Why the Revolut impersonation hack should be a wake-up call for the city

The recent impersonation scam that targeted financial services giant Revolut has highlighted the increasing dangers faced by firms in the industry, according to Graeme Stewart, head of public sector at Check Point. The attack resulted in a $3 million ransom demand, underscoring the need for financial institutions to take cybersecurity seriously.

The sophisticated nature of the scam, which involved compromising an Italian government email system and crafting requests that appeared legitimate, shows that even well-established companies like Revolut are vulnerable. The incident serves as a wake-up call for the entire financial services sector, as it demonstrates the effectiveness of new, realistic deepfakes, fraudulent emails, voice clones, and tailored impersonations.

To combat these threats, it is crucial for both the public and private sectors to improve cybersecurity awareness among employees. This includes robust training programs that teach individuals how to spot and respond to these kinds of attacks, particularly those that rely on human error, such as sharing account details or authorising payments under pressure from an impersonator.

Moreover, the rush to adopt new AI tools and technologies has often led to a neglect of security strategy, leaving many companies unprepared to detect deepfakes and voice clones. Financial services firms must prioritize robust verification procedures and multiple sign-off points to ensure the accuracy of requests, as these measures can significantly reduce the risk of falling victim to impersonation scams.

Additionally, securing the supply chain is essential, as criminals often exploit third-party systems to gain unauthorized access to a company's network. By addressing these vulnerabilities, financial institutions can better protect themselves against the growing threat of impersonation scams and mitigate the potential damage caused by these attacks.