Revolut Under Investigation After Fraudulent Data Request

The incident occurred when an unauthorized third party used an apparently authentic government agency email to submit fraudulent data requests. Revolut, believing the communication was genuine, released personal files including names, addresses, and verification selfies. While the company maintains its internal systems remained uncompromised, the ease with which scammers leveraged a trusted government channel has drawn sharp scrutiny. Mark Karpelès, the former head of Mt. Gox, confirmed he was among those notified of the exposure.

Beyond the initial disclosure, the situation has intensified with reports of extortion demands. Individuals claiming responsibility have allegedly threatened to leak further customer data unless payments are made. While Revolut has declined to comment on the extortion claims, the Information Commissioner’s Office is now evaluating whether the company’s verification protocols for handling external requests met required data-protection standards. This breach arrives at a sensitive time for the firm, which only recently secured approval to operate as a full-scale bank in the United Kingdom.