Security News > 2023 > July > Revolut Faces $20 Million Loss as Attackers Exploit Payment System Weakness

Malicious actors exploited an unknown flaw in Revolut's payment systems to steal more than $20 million of the company's funds in early 2022.

The development was reported by the Financial Times, citing multiple unnamed sources with knowledge of the incident.

The fault stemmed from discrepancies between Revolut's U.S. and European systems, causing funds to be erroneously refunded using its own money when some transactions were declined.

Before it could be closed, the report said organized criminal groups leveraged the loophole by "Encouraging individuals to try to make expensive purchases that would go on to be declined." The refunded amounts would then be withdrawn from ATMs. The exact technical details associated with the flaw are currently unclear.

About $23 million was stolen in total, with some funds recovered by pursuing those who had withdrawn cash.

The mass fraud scheme is said to have resulted in a net loss of about $20 million for the neobank and fintech firm.

News URL

https://thehackernews.com/2023/07/hackers-steal-20-million-by-exploiting.html