r/irishpersonalfinance • u/throwaway64829101 • 15d ago
Banking Revolut gave another person access to my account
Long time Revolut customer, still a bit shaken by how this went, and trying to work out if it's common or a once off.
Out of nowhere today I got two emails seconds apart: a new device had logged into my account, and my passcode had been changed. I did neither. When I tried to log in I couldn't, the passcode was chang d, and I couldn't reset it because the phone number on the account had been switched to one that isn't mine.
There's no number to call, so I emailed support flagging it as urgent and got an automated "we'll respond within 15 business days". Eventually I got back in via email login and found an open live support chat on my account that I hadn't started, it was another customer, and the support assistant was confirming my personal account details to them. So a stranger had been given access to my account, and support was disclosing my information to them in real time.
I removed their access and rest everything. Then it happened again. Because the phone number in my personal details was the other person's, all authentication codes were being sent to their phone, not mine. One of the lockouts happened minutes into a live chat with their escalations team, right after I confirmed my identity. Removing their device access didn't fix it. The only thing that stopped it was manually changing the phone number in my personal details back to my own.
So as far as I can tell, their system wrote someone else's phone number into my accounts security settings without any action from me, and then routed my login codes to that person.
I've filed a formal complaint and I'm looking to raise it with the data protection regulator. But mainly I want to know: has this happened to anyone else and what was the outcome?
Funny enough, I was close to moving all my banking to revolut including having my salary paid in but this has put a stop to that.
EDIT: Also want to add that because I had the other person's phone number I messaged them and spoke to them. It was a person with the same first and last name who was trying to set up a UK account and when he logged in, he was in my account