Revolut customer data exposed in email scam

On September 12, Revolut has disclosed confidential client data to a not authorized, fake requests submitted to them from an email account using an authentic government domain. The fraudulent requests using the government domain passed the verification checks of Revolut before the company was able to identify them. This leak of information is very sensitive, as it may include personal information of customers connected with Bitcoin transactions. Viable verification selfies, account statements and transaction history could have likely been accessed. After the incident, Revolut blocked the email address used for the scheme and informed the government agency whose domain was used. Revolut has not disclosed the exact number of customers impacted. Revolut has contacted affected customers and taken steps to block the fraudulent sender. This case demonstrates how dangerous such fraudulent requests can be despite their origin from what seems to be a legitimate government domain.