Revolut reports customer data breach via email scam using spoofed gov domain

Revolut issued a regulatory action on September 13, 2026.

Primary

Revolut

Date

September 13, 2026

Sub-sector

Identity / Fraud

Highlights vulnerability in email-based identity verification that sub-$250M fintechs may share; signals need for stronger authentication protocols and creates potential regulatory scrutiny for all customer data handling practices.

Primary company

Revolut

Counterparty

Not disclosed

Amount

Not disclosed

Event date

September 13, 2026

Sub-sector

Identity / Fraud

HQ

Not disclosed

Structure

Not disclosed

Source published

Not disclosed

Publisher

PYMNTS

Source: pymnts.com