British fintech Revolut confirmed that it disclosed delicate buyer info to an unauthorized third celebration after receiving fraudulent requests despatched from a reliable authorities company electronic mail area.
The uncovered information included prospects’ id and speak to particulars, together with their delivery date, postal and electronic mail addresses, and cellphone numbers, in addition to copies of their id paperwork together with passports and driver’s licenses, in line with a notification emailed to affected prospects and reviewed by TechCrunch. The information could have additionally included verification selfies, account statements, and transaction histories, the agency mentioned in its notification.
A Revolut spokesperson confirmed to TechCrunch {that a} “restricted” variety of prospects have been impacted and mentioned the corporate had contacted these prospects straight. Revolut, nonetheless, didn’t disclose the precise variety of impacted people. It additionally didn’t reply whether or not the incident was restricted to a selected market and declined to reveal the federal government company concerned.
“Revolut not too long ago recognized a classy exterior impersonation rip-off the place an unauthorised third celebration utilised a reliable authorities company area electronic mail to submit fraudulent requests for info,” the spokesperson mentioned.
Revolut advised TechCrunch that it blocked the e-mail tackle after discovering the rip-off from the unauthorized third celebration and alerted the related authorities company, legislation enforcement, and related regulators, including, “Revolut techniques and buyer funds are unaffected.”
London-based Revolut has more than 80 million customers globally and operates as a financial institution in additional than 30 nations, per its web site. The fintech not too long ago expanded its presence in markets together with India, Mexico, France, and the UAE. Furthermore, earlier this month, the U.S. Workplace of the Comptroller of the Foreign money granted a conditional approval to Revolut to arrange a nationwide financial institution within the nation, which the agency expects to launch within the first half of 2027.
Effectively-known crypto safety researcher ZachXBT posted about Revolut’s email to its affected prospects late on Friday. The researcher mentioned the incident appeared to have been focused at excessive internet price customers.
The incident comes as Revolut reportedly weighs a possible public itemizing that might worth it at as much as $200 billion, up from its $75 billion private valuation in November. The fintech has additionally been increasing its banking footprint in Europe and globally, securing banking licenses in France and the UK in latest months.
If you buy by hyperlinks in our articles, we may earn a small commission. This doesn’t have an effect on our editorial independence.