Hackers impersonating government agency hit Revolut customers in the UK

Hackers posing as a government agency have targeted Revolut customers in the UK, leading to the theft of personal information from hundreds of European users. The fraudsters utilized an unverified third party's email address linked to a legitimate government agency to request sensitive customer data, according to a report by The Financial Times.

The breach, identified by the digital banking platform, originated from an Italian hacker who exploited a compromised Italian government email account to assume the identity of officials seeking customer information. The hackers acquired a range of data, encompassing customers' addresses, verification photos, identity documents, and details related to their bitcoin activities.

Around 680 Revolut customers from various European nations were impacted by the scam. Despite the intrusion, Revolut maintained that its systems and customer funds remained untouched. The company promptly blocked the suspicious email address and notified relevant authorities, including the government agency, enforcement agencies, data protection, and financial regulators.

Britain's data protection regulator, the Information Commissioner’s Office, acknowledged receipt of the report and is currently evaluating the provided information. This incident follows Revolut's recent strides in the global banking sector, having been founded as a fintech start-up in 2015. The company's valuation reached $115 billion in a secondary share sale in July and secured a banking license in the UK in March, as well as a full French license in August.

Revolut is currently pursuing a US banking license and has applied for licenses in Switzerland. The company reported a customer base of over 80 million globally, aiming to reach 100 million across 100 countries.