Revolut under fire: customer claims cloning leads to €200 theft in paris

Barcelona-based neobank Revolut is facing a serious credibility crisis after a customer alleged his account was cloned, resulting in a €200 theft executed from a Paris ATM – all while he was physically present in Madrid.

A system failure or a calculated breach?

The incident, detailed in a post circulating on social media, highlights a growing concern within the digital banking sector: the persistent challenge of cybersecurity and the apparent reluctance of some institutions to fully acknowledge and address security vulnerabilities. The customer, identified only as ‘WonderWomanPSR’, reported that his partner’s card was duplicated, and that unauthorized withdrawals totaling €200 were made from a Parisian ATM while he was actively monitoring his account.

Revolut initially responded by questioning the customer’s claim, citing the impossibility of accessing the account remotely given the recent transaction. They requested a formal police report – a standard procedure, technically – but offered no immediate resolution for the lost funds. This response, according to the customer, felt dismissive and a blatant attempt to deflect responsibility for a clear system failure.

Denial and delay: a pattern emerges

The customer’s account history, as documented in his social media post, paints a picture of a frustrating and protracted interaction. Revolut allegedly questioned the necessity of a police report, despite the ongoing theft, and probed into whether a physical card had been lost – a detail the customer emphatically denied. The bank’s final response, delivered via X (formerly Twitter), was a cold reiteration of their stance, highlighting a lack of willingness to compensate the affected customer.

Protecting yourself: a prudent response

Industry experts consistently advise that in the event of suspected fraud, the immediate priority should be filing a police report. This provides a crucial record of the incident and strengthens the potential for future recovery efforts. Revolut’s initial approach – demanding a report before offering any assistance – appears to fall short of best practice. The BBVA case, where a customer successfully recovered €18,000 after a thorough investigation and the acknowledgment of no ‘grave negligence’ on their part, serves as a stark comparison. It underscores the importance of proactive reporting and a willingness to investigate seriously.

The core issue here isn't simply about a single compromised account; it’s about the fundamental trust placed in a rapidly expanding sector. As neobanks aggressively pursue market share, the pressure to prioritize profitability often overshadows the crucial investment required in robust security infrastructure. The stakes are rising, and Revolut’s handling of this incident raises serious questions about their commitment to safeguarding its customers.