M&A

Visa reportedly wants Fireblocks for about $2.5B. It wouldn’t be buying crypto. It would be buying the signing step.

Axios reported late-stage talks. Fireblocks says the report is “not true at present time.” If it happens, Visa would own the fraud signal with BioCatch and the transaction approval with Fireblocks. That’s a trust stack, not a crypto bet.

Oct 28, 2026 · 4 min read

What’s reported. Axios reported on Oct. 22, citing multiple sources, that Visa is in late-stage talks to buy Fireblocks for about $2.5 billion. Fireblocks pushed back within hours: “This is news to us, and not true at present time.” Visa said it doesn’t comment on rumors. So treat this as a rumor with a carefully worded denial. “At present time” is not “never.”

The price is the first story. Fireblocks raised $550 million at an $8 billion valuation in January 2022. A $2.5 billion sale would land roughly 69% below that mark. That’s the crypto-era reset in one number. It’s also a warning for anyone still carrying 2021 and 2022 private marks: a strategic buyer pays for what the asset does for its business today, not for the last round.

What Fireblocks actually sells. Strip off the crypto label. Fireblocks is a key-management and transaction-policy company. Its custody uses multi-party computation, or MPC. In plain words, the private key that moves the money never sits in one place. It’s split into pieces held by different parties, and a transfer only goes through when enough of them co-sign under rules the customer sets: who can send, how much, to where, with how many approvers. That’s a security control that happens to look like a wallet.

It’s also widely deployed. Crypto Briefing reports more than 2,500 institutions use the platform, including Worldpay and Euronet, payments providers already in Visa’s network. The Block notes Fireblocks launched a stablecoin payments network in September 2025 with more than 40 participants, including Circle and Bridge.

Why Visa would want the keys. Visa has been building a stablecoin business fast. Per The Block, Visa says its stablecoin settlement volume passed a $20 billion annualized run rate, more than 15 times the level a year earlier. When money moves on a blockchain, there’s no chargeback desk to undo a mistake. The real control is the moment the transaction gets signed. Whoever runs the signing policy runs the fraud control.

Now put that next to BioCatch. In August, Visa agreed to buy BioCatch for $2.4 billion in cash. BioCatch reads behavior, like typing rhythm, touch gestures and how a phone is held, to tell a real customer from a fraudster or a coached scam victim. Visa’s own release says the goal is to stop cyber threats “upstream” of the payment.

Read the two together. BioCatch answers “is this really the customer?” Fireblocks would answer “is this transfer allowed to be signed?” One is identity. The other is authorization. Every enterprise security team already lives with that split. Visa would be assembling it for money movement.

The competitive read. Mastercard completed its purchase of stablecoin infrastructure firm BVNK in August, a deal it agreed in March for up to $1.8 billion, including $300 million in contingent payments, per The Block. The card networks aren’t treating stablecoins as a side bet. They’re buying the plumbing. Fireblocks would be the plumbing with the security layer already built in.

CoinDesk reported that its sources had also put Coinbase in the frame as a possible buyer. Coinbase denied it. So there may be more than one bidder, or none at all. That’s the honest range.

What buyers should ask now. If your treasury, payments or digital-asset team runs on Fireblocks, a Visa deal would change your vendor’s incentives. Today Fireblocks is a neutral layer that connects to everyone. Under a card network, ask three questions. Will it stay neutral to rival networks and processors? Who controls the policy engine and the key shares, you or the new parent? And what’s your exit path if the roadmap bends toward Visa’s rails? Get those answers in writing before any deal closes, not after.

The bottom line. If this happens, the headline will read “Visa buys crypto firm.” The better read is “Visa buys the approval step.” In payments, as in security, whoever decides what gets signed owns the risk. They also own the margin.

Sources