An urgent call out of the blue?
"A man called saying he was from my internet provider and that my router was being used by hackers. He was so patient and spent 2 hours 'helping' me. He asked me to download an app so he could fix the security.
I saw my mouse moving on its own, but he said that was just him 'running scans'. While I was on the phone, he logged into my account, saw my balance, and used my phone to get the codes. By the time I hung up, my account was empty."
Summary
Voice phishing, or 'vishing', is a form of impersonation scam that occurs when a criminal calls you pretending to be an authority figure. They frequently pose as Revolut employees, police officers, or IT technicians.
The call is designed to induce extreme panic. They may tell you that your account is currently being drained by a hacker or that your computer has a virus stealing your login details.
The goal is to trick you into performing a high-risk action while you are in a state of alarm. They might tell you to move your funds to a 'safe account', ask you to read back a one-time passcode, or persuade you to download software that gives them remote control over your device.
Common red flags
- The 'safe account' is a lie: we will never ask you to move your money to a new or 'safe' account to protect it. If anyone on a call tells you to transfer funds for security reasons, it is 100% a scam. Hang up immediately
- Hang up and wait: scammers can 'hold the line' open on landlines even after you hang up. If you receive a call you're unsure about, wait at least 10 minutes before making a new call, or use a different phone entirely to ensure you are not still connected to the scammer
- Be wary of secrecy: if a caller tells you not to talk to Revolut staff or to lie to them about the reason for a transfer, they are trying to hide their crime. Real investigators encourage transparency and formal verification
Safety best practices
- Codes are for you only: never read a one-time passcode (OTP) back to someone over the phone, even if they claim to be from our fraud team. Real Revolut employees will never ask for this code, it is the final key used to authorise a payment
- Reject remote access: never download software at the request of a caller. These tools allow a criminal to see your screen, watch you type passwords, and move your mouse to perform transactions while you watch
- Use the call checker in the Revolut app: your app includes a live detection banner that appears the moment you open it while on a phone call. This system cross-references the call with our internal systems to verify if the person you are speaking with is a legitimate Revolut employee