From identity documents and selfies to questions about income, account purpose and unusual transactions, Revolut can sometimes appear to ask customers for an extraordinary amount of information. The company argues that the reason is simple: modern banking cannot be secure without knowing who is behind the account.
Opening a financial account used to mean walking into a branch, showing an identity document and speaking to someone behind a desk.
Digital banking changed that experience completely.
A customer can now open an account from a phone, transfer money across borders within seconds, exchange currencies, invest and make payments without ever entering a physical bank.
But removing the branch did not remove the bank’s responsibility to know its customers.
In many ways, it increased it.
That is why Revolut customers can encounter questions that initially seem unusually detailed.
Where do you live?
What do you do for work?
Why are you opening the account?
Where did your money come from?
What is the purpose of a transaction?
And, sometimes, why are you sending money to a particular person or company?
For customers simply trying to use their own money, those questions can feel intrusive.
For Revolut, they are part of the price of operating a global financial platform in an era of increasingly sophisticated fraud, money laundering, sanctions evasion and organised financial crime.
A digital bank has to know who is behind the screen
Revolut currently asks new customers for information that can include their name, date of birth, residential address, country of residence, identity documents and the intended purpose of the account.
Depending on the country and legal requirements, customers may also be asked about occupation, tax residency and other personal information.
Identity verification can include a selfie, photograph, video or even a voice recording.
Why?
Because in a digital financial system there is no bank employee physically looking at the person opening the account.
The technology has to establish that the person exists, that the identity document is genuine and that the individual presenting it is actually its owner.
This is the foundation of KYC — Know Your Customer.
Without it, criminals could create accounts using stolen or fabricated identities and move money through the financial system with dramatically less resistance.
KYC is not just about bureaucracy
KYC is sometimes viewed by customers as little more than another regulatory obstacle.
But the principle is straightforward.
A financial institution needs to understand who its customer is.
That information creates a baseline.
If a customer normally receives a salary and makes ordinary household payments, then suddenly begins receiving large transfers from multiple unrelated accounts before immediately sending the money abroad, the activity looks unusual compared with the established profile.
That does not automatically mean a crime has occurred.
But it may require additional investigation.
The better a financial institution understands the normal activity of a customer, the easier it becomes to identify activity that does not fit.
And that is where KYC begins to overlap with another major part of modern financial regulation:
AML — Anti-Money Laundering.
Why Revolut sometimes asks where money came from
Money laundering rarely begins with a transaction labelled “criminal proceeds.”
It is designed to look legitimate.
Criminal organisations may divide funds into smaller transfers, move money through numerous accounts, exchange currencies, purchase assets or send funds across several jurisdictions.
The objective is often to make the original source increasingly difficult to identify.
Financial institutions are therefore required to look beyond individual transactions.
They need to understand patterns.
That means a bank or fintech company may sometimes ask customers for documents showing the source of funds or source of wealth.
A customer could be asked to provide a salary statement, investment record, business documentation or evidence explaining a large transfer.
From the customer’s perspective, the question can feel frustrating:
Why should I have to explain where my own money came from?
From the compliance perspective, the question is different:
Can the institution demonstrate that it took reasonable steps to prevent its infrastructure from being used to move criminal money?
For a regulated financial company, ignoring the second question is not an option.
The faster money moves, the faster security has to react
Revolut’s biggest advantage is also one of its biggest security challenges.
Money moves quickly.
A customer can exchange currencies and send funds internationally in seconds.
That convenience is valuable for legitimate customers.
It is equally valuable to criminals.
If stolen money can leave an account immediately, a security system that identifies suspicious behaviour several hours later may already be too late.
This is why modern financial institutions increasingly rely on automated monitoring.
Revolut says it uses real-time transaction monitoring, customer screening and machine-learning systems as part of its financial-crime controls.
CEO and co-founder Nik Storonsky has been making this argument for years.
When Revolut introduced machine-learning technology designed to detect financial crime, Storonsky argued that a company operating at massive scale could not rely entirely on slow manual processes while criminals were becoming increasingly sophisticated.
The principle has become even more important as Revolut has grown.
The company now serves tens of millions of customers across dozens of markets.
At that scale, security cannot depend on someone manually reviewing every transaction.
Technology has to identify the transactions that require human attention.
Sometimes security means stopping a legitimate customer
This creates an uncomfortable reality.
A system designed to identify suspicious transactions will occasionally question legitimate ones.
A customer may send an unusually large payment.
Revolut may request additional information.
A transfer may be delayed.
An account may temporarily require further verification.
For the customer, this can be extremely irritating.
But a financial-crime system that never interrupts legitimate activity would probably also fail to interrupt a significant amount of criminal activity.
The challenge is balancing the two.
Too little monitoring and criminals exploit the platform.
Too much monitoring and legitimate customers feel they are being treated like suspects.
Every major financial institution faces that problem.
Digital banks simply face it at much greater speed.
Fraud has become far more sophisticated
The image of financial fraud as a poorly written email asking someone to send money to a foreign prince is badly outdated.
Modern scams can involve professional call centres, social engineering, fake investment platforms, compromised email accounts, impersonation of bank employees, cloned websites and artificial intelligence.
Deepfake technology can imitate voices and faces.
Criminals can convince victims that they are speaking to their bank, employer, family member or investment adviser.
A perfectly legitimate account holder may therefore attempt to make a transaction that is technically authorized by them — while being manipulated by a criminal.
That creates one of the hardest problems in modern banking.
The account has not necessarily been hacked.
The real customer is pressing the button.
But the payment may still be fraudulent.
This is why Revolut and other financial institutions sometimes display warnings, ask additional questions or temporarily slow a transaction that appears unusual.
The objective is not always to stop the customer.
Sometimes it is to give the customer enough time to realize what is happening.
KYC protects more than Revolut
There is another misconception surrounding verification.
Customers may assume the primary reason for KYC is to protect the financial institution from regulators.
Compliance is certainly a major reason.
But verified identities also make the platform more difficult for criminals to exploit.
Imagine a financial system in which anyone could create 100 accounts under false names.
Those accounts could receive stolen money.
The funds could be divided.
Converted into different currencies.
Transferred again.
And withdrawn somewhere else.
Finding the people behind the accounts would be extremely difficult.
Strong identity verification makes that process harder.
Not impossible.
But harder.
And increasing the cost and difficulty of financial crime is itself an important form of security.
Geopolitical conflicts have made the problem more complicated
Financial crime does not exist separately from geopolitics.
Wars and international conflicts frequently lead to new sanctions against individuals, companies, financial institutions and entire sectors of economies.
Those sanctions can change rapidly.
Financial companies operating internationally must determine whether customers or payments have connections to sanctioned entities and whether criminals are attempting to circumvent restrictions through intermediaries.
Revolut’s 2025 annual report describes the sanctions environment as increasingly dynamic, shaped by geopolitical changes, stronger enforcement and evolving expectations for financial institutions.
The company says it performs daily customer screening for sanctions and adverse information and uses real-time transaction monitoring as part of its financial-crime controls.
That means geopolitical developments thousands of kilometres away can ultimately affect the questions a European customer sees inside a banking app.
Why a completely frictionless bank is probably impossible
Customers naturally want financial services to be simple.
Open the app.
Send the money.
Done.
But there is a fundamental conflict between absolute convenience and absolute security.
A financial platform that never asks questions would be extraordinarily convenient.
It would also be extraordinarily attractive to criminals.
A platform that investigated every transaction would probably be extremely secure.
It would also be almost unusable.
Modern banking therefore exists somewhere between those extremes.
The goal is to identify risk without making ordinary financial life unnecessarily difficult.
Artificial intelligence and machine learning are increasingly being used to improve that balance.
Instead of treating every customer identically, systems can analyze behaviour and identify transactions that differ substantially from normal patterns.
That allows most activity to continue instantly while unusual cases receive additional attention.
The questions are part of the security system
When Revolut asks a customer about employment, income, source of funds or the reason for a transaction, it can appear disconnected from cybersecurity.
It isn’t.
Cybersecurity protects the technical account.
KYC protects the identity behind it.
AML systems analyze the movement of money.
Sanctions screening checks who may be involved.
Fraud systems examine whether the transaction itself appears dangerous.
Together, those layers form the security system.
Remove one and the others become weaker.
Security becomes harder as a company gets bigger
Revolut’s scale makes the problem even more significant.
The company reported 68.3 million retail customers at the end of 2025, while customer balances reached roughly $67.5 billion. It has since said that more than 80 million retail customers use the platform worldwide.
That creates an enormous target.
A company holding tens of billions of dollars for tens of millions of people will inevitably attract sophisticated criminal organizations.
The security investment therefore has to grow with the platform.
Revolut says nearly one-third of its global workforce now works in financial-crime prevention, while its systems use machine learning, transaction monitoring and additional customer interventions to combat increasingly sophisticated fraud.
For customers, that security infrastructure can sometimes appear as one more question inside the app.
Behind that question may be a system analyzing millions of transactions and attempting to distinguish legitimate financial activity from criminal behaviour.
The inconvenient truth about modern banking
Nobody enjoys being asked to prove that their own money belongs to them.
Nobody enjoys uploading another document.
And nobody wants a legitimate transfer delayed.
But the alternative is not necessarily a financial system with the same security and fewer questions.
The alternative may be a system that is significantly easier to exploit.
Revolut’s challenge is therefore the same challenge facing the entire modern financial industry:
How do you make money move almost instantly while making crime move as slowly as possible?
KYC and AML are part of that answer.
So are identity verification, sanctions screening, transaction monitoring and automated fraud detection.
The process creates friction.
Sometimes frustrating friction.
But in a world where financial crime can cross countries in seconds and criminals increasingly use sophisticated technology to deceive their victims, a completely frictionless financial system may also be a dangerously exposed one.
For Revolut, security does not begin when something goes wrong.
It begins with knowing who opened the account in the first place.
18+, T&Cs apply. Exchange fees, fair-usage limits, and weekend fees may apply.