British fintech company Revolut has confirmed that due to receiving fraudulent information requests from email domains of genuine government agencies, the company disclosed some sensitive customer data to unauthorized third parties. The company has directly notified the affected customers, but has not disclosed the exact number of people involved, nor has it indicated whether the incident was concentrated in a particular market.

Leaked information involves personal identity and transaction details.

According to the notifications sent to affected customers, the leaked information includes names, dates of birth, mailing addresses, email addresses, and phone numbers, which are personal and contact details. It may also contain copies of identification documents such as passports and driver's licenses.

The company also stated that some of the information may include identity verification selfies, account statements, and transaction records. This means that the leaked content is not limited to basic personal information but may also cover the usage of the accounts.

The company stated that its funds and systems were not affected.

Revolut stated externally that this is a 'complex external impersonation scam.' The perpetrators used the email domain names of legitimate government agencies to submit false information and request access to companies. Upon discovering this anomaly, the company has blocked the relevant email addresses and notified the relevant government agencies, law enforcement departments, and regulatory authorities.

Revolut It was also stated that the internal systems and customer funds were not affected. The company emphasized that the scope of impact was 'limited', but refused to disclose the exact number of people involved, nor did they provide the names of the government agencies involved.

The incident occurred during the business expansion phase.

The company disclosed that Revolut is headquartered in London, and its official website shows that it has over 80 million customers worldwide, operating as a bank in more than 30 countries. Recently, the company has been continuously advancing its international expansion, covering markets such as India, Mexico, France, and the United Arab Emirates.

Earlier this month, the Federal Reserve Board of the United States conditionally approved Revolut to establish a national bank in the United States. The company expects to launch the related services in the first half of 2027.

Cryptography security researcher ZachXBT previously disclosed the emails sent by Revolut to affected customers, stating that this incident seems to be targeted at high-net-worth users. Meanwhile, market reports indicate that Revolut is evaluating potential listing plans, with a valuation of up to $20 billion, which is higher than its private placement valuation of around $75 billion last November.

Additional information:Revolut has recently obtained banking licenses in France and the UK, and is simultaneously expanding its banking business across Europe and globally.