Revolut Tricked by Spoofed Government Email, Sensitive Customer Data Exposed in Ransom Demand

Revolut has confirmed it was deceived by a sophisticated impersonation scam involving a spoofed government agency email address, resulting in the exposure of sensitive customer data including identity documents, verification selfies, account statements, IBANs, and full transaction histories. The threat actors have reportedly begun leaking stolen data on Telegram and are demanding 10,000 Bitcoin — approximately $780 million — as ransom. Revolut has notified affected customers and alerted regulatory and enforcement authorities. Cybersecurity experts have described the compromised data as a highly complete identity theft package with serious implications for those affected.