The digital banking company is investigating the breach and warning customers to remain alert for targeted scams.
• Revolut confirmed that an unauthorized third party gained access to limited personal information through a social-engineering attack.
• The attackers reportedly impersonated government officials, persuading an employee to disclose account-related data.
• Revolut said the incident affected only a small percentage of customers and that payment information and account funds were not compromised.
• The company has contacted affected users and urged customers to watch for suspicious messages, links or requests for verification codes.
• Security specialists say the incident demonstrates how fraudsters can bypass technical defenses by manipulating staff rather than directly attacking banking systems.
Revolut has not disclosed the full scope of the exposed information or identified the government agencies allegedly impersonated. The company said it has strengthened internal controls, launched a broader review of the incident and notified relevant authorities. Customers who receive unexpected requests for passwords, one-time codes or personal documents should avoid responding and contact Revolut through its official app.