📰 What Happened?
Dutch public transport companies, led by NS (Nederlandse Spoorwegen), have blocked virtual payment cards from multiple fintech providers — including Revolut, Paysafe, and Vivid — after discovering a systemic fraud loophole that allowed people to travel for free.
The scam? Passengers could generate a temporary digital payment card in an app, use it to check in and out of trains, and then delete the card before the fare was charged. This left them with a valid ticket during the journey — but no money withdrawn afterwards.
🛑 The Ban: Who’s Affected?
- From 1 July 2025:
- NS blocked all virtual cards from Revolut, Paysafe, and Vivid.
- Paysafe cards were blocked nationwide across all public transport operators (trains, trams, buses, metro).
- Impact: Anyone using these virtual cards can no longer check in or out using OVpay, the Netherlands’ contactless travel payment system.
⚙️ How OVpay Works — And Why This Was Exploited
OVpay is designed for convenience:
- You tap in and out with your debit or credit card (physical or digital).
- Payment is processed later — usually at night — so boarding is instant.
- This means no delays for passengers, as transactions are batched for processing.
But this delayed payment method became a target. Fraudsters exploited the gap between travel and billing by deleting the temporary card before charges could be processed.
📉 Fraud Known for Years, First Major Ban Now
This isn’t a brand-new problem. Insiders acknowledge that free-travel fraud via insufficient funds or disposable cards has been possible for years.
However:
- Conductors couldn’t detect it during ticket checks — travellers appeared to have valid tickets.
- Losses have been difficult to quantify but were significant enough to trigger this unprecedented ban.
🗣️ Statements from Key Players
NS (Dutch Railways)
“This is serious misuse. We would have preferred not to take this step, but it was necessary.”
Translink (Operator of OVpay)
“We warned the companies in May to implement safeguards or face a block. OVpay’s delayed payment system is not changing — it’s designed for speed.”
Revolut
“We disagree with the decision to block cards instead of fixing the root cause. We are reviewing legal options for our Dutch customers.”
Vivid
“We are developing a technical fix, expected by September, but Translink will decide if the block is lifted.”
Paysafe
No public comment.
📊 Why This Matters for Payments & Fintech
This case raises big questions for the future of digital wallets and virtual cards:
- Trust & Security: Fintechs must ensure their products cannot be abused in deferred-payment systems.
- Public Transport Risks: As transport systems move towards open-loop payments, anti-fraud controls become critical.
- Consumer Impact: Law-abiding customers are now collateral damage, losing a convenient payment option.
🌍 Wider Implications
The Netherlands has been a pioneer in contactless transport payments. This ban:
- Signals a tighter scrutiny of fintech products in essential services.
- May influence other European countries exploring open-loop transport payments.
- Could push fintechs to integrate real-time pre-authorisation for such use cases.
🧭 Conclusion
While the fraud method itself is simple, its impact is far-reaching — damaging trust in both digital banking services and public transport payment systems.
The challenge now lies in balancing security and convenience. If fintechs like Revolut, Vivid, and Paysafe want back in, they’ll need to prove they can close this loophole — without slowing down the tap-and-go experience passengers expect.
