‘Payment flaws’ allowed criminals to steal $20m from Revolut

Revolut has reportedly lost millions of dollars to criminals taking advantage of a flaw in its payment systems.

A report by the Financial Times said that the digital bank saw $23 million stolen from its funds across several months in 2022.

According to sources with knowledge of the matter, the issue arose because of variations between the FinTech’s US and European payment systems. The differences meant that for some declined transactions the bank was accidently refunding accounts and giving users its own funds.

The issue first took place towards the end of 2021, with organised criminals then beginning to take advantage of the flaw towards the end of last year, said the sources.

They revealed that while Revolut got back some of the money after pursuing several people involved in the theft, overall the bank lost roughly $20 million.

The newspaper said that Revolut was unaware of the problem until a partner bank based in the US flagged that it was storing less money than expected.

Revolut declined to comment on the reports.

The loss will likely be a significant blow for the company, with the funds stolen amounting to close to two-thirds of its yearly profit in 2021.

The company also recently saw its valuation cut by 40 per cent.

Having made an investment of around £7 million in 2018, the latest financials of venture capitalist Molten Ventures reflects a valuation cut of around 40 per cent -- dropping from £91.3 million at the same financial period in 2022 to £54.5 million in the year ended 31 March 2023.

The move followed Schroders Capital Global Innovation Trust cutting its valuation of Revolut by around 46 per cent in April.

Earlier this year Revolut said that the delayed acquisition of its UK banking licence was due to recent turmoil in the global financial ecosystem.

Revolut secured an EU banking licence through Lithuania in 2018 and a full banking licence from the European Central Bank in 2021 but has still not received its UK banking licence, having filed an application with the Financial Conduct Authority in January 2021.

    Share Story:

Recent Stories


The human firewall: Activating employees to safeguard financial data
As financial services increasingly embrace SaaS and cloud-based technologies, they face emerging threats to safeguard sensitive customer data. While comprehensive IT security measures are essential, the active involvement of employees across organisations is pivotal in ensuring the protection of sensitive data.

Building a secure financial future for instant payments: The convergence of ISO 20022 and fraud detection
The financial landscape is rapidly evolving its approach to real-time transactions under the ISO 20022 standard, and financial institutions must take note. With examples such as the accelerated adoption of SEPA Instant Credit Transfers in Europe and proposed New Payment Architecture (NPA) programme in the UK, the need for swift and effective fraud detection is more crucial than ever.

Data Streaming and Consumer Duty: Transforming customer experience in banking
Introduced at the end of July, the Consumer Duty is a game-changing new set of rules and guidance for financial services institutions in the UK, and companies must look to modernise their systems in adherence with it in mind to create the best customer experience possible.

From insight to action: Empowering financial institutions through advanced technology and collaborative information sharing
The use of Information sharing in enhancing financial crime prevention has been universally agreed as being beneficial. However no-one has been able to agree on how information can be shared safely without breaching data protection laws or having the right systems to facilitate this, Information sharing has re-emerged as a major consideration for financial institutions (FIs) ahead of the Economic Crime and Corporate Transparency Bill being made into law in the UK.