Revolut, the British neobank, is at the center of a media storm after inadvertently transmitting customers’ personal information to impostors posing as government agents. This scandal raises questions about data security and the ability of financial institutions to face increasingly sophisticated threats.
The key points to remember
- Revolut transmitted sensitive data in response to fake government requests.
- The incident was revealed by a whistleblower and confirmed by the neobank.
- Information such as passports, selfies, and bank statements were compromised.
Imagine you are a customer of one of the world’s largest neobanks, Revolut, a bank that promises you security and innovation. One morning, you discover that your personal information has been transmitted to scammers, disguised as government agents. You wonder how this could have happened and what consequences it might have on your privacy and financial security.
Revolut and the September 2026 security breach
On September 12, 2026, FrenchBreaches revealed that Revolut had fallen victim to a scam through identity theft. Malicious individuals used a legitimate administrative domain to send fraudulent requests. These requests were treated as legitimate by Revolut, which transmitted sensitive customer data. Such use of an official domain allowed the scammers to bypass usual security measures.
Un vide-dressing occasionnel rapporte rarement plus de 200 € par mois. Mais l'écart avec les vendeurs les plus performants est plus large qu'on ne le pense : 300 à 900 €/mois pour une activité régulière (2 à 5h/semaine), et 1 000 à 2 500 €+/mois pour les profils qui traitent Vinted comme un vrai canal de vente structuré. La différence ne tient ni à la chance ni à la taille du dressing de départ : elle tient presque entièrement à la méthode (algorithme, pricing, réactivité) appliquée avec régularité.
Avec 📘 Le Guide Vinted, transformez ce canal en revenu complémentaire structuré, voire en une vraie activité e-commerce.
Une méthode complète pour décoder l'algorithme, optimiser vos annonces comme une landing page, automatiser votre relance commerciale et sécuriser votre activité sur le plan fiscal.
🧠 Les 5 facteurs qui pilotent la visibilité de vos annonces (logique proche du SEO)
📈 Une méthode réplicable pour passer d'une activité occasionnelle à un revenu récurrent
⚖️ Statut, fiscalité, professionnalisation : rester en règle en montant en volume
🚫 Le chapitre que personne n'aborde ailleurs : comprendre et prévenir les blocages de compte
The disclosed information includes precise personal and financial data: name, first name, date of birth, profession, bank details, and even identity verification selfies. Each affected customer received a personal notification, but the exact extent of the incident remains unknown.
Wealthy clients particularly targeted
ZachXBT, a cryptocurrency expert, analyzed the incident and hypothesized that the scammers deliberately targeted wealthy Revolut clients. According to him, the financial motive of this operation is evident, although Revolut has neither confirmed nor denied this theory.
This targeting increases the risks of phishing and identity theft for the affected clients. The stolen information could be used to carry out highly sophisticated attacks, deceiving even the most vigilant users.
Reactions and measures taken by Revolut
Upon discovering the incident, Revolut blocked the address used by the scammers and alerted the relevant authorities. The neobank assures that its systems have not been compromised and that customer funds are safe. However, it remains vague about the extent of the incident, mentioning only a “very limited group” of affected clients.
Revolut continues to collaborate with regulators to assess the situation, and investigations are underway to determine the extent of the damage. The exact number of affected clients and the administration whose domain was impersonated remain unknown.
Cybersecurity challenges for neobanks in 2026
Neobanks, like Revolut, must face increasingly sophisticated cybersecurity threats. The recent incident highlights the need for these institutions to strengthen their verification protocols and guard against identity theft attacks. Protecting sensitive data has become a top priority in a world where cyberattacks are multiplying.
Technological innovations, while beneficial, also introduce new vulnerabilities. Neobanks must invest in advanced incident detection and response technologies to protect their clients and maintain their trust.
The protection of personal data: a major issue for the financial sector
In the financial sector, the protection of personal data has become a major issue. Incidents like Revolut’s highlight the urgency of adopting stricter security measures and raising customer awareness of cybercrime risks.
Regulations such as the GDPR in Europe already impose strict data protection requirements, and financial institutions must ensure their compliance. Collaborations between technology companies, regulators, and cybersecurity experts are essential to anticipate and counter emerging threats.
FAQ
What data was compromised in the Revolut incident?
The compromised data includes personal information such as passport copies, verification selfies, bank statements, and other sensitive financial information.
How did Revolut respond to the incident?
Revolut blocked the address used by the scammers, alerted the relevant authorities, and informed affected clients. The neobank claims that its systems have not been compromised.
Who is ZachXBT and what role did he play?
ZachXBT is a cryptocurrency researcher known for tracking digital scams. He analyzed the incident and suggested that wealthy clients were intentionally targeted.
What are the risks for affected clients?
Affected clients risk facing phishing and identity theft attempts, as the disclosed information can be used to carry out targeted attacks.