He gave the scammers enough info to stick his account onto their phone AND authorised the transfer via auth code too?!?
That really doesn’t feel like Revolut’s fault. No point in more security if the user actively helps the scammers around it
They should probably refund the money taken during the time the customer was trying to contact them, it's just another tech company thinking that customer care is a disease
My plain old bank also requires a new code for each transaction even if you have the app enabled, so that's another point, I really would suggest people to steer far away from these new challenger banks
If the notification you get to setup a new app can be custom, instead of the device's name, like in this case it was presented as "Etsy" I guess it's another security concern, seems that Revolut doesn't take fraud or scam in consideration AT ALL, what they mean "very seriously"