VISA Beat Q3 Earnings. The Report Itself Reads Like a Eulogy for the Card Era.
Consider the moment when a company's earnings release stops being about the numbers and starts being about the future of money. VISA's fiscal Q3 2024 report, published on July 29, beat analyst expectations. Revenue topped estimates. Cross-border volume held firm. The financial press nodded approvingly: the payments giant is still unstoppable.
But I have spent the better part of a decade reading infrastructure company earnings the way developers read diffs — looking not at what changed, but at what was quietly moved, deprecated, or left unimplemented. What I found in this report was not confidence. It was a strategic retreat.
Behind the headline numbers, VISA is preparing for a world in which its card network is no longer the center of gravity. The report's subtext reveals a company cutting ties with stablecoin partners in the wake of FTX, pouring resources into CBDC interoperability, repositioning its fastest-growing product as a push-payment rail that does not need cards at all, and reinforcing a private identity layer just as decentralized identity becomes crypto's most important frontier.
The market cheered. I flinched. Because the most valuable information in this report is not that VISA made money. It is that VISA sees the endgame — and it is already building the bridge.
Context: The Machine Blockchain Was Built to Replace
For those who came to crypto without a background in traditional payments, a quick sketch. VISA is a network, not a bank. It issues no loans, holds no deposits. It operates VisaNet, the world's largest payment processing system, connecting issuing banks, acquiring banks, merchants, and cardholders across more than 200 countries. Every transaction involves an authorization request, a risk check, a clearing message, and a settlement instruction. For performing those functions, VISA takes a tiny slice of every transaction. Tiny slice, trillion-dollar volume, very high margins.
This is the architecture cryptocurrency was explicitly designed to replace: an intermediary that authorizes, prices, and potentially censors access to value transfer. The original promise of Bitcoin was that a chain of cryptographic proofs could replace the authority of a settlement operator. A decade later, VISA's earnings still look better than almost every project in our industry. Anyone who tells you otherwise is not reading the data.
But the data is becoming misleading. The card is a 60-year-old interface built for a world of plastic, magnetic stripes, and batch settlement. The economy has already moved on. Digital wallets, real-time payments, embedded finance, and — reluctantly — crypto rails are redrawing the map. VISA's revenue still grows because it sits at the center of a very wide, very ancient road. But highways are being built around it.
So when I read this report across seven dimensions — regulatory, technical, business model, competitive, financial risk, macro policy, user behavior — I am not looking for the quarter's drivers. I am looking for structural seams. There are several places where the armor is thinner than the market understands.
Core Analysis: The Five Signals the Headlines Missed
1. The Compliance Moat Is Also an Ankle
Let us start with the dimension that makes VISA untouchable in the eyes of most analysts: regulation.
VISA's compliance architecture is world-class. It holds payment licenses in nearly every jurisdiction where it operates. It co-authored PCI DSS, the data security standard the entire payments industry lives by. Its sanctions screening and anti-money-laundering frameworks are the gold standard. When a fintech wants to look credible, it announces a "VISA card program."
That credibility comes at a price, and the price is now visible.
First, the US Department of Justice has opened an antitrust investigation into VISA's debit card network. The report ranks this as the most important regulatory risk of the next one to two years. If the DOJ moves to a formal suit and wins, VISA could be forced to unbundle its pricing or open its network to competing rails. The impact would not stop at VISA's market cap. It would create a legal precedent that openness is a feature, not a bug — a precedent that, ironically, aligns almost perfectly with the principles blockchain advocates have been arguing since 2017. The centralized industry that mocked crypto for deregulated chaos is now the one fighting the government over whether its own network is too closed.
Second, VISA's crypto posture is in full retreat. During the last bull market, VISA signed card programs with several crypto issuers, including FTX. FTX collapsed; the partnerships were quietly terminated. The report frames this as a shift from "aggressive embrace to risk-averse caution." Let me translate: VISA learned that it cannot control a partner it cannot audit. The transparency of public blockchains cut both ways. Decentralization is not dangerous to VISA because it is illegal. It is dangerous because it makes VISA's gatekeeper role irrelevant — and the easiest way to stay relevant is to close the gate.
Third, and most quietly, VISA is turning compliance into a product. It is building RegTech infrastructure to automate sanctions screening, suspicious transaction reporting, and risk adjudication. Its VaR risk engine already makes millisecond fraud decisions across the entire network, and the company is pushing this capability to smaller banks as "Fraud-as-a-Service." This is how a settlement network becomes an adjudication network. It does not merely move money; it decides who may move money. Every DeFi developer worried about regulators surveilling public chains should pay attention: VISA is building a centralized version of the same surveillance, and it is packaging it as convenience.
I spent six months during the bear market auditing the economic models of collapsed crypto projects. I kept coming back to one axiom: power attracts abuse. The moment a network can silently decide who gets to transact, that network becomes a government without the constraints of one. Back in 2020, when I was translating MakerDAO governance proposals for a small Shanghai meetup, I learned that communities built on transparent rules survive chaos. VISA's compliance moat is real. It is also, from a decentralization perspective, the most dangerous part of its business.
2. VisaNet vs. Consensus: Two Different Kinds of Trust
Now the architecture. The report describes VisaNet as a "distributed, high-availability, strongly consistent" system capable of processing tens of thousands of transactions per second. Zero loss. Zero duplication. Settlement finality in milliseconds. This is the gold standard of centralized transaction processing.
Let me be precise about what that means, because I have a background in applied mathematics, and I have spent many late nights modeling fault tolerance in both systems. VisaNet achieves finality through authority. There is a single operator with the power to define rules, apply patches, and settle disputes. The system is fast because it does not have to convince anyone of anything. Its users trust it because, within the four-party model, they have no alternative but to trust it.
Public blockchains achieve finality through consensus. They are slower because security is not delegated; it is distributed across validators, staking mechanisms, and economic incentives. Every confirmation carries the cost of producing agreement among parties who do not trust each other. That is the price of permissionlessness. VISA's throughput advantage is not a technological insult to blockchain; it is a reflection of two entirely different philosophies about where trust should live.
The report notes VISA is migrating toward "edge computing and cloud-native architecture" — but slowly, cautiously, behind Mastercard. Its mainframe heritage is technical debt. Here is the paradox: conservatism is a feature. Financial infrastructure is trusted precisely because it does not change quickly. The same rigidity that makes VISA slow to adapt is the rigidity that makes banks willing to stake their reputation on it.
But there are limits. VISA's tokenization — replacing card numbers with cryptographic tokens so merchants never touch raw PANs — is the bridge between its legacy and its future. Tokenization was originally pitched as a security measure to reduce PCI DSS scope. In reality, it is something larger: a private version of decentralized identity. Every tokenized transaction contains an auth credential that can be rotated, verified, and revoked cryptographically. VISA has spent years quietly building the same infrastructure Web3 builders call DID — but with a centralized root of trust.
When I designed incentive models for a Layer 2 project, I learned that the hardest problem is not throughput. It is alignment. Getting hundreds of validators to agree is hard; getting thousands of institutions to coordinate on a single standard upgrade is arguably harder. VISA's struggle to standardize 3-D Secure and tokenization across thousands of banks is not that different from an L1 coordinating its validators. The difference is that VISA's coordination is vertical, dictated by a center, while blockchain coordination is horizontal, earned through incentives. Both work. They just produce opposite distributions of power.
3. Push Payments: The Quiet Death of the Card
The most significant data point in this report is glossed over by nearly every mainstream analyst: VISA Direct, its real-time push payment product, is growing faster than the traditional card business. That fact deserves far more scrutiny than it received.
Here is why. The classic card network is a pull-based system. The merchant, at checkout, pulls funds from the customer's account using a card credential and the network's authorization. The network sits directly in the path of every transaction. It sees everything, charges for everything, and can block anything. This architecture is the source of VISA's power.
Push payments invert the model. The payer's bank sends funds directly to the payee's account in near real time. There is no card number, no merchant discount fee, no authorization request to route. The user is the actor; the network is just the pipe. This is the model of UPI in India, which has processed more transactions than many global card networks combined; of Pix in Brazil, which banked an entire generation; of FedNow in the US; and of every stablecoin transfer ever made.
VISA saw this wave and built Visa Direct to ride it. On one level, that is genius. On another level, it is an admission: the pull-based card rail is no longer the future.
And this is the moment when VISA becomes crypto's most dangerous doppelganger. Because push payments are the one thing crypto actually sells that people use. Stablecoin transfers are push payments — user-initiated, account-to-account, near-instant. The technology works; the friction is all around it: wallets, onboarding, compliance, bridging. VISA is doing the centralized version — fast, branded, compliant, with settlement finality that regulators trust by default.
The push payment shift should also reframe the Layer 2 debate. We now have dozens of Layer 2s competing over the same small slice of users and liquidity — each one a silo, each one claiming to be the real scaling solution. That is not scaling; it is slicing an already-scarce resource into fragments. Meanwhile VISA positioned one product, Visa Direct, as the default push rail across thousands of banks. Say what you will about centralization; it can aggregate. The lesson is uncomfortable: crypto keeps building more protocols, while the incumbent keeps building fewer, better-connected products. The user experience wins.
4. The User Who Isn't There
Now the report's most brutal dimension: user analysis. VISA's terminal users are cardholders, but its actual customers are banks. And its brand visibility is collapsing. Consumers tap "Apple Pay," not "VISA." They open their banking app, not a "VISA app." The report is blunt: VISA has weak user stickiness and is disappearing from the consumer's mental model of payments.
For any consumer brand, this would be alarming. For an infrastructure provider, it is a slow erosion that compounds. The digital wallet becomes the gatekeeper — and gatekeepers extract rent. Apple and Google control the NFC interface on billions of devices. They have demonstrated willingness to launch their own financial products. Apple Pay Later is a credit product inside the wallet. Does it need VISA's network? Not necessarily. It needs a settlement rail, and the wallet can choose among card networks, A2A rails, and future CBDC networks.
For crypto people, this is an especially bad mirror. We spend years building protocols with no user interface and then wonder why adoption lags. Having wallet addresses is not a network effect. The report describes the same disease in VISA: its nodes — banks and merchants — might stay, but if the user stops thinking about VISA, then VISA stops being a brand and becomes a commodity.
The report also flags concentration risk: a large percentage of VISA's transaction volume is concentrated among a handful of mega-merchants and mega-banks. Amazon has repeatedly threatened to drop VISA. When a single merchant can credibly make that threat, the famous network effect reverts to a hub-and-spoke arrangement governed by contract renewal — not by the gravitational pull of an open network.
The lesson is not that VISA is weak. It is that a network must own its relationship with users. This is why the battle for the identity layer will dwarf the battle for settlement throughput. The network that controls identity controls the relationship. VISA's tokenization infrastructure is an attempt to own that layer privately. DeFi's answer — self-sovereign identity, verified credentials, on-chain reputation — is an attempt to own it collectively. Only one of those designs is consistent with individual agency.
5. CBDC: The Last Bridge
Finally, the report's most strategic hidden thread: VISA's investment in CBDC interoperability.
Mainstream crypto narrative treats central bank digital currencies as the enemy — surveillance money, programmable oppression. VISA sees opportunity. If China's digital yuan, Europe's digital euro, and a dozen other national CBDCs exist on separate rails, someone must convert one into another at the border. VISA wants to be the universal translator — the settlement switchboard connecting every form of state-issued digital money.
This is the ultimate endgame of the "network connector" strategy. Do not fight the new paradigm; integrate it. If VISA becomes the interoperability layer for CBDCs, it becomes the new VisaNet for the next century — without issuing a single new credit card.
Crypto should pay attention, because this directly challenges the "trustless bridge" thesis. If CBDC networks interoperate through a permissioned operator like VISA, the intermediated world wins by default. It does not need to defeat crypto; it needs to absorb it. But if CBDCs interoperate through open protocols — with zero-knowledge proofs preserving privacy and smart contracts enforcing settlement — then the decentralized model wins without a single country adopting a fully decentralized currency.
This is the fork I keep returning to in my writing. Not Bitcoin vs. Ethereum. Not L1 vs. L2. The real battle is between two kinds of trust infrastructure: authority-based finality and consensus-based finality. VISA's Q3 report signals that the incumbent not only understands this, but is building its version of the bridge right now. The question is whether our side can build a competitive one before the switchboard is permanently plugged in.
Contrarian: The Uncomfortable Takeaway Nobody Wants
Here is what I did not expect to conclude: VISA's report made me more skeptical of crypto's default strategy, not more confident.
The uncomfortable truth is that billions of people are not asking to be their own bank. They want their rent paid, their salary received, their bills settled — reliably, cheaply, without drama. VisaNet's 99.999% uptime is not a scam; it is a feature. The crypto industry's answer to that reliability gap has been a decade of bridges being hacked, fees exploding during congestion, and UX that requires a CS degree to navigate. VISA's margins are not merely the result of regulatory capture; they are the reward for solving a genuine coordination problem.
Even the "openness" critique needs sanding. The report notes VISA's real competition is not primarily Mastercard — both share the same network-era pricing logic. The real competition comes from UPI-style A2A networks and Big Tech wallets — and those are just as centralized, often more so. The enemy of decentralization is not the card network specifically; it is convenience. If we show up to that fight with only ideology and a higher TPS number, we will lose.
We do not beat VISA by building a better VisaNet. We win by becoming an alternative that users cannot unsee: a network where users own identity, data, and trust — and where the finality of code matters more than the authority of a legal department.
Takeaway: The Garden and the Keys
The July 29 headline was "VISA beats the street." Read the report more carefully, and the honest headline is "VISA prepares for a world where its core product is obsolete."
The future is not decided by whether VISA survives; it will survive, in some form, either way. The question is who owns the identity layer of the digital economy — and whether settlement, trust, and access remain open to every individual, or get consolidated inside another walled garden.
VISA is betting on the garden. Blockchain was designed to make the garden impossible. In the next decade, one of those visions will quietly absorb the other. The margin between them is not throughput, TPS, or fee charts. It is who holds the keys — to the code, and to the power.
