Cybersecurity in 30 seconds

Revolut suffers an outage affecting its app and card payments

In 30 seconds

Revolut confirms a disruption across several services

Since the morning of Tuesday 20 October 2026, users in several countries report that the Revolut app will not open and that some card payments fail. The company acknowledges a service disruption affecting multiple services and says customers' money and data are safe. The cause has not been confirmed.

What is happening?

Downdetector reports started shortly after 9:00 (Spanish time). According to press coverage they passed 1,500 within the first few minutes: about two thirds pointed to the app and the rest to problems logging in and reaching money.

  • The app shows a generic error on opening.
  • Some customers say their card was declined in physical shops.
  • Reports come from Spain and other European countries.

Revolut confirmed it on X: "We are currently experiencing a service disruption affecting multiple services. We can confirm that all our customers' money and data are safe." It also said it has been working on a fix since it detected the problem in the morning.

Its status page was slow to reflect it: the press noted it was still green with complaints already piling up. At 11:49 (Spanish time) it listed 31 items as "Partially unavailable" for Spain, including sign-up, login, card payments, top-ups, transfers, ATM withdrawals, currency exchange and stock investing. Those visible in the screenshot are marked as detected at 9:47.

Revolut status page for Spain at 11:49 CEST on 20 October 2026, showing 31 items as
Screenshot 01 Revolut status for Spain at 11:49 (CEST), with the interface in Spanish. Eight of the 31 affected items are shown; all those visible were detected at 9:47.

Is it a cyberattack?

Nothing points that way for now, but nothing rules it out either: Revolut has not explained the origin of the failure. An outage like this can come from a configuration change, an internal problem or an external provider, and loss of availability alone does not mean there has been a breach. It is worth waiting for what the company itself says before drawing conclusions.

The key point

Availability is part of security too: even when the failure is your provider's, being unable to pay or get paid that day is your problem.

What would I do now?

  • Do not repeat pending payments or transfers. If an operation was left half-done it can end up duplicated once the service recovers. Wait and check the transaction on your statement.
  • Keep another means of payment to hand. A card or account from a different bank stops a single provider's incident from leaving you unable to pay.
  • Be wary of messages about the outage. If you get an SMS, email or call asking for passwords, codes or to install something "to recover your account", it is phishing. Only log in from the official app or website.

If Revolut is part of your company's payments or expenses, today is a good day to ask what would happen if it were down for a whole day and who has an alternative. The same test applies to any critical supplier.

Going further

In the methodology for assessing supplier cybersecurity I explain how to inventory and tier third parties by criticality, including dependence on services that stop your business when they fail.

Free, no registration

Assess the supplier before an outage decides for you

Tier the third party, select what applies and generate a fillable PDF questionnaire. Everything is processed in your browser.

Create a VRM questionnaire →
Sources

Official statusRevolut: status page

User reportsDowndetector: Revolut status

Coverage and Revolut statementOKDIARIO: Revolut outage takes down the app and card payments · El Nacional: Revolut is not working · RTVC: Revolut suffers an incident

Information reviewed on 20 October 2026 at 11:49 (Spanish time), with the incident still open and no confirmed cause. Downdetector figures are user reports, not an official measure of impact, and this note is not updated as the service recovers.

← All notes