The Bank of England's Prudential Regulation Authority (PRA) has issued a section 166 skilled-person review order directed at Revolut, requiring the fintech to commission an independent external examination of the controls it uses to approve new financial products. The order, which was issued earlier in 2026 and first reported by the Financial Times, arrived in a notably sensitive moment: shortly after Revolut finally secured the UK banking licence it had pursued for years. The timing sends an unambiguous signal that Britain's foremost banking regulator intends to hold the newly licensed institution to the highest standards from the outset, regardless of the company's celebrated growth trajectory.
What a Section 166 Order Actually Means
A section 166 order is one of the most consequential supervisory tools available to the PRA under the Financial Services and Markets Act. It compels a regulated firm to appoint, at its own expense, a qualified independent practitioner — typically a major professional services or consulting firm — to conduct a thorough review of a specific area of the firm's operations or governance. The resulting report is submitted directly to the regulator, not merely to the firm's own board. Crucially, this mechanism bypasses the firm's internal audit function entirely, giving the PRA unfiltered visibility into practices that might otherwise be buffered by layers of internal reporting. Historically, section 166 orders have been deployed in cases where the regulator has identified concerns serious enough to warrant external verification, but not yet at the threshold requiring formal enforcement action. Their issuance is nonetheless a matter of significant regulatory gravity.
The Specific Focus: Product Approval Procedures
The PRA's focus on Revolut's product approval controls is particularly instructive. In the current regulatory environment, product governance sits at the intersection of consumer protection, financial stability and conduct risk. For a firm of Revolut's scale and ambition — operating across dozens of markets and continuously launching new financial services from trading products to lending — the procedures governing how new products are internally assessed, stress-tested and approved before they reach customers carry substantial systemic and reputational weight. Regulators have grown increasingly attentive to the pace at which technology-driven firms bring products to market, concerned that speed-to-launch cultures can outstrip the rigour of internal risk assessment. An independent review of precisely these controls suggests the PRA has specific questions about whether Revolut's approval frameworks are sufficiently robust for an institution now operating under a full banking licence.
A Pivotal Moment in Revolut's Regulatory Journey
Revolut's path to obtaining a UK banking licence was protracted and at times fraught. The company first applied for the licence in 2021 and navigated years of regulatory dialogue, enhanced scrutiny of its financial reporting, and persistent questions about governance maturity before the licence was finally granted. The banking licence was widely described as a landmark achievement for the company — unlocking the ability to offer deposit-taking services with full regulatory backing and substantially expanding the product suite it can offer British customers. The immediate issuance of a section 166 order in the wake of that licence grants should not be read as a reversal of that milestone. Rather, it reflects the heightened obligations that accompany full authorisation: where a firm operates as an e-money institution, the PRA's supervisory reach is comparatively limited; where that same firm becomes a licensed bank, the regulator's expectations shift dramatically and immediately.
Broader Implications for the Neobank Sector
The PRA's action carries implications that extend well beyond Revolut's boardroom. The neobank sector as a whole has spent the better part of a decade making the case that technology-native firms can match or exceed the operational and governance standards of incumbent banks while delivering superior customer experience and lower costs. Regulatory actions of this nature test that proposition publicly and put peer institutions on notice that the process of obtaining a banking licence is not the endpoint of regulatory scrutiny — it is, in many respects, the beginning of its most intensive phase. Other fintech firms currently pursuing or recently awarded banking authorisations in the United Kingdom and across Europe would be well-advised to treat this development as a reference point for their own product governance frameworks.
What This Means for Revolut and Its Customers
For Revolut's approximately 50 million global customers, the immediate practical impact of the section 166 review is likely to be minimal in the short term. The review process is a supervisory mechanism, not a customer-facing intervention, and does not of itself restrict Revolut's ability to operate or launch new products during the review period. However, depending on the findings that the independent reviewer surfaces and subsequently reports to the PRA, the regulator retains a full range of follow-on powers — from requiring specific remediation plans to imposing restrictions on product launches or, in more serious cases, formal enforcement. The direction and conclusions of the review will therefore be closely watched by investors, counterparties and customers alike. Revolut has built a valuation and a reputation on relentless product velocity; the quality of its governance architecture around that velocity is now the subject of formal external examination. How that examination concludes will matter considerably for the company's next chapter as a fully licensed British bank operating under the full weight of prudential oversight.
Written by the editorial team — independent journalism powered by Codego Press.