Revolut confirms sensitive customer data breach, falling for fake government requests

The company said a limited number of customers were affected after staff treated a spoofed government request as genuine, while accounts and funds were not breached.

Revolut disclosed customer identities and financial records, including Bitcoin transaction histories, after acting on a fraudulent request that appeared to come from a government agency.

The request arrived from an unauthorized email account using an official government agency's domain; it passed authentication checks, leading staff to believe the communication was genuine.

Disclosed records included full names, dates of birth, occupations, identity documents, and Bitcoin transaction histories, though the company confirmed biometric facial telemetry data was not involved.

On Friday, on-chain investigator ZachXBT shared a customer notice on Telegram, though the company has not confirmed the total number of affected users.

While Revolut serves more than 80 million customers globally, the company maintains it will not ask users to verification codes over the phone.

Fintech giant Revolut confirms customer data breach by fake government requests

The British fintech company's customer data was stolen through requests impersonating a government agency, the company confirmed, while saying its customers' funds were safe. Revolut is in the final stages of obtaining a license to operate in Israel

Revolut says data was exposed through fake government email

Passports, selfies and financial transaction histories of some customers were revealed to a fraudster using a government agency domain.

Revolut: the Neobank Swindled by a False Government Agency, Potentially Sensitive Data Stolen

Revolut says some customer data were exposed in e-mail-based scam

Revolut Fell Into a Mockery and Handed over Customer Data

An apparently official request led Revolutiont to information that may include passports, selfies and bank history. A government e-mail served as bait The Revolutiont confirmed to The Block that delivered data from...

Revolut confirms customer data breach after falling for fake government requests

Revolut confirmed that sensitive customer data was disclosed to an unauthorised third party after fraudulent requests were sent from a legitimate government agency domain, while the fintech said its systems and customer funds remained unaffected.

52 % of the sources are Center

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage