AiRE is designed to identify automated actors before funds move, while the evidence disclosed centers on a company survey rather than product-performance results
BioCatch launched Agentic AI Risk Essentials, or AiRE, on Nov. 10, 2026, positioning the offering as a way for banks to identify software agents operating within digital banking sessions before money moves. The company says the product can distinguish agents acting for legitimate account holders from those acting for malicious purposes. It is available through existing integrations, according to the announcement.
The proposed capability addresses a decision banks must make before determining what an automated actor should be allowed to do. An agent’s presence and its intent are separate questions: automation may be authorized by a customer, but authorization alone does not establish that a particular session is safe. BioCatch is marketing AiRE as an input into that assessment, rather than announcing a uniform access policy for banks.
“Whether banks plan to block all agents, grant access to only certain, pre-approved agents, or open the floodgates and allow any agent to access their platforms, those institutions must be able to first reliably detect whether the entity controlling a session is a human or an agent and if the intent of that entity is genuine or malicious,” Chief Product Officer Ayelet Eliezer said.
BioCatch says AiRE examines behavior patterns, synthetic input, browser permissions, infrastructure and agent declaration. Those categories describe the signals the company says it uses; they are not evidence of a particular detection rate. The release did not supply independent test results establishing how accurately the product identifies agents or separates legitimate activity from attempted abuse. Its effectiveness remains a company claim in this announcement.
The launch was accompanied by findings from a BioCatch survey of 1,440 banking leaders. The company said 80% reported agentic-AI attacks and 84% viewed agents as potentially their largest vulnerability in the next year. These percentages describe responses within the company’s survey. They should not be read as independently established measures of attack prevalence across the banking system or forecasts of actual losses.
BioCatch also reported that close to half of detected interactions occurred at account opening. That figure places attention on customer onboarding, not solely payment authorization. But the supplied information does not establish how many interactions were malicious, how many represented legitimate automation or what losses followed. Nor does it demonstrate that the newly launched product prevented those interactions from resulting in financial harm.
For banks, the operational significance is the possibility of adding an agent-identification layer without undertaking an entirely separate integration, as BioCatch describes the deployment approach. Existing availability may simplify access to the capability, but the announcement does not quantify implementation work, pricing or staffing requirements. It also provides no basis for calculating a return on investment from avoided fraud or reduced review workloads.
The business case therefore depends on evidence beyond the scale of concern reported in the survey. Relevant measures would include detection accuracy, erroneous alerts and the ability to preserve authorized customer activity while restricting abuse. The announcement did not provide those results. Claims about recognizing malicious intent deserve particular scrutiny because the consequences differ from merely identifying that software, rather than a person, controls a session.
AiRE gives BioCatch a product response to an emerging banking-security question. It does not, on the disclosed evidence, establish that banks can reliably resolve that question in every setting. The distinction for financial institutions is between a newly available detection tool, a company survey describing perceived risk and demonstrated operating results. Only the first two were presented in the launch materials.
Key takeaways
- AiRE is available through existing BioCatch integrations.
- Survey findings are not independent evidence of product effectiveness.
