Revolut pursues Swiss banking license amid regulatory scrutiny
Revolut applies for Swiss banking license amid ongoing breach investigation and regulatory oversight.
Event / Security
Revolut Data Breach 2026
British fintech bank Revolut disclosed a data breach affecting approximately 680 customers across Europe in September 2026. Attackers used sophisticated identity fraud schemes impersonating government agency emails to submit false data requests. Compromised data included addresses, identity verification photos, identification documents, and cryptocurrency-related information. Customers with significant cryptocurrency holdings in Switzerland and France were specifically targeted.
3 reported locations
Daily activity
2 articles0 articles
2026-09-16 to 2026-11-05 · UTC publication dates
Coverage begins 16 Sept, 15:15 UTC
Follow the documented timeline or explore the related reporting.
What happened
Revolut confirms attackers maintained contact for several months
The attackers behind the identity fraud scheme exchanged emails with Revolut over several months while impersonating a government agency. The Financial Times reported direct contact with the attackers, who confirmed their involvement in the incident.
UK data protection regulator ICO confirms investigation
The UK Information Commissioner's Office (ICO) confirmed receiving a report about the Revolut data breach and stated it is examining the information provided.
Revolut immediately blocked unauthorized access and notified authorities
Upon detecting the fraudulent activity, Revolut immediately blocked the unauthorized email address and alerted relevant government agencies, law enforcement, data protection authorities, and financial regulators. Customer funds were not affected.
Revolut reports data breach affecting 680 customers across Europe
British fintech bank Revolut disclosed a sophisticated identity fraud scheme where an unauthorized third party impersonated a legitimate government agency email domain to submit false data requests. Approximately 680 customers across multiple European countries were affected. The compromised data included addresses, identity verification photos, identification documents, and information related to bitcoin activity. Customers with significant cryptocurrency holdings in Switzerland and France were specifically targeted.
Revolut files banking license application in Switzerland
Revolut announced it submitted an application for a banking license in Switzerland. Previously, the company obtained an Australian banking license in July and received conditional authorization in the United States in early September.
Read the coverage
2 alternative perspectives
Revolut breach investigation reveals months-long unauthorized access
Revolut breach impacted 680 customers; attackers had months-long access before company responded.