Revolut sending link in email to verify identity

tohaltuwi

You always hear in the media “banks will never send you texts or emails will links”. I guess Revolut is different, just got a quick series of emails from them, one about taxation compliance, the next one with a direct link to submit ID verification. 

I went to the Revolut app and saw indeed that ID verification was required in the form of photo of back and front of an ID document, in my case driving license came to hand easily, followed by a video of my face turning to one side and back, finally my spoken voice recorded repeating given numerals. That’s all fair enough, Revolut needs to be compliant with legalities. 

The process must be completed within 5 minutes, could be tricky for elderly etc without assistance, as any unsteadiness won’t pass muster. 

It is unusual now for any financial institution to send an email with a direct link to complete required data. Advice is never use such a link, and of course check the full email address of where it came from. Google it if it is not familiar to you. Go instead directly to app or known valid website.

I’m a little bit surprised at Revolut using the bad practise of  sending a link within an email instead of directing you to independently visiting the site to do the necessary. 

3DataModem

Revolut's security practices are far better than most of the domestic banks. Revolut has the benefit of forcing a user to login on their trusted device with the app already installed, after clicking the link. The links are tokenised, but still secure, so having someone else's link is no good to you.

The ID verification process you describe is something they periodically do for most users, and do more frequently for users who have unusual transactional or location behaviour (or indeed, unusual pin entry behaviour). It doesn't do anything magic, it just gives Revolut some confidence that they have established that you are the person in control of the app, in a manner that cannot be spoofed easily.

tohaltuwi

https://www.boards.ie/discussion/comment/121995036#Comment_121995036

well explained, thanks :)

3DataModem

Honestly, Revolut (and N26 to a lesser extent) have very strong security, relative to legacy banks. No security is perfect, but the vast majority of Revolut issues are down to social engineering of users.

tohaltuwi

https://www.boards.ie/discussion/comment/121995145#Comment_121995145

well yes indeed it is always year beware if the links, go independently to the apps. I don’t think it has to be deleted often enough tbh.

RurtBeynolds

https://www.boards.ie/discussion/comment/121995036#Comment_121995036

Yes but the very presence of a link in the email means a malicious actor could attempt to impersonate revolut and link to a site that is not actually revolut.

Instead revolut should just ask you to open the revolut app and let the app itself prompt for the required information.

Jim2007

https://www.boards.ie/discussion/2058345753/revolut-sending-link-in-email-to-verify-identity

I don't know who you have been listening to…. but perhaps you need to either listen more carefully ignore them if they continue to provide you with false information!

Banks will send you emails with links etc… but only on your initiation, that is the security practice most follow. But even so, you should you should check the link before using it.

Slutmonkey57b

https://www.boards.ie/discussion/comment/121995036#Comment_121995036

Revolut are an open joke for preventing fraud actually.

LambshankRedemption

The process must be completed within 5 minutes, could be tricky for elderly etc without assistance, as any unsteadiness won’t pass muster. 

Having a revolut account is not a right. If someone does not have the where with all to complete the identity check then maybe Revolut is not for them.

3DataModem

https://www.boards.ie/discussion/comment/121996060#Comment_121996060

The vast majority of Revolut fraud is social engineering i.e. people being stupid and doing stupid things.

Jim2007

https://www.boards.ie/discussion/comment/121996158#Comment_121996158

Well this is not exactly true. In accordance with the EU directive on access to financial services and Irish law, Revolut are like all bank are required to provide people with basic banking services.

Slutmonkey57b

https://www.boards.ie/discussion/comment/121996253#Comment_121996253

That's true for all fraud.