Revolut confirms customer data breach through fake government requests
News Source
•Sat, 12 Sep 2026 14:40:00 +0000
📰 What Happened
Revolut says someone tricked it into handing over private customer data. The attacker used a real government agency's email address to send fake requests for information. Because the email looked official, staff treated the requests as real.
The leaked data included names, birth dates, home and email addresses, and phone numbers. Copies of passports and driver's licenses may have been shared too. So could selfies, bank statements, and transaction histories.
Revolut says only a small number of customers were affected and that it has contacted them. It blocked the email address and told the agency, police, and regulators. Customer money and Revolut's own systems were not touched.
🔍 The Backstory
Revolut is a British money app with more than 80 million users around the world. It offers banking, cards, and crypto in a single app. It grew fast by making sign-up easy.
Attacks like this are called impersonation scams. Crooks pretend to be an official group so that a company trusts them. Firms are often required to answer real legal requests quickly, which makes fakes hard to spot.
Revolut did not say how many people were affected or which agency was copied. It also did not say which countries were involved.
🎯 Why It Matters
If your ID documents leak, thieves can try to open accounts or take loans in your name. Anyone using a money app should watch for odd emails and turn on extra security like two-factor login.
Revolut says someone tricked it into handing over private customer data. The attacker used a real government agency's email address to send fake requests for information. Because the email looked official, staff treated the requests as real.
The leaked data included names, birth dates, home and email addresses, and phone numbers. Copies of passports and driver's licenses may have been shared too. So could selfies, bank statements, and transaction histories.
Revolut says only a small number of customers were affected and that it has contacted them. It blocked the email address and told the agency, police, and regulators. Customer money and Revolut's own systems were not touched.
Revolut is a British money app with more than 80 million users around the world. It offers banking, cards, and crypto in a single app. It grew fast by making sign-up easy.
Attacks like this are called impersonation scams. Crooks pretend to be an official group so that a company trusts them. Firms are often required to answer real legal requests quickly, which makes fakes hard to spot.
Revolut did not say how many people were affected or which agency was copied. It also did not say which countries were involved.
If your ID documents leak, thieves can try to open accounts or take loans in your name. Anyone using a money app should watch for odd emails and turn on extra security like two-factor login.