Revolut has confirmed a data breach after an unauthorised party used a legitimate government agency email domain to request customer data,  TechCrunch reported.

The firm blocked the email address used in the scam, then alerted the relevant agency, the police and financial regulators.

Revolut confirmed that its systems and customer funds remained unaffected.

A limited number of customers were caught in the breach, and Revolut has already reached out to them directly.

The firm has declined to reveal how many people were involved, where they are located, or which agency’s identity was used.

The breach exposed copies of passports and driving licences. It also exposed birth dates, phone numbers, and postal and email addresses.

The data may have also included verification selfies, account statements and transaction histories.

Featured image: Edited by Fintech News Switzerland, based on image by Revolut via its website.