Revolut Falls Victim to Sophisticated Email Scam Exposing Customer Data
Revolut, a digital banking platform, has confirmed that it fell victim to a sophisticated email scam. The company's systems were tricked into handing over customer files, which included sensitive information such as passports, selfies, and Bitcoin records.
The attack was carried out using an email from a real government agency's domain, complete with genuine domain credentials. Revolut accepted the email as authentic and sent the requested files. However, it soon realized its mistake and blocked the sender.
According to Revolut, its systems and customer funds remain unaffected. The company has alerted the relevant authorities, including the police and regulatory bodies, and is contacting the limited number of customers affected by the breach.
The incident highlights the risks of sophisticated email scams, which can be extremely difficult to detect. In this case, the attacker waited for an opportunity to exploit a legitimate government agency's domain and trick Revolut into handing over sensitive information.