BANK OF ENGLAND ORDERS INDEPENDENT REVIEW OF REVOLUT’S PRODUCT APPROVAL SYSTEMS

Britain’s banking regulator has reportedly ordered an independent examination of Revolut’s product-approval systems as the fast-growing financial technology company expands deeper into traditional banking services including personal lending, credit products and eventually mortgages. The review, ordered by the Bank of England’s Prudential Regulation Authority, is intended to examine whether Revolut’s internal controls, governance procedures and risk-management arrangements are sufficiently robust to support the pace at which the company is launching new products and entering more complex areas of financial services following its transition into a fully licensed British bank.

The Financial Times reported on Tuesday that the PRA commissioned the review under Section 166 of the Financial Services and Markets Act, a supervisory power that allows regulators to appoint an independent expert, often referred to as a skilled person, to investigate particular aspects of a regulated company’s business. The examination is understood to focus specifically on Revolut’s processes for approving new financial products and determining whether the company has adequate controls in place to identify legal, prudential, compliance and operational risks before those products are offered to customers.

The significance of the review lies in Revolut’s rapid transformation from a digital payments application into a full-service banking group. Founded in 2015, the company initially built its reputation around foreign-exchange services, travel payments and app-based money management, but it has expanded aggressively into savings, investments, cryptocurrency, business banking, insurance and other financial products. That expansion is now moving into consumer lending, an area carrying substantially greater credit and regulatory risk than many of the services through which Revolut originally grew.

Revolut secured full approval to launch its UK bank in March 2026 after the Prudential Regulation Authority lifted restrictions attached to the banking licence it had first granted in 2024. The earlier authorisation had placed Revolut into a mobilisation phase, during which it was required to complete systems, controls and operational preparations before functioning as a full deposit-taking bank. The March approval allowed Revolut Bank UK Ltd to begin rolling out regulated banking accounts and broaden its range of services, including products that involve accepting deposits and extending credit.

The company said at the time that the transition represented a major milestone after years of regulatory scrutiny and would allow it to offer banking services to a UK customer base already numbering more than 13 million people. Revolut is now supervised as a bank by both the Prudential Regulation Authority and Financial Conduct Authority, placing it under essentially the same core regulatory framework that applies to established British banks.

The latest review should not be interpreted as a determination that Revolut has broken banking rules. Section 166 reviews are supervisory tools that regulators can use to obtain independent information, analysis and assurance about a financial institution’s systems or risk profile. The PRA’s own guidance states that such reviews can be commissioned when the authority wants additional information, expert recommendations or assurance concerning a particular aspect of a regulated firm’s operations.

However, the decision to order an independent review indicates that regulators want greater scrutiny than ordinary supervisory dialogue alone would provide. A skilled person can examine internal documents, interview company officials, assess governance and test whether controls operate as intended before submitting findings and recommendations to the regulator. If serious weaknesses or regulatory breaches are subsequently identified, those findings can lead to remediation requirements and, in more serious cases, potential enforcement action.

The Financial Times reported that the Revolut review was ordered earlier in 2026, around the period in which the fintech received final approval for its UK banking operations. Neither Revolut nor the Bank of England commented publicly on the report, while Reuters said it had not independently verified all details of the Financial Times account at the time of publication.

The regulatory examination is particularly relevant because Revolut has begun a major push into personal lending in Britain. On Monday, the company announced the launch of unsecured personal loans ranging from £2,000 to £25,000, with interest rates extending from approximately 6.9 percent to 29.3 percent depending on a borrower’s credit profile. The loans are initially being offered to selected customers before a broader rollout across Revolut’s UK customer base.

Revolut UK Chief Executive Francesca Carlesi said the company wants to move beyond being primarily an everyday spending and payments application and become the main bank used by British customers. That strategy would place Revolut in much more direct competition with established lenders including Lloyds, NatWest, Barclays, HSBC and Santander, which have built large consumer-loan books and extensive credit-risk databases over decades.

Moving into unsecured lending changes the risk profile of Revolut’s business because the company must assess whether customers are likely to repay borrowed money without the protection of collateral such as a house. Traditional lenders rely on long histories of customer behaviour, credit records, income information and economic modelling to manage those risks. Revolut has acknowledged that it does not yet possess the same decades-long internal lending data available to established banks and is supplementing its own information with data obtained from external providers.

Carlesi told Reuters that Revolut remains confident in its underwriting process and plans to expand lending gradually rather than pursue an immediate large-scale loan book. The company also intends to manage its exposure by eventually securitising part of its lending portfolio and aims to maintain a relatively low loan-to-deposit ratio compared with traditional banks.

The company has said personal loans are only the beginning of its expansion into UK credit. Revolut plans to introduce credit cards and has longer-term ambitions to enter the mortgage market, which would transform it further from a fintech application into a conventional banking competitor offering many of the products traditionally associated with large retail lenders.

That strategic expansion helps explain why regulators are examining product governance so closely. Product-approval systems determine whether a bank properly evaluates financial, legal, compliance, operational and consumer risks before launching new services. Regulators expect firms to demonstrate that senior management understands a product’s potential risks, that customers are treated fairly and that sufficient infrastructure exists to monitor problems after launch.

Those requirements become more important as financial products grow more complex. A payment feature can create fraud, technology and operational risks, while a loan can additionally expose a bank to defaults, affordability concerns, consumer-protection requirements and economic shocks. Mortgages would add further capital, interest-rate and long-term credit exposure.

Revolut’s central challenge is therefore maintaining the speed of innovation that helped drive its growth while developing the slower and more rigorous control systems expected of a systemically important banking organisation. Technology companies often compete by releasing products rapidly, testing new features and adapting them based on customer response. Banking regulators, by contrast, expect product risks to be identified and controlled before customers or the financial system are exposed to them.

The company’s size makes that tension increasingly important. Revolut now says it serves more than 80 million customers worldwide across dozens of markets, making it one of the largest digital financial groups in the world by customer numbers. Its rapid growth has also pushed its private-market valuation above that of many long-established financial institutions.

With that scale comes greater regulatory responsibility. A control failure affecting a small startup may harm a limited group of users, while the same failure at a financial platform serving tens of millions of customers can create widespread losses, complaints or financial-stability concerns. Regulators therefore tend to demand progressively stronger governance as companies become larger and more interconnected.

Revolut’s financial performance has reinforced expectations that it will continue expanding aggressively. The company reported record results for 2025, with revenue rising sharply and profit before tax reaching approximately €2 billion. Lending was among the fastest-growing parts of the business, reflecting the company’s strategy of earning more revenue from each customer rather than relying predominantly on transaction fees, foreign exchange and subscriptions.

The move toward lending is commercially attractive because interest income can provide a stable and highly profitable source of revenue when loans are managed effectively. However, lending can also generate large losses if borrowers default during an economic slowdown or if underwriting standards are too weak.

Britain’s current economic environment adds to those concerns. Households continue to face cost-of-living pressures, inflation remains elevated and the labour market has weakened. Those conditions can reduce borrowers’ ability to repay unsecured debt, meaning a lender entering the market must carefully assess affordability and maintain sufficient reserves for potential losses.

Revolut has said its gradual rollout will allow the company to monitor performance before expanding more widely. The company has not announced an overall target for the size of its UK loan book and says it intends to remain cautious as it accumulates more lending experience.

The reported PRA review therefore comes at a particularly important point in Revolut’s development. The company has finally achieved a UK banking licence after a lengthy approval process and is using that licence to launch the types of products it had long planned to introduce. Regulators, meanwhile, appear determined to ensure that internal controls develop at the same pace as commercial ambitions.

The Financial Times reported that the examination is similar in some respects to regulatory action previously taken against Revolut’s European banking operations. The European Central Bank has also scrutinised the company’s product governance and compliance arrangements and previously imposed restrictions on the launch of certain new products while it required improvements to internal processes.

According to the Financial Times, the ECB identified weaknesses in Revolut’s product-approval framework and required an independent examination of areas including risk management, compliance and legal oversight. Those concerns reportedly resulted in temporary limits on some expansion activities until regulators were satisfied that appropriate improvements had been made.

The UK review therefore does not exist in isolation. It fits a broader pattern in which regulators are increasingly testing whether Revolut’s internal governance can support the company’s extraordinary pace of international expansion.

Revolut operates across Europe and several other regions and has continued applying for banking licences in new markets. It recently obtained a full banking licence in France, creating another regulated European banking hub alongside its existing Lithuanian operation. The company has also expressed ambitions to enter or expand in major markets including the United States and to reach customers across approximately 70 countries by the end of the decade.

That international strategy increases complexity because financial regulations vary significantly between jurisdictions. Product-approval systems therefore need to account not only for commercial risks but also for different capital rules, consumer protections, data requirements, anti-money-laundering obligations and legal frameworks across dozens of countries.

A financial product permitted in one market may require modification or additional approvals elsewhere. Companies expanding quickly must therefore ensure that commercial teams do not move faster than risk, legal and compliance functions can reasonably assess their plans.

Revolut has invested heavily in compliance and risk management in recent years, particularly after the lengthy process required to secure its UK banking licence. The company has expanded regulatory teams, changed governance arrangements and strengthened internal reporting as it sought to convince authorities that its infrastructure could support full banking operations.

The eventual granting of the UK banking licence indicates that regulators considered Revolut capable of meeting the threshold conditions necessary to operate a bank. However, a banking licence is not a permanent guarantee that all systems will always remain satisfactory. Banks are subject to continuous supervision, and regulators routinely examine how controls evolve as business models change.

The current Section 166 process is therefore part of an ongoing supervisory relationship rather than a reopening of the question of whether Revolut should hold a banking licence. The PRA can require banks to strengthen systems and address weaknesses without withdrawing their authorisation.

That distinction is particularly important for customers. There is currently no indication that Revolut’s UK bank has been ordered to stop operating, that customer deposits are at immediate risk or that the company has been found guilty of regulatory misconduct.

Eligible deposits held with Revolut Bank UK Ltd are protected by Britain’s Financial Services Compensation Scheme up to the statutory limit, just as they are at other authorised banks. Revolut said after receiving full banking approval that eligible deposits would receive FSCS protection as customers migrated onto the new bank.

The reported review relates specifically to the processes through which new products are approved and controlled rather than to a publicly identified threat to customer deposits. Regulators may ultimately determine that existing systems are satisfactory, recommend improvements or identify problems requiring remediation.

A Section 166 review can be broad or narrowly focused depending on the regulator’s concerns. The PRA says it uses skilled-person reviews to obtain specialist advice, independent analysis and assurance where ordinary supervisory information may not be sufficient. In the 2025-26 financial year, the PRA commissioned 14 such reviews across banks, insurers and other regulated institutions, including several focused specifically on governance, controls and risk-management frameworks.

This means the procedure is serious but not extraordinary within banking supervision. Large regulated firms periodically undergo independent reviews when authorities want deeper assurance about specific risks.

What makes Revolut’s case particularly notable is the company’s growth trajectory. It has gone from a startup challenging banks on foreign-exchange fees to a global financial institution valued at more than $100 billion in little more than a decade. That pace has been central to its commercial success but has also attracted recurring questions about whether governance and compliance structures can grow equally quickly.

Traditional banks often spend years introducing major new product lines because internal committees, regulators and risk departments subject them to extensive testing. Digital challengers have built their reputations by moving faster, creating competitive tension between innovation and regulatory caution.

The PRA does not seek to eliminate innovation, and British policymakers have repeatedly said they want the UK to remain an attractive location for fintech companies. The regulator has also emphasised that financial supervision should remain proportionate and support competitiveness alongside stability.

However, the PRA’s primary responsibility remains the safety and soundness of banks. As Revolut begins taking deposits and extending more credit, the consequences of inadequate risk controls become greater, making supervisory scrutiny inevitable.

The timing of the reported review also intersects with broader changes in British financial regulation. The PRA has recently announced plans to examine whether its rules appropriately balance resilience with international competitiveness, while the government has encouraged regulators to support economic growth and innovation.

That agenda does not mean regulators will reduce scrutiny of rapidly expanding institutions. Instead, authorities have argued that clearer and more efficient supervision should allow strong firms to grow while identifying weaknesses before they become systemic problems.

Revolut may ultimately benefit if the independent review identifies deficiencies early enough for them to be corrected before lending becomes a much larger part of the business. Strengthening product governance while the company’s UK loan book is still relatively small would likely be easier than attempting to fix problems after millions of customers have already taken on new credit products.

The company also has strong commercial reasons to satisfy regulators quickly. Its ambition to become customers’ primary bank depends heavily on trust. Consumers may be willing to use a mobile application for travel payments while holding their salaries and savings elsewhere, but convincing those customers to move deposits, borrow money, take mortgages and use Revolut for everyday banking requires a higher level of confidence.

Revolut’s UK leadership has openly acknowledged that transition. Carlesi has said the company wants to evolve from a highly successful spending application into the main financial institution used by customers, a shift that requires building deeper relationships and competing directly with traditional banks.

Personal loans are an important part of that strategy because they generate revenue and encourage customers to use a broader range of products. Credit cards and mortgages could eventually deepen that relationship further.

However, credit products also expose Revolut to some of the most tightly regulated areas of retail banking. British lenders must evaluate affordability, treat vulnerable customers fairly, manage arrears appropriately and comply with extensive consumer-credit rules.

Regulators have become particularly sensitive to these issues after previous scandals involving mis-sold financial products, irresponsible lending and inadequate treatment of borrowers experiencing financial difficulty. Revolut will therefore be expected to demonstrate that technological convenience does not come at the expense of consumer protection.

The independent review is likely to examine how product proposals move through Revolut’s internal governance structure, who has authority to approve launches, how risk functions challenge commercial teams and whether senior executives receive sufficient information before decisions are made.

It may also consider whether post-launch monitoring adequately identifies emerging risks and whether compliance teams can require changes or stop products that create unexpected problems.

These processes are central to modern banking governance because a product can appear commercially attractive while creating risks that are not immediately obvious. Regulators expect banks to evaluate worst-case scenarios rather than relying solely on expected profitability.

Revolut’s continued international expansion makes consistent governance especially challenging. A single product may be developed centrally but offered through different regulated entities, requiring local compliance teams to assess whether it meets each jurisdiction’s rules.

Failure to coordinate those functions could create situations in which products launch before all relevant controls are fully established. The Financial Times report suggests that this is precisely the type of concern regulators want the independent review to examine.

The company’s previous European regulatory experience will likely influence how markets interpret the UK review. The ECB’s earlier intervention demonstrates that product-governance concerns have arisen elsewhere within the group, meaning investors and regulators will watch closely for evidence of recurring weaknesses.

At the same time, regulatory scrutiny is not necessarily evidence that Revolut’s broader banking strategy is failing. Large banks frequently face supervisory reviews and are often required to improve systems as their operations evolve.

The more important question is how quickly and effectively management responds if deficiencies are identified. Regulators typically distinguish between institutions that acknowledge weaknesses and remediate them promptly and those that fail to address repeated concerns.

Revolut has not publicly commented on the latest Financial Times report, meaning its detailed response to the PRA’s concerns is not yet available. The Bank of England has similarly declined to comment on the specifics of the reported examination.

That silence is not unusual because regulators generally do not discuss confidential supervisory matters in detail. Section 166 reviews often take place largely outside public view, with findings disclosed only if they lead to formal enforcement or if the company chooses to discuss them.

This means the immediate public information remains limited. The FT has reported that an independent review was ordered, that it concerns product approvals and that the move occurred as Revolut expands into lending. Reuters has confirmed the report’s existence but said it could not independently establish every detail.

There has been no announcement of a fine, customer compensation scheme, licence restriction or enforcement case arising from the UK review. Reporting should therefore avoid language suggesting Revolut has already been found in breach of regulatory requirements.

The correct description is that regulators have ordered a closer independent examination of whether the fintech’s internal controls are adequate for its rapidly expanding banking activities.

That scrutiny may intensify as Revolut launches additional products. Personal loans are already being rolled out, credit cards are expected next and mortgages are part of the longer-term strategy.

Each new service will expose the company to different types of financial and operational risk, meaning strong product governance will become increasingly important as Revolut tries to challenge Britain’s largest lenders.

Traditional banks may view the regulatory scrutiny as evidence that digital competitors must ultimately meet the same standards as established financial institutions. Revolut has frequently disrupted banking through lower fees, faster technology and simplified applications, but regulatory requirements become more similar as business models converge.

Customers may benefit from that competition if new entrants force established banks to improve technology, lower prices and provide better products. Regulators, however, must ensure competition does not weaken financial stability or consumer protection.

That balance is becoming one of the defining challenges of modern financial regulation. Authorities want innovative companies capable of challenging entrenched institutions, but they also need to prevent rapid growth from creating hidden weaknesses.

Revolut’s reported Section 166 review captures that tension clearly. The company represents one of Europe’s most successful fintech stories, yet the very expansion that made it successful is creating the need for more traditional bank-style oversight.

The outcome of the review could therefore matter beyond Revolut itself. Other fintech companies seeking full banking licences may see the case as an indication that regulators expect sophisticated governance structures long before a company reaches the scale of a major incumbent bank.

That could increase compliance costs for fast-growing financial startups but may also reduce the risk of damaging failures after they become large enough to affect millions of consumers.

For Revolut, the commercial stakes are particularly high because management has set exceptionally ambitious growth targets. The company wants to expand into dozens of additional markets, deepen lending, increase deposits and become the primary financial provider for a far larger proportion of its customer base.

Achieving that strategy will require not only technology and capital but regulatory confidence. Banking licences, lending permissions and international expansion all depend on authorities believing that governance and compliance systems are reliable.

The PRA’s independent examination should therefore be understood as a significant test of whether Revolut’s internal architecture has matured alongside the scale of its business.

If the review concludes that systems are broadly satisfactory, it could strengthen the company’s case for continued expansion. If it identifies weaknesses, Revolut may be required to make changes before launching additional products or increasing lending more rapidly.

The most serious outcomes, including enforcement action or penalties, would depend on regulators identifying actual breaches rather than merely areas requiring improvement. No such finding has been announced.

For now, the company continues operating and expanding its UK banking services. Its personal-loan launch remains under way, and the bank has not publicly announced any change to its broader product roadmap because of the review.

The next meaningful development is likely to come when the skilled person completes the examination or when Revolut or regulators disclose whether remedial measures have been required.

Until then, the central issue is not whether Revolut has been declared unsafe or non-compliant, but whether a rapidly growing fintech has built product-approval and risk-management systems capable of supporting its transition into a large, full-service international bank.

That question will become increasingly important as Revolut moves further away from the relatively simple digital-payment services on which it built its reputation and deeper into lending, credit and other activities where mistakes can create larger losses for both the company and its customers.

The Bank of England’s reported intervention therefore represents a significant moment in Revolut’s evolution. The company has achieved the UK banking licence it pursued for years and has begun using it to challenge traditional lenders, but that success also subjects it to a higher level of scrutiny.

How Revolut responds to that scrutiny may determine how quickly it can continue expanding and whether regulators become comfortable allowing one of Europe’s fastest-growing financial companies to operate increasingly like one of its largest banks.