Revolut
Disclosed Sep 12, 2026Unverified
Revolut hands customer ID data to scammer posing as government agency
Revolut said an impersonator used a legitimate government agency email domain to send fraudulent data requests, obtaining a limited number of customers' contact details, ID documents, selfies, statements and transaction histories. Systems and funds were not affected.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 12, 2026 |
| Attack | Phishing |
| Data exposed | NamesDates of birthAddressesEmailsPhone numbersGovernment IDsBiometricsFinancial |
| Sector | Finance · GB |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
Other breaches at Revolut
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.