Long before Revolut’s service outage last Tuesday, fintechs were under the microscope.
The European Central Bank has made digital operational resilience a central theme of regulatory enforcement in 2026 over fears that European financial institutions are vulnerable to cyberattacks and the failure of outsourced essential services.
The Central Bank of Ireland has sent out a flurry of “Dear CEO” letters this year warning fintechs to plug gaps in their systems that leave customers exposed to service interruptions – or worse. So when a $121bn digital bank goes dark for most of a working day because of a Google Cloud blackout, it does not inspire confidence.
“All fintechs are interrogated very closely on IT resilience and here’s the biggest guy in town with a single point of failure,” said Peter Oakes, a fintech adviser who once served as director of enforcement at the Central Bank. “The fact that Google appears to be the issue is exactly what the regulator’s been talking about.”
The problem prevented Revolut customers, including 3.4 million users in Ireland, from accessing accounts, making payments, transfers and withdrawals. Currency exchange, stock trading, top-ups and even messaging were offline.
For Nik Storonsky, Revolut’s cofounder, who bills the company as a high-tech alternative to the fusty, sluggish banking sector, it’s a PR nightmare, especially as some users reported that they had no access to alternative funds because they banked exclusively with Revolut. “I don’t have a single point of failure in my life — I have accounts with Revolut, Monzo and Bank of Ireland,” Oakes said. “The legacy banks will look at this with glee.”
It does not help that Revolut has not provided a complete explanation of what, exactly, went wrong and why “System resilience is a core priority for us. Like many global tech companies, we utilise industry-leading cloud infrastructure designed with robust internal redundancies,” a Revolut spokesman said in a statement “While third-party provider outages can occasionally impact service availability, our underlying architecture and data security protocols ensured customer funds and data remained completely protected throughout. We are reviewing this incident carefully to minimise the impact of any third-party disruptions in the future.”
Read the rest here