Finance News

Story: Revolut Duped by Impersonation Scam, Exposing Customer KYC Data to Fraudsters

By James Thorp

1 / 15

Why KYC Data Is Such a Tempting Target. Financial institutions collect a lot. Revolut, like every regulated fintech operating across…

2 / 15

Extortion Allegations and What Remains Unclear. There are also allegations floating around about ransom demands and the possible publication of…

3 / 15

Revolut got played. A sophisticated impersonation scam tricked the fintech giant into handing over customer data after fraudsters sent requests from an email address sitting…

4 / 15

The breach came to light through on-chain investigator ZachXBT, not through any internal disclosure from Revolut itself.

5 / 15

No systems breached. But customer data went somewhere it shouldn't have.

6 / 15

Financial institutions collect a lot. Revolut, like every regulated fintech operating across multiple jurisdictions, pulls in identification documents, transaction records, and…

7 / 15

Revolut's public-facing privacy policies say the company uses secure storage and limits employee access. That's the standard line.

8 / 15

Scammers with access to KYC records can do real damage. Identity documents open the door to impersonation.

9 / 15

See also: Revolut Breach Exposes Flaw in Compliance: Fake Government Requests Bypass Security

10 / 15

There are also allegations floating around about ransom demands and the possible publication of customer files. Revolut hasn't confirmed any of that.

11 / 15

What's worth noting separately: there was a prior incident involving a former Revolut employee. Revolut itself said there's no confirmed link between that case and this breach.

12 / 15

Social engineering is genuinely hard to defend against when the attack uses a real domain. That's the uncomfortable truth here.

13 / 15

But the fallout can be serious. Regulatory scrutiny tends to follow breaches like this, especially when the institution can't explain clearly what went wrong or what it's doing…

14 / 15

Related: Revolut Falls for Fake Government Request, Leaks Sensitive Bitcoin User Data

15 / 15

Revolut's user base is massive. The company operates across dozens of countries and has tens of millions of customers.

The Currency Analytics

Want the full story?