What to do first if you suspect your Revolut account was hacked
If you think someone accessed your Revolut account, act immediately to limit further damage and preserve evidence.
The fastest path to recovery starts with locking down access, checking recent activity, and contacting Revolut through the official app.
Account takeover attempts often begin with phishing, stolen passwords, compromised email inboxes, or SIM swap attacks.
Knowing what to do in the first few minutes can make the difference between a contained incident and unauthorized transfers, card misuse, or identity theft.
How to recover hacked Revolut account?
The most reliable way to recover a hacked Revolut account is to regain access through the app, verify your identity, report the incident to Revolut Support, and secure every connected channel the attacker may still control.
If you cannot sign in, use the app’s login recovery prompts or contact support from another device as soon as possible.
- Open the Revolut app only from the official installation.
- Try signing in with your registered phone number and passcode.
- Use password reset or login verification if prompted.
- If access is blocked, contact Revolut Support immediately.
- Review transactions, cards, vaults, beneficiaries, and linked devices.
- Change your email password, bank passwords, and mobile carrier PIN.
Step 1: Secure your phone and email before anything else
Revolut accounts are usually tied to a mobile number and a primary email address, so attackers often target both.
If a criminal controls either one, they may be able to intercept verification codes, reset passwords, or impersonate you to support teams.
Protect your email account
- Change your email password to a strong, unique one.
- Enable two-factor authentication with an authenticator app.
- Check for forwarding rules, filters, and recovery email changes.
- Sign out of all sessions on unfamiliar devices.
Protect your mobile number
- Call your carrier and ask whether a SIM swap or number port occurred.
- Add a carrier account PIN or port-out lock.
- Confirm your voicemail password has not been reset.
- Monitor for sudden loss of signal, which can indicate SIM hijacking.
Step 2: Regain access to Revolut through official recovery paths
If you can still access the app, update your security settings immediately and look for unknown devices or suspicious sessions.
If you cannot log in, use the official Revolut support channels in the app or on Revolut’s website rather than responding to messages on social media or search ads that may be fraudulent.
When you contact support, be prepared to confirm your identity and explain that your account may have been compromised.
Keep your request concise and include details such as the date you lost access, the last legitimate transaction you recognize, and whether your phone number or email was changed.
- State that you need help recovering a compromised account.
- Ask support to review account access and recent security changes.
- Request a temporary freeze if unauthorized activity is ongoing.
- Save all case numbers and support messages.
Step 3: Freeze cards and stop unauthorized spending
Once you suspect compromise, freezing your Revolut cards can prevent new card-not-present transactions and reduce losses.
In the app, check physical cards, virtual cards, and single-use cards, because attackers may only have access to one payment method while leaving others active.
Look for warning signs in transaction history
- Small test charges followed by larger purchases.
- Cash withdrawals or ATM attempts in unfamiliar locations.
- Card tokenization activity on digital wallets you do not use.
- New beneficiaries, bank transfers, or crypto transactions you did not approve.
If you find fraudulent activity, report it immediately through Revolut Support and follow the app’s dispute or chargeback instructions.
Keep screenshots, timestamps, merchant names, and any message notifications that show when the transaction occurred.
Step 4: Change security settings after you regain control
After recovering access, treat the account as untrusted until you have reset every security factor.
Attackers often leave backdoors such as changed email recovery options, unknown passcodes, or linked payment methods that can be used again later.
Update login and verification details
- Change your Revolut passcode or login credentials if the app allows it.
- Review the registered phone number and email address.
- Enable biometric authentication if your device supports it.
- Remove unfamiliar devices, cards, or linked bank accounts.
Strengthen your broader digital footprint
- Use a password manager to create unique passwords for every account.
- Turn on multi-factor authentication for banking, email, and cloud storage.
- Update the operating system and Revolut app to the latest version.
- Scan your device for malware or risky profiles, especially on Android.
How to tell whether your Revolut account was hacked or simply locked?
Not every login problem means your account was hacked.
Sometimes access fails because of app verification issues, outdated app versions, device changes, or a temporary security review by Revolut.
Signs of a real compromise include messages about password or number changes you did not make, unfamiliar login notifications, money transfers you did not authorize, and unexpected device prompts.
If the only issue is a failed login after a phone change, follow the recovery steps and ask support to confirm your identity rather than assuming fraud.
What information should you provide to Revolut Support?
Support can work faster when you provide precise incident details.
The goal is to prove ownership, identify the compromise window, and stop ongoing misuse.
- Your full name and registered phone number.
- The email address linked to the account.
- The date and approximate time you lost access.
- Any unauthorized card payments, transfers, or cash withdrawals.
- Whether your phone, email, or SIM card was compromised.
- Screenshots of alerts, charge notifications, or suspicious messages.
How to prevent another Revolut account takeover
Once your account is safe, focus on reducing the chances of a second attack.
The most effective defenses are simple: unique passwords, strong device security, and careful verification of every message that claims to be from Revolut or your mobile carrier.
Practical prevention habits
- Never share one-time codes, passcodes, or recovery links.
- Ignore urgent payment requests sent by text or email without verification.
- Check the sender domain and app origin before tapping links.
- Use app locks and screen locks on every device you use for banking.
- Review account activity weekly, not only when something seems wrong.
When to escalate beyond Revolut
If fraudulent transfers are large, your identity has been misused, or a SIM swap or email takeover is confirmed, you may need additional help beyond the app.
Contact your mobile carrier, your email provider, and local law enforcement if required in your jurisdiction.
For financial loss, keep a record of every support interaction and request written confirmation of the incident.
If a merchant dispute or card chargeback is involved, ask Revolut which evidence they need and submit it promptly.
Common mistakes that slow recovery
- Resetting passwords before securing email and phone access.
- Replying to fake support messages on social media.
- Ignoring small test transactions because they seem harmless.
- Waiting to report suspicious activity until after more charges appear.
- Reusing old passwords on other accounts after the incident.
The faster you isolate the compromise, the easier it is to recover a hacked Revolut account and stop repeat fraud.
Clear records, official support, and stronger account hygiene will help you restore control and reduce the odds of another takeover.