The round. Overwatch, a New York startup that hunts digital threats for financial and consumer companies, raised a $15 million Series A, Fortune reported Monday. Mouro Capital led. Visa Ventures and Capital One Ventures joined, along with PruVen Capital, New Era Capital Partners, and Y Combinator. The valuation wasn’t disclosed.
Overwatch was founded in 2022 by Arjun Bisen, a former Australian diplomat who worked on the country’s cyber strategy, and Zara Perumal. Its named customers include Visa, Capital One, Cash App, SoFi, Stripe, and DoorDash.
The thesis is the interesting part. Bisen’s argument, in his words to Fortune: criminals don’t think in categories. “A threat actor doesn’t say: 'I’m going to do a cybersecurity exploit.' They say: 'I’m going to smash and grab, move money away.'” The hack, the scam, and the money laundering are one operation now. Defenders still split them across three teams.
His example makes the point. One threat actor launched more than 100 attack campaigns in about five days, compromised 27 payment sites, and skimmed card details from more than 600,000 cards, according to Bisen. Is that a cybersecurity incident or a fraud loss? At most big companies, the answer depends on which team got paged first.
Why AI makes this worse. Bisen cites a Mastercard figure that an AI-powered scam now costs less than $3 per attack. When attacks are that cheap, criminals can run hundreds of variations at once and blend phishing, account takeover, fake storefronts, and payment fraud into one campaign. A security team looking at login alerts and a fraud team looking at chargebacks each see half the picture.
Read the cap table, not just the check. When a payments network and a top card issuer invest in a vendor they already buy from, it usually means two things. They want the product to keep getting built. And they want a seat close enough to see the roadmap. That’s a real vote of confidence. It’s also a warning sign for anyone pitching a standalone tool into the same buyers: the biggest banks are starting to pick their partners early.
The incumbents already see it. Mastercard bought threat-intelligence company Recorded Future in December 2024 and said it would feed that intelligence into its cybersecurity, identity, and real-time fraud scoring services. That’s the same convergence thesis, executed by a card network with a checkbook. Overwatch is betting a focused startup can move faster than a platform that has to serve every bank on earth.
Where we’d push back. $15 million is a modest Series A for a company with a customer list this strong. That could mean disciplined founders. It could also mean the market for this category is still hard to size, because no one owns the budget yet. Is it the CISO’s money? The chief risk officer’s? The fraud team’s? Until one person signs for it, convergence startups can win great logos and still struggle to scale contracts.
What buyers should take from it. If your fraud team and your security team don’t share threat data today, start there. Same attacker, same infrastructure, same stolen credentials. A shared watchlist of malicious domains and compromised accounts costs almost nothing and closes the gap Overwatch is selling into.
Our take. The product category here is “digital threats,” which is broad on purpose. The real bet is organizational: that banks and fintechs will merge fraud and cyber intelligence into one team. Visa and Capital One just put money behind that bet. Now watch whether the next round names a buyer, not just a backer.