Revolut confirms customer data breach through fake government requests

British fintech company Revolut disclosed that sensitive customer data was disclosed to an unauthorized third party due to fraudulent requests sent from a legitimate government agency email domain. The leaked information included customers' identity details, contact information, birth dates, postal and email addresses, phone numbers, as well as copies of their identity documents such as passports and driver's licenses.

According to Revolut, the data may have additionally included verification selfies, account statements, and transaction histories. A Revolut spokesperson confirmed that a limited number of customers were affected and directly contacted those individuals. However, the company did not disclose the exact number of impacted customers or the specific government agency involved.

Revolut blocked the email address after identifying the scam and alerted the relevant authorities, stating that Revolut systems and customer funds remained unaffected. The company operates globally with over 80 million customers and has expanded into markets like India, Mexico, France, and the UAE. Revolut has been pursuing a potential public listing valued at up to $200 billion and securing banking licenses in Europe and globally.