Recorded Future: $2.7 Billion for Threat IntelligenceNarrow moat

Mastercard (MA) — moat facet

Mastercard paid $2.7 billion to sell cyber security, a business where its network gives it no special advantage.

In December 2024 Mastercard bought Recorded Future, a threat-intelligence company, for cash consideration of $2.7 billion, recording $1.7 billion of goodwill1. It was the largest acquisition the company had made, several times the size of Finicity or Ekata, and it moved Mastercard further from payments into security.

Acquisitions by cash consideration ($M)Recorded Future, 20242,700Ekata, 2021861Finicity, 2020809Dynamic Yield, 2022325Mastercard Forms 10-K FY2020, FY2022, FY2024, FY2025
The largest deal by a wide margin.

The logic is that fraud and cyber attacks are the same problem seen from different ends. On the second-quarter 2026 call management said its threat intelligence had identified over 7 million card-testing transactions across 192 countries, preventing an estimated $172 million of fraud2. Security services are the first category the filing names among the drivers of services growth3.

The purchase also changes what the moat is made of. Mastercard's advantage in fraud scoring comes from the data flowing through its network. Threat intelligence about hackers and stolen data is gathered outside the network, where Mastercard has no special position and competes with specialist security firms.

It is too early to judge the return. Acquisitions added about three points to services growth in 20254, much of it Recorded Future.

The deal fits a pattern of buying capabilities that sit near the payment rather than in it. Before Recorded Future, Mastercard bought Finicity for open banking in 20205, Ekata for identity verification in 20216 and Dynamic Yield in 20227; in 2023 it completed no material acquisitions8. Recorded Future was more expensive than those three combined, which makes it the clearest test of whether the services strategy can create value through purchase as well as through the network.

The acquired business is not disclosed separately, so the test has to be indirect: services growth once Recorded Future is in both years of the comparison, from 2026. Growth that holds near 20% would say the purchase added something the network needed; a sharp slowdown would say it bought a year of growth.

Moat trajectory: Holding steady

The acquisition is now in both years of the comparison; services still grew 20% in Q2 2026.

The number that tests this moat
Reported
Services growth with Recorded Future in both years
+20% (Q2 2026) against +23% in 2025

The acquisition has left the comparison; services slowing sharply from here would say the purchase bought one year of growth.

Source: Mastercard Form 10-Q, Q2 2026 ↗
⚠ Threats to the moat
⚠ THREAT 01
Security Vendors Do Not Need a Network
Outside its own network, Mastercard is one security vendor among many.
References
  1. ReportedIn December 2024 Mastercard bought Recorded Future, a threat-intelligence company, for cash consideration of $2.7 billion, recording $1.7 billion of goodwill.
    Mastercard Form 10-K for fiscal 2025 - financial statements and notes: income, cash flow, equity, debt, tax and acquisitions. — FY2025 · publ. 11 February 2026 · source ↗
  2. ReportedOn the second-quarter 2026 call management said its threat intelligence had identified over 7 million card-testing transactions across 192 countries, preventing an estimated $172 million of fraud.
    Yahoo Finance / GuruFocus, Mastercard Q2 2026 earnings call highlights (third-party summary of the call). — Q2 2026 · publ. 31 July 2026 · source ↗
  3. ReportedSecurity services are the first category the filing names among the drivers of services growth.
    Mastercard Form 10-K for fiscal 2025 - Item 7 MD&A: value-added services and solutions. — FY2025 · publ. 11 February 2026 · source ↗
  4. ReportedAcquisitions added about three points to services growth in 2025, much of it Recorded Future.
    Mastercard Form 10-K for fiscal 2025 - financial statements and notes: income, cash flow, equity, debt, tax and acquisitions. — FY2025 · publ. 11 February 2026 · source ↗
  5. ReportedBefore Recorded Future, Mastercard bought Finicity for open banking in 2020, Ekata for identity verification in 2021 and Dynamic Yield in 2022; in 2023 it completed no material acquisitions.
    Mastercard Form 10-K for fiscal 2020 - gross revenue and rebates for 2018-2020, the 2020 decline, the Finicity acquisition and the European Commission fine. — FY2020 · publ. February 2021 · source ↗
  6. ReportedBefore Recorded Future, Mastercard bought Finicity for open banking in 2020, Ekata for identity verification in 2021 and Dynamic Yield in 2022; in 2023 it completed no material acquisitions.
    Mastercard Form 10-K for fiscal 2022 - key metrics and rebates for 2020-2022, the Ekata and Dynamic Yield acquisitions and the five largest customers. — FY2022 · publ. February 2023 · source ↗
  7. ReportedBefore Recorded Future, Mastercard bought Finicity for open banking in 2020, Ekata for identity verification in 2021 and Dynamic Yield in 2022; in 2023 it completed no material acquisitions.
    Mastercard Form 10-K for fiscal 2024 - net revenue categories recast for 2022-2024, rebates of $17,629 million, the five largest customers and the Recorded Future acquisition. — FY2024 · publ. February 2025 · source ↗
  8. ReportedBefore Recorded Future, Mastercard bought Finicity for open banking in 2020, Ekata for identity verification in 2021 and Dynamic Yield in 2022; in 2023 it completed no material acquisitions.
    Mastercard Form 10-K for fiscal 2024 - net revenue categories recast for 2022-2024, rebates of $17,629 million, the five largest customers and the Recorded Future acquisition. — FY2024 · publ. February 2025 · source ↗
Sources
Generated September 25, 2026