Revolut updates terms to block modified OS devices, citing security risks, sparking debate with GrapheneOS.
Revolut updates its terms and conditions
Revolut, a digital bank, has updated its general terms and conditions, introducing new rules that affect how users can access its services. The changes, which will take effect on December 2, 2026, are part of the terms of Revolut Bank S.A., the French entity that manages accounts for Revolut's French customers.New clause targets modified operating systems
One of the key additions in the updated terms is a statement opposing the use of alternative smartphone operating systems like GrapheneOS. Revolut claims that its app cannot be used on devices with modified or custom operating systems, including those that have been rooted or jailbroken.Revolut restricts device requirements
The new terms specify that users must use the original operating system of their device, as provided by the manufacturer. This means that users cannot install custom ROMs or use devices with unlocked bootloaders. These restrictions apply to both personal and business accounts.Security risks outlined in terms
Revolut warns that bypassing a phone's security protections or using unofficial systems "significantly increases the risk" of data breaches. The bank explicitly states that it will not be held responsible for security issues or losses that arise from such modifications.Inconsistencies in supported operating systems
Despite the restrictions, Revolut's app still supports Android 9, an operating system version released in 2018 that no longer receives security updates. On iOS, the app requires at least iOS 15, which Apple still supports with recent updates.GrapheneOS points out conflicting policies
GrapheneOS, an alternative operating system, highlights a contradiction in Revolut's policy. The app blocks devices with locked bootloaders but allows those with unlocked ones, even though unlocked devices are generally considered less secure.Other banks have similar restrictions
Revolut is not the only bank with these requirements. Other financial institutions, like BoursoBank, also restrict the use of their apps on modified devices. These restrictions often prevent users from using services like Samsung Pay or Google Pay on altered systems.Customers have time to respond
Revolut must send the updated terms to customers at least two months before they take effect. If customers do not respond, the terms are considered accepted. Those who disagree can close their accounts before December 2, 2026, without incurring fees.