Revolut failed to adequately verify the authenticity of government-related information requests, leading to a leak of sensitive customer data.

Are you a customer of #Revolut? With high-net worth? Congratulations! Your data, including passport scans, might have been leaked to criminals because Revolut fell for a targeted data phishing attempt. “Revolut recently identified a sophisticated external impersonation scam where an unauthorised third party utilised a legitimate government agency domain email to submit fraudulent requests for information” — Revolut spokesperson https://techcrunch.com/2026/09/12/revolut-confirms-customer-data-breach-through-fake-government-requests/

🚨🇬🇧 Revolut confirms customer data breach after falling for fake government requests Revolut has confirmed it disclosed sensitive customer information to an unauthorized third party after receiving fraudulent information requests sent from a legitimate government agency email domain. ⠀ Potentially exposed information includes: • Names and dates of birth • Postal and email addresses • Phone numbers • Passports and driver’s licenses • Verification selfies • IBANs • Account statements • Withdrawal records • Full transaction histories, including Bitcoin transactions ⠀ Revolut says a limited number of customers were affected, but has not disclosed the exact number or identified the government agency whose email domain was used. ⠀ After discovering the scam, Revolut blocked the email address and notified the affected government agency, law enforcement, data protection authorities, and financial regulators. ⠀ Revolut says its systems were not compromised and customer funds remain unaffected. Affected customers are being contacted directly.