Revolut has confirmed that it handed sensitive customer information to an unauthorized party after receiving fraudulent requests sent from a legitimate government agency email domain. The British fintech said the exposed records included customer identity and contact details, such as birth dates, postal and email addresses, and phone numbers, according to a notification sent to affected customers. Copies of identity documents, including passports and driver s licenses, were also disclosed. The notification stated the data may additionally have included verification selfies, account statements, and transaction histories.
A Revolut spokesperson said a limited number of customers were affected and that the company had reached out to those customers directly. Revolut did not disclose how many individuals were impacted. The company also did not say whether the incident was confined to a particular market and declined to identify the government agency involved.
According to the spokesperson, Revolut recently uncovered a sophisticated external impersonation scam in which an unauthorized third party used a legitimate government agency domain email to submit fraudulent requests for information. Revolut said it blocked the email address after discovering the scam and alerted the relevant government agency, law enforcement, and relevant regulators. The company added that its systems and customer funds were unaffected.
London-based Revolut serves more than 80 million customers globally and operates as a bank in more than 30 countries, according to its website. The fintech has recently expanded in markets including India, Mexico, France, and the UAE. Earlier this month, the U.S. Office of the Comptroller of the Currency granted Revolut conditional approval to establish a national bank in the United States, which the firm expects to launch in the first half of 2027.
Crypto security researcher ZachXBT posted about Revolut s email to affected customers late on Friday. The researcher said the incident appeared to have been targeted at high net worth users.
The disclosure comes as Revolut reportedly weighs a potential public listing that could value it at as much as $200 billion, up from its $75 billion private valuation in November. The fintech has also been expanding its banking footprint in Europe and globally, securing banking licenses in France and the UK in recent months.
More cybersecurity news from TechManNews.
