Revolut says impersonation scam exposed sensitive data of a limited number of customers

Revolut confirmed that a sophisticated impersonation scam exposed sensitive customer information for a limited number of users. The fintech said its systems and customer funds were not affected, as it continues global expansion including a recent India launch.

— Source publishedSun, 13 Sept, 2026, 10:57 IST·First seen Sun, 13 Sept, 2026, 11:04 IST·Source Mint · Companies

What happened

Revolut confirmed a sophisticated impersonation scam exposed sensitive customer information for a limited number of users. Customer funds and systems were

Key facts

  • Over 80 million customers worldwide
  • Operates as a bank in over 30 countries
  • Founded in 2015
  • $115 billion valuation following July secondary share sale
  • Potential public-listing valuation of up to $200 billion

What changed

Revolut confirmed a sophisticated impersonation scam exposed sensitive customer information for a limited number of users. Customer funds and systems were unaffected. The fintech, which recently expanded into India, is growing globally and considering a potential public listing.

Why this matters

Revolut must move quickly to reassure affected users, strengthen anti-impersonation controls, and demonstrate that customer funds and core systems remain secure.

What to watch

  • Revised affected-customer count or disclosure that higher-risk data, credentials, identity documents, or payment details were exposed.
  • Reports of unauthorized transactions, account takeovers, or coordinated phishing campaigns tied to the incident.
  • Customer complaints, elevated support wait times, app-store sentiment deterioration, or unusual account closures.
  • Regulatory investigations, enforcement notices, mandatory remediation, or data-breach notification findings.
  • Evidence that the event delays onboarding, licensing, partnerships, or customer acquisition in newer markets including India.