Office of the Comptroller of the Currency

Revolut handed over passport scans to fraudulent requests sent from a real government domain

Revolut says an impersonation scam used a legitimate government agency domain to ask for customer records, and the fix it has described is blocking one email address. It has not said how many customers were affected.