Revolut Confirms Sending Passport and Bitcoin Records to Fake Government Email
Revolut has confirmed that fraudsters tricked the platform into handing over buyer knowledge, together with data that its personal notices say lined passports, verification selfies, and Bitcoin transaction data.
The request got here from an actual authorities company e-mail area and carried legitimate credentials. Revolut believed it was real and launched the information.
What Revolut Says Happened
A Revolut spokesperson informed BeInCrypto the financial institution blocked the sender as quickly because it noticed the issue.
“Revolut lately recognized a complicated exterior impersonation assault the place an unauthorised third get together utilised a official authorities company area e-mail to submit fraudulent requests for data… Revolut methods and buyer funds are unaffected.”
The firm says it alerted the company, the police, and its knowledge safety and monetary regulators. It has contacted what it calls the restricted variety of individuals affected.
Are Revolut Accounts Secure?
Revolut says accounts stay safe. That is true. Passcodes, login particulars, and biometric knowledge have been by no means uncovered, the financial institution informed BeInCrypto. No cash moved.
The notices despatched to clients put it in another way. They say the verification selfie went out, and rule out solely biometric facial telemetry, which means the face template a system builds from a photograph. The picture itself is one other matter.
Those notices checklist the remainder. Passports, Driving licenses, Home addresses, Bank statements. A full report of Bitcoin moving into and out.
Revolut is not going to say which company’s area was used, citing the reside police investigation. So no one exterior the corporate is aware of whether or not a authorities mailbox was hijacked, or whether or not somebody already inside it pressed ship.
Blockchain investigator ZachXBT, who traces stolen crypto for a residing, flagged the leak, highlighting that it reached a small group of customers and appeared geared toward rich ones.
Stolen buyer lists have fed phishing risk after breaches. Leaked house addresses have come earlier than violent attacks on holders.
Revolut has described this as a complicated assault. But by its personal account, the attacker used a official authorities e-mail system to ship a fraudulent request. Revolut accepted that request as real and launched the information.
The publish Revolut Confirms Sending Passport and Bitcoin Records to Fake Government Email appeared first on BeInCrypto.