Revolut Customers Hit by Data Exposure From Fake Government Email

Affected users were warned that their identification documents and account information may have been accessed.

Revolut Customers Hit by Data Exposure From Fake Government Email

Photo Credit: Unsplash/appshunter.io

The incident involved fraudulent information requests submitted by an unauthorised third party

Click Here to Add Gadgets360 As A Trusted Source As A Preferred Source On Google
Highlights
  • Revolut did not disclose the number of affected customers
  • The incident was reported to regulators and law enforcement
  • Exposed data may include passport and driving licence copies
Advertisement

FinTech and banking firm Revolut exposed sensitive customer information, including passport details, selfie authentication photos, and complete transaction history, after a fraudulent request that appeared to come from an official government agency. Customer information requests from a government agency's genuine email address passed Revolut's verification process, according to a post by the International Cyber Digest on Twitter. Revolut later stated that the requests were not genuine, and the compromised customers were informed about it on Friday. A limited number of customers were affected, said a spokesperson from Revolut.

Revolut Blocked Fraudulent Requests After Detecting Impersonation Scam

The compromised data included personal identification and contact information such as date of birth, home and email address, and phone numbers, along with copies of identification documents such as passports and driving licenses. The compromised data may also include selfie authentication images, account statements, and transaction history, according to the notification sent out to affected users via email, as reported by TechCrunch.  

Revolut, however, did not specify how many people were affected. It also did not reveal if the security breach occurred within a particular market alone and did not disclose which government body was involved. “Revolut recently identified a sophisticated external impersonation scam where an unauthorised third party utilised a legitimate government agency domain email to submit fraudulent requests for information,” the spokesperson said.

According to the report from TechCrunch, Revolut blocked the email address after realising the scam carried out by the unauthorised third party and notified the appropriate government agency, law enforcement, and regulators, saying that “Revolut systems and customer funds are unaffected.” The incident created a buzz on X, with people criticising the existing practice of mandated information sharing. Marc Zeller posted that he woke up to Revolut leaking all his data. He added, “A sharp reminder that KYC has not delivered any upside, but rather gotten us into trouble.”

In a similar incident in August, Bits of Gold, a cryptocurrency brokerage service, revealed that cybercriminals hacked about 200,000 users' personal information. They disclosed the data breach incident on Sunday, stating that one hacker managed to gain entry into a third-party data analytics system, thereby gaining access to customers' names, national IDs, email addresses, phone numbers, IP addresses, bank details, and public wallet addresses. 

Cryptocurrency is an unregulated digital currency, not a legal tender and subject to market risks. The information provided in the article is not intended to be and does not constitute financial advice, trading advice or any other advice or recommendation of any sort offered or endorsed by NDTV. NDTV shall not be responsible for any loss arising from any investment based on any perceived recommendation, forecast or any other information contained in the article.

Comments

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Further reading: Revolut, Crypto hacks, Data Breach
Rahul Dhingra
Rahul Dhingra is a crypto writer at Gadgets 360, where he covers the exciting world of Cryptocurrency, Blockchain, Defi and Web3. Before joining Gadgets 360, he worked as a content specialist for a European-based Crypto Exchange. Rahul loves storytelling, not just through the written word but also through the visual medium. Beyond his professional life, Rahul is a sports fanatic. Whether it’s cricket or football, his passion for the game is contagious. More
AI Leaders Reach Consensus: Amodei, Altman, Musk, and Hassabis on Extinction Risks
The Perfect Galaxy Watch for Men in 2026: Why the Galaxy Watch9 and Galaxy Watch Ultra2 Are Samsung's Boldest Upgrade Yet

Advertisement

Follow Us

Advertisement

© Copyright Red Pixels Ventures Limited 2026. All rights reserved.
Trending Products »
Latest Tech News »