Revolut handed over customer passports and selfies after a fake government email

Revolut confirms customer data breach through fake government requests

Revolut confirmed it disclosed sensitive customer data — birth dates, addresses, phone numbers, passports, driver's licenses, and possibly verification selfies and transaction histories — to an unauthorized third party that used a legitimate government agency email domain to send fraudulent information requests. The fintech said a limited number of customers were affected, blocked the address, and alerted regulators and law enforcement. It declined to say how many people were impacted or which agency was impersonated.