Revolut Leaks Customer Passports and Selfies to Scammer Using Fake Gov Email

A fraudster tricked banking app Revolut into handing over sensitive customer data by pretending to be a government agency. The scammer used a real, legitimate government email address, which allowed the fake request to pass Revolut's security checks.

Revolut is a fintech (financial technology) company — basically a digital bank you use through an app on your phone. The company confirmed the incident and told affected customers on Friday.

What was exposed? According to reports, the leaked data of some customers included:

• Copies of passports
• Verification selfies (photos users take to prove their identity)
• Full transaction histories (records of all the money moving in and out of accounts)

A Revolut spokesperson described it as a "sophisticated external impersonation scam" where an unauthorized third party used a legitimate government agency domain email to send fake requests for information. Once they noticed the problem, Revolut blocked the address, alerted the government agency, and notified law enforcement and financial regulators (the official bodies that oversee banks and financial firms).

Importantly, the company says no money was stolen. Revolut stated that "customer funds are unaffected" and that only a "limited number" of people were impacted. A crypto investigator known as ZachXBT reportedly believes the attack was small and targeted mainly at high-net-worth users (people with a lot of money).

The leak sparked anger online. Some users criticized KYC (Know Your Customer) — the standard process where banks legally require you to share ID documents and personal details before opening an account. Critics argue that collecting so much sensitive data creates a huge risk if that data ever gets leaked, as happened here.

The takeaway: Even trusted financial apps can be fooled by clever scams. This event is a reminder that the personal information you hand over to companies can become a target for fraudsters. If you use Revolut, watch for official notifications and stay alert for follow-up scams that might use your leaked data.

This is an AI-generated summary. Read the original article at: https://cointelegraph.com/news/revolut-says-customer-data-exposed-through-fake-government-email?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound