Revolut says customer data was exposed in fake government email scam
Revolut data breach exposed passport copies, selfies, and transaction histories See what happened, who was affected, and how Revolut responded to protect users
Revolut said some customer information was exposed after an unauthorized party used a legitimate government agency email domain to submit a fraudulent request for data. The company said the incident involved sensitive records, including passport copies, verification selfies, and full transaction histories.
According to Revolut, the scam passed authentication checks at first but was later found to be fake. The company blocked the email address, alerted the relevant government agency, and notified law enforcement and financial regulators.
Revolut said its systems and customer funds were not affected. It also contacted the limited number of impacted customers directly and provided support.