Revolut Customers Targeted with New Wave of Phishing Attacks

Phishers target Revolut customers with smishing and fake video identity checks days after a breach enabled by impersonating Italian law enforcement.

Malwarebytes documented smishing texts arriving within days of Revolut's breach acknowledgment, some appearing in the same message thread as genuine bank texts. Phishing pages mimic the bank's live-video identity check, requesting camera access before prompting for passwords, potentially harvesting selfies and videos for identity fraud. The underlying breach targeted Revolut's Lithuanian-regulated entity through fake European Investigation Orders sent from Italian Ministry of the Interior email accounts compromised for about six months via infostealer logs. Several hundred accounts were affected, with high-net-worth crypto users singled out using blockchain analysis.