Revolut Confirms Data Breach After Fake Government Request Exposes Customer Details

Revolut has confirmed a data security incident after an unauthorized party used an email tied to a legitimate government agency domain to request customer information. The fintech firm called it a targeted impersonation scam and blocked the account once discovered, adding that customer funds and internal systems remained secure.

What Customer Data Was Exposed

Affected users may have had personal details exposed, including names, birth dates, addresses, phone numbers, and identity documents such as passports. Account statements, transaction histories, and cryptocurrency transaction records were also reportedly among the exposed data.

Only a Limited Number of Users Affected

The company said only a small group of customers were impacted and have already been notified directly. It has not shared the total number affected or named the government body involved.

This incident follows similar breaches at other crypto linked companies in recent months, highlighting growing risks around third party data handling and impersonation attacks across the fintech and crypto sector.