Revolut Regulation - Revision history

Bodo at 16:22, 28 September 2026

2026-09-28T16:22:23Z

← Older revision		Revision as of 18:22, 28 September 2026
Line 20:		Line 20:
	<p>Financial Times, "Hackers demand Revolut pay $3mn ransom after data breach"</p>		<p>Financial Times, "Hackers demand Revolut pay $3mn ransom after data breach"</p>
	<p>Revolut Help Centre, "Which authority is Revolut Securities Europe UAB regulated by?", available at: https://help.revolut.com/en-NL/help/wealth/stocks/more-help-with-stocks/investment-protection/which-authority-is-revolut-securities-europe-uab-regulated-by/</p>		<p>Revolut Help Centre, "Which authority is Revolut Securities Europe UAB regulated by?", available at: https://help.revolut.com/en-NL/help/wealth/stocks/more-help-with-stocks/investment-protection/which-authority-is-revolut-securities-europe-uab-regulated-by/</p>

			<p>'''Comment from Bodo:''' this is an excellent overview of the formal institutions. In case of Revolut, and other neo-bank i think it is also important to think of market competition (what distinguishes neo-banks from traditional ones?) and data protection / data market considerations (part of their business model is risk management through data-rich environments online). how these would fit into this picture?</p>

Juliette Chamot: /* Visa/Mastercard */

2026-09-23T09:17:21Z

Visa/Mastercard

← Older revision		Revision as of 11:17, 23 September 2026
Line 11:		Line 11:

	= '''Visa/Mastercard''' =		= '''Visa/Mastercard''' =
	<br>Unlike the previous institutions, Visa and Mastercard derive their authority purely from contract: card issuers and acquirers must accept their private Operating Regulations to access the network. For Revolut, this membership is what makes its card products usable worldwide, so its purpose is essentially technical — ensuring interoperability and security. The weakness lies precisely there: there is no public accountability mechanism. The networks set and enforce their own rules unilaterally, sanctions are limited to contractual exclusion rather than judicial recourse, and the duopolistic structure leaves Revolut little real bargaining power over the terms it must accept.<p><br></p>		<br>Unlike the previous institutions, Visa and Mastercard derive their authority purely from contract: card issuers and acquirers must accept their private Operating Regulations to access the network. For Revolut, this membership is what makes its card products usable worldwide, so its purpose is essentially technical ensuring interoperability and security. The weakness lies precisely there: there is no public accountability mechanism. The networks set and enforce their own rules unilaterally, sanctions are limited to contractual exclusion rather than judicial recourse, and the duopolistic structure leaves Revolut little real bargaining power over the terms it must accept.<p><br></p>

	= Bibliography =		= Bibliography =

Juliette Chamot: /* Bank of Lithuania */

2026-09-23T09:17:01Z

Bank of Lithuania

← Older revision		Revision as of 11:17, 23 September 2026
Line 2:		Line 2:

	= '''Bank of Lithuania''' =		= '''Bank of Lithuania''' =
	<br>The Bank of Lithuania draws its authority from Lithuanian banking law, itself derived from EU directives. Revolut applied for a banking licence in November 2017, and this authority granted Revolut Bank UAB a specialised licence in 2021 — one that, thanks to EU passporting rules, lets Revolut operate across the entire EEA from its Lithuanian base. In exercising this role, the Bank of Lithuania aims to safeguard prudential stability and protect depositors. Its main weakness lies in capacity: a comparatively small national regulator bears formal responsibility for supervising a pan-European fintech serving tens of millions of customers, a mismatch that the ECB's 2024 takeover of direct supervision only made more visible.		<br>The Bank of Lithuania draws its authority from Lithuanian banking law, itself derived from EU directives. Revolut applied for a banking licence in November 2017, and this authority granted Revolut Bank UAB a specialised licence in 2021, one that, thanks to EU passporting rules, lets Revolut operate across the entire EEA from its Lithuanian base. In exercising this role, the Bank of Lithuania aims to safeguard prudential stability and protect depositors. Its main weakness lies in capacity: a comparatively small national regulator bears formal responsibility for supervising a pan-European fintech serving tens of millions of customers, a mismatch that the ECB's 2024 takeover of direct supervision only made more visible.

	= '''European Central Bank (ECB)''' =		= '''European Central Bank (ECB)''' =

Juliette Chamot: /* Bibliography : */

2026-09-23T09:11:58Z

Bibliography :

← Older revision		Revision as of 11:11, 23 September 2026
Line 13:		Line 13:
	<br>Unlike the previous institutions, Visa and Mastercard derive their authority purely from contract: card issuers and acquirers must accept their private Operating Regulations to access the network. For Revolut, this membership is what makes its card products usable worldwide, so its purpose is essentially technical — ensuring interoperability and security. The weakness lies precisely there: there is no public accountability mechanism. The networks set and enforce their own rules unilaterally, sanctions are limited to contractual exclusion rather than judicial recourse, and the duopolistic structure leaves Revolut little real bargaining power over the terms it must accept.<p><br></p>		<br>Unlike the previous institutions, Visa and Mastercard derive their authority purely from contract: card issuers and acquirers must accept their private Operating Regulations to access the network. For Revolut, this membership is what makes its card products usable worldwide, so its purpose is essentially technical — ensuring interoperability and security. The weakness lies precisely there: there is no public accountability mechanism. The networks set and enforce their own rules unilaterally, sanctions are limited to contractual exclusion rather than judicial recourse, and the duopolistic structure leaves Revolut little real bargaining power over the terms it must accept.<p><br></p>

	= ~~Bibliography :~~ =		= Bibliography =
	<p>Le Monde, « Revolut, la banque britannique à l'assaut de la jeunesse mondialisée »</p>		<p>Le Monde, « Revolut, la banque britannique à l'assaut de la jeunesse mondialisée »</p>
	<p>Le Monde, « Revolut, la surdouée des néobanques sème le trouble »</p>		<p>Le Monde, « Revolut, la surdouée des néobanques sème le trouble »</p>

Juliette Chamot: /* Juliette */

2026-09-23T09:11:46Z

Juliette

← Older revision		Revision as of 11:11, 23 September 2026
Line 1:		Line 1:
	Juliette Chamot		Juliette Chamot

	~~= '''Juliette''' =~~
	= '''Bank of Lithuania''' =		= '''Bank of Lithuania''' =
	<br>The Bank of Lithuania draws its authority from Lithuanian banking law, itself derived from EU directives. Revolut applied for a banking licence in November 2017, and this authority granted Revolut Bank UAB a specialised licence in 2021 — one that, thanks to EU passporting rules, lets Revolut operate across the entire EEA from its Lithuanian base. In exercising this role, the Bank of Lithuania aims to safeguard prudential stability and protect depositors. Its main weakness lies in capacity: a comparatively small national regulator bears formal responsibility for supervising a pan-European fintech serving tens of millions of customers, a mismatch that the ECB's 2024 takeover of direct supervision only made more visible.		<br>The Bank of Lithuania draws its authority from Lithuanian banking law, itself derived from EU directives. Revolut applied for a banking licence in November 2017, and this authority granted Revolut Bank UAB a specialised licence in 2021 — one that, thanks to EU passporting rules, lets Revolut operate across the entire EEA from its Lithuanian base. In exercising this role, the Bank of Lithuania aims to safeguard prudential stability and protect depositors. Its main weakness lies in capacity: a comparatively small national regulator bears formal responsibility for supervising a pan-European fintech serving tens of millions of customers, a mismatch that the ECB's 2024 takeover of direct supervision only made more visible.

Juliette Chamot: /* 4/ Visa/Mastercard */

2026-09-23T09:11:09Z

4/ Visa/Mastercard

← Older revision		Revision as of 11:11, 23 September 2026
Line 11:		Line 11:
	<br>The FATF derives its authority not from binding law but from its status as an intergovernmental standard-setter, whose 40 Recommendations on anti-money laundering are transposed into national and EU law rather than directly enforceable themselves. Its aim is to protect the integrity of the global financial system by curbing money laundering and terrorist financing, pushing entities like Revolut to maintain robust KYC systems. Its central weakness is enforcement: the FATF has no sanctioning power of its own and relies entirely on national financial intelligence units of uneven capacity, a gap made concrete by reports alleging Revolut failed to flag a significant volume of suspicious transactions.		<br>The FATF derives its authority not from binding law but from its status as an intergovernmental standard-setter, whose 40 Recommendations on anti-money laundering are transposed into national and EU law rather than directly enforceable themselves. Its aim is to protect the integrity of the global financial system by curbing money laundering and terrorist financing, pushing entities like Revolut to maintain robust KYC systems. Its central weakness is enforcement: the FATF has no sanctioning power of its own and relies entirely on national financial intelligence units of uneven capacity, a gap made concrete by reports alleging Revolut failed to flag a significant volume of suspicious transactions.

	= '''4/ Visa/Mastercard''' =		= '''Visa/Mastercard''' =
	<br>Unlike the previous institutions, Visa and Mastercard derive their authority purely from contract: card issuers and acquirers must accept their private Operating Regulations to access the network. For Revolut, this membership is what makes its card products usable worldwide, so its purpose is essentially technical — ensuring interoperability and security. The weakness lies precisely there: there is no public accountability mechanism. The networks set and enforce their own rules unilaterally, sanctions are limited to contractual exclusion rather than judicial recourse, and the duopolistic structure leaves Revolut little real bargaining power over the terms it must accept.<p><br></p>		<br>Unlike the previous institutions, Visa and Mastercard derive their authority purely from contract: card issuers and acquirers must accept their private Operating Regulations to access the network. For Revolut, this membership is what makes its card products usable worldwide, so its purpose is essentially technical — ensuring interoperability and security. The weakness lies precisely there: there is no public accountability mechanism. The networks set and enforce their own rules unilaterally, sanctions are limited to contractual exclusion rather than judicial recourse, and the duopolistic structure leaves Revolut little real bargaining power over the terms it must accept.<p><br></p>

Juliette Chamot: /* 3/ Financial Action Task Force (FATF) */

2026-09-23T09:10:56Z

3/ Financial Action Task Force (FATF)

← Older revision		Revision as of 11:10, 23 September 2026
Line 8:		Line 8:
	<br>The ECB's authority stems from the Single Supervisory Mechanism Regulation, which allows it to take over direct prudential supervision of banks deemed significant within the euro area. On this basis, the ECB assumed direct oversight of Revolut's EU banking subsidiary in January 2024, once the entity's rapid growth pushed it past the significance threshold. Its purpose is to ensure consistent, high-quality prudential oversight across the eurozone rather than leaving systemically relevant institutions to national regulators of uneven capacity. Its weakness lies in timing and legitimacy: the ECB only stepped in once Revolut had already reached a scale where national supervision was arguably no longer adequate, exposing a structural lag between an institution's growth and its being brought under proportionate oversight.		<br>The ECB's authority stems from the Single Supervisory Mechanism Regulation, which allows it to take over direct prudential supervision of banks deemed significant within the euro area. On this basis, the ECB assumed direct oversight of Revolut's EU banking subsidiary in January 2024, once the entity's rapid growth pushed it past the significance threshold. Its purpose is to ensure consistent, high-quality prudential oversight across the eurozone rather than leaving systemically relevant institutions to national regulators of uneven capacity. Its weakness lies in timing and legitimacy: the ECB only stepped in once Revolut had already reached a scale where national supervision was arguably no longer adequate, exposing a structural lag between an institution's growth and its being brought under proportionate oversight.

	= '''3/ Financial Action Task Force (FATF)''' =		= '''Financial Action Task Force (FATF)''' =
	<br>The FATF derives its authority not from binding law but from its status as an intergovernmental standard-setter, whose 40 Recommendations on anti-money laundering are transposed into national and EU law rather than directly enforceable themselves. Its aim is to protect the integrity of the global financial system by curbing money laundering and terrorist financing, pushing entities like Revolut to maintain robust KYC systems. Its central weakness is enforcement: the FATF has no sanctioning power of its own and relies entirely on national financial intelligence units of uneven capacity, a gap made concrete by reports alleging Revolut failed to flag a significant volume of suspicious transactions.		<br>The FATF derives its authority not from binding law but from its status as an intergovernmental standard-setter, whose 40 Recommendations on anti-money laundering are transposed into national and EU law rather than directly enforceable themselves. Its aim is to protect the integrity of the global financial system by curbing money laundering and terrorist financing, pushing entities like Revolut to maintain robust KYC systems. Its central weakness is enforcement: the FATF has no sanctioning power of its own and relies entirely on national financial intelligence units of uneven capacity, a gap made concrete by reports alleging Revolut failed to flag a significant volume of suspicious transactions.

	= '''4/ Visa/Mastercard''' =		= '''4/ Visa/Mastercard''' =
	<br>Unlike the previous institutions, Visa and Mastercard derive their authority purely from contract: card issuers and acquirers must accept their private Operating Regulations to access the network. For Revolut, this membership is what makes its card products usable worldwide, so its purpose is essentially technical — ensuring interoperability and security. The weakness lies precisely there: there is no public accountability mechanism. The networks set and enforce their own rules unilaterally, sanctions are limited to contractual exclusion rather than judicial recourse, and the duopolistic structure leaves Revolut little real bargaining power over the terms it must accept.<p><br></p>		<br>Unlike the previous institutions, Visa and Mastercard derive their authority purely from contract: card issuers and acquirers must accept their private Operating Regulations to access the network. For Revolut, this membership is what makes its card products usable worldwide, so its purpose is essentially technical — ensuring interoperability and security. The weakness lies precisely there: there is no public accountability mechanism. The networks set and enforce their own rules unilaterally, sanctions are limited to contractual exclusion rather than judicial recourse, and the duopolistic structure leaves Revolut little real bargaining power over the terms it must accept.<p><br></p>

Juliette Chamot: /* 2/ European Central Bank (ECB) */

2026-09-23T09:10:46Z

2/ European Central Bank (ECB)

← Older revision		Revision as of 11:10, 23 September 2026
Line 5:		Line 5:
	<br>The Bank of Lithuania draws its authority from Lithuanian banking law, itself derived from EU directives. Revolut applied for a banking licence in November 2017, and this authority granted Revolut Bank UAB a specialised licence in 2021 — one that, thanks to EU passporting rules, lets Revolut operate across the entire EEA from its Lithuanian base. In exercising this role, the Bank of Lithuania aims to safeguard prudential stability and protect depositors. Its main weakness lies in capacity: a comparatively small national regulator bears formal responsibility for supervising a pan-European fintech serving tens of millions of customers, a mismatch that the ECB's 2024 takeover of direct supervision only made more visible.		<br>The Bank of Lithuania draws its authority from Lithuanian banking law, itself derived from EU directives. Revolut applied for a banking licence in November 2017, and this authority granted Revolut Bank UAB a specialised licence in 2021 — one that, thanks to EU passporting rules, lets Revolut operate across the entire EEA from its Lithuanian base. In exercising this role, the Bank of Lithuania aims to safeguard prudential stability and protect depositors. Its main weakness lies in capacity: a comparatively small national regulator bears formal responsibility for supervising a pan-European fintech serving tens of millions of customers, a mismatch that the ECB's 2024 takeover of direct supervision only made more visible.

	= '''2/ European Central Bank (ECB)''' =		= '''European Central Bank (ECB)''' =
	<br>The ECB's authority stems from the Single Supervisory Mechanism Regulation, which allows it to take over direct prudential supervision of banks deemed significant within the euro area. On this basis, the ECB assumed direct oversight of Revolut's EU banking subsidiary in January 2024, once the entity's rapid growth pushed it past the significance threshold. Its purpose is to ensure consistent, high-quality prudential oversight across the eurozone rather than leaving systemically relevant institutions to national regulators of uneven capacity. Its weakness lies in timing and legitimacy: the ECB only stepped in once Revolut had already reached a scale where national supervision was arguably no longer adequate, exposing a structural lag between an institution's growth and its being brought under proportionate oversight.		<br>The ECB's authority stems from the Single Supervisory Mechanism Regulation, which allows it to take over direct prudential supervision of banks deemed significant within the euro area. On this basis, the ECB assumed direct oversight of Revolut's EU banking subsidiary in January 2024, once the entity's rapid growth pushed it past the significance threshold. Its purpose is to ensure consistent, high-quality prudential oversight across the eurozone rather than leaving systemically relevant institutions to national regulators of uneven capacity. Its weakness lies in timing and legitimacy: the ECB only stepped in once Revolut had already reached a scale where national supervision was arguably no longer adequate, exposing a structural lag between an institution's growth and its being brought under proportionate oversight.

	= '''3/ Financial Action Task Force (FATF)''' =		= '''3/ Financial Action Task Force (FATF)''' =
	<br>The FATF derives its authority not from binding law but from its status as an intergovernmental standard-setter, whose 40 Recommendations on anti-money laundering are transposed into national and EU law rather than directly enforceable themselves. Its aim is to protect the integrity of the global financial system by curbing money laundering and terrorist financing, pushing entities like Revolut to maintain robust KYC systems. Its central weakness is enforcement: the FATF has no sanctioning power of its own and relies entirely on national financial intelligence units of uneven capacity, a gap made concrete by reports alleging Revolut failed to flag a significant volume of suspicious transactions.		<br>The FATF derives its authority not from binding law but from its status as an intergovernmental standard-setter, whose 40 Recommendations on anti-money laundering are transposed into national and EU law rather than directly enforceable themselves. Its aim is to protect the integrity of the global financial system by curbing money laundering and terrorist financing, pushing entities like Revolut to maintain robust KYC systems. Its central weakness is enforcement: the FATF has no sanctioning power of its own and relies entirely on national financial intelligence units of uneven capacity, a gap made concrete by reports alleging Revolut failed to flag a significant volume of suspicious transactions.

Juliette Chamot: /* 1/ Bank of Lithuania */

2026-09-23T09:10:36Z

1/ Bank of Lithuania

← Older revision		Revision as of 11:10, 23 September 2026
Line 2:		Line 2:

	= '''Juliette''' =		= '''Juliette''' =
	= '''1/ Bank of Lithuania''' =		= '''Bank of Lithuania''' =
	<br>The Bank of Lithuania draws its authority from Lithuanian banking law, itself derived from EU directives. Revolut applied for a banking licence in November 2017, and this authority granted Revolut Bank UAB a specialised licence in 2021 — one that, thanks to EU passporting rules, lets Revolut operate across the entire EEA from its Lithuanian base. In exercising this role, the Bank of Lithuania aims to safeguard prudential stability and protect depositors. Its main weakness lies in capacity: a comparatively small national regulator bears formal responsibility for supervising a pan-European fintech serving tens of millions of customers, a mismatch that the ECB's 2024 takeover of direct supervision only made more visible.		<br>The Bank of Lithuania draws its authority from Lithuanian banking law, itself derived from EU directives. Revolut applied for a banking licence in November 2017, and this authority granted Revolut Bank UAB a specialised licence in 2021 — one that, thanks to EU passporting rules, lets Revolut operate across the entire EEA from its Lithuanian base. In exercising this role, the Bank of Lithuania aims to safeguard prudential stability and protect depositors. Its main weakness lies in capacity: a comparatively small national regulator bears formal responsibility for supervising a pan-European fintech serving tens of millions of customers, a mismatch that the ECB's 2024 takeover of direct supervision only made more visible.

	= '''2/ European Central Bank (ECB)''' =		= '''2/ European Central Bank (ECB)''' =
	<br>The ECB's authority stems from the Single Supervisory Mechanism Regulation, which allows it to take over direct prudential supervision of banks deemed significant within the euro area. On this basis, the ECB assumed direct oversight of Revolut's EU banking subsidiary in January 2024, once the entity's rapid growth pushed it past the significance threshold. Its purpose is to ensure consistent, high-quality prudential oversight across the eurozone rather than leaving systemically relevant institutions to national regulators of uneven capacity. Its weakness lies in timing and legitimacy: the ECB only stepped in once Revolut had already reached a scale where national supervision was arguably no longer adequate, exposing a structural lag between an institution's growth and its being brought under proportionate oversight.		<br>The ECB's authority stems from the Single Supervisory Mechanism Regulation, which allows it to take over direct prudential supervision of banks deemed significant within the euro area. On this basis, the ECB assumed direct oversight of Revolut's EU banking subsidiary in January 2024, once the entity's rapid growth pushed it past the significance threshold. Its purpose is to ensure consistent, high-quality prudential oversight across the eurozone rather than leaving systemically relevant institutions to national regulators of uneven capacity. Its weakness lies in timing and legitimacy: the ECB only stepped in once Revolut had already reached a scale where national supervision was arguably no longer adequate, exposing a structural lag between an institution's growth and its being brought under proportionate oversight.

Juliette Chamot: /* ' */

2026-09-23T09:10:24Z

← Older revision		Revision as of 11:10, 23 September 2026
Line 1:		Line 1:
	~~= '''''' =~~		Juliette Chamot

	= '''Juliette''' =		= '''Juliette''' =
	= '''1/ Bank of Lithuania''' =		= '''1/ Bank of Lithuania''' =