The famous British fintech Revolut, which has 80 million customers worldwide, was fooled by impostors. The neobank recently confirmed to TechCrunch that it was the target of “a sophisticated identity theft attack” that led to the disclosure of sensitive customer information. In fact, an unauthorized third party used an email address from an official domain of a legitimate government agency to send fraudulent requests for information.
Revolut said it blocked the email address upon discovery of the deception and immediately notified law enforcement and regulatory authorities.
A “limited” number of customers affected
Exposed data includes customer identity and contact details (date of birth, postal address, email, phone numbers), as well as highly sensitive documents, such as copies of passports, driving licenses, verification selfies, account statements and transaction history.
A Revolut spokesperson explained to the specialist site that a “limited” number of customers had been affected and that they had been informed personally by the neobank. This clarified that “Revolut’s systems and its customers’ funds are not affected”. According to cryptocurrency security researcher ZachXBT, the incident appears to have primarily targeted wealthy users.
