Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

Revolut Megathread.

1245246248250251253

Comments

  • Registered Users, Registered Users 2, Paid Member Posts: 13,567 ✭✭✭✭the_amazing_raisin


    I find it varies around a lot between both providers. I've got the 10% Genius discount and some hotels Booking.com is cheaper, some Revolut is cheaper (generally with points)

    I've also found a lot of the major hotel chains are offering bigger discounts if you book through their website versus aggregators like Booking

    Basically, you need to shop around, which is exactly what these services were supposed to do for you

    "The internet never fails to misremember" - Sebastian Ruiz, aka Frost



  • Registered Users, Registered Users 2 Posts: 927 ✭✭✭littlefeet


    FYI, if anyone had seen the news story about the guy from Glaway scammed out of 10k, for his Revlout account, if it were a legacy bank, he would have gotten his money back.



  • Registered Users, Registered Users 2 Posts: 2,623 ✭✭✭optiplexgx270


    https://extra.ie/2025/12/12/news/revolut-paul-anthony-walsh#:~:text=Paul%20Anthony%20Walsh%2C%20from%20Galway,from%20his%20account%20in%20September.

    I see nothing in that article that says a "legacy" bank would return the funds to him.

    Sounds to me like a victim of possibly malware and appalling funds management by a self proclaimed "tech".

    Your debit cards should only have what you are willing to lose regardless of the bank in available funds. Had his "savings" been in a pocket (as well as being more careful with his digital footprint) it wouldn't have happened.

    However I do believe that if they claim biometrics were used to add your card to any phone and you request to access the biometrics that they should have to show them to you and not hide behind GDPR nonsense. If you are ripping a person off you lose those rights in my playbook. And if you claim they were used and they passed you need to prove it also.



  • Registered Users, Registered Users 2, Paid Member Posts: 13,567 ✭✭✭✭the_amazing_raisin


    Down at the bottom of the article it says he mistakenly shared a OTP code

    Unfortunately this could be stolen from a text message using something like phone number theft and then used to add another phone as a trusted device

    Malware or spyware are another possible route. I guess a face login could be done using a picture, Mr Walsh has helpfully got his face in portrait on LinkedIn

    So... its all possible. I've no idea what any other bank is doing that could have prevented it

    I agree for all bank accounts that current account balances should be kept as low as possible and spending limits should be set on cards to lower the risk of fraud

    Wealth protection features in Revolut are also a good way to guard against large transfers and transactions

    "The internet never fails to misremember" - Sebastian Ruiz, aka Frost



  • Registered Users, Registered Users 2 Posts: 7,302 ✭✭✭Charles Babbage


    GDPR gives you the right to all information about your business, so if they claim that it was then you can get the information.

    It appears that his card was added to a phone in Spain, without apparent notification. This may have been the work of sophisticated criminals, but I suspect it also exposes unsophisticated procedures on the part of the bank. If a card is moved to a new phone then a text should be sent to a previous number and an email also.



  • Advertisement
  • Registered Users, Registered Users 2 Posts: 8,011 ✭✭✭bren2001




  • Registered Users, Registered Users 2, Paid Member Posts: 13,567 ✭✭✭✭the_amazing_raisin


    Well he might not have done it knowingly, malware on his phone may have gotten access to his text messages

    "The internet never fails to misremember" - Sebastian Ruiz, aka Frost



  • Registered Users, Registered Users 2 Posts: 8,011 ✭✭✭bren2001


    Yes, of course. If that is the case, it's a sophisticated enough scheme. The difference being it wouldnt be a mistake and he would (likely) be entitled to his money back.

    He has requested the log as per another article (i think), the logs will confirm if there was a OTP sent via text message.

    This could have happened with a legacy bank etc. Nothing unique to revolut about it



  • Registered Users, Registered Users 2 Posts: 7,302 ✭✭✭Charles Babbage


    I don't keep a large balance on Revolut. However, I am interested in Revolut's interest rate. Is there any way to put security so that moving something out an interest bearing account has a security check? The idea being that you cannot just move money out a demand account and into the card and then somewhere else.



  • Registered Users, Registered Users 2 Posts: 9,878 ✭✭✭EoinMcLovin




  • Advertisement
  • Registered Users, Registered Users 2 Posts: 2,623 ✭✭✭optiplexgx270


    Yes its called wealth protection and you can set a 24h amount. So lets say you set it to 100€ per 24h (can be set as low as 1€). If you try move over that amount in 24h you need to submit a biometric selfie.

    You Can set different limits for:

    Transfers

    Pockets

    Savings accounts

    Invest

    Commodity

    Crypto

    They also have street mode where if you try and send someone money outside your geographic areas you set it requires one and also there is a delay for scenarios where you are made do it in lets say a mugging and they force you send funds to them.



  • Registered Users, Registered Users 2 Posts: 7,302 ✭✭✭Charles Babbage


    thanks for that, as I wish to protect my wealth. A restriction on new payees would fit the bill, then I could still transfer to my own accounts.



  • Moderators, Regional South Moderators, Paid Member Posts: 6,165 Mod ✭✭✭✭Quackster


    This is a benefit of saving with, say, Trade Republic and Trading 212 - you can only transfer out into one of your own previously-verified accounts. As well as offering superior interest rates to Revolut.



  • Registered Users, Registered Users 2 Posts: 2,623 ✭✭✭optiplexgx270


    Keeping In mind 212 only guaranteed up to 20k as a trading platform but revolut is 100k for banking instant savings and 20k for their low risk investment savings.



  • Registered Users, Registered Users 2 Posts: 7,302 ✭✭✭Charles Babbage


    Having looked at this, the location thing in Revolut is good. But they make no distinction between your own accounts that you have often used and new payees, this makes no sense at all. Most banks require a delay to new payees but allow transfers t previous payees. Its a pity, Revolut is a good service in many ways, but they clearly do not take security seriously. They have not rethought things properly since their earlier days when people only had a small balance, now they are offering savings and investments.



  • Registered Users, Registered Users 2 Posts: 2,623 ✭✭✭optiplexgx270


    Check out trade republic or www.raisin.ie the Swedish bank is giving instant access at 2.17% i think (TF Bank) and you have to withdraw to a nominated account and changing that involves a form.



  • Registered Users, Registered Users 2 Posts: 2,623 ✭✭✭optiplexgx270


    https://www.raisin.com/en-ie/bank/tf-bank-ab-publ/



  • Moderators, Regional South Moderators, Paid Member Posts: 6,165 Mod ✭✭✭✭Quackster


    Fair point with T212. With Trade Republic, it's €100k per partner bank where your funds are held in one or more partner banks, and €20k for the portion, if any, held in liquidity funds. You can see the breakdown of where your funds are held in the TR app.



  • Registered Users, Registered Users 2, Paid Member Posts: 13,567 ✭✭✭✭the_amazing_raisin


    Oh I absolutely agree, there's nothing with the legacy banks that would prevent any of that from happening

    Except perhaps An Post since the OTP code doesn't arrive half the time

    Security via bad service 😑

    "The internet never fails to misremember" - Sebastian Ruiz, aka Frost



  • Registered Users, Registered Users 2 Posts: 534 ✭✭✭Cuauhtemoc


    My understanding is that his Virtual Revolut card details were added to a Google Pay account. So they needed all his card details address and phone number etc.

    Where did they get those? Dodgy website he entered them on maybe. Malware on phone/PC?

    He also said on the radio that the OTP code was on his phone, he found it later "in spam" or something and he didn't see it.

    Sim clone? Or someone had access to his phone at some point. Long enough to see the OTP code come in.

    Most of these Revolut stories while very unfortunate in losing so much money usually have some or a lot of user error involved. Not to say Revolut couldn't improve their own processes either. The press also seem to love them too and Revolut frequently reimburse the users on foot of the publicity which is probably what was hoped for here.



  • Advertisement
  • Registered Users, Registered Users 2 Posts: 5,391 ✭✭✭Yggr of Asgard


    I don’t buy his story.

    To set up Google Pay, you need to add the card to your device, either through the app or directly via Google Pay.

    If you do it through Google Pay, you then have to confirm it in the Revolut app, either via a push notification or an OTP.

    There are far too many data points required, including full card details and other information.

    The only way this could work is if someone had access to his unlocked phone or app for a period of time.

    Unfortunately, Google doesn’t provide device details to the bank.

    It would be nice if, during setup, they transmitted the IMEI or something to identify the device, but unfortunately, it’s just a simple check to see if the card is valid and Google Pay is allowed.

    Plus you get an in-app notification that google pay is now setup for the card, so he should have seen that notification.



  • Registered Users, Registered Users 2 Posts: 927 ✭✭✭littlefeet


    He made a misstep along the way, but Revlout dont appear to be quick enough to be on top of new scams.

    Biometrics will eventually have to be used for security, and even then, it wouldn't take the scammers long to find a way in.



  • Registered Users, Registered Users 2, Paid Member Posts: 13,567 ✭✭✭✭the_amazing_raisin


    More like a series of unfortunate events, why is he keeping €10k in his current account when it's supposed to be for his house deposit?

    Why did he turn location based security off (it's on by default)?

    Why didn't he enable wealth protection or transaction limits if he had so much money on deposit?

    There's too many gaps in his story for this to add up. It's pretty clear that his phone has at least a keylogger (for getting his password) and remote access installed for the hackers to gain access to his Revolut account

    The only way to prevent that is to keep your phone clean and not install apps unless you absolutely need them and they're from reputable sources. Literally any other bank would be vulnerable to the same kind of attack

    "The internet never fails to misremember" - Sebastian Ruiz, aka Frost



  • Registered Users, Registered Users 2 Posts: 927 ✭✭✭littlefeet


    Alright, it sounds like he was planning to buy something online and was suspicious enough to try to limit his exposure by using a virtual card, and something went wrong.



  • Registered Users, Registered Users 2, Paid Member Posts: 13,567 ✭✭✭✭the_amazing_raisin


    My theory is that he had recently been paid and whoever paid him passed the info on to the scammers

    Its only a guess but it does explain why he had so much in his current account and why there seems to have been a significant effort to target him specifically

    As I said, there's details that don't add up in his story, like how the OTP got shared. It seems to be a case of his word against Revolut on that one

    "The internet never fails to misremember" - Sebastian Ruiz, aka Frost



  • Registered Users, Registered Users 2 Posts: 927 ✭✭✭littlefeet


    Could this happen: A scammer sets themselves up as a reseller or a car dealer, prices are good, but not so good that they arouse suspicion, they only accept payment by revloute or similar, they hold the payment pending long enough to sell on the card details; however, that would not be easy to do, on the other hand, virtual cards were inveted for a reason.

    I am suspicious of outsourced customer service as a vehicle for selling customer details. The reason I say this I knew someone who worked mid to high end in the field. At the level they were at, they were not allowed their phone or any devices at their desk, or on their person, and cameras were watching their keystrokes, plus a thorough background check was done on them and their close relatives.

    Post edited by littlefeet on


  • Posts: 0 [Deleted User]


    You're suspicious because they had good security protections in place?



  • Registered Users, Registered Users 2 Posts: 927 ✭✭✭littlefeet


    Of course not, but of outsourcing to countries where they pay a pittance and don't have he same controls we would have.



  • Registered Users, Registered Users 2, Paid Member Posts: 13,567 ✭✭✭✭the_amazing_raisin


    So I just noticed that the travel insurance with the Premium plan doesn't cover your spouse, just kids traveling with you

    I think this is a recent change as I'm sure it covered spouse and kids a few months ago

    Anyway, something to be aware of if considering whether to renew travel insurance or pay for premium plans

    "The internet never fails to misremember" - Sebastian Ruiz, aka Frost



  • Advertisement
  • Registered Users, Registered Users 2 Posts: 281 ✭✭cromelex


    No, this has been the case for at least the last 20 months or so, I know because that is the specific reason why myself or my partner have kept a Metal plan for the last 2 years.



Advertisement
Advertisement