‘Payment flaws’ allowed criminals to steal $20m from Revolut

Revolut has reportedly lost millions of dollars to criminals taking advantage of a flaw in its payment systems.

A report by the Financial Times said that the digital bank saw $23 million stolen from its funds across several months in 2022.

According to sources with knowledge of the matter, the issue arose because of variations between the FinTech’s US and European payment systems. The differences meant that for some declined transactions the bank was accidently refunding accounts and giving users its own funds.

The issue first took place towards the end of 2021, with organised criminals then beginning to take advantage of the flaw towards the end of last year, said the sources.

They revealed that while Revolut got back some of the money after pursuing several people involved in the theft, overall the bank lost roughly $20 million.

The newspaper said that Revolut was unaware of the problem until a partner bank based in the US flagged that it was storing less money than expected.

Revolut declined to comment on the reports.

The loss will likely be a significant blow for the company, with the funds stolen amounting to close to two-thirds of its yearly profit in 2021.

The company also recently saw its valuation cut by 40 per cent.

Having made an investment of around £7 million in 2018, the latest financials of venture capitalist Molten Ventures reflects a valuation cut of around 40 per cent -- dropping from £91.3 million at the same financial period in 2022 to £54.5 million in the year ended 31 March 2023.

The move followed Schroders Capital Global Innovation Trust cutting its valuation of Revolut by around 46 per cent in April.

Earlier this year Revolut said that the delayed acquisition of its UK banking licence was due to recent turmoil in the global financial ecosystem.

Revolut secured an EU banking licence through Lithuania in 2018 and a full banking licence from the European Central Bank in 2021 but has still not received its UK banking licence, having filed an application with the Financial Conduct Authority in January 2021.

    Share Story:

Recent Stories


Safeguarding economies: DNFBPs' role in AML and CTF compliance explained
Join FStech editor Jonathan Easton, NICE Actimize's Adam McLaughlin and Graham Mackenzie of the Law Society of Scotland as they look at the role Designated Non-Financial Businesses and Professions (DNFBPs) play in the financial sector, and the challenges they face in complying with anti-money laundering and counter-terrorist financing regulations.

Ransomware and beyond: Enhancing cyber threat awareness in the financial sector
Join FStech editor Jonathan Easton and Proofpoint cybersecurity strategist Matt Cooke as they discuss the findings of the State of the Phish 2023 report, diving into key topics such as awareness of cyber threats, the sophisticated techniques being used by criminals to target the financial sector, and how financial institutions can take a proactive approach to educating both their employees and their customers.

Click here to read the 2023 State of the Phish report from Proofpoint.

Cracking down on fraud
In this webinar a panel of expert speakers explored the ways in which high-volume PSPs and FinTechs are preventing fraud while providing a seamless customer experience.

Future of Planning, Budgeting, Forecasting, and Reporting
Sage Intacct is excited to present FSN The Modern Finance Forum’s “Future of Planning, Budgeting, Forecasting, and Reporting Global Survey 2022” results. With participation from 450 companies around the globe, the survey results highlight how organisations are developing their core financial processes by 2030.