Listen to the episode
TLDR
Scammers are sending fake Revolut security texts that appear in the same SMS thread as legitimate bank messages, often just days after a data disclosure. Victims are directed to a phishing page that mimics Revolut's live "turn your head"...
How it works
Scammers are sending fake Revolut security texts that appear in the same SMS thread as legitimate bank messages, often just days after a data disclosure. Victims are directed to a phishing page that mimics Revolut's live "turn your head"...
Red flags
- Unsolicited SMS about your account, especially one that lands in the same conversation thread as real bank messages A link that opens a "liveness check" or requests camera/mic permission before any password field Urgency or security framing pushing you to act without opening the official app first Actions to take Open the Revolut app directly (or type the official URL) instead of tapping the SMS link Never grant camera, microphone, or notification permissions to pages reached from unsolicited messages Enable in app security alerts, change your password, and report suspicious texts to Revolut and your mobile carrier
What to do
- 1Red flags Unsolicited SMS about your account, especially one that lands in the same conversation thread as real bank messages A link that opens a "liveness check" or requests camera/mic permission before any password field Urgency or security framing pushing you to act without opening the official app first Actions to take Open the Revolut app directly (or type the official URL) instead of tapping the SMS link Never grant camera, microphone, or notification permissions to pages reached from unsolicited messages Enable in app security alerts, change your password, and report suspicious texts to Revolut and your mobile carrier
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/09/revolut-phishing-texts-appear-days-after-data-breachFAQ
Is Revolut phishing texts exploit post breach trust to steal selfies and passwords a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Unsolicited SMS about your account, especially one that lands in the same conversation thread as real bank messages A link that opens a "liveness check" or requests camera/mic permission before any password field Urgency or security framing pushing you to act without opening the official app first Actions to take Open the Revolut app directly (or type the official URL) instead of tapping the SMS link Never grant camera, microphone, or notification permissions to pages reached from unsolicited messages Enable in app security alerts, change your password, and report suspicious texts to Revolut and your mobile carrier
What should I do first?
Red flags Unsolicited SMS about your account, especially one that lands in the same conversation thread as real bank messages A link that opens a "liveness check" or requests camera/mic permission before any password field Urgency or security framing pushing you to act without opening the official app first Actions to take Open the Revolut app directly (or type the official URL) instead of tapping the SMS link Never grant camera, microphone, or notification permissions to pages reached from unsolicited messages Enable in app security alerts, change your password, and report suspicious texts to Revolut and your mobile carrier
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.