Revolut Exposed: Fake Government Request Leads to Customer Data Disclosure
A Revolut crypto scam has been exposed after a fake government request led to the disclosure of customer information. The incident involved an unauthorized third party using a genuine government agency email domain to submit requests that appeared authentic.
Revolut claims its review later identified the correspondence as an external impersonation attack, but not before it disclosed customer data in response to the fraudulent request. Customer notices shared by ZachXBT list full names, birth dates, occupations, and postal addresses, along with email addresses and telephone numbers.
The records also mention identification documents such as passports or driving licenses and verification selfies. Account statements, IBANs, withdrawal records, and complete transaction histories were also disclosed, including Bitcoin deposits and withdrawals.
Revolut says its systems, account credentials, and customer funds remain unaffected by the incident. However, the company notes that a limited number of customers received notices, and it has contacted those affected directly to inform them of the situation.