IronVest vs BioCatch
IronVest
IronVest is a New York company that sells an intent verification layer for banks and fintechs. Its ActionID technology uses the device camera to check the customer's face while capturing the transaction details shown on screen, then cryptographically binds the two before a payment is released. For wires, Zelle, ACH, RTP/FedNow and SWIFT initiation, the customer confirms the amount, recipient and bank on their own device, and the bank receives a yes or no result with a signed record of what was approved. IronVest says this can replace callbacks, OTP step-ups and manual review queues for verified actions. A second product, KYRi, assesses recipient risk before funds move and is offered through an early access programme. ActionID is delivered as an SDK or API for iOS, Android and web, and is listed on AWS Marketplace and Microsoft Marketplace.
Pros
- Approval is bound to the amount, recipient and bank shown to the customer, and screen capture is used to detect altered transaction details
- Covers several payment rails, including domestic and international wires, SWIFT, Zelle, ACH and RTP/FedNow
- Each approved transaction produces a cryptographically signed record showing amount, recipient and customer biometric
Things to check
- Verification depends on a device camera and a brief face capture at the point of approval
- KYRi, the recipient-side product, is offered through an early access programme with a small group of banks and fintechs
Pricing: AWS Marketplace lists a 12-month contract at $120,000.00 for up to 10 thousand ActionID users. Larger deployments are priced per customer by quote.
BioCatch
BioCatch is a fraud detection platform for banks and other financial institutions. It was founded in 2011, is based in Tel Aviv and has offices in cities including New York, London and São Paulo. As people use digital banking, it collects more than 3,000 anonymised data points, such as keystroke and mouse activity, touch screen behaviour and device signals, and uses machine learning models to tell criminals apart from genuine customers. Its Scams360 product looks for signs of manipulation during a session, such as hesitation, segmented typing or an active phone call, which applies to authorised push payment fraud where the genuine customer makes the transfer. BioCatch Trust lets member banks share risk intelligence on receiving accounts before payment. Permira funds took a majority stake in 2024, and in August 2026 Visa signed an agreement to acquire BioCatch, subject to regulatory approvals.
Pros
- Collects more than 3,000 anonymised data points, including keystroke and mouse activity and touch screen behaviour
- Looks for signs of manipulation even when victims use their own device and credentials, the pattern in authorised push payment scams
- BioCatch Trust flags suspicious receiving accounts to the sending bank in real time before payment execution, with networks in Australia and Argentina
Things to check
- Signal collection needs BioCatch JavaScript on the bank's web pages and its SDKs inside mobile apps
- Ownership is changing: Visa's agreement to acquire BioCatch is subject to regulatory approvals and is expected to close by the end of Visa's fiscal second quarter of 2027
Pricing: Not published; contact sales