Revolut Faces UK Probe After 680 Customers Exposed in Sophisticated Scam
Revolut, a popular fintech company, has disclosed that it notified 680 customers after their sensitive identity and financial records were exposed due to a sophisticated impersonation scam. The attackers used a legitimate government email account to obtain the information, which included passports, addresses, verification selfies, account statements, IBANs, and customer Bitcoin transaction histories.
Revolut's systems remained uncompromised, but the company treated the requests as genuine before discovering the scheme. A customer notice revealed that the attackers used a legitimate government email domain, which led Revolut to believe it had received a genuine request.
The incident has sparked an investigation by Britain's Information Commissioner's Office (ICO), and former Mt. Gox CEO Mark Karpelès was among those affected. Karpelès questioned why Revolut released the records despite receiving a verified government address.