Revolut's Israel job ads for credit, collections and AML staff point to a deposit-taking bank

In my view the collections listing says the most about the plan. A collections desk has nothing to do until credit has been extended. Revolut's Israeli openings put collections next to credit product management, banking operations, risk and anti-money-laundering work ^[2]. Crowdfund Insider, which reported the listings, says the mix is the control environment regulators expect, and that Revolut is not staffing mainly for marketing or customer acquisition ^[8].

That ordering has a cost. A group that says it serves more than 80 million customers and employs over 13,000 people worldwide ^[9] is putting Israeli hires into functions that pay off only once a licence arrives. No public launch date for full Israeli operations has been set ^[10]. Calcalist's report of the licence talks came 15 months before the September 2026 incidents ^[19].

The Bank of Israel could grant the lean bank licence, and Revolut would take deposits and compete directly with established lenders ^[5]. Supervisors could also take longer while they examine the September incidents, and Revolut would pay for a bank's control staff with no deposits to show for it. A third path keeps Revolut on payment-style services for longer ^[5], with the people it hires now waiting on a licence. I think the hiring is built for the first outcome: a requirement for the Bank of Israel's Proper Conduct of Banking Business rules ^[3] is not something a marketing launch needs. The counter-case is that a job listing commits no capital. The source does not give a count of open roles, a headcount target or a budget. If Revolut's Israeli listings move toward marketing and customer acquisition before any licence, the thesis is wrong.

The September record bears on the same licence. Crowdfund Insider writes that the incidents keep "information-security and request verification practices in view" for Israeli supervisors ^[16]. Over a period of months Revolut answered the impersonated requests. According to the attackers and later reporting, it handed over identity documents, verification images, account statements and transaction histories for a limited set of customers, many with large crypto balances ^[12]. Revolut describes an external impersonation of official requests, not a breach of its own systems, and says customer funds were not touched ^[13]. The hackers claimed roughly 680 accounts and sought a multimillion-dollar ransom ^[20]. Against 80 million customers that is about one account in 118,000 ^[21].

On the DriveWealth exposure, Revolut says its own systems were not compromised, and that the passwords, card details and identity documents it holds were not part of the leak ^[15]. The affected records date from before Revolut changed how it shared customer details for stock trading, and may include names, addresses, citizenship and partial account numbers ^[18].