Revolut phishing texts appear days after data breach
Phishing texts impersonating Revolut targeted customers days after the fintech disclosed a social-engineering breach exposing IDs, verification selfies, and statements.
Revolut disclosed that criminals obtained sensitive customer data by sending fraudulent information requests from an email address on a legitimate government agency domain, exposing names, dates of birth, addresses, ID copies, verification selfies, and account statements. Within days, affected customers received smishing texts appearing in the same message thread as genuine Revolut messages, with the phishing domain first scanned on September 14 per VirusTotal. The fake page requests camera access and imitates Revolut's live-video liveness check before prompting for a password, potentially enabling account takeover; a link to the breach data is not yet confirmed.
- Breach stemmed from fraudulent information requests on a legitimate government agency email domain
- Exposed data includes passports, driver's licenses, verification selfies, and transaction histories
- Phishing texts arrived in the same SMS thread as legitimate Revolut messages
- Fake page mimics Revolut's video liveness check, requests camera access, then a password
- Whether the campaign uses breached data remains unconfirmed
- Victims
- Revolut
From the original article
2 min read at malwarebytes.com
Revolut customers received phishing texts only days after the digital bank acknowledged disclosing customer data to a government impostor.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.