Fake government request leads to Revolut consumer data breach

London-based neobank Revolut has confirmed that it released sensitive customer information to a fraudster who was using an email address with a legitimate government domain. A company spokesperson confirmed the breach to FinAi News , calling it a “sophisticated external impersonation scam.” [caption id="attachment_57383899" align="alignright" width="300"] Revolut headquarters in Canary Wharf, London. (Photo/Chris Ratcliffe/Bloomberg)[/caption] Revolut blocked the email address and alerted the impersonated government agency, as well as enforcement agencies and data protection and financial regulators, the spokesperson told FinAi News . Revolut would not tell FinAi News which government agency's domain had been spoofed or confirm what information had been shared. The news was first reported Sept. 12, but Revolut did not say when the breach occurred. Other news outlets have reported that compromised data might have included personal identification information and account information, as well as ID documents, such as passports and driver's licenses. The spokesperson said Revolut’s systems and customer funds were not affected and that the company has notified the affected customers and is providing support. Some news outlets have also reported that the group responsible for the breach has demanded a ransom to prevent it from publishing the information. Revolut did not confirm the demand to FinAi News . Verify first The U.S. General Services Administration (GSA) Office of Inspector General issued a Sept. 3 fraud alert warning of scams involving spoofed email addresses from people purporting to be government employees. Because FIs are legally required to comply with official law enforcement or government agency requests, communications originating from verified government domain addresses are processed as mandatory legal demands. Therefore, the GSA recommends verifying any requests from an unfamiliar person — even if it is from a verified domain — by confirming the validity of the email with a known and trusted contact at the agency before sending any sensitive data. FinAi Lending Summit, set for Oct. 7-8 in Las Vegas, will include speakers from Fifth Third and Capital One as well as a fireside chat with U.S. Bank Senior Vice President – Lending Operations Group Manager Suzanne Rathbun . To learn more about the 2026 event and register, visit here .

Fake government request leads to Revolut consumer data breach

Spoofed email scam affected 'limited number' of customers, neobank said

How CROs can use AI to manage bond market volatility

Related Posts

How CROs can use AI to manage bond market volatility

AI cracks weak, predictable passwords in milliseconds

Podcast: FIs must use AI to anticipate frauds of tomorrow, expert says

EMERGING FINTECH DIRECTORY

FinAi Podcast

SPONSORED

Build an Antifragile Strategy to Outperform the Market

How AI and Product Experts Turn Fuzzy Requirements Into Focused Dev-ready Roadmaps

Is Your Technology Supplier There for You?

Connect

Welcome Back!

Retrieve your password

Continue Reading with FinAi News Premium - Less than $2/Day

Fake government request leads to Revolut consumer data breach

Spoofed email scam affected 'limited number' of customers, neobank said

How CROs can use AI to manage bond market volatility

Related Posts

FinAi Podcast

Connect

Welcome Back!

Retrieve your password

Unlock This Article

Continue Reading with FinAi News Premium - Less than $2/Day