Revolut Exposes Customer Data After Fake Government Email Scam
Revolut confirmed it handed over sensitive customer information after receiving fraudulent data requests sent from what appeared to be a legitimate government agency email domain. The exposed data reportedly included names, birth dates, addresses, phone numbers, ID documents, and possibly verification selfies and transaction histories. The company says only a limited number of customers were affected and that it has since blocked the fraudulent email address and alerted authorities.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident shows how attackers can bypass security not through technical hacking but by impersonating trusted institutions, exploiting the human trust placed in official-looking government requests. For a fintech with over 80 million users expanding into new regulated markets like the U.S., such breaches raise questions about verification protocols for data-sharing requests and could invite regulatory scrutiny as Revolut pursues banking licenses abroad.
- Revolut disclosed customer data after fraudulent requests impersonated a government agency's email domain.
- Exposed information may include IDs, selfies, addresses, and transaction histories, though customer funds were unaffected.
- The breach raises concerns about verification safeguards as Revolut expands into new banking markets, including the U.S.
Yubico YubiKey 5C NFC Security Key — When breaches expose your identity documents and contact details, phishing and account-takeover attempts usually follow — a hardware security key makes your logins far harder to hijack. The YubiKey 5C NFC works over USB-C or by tapping on your phone, and it's supported by major banking, email, and password manager accounts. It's a small, durable piece of kit to keep on your keyring for everyday two-factor logins.
See Yubico YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: techcrunch.com — Jagmeet Singh, 2026-09-12
Published there as: “Revolut confirms customer data breach through fake government requests”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.