Revolut confirms nearly 700 customers data handed to scammers posing as officials in Europe

Revolut handed the personal data of nearly 700 customers to scammers posing as government officials, the company confirmed on Monday. The British fintech firm said an unauthorized third party used a legitimate government agency email domain to submit fraudulent requests for customer information, which included dates of birth, postal and email addresses, phone numbers, and copies of identity documents such as passports and driving licenses. Some customers’ selfies used for account verification were also compromised.

A Revolut spokesperson stated the company detected the “sophisticated external impersonation scam,” immediately blocked the email address, and alerted the relevant government agency, enforcement agencies, data protection authorities, and financial regulators. Revolut said its systems and customer funds remained unaffected and that it had directly contacted all impacted individuals to inform them and provide support .

The breach affected customers across multiple European countries, including at least 12 in Ireland and an unspecified number in the Netherlands, according to reports. Dutch broadcaster BNR said it had seen leaked payment account details, verification photos, and copies of identity documents, some of which were later published online by the criminals . Belgian media also reported that Revolut identified victims through its own investigation and offered ongoing support .

Cybersecurity firm ESET Ireland warned that the leaked data could enable further fraud, such as impersonating Revolut’s fraud team or applying for credit under victims’ names. Specialist George Foley advised affected customers to check their credit records and consider replacing compromised identification documents . Revolut has not disclosed the identity of the government agency involved.