Revolut customers’ sensitive data exposed in phishing attack that fooled email security checks
Revolut experienced a data breach where a sophisticated phishing attack, impersonating a government agency, bypassed email security protocols (SPF, DKIM, DMARC) and tricked the company into handing over sensitive customer data, including identity documents and Bitcoin transaction histories. No customer funds were stolen, and Revolut has notified law enforcement and regulators.
- Protocols
- Revolut
- Confidence
- High
- First seen
- 12 Sep 2026, 20:31 UTC