Revolut Confirms Data Breach via Fraudulent Government Emails

British fintech giant Revolut has acknowledged a security incident in which sensitive customer information was shared with an unauthorized party following fraudulent requests sent from a legitimate government agency email domain. The breach, confirmed on September 12, 2026, exposed personal details including full names, birth dates, postal and email addresses, phone numbers, and copies of identity documents such as passports and driver’s licenses.

According to a notification sent to affected customers and reviewed by TechCrunch, the compromised data may also have included verification selfies, account statements, and transaction histories. A Revolut spokesperson characterized the incident as a “sophisticated external impersonation scam,” noting that an unauthorized third party exploited a valid government domain to submit fake information requests.

The company stated that it quickly identified the fraud, blocked the malicious email address, and alerted the relevant government agency, law enforcement, and regulators. However, Revolut declined to specify the exact number of individuals impacted or whether the attack was confined to a particular geographic market. The firm emphasized that its core systems and customer funds remained secure and unaffected.

Crypto security researcher ZachXBT brought attention to the breach late Friday by posting details of the email sent to victims. He suggested the attack appeared to be targeted specifically at high-net-worth individuals. This disclosure comes amid significant developments for the London-based fintech, which serves over 80 million customers globally and operates in more than 30 countries.

The incident coincides with reports that Revolut is considering a public listing that could value the company at up to $200 billion, a substantial increase from its $75 billion private valuation in November 2025. The firm has recently secured banking licenses in France and the UK and received conditional approval from the U.S. Office of the Comptroller of the Currency earlier this month, with plans to launch a national bank in the United States by the first half of 2027.