Listen to the episode
TLDR
Revolut disclosed sensitive customer records — including passports, selfies, statements, and contact details — to criminals who impersonated a legitimate government agency by email. This was a social engineering scam, not a breach of...
How it works
Revolut disclosed sensitive customer records — including passports, selfies, statements, and contact details — to criminals who impersonated a legitimate government agency by email. This was a social engineering scam, not a breach of...
Red flags
- : Unsolicited calls, emails, WhatsApp, or SMS demanding that you "secure" an account, reverse a transfer, or replace documents. Messages urging you to click a link or call a number supplied in the message instead of using official channels. Look alike government domains or addresses that closely mimic legitimate agencies
What to do
- 1: Treat any unexpected Revolut related contact as suspicious and contact Revolut only through its official in app chat. If you received a breach notice, immediately review balances, cards, beneficiaries, recent transfers, and linked devices. Place a fraud alert with credit bureaus, monitor statements and credit reports, and watch for unfamiliar account openings using your ID data
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/news/2026/09/revolut-gave-customer-ids-and-financial-data-to-a-government-impostorFAQ
Is Revolut data leak via government impersonator: how to protect yourself a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
: Unsolicited calls, emails, WhatsApp, or SMS demanding that you "secure" an account, reverse a transfer, or replace documents. Messages urging you to click a link or call a number supplied in the message instead of using official channels. Look alike government domains or addresses that closely mimic legitimate agencies
What should I do first?
: Treat any unexpected Revolut related contact as suspicious and contact Revolut only through its official in app chat. If you received a breach notice, immediately review balances, cards, beneficiaries, recent transfers, and linked devices. Place a fraud alert with credit bureaus, monitor statements and credit reports, and watch for unfamiliar account openings using your ID data
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.