We didn't start the fire, but we're holding the matches. The latest VISA earnings report—blowing past estimates, $8.9 billion in revenue, a 10% year-over-year jump—feels like a victory lap. But if you read the numbers like a smart contract audit, you'll see what the market euphoria is missing. The revenue is masking a structural decay. I spent last week dissecting VISA's 2024 fiscal Q3 report through the lens of a Web3 infrastructure architect, and what I found isn't a story of growth. It's a story of a legacy system fighting for relevance in a world that's already moved on.
Let me rewind. I was in Istanbul during DevCon 2017, and I remember the energy around DeFi. We were building systems that promised to disintermediate. Back then, VISA was the dinosaur. But now? It's behaving like a zombie. The earnings call was filled with buzzwords—"Visa Direct," "real-time payments," "tokenization"—but underneath, the core thesis remains: VISA is a rent-seeking middleman in a world that's learning to route around it. The bull market in crypto is making everyone blind to this. They see VISA's profits and think the system works. It doesn't. Not for much longer.
The Hook: The $8.9 Billion Mirage
The headline: VISA's net revenue hit $8.9 billion for the quarter, beating consensus by 3%. Operating expenses grew only 7%, so margins expanded. The stock jumped 2.5% in after-hours trading. Stories. The narrative was simple: VISA is a rock. But let's look at the components. Cross-border volume, which has been VISA's golden goose for years, grew only 14%—down from 22% in the same quarter last year. Domestic payments volume, the bread and butter, grew just 6%. The growth is coming from "value-added services"—things like fraud prevention and data analytics—which now account for 28% of revenue, up from 24% last year. This is a tell.
When the core business (transaction processing) slows, companies sell you the periphery. VISA is no longer a payment network; it's becoming a consultancy that happens to process payments. The problem? This new revenue stream is less sticky. A merchant can switch fraud vendors. They can't easily switch payment rails. The shift from "infrastructure" to "add-on services" is a sign of maturity, sure, but it's also a sign that the underlying network's moat is thinning.
Context: The End of the Card Era
VISA's entire model is built on the "Four-Party Model": issuer, acquirer, merchant, and cardholder. VISA sits in the middle, taking a small cut on every transaction—about 1% to 2% of the value. It's a beautiful business. Low capital intensity, massive network effects. But the model is fragmenting. Think about how you pay today. You use a digital wallet (Apple Pay, Google Pay) or a bank app with instant bank transfer (SEPA Instant, UPI in India, Pix in Brazil). The card is becoming invisible. VISA isn't the brand you see; it's the backend plumbing you don't.
This is where the narrative gets tricky. VISA's management loves to tout "Visa Direct," their real-time push payments product, as a growth engine. It grew 26% year-over-year. But here's the kicker: Visa Direct is essentially VISA admitting that the old "pull" model (you swipe, network authorizes, funds settle in 1-2 days) is dying. They're rebuilding a real-time rail on top of a batch-processing legacy system. It's like putting a jet engine on a horse-drawn carriage. It works for a while, but the structural inefficiencies will eventually catch up.
Core Analysis: The Decentralization Paradox
Let's dig into the technical architecture. VISA's core system, VisaNet, processes up to 65,000 transactions per second. It's a marvel of distributed systems engineering. But it's a closed, permissioned distributed system. Every node is controlled by VISA. This gives them incredible reliability and security but zero resilience to the kind of decentralized innovation happening in crypto. You can't fork VisaNet. You can't build a new financial primitive on top of it without VISA's explicit permission.
The user experience gap. VISA's "users" aren't you or me. Its users are banks. This creates a critical blind spot in the earnings report. The report talks about "card not present" growth and "contactless adoption." But neither of these metrics measures real user satisfaction or loyalty. I've spent hours auditing smart contracts for DAOs, and one thing I know is that when you don't own the user interface, you don't own the user. VISA doesn't own the user's phone; Apple does. Apple Pay's share of in-store payments is now 25% in the US. When Apple wants to route payments through its own rails (Apple Pay Later, Apple Card), VISA becomes just a pass-through.
The game theory of trust. In DeFi, we talk about "trust minimized" systems. VISA's model requires maximum trust in a single entity. The earnings report shows no provisioning for major cyberattacks or systemic failures. But the risk is real. A 4-hour outage of VisaNet could cost the global economy billions. The market prices this risk at zero because it hasn't happened at scale. But as VISA migrates to cloud infrastructure—a 5-year plan they mention offhand in earnings calls—the attack surface expands dramatically. They're moving from a hardened fortress to a network of cloud endpoints, each with its own vulnerabilities.
Contrarian Angle: The Anti-Fragile Trap
You'd expect me to say VISA is doomed. I'm a blockchain evangelist, right? Wrong. VISA is not doomed; it's anti-fragile in the wrong direction. The bull market is making it fat and happy, but the structural erosion is accelerating. Here's the contrarian take: VISA's best move is to become a layer-2 for CBDCs. Yes, you heard me right. Instead of competing with digital currencies, they should offer the settlement and interoperability layer. China's digital yuan is already exploring this, and Europe's digital euro is coming. VISA could be the bridge between legacy and crypto systems. But their current strategy—building Visa Direct and dabbling in stablecoins—is half-hearted. They're trying to be a crypto player without embracing the ethos. They want the profits of disruption without the risks. It won't work.
The real threat isn't Mastercard. It's the sovereign money you can send via mobile without any intermediary. India's UPI processed over 11 billion transactions in June alone. That's more than VISA and Mastercard combined in that market. UPI is free. It's instant. It's controlled by the central bank. VISA can't compete with free. So instead, they partner with UPI (allowing VISA cards to link to UPI). But that's just renting the last mile. The network effect is owned by the Indian government, not VISA.
The DeFi analogy. Remember when everyone said DeFi would kill CeFi? It didn't. CeFi (like Coinbase) absorbed DeFi's innovation. VISA is doing the same. They acquired Plaid (failed), started Visa Ventures, and launched a crypto advisory service. But the earnings report reveals a different story: crypto-linked card spending dropped 15% year-over-year. The market cycle is shifting, and VISA is still treating crypto as a niche betting activity, not a new financial infrastructure.
The Hidden Liabilities
I audited the earnings call transcript for mentions of "blockchain" or "DLT.
There were two: one about their proprietary "blockchain-based" prototype for interbank settlements (a private, permissioned system that misses the point of decentralization), and one about their work with Circle on USDC settlement. That's it. For a company that handles $12 trillion in transactions annually, the R&D spend on distributed systems is laughably small. They're relying on their brand and regulatory moat, not technical innovation. This might work for another 5-10 years, but in crypto time, that's a lifetime. The market is already pricing in the disruption. VISA's PE ratio is 28. Mastercard's is 36. The market knows which horse to back.
The data risk. VISA's greatest asset—its transaction data—is also its greatest liability. The earnings report brags about their "data analytics" business. But in a world of zero-knowledge proofs and confidential computing, why would you share your financial data with a third party? The next generation of fintech will use zk-rollups and privacy-preserving technologies to verify transactions without revealing the underlying data. VISA's data moat becomes a toxic asset.
Takeaway: The Paradigm Shift Is Here
We didn't come all this way—from Istanbul hackathons to DeFi summers—to watch a payment card company pretend to be a tech company. The bull market in crypto is distracting us from the real story: the infrastructure of money is being rewritten. VISA is not a part of that rewrite; it's a relic that will be preserved in a museum of 20th-century finance.
The question isn't whether VISA can survive. It can, as a utility. The question is whether anyone will still care about its earnings reports in 10 years when the majority of global transactions happen on programmable, open, and user-owned networks. The signs are clear. The revenue growth is slowing. The moat is thinning. The innovation is elsewhere. VISA's Q3 earnings were a triumph for a dying model. But in Web3, we don't mourn the dinosaurs. We architect the future.