT-worker defenses) is precisely the midpoint, bought jointly by HR, security and compliance.
The acquirer set is the story. Payment networks (Visa, Mastercard), credit bureaus (TransUnion, Experian), and identity conglomerates (Entrust, GBG) are now repeat buyers of assets a cyber-only buyer list would misprice — Visa paid a premium multiple for BioCatch because the asset protects transaction volume, an economic logic no security platform can match. That widens exits for anything with an identity or fraud signal, and it imports payments-scale capital into the adjacency.
Updated 2026-08-16 18:47 UTC · © El Dorado Capital · el-doradocapital.com · Market intelligence for informational purposes only; not investment advice.