Revolut Outage: Malta’s Digital Dependence Under Scrutiny

Last week’s disruption raises questions about payment resilience, the concentration of essential technology and how Malta would withstand a deeper shock to the digital economy. A healthy bank balance offers limited reassurance when the payment will not go through. For Revolut customers affected by the disruption on 20 October, that distinction became tangible. Payments, transfers and access to banking services were interrupted, including for users in Malta. Revolut said customers’ money and data remained safe, but the incident demonstrated how quickly a technical failure can interfere with everyday economic activity.

The implications are particularly relevant locally. Revolut’s Maltese website advertises a customer base of 350,000 people. At that scale, the availability of its services matters well beyond individual account holders: it becomes a consideration for businesses receiving payments and households managing their daily spending.

For a retailer, an unavailable payment method can mean a delayed or abandoned purchase. For a self-employed professional, an interrupted transfer can complicate a supplier payment. For a visitor relying on one account, it can create difficulty paying for accommodation, transport or meals. These are the kinds of commercial consequences businesses need to consider when assessing their exposure to an outage.

The underlying disruption also illustrates how much sits behind an apparently simple transaction.

Google’s preliminary incident report attributed the failure in its London cloud region to an electrical interruption and a fault that prevented backup generators from taking over. The resulting loss of infrastructure also put pressure on neighbouring systems as workloads shifted towards them. Google recorded a principal disruption lasting six hours and ten minutes, with some workloads taking longer to recover.

The cloud ultimately depends on physical infrastructure: electricity, cooling, network equipment and buildings. Banking applications depend, in turn, on those systems operating together.

For Malta, the concern extends beyond any single provider. A business may use several different applications while remaining exposed to shared infrastructure underneath them. Buying services from different brands does not necessarily create independent routes through which to keep operating.

This concentration is already attracting supervisory attention. In an interview published on 20 October, European Central Bank Executive Board member Frank Elderson identified dependence on a limited number of cloud providers as a source of considerable concentration risk.

That creates a practical question for Malta’s businesses: how long could essential operations continue if a critical platform became unavailable?

The answer requires more than a document labelled “business continuity”. Staff need to know how payments would be accepted, which obligations could still be settled, where essential records could be accessed and how customers would be contacted. A fallback that requires logging into the unavailable platform offers little protection.

The outage also invites a broader question: what happens if the technology boom itself suffers a serious reversal?

An operational failure and a market crash are different events. A fall in technology valuations would not automatically switch off banking services, and last week’s disruption does not establish that Revolut’s business model is failing. The connection lies in how deeply businesses and households depend on the technology sector, both as infrastructure and as an engine of investment.

The ECB’s September Economic Bulletin warned that concentrated equity markets could allow weakness in a small number of large technology companies to spread into broader market declines. It also highlighted questions surrounding optimistic earnings expectations and the sustainability of substantial investment.

For Malta, a severe correction could create several channels of exposure. Investors could experience losses through technology holdings or funds. Businesses seeking capital could face more cautious investors. Suppliers under financial pressure could increase prices, reduce support, withdraw products or consolidate.

These are scenarios for contingency planning. Their relevance is that a company can depend heavily on the technology industry without describing itself as a technology business. A hotel needs booking and payment systems. A recruitment firm needs access to its candidate database. A retailer needs functioning sales infrastructure. Their ability to serve customers can depend on decisions and systems far outside Malta.

The response should be proportionate to that dependence.

For households, an alternative payment method and a modest amount of accessible cash can reduce exposure to some disruptions. For businesses, a funded secondary banking arrangement, alternative payment acceptance and accessible copies of essential records deserve consideration. Each fallback should be tested against the failure it is supposed to address. A second card linked to the same unavailable service may offer little additional protection.

Cash has a role in basic, in-person transactions, while payroll, international transfers and online commerce require other contingency arrangements.

Financial regulation already recognises these challenges. The EU’s Digital Operational Resilience Act, applicable since January 2025, establishes requirements covering technology risk management, incident reporting, resilience testing and third-party dependencies. The MFSA describes its oversight framework as addressing systemic and concentration risks arising from reliance on a limited number of technology providers.

For Malta, the wider policy question is whether national digital ambitions are matched by sufficient attention to recovery, alternatives and accountability. Clear incident communication, credible restoration plans and tested contingency arrangements should form part of what customers and businesses expect from essential services.

Digital banking has made moving money faster and more convenient. As that convenience becomes embedded in daily life, resilience becomes part of the service people are buying.

Malta’s digital progress should therefore be judged partly by how well its economy keeps functioning when a critical system fails.