Revolut, the British neobank, is at the center of a media storm after inadvertently transmitting customers’ personal information to impostors posing as government agents. This scandal raises questions about data security and the ability of financial institutions to face increasingly sophisticated threats.
The key points to remember
- Revolut transmitted sensitive data in response to fake government requests.
- The incident was revealed by a whistleblower and confirmed by the neobank.
- Information such as passports, selfies, and bank statements were compromised.
Imagine you are a customer of one of the world’s largest neobanks, Revolut, a bank that promises you security and innovation. One morning, you discover that your personal information has been transmitted to scammers, disguised as government agents. You wonder how this could have happened and what consequences it might have on your privacy and financial security.
Revolut and the September 2026 security breach
Chaque semaine, nous sélectionnons les solutions les plus utiles pour les professionnels du digital : IA, productivité, marketing, création de contenu et business. Voici les outils que nous recommandons actuellement.
☁️ pCloud – Le stockage cloud sécurisé avec une offre à vie.
Sauvegardez vos fichiers, photos et documents importants avec plusieurs centaines de Go ou plusieurs To disponibles.
→ Découvrir l'offre pCloud
🛒 Shopify – Créez votre boutique e-commerce sans coder.
Une solution complète pour lancer, gérer et développer votre activité en ligne.
→ Tester Shopify gratuitement
🤖 Jasper – L'assistant IA pour accélérer votre marketing.
Création de contenus, campagnes publicitaires et idées marketing : gagnez du temps grâce à l'intelligence artificielle.
→ Découvrir Jasper
🎬 CapCut Pro – Le montage vidéo dopé à l'IA.
Créez rapidement des vidéos professionnelles avec des outils avancés et automatisés.
→ Tester CapCut Pro
📊 HubSpot CRM – Le CRM idéal pour structurer votre croissance.
Gérez vos prospects, vos ventes et vos campagnes marketing depuis une seule plateforme.
→ Découvrir HubSpot CRM
🧠 MindManager – Organisez vos idées et vos projets efficacement.
Un outil puissant pour créer des mind maps, structurer vos stratégies et mieux collaborer.
→ Découvrir MindManager
🇬🇧 Gymglish – Améliorez votre anglais professionnel chaque jour.
Des cours personnalisés et courts pour progresser facilement, quel que soit votre niveau.
→ Profiter de l'essai gratuit
🌍 Preply – Apprenez une langue avec un professeur particulier.
Trouvez un enseignant adapté à vos objectifs et progressez à votre rythme.
→ Trouver votre professeur
On September 12, 2026, FrenchBreaches revealed that Revolut had fallen victim to a scam through identity theft. Malicious individuals used a legitimate administrative domain to send fraudulent requests. These requests were treated as legitimate by Revolut, which transmitted sensitive customer data. Such use of an official domain allowed the scammers to bypass usual security measures.
The disclosed information includes precise personal and financial data: name, first name, date of birth, profession, bank details, and even identity verification selfies. Each affected customer received a personal notification, but the exact extent of the incident remains unknown.
Wealthy clients particularly targeted
ZachXBT, a cryptocurrency expert, analyzed the incident and hypothesized that the scammers deliberately targeted wealthy Revolut clients. According to him, the financial motive of this operation is evident, although Revolut has neither confirmed nor denied this theory.
This targeting increases the risks of phishing and identity theft for the affected clients. The stolen information could be used to carry out highly sophisticated attacks, deceiving even the most vigilant users.
Reactions and measures taken by Revolut
Upon discovering the incident, Revolut blocked the address used by the scammers and alerted the relevant authorities. The neobank assures that its systems have not been compromised and that customer funds are safe. However, it remains vague about the extent of the incident, mentioning only a “very limited group” of affected clients.
Revolut continues to collaborate with regulators to assess the situation, and investigations are underway to determine the extent of the damage. The exact number of affected clients and the administration whose domain was impersonated remain unknown.
Cybersecurity challenges for neobanks in 2026
Neobanks, like Revolut, must face increasingly sophisticated cybersecurity threats. The recent incident highlights the need for these institutions to strengthen their verification protocols and guard against identity theft attacks. Protecting sensitive data has become a top priority in a world where cyberattacks are multiplying.
Technological innovations, while beneficial, also introduce new vulnerabilities. Neobanks must invest in advanced incident detection and response technologies to protect their clients and maintain their trust.
The protection of personal data: a major issue for the financial sector
In the financial sector, the protection of personal data has become a major issue. Incidents like Revolut’s highlight the urgency of adopting stricter security measures and raising customer awareness of cybercrime risks.
Regulations such as the GDPR in Europe already impose strict data protection requirements, and financial institutions must ensure their compliance. Collaborations between technology companies, regulators, and cybersecurity experts are essential to anticipate and counter emerging threats.
FAQ
What data was compromised in the Revolut incident?
The compromised data includes personal information such as passport copies, verification selfies, bank statements, and other sensitive financial information.
How did Revolut respond to the incident?
Revolut blocked the address used by the scammers, alerted the relevant authorities, and informed affected clients. The neobank claims that its systems have not been compromised.
Who is ZachXBT and what role did he play?
ZachXBT is a cryptocurrency researcher known for tracking digital scams. He analyzed the incident and suggested that wealthy clients were intentionally targeted.
What are the risks for affected clients?
Affected clients risk facing phishing and identity theft attempts, as the disclosed information can be used to carry out targeted attacks.