SurePay vs BioCatch
SurePay
SurePay provides account name checks that confirm whether the name entered for a payment matches the account held at the payee's bank. It began in 2016 as a start-up within Rabobank and is headquartered in Utrecht, with an office in London. Banks and payment service providers use its Verification of Payee service in the EU and its Confirmation of Payee service in the UK, which return match, close match or no match results inside their payment flows. Corporates can run single or bulk checks through an online portal or integrate an API. Other services include Swift pre-validation, BIC enrichment, a switch check for payees who have moved bank and fraud risk indicators for banks. NatWest uses SurePay for Confirmation of Payee, and Finance Denmark selected it in 2025 for a national Verification of Payee service. In June 2025 Carlyle Europe Technology Partners made a growth investment in SurePay alongside Rabo Investments.
Pros
- Covers both EU Verification of Payee and UK Confirmation of Payee, with a portal for corporates that do not integrate an API
- NatWest selected SurePay for Confirmation of Payee, citing its experience in the Dutch market and its understanding of complex name matching issues
- Finance Denmark selected SurePay in April 2025 to run a nationwide Verification of Payee service in Denmark
Things to check
- A check cannot be made where SurePay has no access to the bank's account data, which SurePay says can happen with some foreign bank accounts
- SurePay states that it is ISO 27001 compliant rather than certified, and delivers its SOC 2 Type 2 report through an ISAE 3000 report
Pricing: Dutch portal plans: Insight Starter €2,700 a year excluding VAT (900 checks a year, 5 portal users); Insight Pro €5,700 a year excluding VAT (4,000 checks a year, 10 portal users). Connect API (from 16,000 checks a year), bank and UK pricing not published; contact sales.
BioCatch
BioCatch is a fraud detection platform for banks and other financial institutions. It was founded in 2011, is based in Tel Aviv and has offices in cities including New York, London and São Paulo. As people use digital banking, it collects more than 3,000 anonymised data points, such as keystroke and mouse activity, touch screen behaviour and device signals, and uses machine learning models to tell criminals apart from genuine customers. Its Scams360 product looks for signs of manipulation during a session, such as hesitation, segmented typing or an active phone call, which applies to authorised push payment fraud where the genuine customer makes the transfer. BioCatch Trust lets member banks share risk intelligence on receiving accounts before payment. Permira funds took a majority stake in 2024, and in August 2026 Visa signed an agreement to acquire BioCatch, subject to regulatory approvals.
Pros
- Collects more than 3,000 anonymised data points, including keystroke and mouse activity and touch screen behaviour
- Looks for signs of manipulation even when victims use their own device and credentials, the pattern in authorised push payment scams
- BioCatch Trust flags suspicious receiving accounts to the sending bank in real time before payment execution, with networks in Australia and Argentina
Things to check
- Signal collection needs BioCatch JavaScript on the bank's web pages and its SDKs inside mobile apps
- Ownership is changing: Visa's agreement to acquire BioCatch is subject to regulatory approvals and is expected to close by the end of Visa's fiscal second quarter of 2027
Pricing: Not published; contact sales