Revolut confirms sensitive customer data breach, falling for fake government requests
Revolut said a limited number of customers were affected after a spoofed government email passed authentication checks and exposed identity and transaction records.
- Revolut disclosed customer identities and financial records, including Bitcoin transaction histories, after acting on a fraudulent request that appeared to come from a government agency.
- The request arrived from an unauthorized email account using an official government agency's domain; it passed authentication checks, leading staff to believe the communication was genuine.
- Disclosed records included full names, dates of birth, occupations, identity documents, and Bitcoin transaction histories, though the company confirmed biometric facial telemetry data was not involved.
- On Friday, on-chain investigator ZachXBT shared a customer notice on Telegram, though the company has not confirmed the total number of affected users.
- While Revolut serves more than 80 million customers globally, the company maintains it will not ask users to share verification codes over the phone.
91 Articles
91 Articles
An apparently official request led Revolutiont to share information that may include passports, selfies and bank history. A government e-mail served as bait The Revolutiont confirmed to The Block that delivered data from...
Revolut confirms customer data breach after falling for fake government requests
Revolut confirmed that sensitive customer data was disclosed to an unauthorised third party after fraudulent requests were sent from a legitimate government agency domain, while the fintech said its systems and customer funds remained unaffected.
REVOLUT confirmed the leak of personal data of some users after falling for fraudulent requests sent from a legitimate government agency domain.
"The data provided to the fraudster included details used in customer identity verification procedures (KYC – Know Your Customer). These included, among others, name, date of birth, occupation, postal address, email address, and phone number. The fraudster also received copies of ID documents such as passports or driving licenses, as well as photos taken by customers to confirm their identity," we read. Revolut provided the data to the fraudster…
Coverage Details
Bias Distribution
- 54% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
