Revolut says customer data exposed through fake government email

MonitoringCryptoSecurity incidentFirst tracked 2026-09-13Last changed 2026-09-13

Current outcome

Revolut exposed sensitive customer data, including passports and transaction histories, after a fraudster used a legitimate government agency email domain to submit fraudulent information requests that passed authentication checks.

Progress timeline

1 material updates

#0109.13
Initial2026-09-13 09:27 · publication time
Revolut says customer data exposed through fake government email
Revolut exposed sensitive customer data, including passports and transaction histories, after a fraudster used a legitimate government agency email domain to submit fraudulent information requests that passed authentication checks.
Source evidence: Cointelegraph

All events · Back to the feed